$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.mft File: CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.mft (raw, json) Hash identifier: FAuK9zFpEU34VjbRsRjvWT9QNyGmLyxORldVf1jhK+U= Subject key identifier: CA:B1:78:E5:85:F7:97:FD:9F:D6:BE:92:70:2A:8F:2F:1C:90:EE:00 Authority key identifier: CE:1B:4F:43:67:B6:A5:5F:34:CA:98:1A:0D:6C:A7:58:3F:95:51:CD Certificate issuer: /CN=CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD Certificate serial: 385172195985FA74E614DB95C14492AFDC12CB71 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.mft Manifest number: 67 Signing time: Mon 25 Nov 2024 04:49:46 +0000 Manifest this update: Mon 25 Nov 2024 04:44:46 +0000 Manifest next update: Tue 26 Nov 2024 06:51:46 +0000 Files and hashes: 1: 326130363a613030333a313333373a3a2f34382d3438203d3e20323030363736.roa (hash: vFXjegY0vnmzgiKwFkv4TNQvgCv0y7neNveGux2ZS+w=) 2: 39342e32342e3130382e302f32342d3234203d3e20323030363736.roa (hash: Nyn9oM7uD3t9zeyaIzVAMa0fIXr9id1B4aigY0eVgwU=) 3: 326130363a613030333a3a2f34382d3438203d3e20323030363736.roa (hash: ahz6gPUt4YrcLpOD9Ozfm8bYrgH1OTsLIpfe4cqXpMc=) 4: 326130363a613030333a666666663a3a2f34382d3438203d3e203530373535.roa (hash: 4NAkvNhOgG+FdQOl5H1HgnY8A0ca/GD2rGJr4GFMtSI=) 5: CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.crl (hash: mv39dA8IPijuIxK+aVZhZiFeHluKRvXFe/4JyKIQb0E=) 6: 326130363a613030333a623030623a3a2f34382d3438203d3e20323030363736.roa (hash: wTqD67Uqf1W/idPthA4sHinaJ2FPLZ88IN640ixPrCU=) 7: 326130363a613030333a313131313a3a2f34382d3438203d3e20323030363736.roa (hash: Q5gjl44KzFA6g8+tW8lygBoA3oaZ4qvSEamF1iUuuio=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.crl rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 25 Nov 2024 21:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:51:72:19:59:85:fa:74:e6:14:db:95:c1:44:92:af:dc:12:cb:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD Validity Not Before: Nov 25 04:44:46 2024 GMT Not After : Nov 26 06:51:46 2024 GMT Subject: CN=CAB178E585F797FD9FD6BE92702A8F2F1C90EE00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:01:e8:2b:fd:7e:30:a0:55:d9:ae:d3:35:51: 41:58:30:03:05:7b:ae:44:ea:b4:f8:af:16:fa:dd: f9:00:84:75:f5:d9:6f:85:4d:fe:dd:6a:2e:7e:0a: 96:4a:59:ab:92:b0:68:66:b4:c8:54:6d:a9:ea:db: 64:4b:4f:e5:19:85:2e:a3:1a:9e:d2:70:51:c2:2b: c1:d4:b1:81:0f:1a:19:e9:5a:c4:3d:8e:8b:9e:d1: f9:8c:f6:52:4c:6e:cf:66:9f:5a:83:d0:de:17:1b: 26:15:07:c7:05:a0:4d:de:36:64:3b:c3:39:8e:ee: f4:3f:9a:6c:af:d4:fc:56:e9:89:ef:ff:c2:04:0b: 6e:30:8b:64:8b:1c:a8:a5:8f:4b:ab:07:ed:86:33: 8c:ba:41:21:03:04:04:7a:26:2d:82:e8:b4:aa:83: 4e:48:9d:2a:53:49:bd:03:09:68:e4:d6:74:cc:41: 25:0a:ba:65:a3:2e:af:bf:33:f7:df:a4:3b:7f:6e: f2:30:01:df:02:49:94:d4:44:a2:e5:1a:5e:82:36: e6:a6:ee:cd:a3:a7:2f:88:46:a2:d2:cd:57:40:66: 1f:3a:d1:4e:a0:18:17:c7:25:e9:b2:93:4a:d2:fb: 86:c9:4e:f3:49:75:4b:17:97:0e:4b:68:fc:b2:b4: de:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:B1:78:E5:85:F7:97:FD:9F:D6:BE:92:70:2A:8F:2F:1C:90:EE:00 X509v3 Authority Key Identifier: keyid:CE:1B:4F:43:67:B6:A5:5F:34:CA:98:1A:0D:6C:A7:58:3F:95:51:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:c8:c1:4a:ff:3a:bf:c5:85:50:88:a0:e2:b9:38:eb:ea:d7: 4d:95:b5:bb:22:10:e5:c3:d7:5d:0b:50:39:9d:36:2c:5f:3c: 11:92:5f:8c:a0:3a:d4:1d:b9:e7:8c:6c:90:25:bf:47:56:b1: f9:19:14:b6:2d:29:ef:20:ee:a5:2e:0d:52:55:d2:bb:a1:7a: bf:f0:b0:58:e8:16:80:69:c0:68:be:d0:d5:dc:82:8c:76:f2: 05:25:46:fe:77:ef:0c:f2:a4:fd:9e:e7:1a:a3:51:32:aa:3b: 47:db:02:11:da:28:eb:44:4f:16:b1:5e:c6:fd:69:7f:59:be: a9:11:2c:51:b7:11:b4:7b:7b:60:10:98:bb:6a:6a:a2:f5:b3: 24:78:e2:22:c6:f6:f3:8f:49:4e:2b:08:21:e4:d1:1c:06:bd: 0c:98:35:4d:7b:b9:63:8a:6c:29:2e:28:2e:33:b3:ef:54:e5: 8d:3c:b2:ce:ba:0f:41:dc:df:d3:ca:e0:0a:d1:1e:80:f3:d3: 18:98:a2:6d:7a:75:c3:6b:c7:ce:d9:f2:71:f2:01:37:ef:91: af:e0:38:af:fc:d5:7d:12:ff:03:23:8d:eb:ad:a0:8f:e4:66: 47:a3:ef:ad:0a:18:f9:a9:c3:8e:13:8e:b4:76:7e:47:00:16: b6:00:80:59 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUOFFyGVmF+nTmFNuVwUSSr9wSy3EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UxQjRGNDM2N0I2QTU1RjM0Q0E5ODFBMEQ2Q0E3NTgz Rjk1NTFDRDAeFw0yNDExMjUwNDQ0NDZaFw0yNDExMjYwNjUxNDZaMDMxMTAvBgNV BAMTKENBQjE3OEU1ODVGNzk3RkQ5RkQ2QkU5MjcwMkE4RjJGMUM5MEVFMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjAegr/X4woFXZrtM1UUFYMAMF e65E6rT4rxb63fkAhHX12W+FTf7dai5+CpZKWauSsGhmtMhUbanq22RLT+UZhS6j Gp7ScFHCK8HUsYEPGhnpWsQ9joue0fmM9lJMbs9mn1qD0N4XGyYVB8cFoE3eNmQ7 wzmO7vQ/mmyv1PxW6Ynv/8IEC24wi2SLHKilj0urB+2GM4y6QSEDBAR6Ji2C6LSq g05InSpTSb0DCWjk1nTMQSUKumWjLq+/M/ffpDt/bvIwAd8CSZTURKLlGl6CNuam 7s2jpy+IRqLSzVdAZh860U6gGBfHJemyk0rS+4bJTvNJdUsXlw5LaPyytN5DAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUyrF45YX3l/2f1r6ScCqPLxyQ7gAwHwYDVR0j BBgwFoAUzhtPQ2e2pV80ypgaDWynWD+VUc0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1 Y2U3LzEvQ0UxQjRGNDM2N0I2QTU1RjM0Q0E5ODFBMEQ2Q0E3NTgzRjk1NTFDRC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvQ0UxQjRGNDM2N0I2QTU1RjM0Q0E5ODFBMEQ2Q0E3NTgzRjk1 NTFDRC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWNhM2NhNi0z NGNjLTQ3NzItYmFjMC1hMzVkZDAxOTVjZTcvMS9DRTFCNEY0MzY3QjZBNTVGMzRD QTk4MUEwRDZDQTc1ODNGOTU1MUNELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOcjBSv86v8WFUIig4rk4 6+rXTZW1uyIQ5cPXXQtQOZ02LF88EZJfjKA61B2554xskCW/R1ax+RkUti0p7yDu pS4NUlXSu6F6v/CwWOgWgGnAaL7Q1dyCjHbyBSVG/nfvDPKk/Z7nGqNRMqo7R9sC Edoo60RPFrFexv1pf1m+qREsUbcRtHt7YBCYu2pqovWzJHjiIsb2849JTisIIeTR HAa9DJg1TXu5Y4psKS4oLjOz71TljTyyzroPQdzf08rgCtEegPPTGJiibXp1w2vH ztnycfIBN++Rr+A4r/zVfRL/AyON662gj+RmR6PvrQoY+anDjhOOtHZ+RwAWtgCA WQ== -----END CERTIFICATE-----Generated at Mon Nov 25 06:09:05 2024 by rpki-client on console-fra.rpki-client.org