$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft File: 3134EE987E08D8B5583FEEF621A03150C4F35434.mft (raw, json) Hash identifier: yq8qWAahowTiW6NtNDBefMwwIe/hv6pRrUpwsTOzClU= Subject key identifier: A8:81:E4:4E:11:7A:BC:C7:68:B7:1D:33:79:BB:7F:9F:67:FF:08:78 Authority key identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34 Certificate issuer: /CN=3134ee987e08d8b5583feef621a03150c4f35434 Certificate serial: 2628F3DFF341FED97653B6677BCC285626388B1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft Manifest number: 0170 Signing time: Thu 21 Nov 2024 21:18:34 +0000 Manifest this update: Thu 21 Nov 2024 21:13:34 +0000 Manifest next update: Sat 23 Nov 2024 01:01:34 +0000 Files and hashes: 1: 326131343a316563373a666666633a3a2f34382d3438203d3e20323136333339.roa (hash: TM2mQArU4he2RQeCWSLrgB89g/fo4aAYa1WM+OL50n0=) 2: 326131343a316563373a666666643a3a2f34382d3438203d3e20323038343533.roa (hash: aZlNOob/Y0zwV57voUteUdesCgZumSOWj2XcTD1whTA=) 3: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer (hash: 4AKE57AAX9qvjgURrux+KkJeOReg49AL4A+/FGygfMI=) 4: 326131343a316563373a666666663a3a2f34382d3438203d3e20323030313739.roa (hash: OA1iCWMH/fVsbH/PVeaw+nsZWkfYlhG55ODsEs8KPMY=) 5: 326131343a316563373a663530303a3a2f34302d3430203d3e20323038343533.roa (hash: Kuq/T5/58120SUpTorsr1ML70JXySqoRjipE0Min4z0=) 6: 326131343a316563373a663630303a3a2f34302d3438203d3e20323133393938.roa (hash: svJE9s6z+thIvIbk0ivLw3r/3W8HiAYka1FWVnsnFgw=) 7: 3134EE987E08D8B5583FEEF621A03150C4F35434.crl (hash: b7lR4rNUpW3ZwzBxuqN+zTbMmkY8IGWdmrq0gcewQW4=) 8: 326131343a316563373a666230303a3a2f34302d3438203d3e20323134373435.roa (hash: nezQHcq4MVb+lW9u+9DC3TKuGQsy0c5l+5+DxrvsPzo=) 9: 326131343a316563373a666666653a3a2f34382d3438203d3e20323135343733.roa (hash: 9zay4odK3MzFXKkb5eRg0MTwSr+YbkDO1NvenSzdJK0=) 10: 326131343a316563373a663030303a3a2f33362d3336203d3e20323135333138.roa (hash: MDwJ5fo2zc9BpiWeWjV3SGkIPMsTGtHcrZhrxxJ1ABE=) 11: 2AFACA7F316DBE0CFF394F9D5952E52992F185F1.cer (hash: TzD6pGlBEMmZI/OlLFvK4Q5nKNXovDA7wOkDjfwohQo=) 12: 326131343a316563373a663130303a3a2f34302d3438203d3e20323134313838.roa (hash: gXY2AMFw8/+rSlIvUcyO+0lq7UArJ6lUsKRFR48Pbdc=) 13: 326131343a316563373a666130303a3a2f34302d3438203d3e20323134333635.roa (hash: mfRAEfAM/Ik+prWgDH92jLkjVIcmPRfzo1kMxVmUq4c=) 14: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer (hash: +kjjdHM+kH8b2S6MrqETRYvozXvj3Pj+Ppi6xPpES88=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 18:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:28:f3:df:f3:41:fe:d9:76:53:b6:67:7b:cc:28:56:26:38:8b:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3134ee987e08d8b5583feef621a03150c4f35434 Validity Not Before: Nov 21 21:13:34 2024 GMT Not After : Nov 23 01:01:34 2024 GMT Subject: CN=A881E44E117ABCC768B71D3379BB7F9F67FF0878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a0:3b:20:ac:db:8f:3a:b9:d7:83:4e:29:14: c3:32:71:e7:c6:3f:47:04:b1:98:7b:09:a1:22:80: 77:21:fb:15:54:db:45:3e:38:0c:d0:5a:57:63:84: e4:8f:cb:ef:a1:30:84:6f:57:7e:a0:4e:19:72:f8: b9:49:82:8a:f7:56:73:de:bd:16:23:cc:64:b6:af: 5b:fa:e8:fe:30:e6:f4:74:ff:ba:ad:0d:ce:c0:bb: 51:84:72:d3:92:7d:62:88:09:cb:2a:f7:1e:9d:72: ca:a5:5b:fe:ac:fb:47:68:ef:58:2c:8e:31:3d:af: 5b:64:6f:3a:30:0f:76:3f:1e:02:c6:db:f4:5b:98: 67:6b:f0:3a:cd:fc:2d:4d:8b:f0:39:ee:6d:a6:99: fd:8e:ff:b8:55:98:19:20:b5:61:10:4a:0d:57:70: eb:d9:3d:29:1f:d6:a2:c5:7d:02:5f:cc:c5:a6:ee: 13:52:18:d6:a2:36:19:96:2d:15:38:45:26:31:3a: eb:01:31:76:b6:02:df:25:27:20:08:e9:2d:1e:d9: 60:88:bf:03:db:e1:f9:b6:46:52:70:b5:04:ee:98: ed:95:07:2e:30:d0:a1:60:72:95:a4:30:48:58:ef: 76:c8:75:ee:de:01:6a:a0:6c:ad:88:58:e5:56:f2: 92:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:81:E4:4E:11:7A:BC:C7:68:B7:1D:33:79:BB:7F:9F:67:FF:08:78 X509v3 Authority Key Identifier: keyid:31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:36:47:93:5b:38:ae:29:ee:a2:53:16:50:76:03:37:8a:29: b3:f8:3d:08:04:fd:b4:2e:44:d8:33:0c:a8:5a:c3:29:b3:d8: 56:a1:f2:05:89:a0:80:e7:31:e9:40:1c:06:fa:42:6a:21:49: 1c:6a:ee:c5:e9:37:84:24:80:0f:96:5d:a1:e1:81:02:30:57: c2:c0:b5:aa:f6:1f:a8:18:d9:44:b1:63:5a:b4:19:3b:ed:b9: 7d:07:7c:9e:53:51:b6:03:62:fd:2a:d8:72:ce:47:fc:7b:21: 36:28:11:40:01:bd:30:a4:31:81:b6:19:15:41:40:fc:62:1a: 9b:f7:73:ca:76:c8:a6:16:4b:b0:4d:d2:38:ec:e6:fa:75:69: 78:61:61:9d:c7:16:c3:6d:08:c3:bf:1f:a0:d9:a2:47:7f:a0: 1d:6f:43:b2:69:90:cf:75:65:c5:8f:5b:22:10:ce:e9:f6:07: 93:40:7c:a1:8c:22:f7:82:2d:cd:bf:6a:cd:66:f9:33:70:bf: 6c:32:18:d4:47:3e:8f:68:7b:91:e1:59:de:e5:e3:10:51:3b: ab:59:d3:75:72:c1:52:f9:f2:4d:42:59:84:a6:4c:47:d9:b0: 2d:0f:7a:ad:65:bc:bd:fe:c9:07:5d:ed:67:e9:02:7f:86:42: 98:26:6b:04 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUJijz3/NB/tl2U7Zne8woViY4ix8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzEzNGVlOTg3ZTA4ZDhiNTU4M2ZlZWY2MjFhMDMxNTBj NGYzNTQzNDAeFw0yNDExMjEyMTEzMzRaFw0yNDExMjMwMTAxMzRaMDMxMTAvBgNV BAMTKEE4ODFFNDRFMTE3QUJDQzc2OEI3MUQzMzc5QkI3RjlGNjdGRjA4NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPoDsgrNuPOrnXg04pFMMycefG P0cEsZh7CaEigHch+xVU20U+OAzQWldjhOSPy++hMIRvV36gThly+LlJgor3VnPe vRYjzGS2r1v66P4w5vR0/7qtDc7Au1GEctOSfWKICcsq9x6dcsqlW/6s+0do71gs jjE9r1tkbzowD3Y/HgLG2/RbmGdr8DrN/C1Ni/A57m2mmf2O/7hVmBkgtWEQSg1X cOvZPSkf1qLFfQJfzMWm7hNSGNaiNhmWLRU4RSYxOusBMXa2At8lJyAI6S0e2WCI vwPb4fm2RlJwtQTumO2VBy4w0KFgcpWkMEhY73bIde7eAWqgbK2IWOVW8pL/AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUqIHkThF6vMdotx0zebt/n2f/CHgwHwYDVR0j BBgwFoAUMTTumH4I2LVYP+72IaAxUMTzVDQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWEzYmI5M2YtOThhNC00YzdlLWEwZTEtODA1N2E0ZjA4 NmM5LzAvMzEzNEVFOTg3RTA4RDhCNTU4M0ZFRUY2MjFBMDMxNTBDNEYzNTQzNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL01UVHVtSDRJMkxWWVAtNzJJYUF4VU1U elZEUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05 OGE0LTRjN2UtYTBlMS04MDU3YTRmMDg2YzkvMC8zMTM0RUU5ODdFMDhEOEI1NTgz RkVFRjYyMUEwMzE1MEM0RjM1NDM0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAjZHk1s4rinuolMWUHYD N4ops/g9CAT9tC5E2DMMqFrDKbPYVqHyBYmggOcx6UAcBvpCaiFJHGruxek3hCSA D5ZdoeGBAjBXwsC1qvYfqBjZRLFjWrQZO+25fQd8nlNRtgNi/SrYcs5H/HshNigR QAG9MKQxgbYZFUFA/GIam/dzynbIphZLsE3SOOzm+nVpeGFhnccWw20Iw78foNmi R3+gHW9DsmmQz3VlxY9bIhDO6fYHk0B8oYwi94Itzb9qzWb5M3C/bDIY1Ec+j2h7 keFZ3uXjEFE7q1nTdXLBUvnyTUJZhKZMR9mwLQ96rWW8vf7JB13tZ+kCf4ZCmCZr BA== -----END CERTIFICATE-----Generated at Fri Nov 22 00:15:23 2024 by rpki-client on console-ams.rpki-client.org