$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft File: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft (raw, json) Hash identifier: Ftt3L3NSCUqgdOZJmBC7RcY4Il2nWlJ+3WYN5b1hpe8= Subject key identifier: BC:7B:87:53:19:C8:90:A8:5F:74:54:75:F8:BB:C0:4C:3F:5E:B0:43 Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Certificate serial: 1DE2B120A5F3323665D8E8867DD52A797DE68EED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft Manifest number: 02E6 Signing time: Wed 22 May 2024 23:02:09 +0000 Manifest this update: Wed 22 May 2024 22:57:09 +0000 Manifest next update: Fri 24 May 2024 00:19:09 +0000 Files and hashes: 1: 3138352e3131312e3138392e302f32342d3234203d3e203631303934.roa (hash: WeJB2Y9EHAktT6F3opbzlIwR60Li2i6huAhlCxSc0DI=) 2: 3138352e3231332e3234322e302f32342d3234203d3e203631333137.roa (hash: YpOGfFau+S5Y+DBSpKWeiuLGORXUY8ZVscP56Eehcgg=) 3: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl (hash: DyurZtZnJznSnBq1py5WAtwJ/MEoa9ovGQ4h/8gPOVg=) 4: 326130363a356563303a3a2f34382d3438203d3e20323034363933.roa (hash: Npn3y1PwrPmpHoOQk8eX2chV01+blvjtrPFPPDk7bV8=) 5: 3138352e3133302e36322e302f32342d3234203d3e203239303636.roa (hash: qJ6+uetbybUylRUdRxdMv8GfDEsBxGYl//0bJ0BDbj0=) 6: 3138352e3232392e3230322e302f32342d3234203d3e20323130303330.roa (hash: UABDTXTWp8foWVTBYxxIWEuae7LAbLk9s44nxTvRACo=) 7: 3138352e3231332e3234312e302f32342d3234203d3e203631323732.roa (hash: 6YnzlrjY88T40z0tQQ09Pmkbr5Q0WFDoNksNtQWLh3U=) 8: 3138352e3133302e36312e302f32342d3234203d3e20323732363936.roa (hash: hrqhy+ghapoQuf+edcxFFJ3w2fi/HO/mIqzNSGP59f4=) 9: 3138352e3231332e3234302e302f32342d3234203d3e2033323233.roa (hash: MTIhm4AWxGYXI1kfk2fRvRpeoMSjL4DGS+IhTTsOKDg=) 10: 3138352e3234342e39352e302f32342d3234203d3e203136353039.roa (hash: bmSSNgWk8ixwZN9lpWw7U4gLkGs5JBUHKIDpICZCQwQ=) 11: 3138352e3133302e36332e302f32342d3234203d3e203332313831.roa (hash: +vTp3cbheQETL3jfc6z3xX4NlCzAvE2ShCOTcJERXyo=) 12: 3138352e3231332e3234332e302f32342d3234203d3e203330343536.roa (hash: hgOouETN68JjnwRVGuA3Qb1CgGL84jJbpDczZSdOrkw=) 13: 3138352e3231332e3234302e302f32342d3234203d3e203239353338.roa (hash: c6J8mvfOMHWT/47wQXuEIqFLmJz4zDG8wpaoriJPmJo=) 14: 3138352e3232392e3230302e302f32342d3234203d3e203139343337.roa (hash: 3pl8km3wVmgOfHwXywdZLa4qIXAmGtmNd6yZ62LPiT8=) 15: 3138352e3133302e36302e302f32342d3234203d3e20323039383234.roa (hash: b1kMN4sT+svDmOk+usC82pjhXmME98BRAQi+rNYK2zg=) 16: 3138352e3232392e3230332e302f32342d3234203d3e20323132323338.roa (hash: HIYoTjZwFdPVetPqxHm+7ZOQzUw6sixmuNTwHyPSHpQ=) 17: 3138352e3231332e3234302e302f32342d3234203d3e20323039323432.roa (hash: EnNwy2xFlI4sC9gh8bFCybzasUjDGX7KORklyXPZBog=) 18: 3138352e3232392e3230312e302f32342d3234203d3e20323030303137.roa (hash: h1azTNafUjb7UdhKJgtNINL6z0yWbbbvs5e4uvD1ZDY=) 19: 3138352e3131312e3138382e302f32342d3234203d3e203632353633.roa (hash: 1mp0f8eHaMQpRA78Gkk4jwOU31yHu1aUXXw7yDxnVEo=) 20: 33362e3235352e39342e302f32332d3233203d3e203632323430.roa (hash: HHehYmYO5S3nVqn5RxPN8IY1cV+6/LfOgSFg8yGTFv0=) 21: 33362e3235352e39322e302f32332d3234203d3e20313432353631.roa (hash: 1gIHZJcJcvpA+lInczo93Bq/EtwKfV+2lGg1HYidVrQ=) 22: 3138352e3234342e39342e302f32342d3234203d3e20333937343233.roa (hash: Os5pPaUq4wuSIVKgbNMacUddHXr+Tpw7Nr5HsfcIjhw=) 23: 33362e3235352e39322e302f32332d3234203d3e20313938353130.roa (hash: sm3LwIPO+yZGsv61YL8ucl3xnHHntGhLqv11sHGT+E4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 23 May 2024 22:35:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:e2:b1:20:a5:f3:32:36:65:d8:e8:86:7d:d5:2a:79:7d:e6:8e:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Validity Not Before: May 22 22:57:09 2024 GMT Not After : May 24 00:19:09 2024 GMT Subject: CN=BC7B875319C890A85F745475F8BBC04C3F5EB043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:f7:c6:80:82:75:26:c5:2c:bc:eb:f9:6c:81: 22:e7:f9:64:03:0c:89:c3:da:05:56:cf:24:a4:25: 45:11:e4:19:5b:13:33:35:aa:33:e1:eb:4d:01:71: fe:0a:d1:c7:b3:b9:56:f9:e6:46:de:cf:50:70:d0: 25:30:48:32:bb:ff:45:c2:20:19:2c:c4:54:81:81: 84:e0:8c:64:06:0e:36:2c:94:79:b4:4c:9f:3e:5b: 19:0f:70:e5:9c:4c:d8:c1:1e:d4:a8:c1:2b:cc:c5: 55:5f:93:94:e4:3c:2d:ab:81:1d:5a:66:e3:29:79: e7:74:5b:b7:31:92:5d:79:e3:68:fe:3e:a4:c6:a0: 07:45:cf:89:2b:16:24:92:ce:3f:fc:55:9d:1d:57: b1:fe:da:f1:2b:b4:92:98:82:d1:7c:47:8e:83:80: 0b:3a:c9:79:ab:71:44:44:8e:74:9a:6c:36:60:a8: 55:c2:fe:6d:73:e9:a5:7a:d4:00:ee:f0:74:85:0d: 47:bb:28:a6:58:d3:c8:79:5d:3e:c9:49:d6:b4:06: e0:c4:a9:48:bd:4b:e9:dd:a7:40:ac:d8:cc:ee:55: a2:b1:57:9b:08:9a:24:1c:cc:2a:0e:c7:31:97:17: 65:2b:5d:b6:85:c1:60:d2:87:07:43:94:d4:48:19: 5a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:7B:87:53:19:C8:90:A8:5F:74:54:75:F8:BB:C0:4C:3F:5E:B0:43 X509v3 Authority Key Identifier: keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:ad:0f:2e:b7:62:1e:32:8f:cc:5b:3e:85:42:08:6c:0a:14: 42:5a:f0:04:21:65:4f:29:f3:ea:b2:a7:98:88:7d:d1:f1:07: b8:10:22:c7:8e:71:7d:85:99:77:95:2a:5f:87:8c:60:c9:7b: 92:21:17:d5:27:41:2e:92:71:de:06:57:d8:80:ed:a5:19:3d: f5:83:67:d9:0c:a4:c8:a4:54:bf:da:77:32:b0:1d:ba:ba:17: ae:f6:8c:ca:aa:88:e2:20:d5:19:e9:8b:12:00:2c:c6:66:9f: 4c:28:d9:69:af:9e:c8:d5:ce:4a:a1:a2:02:25:4d:19:cb:77: 2d:76:25:cf:76:85:a9:14:fc:55:b8:3f:aa:93:e8:d3:c6:43: 78:a1:cd:11:bf:3f:11:c1:8a:c3:fe:be:41:23:38:35:f5:09: 32:fc:f2:6f:09:97:9e:a8:f8:60:4c:66:39:09:11:df:f5:8e: fc:67:f5:8d:33:74:4c:39:e2:69:ba:cb:c1:20:5f:fa:9a:0f: bd:1e:1d:c4:ff:16:37:d7:8c:ee:82:89:1d:ca:6c:cd:5d:9c: 71:6a:cd:fe:02:c5:75:7b:45:6d:3a:28:b2:2e:d1:f2:b9:53: 71:7c:0e:f9:12:1f:5e:35:21:93:10:1d:cc:b4:d2:63:a1:79: 61:6a:de:01 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUHeKxIKXzMjZl2OiGfdUqeX3mju0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2U4NzBiOWE3MDAzYzRmZDljNTFiZDM1NGE5ZGVmYTNm Yjc3YjRhOTAeFw0yNDA1MjIyMjU3MDlaFw0yNDA1MjQwMDE5MDlaMDMxMTAvBgNV BAMTKEJDN0I4NzUzMTlDODkwQTg1Rjc0NTQ3NUY4QkJDMDRDM0Y1RUIwNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD498aAgnUmxSy86/lsgSLn+WQD DInD2gVWzySkJUUR5BlbEzM1qjPh600Bcf4K0cezuVb55kbez1Bw0CUwSDK7/0XC IBksxFSBgYTgjGQGDjYslHm0TJ8+WxkPcOWcTNjBHtSowSvMxVVfk5TkPC2rgR1a ZuMpeed0W7cxkl1542j+PqTGoAdFz4krFiSSzj/8VZ0dV7H+2vErtJKYgtF8R46D gAs6yXmrcUREjnSabDZgqFXC/m1z6aV61ADu8HSFDUe7KKZY08h5XT7JSda0BuDE qUi9S+ndp0Cs2MzuVaKxV5sImiQczCoOxzGXF2UrXbaFwWDShwdDlNRIGVqJAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUvHuHUxnIkKhfdFR1+LvATD9esEMwHwYDVR0j BBgwFoAUPocLmnADxP2cUb01Sp3vo/t3tKkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzVkMThlODItNGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQy Mjc5LzAvM0U4NzBCOUE3MDAzQzRGRDlDNTFCRDM1NEE5REVGQTNGQjc3QjRBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1BvY0xtbkFEeFAyY1ViMDFTcDN2b190 M3RLay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jNWQxOGU4Mi00 ZDY4LTQ1YTYtYTVkZi1jYWMxMTVhZDIyNzkvMC8zRTg3MEI5QTcwMDNDNEZEOUM1 MUJEMzU0QTlERUZBM0ZCNzdCNEE5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQK0PLrdiHjKPzFs+hUII bAoUQlrwBCFlTynz6rKnmIh90fEHuBAix45xfYWZd5UqX4eMYMl7kiEX1SdBLpJx 3gZX2IDtpRk99YNn2QykyKRUv9p3MrAduroXrvaMyqqI4iDVGemLEgAsxmafTCjZ aa+eyNXOSqGiAiVNGct3LXYlz3aFqRT8Vbg/qpPo08ZDeKHNEb8/EcGKw/6+QSM4 NfUJMvzybwmXnqj4YExmOQkR3/WO/Gf1jTN0TDniabrLwSBf+poPvR4dxP8WN9eM 7oKJHcpszV2ccWrN/gLFdXtFbToosi7R8rlTcXwO+RIfXjUhkxAdzLTSY6F5YWre AQ== -----END CERTIFICATE-----Generated at Thu May 23 00:59:10 2024 by rpki-client on console-fra.rpki-client.org