$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft File: 42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft (raw, json) Hash identifier: VigbYMhUmbHOR2iMX5AfDqsnvuhpUyYPxCJJbdkID9Q= Subject key identifier: F8:A2:86:B4:2B:CC:8E:8F:0F:2A:C2:54:C9:B4:B6:4C:A9:99:5D:65 Authority key identifier: 42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57 Certificate issuer: /CN=42e508fba8960f48071b119accbf57bdbf3a8057 Certificate serial: 65019BD81798935ABA976A55B716ACE4F824C1FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft Manifest number: 4D Signing time: Sun 15 Sep 2024 22:48:31 +0000 Manifest this update: Sun 15 Sep 2024 22:43:31 +0000 Manifest next update: Tue 17 Sep 2024 01:43:31 +0000 Files and hashes: 1: 326130623a346530343a623030623a3a2f34382d3438203d3e20323135373531.roa (hash: WB7UOWeGDAbNrwBGx6LHWwXgtP8O9AMGtOutni+re9k=) 2: 326130623a346530343a333333333a3a2f34382d3438203d3e20323135373531.roa (hash: I9qWgwFJQ/jNgvy2DL5wzaoDqY36P4MLQJbgQQaudr8=) 3: 326130623a346530343a34323a3a2f34382d3438203d3e20323135373531.roa (hash: UL7DNtF20elweRhYnvNGeqZFlJG6ugUMJNxN3qgPglg=) 4: D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer (hash: J14RTmYMzwenBicjUfmrjyMu93QKXFK8qxck8woMFpU=) 5: 326130623a346530343a3a2f34382d3438203d3e20323135373531.roa (hash: f3x/pqwo0LrKdmMgvMJV5lxshuppztf6Fl24zgXV+Vc=) 6: 326130623a346530343a626565663a3a2f34382d3438203d3e20323135373531.roa (hash: pp5dluoWAlvwSsAcdfBtk6QtidffMQIErBn+rNV4dXM=) 7: 42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl (hash: +BKpqLx3qXRnv4TdMUE6Z9zle6qGZ70th3kb7l3ocuk=) 8: 326130623a346530343a663030643a3a2f34382d3438203d3e20323135373531.roa (hash: WkFTq6lcv25qZPkE7HiNlXS/5HhVPUklhewHCK7iBFs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Sep 2024 17:26:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:01:9b:d8:17:98:93:5a:ba:97:6a:55:b7:16:ac:e4:f8:24:c1:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42e508fba8960f48071b119accbf57bdbf3a8057 Validity Not Before: Sep 15 22:43:31 2024 GMT Not After : Sep 17 01:43:31 2024 GMT Subject: CN=F8A286B42BCC8E8F0F2AC254C9B4B64CA9995D65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7a:c4:39:29:9d:af:07:bf:48:ae:d4:5b:f1: e1:eb:7a:ab:16:a5:f1:07:28:fb:c5:29:87:54:3c: 30:38:f8:c6:2b:fc:f5:49:8d:13:ab:2a:3f:bd:09: 43:98:b3:bf:d6:91:2d:a9:53:b8:89:ad:dc:6a:b9: 6a:7b:d4:6a:19:27:e2:02:b5:d6:e3:53:ea:62:02: 10:87:50:06:7d:76:1f:33:4f:7f:2c:5e:43:0d:ef: 40:64:6b:a0:62:d7:96:ae:45:0c:15:9e:91:14:d6: c6:09:f3:3d:49:d2:2f:0e:27:35:2e:9b:a5:a0:4f: 02:ce:fe:56:3e:49:ba:d7:4e:35:23:a1:9b:e8:25: a0:bf:3b:01:7e:3e:fc:52:e6:79:25:b2:99:9a:0b: e4:7b:05:03:8f:75:fb:57:d7:c5:34:dd:94:8f:b9: b1:bb:69:0c:65:f1:0e:cd:62:21:14:3e:2a:74:b5: 63:ce:c6:d9:af:bc:88:ba:80:e3:5d:3c:c2:b9:f4: 46:c4:53:a8:a0:fb:10:16:8c:63:98:e0:27:98:bb: aa:97:4f:ba:03:10:b9:4e:f0:6c:b0:1f:ee:69:16: 25:a7:c2:6e:c6:4d:cc:74:05:a7:87:ee:e3:c4:5d: d5:80:b8:2b:76:31:26:f5:d3:16:8a:fb:c0:5c:ed: 44:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:A2:86:B4:2B:CC:8E:8F:0F:2A:C2:54:C9:B4:B6:4C:A9:99:5D:65 X509v3 Authority Key Identifier: keyid:42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:0b:6a:64:c4:73:fc:2a:58:e8:cb:0f:8c:e9:b7:4f:db:cb: e5:08:8b:3f:cb:56:05:3e:f5:17:29:93:84:a0:d8:17:43:b3: a5:2d:a7:a9:f5:ed:d3:2b:f7:6d:69:78:f3:c1:0b:19:6b:e9: ac:ec:b9:50:93:79:e7:77:c7:11:21:3a:9d:ac:07:04:08:65: 11:86:08:93:c3:87:2a:bf:c6:9f:88:79:4e:56:bb:c6:0b:a7: 7b:67:65:d7:d9:49:e5:15:52:dc:74:dc:35:aa:70:6d:e0:c4: bf:03:1b:6e:e0:1f:4c:42:55:31:7a:b8:98:29:5b:39:45:7c: a8:e0:a2:a7:15:4a:32:06:91:e5:ee:d5:1f:61:bc:ac:5f:3a: ea:dd:db:e4:b3:f1:ad:3c:c5:51:c3:8c:f0:d2:ab:16:54:cb: 54:26:66:c3:d6:3e:34:7d:99:82:2f:ff:68:fe:e1:e0:77:aa: 26:c0:2c:da:2b:17:73:1c:7c:63:dd:53:ef:12:28:69:8f:ab: 9c:d4:aa:2a:53:6e:45:a8:fe:64:4f:9c:f5:ac:f3:5f:f4:3f: 1a:a3:67:42:8a:47:52:a6:39:3a:b6:a4:4a:d5:9a:97:46:b0: 3d:f4:e4:98:41:e1:1f:da:6c:bc:0f:92:eb:a9:cc:43:62:9f: f9:e6:49:73 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUZQGb2BeYk1q6l2pVtxas5PgkwfswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJlNTA4ZmJhODk2MGY0ODA3MWIxMTlhY2NiZjU3YmRi ZjNhODA1NzAeFw0yNDA5MTUyMjQzMzFaFw0yNDA5MTcwMTQzMzFaMDMxMTAvBgNV BAMTKEY4QTI4NkI0MkJDQzhFOEYwRjJBQzI1NEM5QjRCNjRDQTk5OTVENjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSesQ5KZ2vB79IrtRb8eHreqsW pfEHKPvFKYdUPDA4+MYr/PVJjROrKj+9CUOYs7/WkS2pU7iJrdxquWp71GoZJ+IC tdbjU+piAhCHUAZ9dh8zT38sXkMN70Bka6Bi15auRQwVnpEU1sYJ8z1J0i8OJzUu m6WgTwLO/lY+SbrXTjUjoZvoJaC/OwF+PvxS5nklspmaC+R7BQOPdftX18U03ZSP ubG7aQxl8Q7NYiEUPip0tWPOxtmvvIi6gONdPMK59EbEU6ig+xAWjGOY4CeYu6qX T7oDELlO8GywH+5pFiWnwm7GTcx0BaeH7uPEXdWAuCt2MSb10xaK+8Bc7UQFAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU+KKGtCvMjo8PKsJUybS2TKmZXWUwHwYDVR0j BBgwFoAUQuUI+6iWD0gHGxGazL9Xvb86gFcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzNiOGVjMDEtOGJhNS00NzlmLWEyMjktMGFiNzBlNDgx NWJiLzAvNDJFNTA4RkJBODk2MEY0ODA3MUIxMTlBQ0NCRjU3QkRCRjNBODA1Ny5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1F1VUktNmlXRDBnSEd4R2F6TDlYdmI4 NmdGYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83M2I4ZWMwMS04 YmE1LTQ3OWYtYTIyOS0wYWI3MGU0ODE1YmIvMC80MkU1MDhGQkE4OTYwRjQ4MDcx QjExOUFDQ0JGNTdCREJGM0E4MDU3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAggtqZMRz/CpY6MsPjOm3 T9vL5QiLP8tWBT71FymThKDYF0OzpS2nqfXt0yv3bWl488ELGWvprOy5UJN553fH ESE6nawHBAhlEYYIk8OHKr/Gn4h5Tla7xgune2dl19lJ5RVS3HTcNapwbeDEvwMb buAfTEJVMXq4mClbOUV8qOCipxVKMgaR5e7VH2G8rF866t3b5LPxrTzFUcOM8NKr FlTLVCZmw9Y+NH2Zgi//aP7h4HeqJsAs2isXcxx8Y91T7xIoaY+rnNSqKlNuRaj+ ZE+c9azzX/Q/GqNnQopHUqY5OrakStWal0awPfTkmEHhH9psvA+S66nMQ2Kf+eZJ cw== -----END CERTIFICATE-----Generated at Mon Sep 16 00:21:35 2024 by rpki-client on console-fra.rpki-client.org