$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft File: 4C189E42F35C944D463D9EA6501F093EB62BA785.mft (raw, json) Hash identifier: 6iYcXRF8uWMRB1by2PNZnUrADEEFx9FFxq546uf4ubI= Subject key identifier: 38:A2:0D:1C:B9:B0:E8:5D:8E:8E:EE:5B:0A:34:05:0F:A6:78:3C:65 Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Certificate serial: 7BF00FD79B74B4483E14157E67A114C212ED3BF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft Manifest number: A8 Signing time: Wed 15 May 2024 09:42:03 +0000 Manifest this update: Wed 15 May 2024 09:37:03 +0000 Manifest next update: Thu 16 May 2024 11:56:03 +0000 Files and hashes: 1: 3135392e3235332e342e302f32342d3234203d3e203630373831.roa (hash: Z84ATRNA+4WT0M1WquYZrB9axuky4/4I5P/GgDAi00o=) 2: 3231372e32382e3133382e302f32342d3234203d3e20323039393736.roa (hash: tVUvIrXWXtAXUhoND4zxAbjUSLIKfmnAMtjbKc/53Lo=) 3: 3135392e3235332e322e302f32342d3234203d3e20383334.roa (hash: ArNZnMXmK73jEmnf66XCu8Od2sXO9yHCA//Rw+/sNEE=) 4: 3135392e3235332e362e302f32342d3234203d3e20383334.roa (hash: ONgSPtXabXTcBR0c/6UCxjtQB7RWKUGQeeSVTOmpqd0=) 5: 3138352e31332e3232372e302f32342d3234203d3e20323130353432.roa (hash: F9aTk9bgOzcFh6NPGG7l7OjOmRqEky0/zHiWtw+XU+g=) 6: 3138352e31332e3232362e302f32342d3234203d3e20383334.roa (hash: oM2gN+oDIGnnLuDyQXgbmWF62EcyZqYhYpVzTwP+UlI=) 7: 4C189E42F35C944D463D9EA6501F093EB62BA785.crl (hash: h5DSesNf3K2XvmrwVRCFB2f0hU4pTtHyWyhe81KMolo=) 8: 3135392e3235332e352e302f32342d3234203d3e20383334.roa (hash: lafLru48CeWCEZMOImM0brEGYY9kQdLjb3UEGF6esNE=) 9: 3135392e3235332e372e302f32342d3234203d3e20383334.roa (hash: y/1qkVRRmxrQB8tF/6HVu1wXPN9Fx+NbA8oFFXYHeOw=) 10: 3138352e31332e3232352e302f32342d3234203d3e203631333137.roa (hash: AmLj9ehcBc0k5awtVc6jG/A57LgG96edpBJjom+IPSs=) 11: 3138352e31332e3232342e302f32342d3234203d3e203632303638.roa (hash: NZPmFqYSJUp/hM0N3ny79OYjjw7aEORHhJ9DwnhBLkQ=) 12: 3135392e3235332e302e302f32342d3234203d3e20323036323831.roa (hash: O9DkXZ3QfwXJxA/fDSeWMv1TDtqw/shezqgDfWDIcPU=) 13: 3135392e3235332e332e302f32342d3234203d3e20383334.roa (hash: TkrR3ex5rYeOHrjZKFXhBjWC6wi4JJsHqll8TezEu8g=) 14: 3135392e3235332e312e302f32342d3234203d3e20323130353432.roa (hash: wbBS2s0IS68xoLr+xJKhqI0g6Z0PpWqspzEcRrUPPHk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 16 May 2024 07:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:f0:0f:d7:9b:74:b4:48:3e:14:15:7e:67:a1:14:c2:12:ed:3b:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785 Validity Not Before: May 15 09:37:03 2024 GMT Not After : May 16 11:56:03 2024 GMT Subject: CN=38A20D1CB9B0E85D8E8EEE5B0A34050FA6783C65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:07:c8:41:fd:fc:96:9b:a1:0f:56:69:a4:7d: 26:d9:16:43:80:e8:32:d6:11:56:50:53:e1:cd:d8: a5:8d:cf:c7:51:95:81:29:e2:aa:e7:79:e8:1e:b8: a9:09:71:a8:1c:e8:87:a9:7b:73:81:0a:62:a9:26: 37:5c:7d:64:37:a5:c5:59:c1:45:27:d5:ea:50:14: de:cb:0a:b0:4d:44:e8:5d:7a:88:19:80:26:e7:67: 1a:cd:e4:f6:2b:ac:0b:8a:2c:61:87:25:5f:01:d3: d2:e1:61:36:1e:7b:cb:16:83:d6:71:3e:69:ac:bb: a6:94:09:64:02:bc:e6:f2:d6:7a:a8:26:df:80:c6: 7a:e9:72:59:1b:8b:9b:ca:f0:dc:4c:31:56:1c:de: 8b:6a:2d:78:59:59:ae:cd:53:75:0a:76:71:a3:d1: 13:66:d2:3d:90:b1:83:96:45:eb:b8:29:f0:8e:bc: 18:ad:04:f8:6e:42:e5:4a:c4:bd:88:1c:d4:fa:09: c6:a0:75:a1:9c:2b:72:7a:63:f2:9e:37:1d:2a:11: 06:f9:32:18:8e:fa:b2:3b:b4:aa:2d:61:ae:0c:3b: 0c:de:c2:91:66:be:03:91:0b:e6:f9:1d:f1:68:7c: 39:27:ac:24:e0:66:b9:5d:6d:65:78:44:60:eb:d6: fa:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:A2:0D:1C:B9:B0:E8:5D:8E:8E:EE:5B:0A:34:05:0F:A6:78:3C:65 X509v3 Authority Key Identifier: keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:1d:48:ee:f3:a3:bb:55:50:65:99:1a:ca:44:fb:1d:a0:74: 9d:0a:b1:4c:dd:79:e9:bc:58:e1:aa:66:e5:f0:28:23:a3:9d: f6:a4:d4:b3:6c:b3:9a:27:71:60:a5:97:3b:93:4b:64:a9:97: ef:b9:3a:f8:65:41:c5:0f:2c:f2:fd:6e:d9:9e:62:7b:9c:47: 54:be:b2:59:12:e9:73:0e:29:bb:ea:a9:03:9a:d6:b5:e2:97: 71:ce:9b:54:2e:0a:76:d0:aa:ca:30:c3:5f:b6:74:14:45:f7: 51:96:26:eb:23:e1:41:b0:09:c8:f1:6a:a5:89:53:fa:59:1a: 11:20:64:86:52:16:8c:f2:08:89:88:45:cf:f2:84:ee:61:ec: e8:6d:ad:d7:a2:e3:b8:47:4a:6b:5d:1d:77:b7:27:51:03:cb: 04:bc:ef:59:f4:94:d4:15:e5:9f:62:2e:f1:35:70:df:45:1e: 31:fd:b5:27:65:61:cf:63:00:0f:ad:ca:d6:62:bd:d3:fe:98: b6:38:d3:3f:cd:3c:20:64:18:f9:38:fa:59:fb:4c:24:bc:2d: 22:b7:b7:36:93:a5:c2:79:f1:5d:eb:f9:da:9c:bb:16:05:01: 16:e2:8f:fe:19:52:ab:ab:e8:f0:3a:a9:64:77:2e:48:4d:a2: 42:27:d3:e2 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUe/AP15t0tEg+FBV+Z6EUwhLtO/EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGMxODllNDJmMzVjOTQ0ZDQ2M2Q5ZWE2NTAxZjA5M2Vi NjJiYTc4NTAeFw0yNDA1MTUwOTM3MDNaFw0yNDA1MTYxMTU2MDNaMDMxMTAvBgNV BAMTKDM4QTIwRDFDQjlCMEU4NUQ4RThFRUU1QjBBMzQwNTBGQTY3ODNDNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEB8hB/fyWm6EPVmmkfSbZFkOA 6DLWEVZQU+HN2KWNz8dRlYEp4qrneegeuKkJcagc6Iepe3OBCmKpJjdcfWQ3pcVZ wUUn1epQFN7LCrBNROhdeogZgCbnZxrN5PYrrAuKLGGHJV8B09LhYTYee8sWg9Zx Pmmsu6aUCWQCvOby1nqoJt+Axnrpclkbi5vK8NxMMVYc3otqLXhZWa7NU3UKdnGj 0RNm0j2QsYOWReu4KfCOvBitBPhuQuVKxL2IHNT6CcagdaGcK3J6Y/KeNx0qEQb5 MhiO+rI7tKotYa4MOwzewpFmvgORC+b5HfFofDknrCTgZrldbWV4RGDr1vqHAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUOKINHLmw6F2Oju5bCjQFD6Z4PGUwHwYDVR0j BBgwFoAUTBieQvNclE1GPZ6mUB8JPrYrp4UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2U1MTBlMTctMzFmYS00MTRiLTk4OWUtMDI2ZGJiNmZk ZjUxLzAvNEMxODlFNDJGMzVDOTQ0RDQ2M0Q5RUE2NTAxRjA5M0VCNjJCQTc4NS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RCaWVRdk5jbEUxR1BaNm1VQjhKUHJZ cnA0VS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jZTUxMGUxNy0z MWZhLTQxNGItOTg5ZS0wMjZkYmI2ZmRmNTEvMC80QzE4OUU0MkYzNUM5NDRENDYz RDlFQTY1MDFGMDkzRUI2MkJBNzg1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQR1I7vOju1VQZZkaykT7 HaB0nQqxTN156bxY4apm5fAoI6Od9qTUs2yzmidxYKWXO5NLZKmX77k6+GVBxQ8s 8v1u2Z5ie5xHVL6yWRLpcw4pu+qpA5rWteKXcc6bVC4KdtCqyjDDX7Z0FEX3UZYm 6yPhQbAJyPFqpYlT+lkaESBkhlIWjPIIiYhFz/KE7mHs6G2t16LjuEdKa10dd7cn UQPLBLzvWfSU1BXln2Iu8TVw30UeMf21J2Vhz2MAD63K1mK90/6YtjjTP808IGQY +Tj6WftMJLwtIre3NpOlwnnxXev52py7FgUBFuKP/hlSq6vo8DqpZHcuSE2iQifT 4g== -----END CERTIFICATE-----Generated at Wed May 15 14:14:08 2024 by rpki-client on console-fra.rpki-client.org