$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft File: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft (raw, json) Hash identifier: 3DvSF44UEJzN81rXU6aoe6oBhVD/YH7NyjJWrwnzZdU= Subject key identifier: 9B:54:EE:74:C1:E9:A9:F7:3A:42:F4:1A:16:7B:87:D5:17:7C:4E:D6 Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D Certificate issuer: /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Certificate serial: 709C920A78BEF597BB4E4EC60A6A9A1F3C1684B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft Manifest number: 01D3 Signing time: Thu 16 May 2024 21:47:04 +0000 Manifest this update: Thu 16 May 2024 21:42:04 +0000 Manifest next update: Sat 18 May 2024 00:21:04 +0000 Files and hashes: 1: 36322e3131322e3134342e302f32302d3233203d3e203134363138.roa (hash: BQqS+ENoluPvvGDs1a6f197QeJNMvxpt54Fq5Jh8Uaw=) 2: 326130303a316466303a3a2f33322d3332203d3e2035343634.roa (hash: mD9rj17VokpJCsZ9H9Ae95tSKaSHLOh9aSfK+NPmDqE=) 3: 36322e3131322e3132382e302f32302d3234203d3e20313532313739.roa (hash: 4OD07bikEzVW0f0iJwddTiHo4kOtaHyua4YRDwBLj8A=) 4: 323030313a3637633a3333633a3a2f34382d3438203d3e2035343634.roa (hash: YgvvK/zBdCtbBPNw66EY7ndL/w4D6VPizjCm/P3Lbtg=) 5: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl (hash: CKJa1UAPUfKSnfR7hQdzmpHci38c5OUrxpdurNBdovE=) 6: 3138352e322e3136302e302f32332d3233203d3e203130313033.roa (hash: 33zUHby3oxz4wj8BYiAKDnKFZKq7ahMTMDVjb6Xaft8=) 7: 36322e3131322e3134342e302f32302d3233203d3e203136353039.roa (hash: eWLKKmcEz6pqT5QZbBFFmS/7ZGC8IHApE48l8PsxN2w=) 8: 3138352e322e3136322e302f32332d3234203d3e203631333137.roa (hash: xuGHb5eFyDpCiqjUnIbYBR/C7LQ6gO7xQmGZCCQydXc=) 9: 36322e3131322e3132382e302f32302d3234203d3e20323130353432.roa (hash: yHuc6hkl8kJZ1Q4Kq8/vGQ+ttjQnfZvI1todeXtkvr8=) 10: 3139352e3138342e39322e302f32332d3234203d3e203631333137.roa (hash: f5jrt2CWljY9HqbxEbBNBNyfysfYPVh05SyiS6Jp5fI=) 11: 3139342e302e3232392e302f32342d3234203d3e2035343634.roa (hash: FKiu19v3Hkj5Qs6P/azaWmAsLtNKahx6VwLt7vWw5HQ=) 12: 3139332e33372e3233362e302f32342d3234203d3e203631333137.roa (hash: vK1uTf3qqZSPswjNCNPaGtlQPbroJTPr1O6doLBqosU=) 13: 3139352e3138342e39322e302f32332d3233203d3e2035343634.roa (hash: oMXp2/l5KkMSfFsxhWbaERnhfNn9+sT2I7U3nAxd+WE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 May 2024 14:49:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:9c:92:0a:78:be:f5:97:bb:4e:4e:c6:0a:6a:9a:1f:3c:16:84:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d Validity Not Before: May 16 21:42:04 2024 GMT Not After : May 18 00:21:04 2024 GMT Subject: CN=9B54EE74C1E9A9F73A42F41A167B87D5177C4ED6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d2:fc:19:9d:38:83:61:dd:fd:eb:a9:15:60: ae:ee:38:ee:8c:1e:f1:2a:2e:f9:de:37:26:38:40: 07:b1:33:18:32:03:22:7f:51:52:8a:91:46:f3:13: a7:fc:f6:7b:d1:f8:c5:80:e9:90:e0:da:51:b7:23: b3:d4:0f:e0:72:ab:84:3f:7f:5b:5d:62:e3:43:7b: cf:58:d4:79:21:9b:c5:0d:30:9f:b1:3e:51:c6:d9: 2b:5a:24:07:ca:90:ec:fd:06:22:ff:04:ce:99:3d: 05:ab:c9:cb:03:02:37:18:d2:6e:a9:3f:70:64:e8: b4:fe:4b:99:62:8d:06:5d:e9:cc:f1:4c:89:e9:ee: 08:38:29:8f:5e:2d:34:1b:38:cb:c1:00:1c:c4:9f: ca:6e:31:b8:e7:2c:f5:91:27:1c:c9:2a:aa:f2:d1: b3:a0:60:68:fe:26:f3:7c:bb:d4:9a:4e:d5:14:46: 49:b7:66:95:23:7c:da:b0:76:85:cf:1c:c7:c3:7c: 6f:28:15:f1:24:7a:ad:0e:a9:13:ca:93:85:1d:c1: 63:fb:e2:52:27:47:b6:7b:7d:a4:be:08:a9:85:1c: 75:ce:cf:29:01:d0:37:ea:dc:0d:d9:72:f9:22:fe: 0b:f6:4c:a2:4d:b7:5f:02:7d:5b:c5:39:46:3c:c6: 5d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:54:EE:74:C1:E9:A9:F7:3A:42:F4:1A:16:7B:87:D5:17:7C:4E:D6 X509v3 Authority Key Identifier: keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:b9:37:95:13:20:e8:b8:10:4a:86:0e:ef:7e:90:bf:11:9f: bf:1d:b0:ec:b8:3f:f7:f3:81:7e:1d:cb:dc:b8:c0:46:4d:ee: cc:f1:22:cf:40:38:53:56:2b:6f:cc:cb:2f:76:63:15:71:61: 3b:67:b9:ad:61:50:f9:79:b7:20:23:6c:33:37:51:78:87:5b: cf:95:23:f7:54:88:1b:5e:01:47:27:b2:cd:da:61:62:27:4b: ec:26:12:f5:d8:1d:56:62:46:23:b0:a9:ab:78:b0:fd:db:c8: c0:f5:6c:43:49:ba:fb:a4:f5:7a:cc:91:78:a8:9b:47:f2:fd: 99:00:ed:9f:4e:9e:8b:5f:3f:68:c7:61:2c:d0:e6:ff:69:82: 34:50:03:0f:6c:a6:09:95:a5:c0:28:23:04:52:81:75:1a:14: 50:ad:c8:60:fe:c8:a5:c3:86:43:34:b6:78:db:ab:10:4a:50: 07:bf:d8:75:88:d7:a7:63:39:54:ae:af:42:59:14:dc:b6:64: 09:1d:c6:04:fc:a9:c2:01:fd:cf:b7:2b:9e:d7:86:67:75:23: 82:28:6d:0f:15:68:d9:b4:98:ed:7a:54:66:b9:75:0a:11:30: 18:1d:a6:29:b6:30:c6:ca:00:9b:70:fd:72:90:e4:b9:b4:a1: b0:fa:53:62 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUcJySCni+9Ze7Tk7GCmqaHzwWhLMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWYwZDI0Yzg1NWVlZTAwZmU0YWJmMzkwM2M2ZThmY2M3 MDgzZWQ0ZDAeFw0yNDA1MTYyMTQyMDRaFw0yNDA1MTgwMDIxMDRaMDMxMTAvBgNV BAMTKDlCNTRFRTc0QzFFOUE5RjczQTQyRjQxQTE2N0I4N0Q1MTc3QzRFRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR0vwZnTiDYd3966kVYK7uOO6M HvEqLvneNyY4QAexMxgyAyJ/UVKKkUbzE6f89nvR+MWA6ZDg2lG3I7PUD+Byq4Q/ f1tdYuNDe89Y1Hkhm8UNMJ+xPlHG2StaJAfKkOz9BiL/BM6ZPQWrycsDAjcY0m6p P3Bk6LT+S5lijQZd6czxTInp7gg4KY9eLTQbOMvBABzEn8puMbjnLPWRJxzJKqry 0bOgYGj+JvN8u9SaTtUURkm3ZpUjfNqwdoXPHMfDfG8oFfEkeq0OqRPKk4UdwWP7 4lInR7Z7faS+CKmFHHXOzykB0Dfq3A3Zcvki/gv2TKJNt18CfVvFOUY8xl2fAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUm1TudMHpqfc6QvQaFnuH1Rd8TtYwHwYDVR0j BBgwFoAUnw0kyFXu4A/kq/OQPG6PzHCD7U0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWYzMTc2OGQtNDJiMS00ZTkyLWI4M2YtYmVmN2VlMDE3 ODEzLzAvOUYwRDI0Qzg1NUVFRTAwRkU0QUJGMzkwM0M2RThGQ0M3MDgzRUQ0RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL253MGt5Rlh1NEFfa3FfT1FQRzZQekhD RDdVMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZjMxNzY4ZC00 MmIxLTRlOTItYjgzZi1iZWY3ZWUwMTc4MTMvMC85RjBEMjRDODU1RUVFMDBGRTRB QkYzOTAzQzZFOEZDQzcwODNFRDRELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKbk3lRMg6LgQSoYO736Q vxGfvx2w7Lg/9/OBfh3L3LjARk3uzPEiz0A4U1Yrb8zLL3ZjFXFhO2e5rWFQ+Xm3 ICNsMzdReIdbz5Uj91SIG14BRyeyzdphYidL7CYS9dgdVmJGI7Cpq3iw/dvIwPVs Q0m6+6T1esyReKibR/L9mQDtn06ei18/aMdhLNDm/2mCNFADD2ymCZWlwCgjBFKB dRoUUK3IYP7IpcOGQzS2eNurEEpQB7/YdYjXp2M5VK6vQlkU3LZkCR3GBPypwgH9 z7crnteGZ3UjgihtDxVo2bSY7XpUZrl1ChEwGB2mKbYwxsoAm3D9cpDkubShsPpT Yg== -----END CERTIFICATE-----Generated at Thu May 16 22:56:35 2024 by rpki-client on console-ams.rpki-client.org