$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft File: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft (raw, json) Hash identifier: TceJSV3+tSD0wmUZ28jryNoJRbjUQ9rBVDpSrMtu3cU= Subject key identifier: 22:D2:61:F0:B5:38:4A:7C:A8:78:75:95:9A:32:7D:FA:CE:D5:50:FA Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D Certificate issuer: /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Certificate serial: 53FBA70F68577ED42D19DB83A279A6D32BDBA396 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft Manifest number: 02D8 Signing time: Thu 21 Nov 2024 18:28:40 +0000 Manifest this update: Thu 21 Nov 2024 18:23:40 +0000 Manifest next update: Fri 22 Nov 2024 20:11:40 +0000 Files and hashes: 1: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl (hash: BlgL1NOo+Yz6s03anItlbkXerEDTTjwBMjwUBOEHQ6I=) 2: 326130303a316466303a3a2f33322d3332203d3e2035343634.roa (hash: XMw9F313q7zqwk9WgKtqBIUnF54AehPCvxl08cqiMlw=) 3: 3139352e3138342e39322e302f32332d3233203d3e2035343634.roa (hash: croMu0E9wofvL0uxcR7zjKLYZEonbZiHP8TK6ggNZ7I=) 4: 3139342e302e3232392e302f32342d3234203d3e2035343634.roa (hash: oQyH8lZhLG0u0aqF+4s4indFn1nAIdiedV1waxwDSVA=) 5: 36322e3131322e3132382e302f32302d3234203d3e20313338393937.roa (hash: ujOzcUFn73GlYynt8yef9LZrmhEywDFvXOhmuSoBoLw=) 6: 36322e3131322e3132382e302f32302d3234203d3e20323130353432.roa (hash: LBMUHWugPGnJtw9mI4PuIshgxiedjcAOS8XKlWg3eYE=) 7: 36322e3131322e3134342e302f32302d3230203d3e20313734.roa (hash: Ad72tjH/2ejz4oVBvE15bChc+ZghBWzMmGhckXgb9l8=) 8: 3139352e3138342e39322e302f32332d3234203d3e203631333137.roa (hash: A1CjnV+NyDZwOVxdBcrWKwBSG1WxLzqze1hZgIjxST4=) 9: 3138352e322e3136302e302f32332d3234203d3e203630373831.roa (hash: lDHC0uXlsWzGsCJy6xBreXXKsUIglQFgdCUDr09FadE=) 10: 3138352e322e3136322e302f32332d3234203d3e203631333137.roa (hash: xuGHb5eFyDpCiqjUnIbYBR/C7LQ6gO7xQmGZCCQydXc=) 11: 3139332e33372e3233362e302f32342d3234203d3e203631333137.roa (hash: WiqoWKXOz7ZQhMXXduL0+zFQFmjEeKBsMMHhWo7WoIA=) 12: 323030313a3637633a3333633a3a2f34382d3438203d3e2035343634.roa (hash: ctmz9i6j9MzmoRzm8Yae2LkIQQsvUmf+XGfjJWt9iD4=) 13: 36322e3131322e3132382e302f32302d3234203d3e20313532313739.roa (hash: cwrS6A/oM7uVoRnag/rHPBb4Qk8hZAq3bZyA0gVPCzk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 17:16:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:fb:a7:0f:68:57:7e:d4:2d:19:db:83:a2:79:a6:d3:2b:db:a3:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Validity Not Before: Nov 21 18:23:40 2024 GMT Not After : Nov 22 20:11:40 2024 GMT Subject: CN=22D261F0B5384A7CA87875959A327DFACED550FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:12:84:02:ec:54:1f:a8:90:3c:b6:af:a6:98: d8:c0:d5:e2:8c:18:73:4b:ac:c5:53:44:f0:f1:62: 74:94:b9:06:df:96:19:0e:7e:72:b6:d0:d6:73:ef: 22:34:0a:b8:db:c1:59:b7:43:55:46:49:72:e5:ac: ae:01:08:84:49:d8:bf:29:84:25:57:c3:99:1b:3a: a7:34:ac:cf:56:e1:52:03:6b:16:85:7f:e5:28:d3: 01:e8:4a:c0:3d:d6:4e:a3:2b:2d:55:27:a1:df:b7: ed:60:ab:5a:32:98:a0:bc:9c:ca:b0:92:ff:43:63: 4f:56:87:e8:72:a6:93:6b:1b:f5:1c:fb:10:ac:60: 18:81:6c:ff:88:47:df:b9:d2:30:11:78:aa:0b:34: 6c:4d:cd:38:fa:e0:b0:7d:65:9f:eb:62:1b:f2:06: ca:79:2d:ea:03:7e:d4:b5:9b:c5:6f:eb:dd:d3:bb: c7:1d:a9:e2:83:8a:c6:65:96:9a:ee:51:53:40:99: 98:9e:27:05:20:f9:8e:bd:40:37:66:de:88:3a:b0: 96:b2:47:fe:69:a8:d5:75:17:e9:d4:d4:15:3b:41: b0:fc:50:a2:58:cb:e7:c7:39:d8:2a:58:e2:04:c6: 95:9f:5b:63:c3:0f:e8:85:06:98:58:aa:12:ac:3d: e5:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D2:61:F0:B5:38:4A:7C:A8:78:75:95:9A:32:7D:FA:CE:D5:50:FA X509v3 Authority Key Identifier: keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:f8:71:b9:24:41:06:84:9a:6e:0c:0d:b1:1a:cc:ec:cd:55: b4:3e:41:50:ac:f6:bd:b8:1d:4e:64:26:90:c7:d7:19:a4:9a: 67:a7:99:e1:cc:18:4c:3d:80:b8:ee:49:c5:bf:fb:1f:72:e0: e5:d7:ba:b8:08:20:ee:97:30:bd:74:1c:b7:ee:0d:b2:d5:14: 23:25:f4:75:51:03:2b:ba:44:8d:aa:3e:7b:bc:0f:fc:64:66: 97:8f:5c:66:0a:6a:4a:d6:ec:e6:07:5e:a2:a3:2a:c3:59:1c: 1e:e4:96:c8:33:cc:53:9b:c0:4a:22:ac:70:ba:31:58:29:3d: 07:e1:89:95:3e:45:7b:a7:53:55:01:00:77:9d:c9:6b:59:1f: 5f:9b:3f:ac:60:48:d1:0c:a3:54:f7:07:39:11:0c:ca:c9:7e: 00:7f:c4:ab:4e:ef:10:14:db:aa:f9:ac:cb:5c:bc:0e:11:ed: e5:72:6d:8c:e8:d9:90:c1:92:62:75:fb:cc:97:0d:35:87:d6: a5:c1:8e:40:93:b0:dc:27:3f:06:38:d5:d3:7a:b4:70:1a:e7: 5f:6f:62:87:6b:18:7b:27:50:3e:f8:41:89:ef:00:a3:a1:14: a2:82:52:18:56:d5:eb:c8:0f:a8:cc:1b:9e:a6:29:98:d1:91: 38:86:59:1f -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUU/unD2hXftQtGduDonmm0yvbo5YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWYwZDI0Yzg1NWVlZTAwZmU0YWJmMzkwM2M2ZThmY2M3 MDgzZWQ0ZDAeFw0yNDExMjExODIzNDBaFw0yNDExMjIyMDExNDBaMDMxMTAvBgNV BAMTKDIyRDI2MUYwQjUzODRBN0NBODc4NzU5NTlBMzI3REZBQ0VENTUwRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChEoQC7FQfqJA8tq+mmNjA1eKM GHNLrMVTRPDxYnSUuQbflhkOfnK20NZz7yI0CrjbwVm3Q1VGSXLlrK4BCIRJ2L8p hCVXw5kbOqc0rM9W4VIDaxaFf+Uo0wHoSsA91k6jKy1VJ6Hft+1gq1oymKC8nMqw kv9DY09Wh+hyppNrG/Uc+xCsYBiBbP+IR9+50jAReKoLNGxNzTj64LB9ZZ/rYhvy Bsp5LeoDftS1m8Vv693Tu8cdqeKDisZllpruUVNAmZieJwUg+Y69QDdm3og6sJay R/5pqNV1F+nU1BU7QbD8UKJYy+fHOdgqWOIExpWfW2PDD+iFBphYqhKsPeXdAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUItJh8LU4SnyoeHWVmjJ9+s7VUPowHwYDVR0j BBgwFoAUnw0kyFXu4A/kq/OQPG6PzHCD7U0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWYzMTc2OGQtNDJiMS00ZTkyLWI4M2YtYmVmN2VlMDE3 ODEzLzAvOUYwRDI0Qzg1NUVFRTAwRkU0QUJGMzkwM0M2RThGQ0M3MDgzRUQ0RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL253MGt5Rlh1NEFfa3FfT1FQRzZQekhD RDdVMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZjMxNzY4ZC00 MmIxLTRlOTItYjgzZi1iZWY3ZWUwMTc4MTMvMC85RjBEMjRDODU1RUVFMDBGRTRB QkYzOTAzQzZFOEZDQzcwODNFRDRELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYvhxuSRBBoSabgwNsRrM 7M1VtD5BUKz2vbgdTmQmkMfXGaSaZ6eZ4cwYTD2AuO5Jxb/7H3Lg5de6uAgg7pcw vXQct+4NstUUIyX0dVEDK7pEjao+e7wP/GRml49cZgpqStbs5gdeoqMqw1kcHuSW yDPMU5vASiKscLoxWCk9B+GJlT5Fe6dTVQEAd53Ja1kfX5s/rGBI0QyjVPcHOREM ysl+AH/Eq07vEBTbqvmsy1y8DhHt5XJtjOjZkMGSYnX7zJcNNYfWpcGOQJOw3Cc/ BjjV03q0cBrnX29ih2sYeydQPvhBie8Ao6EUooJSGFbV68gPqMwbnqYpmNGROIZZ Hw== -----END CERTIFICATE-----Generated at Thu Nov 21 21:58:16 2024 by rpki-client on console-ams.rpki-client.org