$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft File: D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft (raw, json) Hash identifier: SX/CT1PEVx2TU3Wgi7Rcz/FE4S/7TxttEmnxb5XR2Hc= Subject key identifier: 04:4F:49:E6:E1:11:6F:07:72:68:75:EB:96:74:83:61:60:0E:76:E6 Authority key identifier: D6:42:97:5F:53:5F:45:FD:9F:6D:8F:EA:62:6B:C6:D2:4B:C9:D8:D8 Certificate issuer: /CN=d642975f535f45fd9f6d8fea626bc6d24bc9d8d8 Certificate serial: 2DED476A3BE635D4121252E79EC96C1786224DC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft Manifest number: 014C Signing time: Mon 10 Jun 2024 16:43:37 +0000 Manifest this update: Mon 10 Jun 2024 16:38:37 +0000 Manifest next update: Tue 11 Jun 2024 19:02:37 +0000 Files and hashes: 1: D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl (hash: ZAlT7lmwuFoBNzSJWukfQ1zCYje4a82JsevuDsZUhfY=) 2: 323030313a3637633a326265383a3a2f34382d3438203d3e20323035333239.roa (hash: Q3gUCQl36IAcgASgZpRNl+uoC3qIgC4n0ifLHKIktwU=) 3: AS202881.asa (hash: oQL7k/O4keLkskFx9oFZXaV8E19OLeEv+fnnXbBp7F4=) 4: 323030313a3637633a326265383a3a2f34382d3438203d3e20323032383831.roa (hash: Rl9ZLRzfeQ5TMFtwjNkqn4HdcQhs+IV2vQHawTO70HM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 11 Jun 2024 14:33:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:ed:47:6a:3b:e6:35:d4:12:12:52:e7:9e:c9:6c:17:86:22:4d:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d642975f535f45fd9f6d8fea626bc6d24bc9d8d8 Validity Not Before: Jun 10 16:38:37 2024 GMT Not After : Jun 11 19:02:37 2024 GMT Subject: CN=044F49E6E1116F07726875EB96748361600E76E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a1:8e:cd:cb:f1:93:3f:37:b4:f9:9a:9d:b4: 69:1e:82:a6:0e:33:e5:0f:aa:24:f5:54:05:6d:88: 9c:2f:a0:bc:76:8d:9b:7d:65:b8:32:ea:42:75:b9: 9f:4a:19:b6:94:9e:53:e7:c0:65:35:4f:34:61:fe: 78:a4:2e:85:1a:18:84:be:88:32:d2:53:43:18:9b: 30:fc:bd:d8:05:66:b2:53:23:04:1b:53:26:e6:2a: 4f:5c:bf:e9:ac:1a:85:d6:4b:74:02:0c:50:af:5c: 21:c0:ec:b5:95:60:ac:73:1c:21:55:c4:0e:d3:7a: 57:6a:01:ec:dc:36:03:cf:83:6a:9b:85:35:66:4b: 0c:17:05:51:bd:04:86:8d:47:58:22:a0:68:41:52: 28:fa:25:c1:e8:f1:06:d9:a5:2c:92:4c:01:1d:bc: c2:e5:eb:73:ed:d3:cc:db:28:7e:3c:56:7a:10:f0: 9b:21:60:d6:31:09:48:f6:a3:c5:62:45:c2:b2:61: 93:a8:68:23:aa:5a:b6:b2:b2:6e:16:00:84:fd:5c: e9:36:db:62:c8:75:0c:5f:b0:6f:ce:86:8f:fc:b9: 68:db:0c:f1:9d:c6:63:21:ae:a1:cc:97:13:2c:2b: ff:1b:c4:eb:ff:e8:2d:9f:c1:40:ae:2f:b4:b4:30: db:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:4F:49:E6:E1:11:6F:07:72:68:75:EB:96:74:83:61:60:0E:76:E6 X509v3 Authority Key Identifier: keyid:D6:42:97:5F:53:5F:45:FD:9F:6D:8F:EA:62:6B:C6:D2:4B:C9:D8:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:5a:a7:f7:fb:8e:ac:33:fe:81:8b:51:8c:ea:04:cc:e0:17: 31:ff:a5:f3:e1:e7:19:b3:1d:23:21:b3:18:c9:64:a1:a1:12: 50:3f:22:c2:b7:0c:83:10:82:71:cd:13:43:e9:f8:78:76:17: 81:86:1f:2e:a9:37:01:d8:dd:ba:4a:09:c2:62:4f:be:20:cf: c3:af:62:7a:ff:e9:b0:92:29:f2:5e:5d:9d:5a:69:62:58:e9: 6f:6d:7c:d9:dc:1d:cc:1f:7a:fd:aa:b1:0b:61:17:28:81:2a: fa:f1:5f:a6:60:96:ba:f1:0f:36:5d:11:c2:94:5d:2e:76:80: 7b:48:b9:80:c4:56:62:1e:ca:e6:58:bd:fb:32:50:8d:1b:a5: 66:27:91:83:a8:d8:4f:84:a1:27:a6:c0:6f:90:0c:e2:5f:66: 5e:bf:5d:f0:32:8a:a2:e2:d1:70:3a:e0:13:a6:95:a8:07:47: 15:4d:a2:e9:22:39:f9:84:36:39:82:1e:d4:03:44:65:70:16: 34:2f:56:05:85:80:93:f0:f3:4c:44:b1:74:50:0c:06:47:d8: cf:a7:17:11:b6:1b:9a:17:57:c7:e3:83:6a:6b:e9:96:64:fc: 1b:a0:43:73:0d:db:98:ce:38:a6:44:59:78:50:5b:7f:86:a9: 25:64:5a:5f -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIULe1HajvmNdQSElLnnslsF4YiTcMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDY0Mjk3NWY1MzVmNDVmZDlmNmQ4ZmVhNjI2YmM2ZDI0 YmM5ZDhkODAeFw0yNDA2MTAxNjM4MzdaFw0yNDA2MTExOTAyMzdaMDMxMTAvBgNV BAMTKDA0NEY0OUU2RTExMTZGMDc3MjY4NzVFQjk2NzQ4MzYxNjAwRTc2RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNoY7Ny/GTPze0+ZqdtGkegqYO M+UPqiT1VAVtiJwvoLx2jZt9Zbgy6kJ1uZ9KGbaUnlPnwGU1TzRh/nikLoUaGIS+ iDLSU0MYmzD8vdgFZrJTIwQbUybmKk9cv+msGoXWS3QCDFCvXCHA7LWVYKxzHCFV xA7TeldqAezcNgPPg2qbhTVmSwwXBVG9BIaNR1gioGhBUij6JcHo8QbZpSySTAEd vMLl63Pt08zbKH48VnoQ8JshYNYxCUj2o8ViRcKyYZOoaCOqWraysm4WAIT9XOk2 22LIdQxfsG/Oho/8uWjbDPGdxmMhrqHMlxMsK/8bxOv/6C2fwUCuL7S0MNvpAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUBE9J5uERbwdyaHXrlnSDYWAOduYwHwYDVR0j BBgwFoAU1kKXX1NfRf2fbY/qYmvG0kvJ2NgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDY5NzE2MGMtYWNjNS00YjUxLWJmNTUtMTBjN2E2ZTY2 OTgwLzMvRDY0Mjk3NUY1MzVGNDVGRDlGNkQ4RkVBNjI2QkM2RDI0QkM5RDhEOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFrS1hYMU5mUmYyZmJZX3FZbXZHMGt2 SjJOZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kNjk3MTYwYy1h Y2M1LTRiNTEtYmY1NS0xMGM3YTZlNjY5ODAvMy9ENjQyOTc1RjUzNUY0NUZEOUY2 RDhGRUE2MjZCQzZEMjRCQzlEOEQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmlqn9/uOrDP+gYtRjOoE zOAXMf+l8+HnGbMdIyGzGMlkoaESUD8iwrcMgxCCcc0TQ+n4eHYXgYYfLqk3Adjd ukoJwmJPviDPw69iev/psJIp8l5dnVppYljpb2182dwdzB96/aqxC2EXKIEq+vFf pmCWuvEPNl0RwpRdLnaAe0i5gMRWYh7K5li9+zJQjRulZieRg6jYT4ShJ6bAb5AM 4l9mXr9d8DKKouLRcDrgE6aVqAdHFU2i6SI5+YQ2OYIe1ANEZXAWNC9WBYWAk/Dz TESxdFAMBkfYz6cXEbYbmhdXx+ODamvplmT8G6BDcw3bmM44pkRZeFBbf4apJWRa Xw== -----END CERTIFICATE-----Generated at Mon Jun 10 20:37:13 2024 by rpki-client on console-fra.rpki-client.org