$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d88b854e-092c-4d79-ac06-af380b08d12b/3/DD6503836A2A3384674C6B0501E95B0AA2A381C9.mft File: DD6503836A2A3384674C6B0501E95B0AA2A381C9.mft (raw, json) Hash identifier: xvKi4mHEizSkd2zBZCa6yfTa10Ucns5WfTlJqtDzMzQ= Subject key identifier: D1:1C:91:09:A5:C3:DE:AA:59:43:E6:63:E9:28:73:76:D1:C2:74:25 Authority key identifier: DD:65:03:83:6A:2A:33:84:67:4C:6B:05:01:E9:5B:0A:A2:A3:81:C9 Certificate issuer: /CN=DD6503836A2A3384674C6B0501E95B0AA2A381C9 Certificate serial: 6BAE9F3D682E68DA54E85595ADD6370277B170AC Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/DD6503836A2A3384674C6B0501E95B0AA2A381C9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d88b854e-092c-4d79-ac06-af380b08d12b/3/DD6503836A2A3384674C6B0501E95B0AA2A381C9.mft Manifest number: 25 Signing time: Thu 19 Sep 2024 01:45:16 +0000 Manifest this update: Thu 19 Sep 2024 01:40:16 +0000 Manifest next update: Fri 20 Sep 2024 02:31:16 +0000 Files and hashes: 1: DD6503836A2A3384674C6B0501E95B0AA2A381C9.crl (hash: 0Z/F8K8waNxOfv/R0iYP3T7AmxaLhUVOPuzjhISfVCo=) 2: 326130623a346530373a6362343a3a2f34382d3438203d3e20323134333933.roa (hash: ODUilhshRdNsDXfqAe4VZEWbvmhaS4lMhLkZMfOrcKE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d88b854e-092c-4d79-ac06-af380b08d12b/3/DD6503836A2A3384674C6B0501E95B0AA2A381C9.crl rsync://rsync.paas.rpki.ripe.net/repository/d88b854e-092c-4d79-ac06-af380b08d12b/3/DD6503836A2A3384674C6B0501E95B0AA2A381C9.mft rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/DD6503836A2A3384674C6B0501E95B0AA2A381C9.cer rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.crl rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 19 Sep 2024 22:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:ae:9f:3d:68:2e:68:da:54:e8:55:95:ad:d6:37:02:77:b1:70:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD6503836A2A3384674C6B0501E95B0AA2A381C9 Validity Not Before: Sep 19 01:40:16 2024 GMT Not After : Sep 20 02:31:16 2024 GMT Subject: CN=D11C9109A5C3DEAA5943E663E9287376D1C27425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f7:d8:0e:e5:5b:56:e4:a6:bf:50:1c:c4:04: 82:7b:83:45:b0:d2:07:ed:75:0b:44:15:65:bc:28: ac:8b:b5:20:60:6b:ed:e5:46:0e:25:ca:9a:0b:cd: 52:0d:a2:7b:65:6b:51:49:ae:62:66:98:ea:dd:d7: 42:a8:9c:98:4a:00:3a:fe:25:c8:ac:8d:d2:4a:36: 4d:04:18:fb:e6:52:08:5d:7a:b7:2e:d1:83:ad:bb: 8b:2e:3b:c0:84:29:d6:98:dd:ba:87:ce:15:1c:4b: b6:4e:01:3d:e7:85:d9:54:9b:60:55:d9:d5:e9:6f: fa:1e:11:f3:c7:28:61:0e:27:65:c1:19:a0:23:6d: 41:6c:0a:b6:cc:41:5f:ad:f7:08:04:67:99:3d:93: cf:76:21:59:16:3f:32:33:f4:bd:4e:3c:86:7b:7d: 6e:f4:f6:dc:15:02:b0:31:45:8e:86:63:44:41:9d: 83:b2:ae:8c:22:d0:97:0b:aa:d1:6a:8b:f1:8b:c9: 19:98:95:2b:94:d9:dc:23:06:07:96:53:e5:29:1c: 18:fa:b7:ac:32:04:dc:2e:fa:44:d6:50:ec:b3:42: 65:96:70:ce:d0:2d:c8:5d:f8:6f:16:69:36:19:75: aa:a8:03:b4:b6:19:d3:19:74:a3:f4:a2:a1:f2:39: 31:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:1C:91:09:A5:C3:DE:AA:59:43:E6:63:E9:28:73:76:D1:C2:74:25 X509v3 Authority Key Identifier: keyid:DD:65:03:83:6A:2A:33:84:67:4C:6B:05:01:E9:5B:0A:A2:A3:81:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d88b854e-092c-4d79-ac06-af380b08d12b/3/DD6503836A2A3384674C6B0501E95B0AA2A381C9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/DD6503836A2A3384674C6B0501E95B0AA2A381C9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d88b854e-092c-4d79-ac06-af380b08d12b/3/DD6503836A2A3384674C6B0501E95B0AA2A381C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:8d:ee:7e:8b:f3:44:c6:71:96:cf:94:5a:8f:8d:19:8d:43: ca:06:88:4d:d6:6a:47:5d:33:f2:a0:b6:6f:bc:19:e4:91:d9: 93:4a:39:33:0d:b3:9a:84:8a:0d:8d:3e:8c:ac:6b:19:b5:3f: a9:fc:d7:d4:51:6d:0f:ad:1d:ed:7c:68:c0:d3:8c:33:57:bf: 08:8d:e4:9d:f9:00:b7:53:0d:75:26:3d:b1:80:42:4e:91:34: 20:60:51:12:7d:f7:94:9f:dc:e8:a0:df:43:0d:16:4d:46:e8: 4d:c3:56:b4:a1:76:7d:e2:89:b8:ad:6f:d3:3d:5a:69:04:f8: fa:cc:65:64:b1:ba:27:fa:1b:d5:e7:6b:f9:ba:fe:13:ba:81: 77:94:59:9b:88:7c:0e:66:1c:47:e6:20:ea:c9:1a:aa:af:a1: 5d:54:46:8e:00:aa:92:e7:0e:7e:c6:e2:8c:16:85:87:43:bd: 78:30:80:75:e8:3c:32:20:8c:a6:05:13:29:e2:5b:bc:2a:27: e7:29:e0:c3:34:18:8e:72:bb:64:60:d4:2d:09:83:f3:db:7f: 65:c6:f5:69:a2:04:88:6b:e7:56:f9:da:f9:05:fd:d5:de:b9: 38:cb:42:ae:80:58:f9:0a:33:9f:49:39:c1:a7:37:7d:c1:78: d3:70:93:d4 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUa66fPWguaNpU6FWVrdY3AnexcKwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ2NTAzODM2QTJBMzM4NDY3NEM2QjA1MDFFOTVCMEFB MkEzODFDOTAeFw0yNDA5MTkwMTQwMTZaFw0yNDA5MjAwMjMxMTZaMDMxMTAvBgNV BAMTKEQxMUM5MTA5QTVDM0RFQUE1OTQzRTY2M0U5Mjg3Mzc2RDFDMjc0MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+99gO5VtW5Ka/UBzEBIJ7g0Ww 0gftdQtEFWW8KKyLtSBga+3lRg4lypoLzVINontla1FJrmJmmOrd10KonJhKADr+ JcisjdJKNk0EGPvmUghdercu0YOtu4suO8CEKdaY3bqHzhUcS7ZOAT3nhdlUm2BV 2dXpb/oeEfPHKGEOJ2XBGaAjbUFsCrbMQV+t9wgEZ5k9k892IVkWPzIz9L1OPIZ7 fW709twVArAxRY6GY0RBnYOyrowi0JcLqtFqi/GLyRmYlSuU2dwjBgeWU+UpHBj6 t6wyBNwu+kTWUOyzQmWWcM7QLchd+G8WaTYZdaqoA7S2GdMZdKP0oqHyOTGhAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU0RyRCaXD3qpZQ+Zj6ShzdtHCdCUwHwYDVR0j BBgwFoAU3WUDg2oqM4RnTGsFAelbCqKjgckwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDg4Yjg1NGUtMDkyYy00ZDc5LWFjMDYtYWYzODBiMDhk MTJiLzMvREQ2NTAzODM2QTJBMzM4NDY3NEM2QjA1MDFFOTVCMEFBMkEzODFDOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wYzcwNDAxYy03ZjQxLTRh NmItOTQzNC1jYzgwZGNhMDkzZTYvMi9ERDY1MDM4MzZBMkEzMzg0Njc0QzZCMDUw MUU5NUIwQUEyQTM4MUM5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q4OGI4NTRlLTA5MmMtNGQ3OS1hYzA2LWFmMzgwYjA4ZDEyYi8zL0RENjUwMzgz NkEyQTMzODQ2NzRDNkIwNTAxRTk1QjBBQTJBMzgxQzkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBSje5+ i/NExnGWz5Raj40ZjUPKBohN1mpHXTPyoLZvvBnkkdmTSjkzDbOahIoNjT6MrGsZ tT+p/NfUUW0PrR3tfGjA04wzV78IjeSd+QC3Uw11Jj2xgEJOkTQgYFESffeUn9zo oN9DDRZNRuhNw1a0oXZ94om4rW/TPVppBPj6zGVksbon+hvV52v5uv4TuoF3lFmb iHwOZhxH5iDqyRqqr6FdVEaOAKqS5w5+xuKMFoWHQ714MIB16DwyIIymBRMp4lu8 KifnKeDDNBiOcrtkYNQtCYPz239lxvVpogSIa+dW+dr5Bf3V3rk4y0KugFj5CjOf STnBpzd9wXjTcJPU -----END CERTIFICATE-----Generated at Thu Sep 19 07:23:31 2024 by rpki-client on console-ams.rpki-client.org