$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.mft File: D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.mft (raw, json) Hash identifier: E3gXuCI6yqdQ89KoD+7JRdcd8PTKBeXIMExsOG3enBs= Subject key identifier: D4:7E:B0:43:73:FD:19:E9:E8:79:20:3B:64:4B:13:CE:DA:46:C0:3C Authority key identifier: D1:82:07:46:6A:B0:A7:D7:D1:EF:3C:7C:D0:2E:80:BE:D5:83:40:BC Certificate issuer: /CN=D18207466AB0A7D7D1EF3C7CD02E80BED58340BC Certificate serial: 6649500D7CFEAB093623EBC60BDAE3936A439254 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.mft Manifest number: 72 Signing time: Thu 19 Sep 2024 00:04:52 +0000 Manifest this update: Wed 18 Sep 2024 23:59:52 +0000 Manifest next update: Fri 20 Sep 2024 01:16:52 +0000 Files and hashes: 1: 326130623a346530373a3130303a3a2f34302d3430203d3e203336383332.roa (hash: fiQaLpzMCkl/83w4AJhIbVRwvnr26wV6DC3Nrm7QdHI=) 2: 326130623a346530373a6336383a3a2f34362d3436203d3e20323134383138.roa (hash: MWGX8DeBT3keNo7OAusCtD5297SwUtMzWF2iOp8py00=) 3: 326130623a346530373a3a2f34382d3438203d3e20323136333131.roa (hash: VF6csJbOLleAazaGEg/urlMMhvakPQUf+aSKUsG/50A=) 4: 326130623a346530373a6536653a3a2f34382d3438203d3e203133383532.roa (hash: 7FXqTMCIxQahAHWesfkI0LEQlrRWdbjDj1FedlYGyRk=) 5: 326130623a346530373a3931633a3a2f34382d3438203d3e20323134393939.roa (hash: OlGJebwgzLl1MZkg6WAWp5Rn1p2QRt/im/GQMhP3acE=) 6: 326130623a346530373a6164333a3a2f34382d3438203d3e20323136333131.roa (hash: pDxAOCa00XUxi0CPysaIBKKN55EZc5LvYrA7FrzMjsg=) 7: 326130623a346530373a6666633a3a2f34362d3438203d3e20323135313931.roa (hash: 6xiuBMlQzi6+vLG9xTbQsG48Vtdgi9h2LRVB/LnnHyc=) 8: DD6503836A2A3384674C6B0501E95B0AA2A381C9.cer (hash: wI097G0Xu2Z0p62i/jyffjWrDU/oJUh7KcspM5bxyg0=) 9: 326130623a346530373a64613a3a2f34382d3438203d3e20323136333131.roa (hash: xUQzhmWtMuVZWa0iEEGt45k2ZjIKqLfuwPCUCDzaCVA=) 10: 326130623a346530373a66653a3a2f34382d3438203d3e20323135393233.roa (hash: DYDnrBRLoG1ZM+oldw0hNOJfdK7JadIqAA7Bd8VVtQs=) 11: 326130623a346530373a63633a3a2f34382d3438203d3e20323135393533.roa (hash: 6lFQb6eCXqcLZgd4P35GIc9m+TLBcRj+kWqk182401Q=) 12: 326130623a346530373a6263363a3a2f34382d3438203d3e20323134333132.roa (hash: IQCiJOrT/IGm+e39ccF3g0EprEEjvFJ2FvEIPxjdKvk=) 13: 326130623a346530373a6535343a3a2f34362d3438203d3e20323135313932.roa (hash: r6tJ7+PsYReNkVi9bF8I5Y276vNcfkbxeYw2zslVfdY=) 14: 2FA9A89EE8A4D03C0CE0DD350EB33995DDDC5297.cer (hash: YFT445HTBpLWAllug3yr1V8hUUUfQyHYb8tCR9mqqUU=) 15: 326130623a346530373a64343a3a2f34362d3436203d3e20323135393233.roa (hash: fRS59WRUA8OoAQnEXaLoZ1jxJyFlpQGbI+C8R2ls3io=) 16: 326130623a346530373a6265633a3a2f34372d3437203d3e20323136333131.roa (hash: NpnZhAMUbBZD9pj8z/RvI5Uqbt4hgypvLftd8dy9BmA=) 17: 326130623a346530373a326130623a3a2f34382d3438203d3e20323134353433.roa (hash: XIzrL2MNBKx1bfPZ625gQ9E7s+gjmIdIkdh8m0KCCFQ=) 18: 326130623a346530373a6332353a3a2f34382d3438203d3e20323134333732.roa (hash: uFw+KXvuuXJZpoBq10xxBq4fy1zHtz/s/2csDE7+VJw=) 19: 326130623a346530373a6231653a3a2f34382d3438203d3e203434333331.roa (hash: l8gckWcYbjxaIHUfydB0JEQ3ow1gM8O+p8MVGQ5rqRM=) 20: 326130623a346530373a38303a3a2f34382d3438203d3e20323136333131.roa (hash: 7xjlUJJvZCOqjFycG0YaEvg5QZChPShSHjrliOdGRf8=) 21: 326130623a346530373a6432343a3a2f34362d3438203d3e20323135363439.roa (hash: AEsSa7PTrw8Q3J81c/QPpx00Fsl2HDjGv45J2P7gbzY=) 22: D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.crl (hash: 4Rqddb1mHLLNmBCRNgtwmD1GlfL7jVzaaha0mUSlzpU=) 23: DD52D18E6EE12FA0659CA4CA9501A176AF074403.cer (hash: azNJwZTfAN2141xKuXJ9/ZivVqcp0eYCDVrk+v7Ro4Y=) 24: 326130623a346530373a3430303a3a2f33382d3438203d3e20323134353433.roa (hash: tR6QjV9YjGJ8G9Uw2Cq1UPSzvBBU2DLabr7Gz3HxiTQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.crl rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 19 Sep 2024 22:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:49:50:0d:7c:fe:ab:09:36:23:eb:c6:0b:da:e3:93:6a:43:92:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D18207466AB0A7D7D1EF3C7CD02E80BED58340BC Validity Not Before: Sep 18 23:59:52 2024 GMT Not After : Sep 20 01:16:52 2024 GMT Subject: CN=D47EB04373FD19E9E879203B644B13CEDA46C03C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:00:d5:95:98:c6:d1:22:7e:2f:a8:f5:7b:eb: 7d:8e:18:8c:87:f0:2c:5e:d8:c9:14:80:64:52:c6: 40:e2:35:60:8e:eb:8d:3a:d3:8f:19:a3:62:bc:3c: 7f:df:09:f0:48:94:1f:c0:88:1d:e9:ea:86:f1:20: cc:80:18:bc:5b:b1:66:63:b7:d7:5e:48:2f:79:c1: 64:83:f2:db:1b:54:42:18:a9:63:61:d5:07:0c:76: 09:8e:ed:ea:ce:4f:5f:84:ed:57:0e:60:f4:bb:e3: 7c:b6:9b:55:12:9a:63:c2:eb:ad:58:05:0f:22:70: ae:2c:6a:02:ec:9c:16:5c:e6:55:9f:ce:47:5a:3a: a9:2d:b3:eb:8f:f9:30:cd:d7:a0:6d:98:ec:11:5d: 6c:ea:74:5f:4c:58:4b:00:9e:b1:80:bd:f6:c2:6c: 48:e4:63:c9:94:4d:6d:25:7d:46:a0:aa:5f:9d:96: 46:60:81:e1:c9:50:a1:43:e5:7f:3f:2e:e8:86:d6: d5:a4:cc:a6:cf:1b:85:35:82:fb:2e:15:e8:4f:1f: 66:5d:9d:72:33:b8:64:ae:f6:15:cc:bb:7b:3f:5b: 32:9a:b1:50:ff:04:84:d4:f0:63:f3:d2:bb:b3:31: a5:96:ab:30:9c:32:84:b2:15:87:c0:72:fa:29:73: 25:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:7E:B0:43:73:FD:19:E9:E8:79:20:3B:64:4B:13:CE:DA:46:C0:3C X509v3 Authority Key Identifier: keyid:D1:82:07:46:6A:B0:A7:D7:D1:EF:3C:7C:D0:2E:80:BE:D5:83:40:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:ea:30:da:be:68:08:4d:b2:88:27:6f:94:54:30:bb:5e:62: 8a:98:12:0d:c8:92:4b:fc:4a:f0:8d:26:47:f1:e4:c2:ca:6c: 78:19:e4:09:e1:40:0e:f4:a3:56:f9:c9:a1:48:20:cd:bd:8b: 82:e5:50:f4:a6:2b:4f:30:41:8c:c8:b0:26:7e:b6:ec:c7:0e: cb:38:c6:b3:49:9f:ea:65:ed:01:f6:27:38:ea:c0:8e:19:67: 85:e4:38:ef:05:d4:e4:24:67:cd:fa:9c:fc:31:2e:39:20:d7: ed:b8:7a:fc:57:e7:1b:b2:cb:eb:c7:65:71:e3:cb:15:45:8a: 3d:bb:5f:ed:70:ee:40:cd:ba:b0:27:fe:5a:15:c1:e6:a1:5c: f1:0b:d0:ee:6f:56:cb:7e:27:6f:b9:03:00:fa:43:c4:3e:48: 53:d7:d0:5a:36:61:7b:ad:1c:ca:a0:0b:88:7a:2a:b0:ef:b5: 6b:6f:a3:a7:c9:02:af:16:9a:92:f1:e6:6a:e3:27:61:32:0a: 30:d5:dc:6f:80:80:b7:05:e1:e5:69:7d:55:80:8a:46:f9:18: cb:78:80:46:6a:83:56:32:c9:25:69:da:01:e4:76:71:62:e2: cb:c5:00:a4:19:e5:c5:43:b9:16:0b:e3:33:14:a6:40:6b:00: 55:90:6f:7a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUZklQDXz+qwk2I+vGC9rjk2pDklQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDE4MjA3NDY2QUIwQTdEN0QxRUYzQzdDRDAyRTgwQkVE NTgzNDBCQzAeFw0yNDA5MTgyMzU5NTJaFw0yNDA5MjAwMTE2NTJaMDMxMTAvBgNV BAMTKEQ0N0VCMDQzNzNGRDE5RTlFODc5MjAzQjY0NEIxM0NFREE0NkMwM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfANWVmMbRIn4vqPV7632OGIyH 8Cxe2MkUgGRSxkDiNWCO6406048Zo2K8PH/fCfBIlB/AiB3p6obxIMyAGLxbsWZj t9deSC95wWSD8tsbVEIYqWNh1QcMdgmO7erOT1+E7VcOYPS743y2m1USmmPC661Y BQ8icK4sagLsnBZc5lWfzkdaOqkts+uP+TDN16BtmOwRXWzqdF9MWEsAnrGAvfbC bEjkY8mUTW0lfUagql+dlkZggeHJUKFD5X8/LuiG1tWkzKbPG4U1gvsuFehPH2Zd nXIzuGSu9hXMu3s/WzKasVD/BITU8GPz0ruzMaWWqzCcMoSyFYfAcvopcyV9AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU1H6wQ3P9GenoeSA7ZEsTztpGwDwwHwYDVR0j BBgwFoAU0YIHRmqwp9fR7zx80C6AvtWDQLwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGM3MDQwMWMtN2Y0MS00YTZiLTk0MzQtY2M4MGRjYTA5 M2U2LzIvRDE4MjA3NDY2QUIwQTdEN0QxRUYzQzdDRDAyRTgwQkVENTgzNDBCQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83M2I4ZWMwMS04YmE1LTQ3 OWYtYTIyOS0wYWI3MGU0ODE1YmIvMC9EMTgyMDc0NjZBQjBBN0Q3RDFFRjNDN0NE MDJFODBCRUQ1ODM0MEJDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzBjNzA0MDFjLTdmNDEtNGE2Yi05NDM0LWNjODBkY2EwOTNlNi8yL0QxODIwNzQ2 NkFCMEE3RDdEMUVGM0M3Q0QwMkU4MEJFRDU4MzQwQkMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBi6jDa vmgITbKIJ2+UVDC7XmKKmBINyJJL/ErwjSZH8eTCymx4GeQJ4UAO9KNW+cmhSCDN vYuC5VD0pitPMEGMyLAmfrbsxw7LOMazSZ/qZe0B9ic46sCOGWeF5DjvBdTkJGfN +pz8MS45INftuHr8V+cbssvrx2Vx48sVRYo9u1/tcO5AzbqwJ/5aFcHmoVzxC9Du b1bLfidvuQMA+kPEPkhT19BaNmF7rRzKoAuIeiqw77Vrb6OnyQKvFpqS8eZq4ydh Mgow1dxvgIC3BeHlaX1VgIpG+RjLeIBGaoNWMskladoB5HZxYuLLxQCkGeXFQ7kW C+MzFKZAawBVkG96 -----END CERTIFICATE-----Generated at Thu Sep 19 03:24:48 2024 by rpki-client on console-ams.rpki-client.org