$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft File: 4C189E42F35C944D463D9EA6501F093EB62BA785.mft (raw, json) Hash identifier: pCmmqMgJ/7q+zGAbSsd+9dU3J0CJWwsHhZrfPJng32U= Subject key identifier: 16:9A:97:66:B4:C9:26:BF:23:22:62:06:BB:BC:05:E5:27:9A:9D:8B Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Certificate serial: A6F5F637FA54D8463DAE66175497A257163112 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft Manifest number: 01C9 Signing time: Fri 22 Nov 2024 03:33:40 +0000 Manifest this update: Fri 22 Nov 2024 03:28:40 +0000 Manifest next update: Sat 23 Nov 2024 06:52:40 +0000 Files and hashes: 1: 3138352e31332e3232352e302f32342d3234203d3e203631333137.roa (hash: AmLj9ehcBc0k5awtVc6jG/A57LgG96edpBJjom+IPSs=) 2: 3135392e3235332e342e302f32342d3234203d3e203630373831.roa (hash: Z84ATRNA+4WT0M1WquYZrB9axuky4/4I5P/GgDAi00o=) 3: 3138352e31332e3232362e302f32342d3234203d3e20383334.roa (hash: OuXn2nbA0M9AZ5xOpa5kqiXkJAoaG3UOG3XpHkk6mJA=) 4: 4C189E42F35C944D463D9EA6501F093EB62BA785.crl (hash: oksIxVVWGnUCZJD6veAzJGKZHeB2jMxVJsyuDYx6FpI=) 5: 3135392e3235332e332e302f32342d3234203d3e20383334.roa (hash: bS7OWpukKM13Mrj8vwNN9Xt2FLz0eH8xziJA6OfcVmQ=) 6: 3135392e3235332e372e302f32342d3234203d3e20383334.roa (hash: pKd1Ah1co5zKZbfKg2rN1Y8NOk+/hH4uKAkeXaPmtAk=) 7: 3231372e32382e3133382e302f32342d3234203d3e20323039393736.roa (hash: tVUvIrXWXtAXUhoND4zxAbjUSLIKfmnAMtjbKc/53Lo=) 8: 3135392e3235332e302e302f32342d3234203d3e20323036323831.roa (hash: O9DkXZ3QfwXJxA/fDSeWMv1TDtqw/shezqgDfWDIcPU=) 9: 3135392e3235332e362e302f32342d3234203d3e20383334.roa (hash: QLsyLYse/S6DfjgVeARiZ2ZxtBF/2txVFyKhm1k8v5o=) 10: 3138352e31332e3232342e302f32342d3234203d3e20313335333931.roa (hash: k6qvY6qYLtrsDEyi8J+SScxT9enfuaIRYNZH2IHqC8o=) 11: 3135392e3235332e312e302f32342d3234203d3e20383334.roa (hash: WdmXfTeMM/49I3hnbkIEij86yHiMXswG5pj7ZcGZtuc=) 12: 3135392e3235332e322e302f32342d3234203d3e20383334.roa (hash: Io0uqsNFWMRzWK0hBxO5SHV2H5/pOpKQHlMKDuh/MnA=) 13: 3138352e31332e3232372e302f32342d3234203d3e20323130353432.roa (hash: F9aTk9bgOzcFh6NPGG7l7OjOmRqEky0/zHiWtw+XU+g=) 14: 3135392e3235332e352e302f32342d3234203d3e20383334.roa (hash: qXWeXxMIlYcVAu0mUcCl9uApcKOZzbQ6Lhjrv7db4Es=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 23:17:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: a6:f5:f6:37:fa:54:d8:46:3d:ae:66:17:54:97:a2:57:16:31:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Validity Not Before: Nov 22 03:28:40 2024 GMT Not After : Nov 23 06:52:40 2024 GMT Subject: CN=169A9766B4C926BF23226206BBBC05E5279A9D8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:66:1e:68:d5:66:69:33:be:9e:89:b5:b7:13: 26:12:db:f0:18:37:8f:e8:43:d9:d5:2b:7c:55:c3: 4b:47:68:20:4a:01:5c:bb:76:fe:3b:5d:44:66:f5: ca:b0:18:0e:5b:84:ab:69:f3:71:f1:b1:69:e4:4f: 86:52:b3:b1:f2:8f:b5:3e:85:e5:8d:62:fd:a6:5c: 71:34:9d:fe:59:bf:dd:42:85:c1:27:f2:d9:07:c3: d0:c9:ba:5a:23:5d:c6:d8:e5:60:32:98:a0:01:6c: b1:f0:e8:e4:ec:cd:1d:20:42:8c:7f:7d:0d:80:32: 65:eb:cd:d6:18:c7:93:60:25:49:5b:20:bb:8a:ff: e1:4c:b6:cd:8a:81:ce:26:55:ef:80:1d:f6:f5:25: b4:f8:df:a7:ae:49:56:77:5b:95:5b:e6:7c:18:16: 01:d7:8d:7b:97:2b:b0:91:6a:6a:27:50:e4:e0:77: 6c:2c:74:8e:77:09:ba:54:d4:cb:52:95:36:81:b0: a8:d8:15:11:0b:f0:03:c9:b3:e7:ac:26:16:ca:46: 4f:d6:59:40:39:43:62:a6:8c:fd:2e:d4:f3:e0:c2: 4c:8a:e5:5d:77:ed:03:6d:3a:0d:77:59:b0:59:6e: fc:79:d6:5e:08:c1:b7:4a:1e:ee:ed:f4:69:9d:92: 2f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:9A:97:66:B4:C9:26:BF:23:22:62:06:BB:BC:05:E5:27:9A:9D:8B X509v3 Authority Key Identifier: keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:de:4f:f2:1b:4b:5d:0f:71:4c:df:15:71:17:e4:26:ff:fa: 58:9a:78:42:84:31:72:0d:b3:fc:cb:06:92:b4:7e:ac:5e:f6: 87:7f:aa:c9:50:a5:79:82:12:e9:ef:be:d8:8d:d3:e3:9c:bd: f7:2b:2e:f7:88:05:59:58:b1:00:d1:7b:d5:9f:b7:05:3e:59: 51:b8:dd:42:a9:07:d5:1b:f7:3b:38:55:05:7b:88:53:28:6e: 8e:22:5e:b4:f2:81:f0:4f:3f:4f:ad:d8:db:59:d9:c0:1a:36: 59:93:50:16:d0:64:4a:fa:8a:00:20:02:0d:e8:e4:d9:89:e8: 7b:57:96:e4:4e:ed:a7:60:3b:c7:a5:89:6b:d9:1b:d7:b6:4e: 96:d8:10:9d:0d:9d:cb:9c:85:33:ce:a3:e7:37:a3:26:c7:0d: 49:38:18:f9:38:a6:09:a6:36:c6:69:f2:21:f8:90:02:dc:3b: 6d:ea:15:c9:b3:c9:17:1a:ed:26:b4:e6:b1:e1:dc:13:00:6e: 41:6d:24:7a:e8:4b:74:f2:a2:9d:43:1d:9d:04:fc:92:98:9c: c1:0c:47:63:2d:dc:b7:55:51:56:cb:d5:4c:f0:bc:ce:ba:c2: 71:6c:8d:e5:a3:5d:04:d0:f3:7a:21:97:05:e3:d6:c6:2f:46: 47:af:d8:7e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUAKb19jf6VNhGPa5mF1SXolcWMRIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGMxODllNDJmMzVjOTQ0ZDQ2M2Q5ZWE2NTAxZjA5M2Vi NjJiYTc4NTAeFw0yNDExMjIwMzI4NDBaFw0yNDExMjMwNjUyNDBaMDMxMTAvBgNV BAMTKDE2OUE5NzY2QjRDOTI2QkYyMzIyNjIwNkJCQkMwNUU1Mjc5QTlEOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlZh5o1WZpM76eibW3EyYS2/AY N4/oQ9nVK3xVw0tHaCBKAVy7dv47XURm9cqwGA5bhKtp83HxsWnkT4ZSs7Hyj7U+ heWNYv2mXHE0nf5Zv91ChcEn8tkHw9DJulojXcbY5WAymKABbLHw6OTszR0gQox/ fQ2AMmXrzdYYx5NgJUlbILuK/+FMts2Kgc4mVe+AHfb1JbT436euSVZ3W5Vb5nwY FgHXjXuXK7CRamonUOTgd2wsdI53CbpU1MtSlTaBsKjYFREL8APJs+esJhbKRk/W WUA5Q2KmjP0u1PPgwkyK5V137QNtOg13WbBZbvx51l4IwbdKHu7t9Gmdki8NAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUFpqXZrTJJr8jImIGu7wF5SeanYswHwYDVR0j BBgwFoAUTBieQvNclE1GPZ6mUB8JPrYrp4UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2U1MTBlMTctMzFmYS00MTRiLTk4OWUtMDI2ZGJiNmZk ZjUxLzAvNEMxODlFNDJGMzVDOTQ0RDQ2M0Q5RUE2NTAxRjA5M0VCNjJCQTc4NS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RCaWVRdk5jbEUxR1BaNm1VQjhKUHJZ cnA0VS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jZTUxMGUxNy0z MWZhLTQxNGItOTg5ZS0wMjZkYmI2ZmRmNTEvMC80QzE4OUU0MkYzNUM5NDRENDYz RDlFQTY1MDFGMDkzRUI2MkJBNzg1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsd5P8htLXQ9xTN8VcRfk Jv/6WJp4QoQxcg2z/MsGkrR+rF72h3+qyVCleYIS6e++2I3T45y99ysu94gFWVix ANF71Z+3BT5ZUbjdQqkH1Rv3OzhVBXuIUyhujiJetPKB8E8/T63Y21nZwBo2WZNQ FtBkSvqKACACDejk2Ynoe1eW5E7tp2A7x6WJa9kb17ZOltgQnQ2dy5yFM86j5zej JscNSTgY+TimCaY2xmnyIfiQAtw7beoVybPJFxrtJrTmseHcEwBuQW0keuhLdPKi nUMdnQT8kpicwQxHYy3ct1VRVsvVTPC8zrrCcWyN5aNdBNDzeiGXBePWxi9GR6/Y fg== -----END CERTIFICATE-----Generated at Fri Nov 22 06:41:51 2024 by rpki-client on console-ams.rpki-client.org