$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/CDC014669D381152AFB94B76936268BFF73E7D50.mft File: CDC014669D381152AFB94B76936268BFF73E7D50.mft (raw, json) Hash identifier: 4ogJMYd3rcZa917Xx6ep9unp1ia+Qo0Oh0q1drPss2k= Subject key identifier: 0E:83:2D:A6:D7:47:3D:02:71:EC:45:B0:E4:D1:17:CC:67:55:1F:F6 Authority key identifier: CD:C0:14:66:9D:38:11:52:AF:B9:4B:76:93:62:68:BF:F7:3E:7D:50 Certificate issuer: /CN=CDC014669D381152AFB94B76936268BFF73E7D50 Certificate serial: 2B84A8031FEC6234012590D5FFB82C76F4BADFFD Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/CDC014669D381152AFB94B76936268BFF73E7D50.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/CDC014669D381152AFB94B76936268BFF73E7D50.mft Manifest number: 0197 Signing time: Thu 16 May 2024 22:35:26 +0000 Manifest this update: Thu 16 May 2024 22:30:26 +0000 Manifest next update: Sat 18 May 2024 02:28:26 +0000 Files and hashes: 1: 326131313a323963303a393061303a3a2f34342d3434203d3e203437323732.roa (hash: sqvA66ugd217ubL8FFsWa3LSVKzJSrp6bwwd0XBoZbg=) 2: 326131313a323963303a393030343a3a2f34382d3438203d3e203437323732.roa (hash: JNxHo3Fec11gMCTJE/0npIPuFyfTd85Zh8D323nwuSs=) 3: 326131313a323963303a393030333a3a2f34382d3438203d3e203437323732.roa (hash: ewz65x0eI0MghrvtTYvlYkIdJgNz+IeIv25zmCyrVc0=) 4: 326131313a323963303a393030373a3a2f34382d3438203d3e203437323732.roa (hash: mQgf0c2qxO+CSOad0LCnhnhgjq+4MwfgKLn+HDbipdE=) 5: 326131313a323963303a396430303a3a2f34302d3430203d3e203537313130.roa (hash: W5ahDU5JyeZJt4qS2B+lziFP3DcHEZMUnP1JLsA2ZQY=) 6: CDC014669D381152AFB94B76936268BFF73E7D50.crl (hash: dZPH7UyfdwUclryrtdwXLUt0J/8jTfvfFYcR0Bpc594=) 7: 32398A1406A1C1D323CA63CB320FFD1EB4D1B0C4.cer (hash: wek+983bGhL1rzAGEQfUwkdPjxaB107zXZnMxNclcBQ=) 8: 326131313a323963303a393030303a3a2f34382d3438203d3e203437323732.roa (hash: UwO4hN+ZCdHk2YL18D2u+pPYoRMaN6p481osc8WCbJI=) 9: 326131313a323963303a396562303a3a2f34342d3434203d3e20323033303639.roa (hash: WInhbGmfRQKynls9luzccWHyMXhJsk9s09agweZa4us=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/CDC014669D381152AFB94B76936268BFF73E7D50.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/CDC014669D381152AFB94B76936268BFF73E7D50.mft rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/CDC014669D381152AFB94B76936268BFF73E7D50.cer rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 May 2024 14:16:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:84:a8:03:1f:ec:62:34:01:25:90:d5:ff:b8:2c:76:f4:ba:df:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDC014669D381152AFB94B76936268BFF73E7D50 Validity Not Before: May 16 22:30:26 2024 GMT Not After : May 18 02:28:26 2024 GMT Subject: CN=0E832DA6D7473D0271EC45B0E4D117CC67551FF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:33:35:49:76:b7:f9:8e:8b:dd:09:24:07:63: d0:84:9d:46:40:4f:7c:3b:72:a8:e8:e1:f2:08:50: a4:df:76:75:68:a2:ac:db:f6:8d:f7:9b:af:4a:b7: 59:2d:51:05:e8:7d:2c:14:a5:a9:19:da:0c:c1:c7: b3:83:58:b0:1a:8d:a6:14:80:41:76:e5:7a:5e:41: 27:cc:26:d7:16:c3:6c:9f:66:bf:f1:06:4f:cc:77: f0:e5:6b:d0:c2:14:11:f1:5d:84:90:0d:00:a7:7e: 82:6c:6d:08:4d:61:ab:9e:61:22:a4:0c:08:6d:23: 48:a5:ac:bc:33:d6:53:09:f0:f4:83:3c:cb:24:fb: 30:53:fc:8e:60:ca:32:cf:da:4f:46:d6:15:3f:a7: 7e:b4:8d:86:e5:9c:fa:34:ea:f7:8b:a6:13:53:a2: d4:d3:c0:b6:1e:6a:50:8f:c1:89:17:32:06:3d:b0: a3:4f:e1:a2:96:dc:d2:3e:d1:af:d3:88:8d:ee:34: fa:8d:90:2d:30:0e:1c:3f:fd:9b:99:e4:dc:85:fa: 69:44:a3:8b:d5:60:a2:21:c3:44:7b:f3:5d:fc:29: 05:c6:ad:29:b3:2e:f0:39:3c:80:46:af:fb:4f:89: 37:e6:0f:ac:11:fa:4c:e9:52:20:d8:d4:2b:fc:42: cc:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:83:2D:A6:D7:47:3D:02:71:EC:45:B0:E4:D1:17:CC:67:55:1F:F6 X509v3 Authority Key Identifier: keyid:CD:C0:14:66:9D:38:11:52:AF:B9:4B:76:93:62:68:BF:F7:3E:7D:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/CDC014669D381152AFB94B76936268BFF73E7D50.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/CDC014669D381152AFB94B76936268BFF73E7D50.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/CDC014669D381152AFB94B76936268BFF73E7D50.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:81:c3:91:8e:a2:49:05:2d:c6:73:4e:0b:77:3c:dc:e5:16: c0:c1:a8:21:9d:d4:c2:84:0a:15:b8:6d:b0:d8:58:5a:b8:80: c1:fd:12:8b:ee:3e:0e:1b:1c:9a:9e:5c:fb:a8:f4:88:9e:a1: 54:d8:20:5e:26:0d:1c:16:80:74:db:9b:2e:69:8f:64:97:26: f4:5c:e6:70:90:b5:31:d0:bb:06:44:d4:45:6f:3d:17:3a:6f: c2:c3:06:1b:0c:cb:c2:4c:b1:c2:29:53:29:12:d7:41:56:64: 29:86:8c:7e:da:f3:69:8c:74:c5:5b:bf:b0:57:c0:9e:8f:dd: fa:8a:66:7d:1b:ac:5f:28:9f:37:44:57:f4:d2:90:4b:5f:cc: 26:26:02:3e:2f:6f:57:0e:fd:a9:36:b7:da:33:1e:3d:e1:7b: 50:c3:d0:6d:4d:4d:93:18:08:ae:b2:7e:ee:a2:c9:1c:a9:2d: e4:02:3c:17:6e:84:5b:bd:7a:5e:5b:dc:dc:43:ad:40:49:fc: 0b:40:7e:fc:3a:44:b0:fe:36:92:28:0d:6d:40:a1:9f:39:65: 5b:94:93:42:ab:6a:2d:81:6f:e1:ae:0a:b0:41:bf:f9:e2:37: 42:8e:37:32:cb:aa:68:68:9b:88:31:ef:d7:a1:56:23:89:2f: 67:0d:4e:6b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUK4SoAx/sYjQBJZDV/7gsdvS63/0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RDMDE0NjY5RDM4MTE1MkFGQjk0Qjc2OTM2MjY4QkZG NzNFN0Q1MDAeFw0yNDA1MTYyMjMwMjZaFw0yNDA1MTgwMjI4MjZaMDMxMTAvBgNV BAMTKDBFODMyREE2RDc0NzNEMDI3MUVDNDVCMEU0RDExN0NDNjc1NTFGRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8MzVJdrf5jovdCSQHY9CEnUZA T3w7cqjo4fIIUKTfdnVooqzb9o33m69Kt1ktUQXofSwUpakZ2gzBx7ODWLAajaYU gEF25XpeQSfMJtcWw2yfZr/xBk/Md/Dla9DCFBHxXYSQDQCnfoJsbQhNYaueYSKk DAhtI0ilrLwz1lMJ8PSDPMsk+zBT/I5gyjLP2k9G1hU/p360jYblnPo06veLphNT otTTwLYealCPwYkXMgY9sKNP4aKW3NI+0a/TiI3uNPqNkC0wDhw//ZuZ5NyF+mlE o4vVYKIhw0R78138KQXGrSmzLvA5PIBGr/tPiTfmD6wR+kzpUiDY1Cv8Qsz1AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUDoMtptdHPQJx7EWw5NEXzGdVH/YwHwYDVR0j BBgwFoAUzcAUZp04EVKvuUt2k2Jov/c+fVAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1 YzdkLzIvQ0RDMDE0NjY5RDM4MTE1MkFGQjk0Qjc2OTM2MjY4QkZGNzNFN0Q1MC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84MTExNWJjNi0xMGY2LTRh ZjMtYmEwOS04YjY4N2E1NmZiZjUvMC9DREMwMTQ2NjlEMzgxMTUyQUZCOTRCNzY5 MzYyNjhCRkY3M0U3RDUwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzMyNTNkOTczLWQ1YmYtNDU0MS1iY2MxLTI3NjU0M2EyNWM3ZC8yL0NEQzAxNDY2 OUQzODExNTJBRkI5NEI3NjkzNjI2OEJGRjczRTdENTAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCxgcOR jqJJBS3Gc04Ldzzc5RbAwaghndTChAoVuG2w2FhauIDB/RKL7j4OGxyanlz7qPSI nqFU2CBeJg0cFoB025suaY9klyb0XOZwkLUx0LsGRNRFbz0XOm/CwwYbDMvCTLHC KVMpEtdBVmQphox+2vNpjHTFW7+wV8Cej936imZ9G6xfKJ83RFf00pBLX8wmJgI+ L29XDv2pNrfaMx494XtQw9BtTU2TGAiusn7uoskcqS3kAjwXboRbvXpeW9zcQ61A SfwLQH78OkSw/jaSKA1tQKGfOWVblJNCq2otgW/hrgqwQb/54jdCjjcyy6poaJuI Me/XoVYjiS9nDU5r -----END CERTIFICATE-----Generated at Thu May 16 23:40:43 2024 by rpki-client on console-ams.rpki-client.org