$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft File: ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft (raw, json) Hash identifier: K/zASMCpTobwhrpyeyaIYtLLSxXiPpjKABFo+1tN7ew= Subject key identifier: 9F:64:7C:9F:67:EF:C7:2D:83:11:CB:F4:D8:72:03:6D:13:73:64:DE Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4 Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4 Certificate serial: 128B3C5920555941BEF76A6F89435268B25B49D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft Manifest number: 0193 Signing time: Wed 22 May 2024 06:37:09 +0000 Manifest this update: Wed 22 May 2024 06:32:09 +0000 Manifest next update: Thu 23 May 2024 07:02:09 +0000 Files and hashes: 1: 37372e38312e3133382e302f32342d3234203d3e20383334.roa (hash: 1SXBXimSUKC12LtwhiVKPGybEr8NUiXE2YtV/X2qsyQ=) 2: 39332e3131352e3234382e302f32332d3234203d3e203631333137.roa (hash: Curjca0MKCcpC5gKiBHGUyvtSUkwf8HFEXbSmcdzRVg=) 3: 34362e3130322e3233332e302f32342d3234203d3e203631333137.roa (hash: LBxOdfXYCQlVcmQ13sPgWVu4orxmtlYDnZjoxjqn17M=) 4: 39332e3131352e3235302e302f32332d3234203d3e2037303239.roa (hash: CNvJFqxt1Rg37YLHYmDLIdIJIOLv802ZugEnetrOzsQ=) 5: 37372e38312e3133372e302f32342d3234203d3e20333939363431.roa (hash: ennZkEqO/HOLTbkwSB/IUa7OOVQrllN9MoEAzouxNf4=) 6: 39332e3131332e3231322e302f32342d3234203d3e203631333137.roa (hash: XC7CKTgr/p4uZ7wSirIBMw0fsF91V22N0Xz1CRrm6RQ=) 7: 38392e34322e3131312e302f32342d3234203d3e203631333137.roa (hash: n60Ach8hEgM+hAZ0p4+yFnGLDWngU7Mbs027Tbg+PaQ=) 8: 34362e3130322e3233322e302f32342d3234203d3e203231383539.roa (hash: ZvPvWt1j5lUYYsLni21fCkPRCoBG56zhAsr2nDGnUAg=) 9: 38392e34322e3131302e302f32342d3234203d3e203631333137.roa (hash: og9IMFIR7e1wCR4cGfBJh26LPnqizy0C5hWdDRyqsSg=) 10: 39332e3131332e32352e302f32342d3234203d3e2039303530.roa (hash: PTyzEGEzj9Op+ZC4bzRXct/MD0TsGyScJGiqxGu6KIE=) 11: 38392e33362e32312e302f32342d3234203d3e203339373538.roa (hash: /ijy9l0HI8HaAO9MAnWtpH4k0u2zyPz2YOLtlAx415c=) 12: ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl (hash: KzeitDq0WXb2xAk0TqGyzR9CzrAKxOtVnsIchPqZXzc=) 13: 3139332e3230332e3230342e302f32332d3233203d3e203339373538.roa (hash: sy1xbnCpmmlSpsfVNCpvBk9YmRVUrdF00XiehvS4+u8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 May 2024 23:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:8b:3c:59:20:55:59:41:be:f7:6a:6f:89:43:52:68:b2:5b:49:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4 Validity Not Before: May 22 06:32:09 2024 GMT Not After : May 23 07:02:09 2024 GMT Subject: CN=9F647C9F67EFC72D8311CBF4D872036D137364DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:eb:01:82:ef:8a:29:18:d2:e7:c3:9b:25:15: a7:7f:83:d6:2a:2e:12:70:ac:f0:1b:e3:28:9e:42: 38:ae:17:d6:44:b8:34:2c:89:0e:d4:8e:9c:aa:f5: bb:d7:0e:99:2b:6b:86:6a:6e:88:f9:83:07:70:3c: db:aa:1f:e0:b1:8e:59:14:a2:a2:ce:b0:bb:2e:c1: 8b:a4:f3:47:c3:38:d0:92:59:7d:f2:5f:ac:95:fc: 74:d2:6d:fa:bc:ce:41:11:63:03:41:65:89:ee:04: fe:d3:d2:42:29:76:b7:59:96:7f:e8:62:a0:16:e8: 3c:24:9e:de:76:55:a6:bb:62:09:c7:30:8e:21:86: 16:b8:1d:35:9e:9e:26:63:3d:d9:9e:58:ca:f5:46: 0f:e6:d9:c5:20:7f:2a:b2:9e:d4:35:8f:27:a8:9c: 56:52:3c:cb:be:ad:2f:84:c9:6f:1e:c5:ae:d4:9e: 82:d7:e2:2c:89:2c:2e:87:3e:10:73:6d:71:b5:be: b9:63:cd:3c:64:33:16:c7:d0:28:7a:01:ac:3b:aa: 25:f9:50:67:c8:49:a1:1c:a4:ef:24:42:ec:24:9e: 9d:ed:13:ba:56:d6:5a:90:fe:23:a0:66:6f:27:09: 37:18:08:d5:a1:7a:ea:4c:5b:17:af:bf:85:ab:f3: 90:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:64:7C:9F:67:EF:C7:2D:83:11:CB:F4:D8:72:03:6D:13:73:64:DE X509v3 Authority Key Identifier: keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:4c:9d:f3:1a:c8:7e:36:ec:bb:48:07:a4:b0:32:90:1c:19: d0:5d:e1:91:d8:8d:f2:85:2e:69:df:a7:b5:ba:a9:e6:fa:8c: b4:78:52:4f:cf:06:08:05:d6:1c:74:65:c6:2f:01:a3:79:b3: 5d:fc:57:2a:23:13:91:2a:50:66:14:eb:bd:37:55:8a:1a:b4: c0:01:81:54:ab:e5:61:40:25:1f:2b:b0:11:7c:61:42:68:b5: e9:8c:b4:2c:74:de:dd:b4:10:cf:98:93:0a:72:be:38:a0:ff: 1a:95:ef:a0:ae:17:a9:66:7b:e8:63:07:01:e2:6e:20:fb:f7: b5:8b:2f:b6:c8:87:f6:6d:4e:81:a7:8b:50:23:f8:ee:8d:e8: c5:a1:84:1f:45:57:69:68:6c:69:32:9a:93:58:b1:ab:68:8e: bc:77:90:dd:81:36:8b:bc:dd:79:aa:32:56:dc:aa:40:5a:50: 94:f9:3e:b2:94:89:34:a8:94:e2:2a:d0:9e:7a:77:7c:1b:04: c7:38:c8:f1:65:a8:4b:8f:40:be:8a:92:3a:96:6e:ac:57:b6: 22:38:4e:97:12:fb:d8:89:00:90:a7:05:fa:dc:11:71:24:d4: 15:9b:39:94:85:f3:e1:9f:71:c1:ad:f8:19:dd:06:b4:88:f6: 97:c5:5b:40 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUEos8WSBVWUG+92pviUNSaLJbSdYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWQ5ZWRiMmExNTg3MTc4NWZiYWUzOGUyM2MzODgyMGRi ZmEyY2NhNDAeFw0yNDA1MjIwNjMyMDlaFw0yNDA1MjMwNzAyMDlaMDMxMTAvBgNV BAMTKDlGNjQ3QzlGNjdFRkM3MkQ4MzExQ0JGNEQ4NzIwMzZEMTM3MzY0REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC26wGC74opGNLnw5slFad/g9Yq LhJwrPAb4yieQjiuF9ZEuDQsiQ7Ujpyq9bvXDpkra4Zqboj5gwdwPNuqH+CxjlkU oqLOsLsuwYuk80fDONCSWX3yX6yV/HTSbfq8zkERYwNBZYnuBP7T0kIpdrdZln/o YqAW6Dwknt52Vaa7YgnHMI4hhha4HTWeniZjPdmeWMr1Rg/m2cUgfyqyntQ1jyeo nFZSPMu+rS+EyW8exa7UnoLX4iyJLC6HPhBzbXG1vrljzTxkMxbH0Ch6Aaw7qiX5 UGfISaEcpO8kQuwknp3tE7pW1lqQ/iOgZm8nCTcYCNWheupMWxevv4Wr85B9AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUn2R8n2fvxy2DEcv02HIDbRNzZN4wHwYDVR0j BBgwFoAU7Z7bKhWHF4X7rjjiPDiCDb+izKQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWEwZGU5N2YtN2VlOC00Y2UwLWIwNDUtZWZhYzhjMjQz Yzc5LzAvRUQ5RURCMkExNTg3MTc4NUZCQUUzOEUyM0MzODgyMERCRkEyQ0NBNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdaN2JLaFdIRjRYN3JqamlQRGlDRGIt aXpLUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lYTBkZTk3Zi03 ZWU4LTRjZTAtYjA0NS1lZmFjOGMyNDNjNzkvMC9FRDlFREIyQTE1ODcxNzg1RkJB RTM4RTIzQzM4ODIwREJGQTJDQ0E0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABUyd8xrIfjbsu0gHpLAy kBwZ0F3hkdiN8oUuad+ntbqp5vqMtHhST88GCAXWHHRlxi8Bo3mzXfxXKiMTkSpQ ZhTrvTdVihq0wAGBVKvlYUAlHyuwEXxhQmi16Yy0LHTe3bQQz5iTCnK+OKD/GpXv oK4XqWZ76GMHAeJuIPv3tYsvtsiH9m1OgaeLUCP47o3oxaGEH0VXaWhsaTKak1ix q2iOvHeQ3YE2i7zdeaoyVtyqQFpQlPk+spSJNKiU4irQnnp3fBsExzjI8WWoS49A voqSOpZurFe2IjhOlxL72IkAkKcF+twRcSTUFZs5lIXz4Z9xwa34Gd0GtIj2l8Vb QA== -----END CERTIFICATE-----Generated at Wed May 22 09:23:03 2024 by rpki-client on console-ams.rpki-client.org