$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft File: 3134EE987E08D8B5583FEEF621A03150C4F35434.mft (raw, json) Hash identifier: 0SYhG7co2dB+UxsrujiDciJEwuS+wSnpEuqF8I3X0XI= Subject key identifier: AB:D3:A8:87:5B:BC:CD:E7:85:96:99:C3:A9:BC:CA:A1:0B:A3:79:74 Authority key identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34 Certificate issuer: /CN=3134ee987e08d8b5583feef621a03150c4f35434 Certificate serial: 6E1EDDEAD957E3FE6B93AD1454A7BEDEB9B9A548 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft Manifest number: 66 Signing time: Fri 17 May 2024 17:54:34 +0000 Manifest this update: Fri 17 May 2024 17:49:34 +0000 Manifest next update: Sat 18 May 2024 18:16:34 +0000 Files and hashes: 1: 3134EE987E08D8B5583FEEF621A03150C4F35434.crl (hash: /6J3//gXFJgICRDS4PvNChhRlIaBHRtHB/mw7q2wUg8=) 2: 7B8B788E11038E988A479693F5D7C2EA216BCD76.cer (hash: Bxg6gSI7GZcJkwSfpUTZjJOhwmiYHrCxmlYBg880CR4=) 3: 326131343a316563373a666666653a3a2f34382d3438203d3e20323135343733.roa (hash: 9zay4odK3MzFXKkb5eRg0MTwSr+YbkDO1NvenSzdJK0=) 4: 326131343a316563373a666666643a3a2f34382d3438203d3e20323038343533.roa (hash: aZlNOob/Y0zwV57voUteUdesCgZumSOWj2XcTD1whTA=) 5: 2AFACA7F316DBE0CFF394F9D5952E52992F185F1.cer (hash: TzD6pGlBEMmZI/OlLFvK4Q5nKNXovDA7wOkDjfwohQo=) 6: 326131343a316563303a333030303a3a2f33362d3336203d3e20323135333138.roa (hash: PZAEDd9ib2kKFIHM034HSXdM0DKy++8VTv9Qvs8kcmQ=) 7: 326131343a316563373a666666633a3a2f34382d3438203d3e20323136333339.roa (hash: TM2mQArU4he2RQeCWSLrgB89g/fo4aAYa1WM+OL50n0=) 8: 326131343a316563303a323030303a3a2f33362d3336203d3e20323135333138.roa (hash: KwEI8lxFYauSGGzgi2PKlVTPigtT2mqp4kgZHdJpDeQ=) 9: 326131343a316563373a663030303a3a2f33362d3336203d3e20323135333138.roa (hash: MDwJ5fo2zc9BpiWeWjV3SGkIPMsTGtHcrZhrxxJ1ABE=) 10: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer (hash: 4AKE57AAX9qvjgURrux+KkJeOReg49AL4A+/FGygfMI=) 11: 326131343a316563373a666666663a3a2f34382d3438203d3e20323030313739.roa (hash: OA1iCWMH/fVsbH/PVeaw+nsZWkfYlhG55ODsEs8KPMY=) 12: 326131343a316563303a313030303a3a2f33362d3336203d3e20323135333138.roa (hash: uqYlyqWoLUTmty53wquOSmMpnoAGdKOsEDP8FbYQzWo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 May 2024 16:46:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:1e:dd:ea:d9:57:e3:fe:6b:93:ad:14:54:a7:be:de:b9:b9:a5:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3134ee987e08d8b5583feef621a03150c4f35434 Validity Not Before: May 17 17:49:34 2024 GMT Not After : May 18 18:16:34 2024 GMT Subject: CN=ABD3A8875BBCCDE7859699C3A9BCCAA10BA37974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e0:be:17:0b:8d:22:24:87:c1:d7:64:a9:b4: 72:83:5f:29:59:bf:bc:45:e6:76:fa:7a:a8:7b:c3: 71:06:e7:df:55:3a:e8:af:f1:b8:f2:25:b9:ad:9e: bc:d8:e1:5b:d2:42:82:9c:51:59:4f:29:69:31:1c: 31:62:75:a0:e5:fe:ce:b9:2c:5f:45:98:0b:41:f1: de:06:43:20:c0:59:8a:0c:2d:cc:f2:07:d6:74:e9: 21:99:8d:53:72:43:e9:da:80:32:33:88:45:74:1b: 4d:1d:79:11:be:0f:de:a8:a6:fe:80:c8:2a:6e:98: 18:59:00:40:42:a9:ae:10:35:65:54:0b:f3:09:bd: 63:8d:57:63:89:5a:c2:a7:51:0a:19:74:3d:8a:d1: b9:2e:75:ac:21:d7:44:b3:4e:81:61:e4:03:91:35: 0c:1e:a7:6b:ab:ed:d5:6b:c8:b0:c3:89:bc:23:2e: 97:f3:44:15:7f:95:3a:d7:06:1d:26:e5:68:a0:d9: 44:ca:f7:c2:06:02:d2:fb:33:b0:15:1a:1f:d2:f6: 6a:19:e3:98:c0:57:9e:8e:85:85:0f:cc:86:36:90: 0a:fd:79:77:8d:34:72:6c:4a:a4:ea:83:55:56:d9: 93:ee:29:38:98:7d:c6:c1:13:a9:2f:d1:28:aa:cc: 3f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:D3:A8:87:5B:BC:CD:E7:85:96:99:C3:A9:BC:CA:A1:0B:A3:79:74 X509v3 Authority Key Identifier: keyid:31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:fd:65:44:e3:dd:e1:75:56:b3:83:25:69:df:d3:41:5b:ab: 27:52:43:c5:23:89:aa:ec:d5:14:7a:07:36:dd:a2:29:fe:d9: 5d:22:39:6c:ec:45:f3:9a:61:9f:37:73:32:88:52:ef:e3:00: cb:9e:a7:75:6c:ca:62:3c:4c:ad:42:fe:7a:49:fe:d2:b6:60: e9:2b:61:f6:b2:21:8e:2c:44:70:4a:f0:36:e0:86:e6:ea:24: 34:c0:c2:93:17:de:42:e9:80:29:71:e4:2c:79:f6:7a:70:a9: b0:0b:7a:07:67:ab:38:ec:32:07:9d:e6:2a:46:23:63:8d:3b: 10:13:ca:42:ae:6e:ec:75:32:82:04:dc:1e:7c:ea:b7:5a:a1: 0a:a4:47:bf:43:45:17:ec:30:bf:96:2f:b8:ea:dd:f9:9e:55: 1d:97:d7:69:82:df:03:83:8b:f8:e0:4f:7a:39:94:8c:87:91: 41:03:cc:37:00:61:da:38:7b:cd:64:3a:d9:50:79:58:12:f0: 3d:2c:a1:b6:7f:92:ed:77:5f:a6:cf:a1:26:09:8c:35:c2:d4: 5c:90:b3:74:9f:bf:c5:a6:66:ef:31:a4:cb:e0:d4:0f:57:48: 86:bf:c7:b5:bb:f1:e4:39:a1:b6:1a:39:46:05:a7:26:bb:36: 72:bd:45:73 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUbh7d6tlX4/5rk60UVKe+3rm5pUgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzEzNGVlOTg3ZTA4ZDhiNTU4M2ZlZWY2MjFhMDMxNTBj NGYzNTQzNDAeFw0yNDA1MTcxNzQ5MzRaFw0yNDA1MTgxODE2MzRaMDMxMTAvBgNV BAMTKEFCRDNBODg3NUJCQ0NERTc4NTk2OTlDM0E5QkNDQUExMEJBMzc5NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy4L4XC40iJIfB12SptHKDXylZ v7xF5nb6eqh7w3EG599VOuiv8bjyJbmtnrzY4VvSQoKcUVlPKWkxHDFidaDl/s65 LF9FmAtB8d4GQyDAWYoMLczyB9Z06SGZjVNyQ+nagDIziEV0G00deRG+D96opv6A yCpumBhZAEBCqa4QNWVUC/MJvWONV2OJWsKnUQoZdD2K0bkudawh10SzToFh5AOR NQwep2ur7dVryLDDibwjLpfzRBV/lTrXBh0m5Wig2UTK98IGAtL7M7AVGh/S9moZ 45jAV56OhYUPzIY2kAr9eXeNNHJsSqTqg1VW2ZPuKTiYfcbBE6kv0SiqzD/JAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUq9Ooh1u8zeeFlpnDqbzKoQujeXQwHwYDVR0j BBgwFoAUMTTumH4I2LVYP+72IaAxUMTzVDQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWEzYmI5M2YtOThhNC00YzdlLWEwZTEtODA1N2E0ZjA4 NmM5LzAvMzEzNEVFOTg3RTA4RDhCNTU4M0ZFRUY2MjFBMDMxNTBDNEYzNTQzNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL01UVHVtSDRJMkxWWVAtNzJJYUF4VU1U elZEUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05 OGE0LTRjN2UtYTBlMS04MDU3YTRmMDg2YzkvMC8zMTM0RUU5ODdFMDhEOEI1NTgz RkVFRjYyMUEwMzE1MEM0RjM1NDM0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcP1lROPd4XVWs4Mlad/T QVurJ1JDxSOJquzVFHoHNt2iKf7ZXSI5bOxF85phnzdzMohS7+MAy56ndWzKYjxM rUL+ekn+0rZg6Sth9rIhjixEcErwNuCG5uokNMDCkxfeQumAKXHkLHn2enCpsAt6 B2erOOwyB53mKkYjY407EBPKQq5u7HUyggTcHnzqt1qhCqRHv0NFF+wwv5YvuOrd +Z5VHZfXaYLfA4OL+OBPejmUjIeRQQPMNwBh2jh7zWQ62VB5WBLwPSyhtn+S7Xdf ps+hJgmMNcLUXJCzdJ+/xaZm7zGky+DUD1dIhr/Htbvx5Dmhtho5RgWnJrs2cr1F cw== -----END CERTIFICATE-----Generated at Fri May 17 20:14:51 2024 by rpki-client on console-ams.rpki-client.org