$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e302e6-881e-4d93-ae3e-9b7c97a9b9d0/1/E48ABA5D969C9C557913482E3064E3BC626018E3.mft File: E48ABA5D969C9C557913482E3064E3BC626018E3.mft (raw, json) Hash identifier: xCe0aoAi+7e/yeGH3epU0OmsCROlZ/cYPASQBBnB5tc= Subject key identifier: 03:DE:AE:A9:1A:38:98:82:58:46:71:B1:BA:1A:02:92:39:7B:89:42 Authority key identifier: E4:8A:BA:5D:96:9C:9C:55:79:13:48:2E:30:64:E3:BC:62:60:18:E3 Certificate issuer: /CN=E48ABA5D969C9C557913482E3064E3BC626018E3 Certificate serial: 5A3C5D403B91F1BA8FA8A2536570A2CD0DCE6BC9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/E48ABA5D969C9C557913482E3064E3BC626018E3.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e302e6-881e-4d93-ae3e-9b7c97a9b9d0/1/E48ABA5D969C9C557913482E3064E3BC626018E3.mft Manifest number: 30 Signing time: Thu 19 Sep 2024 05:00:05 +0000 Manifest this update: Thu 19 Sep 2024 04:55:05 +0000 Manifest next update: Fri 20 Sep 2024 08:06:05 +0000 Files and hashes: 1: 326130613a363034343a376430303a3a2f34342d3434203d3e20323134353130.roa (hash: r13dPxkBVRnJ9LFgnamybFzEfdUcVckfUSGQWmPRcGk=) 2: 326130613a363034343a376430303a3a2f34382d3438203d3e20323134353130.roa (hash: 0KgEt5dxk6TLiVBAdeFh7c2ht1AiCvtZKsON7AMnLGY=) 3: E48ABA5D969C9C557913482E3064E3BC626018E3.crl (hash: HwUkS1ojMEopDmeAW1qUlTK59wjzomdO7QlvwSmTsOk=) 4: 326130613a363034343a376431303a3a2f34342d3434203d3e20323134353130.roa (hash: eb+tBj0eYN7MvKVQb2AJqXQyKhlydWXGHOqyS73C/u4=) 5: 326130613a363034343a376430303a3a2f34302d3430203d3e20323134353130.roa (hash: 1HdM5g1rCJBQRmbDATqqRD00iYhLB9eofpBYlYT31mg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e302e6-881e-4d93-ae3e-9b7c97a9b9d0/1/E48ABA5D969C9C557913482E3064E3BC626018E3.crl rsync://rsync.paas.rpki.ripe.net/repository/d7e302e6-881e-4d93-ae3e-9b7c97a9b9d0/1/E48ABA5D969C9C557913482E3064E3BC626018E3.mft rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/E48ABA5D969C9C557913482E3064E3BC626018E3.cer rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 20 Sep 2024 07:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:3c:5d:40:3b:91:f1:ba:8f:a8:a2:53:65:70:a2:cd:0d:ce:6b:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E48ABA5D969C9C557913482E3064E3BC626018E3 Validity Not Before: Sep 19 04:55:05 2024 GMT Not After : Sep 20 08:06:05 2024 GMT Subject: CN=03DEAEA91A389882584671B1BA1A0292397B8942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e9:ac:ae:1c:0a:f4:3b:37:64:77:02:df:fb: d3:51:82:4c:23:43:3b:6e:dc:f5:06:50:ab:32:dd: a0:a7:08:b7:23:3a:da:b3:86:a2:63:bb:86:51:8f: 7d:a8:d1:c1:e8:fe:70:1e:30:8b:42:52:db:73:4c: 4c:bd:e1:b1:fc:95:57:19:ff:bf:e4:04:f5:44:6f: 19:74:e9:72:e2:0d:74:db:36:4f:e7:24:56:f4:03: 61:23:9f:40:23:0d:40:d4:e9:67:1b:27:3d:51:37: 97:8b:32:8b:5f:5b:3d:2a:ff:71:ad:08:c9:34:d3: 40:d2:1e:ff:ee:8d:97:19:f4:fb:d8:58:af:17:dd: e2:0c:db:b4:99:44:30:cb:83:c1:89:34:33:d6:11: 30:b4:05:5b:a1:c0:ae:fa:d2:1c:26:70:f8:b4:a1: 5f:f2:74:4d:1c:f1:f9:7f:25:f0:c1:5d:92:63:7e: dc:94:77:33:4f:fd:75:91:78:b1:e3:62:43:78:01: 8b:de:92:45:65:55:29:f2:12:c1:5f:b0:d4:35:d7: 7c:dc:36:4b:da:14:2c:40:53:72:ba:df:ac:43:b5: 1a:8a:96:4d:ec:08:bd:ce:3b:f9:07:9d:51:bd:1c: 37:84:82:81:24:f4:26:af:81:3f:f7:01:89:17:39: ec:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:DE:AE:A9:1A:38:98:82:58:46:71:B1:BA:1A:02:92:39:7B:89:42 X509v3 Authority Key Identifier: keyid:E4:8A:BA:5D:96:9C:9C:55:79:13:48:2E:30:64:E3:BC:62:60:18:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e302e6-881e-4d93-ae3e-9b7c97a9b9d0/1/E48ABA5D969C9C557913482E3064E3BC626018E3.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/E48ABA5D969C9C557913482E3064E3BC626018E3.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e302e6-881e-4d93-ae3e-9b7c97a9b9d0/1/E48ABA5D969C9C557913482E3064E3BC626018E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:8f:e2:cf:80:72:d0:80:6c:b5:6d:e5:d7:c1:09:1a:b1:1b: 66:a1:f6:49:8d:d9:ae:01:d9:f7:ce:d3:c6:76:0f:45:25:b3: 32:3e:20:0f:e9:72:7d:21:4c:72:86:5e:84:ac:a7:6e:f1:11: 5a:8c:c1:9d:ea:1a:a8:8a:bb:ca:c4:92:e4:24:be:37:31:5c: 1d:fd:d5:b7:c9:50:de:51:cd:01:3a:0a:f0:70:08:02:a1:b0: 91:ff:0b:50:56:e5:7f:1f:59:ed:d5:fd:6a:ef:d0:60:b7:19: 71:b3:87:eb:03:08:3a:05:6c:a0:fe:c3:79:20:91:0e:19:2e: fa:88:5e:57:21:b5:f0:52:a3:71:7f:dd:b1:30:93:6f:55:d6: 89:15:35:92:36:ca:5b:40:c5:65:ce:ae:f5:63:82:79:be:e6: 18:e9:8b:83:98:2c:5e:49:4b:4d:f6:0a:18:c5:fa:b5:19:16: e1:ab:0b:a7:74:da:6b:2f:56:78:ae:07:f1:09:f9:5d:35:21: a0:04:18:23:d5:2e:60:27:73:f9:65:1c:2e:15:a5:94:9d:79: ee:5c:b3:e3:ce:56:42:fc:bf:ae:e8:26:c5:7e:a1:98:60:02: 9a:3a:04:5c:43:4e:52:87:51:37:2e:08:9b:b9:66:5c:ef:05: 0d:64:ba:11 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUWjxdQDuR8bqPqKJTZXCizQ3Oa8kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ4QUJBNUQ5NjlDOUM1NTc5MTM0ODJFMzA2NEUzQkM2 MjYwMThFMzAeFw0yNDA5MTkwNDU1MDVaFw0yNDA5MjAwODA2MDVaMDMxMTAvBgNV BAMTKDAzREVBRUE5MUEzODk4ODI1ODQ2NzFCMUJBMUEwMjkyMzk3Qjg5NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu6ayuHAr0OzdkdwLf+9NRgkwj Qztu3PUGUKsy3aCnCLcjOtqzhqJju4ZRj32o0cHo/nAeMItCUttzTEy94bH8lVcZ /7/kBPVEbxl06XLiDXTbNk/nJFb0A2Ejn0AjDUDU6WcbJz1RN5eLMotfWz0q/3Gt CMk000DSHv/ujZcZ9PvYWK8X3eIM27SZRDDLg8GJNDPWETC0BVuhwK760hwmcPi0 oV/ydE0c8fl/JfDBXZJjftyUdzNP/XWReLHjYkN4AYvekkVlVSnyEsFfsNQ113zc NkvaFCxAU3K636xDtRqKlk3sCL3OO/kHnVG9HDeEgoEk9CavgT/3AYkXOewRAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUA96uqRo4mIJYRnGxuhoCkjl7iUIwHwYDVR0j BBgwFoAU5Iq6XZacnFV5E0guMGTjvGJgGOMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDdlMzAyZTYtODgxZS00ZDkzLWFlM2UtOWI3Yzk3YTli OWQwLzEvRTQ4QUJBNUQ5NjlDOUM1NTc5MTM0ODJFMzA2NEUzQkM2MjYwMThFMy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1 NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC9FNDhBQkE1RDk2OUM5QzU1NzkxMzQ4MkUz MDY0RTNCQzYyNjAxOEUzLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q3ZTMwMmU2LTg4MWUtNGQ5My1hZTNlLTliN2M5N2E5YjlkMC8xL0U0OEFCQTVE OTY5QzlDNTU3OTEzNDgyRTMwNjRFM0JDNjI2MDE4RTMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC/j+LP gHLQgGy1beXXwQkasRtmofZJjdmuAdn3ztPGdg9FJbMyPiAP6XJ9IUxyhl6ErKdu 8RFajMGd6hqoirvKxJLkJL43MVwd/dW3yVDeUc0BOgrwcAgCobCR/wtQVuV/H1nt 1f1q79Bgtxlxs4frAwg6BWyg/sN5IJEOGS76iF5XIbXwUqNxf92xMJNvVdaJFTWS NspbQMVlzq71Y4J5vuYY6YuDmCxeSUtN9goYxfq1GRbhqwundNprL1Z4rgfxCfld NSGgBBgj1S5gJ3P5ZRwuFaWUnXnuXLPjzlZC/L+u6CbFfqGYYAKaOgRcQ05Sh1E3 LgibuWZc7wUNZLoR -----END CERTIFICATE-----Generated at Thu Sep 19 09:37:04 2024 by rpki-client on console-ams.rpki-client.org