$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/8/32398A1406A1C1D323CA63CB320FFD1EB4D1B0C4.mft File: 32398A1406A1C1D323CA63CB320FFD1EB4D1B0C4.mft (raw, json) Hash identifier: 9HTfsueI0qPk/DGahMoI4q2Qtm/2Es569yN2rqKV8N4= Subject key identifier: 7B:82:12:C6:14:75:73:E0:39:7B:5B:D6:13:50:D6:AA:36:95:3F:81 Authority key identifier: 32:39:8A:14:06:A1:C1:D3:23:CA:63:CB:32:0F:FD:1E:B4:D1:B0:C4 Certificate issuer: /CN=32398A1406A1C1D323CA63CB320FFD1EB4D1B0C4 Certificate serial: 72C8A6E080AFBD24CD7CE6DAD4A87B18E47AD0DE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/32398A1406A1C1D323CA63CB320FFD1EB4D1B0C4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/8/32398A1406A1C1D323CA63CB320FFD1EB4D1B0C4.mft Manifest number: 95 Signing time: Fri 17 May 2024 15:04:22 +0000 Manifest this update: Fri 17 May 2024 14:59:22 +0000 Manifest next update: Sat 18 May 2024 15:36:22 +0000 Files and hashes: 1: 326131313a323963303a396562383a3a2f34362d3438203d3e203136353039.roa (hash: et596bH8tUxjFHs2a6/cNPZoQPevbHRyR0lQ65/r2nA=) 2: 326131313a323963303a396562303a3a2f34342d3438203d3e20323033303639.roa (hash: EzDrSU0tEdoyrWBny4WwvfoAYESt5HomMWAJ483CPZA=) 3: 326131313a323963303a396562653a3a2f34372d3438203d3e203134363138.roa (hash: fycC0UeL6liXoK+7uZCbJcRap3WaS0JUMwnW8BsbcDk=) 4: 326131313a323963303a396562653a3a2f34372d3438203d3e203136353039.roa (hash: +Gy89ybA1Z02ZVk1Qb4p4nTUf+b8bekfP/lbqOu4QMw=) 5: 326131313a323963303a396562383a3a2f34362d3438203d3e203134363138.roa (hash: VairAG1GH3Nqpnot+beTl4FtLl0ofBKMtMIyfr2b4xQ=) 6: 32398A1406A1C1D323CA63CB320FFD1EB4D1B0C4.crl (hash: LpYIM5VgPbUK6fVQArrxDksYO91ahqwlOGsSj8qQVWU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/8/32398A1406A1C1D323CA63CB320FFD1EB4D1B0C4.crl rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/8/32398A1406A1C1D323CA63CB320FFD1EB4D1B0C4.mft rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/32398A1406A1C1D323CA63CB320FFD1EB4D1B0C4.cer rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/CDC014669D381152AFB94B76936268BFF73E7D50.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/CDC014669D381152AFB94B76936268BFF73E7D50.mft rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/CDC014669D381152AFB94B76936268BFF73E7D50.cer rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 May 2024 08:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:c8:a6:e0:80:af:bd:24:cd:7c:e6:da:d4:a8:7b:18:e4:7a:d0:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32398A1406A1C1D323CA63CB320FFD1EB4D1B0C4 Validity Not Before: May 17 14:59:22 2024 GMT Not After : May 18 15:36:22 2024 GMT Subject: CN=7B8212C6147573E0397B5BD61350D6AA36953F81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:49:ea:c4:2e:36:a3:a6:73:09:19:26:5a:12: d8:0f:d9:4b:65:7d:29:27:db:4e:5d:39:39:93:9d: 93:d9:2a:9a:30:f2:82:12:75:49:0d:56:9e:d6:66: d3:a0:69:96:d3:b7:60:45:b5:7f:61:be:4a:80:99: 40:89:6f:dc:1e:16:68:c7:5b:a7:d9:b7:40:da:95: 62:83:3c:cb:6a:fb:23:68:95:ba:24:e7:9d:55:7f: 52:64:ad:16:8a:6f:23:57:59:96:43:8c:5d:ab:3d: 7c:11:15:d5:a2:7a:4a:d1:af:09:0a:e0:7c:c3:6b: 90:aa:2e:fb:26:d4:c2:15:e4:fc:5b:8a:2c:f4:c3: 38:27:06:75:d3:e1:ed:d9:f1:8d:28:2e:27:1c:16: 5e:e6:03:b9:29:05:f0:64:3e:71:6e:3a:f5:e3:98: 38:8c:6b:42:3f:d4:0e:ef:8c:ce:41:f2:74:45:c2: 2f:54:bf:43:8a:db:ed:4a:7d:69:b0:36:c6:d8:df: 73:63:9c:9d:38:a0:34:d1:13:b3:c0:7f:74:44:97: 74:02:33:b6:92:da:d4:8b:09:f1:88:4c:f0:12:8b: 1e:ef:c3:e4:09:a1:dc:11:cf:cf:14:ba:9f:6d:78: 02:6f:0e:48:e6:67:9a:42:6b:8f:c3:bb:b3:c5:13: 8e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:82:12:C6:14:75:73:E0:39:7B:5B:D6:13:50:D6:AA:36:95:3F:81 X509v3 Authority Key Identifier: keyid:32:39:8A:14:06:A1:C1:D3:23:CA:63:CB:32:0F:FD:1E:B4:D1:B0:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/8/32398A1406A1C1D323CA63CB320FFD1EB4D1B0C4.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/32398A1406A1C1D323CA63CB320FFD1EB4D1B0C4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/8/32398A1406A1C1D323CA63CB320FFD1EB4D1B0C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:74:7f:f3:b4:15:47:dd:01:9a:78:24:5f:d4:7b:42:b6:7e: e6:31:f8:8d:5d:2f:ac:7b:0a:cb:ac:a7:17:8e:16:1c:74:c3: bc:5e:d5:44:35:db:ff:2e:29:a5:0c:64:78:6f:bf:56:ad:c2: de:e0:ab:61:9f:f3:dd:44:dd:46:4b:0b:ea:6e:15:f6:55:42: 5d:d4:17:54:ab:2f:23:0a:b2:63:7c:1e:86:51:22:38:f8:b5: 95:7a:66:e0:fd:b6:14:1c:ab:ec:a6:53:06:c6:ce:c5:37:bc: 77:cd:29:3b:b6:e5:0f:0f:49:89:39:47:84:79:4b:0d:00:a2: f0:8f:4f:58:c6:5c:4e:44:59:6e:f9:6b:4b:f5:e2:70:cd:53: 32:07:06:dd:f3:82:48:dd:fe:ea:7c:8a:bc:4d:58:3b:53:3a: 90:eb:b7:35:21:4f:3b:c6:2c:0f:ef:53:0e:af:ac:56:aa:fc: 64:d0:69:00:ae:a9:88:a5:87:11:bb:61:d3:a6:6c:dc:ac:aa: 31:64:ec:a4:e9:31:4a:cd:e5:cf:72:4e:64:8d:7a:e5:de:82: 08:b7:e3:58:fe:7a:f9:f0:36:4d:13:37:4b:1d:ce:6e:8c:fa: 3d:68:54:32:fa:70:1b:b9:37:08:74:47:ef:43:82:c3:d3:79: 7c:9e:fb:81 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUcsim4ICvvSTNfOba1Kh7GOR60N4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzIzOThBMTQwNkExQzFEMzIzQ0E2M0NCMzIwRkZEMUVC NEQxQjBDNDAeFw0yNDA1MTcxNDU5MjJaFw0yNDA1MTgxNTM2MjJaMDMxMTAvBgNV BAMTKDdCODIxMkM2MTQ3NTczRTAzOTdCNUJENjEzNTBENkFBMzY5NTNGODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwSerELjajpnMJGSZaEtgP2Utl fSkn205dOTmTnZPZKpow8oISdUkNVp7WZtOgaZbTt2BFtX9hvkqAmUCJb9weFmjH W6fZt0DalWKDPMtq+yNolbok551Vf1JkrRaKbyNXWZZDjF2rPXwRFdWiekrRrwkK 4HzDa5CqLvsm1MIV5Pxbiiz0wzgnBnXT4e3Z8Y0oLiccFl7mA7kpBfBkPnFuOvXj mDiMa0I/1A7vjM5B8nRFwi9Uv0OK2+1KfWmwNsbY33NjnJ04oDTRE7PAf3REl3QC M7aS2tSLCfGITPASix7vw+QJodwRz88Uup9teAJvDkjmZ5pCa4/Du7PFE46pAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUe4ISxhR1c+A5e1vWE1DWqjaVP4EwHwYDVR0j BBgwFoAUMjmKFAahwdMjymPLMg/9HrTRsMQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi ZTRlLzgvMzIzOThBMTQwNkExQzFEMzIzQ0E2M0NCMzIwRkZEMUVCNEQxQjBDNC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1 NDEtYmNjMS0yNzY1NDNhMjVjN2QvMi8zMjM5OEExNDA2QTFDMUQzMjNDQTYzQ0Iz MjBGRkQxRUI0RDFCMEM0LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzFiZjhlOTc3LTcyNzgtNDZjZi1hYmQxLTk5Y2QxZmQyYmU0ZS84LzMyMzk4QTE0 MDZBMUMxRDMyM0NBNjNDQjMyMEZGRDFFQjREMUIwQzQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAzdH/z tBVH3QGaeCRf1HtCtn7mMfiNXS+sewrLrKcXjhYcdMO8XtVENdv/LimlDGR4b79W rcLe4Kthn/PdRN1GSwvqbhX2VUJd1BdUqy8jCrJjfB6GUSI4+LWVembg/bYUHKvs plMGxs7FN7x3zSk7tuUPD0mJOUeEeUsNAKLwj09YxlxORFlu+WtL9eJwzVMyBwbd 84JI3f7qfIq8TVg7UzqQ67c1IU87xiwP71MOr6xWqvxk0GkArqmIpYcRu2HTpmzc rKoxZOyk6TFKzeXPck5kjXrl3oIIt+NY/nr58DZNEzdLHc5ujPo9aFQy+nAbuTcI dEfvQ4LD03l8nvuB -----END CERTIFICATE-----Generated at Fri May 17 17:36:34 2024 by rpki-client on console-fra.rpki-client.org