$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft File: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft (raw, json) Hash identifier: OJb27nCDdu3CIt+C7GfUILy0UwFFkhMo8KxTUvpYiQ8= Subject key identifier: 84:4E:B5:C7:7F:68:23:A7:05:C4:6F:2D:64:7B:1E:C2:78:67:51:F4 Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6 Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6 Certificate serial: 61C49A6C2EE239BDCC624EF5EDE13218A9A75374 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft Manifest number: 0454 Signing time: Sun 19 Jan 2025 00:01:56 +0000 Manifest this update: Sat 18 Jan 2025 23:56:56 +0000 Manifest next update: Mon 20 Jan 2025 03:42:56 +0000 Files and hashes: 1: 322e35392e36302e302f32342d3234203d3e203631333137.roa (hash: q2CusaPkf+9tq5tpeWHdsbDXlriozRiwrVa0ak4+VcM=) 2: 3134362e31392e3136372e302f32342d3234203d3e20313432313131.roa (hash: PY8NObpnksEy4Gap1Hc7MyHqiFU62dabk5L2A/Q0beE=) 3: 38352e3230392e3232392e302f32342d3234203d3e203536353934.roa (hash: QX9ueohVOd3OqmtIdot9+eGuIdzLX4v81/D0nXHE6p0=) 4: 352e3138312e3138352e302f32342d3234203d3e20323131333733.roa (hash: Jcj6Q6hffLq9mVMv6ZE1OGTsaSIAKmWUVH3PL5R7nSM=) 5: 3139342e33312e3139342e302f32342d3234203d3e203339333638.roa (hash: SFZs2oMtwnIqXXrJ+wKfTfWn9twNuN9+e0KffE2zcpE=) 6: 3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa (hash: PSvZ/anbcmxBXOGenvyIpDVTGCYRm/N6G0r8w/lsBk0=) 7: 34352e382e3231372e302f32342d3234203d3e20323136303232.roa (hash: IZ1FK1LtUNnpDGA40P5RIJ6ZOXsvB1S0Y5ORDGh7xcg=) 8: 352e3138312e3138342e302f32342d3234203d3e20323132333335.roa (hash: EGBFBscvQ1YWstG9kbxkZOotMsNA8UcpxsIuwRfrnH4=) 9: 352e3138312e3138362e302f32342d3234203d3e203239303636.roa (hash: 5g1iTpy4+Ocf7g6idB3LUlopM7lH9cpsMczTTuu+hV0=) 10: 352e3138312e3138342e302f32342d3234203d3e20323131333733.roa (hash: tJ6A7U51n+GmIhk14F2miBqIQAmoLzM8TwWGKyDUw/Q=) 11: 3139342e33312e3139362e302f32342d3234203d3e203236303432.roa (hash: qD/DCStq18VBTmVBWLBlQXfh7vnINoDBBBUYCw3Mifo=) 12: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl (hash: EGrgQhijM9S56bXidXJ/vGy8SLuwR9+MPQDGo7dzyuo=) 13: 34352e39352e3231322e302f32342d3234203d3e20323039353534.roa (hash: D9JHULDkg0M1wT0M8wVTfDaCTJBMJIgvLcTza5q7f5c=) 14: 34352e39352e3231352e302f32342d3234203d3e203631333137.roa (hash: 1rledH/nQm8w0NijGoGbm37JgiwE6dNG9uQzsEzjcaQ=) 15: 34352e382e3231392e302f32342d3234203d3e2039303039.roa (hash: 0tQfil3TCFdk5LEcr0D0xtOoBgJdLwmHivVySWFI/b8=) 16: 322e35392e36322e302f32342d3234203d3e203633303233.roa (hash: DSrssF4mQ2FpkJ2bTT0rXZrpSPxbZ/p2NNnVGrB1zBA=) 17: 3231322e31382e3131342e302f32342d3234203d3e203133333335.roa (hash: vO05yPqpp4iOUltzxMrFn4LhWc4dalJCoS4kQJCbZB8=) 18: 38352e3230392e3233302e302f32342d3234203d3e20323135343135.roa (hash: nQW3VSKEnCMjY8M2IGLhDVn57ZwGeZuI987P09F401g=) 19: 322e35392e36302e302f32342d3234203d3e20323132323338.roa (hash: CcTcBdbonCUzXWQkXfUzd9CNDkT7d6acKjiVXDKXCdc=) 20: 322e35392e36312e302f32342d3234203d3e203438323636.roa (hash: hiISyjsBYHV79q+Gx93bY181AuN3Ze4Sa40HFW4204A=) 21: 34352e39352e3231322e302f32322d3232203d3e2037303239.roa (hash: wXll8iGOq5bo/V4iKTWa0gWLbXOr0lpoVBYORUbUhI0=) 22: 3231322e31382e3131342e302f32342d3234203d3e20323635393139.roa (hash: hab4hIGZSaDFVIiuhh8M27XjJNP2UIzC71avB4BPqKc=) 23: 352e3138312e3138372e302f32342d3234203d3e20323135373033.roa (hash: NPvxKSNfdGX2aoCtCwLVMBnzeoN7AU2GpBh+K+JOMMc=) 24: 322e35392e36332e302f32342d3234203d3e20323039363432.roa (hash: Z87BeCKdNOTOblKE4NVrwtYfC72j0VsLu5nyAC5OL8M=) 25: 3139342e33312e3139352e302f32342d3234203d3e203334393933.roa (hash: WhgIIlEcmyU6tnDp2AFwPse2lR11xsetwXhDM0lEJUg=) 26: 34352e39352e3231342e302f32342d3234203d3e203434353437.roa (hash: Sd3ATX2JXuJGwYyTznY75JAJsfCeqEXX3vuSL4tLhwo=) 27: 3134362e31392e33382e302f32342d3234203d3e20313939363534.roa (hash: tMu2dDNgxRe+VDjoQWDh2D5B14b9X3sh+JRsGfPn8q4=) 28: 34352e39352e3231332e302f32342d3234203d3e20343030303339.roa (hash: w5NU7XhSCx4TB+ZVVuz65lQXaRG4sh/qolM03TzoQNc=) 29: 3139342e33312e3139352e302f32342d3234203d3e203132383236.roa (hash: CHPNPT0z1FxJrnbYsQhHJ9NQadQdz3mVof1cRz2i8vw=) 30: 3134362e31392e3136372e302f32342d3234203d3e203633303233.roa (hash: ZHdW+pei9XIhTbcUkYdHIOR86A1hj8LVQhQf+2OeqZ0=) 31: 38352e3230392e3232382e302f32342d3234203d3e203631333137.roa (hash: FfnGHiuEho8SWAywvjE81YHbDOc91T4mmOCAKPzuC6U=) 32: 34352e382e3231382e302f32342d3234203d3e20323132333834.roa (hash: fFoVzPmBBS3RRm+U3RPtjG4VEvF1de7uQ6FGaPF9XH0=) 33: 352e3138312e3138352e302f32342d3234203d3e20323132333834.roa (hash: A0XKJ5LQE2xdMm4Ben97C7myJjFSIvK/gRy57S/U13Q=) 34: 38352e3230392e3233312e302f32342d3234203d3e203135343430.roa (hash: cUer1fFgoUaMXBv/Ofy3VHFv8QPdEE9BGuKF+6jEGKA=) 35: 3139342e33312e3139372e302f32342d3234203d3e203432383331.roa (hash: K/AgWhdBwRNuHNiBHXtZ25SaRir/NPec0zhFlGbzmks=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 19 Jan 2025 20:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:c4:9a:6c:2e:e2:39:bd:cc:62:4e:f5:ed:e1:32:18:a9:a7:53:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6 Validity Not Before: Jan 18 23:56:56 2025 GMT Not After : Jan 20 03:42:56 2025 GMT Subject: CN=844EB5C77F6823A705C46F2D647B1EC2786751F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:65:5d:c8:a3:f2:77:8c:9a:cf:9e:53:94:f7: 23:6b:4f:86:55:85:ca:8d:6d:c5:d0:63:84:53:e5: cb:b4:ee:74:29:59:8b:5c:ed:72:d2:a7:02:bb:c1: ad:f9:7d:14:fc:fb:f0:62:a4:62:b3:b8:63:a8:bd: 9b:9a:fa:3b:ca:5a:d3:2a:2c:0f:e8:98:1a:2a:0b: 15:9a:93:44:9a:35:dd:cb:3c:30:c2:26:6d:5d:ee: 87:5c:b8:d8:c0:60:f6:94:b0:a5:90:c3:fc:fd:1c: cb:db:4d:37:46:23:3b:7b:9e:47:e1:d8:94:a9:00: 99:45:c7:13:d9:1d:23:78:24:3e:50:3b:92:69:64: df:30:3a:63:06:2b:21:27:2e:f7:b4:18:bf:f9:12: 01:12:7b:e2:41:c7:f2:99:9d:b4:57:69:7d:5e:1e: 67:f2:70:89:e0:9a:30:39:31:e8:78:d0:f0:8f:92: 25:f2:4c:25:7f:c1:c8:05:53:84:ce:1d:e2:12:08: 9f:1b:b4:15:3f:db:30:12:e2:14:d9:9a:f8:30:0c: 99:67:f7:8f:07:eb:00:39:3e:f1:39:26:ae:64:31: a1:5d:6c:ad:9f:84:4e:f3:70:90:05:b0:70:7d:fc: 28:b1:c8:11:0d:a6:25:4b:99:40:0d:89:24:a6:2f: bf:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:4E:B5:C7:7F:68:23:A7:05:C4:6F:2D:64:7B:1E:C2:78:67:51:F4 X509v3 Authority Key Identifier: keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:36:68:02:b2:3a:6d:25:13:7e:c9:f6:00:41:2e:2f:49:1b: c2:29:63:85:ec:9a:50:ac:d0:5a:27:5a:27:ec:4f:7e:49:cf: 3e:96:76:1d:d6:72:41:0b:08:5c:6a:bc:7f:98:0b:ce:5d:9b: 65:37:1f:d0:5e:91:81:b3:9e:e5:01:af:cf:98:b3:5d:18:32: 8c:47:3b:a0:00:16:be:be:c3:7d:fc:cd:49:d3:cc:f3:77:69: 09:6a:61:0a:46:22:7f:74:78:66:98:6e:01:5d:e3:3e:a9:cf: 96:52:96:6f:ef:34:12:f1:f6:6a:0a:12:8f:9e:08:b4:7a:22: 6b:68:af:26:54:31:10:ad:d3:51:db:f4:06:1d:b3:a6:c2:48: f6:55:4b:7b:d9:59:70:27:52:ad:a7:56:ed:bb:24:26:7b:47: ba:85:fd:7d:1c:14:0c:88:1a:e9:ce:b7:20:59:95:ff:3a:a6: b7:20:37:6a:93:a6:1b:f2:36:2b:eb:58:42:19:db:77:e6:7f: 91:31:e1:39:29:26:c3:2b:f5:72:61:e5:f1:54:a6:27:f3:fa: 50:0e:3c:f0:48:0c:f5:b8:e7:8a:d7:a7:fd:7e:60:84:0b:3a: b4:46:4d:1f:a3:29:56:b7:02:d7:ae:01:7b:2b:dd:f7:54:f9: d0:86:2a:be -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUYcSabC7iOb3MYk717eEyGKmnU3QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTk0MjBlNmM2ZjI0YjBlNDIyZGE3ZmU3ZTQyMGVmNTAz NTRmNDVjNjAeFw0yNTAxMTgyMzU2NTZaFw0yNTAxMjAwMzQyNTZaMDMxMTAvBgNV BAMTKDg0NEVCNUM3N0Y2ODIzQTcwNUM0NkYyRDY0N0IxRUMyNzg2NzUxRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMZV3Io/J3jJrPnlOU9yNrT4ZV hcqNbcXQY4RT5cu07nQpWYtc7XLSpwK7wa35fRT8+/BipGKzuGOovZua+jvKWtMq LA/omBoqCxWak0SaNd3LPDDCJm1d7odcuNjAYPaUsKWQw/z9HMvbTTdGIzt7nkfh 2JSpAJlFxxPZHSN4JD5QO5JpZN8wOmMGKyEnLve0GL/5EgESe+JBx/KZnbRXaX1e HmfycIngmjA5Meh40PCPkiXyTCV/wcgFU4TOHeISCJ8btBU/2zAS4hTZmvgwDJln 948H6wA5PvE5Jq5kMaFdbK2fhE7zcJAFsHB9/CixyBENpiVLmUANiSSmL7+tAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUhE61x39oI6cFxG8tZHsewnhnUfQwHwYDVR0j BBgwFoAUqUIObG8ksOQi2n/n5CDvUDVPRcYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWY5ODIzZDAtMDg1NS00MWYyLWFjNDYtNTlhMmU5OGRh NzM2LzEvQTk0MjBFNkM2RjI0QjBFNDIyREE3RkU3RTQyMEVGNTAzNTRGNDVDNi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FVSU9iRzhrc09RaTJuX241Q0R2VURW UFJjWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xZjk4MjNkMC0w ODU1LTQxZjItYWM0Ni01OWEyZTk4ZGE3MzYvMS9BOTQyMEU2QzZGMjRCMEU0MjJE QTdGRTdFNDIwRUY1MDM1NEY0NUM2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAozZoArI6bSUTfsn2AEEu L0kbwiljheyaUKzQWidaJ+xPfknPPpZ2HdZyQQsIXGq8f5gLzl2bZTcf0F6RgbOe 5QGvz5izXRgyjEc7oAAWvr7DffzNSdPM83dpCWphCkYif3R4ZphuAV3jPqnPllKW b+80EvH2agoSj54ItHoia2ivJlQxEK3TUdv0Bh2zpsJI9lVLe9lZcCdSradW7bsk JntHuoX9fRwUDIga6c63IFmV/zqmtyA3apOmG/I2K+tYQhnbd+Z/kTHhOSkmwyv1 cmHl8VSmJ/P6UA488EgM9bjniten/X5ghAs6tEZNH6MpVrcC164Beyvd91T50IYq vg== -----END CERTIFICATE-----Generated at Sun Jan 19 02:56:29 2025 by rpki-client on console-fra.rpki-client.org