$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft File: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft (raw, json) Hash identifier: Z7fkiicR6/OJpQFLM034PTEZVIVDQwC/UrkuCApfdyc= Subject key identifier: 85:79:E6:70:E5:C9:BF:7B:C1:E5:B9:7F:1D:8D:EF:D1:E1:FF:F7:61 Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Certificate serial: 08D642A08F56F68AB2C321A4AAB65E585DB94D3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft Manifest number: 02D8 Signing time: Sun 12 May 2024 10:12:03 +0000 Manifest this update: Sun 12 May 2024 10:07:03 +0000 Manifest next update: Mon 13 May 2024 12:51:03 +0000 Files and hashes: 1: 3138352e3231332e3234302e302f32342d3234203d3e20323039323432.roa (hash: EnNwy2xFlI4sC9gh8bFCybzasUjDGX7KORklyXPZBog=) 2: 33362e3235352e39322e302f32332d3234203d3e20313938353130.roa (hash: sm3LwIPO+yZGsv61YL8ucl3xnHHntGhLqv11sHGT+E4=) 3: 3138352e3234342e39342e302f32342d3234203d3e20333937343233.roa (hash: Os5pPaUq4wuSIVKgbNMacUddHXr+Tpw7Nr5HsfcIjhw=) 4: 3138352e3232392e3230302e302f32342d3234203d3e203139343337.roa (hash: 3pl8km3wVmgOfHwXywdZLa4qIXAmGtmNd6yZ62LPiT8=) 5: 3138352e3133302e36322e302f32342d3234203d3e203239303636.roa (hash: qJ6+uetbybUylRUdRxdMv8GfDEsBxGYl//0bJ0BDbj0=) 6: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl (hash: g92RxsPxVNmMhbJH+XfH9FWsaSf0AacxdNtVbOECwyU=) 7: 3138352e3234342e39352e302f32342d3234203d3e203136353039.roa (hash: bmSSNgWk8ixwZN9lpWw7U4gLkGs5JBUHKIDpICZCQwQ=) 8: 3138352e3232392e3230332e302f32342d3234203d3e20323132323338.roa (hash: HIYoTjZwFdPVetPqxHm+7ZOQzUw6sixmuNTwHyPSHpQ=) 9: 3138352e3232392e3230312e302f32342d3234203d3e20323030303137.roa (hash: h1azTNafUjb7UdhKJgtNINL6z0yWbbbvs5e4uvD1ZDY=) 10: 3138352e3131312e3138382e302f32342d3234203d3e203632353633.roa (hash: 1mp0f8eHaMQpRA78Gkk4jwOU31yHu1aUXXw7yDxnVEo=) 11: 3138352e3131312e3138392e302f32342d3234203d3e203631303934.roa (hash: WeJB2Y9EHAktT6F3opbzlIwR60Li2i6huAhlCxSc0DI=) 12: 3138352e3133302e36332e302f32342d3234203d3e203332313831.roa (hash: +vTp3cbheQETL3jfc6z3xX4NlCzAvE2ShCOTcJERXyo=) 13: 3138352e3231332e3234332e302f32342d3234203d3e203330343536.roa (hash: hgOouETN68JjnwRVGuA3Qb1CgGL84jJbpDczZSdOrkw=) 14: 3138352e3231332e3234322e302f32342d3234203d3e203631333137.roa (hash: YpOGfFau+S5Y+DBSpKWeiuLGORXUY8ZVscP56Eehcgg=) 15: 33362e3235352e39342e302f32332d3233203d3e203632323430.roa (hash: HHehYmYO5S3nVqn5RxPN8IY1cV+6/LfOgSFg8yGTFv0=) 16: 3138352e3231332e3234302e302f32342d3234203d3e203239353338.roa (hash: c6J8mvfOMHWT/47wQXuEIqFLmJz4zDG8wpaoriJPmJo=) 17: 33362e3235352e39322e302f32332d3234203d3e20313432353631.roa (hash: 1gIHZJcJcvpA+lInczo93Bq/EtwKfV+2lGg1HYidVrQ=) 18: 3138352e3232392e3230322e302f32342d3234203d3e20323130303330.roa (hash: UABDTXTWp8foWVTBYxxIWEuae7LAbLk9s44nxTvRACo=) 19: 3138352e3133302e36312e302f32342d3234203d3e20323732363936.roa (hash: hrqhy+ghapoQuf+edcxFFJ3w2fi/HO/mIqzNSGP59f4=) 20: 3138352e3231332e3234312e302f32342d3234203d3e203631323732.roa (hash: 6YnzlrjY88T40z0tQQ09Pmkbr5Q0WFDoNksNtQWLh3U=) 21: 3138352e3231332e3234302e302f32342d3234203d3e2033323233.roa (hash: MTIhm4AWxGYXI1kfk2fRvRpeoMSjL4DGS+IhTTsOKDg=) 22: 3138352e3133302e36302e302f32342d3234203d3e20323039383234.roa (hash: b1kMN4sT+svDmOk+usC82pjhXmME98BRAQi+rNYK2zg=) 23: 326130363a356563303a3a2f34382d3438203d3e20323034363933.roa (hash: Npn3y1PwrPmpHoOQk8eX2chV01+blvjtrPFPPDk7bV8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 13 May 2024 02:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:d6:42:a0:8f:56:f6:8a:b2:c3:21:a4:aa:b6:5e:58:5d:b9:4d:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Validity Not Before: May 12 10:07:03 2024 GMT Not After : May 13 12:51:03 2024 GMT Subject: CN=8579E670E5C9BF7BC1E5B97F1D8DEFD1E1FFF761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:4a:00:56:4b:15:5a:7d:e2:80:91:2b:8f:9b: 22:d5:c9:26:d4:ba:5a:b6:c2:25:cb:3c:dd:c4:4d: 1a:5e:2f:42:10:2c:56:de:7d:0e:07:fe:e0:e3:22: c6:31:4d:a4:ec:52:64:88:50:cd:95:4a:ec:4a:96: 6d:b6:3c:94:8c:8e:5f:7a:89:37:2f:21:f3:a5:85: 07:e3:9f:6f:5d:0b:39:1e:1c:65:a9:87:fe:6f:9c: 79:71:f2:29:15:5b:d6:8a:72:fb:e7:eb:9b:bc:4d: 90:4b:43:57:d5:c9:94:ea:6a:97:2a:7c:9d:3c:74: 26:e6:1d:0e:85:b0:5f:ea:72:0c:25:5a:4b:22:8f: 86:22:d1:1e:e0:de:bf:c9:ca:48:d4:f8:c0:ad:60: 2a:6a:22:65:7a:47:93:6b:e0:6c:67:bc:1a:07:5b: a9:e4:d7:3d:8d:a2:2a:67:36:3e:b6:45:d6:98:56: ea:11:fd:92:5f:41:04:83:9f:39:17:83:5a:2e:8c: e9:82:c9:3b:43:58:f6:f5:08:66:25:cc:51:63:4b: 05:7d:21:28:ca:99:bf:68:7c:77:c9:3e:0e:59:cd: 0c:b1:27:91:55:db:62:7f:99:2f:5f:68:b0:60:a7: 06:3d:b6:60:41:02:a4:f7:57:7f:1a:47:6a:47:7e: 93:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:79:E6:70:E5:C9:BF:7B:C1:E5:B9:7F:1D:8D:EF:D1:E1:FF:F7:61 X509v3 Authority Key Identifier: keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:60:43:e7:3a:0b:38:79:00:b8:a6:e1:00:b7:07:03:4e:c8: f5:f5:95:c7:34:db:b5:af:5a:8c:84:57:99:3d:95:bb:d7:18: 43:3e:37:e8:cb:8b:bb:ce:70:82:9e:2d:30:4a:a8:84:0f:5b: a8:09:1f:a1:cb:80:c7:36:c9:d7:4c:71:50:13:04:f9:ac:e8: f3:b0:89:64:a8:11:23:7a:a7:81:4e:93:61:ab:f0:7c:bc:e0: 48:05:85:62:23:32:24:d5:d6:ad:16:88:55:62:98:3b:8c:92: 88:b5:fe:5f:10:ac:19:1d:a5:b3:ed:e1:45:2d:a0:d2:db:51: f5:ec:34:ba:7a:1b:39:e6:38:55:d1:e6:5f:4e:4f:51:b6:5a: f4:ea:ab:80:5d:c7:53:ef:16:d9:7c:d7:28:1d:d4:f6:83:67: 84:40:c1:a5:81:33:cc:aa:48:db:be:7b:26:e2:20:0d:81:9f: fc:e3:8c:3b:d2:ef:08:60:eb:23:cd:0b:34:d8:a9:0b:0e:e7: 67:cc:fe:ff:85:e2:c5:46:21:92:6e:ee:cd:21:93:be:35:20: ce:93:6c:6d:c4:b7:3d:55:f1:b7:3a:19:fd:cc:06:cd:81:f5: 82:45:4f:64:79:f0:ac:df:98:c5:36:81:c4:e6:d6:6a:d2:dd: fa:70:cb:53 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUCNZCoI9W9oqywyGkqrZeWF25TTwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2U4NzBiOWE3MDAzYzRmZDljNTFiZDM1NGE5ZGVmYTNm Yjc3YjRhOTAeFw0yNDA1MTIxMDA3MDNaFw0yNDA1MTMxMjUxMDNaMDMxMTAvBgNV BAMTKDg1NzlFNjcwRTVDOUJGN0JDMUU1Qjk3RjFEOERFRkQxRTFGRkY3NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiSgBWSxVafeKAkSuPmyLVySbU ulq2wiXLPN3ETRpeL0IQLFbefQ4H/uDjIsYxTaTsUmSIUM2VSuxKlm22PJSMjl96 iTcvIfOlhQfjn29dCzkeHGWph/5vnHlx8ikVW9aKcvvn65u8TZBLQ1fVyZTqapcq fJ08dCbmHQ6FsF/qcgwlWksij4Yi0R7g3r/JykjU+MCtYCpqImV6R5Nr4GxnvBoH W6nk1z2NoipnNj62RdaYVuoR/ZJfQQSDnzkXg1oujOmCyTtDWPb1CGYlzFFjSwV9 ISjKmb9ofHfJPg5ZzQyxJ5FV22J/mS9faLBgpwY9tmBBAqT3V38aR2pHfpNjAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUhXnmcOXJv3vB5bl/HY3v0eH/92EwHwYDVR0j BBgwFoAUPocLmnADxP2cUb01Sp3vo/t3tKkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzVkMThlODItNGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQy Mjc5LzAvM0U4NzBCOUE3MDAzQzRGRDlDNTFCRDM1NEE5REVGQTNGQjc3QjRBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1BvY0xtbkFEeFAyY1ViMDFTcDN2b190 M3RLay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jNWQxOGU4Mi00 ZDY4LTQ1YTYtYTVkZi1jYWMxMTVhZDIyNzkvMC8zRTg3MEI5QTcwMDNDNEZEOUM1 MUJEMzU0QTlERUZBM0ZCNzdCNEE5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyWBD5zoLOHkAuKbhALcH A07I9fWVxzTbta9ajIRXmT2Vu9cYQz436MuLu85wgp4tMEqohA9bqAkfocuAxzbJ 10xxUBME+azo87CJZKgRI3qngU6TYavwfLzgSAWFYiMyJNXWrRaIVWKYO4ySiLX+ XxCsGR2ls+3hRS2g0ttR9ew0unobOeY4VdHmX05PUbZa9OqrgF3HU+8W2XzXKB3U 9oNnhEDBpYEzzKpI2757JuIgDYGf/OOMO9LvCGDrI80LNNipCw7nZ8z+/4XixUYh km7uzSGTvjUgzpNsbcS3PVXxtzoZ/cwGzYH1gkVPZHnwrN+YxTaBxObWatLd+nDL Uw== -----END CERTIFICATE-----Generated at Sun May 12 11:32:05 2024 by rpki-client on console-fra.rpki-client.org