$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft File: 3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft (raw, json) Hash identifier: UdIfgJkCXeAThiUV64iGiO5g4o8ONCkfDKgDUFRck1g= Subject key identifier: FE:2A:87:3E:17:16:F4:77:09:C4:80:6D:87:16:DC:57:F1:87:B2:C4 Authority key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E Certificate issuer: /CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e Certificate serial: 1C87DAC0565CE243C6F56E8965974DF8EB7088E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft Manifest number: 83 Signing time: Mon 16 Sep 2024 07:20:09 +0000 Manifest this update: Mon 16 Sep 2024 07:15:09 +0000 Manifest next update: Tue 17 Sep 2024 09:33:09 +0000 Files and hashes: 1: 326131343a366634343a633066663a3a2f34382d3438203d3e203534363831.roa (hash: /yWZfagoJlrySMZHREX961tilL5M+CVEvfwwfIOvULs=) 2: 326131343a366634303a3a2f33322d3438203d3e20323030323432.roa (hash: qhoj8vou0d4ZtC5V1DKyyM7rrTWsmPFrHxQlmlsE9nQ=) 3: 326131343a366634343a623030623a3a2f34382d3438203d3e20313939353832.roa (hash: MYKoEmllVAyYKTmfRaWUIl1KQBpJiM51RTw82pBlZ/0=) 4: 04C92D9B1C8307B70C47290166D5989CEFABDCC4.cer (hash: 2lYT3gtC49tqrkD3HaWeKlDKSbKBNwQiIvyLld9YaQk=) 5: 326131343a366634343a623030623a3a2f34382d3438203d3e20313937393139.roa (hash: GcC1OOQic3vs9xDhV0qGl8u3fvABcPb7eRlO7suqV/c=) 6: 326131343a366634343a646561643a3a2f34382d3438203d3e203534363831.roa (hash: 4vV1NPLNtJ5Sem5fwMjyfRCUw2Hm0zuf9K0F0M5JmTU=) 7: 326131343a366634353a3a2f33362d3438203d3e203530323234.roa (hash: mvEo9ltQv4jrZCOh4EYz0yzaY9D43IlA4B9MK3lgwdw=) 8: AS200242.asa (hash: /5NvSpcQ/x8aSvoO6NYRrhog8M0eNa6qeZ1zapYt4P8=) 9: 326131343a366634343a623030623a3a2f34382d3438203d3e20323130363637.roa (hash: 5aLekRp0Z/nDkL3quTBST646++5Or5kPuLfIwZxGWPU=) 10: 326131343a366634303a3a2f32392d3438203d3e20323030323432.roa (hash: c5+sIF6SVWQEOk60+gid/kKFxdzO9Q59QB0rcaeUFAg=) 11: 326131343a366634343a636166653a3a2f34382d3438203d3e20323035373839.roa (hash: jDOaIGvPgjhenzPsT0baoWOtCBD2JafI5qghnSCs9Dw=) 12: 326131343a366634323a3a2f33312d3438203d3e20323030323432.roa (hash: TPvNwHsZw7UbSxFzI4ZEU2RQRB0eOXJX5J17JfLQpnQ=) 13: 3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl (hash: CKYpuLRnu2Zv9P03kF4LsM9Q7LMV+7Hcb3gX+R+M/a0=) 14: 326131343a366634343a623030623a3a2f34382d3438203d3e20323135343733.roa (hash: L8GmqvJ1QVmWAKscHOFBmFM5vDJ8hADh4YYnfT4JEAM=) 15: 326131343a366634353a623030623a3a2f34382d3438203d3e20323134373537.roa (hash: zQ/yzhK7qvzoSsvDcyClVn7AKwYrbUYHcG3F64niJUE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 17 Sep 2024 04:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:87:da:c0:56:5c:e2:43:c6:f5:6e:89:65:97:4d:f8:eb:70:88:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e Validity Not Before: Sep 16 07:15:09 2024 GMT Not After : Sep 17 09:33:09 2024 GMT Subject: CN=FE2A873E1716F47709C4806D8716DC57F187B2C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:66:2f:49:0a:06:9d:3f:d5:8a:1e:00:3c:00: 09:5d:ff:44:dc:53:c5:b4:5a:83:cf:83:b5:32:8e: 86:ee:41:c4:25:ff:35:ab:62:be:62:e0:85:a8:eb: 88:a5:d3:92:fb:0c:fd:bf:fb:bf:88:69:39:40:4b: ea:b9:31:f0:f5:cd:ee:b3:ec:bc:10:b8:6b:c5:83: ca:41:54:6d:4f:40:de:26:0e:09:3b:40:69:ba:a6: 34:62:ce:70:5e:d1:b9:fb:7b:63:f5:be:92:6b:cc: e5:a6:34:9e:20:40:8f:2a:89:d0:a6:ac:20:b8:1c: bb:29:ad:a4:ff:88:63:da:76:31:a3:5b:d7:ea:be: 78:1c:66:17:64:1e:a9:74:d4:f9:34:73:15:0b:b4: 7c:e1:1a:52:c0:47:b0:0b:a9:70:29:20:e3:07:56: 3a:00:40:58:f9:f9:cb:85:f7:0a:26:49:fa:0b:af: 26:b2:91:b1:2d:91:00:75:56:56:41:01:4a:35:83: ee:1f:90:e3:87:cb:b2:28:1e:e1:e1:2d:a6:68:9a: 95:1b:0f:cd:d7:81:be:02:8d:3b:a0:fd:dc:e2:44: bd:72:71:c1:6a:be:bf:a3:76:50:64:66:64:4b:63: 05:a8:3c:ac:08:3d:83:1b:34:19:39:ab:02:38:3d: 69:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:2A:87:3E:17:16:F4:77:09:C4:80:6D:87:16:DC:57:F1:87:B2:C4 X509v3 Authority Key Identifier: keyid:3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:a0:d6:d1:d3:1b:aa:da:4e:f8:af:d9:4a:d0:8c:50:51:81: dc:ef:d1:4a:63:87:e3:18:1d:2f:50:65:8b:35:c9:77:ae:f4: 68:50:e4:e2:3c:2d:0e:ab:6c:ce:54:26:74:0f:dc:33:7d:42: 16:54:60:9d:4a:db:b5:1a:18:8b:d4:fa:97:e0:98:5e:17:8e: ba:ea:4f:60:ef:57:98:64:c5:03:00:9d:bd:5d:5b:8f:ce:3b: cb:b9:6c:d0:27:cf:0d:c4:fc:1b:a6:48:82:d6:f5:fc:27:b0: fe:5b:46:65:4d:5c:e7:01:85:e0:23:0c:8e:a0:ad:c7:29:e0: e7:0a:41:9d:94:18:1d:f9:f7:8b:4a:31:ce:c3:51:ca:b4:ae: f0:8a:64:59:b7:0f:ba:5e:af:96:6f:bb:0e:42:15:03:05:39: b4:56:47:b9:f5:b8:09:9e:ac:0f:33:bb:9a:bd:64:19:2c:30: 45:2d:4d:eb:01:ec:27:d4:69:4a:14:29:33:6d:3a:3a:37:c6: 28:4e:e2:37:d3:b8:1e:72:fc:30:f7:db:86:15:1a:46:35:e5: 11:9f:69:9a:7a:08:27:fb:4c:62:d3:b7:56:6d:ee:24:ad:cf: d4:b9:7b:56:48:46:2c:af:2a:cd:41:1d:a3:0a:87:42:e2:22: 98:81:d9:ad -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUHIfawFZc4kPG9W6JZZdN+OtwiOYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2VlZWJiOTQ2YThkMjFkNDA4M2M5M2RjMDljZWU1NTdi YjJhYzMyZTAeFw0yNDA5MTYwNzE1MDlaFw0yNDA5MTcwOTMzMDlaMDMxMTAvBgNV BAMTKEZFMkE4NzNFMTcxNkY0NzcwOUM0ODA2RDg3MTZEQzU3RjE4N0IyQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQZi9JCgadP9WKHgA8AAld/0Tc U8W0WoPPg7UyjobuQcQl/zWrYr5i4IWo64il05L7DP2/+7+IaTlAS+q5MfD1ze6z 7LwQuGvFg8pBVG1PQN4mDgk7QGm6pjRiznBe0bn7e2P1vpJrzOWmNJ4gQI8qidCm rCC4HLspraT/iGPadjGjW9fqvngcZhdkHql01Pk0cxULtHzhGlLAR7ALqXApIOMH VjoAQFj5+cuF9womSfoLryaykbEtkQB1VlZBAUo1g+4fkOOHy7IoHuHhLaZompUb D83Xgb4CjTug/dziRL1yccFqvr+jdlBkZmRLYwWoPKwIPYMbNBk5qwI4PWlJAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU/iqHPhcW9HcJxIBthxbcV/GHssQwHwYDVR0j BBgwFoAUPu67lGqNIdQIPJPcCc7lV7sqwy4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmZmN2E5ODktZWNkZi00M2Q2LTg2ZTEtZjZjMzkzNWI5 YjNkLzQvM0VFRUJCOTQ2QThEMjFENDA4M0M5M0RDMDlDRUU1NTdCQjJBQzMyRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1B1NjdsR3FOSWRRSVBKUGNDYzdsVjdz cXd5NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82ZmY3YTk4OS1l Y2RmLTQzZDYtODZlMS1mNmMzOTM1YjliM2QvNC8zRUVFQkI5NDZBOEQyMUQ0MDgz QzkzREMwOUNFRTU1N0JCMkFDMzJFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKaDW0dMbqtpO+K/ZStCM UFGB3O/RSmOH4xgdL1BlizXJd670aFDk4jwtDqtszlQmdA/cM31CFlRgnUrbtRoY i9T6l+CYXheOuupPYO9XmGTFAwCdvV1bj847y7ls0CfPDcT8G6ZIgtb1/Cew/ltG ZU1c5wGF4CMMjqCtxyng5wpBnZQYHfn3i0oxzsNRyrSu8IpkWbcPul6vlm+7DkIV AwU5tFZHufW4CZ6sDzO7mr1kGSwwRS1N6wHsJ9RpShQpM206OjfGKE7iN9O4HnL8 MPfbhhUaRjXlEZ9pmnoIJ/tMYtO3Vm3uJK3P1Ll7VkhGLK8qzUEdowqHQuIimIHZ rQ== -----END CERTIFICATE-----Generated at Mon Sep 16 09:12:48 2024 by rpki-client on console-fra.rpki-client.org