$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft File: A1EE5D09A0F5D0D87611013175C62E35777DA926.mft (raw, json) Hash identifier: iTzhe0u03WpmVw7HV8fnUhfBnnkC9854Drt0XxAQW4k= Subject key identifier: 25:98:B4:29:9F:2C:00:93:E6:40:8E:D9:1E:E0:30:58:7B:68:5B:B9 Authority key identifier: A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26 Certificate issuer: /CN=A1EE5D09A0F5D0D87611013175C62E35777DA926 Certificate serial: 099EA9FE2014CC3651806D0CBF27E67A8EF20583 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft Manifest number: D1 Signing time: Thu 21 Nov 2024 13:39:20 +0000 Manifest this update: Thu 21 Nov 2024 13:34:20 +0000 Manifest next update: Fri 22 Nov 2024 15:55:20 +0000 Files and hashes: 1: 326131343a373538313a393061613a3a2f34382d3438203d3e20323135333634.roa (hash: xZsi1cRuVwLPMkPSmQ7hOy9XHVisgoaJSKiGt0O2OFs=) 2: 326131343a373538313a393330303a3a2f34302d3438203d3e20323135333634.roa (hash: z6xFfxTzAOT/hYwAJ2DQkeBnVgxJoH9HtbYNG39WwF0=) 3: 326131343a373538313a393261303a3a2f34382d3438203d3e20323135333634.roa (hash: 52dW85fH8WieO38THcEAcWvAx0hfdz1p014Uu9iYIzA=) 4: 326131343a373538313a393165303a3a2f34382d3438203d3e20323135333634.roa (hash: 69Xsi44laAcnxP50J1kp3cC9fZOYKoWYPgQjGZJBXKc=) 5: A1EE5D09A0F5D0D87611013175C62E35777DA926.crl (hash: p3OfIDNEtZZvM2Xdia69rFdOFBTcxyqpUZqxnArMzfE=) 6: 326131343a373538313a393165313a3a2f34382d3438203d3e20323135333634.roa (hash: 3jz7qBAt/x3hx0KhMiyloYsGBxxi20xg/aBSp+sZaDE=) 7: 326131343a373538313a393061333a3a2f34382d3438203d3e20323135333634.roa (hash: cykeNqeAps0DJ3lcB+VvNlG1mo5ET1nEkq1j80+ye3g=) 8: 326131343a373538313a393061343a3a2f34382d3438203d3e20323135333634.roa (hash: P6cpiTTYL7lLBXArfAsieT7qICD6oOOoBgXZt2WZD6M=) 9: 326131343a373538313a393130613a3a2f34382d3438203d3e20323135313438.roa (hash: 4fHLejJ946NktWTU2sxiTGZMT9qoCr17W/uS0Esd5lw=) 10: 326131343a373538313a393061313a3a2f34382d3438203d3e20323135333634.roa (hash: 7q03RLkB6tqAN2VGS8fqPrH4CxAeiijAUGDmJ/NZGNs=) 11: 326131343a373538313a6666303a3a2f34382d3438203d3e20323135333634.roa (hash: KFn9WdvuXZqN8qHQEq155lH4XfWV3U3t3rO+sW/3ok4=) 12: 326131343a373538313a393061303a3a2f34382d3438203d3e20323135333634.roa (hash: OR8xM9pMHZ28HaWIlP/1+1Y0stVROWkAX2dYNvZ+pvU=) 13: 326131343a373538313a393065653a3a2f34382d3438203d3e20323135333634.roa (hash: n13ozOgN/szcSy8ou42QXiXUX+yXlpqcLn3ozZcZDlw=) 14: 326131343a373538313a393130303a3a2f34382d3438203d3e20323134383431.roa (hash: Vempd3ps8UPnFvtx6+Ga9r0Fz/m4sP8yDO51fnwduTg=) 15: 326131343a373538313a393066663a3a2f34382d3438203d3e20323135363137.roa (hash: 92vCLzxUkC0A+QO3tY7K98mZLDwvzT8NNa/AXo3xL2c=) 16: 326131343a373538313a393061323a3a2f34382d3438203d3e20323135333634.roa (hash: mdWV9eS4+WC3/yAcz+97xhH9MgOmz1AFYqyScPjyH8g=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 09:57:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:9e:a9:fe:20:14:cc:36:51:80:6d:0c:bf:27:e6:7a:8e:f2:05:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1EE5D09A0F5D0D87611013175C62E35777DA926 Validity Not Before: Nov 21 13:34:20 2024 GMT Not After : Nov 22 15:55:20 2024 GMT Subject: CN=2598B4299F2C0093E6408ED91EE030587B685BB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d6:2f:4f:c8:ea:ed:d2:5b:4d:77:de:13:0f: e8:ab:c5:2a:63:2e:46:4f:eb:8b:d5:b0:b9:45:f9: 4f:71:d3:34:79:e2:f7:07:be:c4:f5:a9:7d:a9:94: 9e:d4:1e:af:5c:62:49:a6:bb:bd:4f:e4:70:1c:0d: 84:2a:76:85:9a:d6:64:bf:e6:3b:cc:6f:61:97:a8: dc:3a:a5:68:26:3e:5d:c4:26:9e:fd:76:00:6e:bc: b5:85:1f:90:ae:9b:d9:e6:28:db:5b:23:3a:da:c2: 03:a8:d3:47:ad:52:2d:7a:f5:24:43:73:bc:f4:98: cc:0b:a8:56:10:06:f0:9e:12:10:71:18:c2:e8:e0: 36:05:c5:25:b3:d0:de:be:6e:0b:82:d4:32:e9:42: b0:9e:1f:22:5e:4c:a7:24:e7:fe:91:a7:60:7f:19: 50:f5:28:69:bd:37:31:dc:1c:b5:55:2d:79:80:59: 9d:b8:91:80:d3:99:99:88:27:6f:17:37:3a:7d:9a: 4b:a1:36:57:03:36:04:b9:d7:7c:5f:34:b7:e4:16: 73:b4:10:9f:58:2c:30:45:3d:18:9c:c7:92:f7:ee: 1b:6b:df:18:67:e7:b9:81:bc:2e:6f:6c:c7:52:e2: dc:39:aa:f6:8c:c7:ff:f7:91:dd:74:46:f9:a6:78: 7d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:98:B4:29:9F:2C:00:93:E6:40:8E:D9:1E:E0:30:58:7B:68:5B:B9 X509v3 Authority Key Identifier: keyid:A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:86:52:86:a8:5f:fc:00:a5:c1:f9:8f:58:6a:39:69:15:8a: 96:54:36:6b:87:e0:7f:0c:8d:6a:f0:7a:ab:5b:e3:5b:e3:e7: 9e:7a:0d:81:21:51:8b:6c:08:2b:85:0c:8e:5d:98:0e:e5:46: 45:ab:92:49:bc:59:9c:57:e8:fc:52:b1:03:64:0f:2c:4f:ad: 5b:9b:c0:a3:6f:b2:ee:cb:8d:11:bc:f7:05:81:9f:d5:af:26: 1e:f1:4a:66:e6:5d:4f:f3:df:4d:ec:03:b1:1f:9e:db:83:cd: 60:29:68:71:23:da:b1:fc:b0:3e:f7:31:c4:21:c9:b3:86:56: fb:10:9a:47:aa:70:db:85:f9:a2:2e:6f:56:f5:d4:d4:2c:76: fa:42:cc:9c:ae:74:e3:7a:75:0a:a4:2e:37:59:bf:9d:1e:17: 1a:5e:c4:a7:72:9d:40:15:22:c2:ff:dd:73:6f:d5:05:c1:38: 42:5d:f5:d0:41:09:79:c4:e8:fd:a9:c0:e3:54:5e:44:5a:bc: 72:89:dd:68:cc:46:8b:6f:50:fe:87:4e:eb:e6:a4:e2:99:b6: 55:22:86:7f:9f:86:78:0a:a6:a8:1c:8c:18:ec:f0:89:bb:2c: 4b:1f:6c:21:61:34:3b:b2:94:9a:ec:d7:33:30:9b:ea:f9:07: c4:6d:bf:61 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUCZ6p/iAUzDZRgG0Mvyfmeo7yBYMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFFRTVEMDlBMEY1RDBEODc2MTEwMTMxNzVDNjJFMzU3 NzdEQTkyNjAeFw0yNDExMjExMzM0MjBaFw0yNDExMjIxNTU1MjBaMDMxMTAvBgNV BAMTKDI1OThCNDI5OUYyQzAwOTNFNjQwOEVEOTFFRTAzMDU4N0I2ODVCQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ1i9PyOrt0ltNd94TD+irxSpj LkZP64vVsLlF+U9x0zR54vcHvsT1qX2plJ7UHq9cYkmmu71P5HAcDYQqdoWa1mS/ 5jvMb2GXqNw6pWgmPl3EJp79dgBuvLWFH5Cum9nmKNtbIzrawgOo00etUi169SRD c7z0mMwLqFYQBvCeEhBxGMLo4DYFxSWz0N6+bguC1DLpQrCeHyJeTKck5/6Rp2B/ GVD1KGm9NzHcHLVVLXmAWZ24kYDTmZmIJ28XNzp9mkuhNlcDNgS513xfNLfkFnO0 EJ9YLDBFPRicx5L37htr3xhn57mBvC5vbMdS4tw5qvaMx//3kd10RvmmeH3RAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUJZi0KZ8sAJPmQI7ZHuAwWHtoW7kwHwYDVR0j BBgwFoAUoe5dCaD10Nh2EQExdcYuNXd9qSYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODU1YzdkNWEtMTVjNC00NTg5LTg1ZmEtYjQ5MWEwNzEw NDhjLzAvQTFFRTVEMDlBMEY1RDBEODc2MTEwMTMxNzVDNjJFMzU3NzdEQTkyNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BMUVFNUQwOUEwRjVEMEQ4NzYxMTAxMzE3 NUM2MkUzNTc3N0RBOTI2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzg1NWM3ZDVhLTE1YzQtNDU4OS04NWZhLWI0OTFhMDcxMDQ4Yy8wL0ExRUU1RDA5 QTBGNUQwRDg3NjExMDEzMTc1QzYyRTM1Nzc3REE5MjYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBphlKG qF/8AKXB+Y9YajlpFYqWVDZrh+B/DI1q8HqrW+Nb4+eeeg2BIVGLbAgrhQyOXZgO 5UZFq5JJvFmcV+j8UrEDZA8sT61bm8Cjb7Luy40RvPcFgZ/VryYe8Upm5l1P899N 7AOxH57bg81gKWhxI9qx/LA+9zHEIcmzhlb7EJpHqnDbhfmiLm9W9dTULHb6Qsyc rnTjenUKpC43Wb+dHhcaXsSncp1AFSLC/91zb9UFwThCXfXQQQl5xOj9qcDjVF5E Wrxyid1ozEaLb1D+h07r5qTimbZVIoZ/n4Z4CqaoHIwY7PCJuyxLH2whYTQ7spSa 7NczMJvq+QfEbb9h -----END CERTIFICATE-----Generated at Thu Nov 21 17:13:49 2024 by rpki-client on console-ams.rpki-client.org