$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft File: A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft (raw, json) Hash identifier: ib/ECPF8WUBtjXdxzfpzywRY/6LR+TbpNdjKPcZEsoc= Subject key identifier: 2C:E9:CB:AD:93:D0:23:C7:14:2E:7C:72:28:E4:46:B7:E7:CB:35:1B Authority key identifier: A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB Certificate issuer: /CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb Certificate serial: 473B7D28C0E77E66FBFD9907C60343867F99552D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft Manifest number: 0381 Signing time: Fri 22 Nov 2024 06:38:40 +0000 Manifest this update: Fri 22 Nov 2024 06:33:40 +0000 Manifest next update: Sat 23 Nov 2024 07:13:40 +0000 Files and hashes: 1: 326130323a326262383a3a2f33322d3332203d3e203234383531.roa (hash: bWui68UTbRhcPhlwEAxty4T3/DDJWgLbqMK6lGY8QTg=) 2: 3134362e3234372e35382e302f32342d3234203d3e20323036353035.roa (hash: cKxBn3h9mC/Jmv4vx/BvvqI3wImOGjHyJbCKcyOl1Sc=) 3: A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl (hash: 0QKQ6LM+X/VbTiFEfGoO9ybDnvQTG54LpkmntDUtYp0=) 4: 3134362e3234372e35312e302f32342d3234203d3e203234383531.roa (hash: rDaGUw0Popa9qa2o5QlR9ngDX48Qz9ALnW+Nclcvn6o=) 5: 3134362e3234372e34382e302f32302d3230203d3e203234383531.roa (hash: AtkJtoUoox26oxAHfh2tdwiB6b5wZkwjk748vQvHZ0Y=) 6: 38312e32372e39362e302f32302d3230203d3e203234383531.roa (hash: SZH3jMeIkhMicVTHR8DTiaVXKtl6on4Bjt8aT/3rGBY=) 7: 38312e32372e39362e302f32342d3234203d3e203234383531.roa (hash: AxjB2UplZG/ICjMvplH+2BPAurHWXKTfYIpW/z8Q05Y=) 8: 3134362e3234372e35392e302f32342d3234203d3e203234383531.roa (hash: wE1ZRZZm1RLxT9JyNh52iLvc8Uyqc1Cu7FhfeoxE1U8=) 9: 3134362e3234372e36322e302f32342d3234203d3e203234383531.roa (hash: +PLAO2XIwguBRxzLFbPvt9N4SUTwvCxYRNjOC/9N7/Y=) 10: 3134362e3234372e34382e302f32332d3233203d3e203234383531.roa (hash: IWYt8AKAcW7AE40ptYfrfOYzrzsDvIsMxkpQ2qH53R4=) 11: 3134362e3234372e35302e302f32342d3234203d3e203234383531.roa (hash: Xu9Ulls8bpq0hHPLUzQTCDFdZuHdkeW+6NyQx4cB/cM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 23:17:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:3b:7d:28:c0:e7:7e:66:fb:fd:99:07:c6:03:43:86:7f:99:55:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb Validity Not Before: Nov 22 06:33:40 2024 GMT Not After : Nov 23 07:13:40 2024 GMT Subject: CN=2CE9CBAD93D023C7142E7C7228E446B7E7CB351B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:15:bb:f7:5e:17:05:ac:ac:ae:fc:a5:e5:16: a7:2f:82:d5:bf:b5:a1:91:4d:3a:f7:e0:dc:00:60: 58:49:92:91:4e:7b:d3:ed:86:80:d1:ce:9e:42:b7: 08:7c:1b:3e:d1:a9:b2:b9:7d:74:8e:37:fc:cc:ac: bf:0c:b9:a7:88:a1:68:5a:bf:ee:d9:43:78:d0:a4: b0:7d:a9:10:14:8c:ae:8d:79:9f:98:ce:88:2a:50: 93:e8:3d:af:52:1c:fa:4e:e4:9c:9d:68:d2:a4:88: 22:ac:66:6d:65:a9:46:ed:de:c3:73:65:30:10:4c: 4c:a5:da:53:1a:28:3b:eb:0b:9e:b8:ec:86:a2:b3: 31:0a:49:70:25:c8:4b:20:28:c3:d6:a2:fe:9f:fa: 02:a7:33:46:92:4c:19:30:c0:a6:46:49:46:f6:b9: ba:2a:0a:52:cc:61:07:d4:17:1c:af:f8:bf:88:2d: d3:d9:4f:a1:eb:2d:7c:6c:22:1b:48:e8:fc:26:dc: de:52:eb:04:d8:8a:dc:d7:0c:ba:de:af:ab:b1:ff: e8:31:ec:ad:31:83:29:fd:84:0f:70:20:32:84:3e: f3:0f:86:c7:b6:88:2e:e6:9a:28:39:8e:95:17:f2: bc:73:42:f8:3c:d9:6e:93:a7:0d:7e:1a:f8:14:3d: 96:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:E9:CB:AD:93:D0:23:C7:14:2E:7C:72:28:E4:46:B7:E7:CB:35:1B X509v3 Authority Key Identifier: keyid:A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:2c:11:17:40:02:fd:6a:e9:cf:41:72:0d:4f:35:f2:4c:18: 21:be:5a:79:08:4a:d5:0e:59:49:2d:6e:be:7f:82:21:b9:50: 84:47:a9:ba:f8:a1:f5:d8:ae:82:24:e0:d2:aa:32:18:fb:88: d9:c0:5d:a5:e9:46:9d:50:5f:d1:57:02:35:5f:33:34:2c:1a: bb:c9:85:d4:d9:e0:2f:ef:60:35:c6:f8:51:9a:9c:97:60:1a: 52:ac:cb:75:61:5a:af:c1:ce:70:d9:42:2a:86:e9:b7:37:56: 19:34:e1:9f:fb:29:35:2b:1f:71:d5:4a:c8:db:38:c9:41:b0: c1:21:94:0b:51:16:8a:bb:d0:0e:68:89:89:98:65:0d:26:ef: 4c:48:55:ee:bd:83:8b:62:e7:e8:42:ef:ab:de:f3:1f:1f:6d: cf:a1:e8:87:f6:14:c0:c1:f5:40:fd:f0:24:e9:40:3a:b8:fd: a1:11:ec:7a:f3:5d:e8:60:3f:a5:8c:29:df:df:9c:75:61:14: 3c:7e:03:f2:8a:c0:7e:68:94:0c:36:b0:ac:3c:73:9d:c5:85: 1b:e5:d5:28:2e:47:62:0e:63:0d:fd:5e:23:d7:54:d2:bb:28: da:21:4c:b2:40:6c:bc:8d:30:7f:32:f2:76:ad:0e:ab:56:3d: 99:b2:ae:e9 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIURzt9KMDnfmb7/ZkHxgNDhn+ZVS0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTZjNTA5YmE0OGU1YjUwNDk0NTcyZTA1YzQ1YzU4ZTdl MTZkODdmYjAeFw0yNDExMjIwNjMzNDBaFw0yNDExMjMwNzEzNDBaMDMxMTAvBgNV BAMTKDJDRTlDQkFEOTNEMDIzQzcxNDJFN0M3MjI4RTQ0NkI3RTdDQjM1MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPFbv3XhcFrKyu/KXlFqcvgtW/ taGRTTr34NwAYFhJkpFOe9PthoDRzp5Ctwh8Gz7RqbK5fXSON/zMrL8MuaeIoWha v+7ZQ3jQpLB9qRAUjK6NeZ+YzogqUJPoPa9SHPpO5JydaNKkiCKsZm1lqUbt3sNz ZTAQTEyl2lMaKDvrC5647IaiszEKSXAlyEsgKMPWov6f+gKnM0aSTBkwwKZGSUb2 uboqClLMYQfUFxyv+L+ILdPZT6HrLXxsIhtI6Pwm3N5S6wTYitzXDLrer6ux/+gx 7K0xgyn9hA9wIDKEPvMPhse2iC7mmig5jpUX8rxzQvg82W6Tpw1+GvgUPZZdAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQULOnLrZPQI8cULnxyKORGt+fLNRswHwYDVR0j BBgwFoAUpsUJukjltQSUVy4FxFxY5+Fth/swDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGM4YmI0NDYtOTFjMC00MTM4LWEzM2EtYjQ3ODY1ZGU1 NWM1LzEvQTZDNTA5QkE0OEU1QjUwNDk0NTcyRTA1QzQ1QzU4RTdFMTZEODdGQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3BzVUp1a2psdFFTVVZ5NEZ4RnhZNS1G dGhfcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wYzhiYjQ0Ni05 MWMwLTQxMzgtYTMzYS1iNDc4NjVkZTU1YzUvMS9BNkM1MDlCQTQ4RTVCNTA0OTQ1 NzJFMDVDNDVDNThFN0UxNkQ4N0ZCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQCwRF0AC/Wrpz0FyDU81 8kwYIb5aeQhK1Q5ZSS1uvn+CIblQhEepuvih9diugiTg0qoyGPuI2cBdpelGnVBf 0VcCNV8zNCwau8mF1NngL+9gNcb4UZqcl2AaUqzLdWFar8HOcNlCKobptzdWGTTh n/spNSsfcdVKyNs4yUGwwSGUC1EWirvQDmiJiZhlDSbvTEhV7r2Di2Ln6ELvq97z Hx9tz6Hoh/YUwMH1QP3wJOlAOrj9oRHsevNd6GA/pYwp39+cdWEUPH4D8orAfmiU DDawrDxzncWFG+XVKC5HYg5jDf1eI9dU0rso2iFMskBsvI0wfzLydq0Oq1Y9mbKu 6Q== -----END CERTIFICATE-----Generated at Fri Nov 22 08:22:33 2024 by rpki-client on console-fra.rpki-client.org