$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft File: B172548FA3C460E26CB519EE524361BCA6C7132E.mft (raw, json) Hash identifier: z9/V5TQQFddT1TwR7xKl1hrkhF+kRjIb3fRzg3Z+3z4= Subject key identifier: BF:AB:62:16:71:AF:8A:4A:40:BB:45:3F:D5:7F:CD:24:92:56:5B:4D Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e Certificate serial: 2902FF0E534F5E331D683525345B5214C1BA0263 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft Manifest number: 021C Signing time: Thu 21 Nov 2024 12:53:40 +0000 Manifest this update: Thu 21 Nov 2024 12:48:40 +0000 Manifest next update: Fri 22 Nov 2024 15:34:40 +0000 Files and hashes: 1: 39332e39352e3131322e302f32342d3234203d3e203231383539.roa (hash: 1vjH8mfscIQPc/vTfaSXURucL05I0LJVlR9FbaAY1YM=) 2: 39332e39352e3131352e302f32342d3234203d3e20313335333932.roa (hash: 8ja7Z+swVGTraKxezjgHzXG2GlS/dFRID6jPUC87mFI=) 3: 39332e39352e3131382e302f32342d3234203d3e203631313132.roa (hash: hkeLXPavFD7WfStThhYLTFHTYlms8I7H60Fz+4Z95to=) 4: 39332e39352e3131392e302f32342d3234203d3e20323135343337.roa (hash: scJ1J16rI6zPTC9NmNaA0DK+habeczlo+nbSVqoqzmA=) 5: 39332e39352e3131332e302f32342d3234203d3e20323135333034.roa (hash: 63nnYoRw8lqbfs9sYSKLfv3rVQPobl25Gf5ifR4SF58=) 6: 39332e39352e3131332e302f32342d3234203d3e20323134303235.roa (hash: l30M1NazdLFetU2PNYzaRk4wQFhe4M2J09jdNUuszXc=) 7: 39332e39352e3131342e302f32342d3234203d3e2035303635.roa (hash: 1SASXyExgQ4b5WPRHANM/0yVmAfZqeVHh1az/LQOJxE=) 8: B172548FA3C460E26CB519EE524361BCA6C7132E.crl (hash: bD3b+Yx14tC8/6UT9OlXJQnmYyyCpfOQHhe1zXMGIQo=) 9: 39332e39352e3131332e302f32342d3234203d3e203336353330.roa (hash: WyeMvj48S3DmhapxMcgEhguMxJ08HH/YYmlmV7bxS+g=) 10: 39332e39352e3131352e302f32342d3234203d3e20313938353834.roa (hash: oaLDq7aS5NFaYNW1gUs7MDdZL5P0TUUEDkjRyQGla3w=) 11: 39332e39352e3131332e302f32342d3234203d3e20323134303234.roa (hash: RX1VQVxHd6lh9s8b7wmLkuV+OsyxwFV/2OP06vKykwg=) 12: 39332e39352e3131362e302f32342d3234203d3e203630373831.roa (hash: bvqtExc4o5GUJzraVc9CM0CC2GO3x6c+ohx4q9G/dgk=) 13: 39332e39352e3131372e302f32342d3234203d3e20323135373732.roa (hash: vLSBueodjY+0YJW63au8p8n765D5sPEn1sQkXoc5D7w=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 09:57:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:02:ff:0e:53:4f:5e:33:1d:68:35:25:34:5b:52:14:c1:ba:02:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e Validity Not Before: Nov 21 12:48:40 2024 GMT Not After : Nov 22 15:34:40 2024 GMT Subject: CN=BFAB621671AF8A4A40BB453FD57FCD2492565B4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b1:41:00:fa:c8:88:f0:06:c6:4d:7e:67:b2: da:64:05:f6:b9:54:13:23:78:22:82:3f:d3:af:0c: ca:13:87:e0:6a:4d:0c:a4:60:dd:01:95:81:2d:fe: 1d:57:42:4d:6a:13:61:e5:bc:46:3c:95:6d:4e:34: 50:6e:11:b0:57:90:a1:42:4c:bd:89:1c:11:e5:60: 80:a5:ce:55:47:9a:df:ed:d8:1a:13:62:8e:59:cd: 43:3b:41:6d:db:b7:54:da:e0:c6:2b:ff:f0:7a:d7: 5d:d1:cb:df:bc:d6:d7:72:ed:4a:bf:47:af:56:48: 00:79:60:ba:d2:8e:10:13:9e:7d:9c:70:da:2c:bd: 66:43:af:d1:c4:92:cc:58:4d:0d:a2:c9:e7:c7:0c: ba:ca:bc:a1:5d:c9:fd:e5:c1:1b:cc:5e:9c:10:d1: e3:ee:bb:89:c3:ee:d0:2c:36:6d:a3:6d:8c:8b:20: 33:b2:5c:e3:fa:ce:25:de:7d:a3:c0:4b:5a:1e:ad: fe:5d:dd:5d:4f:e0:9f:62:7d:d8:84:80:60:83:31: 49:df:ce:7e:a7:17:90:76:cd:5f:cb:ab:0e:24:92: fc:49:fd:c5:3f:57:f6:80:67:7d:96:52:c2:16:e4: a4:92:ff:99:98:93:ee:b8:42:ba:98:c4:71:f6:c3: 1f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:AB:62:16:71:AF:8A:4A:40:BB:45:3F:D5:7F:CD:24:92:56:5B:4D X509v3 Authority Key Identifier: keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:aa:b4:cd:02:ab:89:41:24:3c:dc:29:e0:5a:b1:41:66:27: 3c:4e:38:0d:44:f4:14:cd:7a:ff:c0:fd:5b:16:90:73:15:90: 1a:9b:31:68:52:f0:31:74:7c:60:bc:d3:5c:bb:f5:4b:cb:26: 13:05:19:09:19:4f:04:9a:e3:a9:46:58:66:1e:7c:a2:6f:ea: f4:f7:45:72:d6:00:93:c5:b7:1a:0d:db:ae:f4:44:fe:ef:10: fd:b2:ca:05:42:3e:51:e8:4d:3f:4d:58:85:08:f2:fa:06:86: 26:4a:cd:1b:12:16:3e:b6:b8:a5:8c:7e:56:e6:8a:4f:bf:c1: d3:7e:64:4d:5e:de:70:4d:54:9c:ea:0b:0e:76:5c:43:6e:b4: b1:27:4e:01:aa:b0:d5:cc:1d:79:46:ce:88:bc:ab:2d:4a:4f: f1:97:ec:d3:96:27:05:60:61:3b:58:58:ee:7e:b8:79:b6:76: 4f:e5:3a:1d:46:74:79:49:72:4d:4c:5e:84:5f:49:e5:07:0f: 5b:ca:be:7d:2f:f0:44:b4:f6:a4:92:0d:ca:30:e1:ce:2c:d4: 3e:47:e9:bd:fd:df:d2:58:10:cf:15:9a:02:b4:05:61:28:d2: fa:77:05:1b:69:82:e1:83:c3:89:9f:91:d8:40:aa:fa:e3:f4: ca:f0:46:ed -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUKQL/DlNPXjMdaDUlNFtSFMG6AmMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjE3MjU0OGZhM2M0NjBlMjZjYjUxOWVlNTI0MzYxYmNh NmM3MTMyZTAeFw0yNDExMjExMjQ4NDBaFw0yNDExMjIxNTM0NDBaMDMxMTAvBgNV BAMTKEJGQUI2MjE2NzFBRjhBNEE0MEJCNDUzRkQ1N0ZDRDI0OTI1NjVCNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8sUEA+siI8AbGTX5nstpkBfa5 VBMjeCKCP9OvDMoTh+BqTQykYN0BlYEt/h1XQk1qE2HlvEY8lW1ONFBuEbBXkKFC TL2JHBHlYIClzlVHmt/t2BoTYo5ZzUM7QW3bt1Ta4MYr//B6113Ry9+81tdy7Uq/ R69WSAB5YLrSjhATnn2ccNosvWZDr9HEksxYTQ2iyefHDLrKvKFdyf3lwRvMXpwQ 0ePuu4nD7tAsNm2jbYyLIDOyXOP6ziXefaPAS1oerf5d3V1P4J9ifdiEgGCDMUnf zn6nF5B2zV/Lqw4kkvxJ/cU/V/aAZ32WUsIW5KSS/5mYk+64QrqYxHH2wx8tAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUv6tiFnGvikpAu0U/1X/NJJJWW00wHwYDVR0j BBgwFoAUsXJUj6PEYOJstRnuUkNhvKbHEy4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTY1NzNlODgtZGFiYS00YWM3LWEyZWQtMzIxYzgyNzdk MjVlLzAvQjE3MjU0OEZBM0M0NjBFMjZDQjUxOUVFNTI0MzYxQkNBNkM3MTMyRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3NYSlVqNlBFWU9Kc3RSbnVVa05odkti SEV5NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85NjU3M2U4OC1k YWJhLTRhYzctYTJlZC0zMjFjODI3N2QyNWUvMC9CMTcyNTQ4RkEzQzQ2MEUyNkNC NTE5RUU1MjQzNjFCQ0E2QzcxMzJFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz6q0zQKriUEkPNwp4Fqx QWYnPE44DUT0FM16/8D9WxaQcxWQGpsxaFLwMXR8YLzTXLv1S8smEwUZCRlPBJrj qUZYZh58om/q9PdFctYAk8W3Gg3brvRE/u8Q/bLKBUI+UehNP01YhQjy+gaGJkrN GxIWPra4pYx+VuaKT7/B035kTV7ecE1UnOoLDnZcQ260sSdOAaqw1cwdeUbOiLyr LUpP8Zfs05YnBWBhO1hY7n64ebZ2T+U6HUZ0eUlyTUxehF9J5QcPW8q+fS/wRLT2 pJINyjDhzizUPkfpvf3f0lgQzxWaArQFYSjS+ncFG2mC4YPDiZ+R2ECq+uP0yvBG 7Q== -----END CERTIFICATE-----Generated at Thu Nov 21 14:22:19 2024 by rpki-client on console-ams.rpki-client.org