$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/3/1EC805E37C5B53351C6A182763530A50D9308C7E.mft File: 1EC805E37C5B53351C6A182763530A50D9308C7E.mft (raw, json) Hash identifier: l7+46wltLETPBpjE38H93zWh1GZxyPd/X0l/Kej2Ftw= Subject key identifier: DC:87:41:EE:C6:71:94:67:D9:02:FB:F3:6E:45:8B:C1:7C:87:69:59 Authority key identifier: 1E:C8:05:E3:7C:5B:53:35:1C:6A:18:27:63:53:0A:50:D9:30:8C:7E Certificate issuer: /CN=1ec805e37c5b53351c6a182763530a50d9308c7e Certificate serial: 27408CF01CCD2360C72CACBB37CB95D81B2609DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HsgF43xbUzUcahgnY1MKUNkwjH4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/3/1EC805E37C5B53351C6A182763530A50D9308C7E.mft Manifest number: 04B3 Signing time: Wed 15 Jan 2025 14:13:22 +0000 Manifest this update: Wed 15 Jan 2025 14:08:22 +0000 Manifest next update: Thu 16 Jan 2025 17:53:22 +0000 Files and hashes: 1: AS47272.asa (hash: r0zTarU+kuXJRsYezBzGnrfCx9URXJttfE4KUuV9zss=) 2: 323030313a3637633a6439303a3a2f34382d313238203d3e203437323732.roa (hash: qsZmRVCIb9xrptyGq4LMD66U0ZsMiSdaKtlFWDj+fOk=) 3: 323030313a3637633a6438343a3a2f34382d313238203d3e203437323732.roa (hash: zAIz/6PrKY+PT044DrbJcMj6yEBb5+L5X0JVIU/xOe0=) 4: 323030313a3637633a6438383a3a2f34382d313238203d3e203437323732.roa (hash: u7gkg0ioA1jBNqlBEo5W2D4JPvOjIz41yHhpEkdqJZM=) 5: 323030313a3637633a6438633a3a2f34382d313238203d3e203437323732.roa (hash: dl0PTSDr5J0KB1na5PGRTf1dNkrbYDvNEMiS80IVTbk=) 6: 1EC805E37C5B53351C6A182763530A50D9308C7E.crl (hash: QIdWcnrqv275/XKdie//hPaOc0tMeylHMybiBVlrFsA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/3/1EC805E37C5B53351C6A182763530A50D9308C7E.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/3/1EC805E37C5B53351C6A182763530A50D9308C7E.mft rsync://rpki.ripe.net/repository/DEFAULT/HsgF43xbUzUcahgnY1MKUNkwjH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 16 Jan 2025 15:35:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:40:8c:f0:1c:cd:23:60:c7:2c:ac:bb:37:cb:95:d8:1b:26:09:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ec805e37c5b53351c6a182763530a50d9308c7e Validity Not Before: Jan 15 14:08:22 2025 GMT Not After : Jan 16 17:53:22 2025 GMT Subject: CN=DC8741EEC6719467D902FBF36E458BC17C876959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:21:98:06:39:04:71:dd:d5:fe:aa:d6:7f:2f: 35:47:b5:d1:d4:5a:05:21:b3:d7:24:75:d0:17:f7: 2f:b8:ea:30:97:5b:9f:aa:5f:5d:d1:3b:01:7c:9c: d7:87:f0:e9:37:a9:75:58:d4:90:38:77:17:ff:a5: 2d:71:ba:64:3f:34:05:9a:d8:9b:18:5f:3e:d5:cb: 58:d1:3f:b0:15:d5:c8:c6:a0:22:6d:3b:ce:01:53: 12:36:a2:f1:7b:fd:c7:66:5e:55:52:8d:cf:64:84: 70:07:21:25:d4:f6:94:23:7d:67:99:f9:2b:9c:e5: 9a:95:f5:38:72:86:aa:73:24:1b:4a:0b:a4:cf:44: 80:1d:f8:fa:cd:30:a7:f7:01:3c:3f:2d:8c:7e:ba: 3a:65:1c:a1:67:05:3d:6a:69:0f:30:78:7d:cd:d6: 7f:1b:e2:e2:fe:c0:38:35:e3:e1:08:26:68:72:4c: db:54:be:29:63:a5:b1:4a:e2:b7:57:f5:84:16:3d: 23:6b:da:eb:49:ce:0f:9f:36:32:7d:88:b7:24:aa: 95:2b:6e:69:4f:32:33:6d:97:bc:92:0b:02:aa:35: d0:55:4b:43:ce:5f:02:fc:0f:32:24:c9:e7:e4:29: 3c:70:b4:04:bf:e4:89:65:d7:e9:de:12:91:ba:78: f1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:87:41:EE:C6:71:94:67:D9:02:FB:F3:6E:45:8B:C1:7C:87:69:59 X509v3 Authority Key Identifier: keyid:1E:C8:05:E3:7C:5B:53:35:1C:6A:18:27:63:53:0A:50:D9:30:8C:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/3/1EC805E37C5B53351C6A182763530A50D9308C7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HsgF43xbUzUcahgnY1MKUNkwjH4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/3/1EC805E37C5B53351C6A182763530A50D9308C7E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:f1:2d:b2:e3:f5:6c:d2:20:51:af:e9:b0:5d:b5:6d:af:c1: 33:4d:d0:90:61:19:08:bc:77:88:f9:54:96:4f:16:f4:8e:65: ac:7c:fd:97:49:da:75:08:f2:5b:28:0a:92:6a:f6:f7:ee:85: b6:4a:6f:dd:ea:b4:d1:d2:c5:18:e8:f5:54:63:02:6a:4c:7b: f7:af:95:14:83:e0:71:f5:84:a9:ae:42:c7:32:74:a5:aa:b4: a8:be:1f:d8:fc:c2:27:06:23:dc:71:50:a9:73:a2:f7:0a:06: 29:d5:04:c0:e3:bd:21:f3:37:8e:22:92:35:79:43:8d:5a:a9: 0c:cc:d9:a4:96:9b:cb:03:67:b2:4d:9d:86:7b:fd:53:17:c9: 58:47:d4:ab:7c:88:04:7d:b4:65:1b:59:03:7b:ba:30:25:72: 81:0b:b3:77:4d:8a:bb:36:b9:2f:29:cd:b2:d3:20:7f:de:12: 5e:8b:51:0c:92:cd:45:6f:e4:21:6c:b8:58:4b:f4:48:25:04: a7:6b:ea:a0:1e:10:ed:38:58:b4:42:82:de:36:2a:4d:5a:33: 48:fa:03:84:76:c5:b6:d4:53:18:80:dd:80:de:ee:16:7e:70: ed:8c:b1:67:f9:63:65:a0:e2:4b:d1:71:e3:c8:b6:d5:25:68: d4:af:1c:f2 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUJ0CM8BzNI2DHLKy7N8uV2BsmCd0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMWVjODA1ZTM3YzViNTMzNTFjNmExODI3NjM1MzBhNTBk OTMwOGM3ZTAeFw0yNTAxMTUxNDA4MjJaFw0yNTAxMTYxNzUzMjJaMDMxMTAvBgNV BAMTKERDODc0MUVFQzY3MTk0NjdEOTAyRkJGMzZFNDU4QkMxN0M4NzY5NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjIZgGOQRx3dX+qtZ/LzVHtdHU WgUhs9ckddAX9y+46jCXW5+qX13ROwF8nNeH8Ok3qXVY1JA4dxf/pS1xumQ/NAWa 2JsYXz7Vy1jRP7AV1cjGoCJtO84BUxI2ovF7/cdmXlVSjc9khHAHISXU9pQjfWeZ +Suc5ZqV9ThyhqpzJBtKC6TPRIAd+PrNMKf3ATw/LYx+ujplHKFnBT1qaQ8weH3N 1n8b4uL+wDg14+EIJmhyTNtUviljpbFK4rdX9YQWPSNr2utJzg+fNjJ9iLckqpUr bmlPMjNtl7ySCwKqNdBVS0POXwL8DzIkyefkKTxwtAS/5Ill1+neEpG6ePHFAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU3IdB7sZxlGfZAvvzbkWLwXyHaVkwHwYDVR0j BBgwFoAUHsgF43xbUzUcahgnY1MKUNkwjH4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1 YzdkLzMvMUVDODA1RTM3QzVCNTMzNTFDNkExODI3NjM1MzBBNTBEOTMwOEM3RS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0hzZ0Y0M3hiVXpVY2FoZ25ZMU1LVU5r d2pINC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1k NWJmLTQ1NDEtYmNjMS0yNzY1NDNhMjVjN2QvMy8xRUM4MDVFMzdDNUI1MzM1MUM2 QTE4Mjc2MzUzMEE1MEQ5MzA4QzdFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlfEtsuP1bNIgUa/psF21 ba/BM03QkGEZCLx3iPlUlk8W9I5lrHz9l0nadQjyWygKkmr29+6Ftkpv3eq00dLF GOj1VGMCakx796+VFIPgcfWEqa5CxzJ0paq0qL4f2PzCJwYj3HFQqXOi9woGKdUE wOO9IfM3jiKSNXlDjVqpDMzZpJabywNnsk2dhnv9UxfJWEfUq3yIBH20ZRtZA3u6 MCVygQuzd02Kuza5LynNstMgf94SXotRDJLNRW/kIWy4WEv0SCUEp2vqoB4Q7ThY tEKC3jYqTVozSPoDhHbFttRTGIDdgN7uFn5w7YyxZ/ljZaDiS9Fx48i21SVo1K8c 8g== -----END CERTIFICATE-----Generated at Wed Jan 15 20:50:50 2025 by rpki-client on console-ams.rpki-client.org