$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft File: 8F4CE7722F99075D94738B7E61070401269EB3D6.mft (raw, json) Hash identifier: oWtlanlOYFvNKydte1NAmi884fB4LGgsOdBQhulWseQ= Subject key identifier: 01:37:71:32:8A:45:99:94:F1:BD:C4:E9:7B:D6:EE:55:92:5C:6A:3C Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6 Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6 Certificate serial: 15D54649EFE9BE76D3AF5EA31C93C638C6C5B2CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft Manifest number: 0398 Signing time: Thu 21 Nov 2024 22:38:40 +0000 Manifest this update: Thu 21 Nov 2024 22:33:40 +0000 Manifest next update: Fri 22 Nov 2024 22:51:40 +0000 Files and hashes: 1: 36322e3139322e3137352e302f32342d3234203d3e203332313637.roa (hash: Cpd8yjyP6Pj6lsQ2rZ8NEinYWKDtve9LRtCY/PfJ4hY=) 2: 3138352e3138312e302e302f32342d3234203d3e20323135363232.roa (hash: m/oIQYRMYKrcoJuR6mz4JZedxpEj7xZ6BHA3PkQyNSk=) 3: 3138352e3138312e332e302f32342d3234203d3e20323030303137.roa (hash: Lou4vvYiSAy2voI0SZqwtmZNxoTRb8e5r/f8gOfrdrI=) 4: 3231322e3130322e3131342e302f32342d3234203d3e20323132363039.roa (hash: ZrA/MtoNCPBJdGYJK0jrTVw5wGbgicWUD7odkDVTP3w=) 5: 36322e3139322e3137322e302f32342d3234203d3e20323733333438.roa (hash: mtT7BTHKRu2rgoLVza80evw9RWcvZJ2SCQGIJYwOGN0=) 6: 38352e3230392e31362e302f32342d3234203d3e20343030303339.roa (hash: UgI/51A2bcq107ZFEky5Ecfs8BRKlXHWJ17xhKHSilI=) 7: 3138352e3138312e322e302f32342d3234203d3e20323132363639.roa (hash: qfsSfO3u+aEvqfryOy+1rEoddfZZVNVWf2CgNggMkdo=) 8: 37372e38332e3235332e302f32342d3234203d3e20333938333835.roa (hash: YfFARHbeyn8I02CqI9mdvuolpWMnEI9v9CXBSyH46/s=) 9: 3138352e3138312e312e302f32342d3234203d3e203232313638.roa (hash: PRTTOxbeXI2/gRZPeKbPFH7+pJEKtXVlCe5sAgzgvR0=) 10: 37372e38332e3235352e302f32342d3234203d3e20333937333733.roa (hash: G3ktlo5Pg6qzwxzsge9w8i5/SWUPTUDok4BusGXoygw=) 11: 37372e38332e3235322e302f32342d3234203d3e203533313037.roa (hash: kVRW91gUQQJKDevSNusyEaCMFEQt6idZ9U9pUTvlEwg=) 12: 38352e3230392e31372e302f32342d3234203d3e2038313030.roa (hash: pLWChihbDvjfrasKe+t2DYZzXoPPv1CnrKCMYicuojE=) 13: 37372e38332e3235342e302f32342d3234203d3e20333936303733.roa (hash: /sKsILc6ripbGrrjZfOCzHw6x84hkL37MuytXcwGW/A=) 14: 8F4CE7722F99075D94738B7E61070401269EB3D6.crl (hash: Lm6hJRKzDMbBhdOwxgvoF0zfF8wd/437BDXBL1UC2f8=) 15: 38352e3230392e31392e302f32342d3234203d3e203131383738.roa (hash: CAxVMMWN+S6NlP/AsgS1tyjuFvGWAaxzAHmHeH0vGZY=) 16: 3139332e3136332e3132372e302f32342d3234203d3e20313439393438.roa (hash: eWXMMSA0Rq5koOaRaaHhcbU4ocE3NTgDUdKA5XEeLVo=) 17: 36322e3139322e3137342e302f32342d3234203d3e20313939303538.roa (hash: ngHdoUxJymyOOTpWXLZA6HfqcGQkxKDww9uhl5L3bs4=) 18: 36322e3139322e3137332e302f32342d3234203d3e2038313030.roa (hash: Jlofucguv+Def3PUKBrJxZOJZBY4eY6+vW3Y4ZeprSk=) 19: 38352e3230392e31382e302f32342d3234203d3e20323132343136.roa (hash: eVP9RPY/WpuBxj4uRQpsGyWhFlJEVn2o5gOxlnEx12Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 18:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:d5:46:49:ef:e9:be:76:d3:af:5e:a3:1c:93:c6:38:c6:c5:b2:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6 Validity Not Before: Nov 21 22:33:40 2024 GMT Not After : Nov 22 22:51:40 2024 GMT Subject: CN=013771328A459994F1BDC4E97BD6EE55925C6A3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a2:ff:83:da:d3:00:b2:82:81:40:0c:6d:69: 47:5b:58:fc:26:ef:82:8d:6b:36:7c:e1:f6:92:9f: 4f:21:92:2b:1d:20:6a:2e:48:ae:e4:e4:f2:08:3b: 60:4e:12:40:44:02:d8:d9:2d:31:34:92:31:68:33: 3a:69:99:9b:fe:f7:d1:7c:48:34:69:2f:97:d9:50: 5c:4d:01:3b:bc:d5:f3:8e:a3:fb:46:87:d8:91:fa: 0e:f9:18:d6:11:92:b5:bc:49:74:03:5d:df:a9:50: d9:99:95:57:7d:9e:ef:36:9c:d4:91:95:8f:7a:63: 34:f1:88:aa:d7:b9:77:ea:a9:a9:fe:5c:32:84:a1: 2d:fc:2e:e2:92:8a:de:4d:31:a3:2c:1f:3e:05:69: c0:e9:32:3c:b8:4d:11:2b:4b:be:15:74:99:65:aa: d1:fc:0f:53:c7:3f:f6:ad:f7:15:2b:c0:b1:64:2a: 0b:28:62:fc:cd:7f:16:d8:30:c0:b1:f9:18:ba:33: 24:f4:8a:e2:85:51:60:ed:e5:76:be:49:21:56:c7: dd:4f:f5:18:a2:26:dd:22:a5:cb:8f:d6:9d:c7:53: e6:c2:c5:4d:21:a7:52:8b:8d:5f:1e:9e:58:fc:c1: 52:13:e6:79:86:b6:9c:62:08:39:f7:66:b7:8e:5c: f1:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:37:71:32:8A:45:99:94:F1:BD:C4:E9:7B:D6:EE:55:92:5C:6A:3C X509v3 Authority Key Identifier: keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:b0:06:0d:20:2e:1e:d4:24:ec:39:b6:5c:fd:07:22:2d:59: b2:c6:fc:87:4c:95:c1:62:a2:96:d7:1f:3e:05:c6:30:56:c2: d3:55:0c:d8:ec:d1:89:c4:03:05:e3:11:f3:71:b4:21:74:3b: 12:90:32:ad:77:c4:e5:f9:2e:ea:e7:aa:e9:13:0e:57:12:82: 53:fc:a2:43:59:39:fa:e7:62:9b:be:e6:4a:94:0d:01:64:8a: 66:cb:b0:be:ff:6d:7f:88:51:91:1b:cb:08:ee:8b:e0:ac:49: f6:65:d9:7f:8d:7e:80:a4:2a:65:a8:e6:51:29:2a:69:f5:da: 9c:e8:f0:ac:74:95:8f:4d:20:ee:f8:2f:5f:8e:98:e7:ab:ba: 05:34:ce:b8:f7:5e:48:31:9b:c1:aa:e8:19:dc:78:f5:76:22: e5:2b:f2:34:0c:ae:9f:54:ac:d2:3e:e4:44:a2:ab:57:85:bc: 6c:5f:6a:00:8c:9f:ff:8d:c3:3b:64:e2:92:a7:f8:4d:d1:6b: 43:bd:ec:44:d7:69:81:67:f0:55:4d:aa:a5:90:1c:9e:94:cc: 9a:f8:52:7d:de:f6:99:e6:8f:56:01:b5:90:98:d4:22:00:58: 2d:ee:08:d5:be:2d:ef:d8:d2:51:1e:45:35:a3:70:84:cb:71: 7f:a6:ed:9b -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUFdVGSe/pvnbTr16jHJPGOMbFssowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGY0Y2U3NzIyZjk5MDc1ZDk0NzM4YjdlNjEwNzA0MDEy NjllYjNkNjAeFw0yNDExMjEyMjMzNDBaFw0yNDExMjIyMjUxNDBaMDMxMTAvBgNV BAMTKDAxMzc3MTMyOEE0NTk5OTRGMUJEQzRFOTdCRDZFRTU1OTI1QzZBM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaov+D2tMAsoKBQAxtaUdbWPwm 74KNazZ84faSn08hkisdIGouSK7k5PIIO2BOEkBEAtjZLTE0kjFoMzppmZv+99F8 SDRpL5fZUFxNATu81fOOo/tGh9iR+g75GNYRkrW8SXQDXd+pUNmZlVd9nu82nNSR lY96YzTxiKrXuXfqqan+XDKEoS38LuKSit5NMaMsHz4FacDpMjy4TRErS74VdJll qtH8D1PHP/at9xUrwLFkKgsoYvzNfxbYMMCx+Ri6MyT0iuKFUWDt5Xa+SSFWx91P 9RiiJt0ipcuP1p3HU+bCxU0hp1KLjV8enlj8wVIT5nmGtpxiCDn3ZreOXPFbAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUATdxMopFmZTxvcTpe9buVZJcajwwHwYDVR0j BBgwFoAUj0znci+ZB12Uc4t+YQcEASaes9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWE5NzcxMTUtNTExMC00MjU3LTk0ZWYtNGQyYjQzODg0 MDQwLzAvOEY0Q0U3NzIyRjk5MDc1RDk0NzM4QjdFNjEwNzA0MDEyNjlFQjNENi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2owem5jaS1aQjEyVWM0dC1ZUWNFQVNh ZXM5WS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTk3NzExNS01 MTEwLTQyNTctOTRlZi00ZDJiNDM4ODQwNDAvMC84RjRDRTc3MjJGOTkwNzVEOTQ3 MzhCN0U2MTA3MDQwMTI2OUVCM0Q2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhbAGDSAuHtQk7Dm2XP0H Ii1Zssb8h0yVwWKiltcfPgXGMFbC01UM2OzRicQDBeMR83G0IXQ7EpAyrXfE5fku 6ueq6RMOVxKCU/yiQ1k5+udim77mSpQNAWSKZsuwvv9tf4hRkRvLCO6L4KxJ9mXZ f41+gKQqZajmUSkqafXanOjwrHSVj00g7vgvX46Y56u6BTTOuPdeSDGbwaroGdx4 9XYi5SvyNAyun1Ss0j7kRKKrV4W8bF9qAIyf/43DO2Tikqf4TdFrQ73sRNdpgWfw VU2qpZAcnpTMmvhSfd72meaPVgG1kJjUIgBYLe4I1b4t79jSUR5FNaNwhMtxf6bt mw== -----END CERTIFICATE-----Generated at Fri Nov 22 00:59:19 2024 by rpki-client on console-fra.rpki-client.org