$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft File: 25827D84056B8444CC2A7842759035354B8416BC.mft (raw, json) Hash identifier: QKQuhYRkLg8rC96VN/NCJNqaD/F4/SpgqszoVpqrfoo= Subject key identifier: A1:49:4E:28:F6:8B:1B:7F:DB:09:01:46:65:DA:B9:0C:0B:F5:A2:D5 Authority key identifier: 25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC Certificate issuer: /CN=25827d84056b8444cc2a7842759035354b8416bc Certificate serial: 2D510803A694FACD39E5C002A9E9A00636ED4AC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft Manifest number: D6 Signing time: Thu 21 Nov 2024 00:45:36 +0000 Manifest this update: Thu 21 Nov 2024 00:40:36 +0000 Manifest next update: Fri 22 Nov 2024 03:13:36 +0000 Files and hashes: 1: 326131343a313463313a313a3a2f34382d3438203d3e20323135353133.roa (hash: a6Mhvmm/Ku5eIjq2ZnRS3F2KxCd3f1F6D7ctM0zUaow=) 2: 58E92F2C3859C2D0EF322A871688CB22928E2F3E.cer (hash: gYiT3SS0bbmQQSp3p/LPeJzfbx3ujd90DskZO9GZ0PQ=) 3: E2E43EA1DD5C14A6A6BB1547F84650E519114735.cer (hash: IA1rGBWCtpPsRNt7cNimwfxrMpdpSeLkbuvcCHy2vws=) 4: 25827D84056B8444CC2A7842759035354B8416BC.crl (hash: eExX41wEn2hBLmayZsOtlPX3no77oEL2JLneytkaOOQ=) 5: 326131343a313463303a3a2f34382d3438203d3e20323037343837.roa (hash: zXUufmV0ZgYM4pY99hXXb9hrvjsbvgvghLPZeNn0rqA=) 6: AS207487.asa (hash: wvoYcI1W32hLabtln7gZO5HpYH9tI/2cFCOigF0n8nY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 21 Nov 2024 18:58:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:51:08:03:a6:94:fa:cd:39:e5:c0:02:a9:e9:a0:06:36:ed:4a:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25827d84056b8444cc2a7842759035354b8416bc Validity Not Before: Nov 21 00:40:36 2024 GMT Not After : Nov 22 03:13:36 2024 GMT Subject: CN=A1494E28F68B1B7FDB09014665DAB90C0BF5A2D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:60:78:0c:04:02:f3:d4:a7:a8:83:0a:93:bd: 07:56:39:aa:c4:0b:59:a5:48:0f:40:8f:af:6f:1f: 95:3e:68:bb:00:95:b5:f2:96:52:32:64:d6:09:ad: e8:2c:16:53:aa:d5:49:6f:94:4f:46:0e:8d:0c:86: 35:11:af:9f:63:6b:43:27:58:82:95:81:27:1c:05: 7c:7e:30:49:d3:92:64:42:d3:48:af:2c:27:de:ac: 3b:56:6b:38:91:d7:a7:3b:ec:61:0c:1b:94:5a:a2: a2:d1:02:09:7e:f7:c8:56:c4:69:67:a3:da:0a:66: af:bb:98:6f:9c:6c:97:8c:07:ab:47:58:81:9b:d0: 43:f7:55:bf:84:70:0d:b6:d6:95:ab:2c:43:33:5f: 87:15:e7:60:ff:56:69:5d:c7:2b:e0:c1:13:f4:aa: f0:94:6d:40:41:6e:aa:22:e7:74:28:ac:ef:46:db: 7c:db:43:e5:30:ae:87:fa:85:b6:93:93:f7:65:f3: 07:20:55:73:dd:e0:9e:9f:c0:20:bf:a6:61:8d:74: 99:ca:00:6f:a8:eb:ec:88:5e:d9:56:ba:5a:ef:e3: cb:bc:d4:4a:ef:fb:37:fb:6e:53:ad:33:65:d6:5a: 5c:48:05:12:be:fd:7a:67:cd:43:fe:6d:69:18:ac: 57:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:49:4E:28:F6:8B:1B:7F:DB:09:01:46:65:DA:B9:0C:0B:F5:A2:D5 X509v3 Authority Key Identifier: keyid:25:82:7D:84:05:6B:84:44:CC:2A:78:42:75:90:35:35:4B:84:16:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYJ9hAVrhETMKnhCdZA1NUuEFrw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/69bbfdcf-35cd-4524-8ffa-3005b0b69a29/0/25827D84056B8444CC2A7842759035354B8416BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:58:60:f4:e5:69:ef:86:85:64:91:51:63:8a:0a:02:fe:d8: fa:6b:ce:e9:3b:03:3d:53:70:e6:8b:d8:6a:6e:58:a6:3c:81: 86:51:04:81:5a:31:a3:49:b1:f8:5e:d5:41:eb:bb:87:86:f1: 59:56:e0:6f:77:a3:d3:56:98:49:06:45:0e:9c:30:21:e8:d6: b6:1d:7f:78:8d:7c:20:c8:72:eb:4b:26:75:f5:99:15:76:9e: fa:f1:df:c8:fa:6d:6c:b8:53:b2:64:c6:dd:58:20:99:36:5a: 17:c3:b4:26:16:e2:d4:72:f0:7d:19:4b:9f:e9:55:b8:b8:89: a4:6a:4e:b0:46:5d:fd:eb:4b:8c:d2:97:4a:a0:5d:e2:1c:e5: 7a:b3:9a:75:01:24:4f:db:4e:9e:1e:a1:55:5b:27:99:c4:df: d7:a5:cb:47:9a:c4:05:5e:7d:3b:91:dd:5a:31:53:55:c9:a7: 6c:80:95:6c:42:41:bf:28:e9:2d:87:4a:2f:7b:ec:e5:91:58: 4b:fe:9b:94:45:c1:c3:20:25:8a:90:c7:34:a4:45:46:7f:66: d9:f5:6a:77:eb:0b:c5:98:d3:9b:a7:a0:41:0f:10:1a:18:21: 46:a9:12:81:6e:6e:28:4c:b7:3d:cb:df:ac:78:1f:6f:d2:72: 62:cf:49:ec -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIULVEIA6aU+s055cACqemgBjbtSscwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU4MjdkODQwNTZiODQ0NGNjMmE3ODQyNzU5MDM1MzU0 Yjg0MTZiYzAeFw0yNDExMjEwMDQwMzZaFw0yNDExMjIwMzEzMzZaMDMxMTAvBgNV BAMTKEExNDk0RTI4RjY4QjFCN0ZEQjA5MDE0NjY1REFCOTBDMEJGNUEyRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5YHgMBALz1KeogwqTvQdWOarE C1mlSA9Aj69vH5U+aLsAlbXyllIyZNYJregsFlOq1UlvlE9GDo0MhjURr59ja0Mn WIKVgSccBXx+MEnTkmRC00ivLCferDtWaziR16c77GEMG5RaoqLRAgl+98hWxGln o9oKZq+7mG+cbJeMB6tHWIGb0EP3Vb+EcA221pWrLEMzX4cV52D/VmldxyvgwRP0 qvCUbUBBbqoi53QorO9G23zbQ+Uwrof6hbaTk/dl8wcgVXPd4J6fwCC/pmGNdJnK AG+o6+yIXtlWulrv48u81Erv+zf7blOtM2XWWlxIBRK+/XpnzUP+bWkYrFfTAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUoUlOKPaLG3/bCQFGZdq5DAv1otUwHwYDVR0j BBgwFoAUJYJ9hAVrhETMKnhCdZA1NUuEFrwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjliYmZkY2YtMzVjZC00NTI0LThmZmEtMzAwNWIwYjY5 YTI5LzAvMjU4MjdEODQwNTZCODQ0NENDMkE3ODQyNzU5MDM1MzU0Qjg0MTZCQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0pZSjloQVZyaEVUTUtuaENkWkExTlV1 RUZydy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OWJiZmRjZi0z NWNkLTQ1MjQtOGZmYS0zMDA1YjBiNjlhMjkvMC8yNTgyN0Q4NDA1NkI4NDQ0Q0My QTc4NDI3NTkwMzUzNTRCODQxNkJDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATlhg9OVp74aFZJFRY4oK Av7Y+mvO6TsDPVNw5ovYam5YpjyBhlEEgVoxo0mx+F7VQeu7h4bxWVbgb3ej01aY SQZFDpwwIejWth1/eI18IMhy60smdfWZFXae+vHfyPptbLhTsmTG3VggmTZaF8O0 Jhbi1HLwfRlLn+lVuLiJpGpOsEZd/etLjNKXSqBd4hzlerOadQEkT9tOnh6hVVsn mcTf16XLR5rEBV59O5HdWjFTVcmnbICVbEJBvyjpLYdKL3vs5ZFYS/6blEXBwyAl ipDHNKRFRn9m2fVqd+sLxZjTm6egQQ8QGhghRqkSgW5uKEy3PcvfrHgfb9JyYs9J 7A== -----END CERTIFICATE-----Generated at Thu Nov 21 02:01:30 2024 by rpki-client on console-fra.rpki-client.org