$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft File: F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft (raw, json) Hash identifier: Uy/dODf40PxC3qcGQcoeO6OryVE8cFQq1Vvlk2IdZMQ= Subject key identifier: 20:52:EC:E8:18:CC:56:30:1C:3E:9E:B0:A0:F2:D7:01:9C:70:BD:4B Authority key identifier: F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD Certificate issuer: /CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad Certificate serial: 7E44E1E773581A9E406048F9226E7E1C9EE3FEC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft Manifest number: 0414 Signing time: Thu 16 Jan 2025 06:14:36 +0000 Manifest this update: Thu 16 Jan 2025 06:09:36 +0000 Manifest next update: Fri 17 Jan 2025 10:04:36 +0000 Files and hashes: 1: F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl (hash: P4HbBaoJKpP0CLvqnR1IHSx11CE9yeVLn+KCN7PCRcE=) 2: 3139332e39332e3135352e302f32342d3234203d3e203631333137.roa (hash: SV7SbziqH7eMIEMJIbsVc3dV1p2SM237aRtzHljTDkg=) 3: 3139332e39332e3135352e302f32342d3234203d3e203230343733.roa (hash: Yia13ZpyH/rxCHPO1ZKxkaJKT40u4xmMRfCLnQCmpaw=) 4: 326130303a386530303a313a3a2f34382d3438203d3e203230373132.roa (hash: jAOxURrHtZvlqdFVdBr3F4ACmPO4DT4L5AmOtZPktVY=) 5: 34362e3235302e3234302e302f32302d3234203d3e20313431393935.roa (hash: NLU++5xZjzD437PtmNgvfxHCqYMIFnb00RqdIBmj2Iw=) 6: 3139332e39332e3135342e302f32342d3234203d3e20323131343135.roa (hash: lcDvK25Krwnz/wCtWIMtJ+GA0fjdNOA7l7WMMKyVVUU=) 7: 34362e3235302e3232342e302f32302d3234203d3e20313431393935.roa (hash: j/tvDF/xrBJ6Z/GVFcZpOag/ZBQuFXiJ56kFmYlSx34=) 8: 3139332e39332e3135332e302f32342d3234203d3e203439313237.roa (hash: muToXyQQPQk1kATIKIk2PX93pnZZn2qQ05PiLXKydlA=) 9: 3139332e39332e3135332e302f32342d3234203d3e20323134303336.roa (hash: FgMfWX7zLNqyUMvyIkAVqVqXpYApxS0iTmFAdZ7lH9Q=) 10: 3139332e39332e3135322e302f32342d3234203d3e20313939363134.roa (hash: jNaGJEHXg+vn+v2vVdhmJa1IVdEz/D1ggT5kvM1c0Hk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Jan 2025 08:50:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:44:e1:e7:73:58:1a:9e:40:60:48:f9:22:6e:7e:1c:9e:e3:fe:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad Validity Not Before: Jan 16 06:09:36 2025 GMT Not After : Jan 17 10:04:36 2025 GMT Subject: CN=2052ECE818CC56301C3E9EB0A0F2D7019C70BD4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:82:46:d6:7c:8f:5b:e7:90:9a:c1:b7:c3:83: 37:ba:c3:67:54:21:4c:db:61:66:b4:3b:02:6e:12: 2e:4d:c2:84:70:cd:cb:b2:26:8c:a3:9d:b2:38:5c: 5f:25:32:03:a9:dd:b8:8a:94:17:49:fd:85:52:99: 64:43:d8:bd:78:70:fd:42:97:f8:6d:1a:b0:3e:fb: a7:02:f5:f8:7e:4f:41:5a:29:98:3a:05:af:b3:27: 8b:75:43:78:20:ba:1f:1f:56:5b:50:c4:5f:12:53: f7:e9:22:3c:58:e8:85:e7:66:7e:9a:b3:0d:09:9d: 99:df:73:99:8a:9f:93:66:a3:08:cf:8e:ec:96:5d: 96:96:31:b1:f9:a5:76:18:07:f7:c3:2b:a5:28:41: ad:ee:3e:0a:f2:a4:e1:da:c4:18:fc:d2:a2:3e:3c: dd:ba:31:93:9e:7f:f4:cf:3e:24:73:18:1f:40:14: e5:c7:64:81:0c:4c:99:fa:3f:52:fc:19:26:e1:ce: 3e:16:a4:60:cf:1b:c9:5e:e1:f5:76:ea:b2:0f:01: ca:58:9d:a8:51:35:e3:97:60:b3:37:e6:f2:2a:63: 75:7a:bc:85:95:ae:db:d2:53:d8:41:f9:8e:0c:88: 79:94:03:0e:3d:0c:c8:da:97:03:06:22:e7:fd:ed: 88:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:52:EC:E8:18:CC:56:30:1C:3E:9E:B0:A0:F2:D7:01:9C:70:BD:4B X509v3 Authority Key Identifier: keyid:F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:ef:d3:db:a5:b0:59:95:93:79:05:3c:06:01:d6:ef:9e:07: 01:35:71:11:79:5d:93:c4:64:e4:67:c2:47:26:29:72:d4:18: 77:7b:c6:b6:69:a4:6a:ec:0c:67:0a:f3:f8:f0:04:97:89:b9: 54:4f:41:d0:da:77:57:0e:4c:73:d5:30:d7:9b:66:bd:dd:7d: da:d2:64:ca:ff:d0:23:98:b2:13:5b:52:e4:3c:58:3f:d9:70: 91:71:ee:38:56:71:f1:85:e5:99:ff:83:2b:b8:8b:de:94:c0: b6:bf:2c:00:1d:73:f5:bb:d0:77:c5:3b:86:4e:61:11:39:21: 87:80:32:78:5e:fa:b6:38:91:a4:60:e1:a6:2b:39:2c:81:b5: 0b:2d:26:b1:c1:c8:c0:ec:65:7b:40:4d:6b:47:d1:27:bf:36: d2:88:27:68:b8:2f:45:ca:df:c0:dd:d8:65:cf:e9:b1:56:41: b7:a9:c5:04:38:aa:1f:a9:20:84:a3:f0:b2:b0:f4:fb:73:2e: 92:ee:75:aa:01:8a:7b:b4:0a:9b:7e:3f:d3:2f:d3:ac:62:dd: 0d:b1:25:18:42:8b:54:a1:9a:14:b1:7d:82:19:a8:17:38:a0: 3e:39:19:54:0e:70:b7:c2:61:1e:a6:fa:d6:9a:6f:fc:31:bb: b3:9b:f2:dd -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUfkTh53NYGp5AYEj5Im5+HJ7j/sMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZjI5ZmJhYjRkYjg2N2Y2YmQ5YTdlZmY2YWE1NWQ5OGMx NjJlMWFhZDAeFw0yNTAxMTYwNjA5MzZaFw0yNTAxMTcxMDA0MzZaMDMxMTAvBgNV BAMTKDIwNTJFQ0U4MThDQzU2MzAxQzNFOUVCMEEwRjJENzAxOUM3MEJENEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLgkbWfI9b55CawbfDgze6w2dU IUzbYWa0OwJuEi5NwoRwzcuyJoyjnbI4XF8lMgOp3biKlBdJ/YVSmWRD2L14cP1C l/htGrA++6cC9fh+T0FaKZg6Ba+zJ4t1Q3gguh8fVltQxF8SU/fpIjxY6IXnZn6a sw0JnZnfc5mKn5NmowjPjuyWXZaWMbH5pXYYB/fDK6UoQa3uPgrypOHaxBj80qI+ PN26MZOef/TPPiRzGB9AFOXHZIEMTJn6P1L8GSbhzj4WpGDPG8le4fV26rIPAcpY nahRNeOXYLM35vIqY3V6vIWVrtvSU9hB+Y4MiHmUAw49DMjalwMGIuf97Yj7AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUIFLs6BjMVjAcPp6woPLXAZxwvUswHwYDVR0j BBgwFoAU8p+6tNuGf2vZp+/2qlXZjBYuGq0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmY1MmQ4MTQtM2QyZi00ZGY0LTgxNDAtZGZiNTMwZjc0 OTEyLzAvRjI5RkJBQjREQjg2N0Y2QkQ5QTdFRkY2QUE1NUQ5OEMxNjJFMUFBRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhwLTZ0TnVHZjJ2WnAtXzJxbFhaakJZ dUdxMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZjUyZDgxNC0z ZDJmLTRkZjQtODE0MC1kZmI1MzBmNzQ5MTIvMC9GMjlGQkFCNERCODY3RjZCRDlB N0VGRjZBQTU1RDk4QzE2MkUxQUFELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzu/T26WwWZWTeQU8BgHW 754HATVxEXldk8Rk5GfCRyYpctQYd3vGtmmkauwMZwrz+PAEl4m5VE9B0Np3Vw5M c9Uw15tmvd192tJkyv/QI5iyE1tS5DxYP9lwkXHuOFZx8YXlmf+DK7iL3pTAtr8s AB1z9bvQd8U7hk5hETkhh4AyeF76tjiRpGDhpis5LIG1Cy0mscHIwOxle0BNa0fR J7820ognaLgvRcrfwN3YZc/psVZBt6nFBDiqH6kghKPwsrD0+3Muku51qgGKe7QK m34/0y/TrGLdDbElGEKLVKGaFLF9ghmoFzigPjkZVA5wt8JhHqb61ppv/DG7s5vy 3Q== -----END CERTIFICATE-----Generated at Thu Jan 16 11:38:48 2025 by rpki-client on console-ams.rpki-client.org