$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft File: 38A93C81ECD308E6A7632717045B3D35150120F8.mft (raw, json) Hash identifier: L1ta3pA+8aSfQBh6ePGBj4Om2Jqimtdtm7FIDtKAyyU= Subject key identifier: CF:32:2A:BE:FA:6E:57:CD:28:1E:F6:63:A6:B8:FE:4D:FE:B7:B9:59 Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8 Certificate issuer: /CN=38a93c81ecd308e6a7632717045b3d35150120f8 Certificate serial: 1F1B6392984DA605486D24523ED795255D8D2439 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft Manifest number: 15 Signing time: Sat 01 Feb 2025 14:55:34 +0000 Manifest this update: Sat 01 Feb 2025 14:50:34 +0000 Manifest next update: Sun 02 Feb 2025 18:17:34 +0000 Files and hashes: 1: 3138352e35382e3135372e302f32342d3234203d3e20383334.roa (hash: zwS3/tHsWTYTY+nwxW90HK2IQVJclg5YhmfWzgNUB7Y=) 2: 38A93C81ECD308E6A7632717045B3D35150120F8.crl (hash: 7OvIEgYLkyf8134PCkg+VhzZqZ1nVDJMAVlmMn2rFwE=) 3: 34362e3138322e32302e302f32332d3233203d3e203433383437.roa (hash: gLTxCeSHSKykDX518vtvEArXMU/pfjZMM+VI208KgHw=) 4: 326130323a323937303a3a2f32392d3239203d3e203433383437.roa (hash: s2Lo9o3m7PNA+VTM8h6HfGJuLE7e0u+GGo764aM9FW4=) 5: 3138352e35382e3135382e302f32342d3234203d3e20383334.roa (hash: bliXgaWf2uWYGwNXwh3QUz02TAlvVUKQVtUywEK2Zhg=) 6: 3138352e35382e3135362e302f32342d3234203d3e20323135323837.roa (hash: JSJ3/ENvpANYjaheCIKzscokMYkR+INgVpao6rDrGj0=) 7: 33312e3138352e3130372e302f32342d3234203d3e20383334.roa (hash: 0U/pqNWogDFfEMdY62PovGaeYXqywQqRkjBO/FF9qP4=) 8: 34362e3138322e32332e302f32342d3234203d3e203433383437.roa (hash: bxI8j0Q43fNYwFfEpnx3zZA+WfxxHOFpyLP15cwiRJc=) 9: 34362e3138322e31362e302f32332d3233203d3e203433383437.roa (hash: 4YLzigbbgGBlj3P8KPCDpw+y1a9c2DAZLVBVu5lNf4E=) 10: 33312e3138352e3130342e302f32332d3233203d3e203433383437.roa (hash: eEMAUpumzcappB7Zi3531kyZDYm0vBvboxygcVH5na0=) 11: 34362e3138322e31382e302f32332d3233203d3e203433383437.roa (hash: 4Ns+nZIS59tdPTXyzEk/8ZsDfijKL83vY7HPlP7mVB0=) 12: 34362e3138322e32322e302f32342d3234203d3e20383334.roa (hash: 2ZPUSJaC1RnZkXzobIGyH9ipzTCnVn+dYUl13aymVs8=) 13: 33312e3138352e3130382e302f32342d3234203d3e20383334.roa (hash: mW7F0DMC5vrj+4BpP5Zlca/BR5oTaoohs/JidNSwP7A=) 14: 3138352e35382e3135392e302f32342d3234203d3e20383334.roa (hash: +aSso6cTPxp9XCuFJM3wjlgBYQ25FF5PCpBqkQfQKz4=) 15: 33312e3138352e3130392e302f32342d3234203d3e20383334.roa (hash: QXzFWgNwEep5PjpXPyjCqyJF0gehLwFianTmQmjSKnE=) 16: 33312e3138352e3130362e302f32342d3234203d3e20383334.roa (hash: WfL2+hCKOhYMb7/6DRm6zSAUkjcuIDXQxEbfQp3k4yk=) 17: 33312e3138352e3131302e302f32332d3233203d3e203433383437.roa (hash: qxCLun/WtTeFMx+PxPX3S31IVGcq1qdFktxPeS1csWo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 02 Feb 2025 18:17:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:1b:63:92:98:4d:a6:05:48:6d:24:52:3e:d7:95:25:5d:8d:24:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8 Validity Not Before: Feb 1 14:50:34 2025 GMT Not After : Feb 2 18:17:34 2025 GMT Subject: CN=CF322ABEFA6E57CD281EF663A6B8FE4DFEB7B959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b9:8d:48:33:5a:c2:6e:5d:49:fd:fb:90:5e: 00:2e:86:cd:5e:b1:df:f5:c5:13:96:a9:95:b6:d4: 73:f5:d8:33:69:bb:ef:55:b3:f9:f7:bb:d5:44:14: ef:e5:39:14:1b:68:0e:8f:ac:16:0e:e5:c4:e3:9d: f5:65:29:a1:77:6a:cc:f9:3b:b7:b8:1a:35:cf:2f: 92:78:0c:31:98:d9:a9:95:2e:e2:d8:fa:01:1d:47: 5d:d7:aa:3f:77:41:0b:b7:63:e7:06:2b:bd:bd:a4: 9e:ab:ed:9d:df:ed:e9:ef:21:3f:74:01:66:4d:f3: e7:e2:d8:dd:63:16:0c:1a:00:bb:a8:96:3a:f5:e9: b1:8a:f5:e8:b1:2b:57:f4:31:fa:75:ab:c3:6a:4a: 5a:57:eb:07:5d:4b:29:f0:1b:98:5c:a2:a0:db:55: 96:64:7d:51:f5:f4:a6:44:a5:99:75:3f:05:a9:45: 3d:61:fd:db:56:b8:2b:dd:a8:38:4b:06:c0:0a:91: 20:67:dc:c3:3b:ea:55:2d:5f:8d:19:19:9a:c8:8f: 45:23:28:b2:68:b3:57:71:02:c2:b7:fc:2d:dc:aa: 1d:2f:e3:2e:e2:b0:6c:91:dd:28:8b:6b:79:1b:ab: fe:a2:f8:35:9b:89:2c:25:fa:5a:db:f3:0f:63:78: 89:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:32:2A:BE:FA:6E:57:CD:28:1E:F6:63:A6:B8:FE:4D:FE:B7:B9:59 X509v3 Authority Key Identifier: keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:49:26:90:ed:c3:cc:ec:dd:53:95:4a:98:31:6c:70:dc:a0: d4:b0:ad:66:b2:bd:50:1d:b4:59:08:1a:43:a7:18:f7:21:7b: c2:23:c0:e3:c4:91:3e:dc:f2:93:ed:8f:d2:46:ef:2e:ad:96: eb:9b:f9:e7:de:bd:70:67:dc:ee:f0:c9:81:d8:ff:f2:e1:d7: 22:82:5a:b9:34:fa:4b:2e:df:c9:c5:13:8a:4b:fd:67:c3:45: 7c:be:49:a7:24:36:7b:e5:dc:fc:7a:29:19:8b:7c:1a:ee:2d: 00:89:da:0c:25:08:19:bb:85:8d:34:49:93:9f:dd:e6:17:9a: 89:7b:64:32:06:ba:fe:ff:70:23:e5:6a:ef:25:8c:08:7d:25: b4:0a:94:0f:36:13:02:a0:9c:c0:07:0b:ef:a0:c8:1c:c6:88: 32:af:1f:de:0f:ed:df:7b:5d:01:d3:fe:d4:99:e7:a4:e4:e7: 9f:fd:f6:0b:53:d7:99:1c:e7:89:70:ef:a5:41:be:04:74:17: a2:4c:dd:0b:98:7b:83:80:8d:27:39:87:62:ce:6e:69:3f:27: 47:88:50:40:39:26:e0:49:13:60:cc:3c:a0:cc:b6:af:09:15: db:af:e1:39:20:dc:c6:35:ac:b9:2e:8e:d3:a2:3a:c1:00:93: 5b:d1:86:75 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUHxtjkphNpgVIbSRSPteVJV2NJDkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhhOTNjODFlY2QzMDhlNmE3NjMyNzE3MDQ1YjNkMzUx NTAxMjBmODAeFw0yNTAyMDExNDUwMzRaFw0yNTAyMDIxODE3MzRaMDMxMTAvBgNV BAMTKENGMzIyQUJFRkE2RTU3Q0QyODFFRjY2M0E2QjhGRTRERkVCN0I5NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXuY1IM1rCbl1J/fuQXgAuhs1e sd/1xROWqZW21HP12DNpu+9Vs/n3u9VEFO/lORQbaA6PrBYO5cTjnfVlKaF3asz5 O7e4GjXPL5J4DDGY2amVLuLY+gEdR13Xqj93QQu3Y+cGK729pJ6r7Z3f7envIT90 AWZN8+fi2N1jFgwaALuoljr16bGK9eixK1f0Mfp1q8NqSlpX6wddSynwG5hcoqDb VZZkfVH19KZEpZl1PwWpRT1h/dtWuCvdqDhLBsAKkSBn3MM76lUtX40ZGZrIj0Uj KLJos1dxAsK3/C3cqh0v4y7isGyR3SiLa3kbq/6i+DWbiSwl+lrb8w9jeImrAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUzzIqvvpuV80oHvZjprj+Tf63uVkwHwYDVR0j BBgwFoAUOKk8gezTCOanYycXBFs9NRUBIPgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTgyYzY1YjktNzI1ZC00YmIwLWEyMTYtOGU3NzE5MWZm OWI4LzAvMzhBOTNDODFFQ0QzMDhFNkE3NjMyNzE3MDQ1QjNEMzUxNTAxMjBGOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL09LazhnZXpUQ09hbll5Y1hCRnM5TlJV QklQZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ODJjNjViOS03 MjVkLTRiYjAtYTIxNi04ZTc3MTkxZmY5YjgvMC8zOEE5M0M4MUVDRDMwOEU2QTc2 MzI3MTcwNDVCM0QzNTE1MDEyMEY4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASkkmkO3DzOzdU5VKmDFs cNyg1LCtZrK9UB20WQgaQ6cY9yF7wiPA48SRPtzyk+2P0kbvLq2W65v55969cGfc 7vDJgdj/8uHXIoJauTT6Sy7fycUTikv9Z8NFfL5JpyQ2e+Xc/HopGYt8Gu4tAIna DCUIGbuFjTRJk5/d5heaiXtkMga6/v9wI+Vq7yWMCH0ltAqUDzYTAqCcwAcL76DI HMaIMq8f3g/t33tdAdP+1JnnpOTnn/32C1PXmRzniXDvpUG+BHQXokzdC5h7g4CN JzmHYs5uaT8nR4hQQDkm4EkTYMw8oMy2rwkV26/hOSDcxjWsuS6O06I6wQCTW9GG dQ== -----END CERTIFICATE-----Generated at Sun Feb 2 07:04:41 2025 by rpki-client