$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft File: 8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft (raw, json) Hash identifier: ud+uLbyt5Jiai5zOe6+8LCu3Mp6/mChFYCJvCOq8fdE= Subject key identifier: 16:BE:0D:2F:F2:80:4C:2F:9F:35:BD:F2:6C:77:5A:1F:70:3A:FE:B5 Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B Certificate issuer: /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b Certificate serial: 7AFE343DF554099936B8A996DC8E5C7FEA1CC640 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft Manifest number: 69 Signing time: Mon 16 Sep 2024 11:01:43 +0000 Manifest this update: Mon 16 Sep 2024 10:56:43 +0000 Manifest next update: Tue 17 Sep 2024 11:21:43 +0000 Files and hashes: 1: 3231322e3130332e34352e302f32342d3234203d3e2037303138.roa (hash: 7tYhgwnpQgjrUY6lIYzrsufXTdIxxdIzG5zhNY7GMPE=) 2: 3138352e3234302e3130362e302f32342d3234203d3e20323134343538.roa (hash: A4xSoaJgKGvgYyxTiRaQc7hyiiMELV+dvyPZYNnypk4=) 3: 3231322e3130332e34372e302f32342d3234203d3e2037303138.roa (hash: cHloJRokAuSrc8moMEBQO1JYueWgMh/VbSgADCTahj8=) 4: 3231322e3130332e34362e302f32342d3234203d3e2037303138.roa (hash: rMME+vqCZKRx6MWTu2JJLyrYUejGxmy68BYs8Iy+dcs=) 5: 3138352e3234302e3130372e302f32342d3234203d3e20383334.roa (hash: d+zg4jV72ChVu5mEM3Ob4bB26yhmOMo6J0N98yB12XA=) 6: 3138352e3234302e3130342e302f32342d3234203d3e20323130353338.roa (hash: e7DAYp4SHfxn2VHLApclYeubQioRqGakPF4YwyLlJQg=) 7: 3139332e32342e3233322e302f32332d3233203d3e203530333030.roa (hash: Po6GZYgaRMfXN2u9BXIR6NM5bYxILn+hdgpL6aYdt9s=) 8: 34352e39352e38312e302f32342d3234203d3e203130373533.roa (hash: FkBgrUApMvi3lgA70RwzXdmr+ue7YGI+0ZsQLz4AeeM=) 9: 34352e39352e38302e302f32342d3234203d3e203232343237.roa (hash: 1iNa622Wy2pLG+EQ9PLnzZr/TAQ/DFOpTXcvxlsTiU8=) 10: 3231322e3130332e34342e302f32342d3234203d3e2037303138.roa (hash: M4JPV0EpOREdo4rtW4NnuCUGqJpn33if9+NH5NeepXw=) 11: 3138352e3234302e3130352e302f32342d3234203d3e20323135383836.roa (hash: Zg7Zy94s0jkW2vAFLU4oSa1vifJGmomHg+RPCbDKJZY=) 12: 3139332e32342e3233342e302f32332d3234203d3e203236373337.roa (hash: zwbNlqaWVpi6z23tnypronH8MBkZcCNf+vOil7eXUr4=) 13: 34352e39352e38332e302f32342d3234203d3e203231383539.roa (hash: Djls19+FiMmKLQv9qIKBwkPY3kr3a/C5UFJAV5+m5zs=) 14: 8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl (hash: oL8cwPRZepVMmySdspxUJSs61lbUTkSCYXN/gAlCaKg=) 15: 34352e39352e38322e302f32342d3234203d3e203231383539.roa (hash: DdjdKz3VCWgD9D91AjxGWOfn1c37vNXBbzqsnbXIvjs=) 16: 39312e3139302e3135372e302f32342d3234203d3e20323130383330.roa (hash: LHHDMQAiPEKdKz+17Sj/aubO3T0fJoOtFfvF63ozlF8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 17 Sep 2024 04:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:fe:34:3d:f5:54:09:99:36:b8:a9:96:dc:8e:5c:7f:ea:1c:c6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b Validity Not Before: Sep 16 10:56:43 2024 GMT Not After : Sep 17 11:21:43 2024 GMT Subject: CN=16BE0D2FF2804C2F9F35BDF26C775A1F703AFEB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f8:87:ad:d1:f3:fd:2c:6f:cb:54:a3:ed:00: bb:4a:25:e8:20:59:49:22:6a:ea:5a:f0:dd:60:a7: f0:ff:12:75:b2:a2:aa:cd:40:81:e6:3d:53:ca:55: 08:2c:fe:30:9f:e2:c5:09:4f:3b:c1:1d:94:52:2b: df:25:ff:13:60:2b:c4:16:f5:9f:32:2e:af:6d:5e: 14:e3:5f:0f:3b:ce:87:4a:c3:f6:3e:54:b8:aa:65: 52:63:e0:e2:f6:7c:e7:01:1f:14:37:75:87:f3:5f: 30:3a:5a:78:dd:ee:65:de:8a:5d:23:b3:6b:c9:3c: d9:e6:73:21:5d:2c:36:87:7a:18:36:ff:7b:65:3a: fc:c8:9f:e5:8b:fa:cf:bc:64:7a:2d:8e:7a:a6:ea: bc:e3:7e:5a:53:84:ca:08:df:84:a9:0d:a3:74:d3: df:5c:c2:6c:c6:73:36:78:4e:ba:8c:47:22:46:39: 02:69:6d:7f:91:8f:1d:97:20:0b:26:e6:0e:cd:0a: 6d:ff:bc:0d:62:d0:32:ac:6d:37:ca:5b:4d:51:08: 04:c8:9c:10:c7:fb:8c:29:49:1b:33:27:35:78:91: 4e:c2:ae:60:23:1a:41:f9:8c:11:06:42:22:c2:32: 6a:d1:e0:3d:82:7f:0b:46:3c:e1:47:d7:b9:8d:5a: 3f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:BE:0D:2F:F2:80:4C:2F:9F:35:BD:F2:6C:77:5A:1F:70:3A:FE:B5 X509v3 Authority Key Identifier: keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:ff:82:72:94:2f:43:ce:82:8e:36:d3:29:9d:b3:29:de:22: dd:2e:82:9a:4e:e8:b8:4a:77:19:a6:dd:d4:97:86:e6:78:a8: c7:0d:aa:6e:2d:0d:08:20:03:46:80:fc:af:70:4b:30:67:b9: d9:4e:79:ac:03:db:4e:2d:ad:ea:53:8f:06:71:f9:e1:d7:bc: 8b:75:b3:a4:ad:07:13:7b:44:cf:b9:92:25:e8:bf:4f:af:77: 1e:d5:df:35:6f:fa:96:5a:bb:30:d0:cd:f9:e5:56:ee:8c:2d: 98:53:d6:1d:92:52:81:b4:ac:bb:c8:45:eb:8e:3c:c2:ca:be: 15:3a:64:d8:57:32:db:5f:5f:25:9d:45:f9:63:40:7a:b6:b2: 81:3e:27:09:79:2b:a9:26:70:39:a1:3f:da:b2:ad:7a:2c:15: e8:ee:f3:1f:4f:26:90:0c:51:07:0f:43:a2:35:42:38:28:7a: eb:f8:4c:40:65:b7:88:9d:d4:db:5e:d0:cd:7d:ab:fb:4a:f9: e6:56:46:37:b7:8d:33:37:45:a5:24:90:b2:7f:82:6d:6f:d2: 44:fb:5b:83:26:45:05:3d:1e:78:04:8c:0f:b6:22:4b:6c:c2: db:aa:cb:ce:a1:a8:31:3a:93:80:b1:9c:6f:19:9a:cc:91:aa: 2f:fa:b3:03 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUev40PfVUCZk2uKmW3I5cf+ocxkAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGMxMmI0MjczODMyYjQxNTZmZTAwOTJmNmFlN2U1YjNj ZTIzYWQ4YjAeFw0yNDA5MTYxMDU2NDNaFw0yNDA5MTcxMTIxNDNaMDMxMTAvBgNV BAMTKDE2QkUwRDJGRjI4MDRDMkY5RjM1QkRGMjZDNzc1QTFGNzAzQUZFQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx+Iet0fP9LG/LVKPtALtKJegg WUkiaupa8N1gp/D/EnWyoqrNQIHmPVPKVQgs/jCf4sUJTzvBHZRSK98l/xNgK8QW 9Z8yLq9tXhTjXw87zodKw/Y+VLiqZVJj4OL2fOcBHxQ3dYfzXzA6Wnjd7mXeil0j s2vJPNnmcyFdLDaHehg2/3tlOvzIn+WL+s+8ZHotjnqm6rzjflpThMoI34SpDaN0 099cwmzGczZ4TrqMRyJGOQJpbX+Rjx2XIAsm5g7NCm3/vA1i0DKsbTfKW01RCATI nBDH+4wpSRszJzV4kU7CrmAjGkH5jBEGQiLCMmrR4D2CfwtGPOFH17mNWj+nAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUFr4NL/KATC+fNb3ybHdaH3A6/rUwHwYDVR0j BBgwFoAUjBK0JzgytBVv4Akvaufls84jrYswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGJmZDY4ODItZDZiMy00YWE4LWJjMGEtNzExZDY4YmQx OThiLzAvOEMxMkI0MjczODMyQjQxNTZGRTAwOTJGNkFFN0U1QjNDRTIzQUQ4Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2pCSzBKemd5dEJWdjRBa3ZhdWZsczg0 anJZcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YmZkNjg4Mi1k NmIzLTRhYTgtYmMwYS03MTFkNjhiZDE5OGIvMC84QzEyQjQyNzM4MzJCNDE1NkZF MDA5MkY2QUU3RTVCM0NFMjNBRDhCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARf+CcpQvQ86CjjbTKZ2z Kd4i3S6Cmk7ouEp3Gabd1JeG5nioxw2qbi0NCCADRoD8r3BLMGe52U55rAPbTi2t 6lOPBnH54de8i3WzpK0HE3tEz7mSJei/T693HtXfNW/6llq7MNDN+eVW7owtmFPW HZJSgbSsu8hF6448wsq+FTpk2Fcy219fJZ1F+WNAeraygT4nCXkrqSZwOaE/2rKt eiwV6O7zH08mkAxRBw9DojVCOCh66/hMQGW3iJ3U217QzX2r+0r55lZGN7eNMzdF pSSQsn+CbW/SRPtbgyZFBT0eeASMD7YiS2zC26rLzqGoMTqTgLGcbxmazJGqL/qz Aw== -----END CERTIFICATE-----Generated at Mon Sep 16 13:24:19 2024 by rpki-client on console-fra.rpki-client.org