$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft File: 069FAF47FF48AEF4C98F5097074530A74C111AB9.mft (raw, json) Hash identifier: jZ9VT2WDC8ctba++kpZmY/LYxLltF0YA26+5oJur6Bc= Subject key identifier: 66:9B:C2:EF:CB:6F:3D:BC:4A:65:F0:80:03:71:09:EE:D4:FF:BF:E4 Authority key identifier: 06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9 Certificate issuer: /CN=069FAF47FF48AEF4C98F5097074530A74C111AB9 Certificate serial: 33596F27E900181ABF2233EC08F6AF4E5707452F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft Manifest number: 021B Signing time: Thu 21 Nov 2024 20:13:54 +0000 Manifest this update: Thu 21 Nov 2024 20:08:54 +0000 Manifest next update: Fri 22 Nov 2024 21:54:54 +0000 Files and hashes: 1: 326130663a383563313a3335313a3a2f34382d3438203d3e20343031333836.roa (hash: 7mR3vQrcbHUSwKtu57zMbBmzQiQeIJwUP4b5xp+7MO0=) 2: 326130663a383563313a3336333a3a2f34382d3438203d3e20323135363137.roa (hash: UbNylh5P6nuf5cNR2u+/87y22yS7yGAzdkJKrmcwv2M=) 3: 326130663a383563313a3335373a3a2f34382d3438203d3e20323135363137.roa (hash: YMu8WLqfkBVQv/xJG5P8ezCvqvqY3s+/ZmFue5GzF4w=) 4: 069FAF47FF48AEF4C98F5097074530A74C111AB9.crl (hash: cZ2k98gqOFpjcgjM3nPDlv41KxxEn66rQzgo8TmA7Q0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 17:16:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:59:6f:27:e9:00:18:1a:bf:22:33:ec:08:f6:af:4e:57:07:45:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=069FAF47FF48AEF4C98F5097074530A74C111AB9 Validity Not Before: Nov 21 20:08:54 2024 GMT Not After : Nov 22 21:54:54 2024 GMT Subject: CN=669BC2EFCB6F3DBC4A65F080037109EED4FFBFE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c1:c3:cb:2c:fa:64:45:b6:59:c7:eb:88:94: 86:f0:7f:4f:96:35:15:7b:6d:b1:97:fe:d6:80:df: 70:70:25:7f:e3:34:c8:84:63:0a:50:52:4b:a1:76: e9:5c:b9:b1:98:25:47:b9:7d:c3:0a:ff:f2:ac:a6: cb:72:8e:df:e9:b3:52:e8:f0:62:d6:a6:63:60:02: 14:de:2c:61:83:6f:f4:aa:7f:65:15:b4:58:eb:57: 89:ce:82:c3:0a:42:a9:1b:04:2b:bb:8a:64:ef:52: e7:db:e6:1b:38:ae:35:fe:68:b5:a9:fa:d6:e8:81: 74:cd:47:3c:12:4b:40:aa:aa:49:52:48:dc:9e:9a: 20:9d:13:cf:d6:c0:a0:25:1b:e0:e0:ef:4a:13:9f: a2:79:56:e6:d7:33:2d:76:6c:80:62:41:9a:99:b5: 1e:de:5a:72:ca:6f:7e:f2:9f:7a:40:e9:0d:15:29: 01:74:69:af:75:ab:56:cb:e9:bb:08:87:e9:39:18: 48:39:29:df:87:47:9f:11:55:93:5a:c3:0c:be:0c: d4:05:38:80:4b:a1:7f:d0:27:16:45:3d:b2:24:66: 89:08:c9:7f:0c:66:48:56:be:80:f9:5a:ca:a7:2e: db:76:ee:38:bb:d4:02:e3:91:2c:f4:3d:8e:90:a1: f4:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:9B:C2:EF:CB:6F:3D:BC:4A:65:F0:80:03:71:09:EE:D4:FF:BF:E4 X509v3 Authority Key Identifier: keyid:06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:16:34:f3:25:6c:db:c3:73:fc:71:35:22:38:75:d6:7c:92: bd:fa:ff:a1:27:c6:22:6c:ed:f0:04:1a:da:6b:60:51:3f:aa: 72:b9:c5:33:b6:2f:b9:c5:ee:a0:25:2e:a3:7e:a0:7b:4c:6c: 76:6e:a7:39:56:b8:8f:e4:e3:bf:30:a7:1d:bf:18:dd:a5:be: 49:bf:d8:6b:f4:15:60:41:f3:0f:23:bd:9d:cc:fb:e0:85:07: 22:5b:07:28:fc:e5:23:21:0c:41:c1:e8:7e:6c:eb:a3:5a:8c: af:71:d2:1d:a0:a1:49:ed:2a:8f:55:fc:7a:78:c0:36:18:26: a2:1a:e2:77:04:b9:c2:93:c8:1b:41:66:90:b6:44:a7:35:c2: 57:f3:d8:0c:57:65:08:de:c7:d8:8f:bc:7f:d5:56:85:6b:b9: 5f:99:d1:45:c0:1f:88:06:5b:00:79:31:22:11:81:4d:6f:77: a1:9e:d3:6b:2e:2a:5c:89:16:f5:f8:69:44:70:18:a7:9c:df: 85:94:aa:dc:a2:19:23:e9:cb:e3:1f:8f:13:b1:48:51:dc:0f: f8:2a:86:bf:f0:66:72:92:98:8a:83:37:84:fd:87:57:b1:e8: 0b:b7:f5:9f:ec:db:cf:b4:f4:09:e8:ae:34:23:33:ea:6e:98: 08:31:37:f9 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUM1lvJ+kAGBq/IjPsCPavTlcHRS8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0 QzExMUFCOTAeFw0yNDExMjEyMDA4NTRaFw0yNDExMjIyMTU0NTRaMDMxMTAvBgNV BAMTKDY2OUJDMkVGQ0I2RjNEQkM0QTY1RjA4MDAzNzEwOUVFRDRGRkJGRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqwcPLLPpkRbZZx+uIlIbwf0+W NRV7bbGX/taA33BwJX/jNMiEYwpQUkuhdulcubGYJUe5fcMK//Kspstyjt/ps1Lo 8GLWpmNgAhTeLGGDb/Sqf2UVtFjrV4nOgsMKQqkbBCu7imTvUufb5hs4rjX+aLWp +tbogXTNRzwSS0CqqklSSNyemiCdE8/WwKAlG+Dg70oTn6J5VubXMy12bIBiQZqZ tR7eWnLKb37yn3pA6Q0VKQF0aa91q1bL6bsIh+k5GEg5Kd+HR58RVZNawwy+DNQF OIBLoX/QJxZFPbIkZokIyX8MZkhWvoD5WsqnLtt27ji71ALjkSz0PY6QofQhAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUZpvC78tvPbxKZfCAA3EJ7tT/v+QwHwYDVR0j BBgwFoAUBp+vR/9IrvTJj1CXB0Uwp0wRGrkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjNkNWY2ODItYjUxYi00ODEyLWI4YjEtNDMwZTM4Njgz NzQ4LzIvMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0QzExMUFCOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8wNjlGQUY0N0ZGNDhBRUY0Qzk4RjUwOTcw NzQ1MzBBNzRDMTExQUI5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzIzZDVmNjgyLWI1MWItNDgxMi1iOGIxLTQzMGUzODY4Mzc0OC8yLzA2OUZBRjQ3 RkY0OEFFRjRDOThGNTA5NzA3NDUzMEE3NEMxMTFBQjkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBwFjTz JWzbw3P8cTUiOHXWfJK9+v+hJ8YibO3wBBraa2BRP6pyucUzti+5xe6gJS6jfqB7 TGx2bqc5VriP5OO/MKcdvxjdpb5Jv9hr9BVgQfMPI72dzPvghQciWwco/OUjIQxB weh+bOujWoyvcdIdoKFJ7SqPVfx6eMA2GCaiGuJ3BLnCk8gbQWaQtkSnNcJX89gM V2UI3sfYj7x/1VaFa7lfmdFFwB+IBlsAeTEiEYFNb3ehntNrLipciRb1+GlEcBin nN+FlKrcohkj6cvjH48TsUhR3A/4Koa/8GZykpiKgzeE/YdXsegLt/Wf7NvPtPQJ 6K40IzPqbpgIMTf5 -----END CERTIFICATE-----Generated at Thu Nov 21 21:58:16 2024 by rpki-client on console-ams.rpki-client.org