$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.mft File: B89BFA84DC5AFE05076A0800B960FEA22FC90D09.mft (raw, json) Hash identifier: wrFZKgKj8Gi7UdOcFAX92cx4NoSocEu4uRCjFMp1bBU= Subject key identifier: 5D:AF:61:CC:04:8D:74:DF:8D:14:F7:4D:A9:AB:30:00:85:2C:15:7D Authority key identifier: B8:9B:FA:84:DC:5A:FE:05:07:6A:08:00:B9:60:FE:A2:2F:C9:0D:09 Certificate issuer: /CN=B89BFA84DC5AFE05076A0800B960FEA22FC90D09 Certificate serial: 3481D938C4C39FCC3AEEF9A51463E808083AD059 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.mft Manifest number: C4 Signing time: Thu 19 Sep 2024 09:16:22 +0000 Manifest this update: Thu 19 Sep 2024 09:11:22 +0000 Manifest next update: Fri 20 Sep 2024 12:17:22 +0000 Files and hashes: 1: 326130613a363034343a383730333a3a2f34382d3438203d3e20323134353138.roa (hash: WxEbtOA91d9OHO9aT2g6iowjYN6K5+szyzBhDcVl8YM=) 2: 326130613a363034343a386666663a3a2f34382d3438203d3e2038303735.roa (hash: 1zLEB1ySqLG6O8dK77EoS7uCQ9LHKZ/5i0AbZm+a9vI=) 3: 326130613a363034343a386666303a3a2f34342d3438203d3e20323134333933.roa (hash: 5mtKnsi0eiuLOj/vuPgtBHrR4ubrh7kZVKE+RU5MUcA=) 4: 326130613a363034343a386666653a3a2f34382d3438203d3e2038303735.roa (hash: EXuK08+oqHk8pQl69db4apbuttuLFsyV61jf2S7CeW0=) 5: 92E983F766C144A0CEAC0B6FC5C20934091D7E02.cer (hash: H13hcP/r4wxGw08Jc5sOHEEMFksM7Dg89XlhlYKqWC0=) 6: 326130613a363034343a383530303a3a2f34302d3430203d3e20323134383039.roa (hash: BW6ky+6CFugwvR5bM9gBM+2MBg3Zgjy+mVE9dRIKmpw=) 7: 326130613a363034343a383030303a3a2f33362d3438203d3e20323135363035.roa (hash: rfBVKVeDolW2xuJXtIBW3+sb6n+RTsWvOaIU0c6mIxY=) 8: B89BFA84DC5AFE05076A0800B960FEA22FC90D09.crl (hash: MlvLgr2N3fzHi/HFucLEMkSYR4sN5CL34APZILMk9wE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.crl rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.mft rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.cer rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 20 Sep 2024 07:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:81:d9:38:c4:c3:9f:cc:3a:ee:f9:a5:14:63:e8:08:08:3a:d0:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B89BFA84DC5AFE05076A0800B960FEA22FC90D09 Validity Not Before: Sep 19 09:11:22 2024 GMT Not After : Sep 20 12:17:22 2024 GMT Subject: CN=5DAF61CC048D74DF8D14F74DA9AB3000852C157D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fb:8a:3e:a0:0c:5e:aa:7d:82:e8:f9:67:f9: c6:f8:02:11:0f:03:9c:47:9f:68:1b:a1:44:8f:80: 09:1b:77:aa:d5:3b:b6:fb:4e:3d:f5:82:6b:b6:d6: 7f:ed:5c:9b:2d:76:dd:25:89:d7:b9:e5:0d:ab:ba: f9:d1:17:cf:a9:f9:10:5c:1a:f7:29:5f:75:02:87: 2b:52:b4:40:ca:80:86:3c:58:6f:8d:0e:5b:d1:8b: 4f:10:bd:7d:45:4d:61:a1:45:82:1d:f3:84:30:cc: 21:62:37:8b:7d:d6:f8:92:43:5e:71:d7:54:7e:eb: 08:f6:19:94:23:10:40:90:6e:8c:88:bf:5d:25:47: c2:e3:c9:a3:5c:a4:83:fc:4c:2e:70:53:f1:1d:44: 36:b6:81:a6:ef:3a:b8:75:0e:8b:c7:fc:e6:ba:51: b0:72:af:fa:08:27:bd:3e:9c:45:17:39:aa:a7:e0: b9:11:41:82:1c:8e:8a:56:8c:20:16:fe:f4:33:bc: 63:4a:3d:ef:f0:ec:5c:5c:8b:45:c8:ef:a8:94:cb: 53:4d:3c:c3:87:ef:e4:ba:e1:cd:40:74:db:f9:77: e0:dc:e5:43:78:3b:d9:ec:fa:c7:33:33:5c:17:64: 80:1a:a9:57:1d:f4:d8:01:42:75:ce:d1:fe:45:8c: dd:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:AF:61:CC:04:8D:74:DF:8D:14:F7:4D:A9:AB:30:00:85:2C:15:7D X509v3 Authority Key Identifier: keyid:B8:9B:FA:84:DC:5A:FE:05:07:6A:08:00:B9:60:FE:A2:2F:C9:0D:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:90:71:cc:b7:e4:fb:3a:d2:a3:91:18:19:8f:31:80:60:ed: fd:dd:a3:56:00:d7:6c:70:d0:8b:74:db:17:df:51:4f:30:c9: 63:18:9f:d4:cf:56:17:31:3a:42:6e:71:1a:61:02:a1:03:e4: 67:cb:47:a2:c3:2a:7e:aa:05:e9:b9:a1:b8:43:98:64:fe:78: b3:80:56:d6:20:66:c3:64:61:be:7a:ae:0b:6e:8d:59:b1:a6: a1:35:02:d0:e4:50:61:64:4a:7b:0a:03:b2:fe:b5:87:52:13: 68:51:70:a3:83:00:30:51:08:17:ef:08:80:6d:46:cf:92:e9: 66:25:63:03:3d:8e:a1:99:c6:6f:7c:c9:e0:23:20:c9:db:30: 67:25:83:5b:4a:85:3e:72:03:7b:b3:a6:e7:73:dd:f2:e6:46: f8:a1:2d:2b:42:8e:c8:80:dc:e0:bf:72:4f:27:5d:3f:a8:d8: b8:12:4b:6d:68:88:dc:ba:83:b7:c4:67:9b:2d:d7:b3:ad:42: de:11:2a:52:3a:aa:25:3b:dd:37:bf:32:52:ae:ff:cc:06:7f: b3:71:6e:18:88:82:78:93:6e:27:b6:b2:9e:eb:f9:24:c8:a5: 69:94:68:61:65:17:e7:7d:66:e7:96:5e:44:48:ed:4d:ac:1f: ca:96:c4:6c -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUNIHZOMTDn8w67vmlFGPoCAg60FkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg5QkZBODREQzVBRkUwNTA3NkEwODAwQjk2MEZFQTIy RkM5MEQwOTAeFw0yNDA5MTkwOTExMjJaFw0yNDA5MjAxMjE3MjJaMDMxMTAvBgNV BAMTKDVEQUY2MUNDMDQ4RDc0REY4RDE0Rjc0REE5QUIzMDAwODUyQzE1N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt+4o+oAxeqn2C6Pln+cb4AhEP A5xHn2gboUSPgAkbd6rVO7b7Tj31gmu21n/tXJstdt0lide55Q2ruvnRF8+p+RBc GvcpX3UChytStEDKgIY8WG+NDlvRi08QvX1FTWGhRYId84QwzCFiN4t91viSQ15x 11R+6wj2GZQjEECQboyIv10lR8LjyaNcpIP8TC5wU/EdRDa2gabvOrh1DovH/Oa6 UbByr/oIJ70+nEUXOaqn4LkRQYIcjopWjCAW/vQzvGNKPe/w7Fxci0XI76iUy1NN PMOH7+S64c1AdNv5d+Dc5UN4O9ns+sczM1wXZIAaqVcd9NgBQnXO0f5FjN05AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUXa9hzASNdN+NFPdNqaswAIUsFX0wHwYDVR0j BBgwFoAUuJv6hNxa/gUHaggAuWD+oi/JDQkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDkxYTQzYmMtNzZlYy00YWJlLWJhN2QtZTczZTkwZDY2 MmNiLzEvQjg5QkZBODREQzVBRkUwNTA3NkEwODAwQjk2MEZFQTIyRkM5MEQwOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1 NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC9CODlCRkE4NERDNUFGRTA1MDc2QTA4MDBC OTYwRkVBMjJGQzkwRDA5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzQ5MWE0M2JjLTc2ZWMtNGFiZS1iYTdkLWU3M2U5MGQ2NjJjYi8xL0I4OUJGQTg0 REM1QUZFMDUwNzZBMDgwMEI5NjBGRUEyMkZDOTBEMDkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAJkHHM t+T7OtKjkRgZjzGAYO393aNWANdscNCLdNsX31FPMMljGJ/Uz1YXMTpCbnEaYQKh A+Rny0eiwyp+qgXpuaG4Q5hk/nizgFbWIGbDZGG+eq4Lbo1ZsaahNQLQ5FBhZEp7 CgOy/rWHUhNoUXCjgwAwUQgX7wiAbUbPkulmJWMDPY6hmcZvfMngIyDJ2zBnJYNb SoU+cgN7s6bnc93y5kb4oS0rQo7IgNzgv3JPJ10/qNi4EkttaIjcuoO3xGebLdez rULeESpSOqolO903vzJSrv/MBn+zcW4YiIJ4k24ntrKe6/kkyKVplGhhZRfnfWbn ll5ESO1NrB/KlsRs -----END CERTIFICATE-----Generated at Thu Sep 19 10:53:22 2024 by rpki-client on console-fra.rpki-client.org