$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft File: F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft (raw, json) Hash identifier: xGusz7Iy+Y51ZY+xw+CiO/I2UERY1uDr4vwVVYhv6CY= Subject key identifier: 82:CE:FA:02:C5:1C:2A:90:54:B5:B2:46:DE:4C:D4:36:05:F8:59:43 Authority key identifier: F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A Certificate issuer: /CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Certificate serial: 61799AE77867C5551B9CC9DD45EB610B30FC32B3 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft Manifest number: 0139 Signing time: Thu 21 Nov 2024 09:38:14 +0000 Manifest this update: Thu 21 Nov 2024 09:33:14 +0000 Manifest next update: Fri 22 Nov 2024 12:34:14 +0000 Files and hashes: 1: 326131343a373538303a393130303a3a2f34302d3438203d3e20323136323939.roa (hash: c4wfh1kOphA8Axvw6+dnj3lAut4b1kpMpQW/rZEnV+o=) 2: 326131343a373538303a393230303a3a2f34302d3438203d3e20313430393135.roa (hash: n6lsjVYHHKKKPmzUm98edFKQEZTX7R3BteBSBE3ZmTg=) 3: 326131343a373538313a653030303a3a2f33362d3438203d3e20323134363433.roa (hash: x9Ws2a9hchs2I1MVNTnPpvnZFWRirIvQpeIuGTe39hw=) 4: 326131343a373538303a393130303a3a2f34302d3438203d3e20323031333836.roa (hash: HGfpWKFgSmhSbJJ0S3ZdUrJxu8/156bUgg5vlqYKRis=) 5: 326131343a373538313a6634303a3a2f34342d3438203d3e20323134363433.roa (hash: cFxWp20cVK0UfiJxxcLtUOXevD3OgB7dMefIF5hBHOk=) 6: F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl (hash: 3SsThkrutGo3azlGdVckffKTe8pup3Gm+aON0cHry5g=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 09:57:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:79:9a:e7:78:67:c5:55:1b:9c:c9:dd:45:eb:61:0b:30:fc:32:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A Validity Not Before: Nov 21 09:33:14 2024 GMT Not After : Nov 22 12:34:14 2024 GMT Subject: CN=82CEFA02C51C2A9054B5B246DE4CD43605F85943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:79:59:a9:5e:f4:97:31:e8:e2:3c:77:a6:b4: fa:e3:8c:7d:05:56:04:0d:26:e4:cf:5e:5d:6a:d7: 77:7a:77:8c:57:ce:a4:9d:77:f1:66:de:57:88:9a: fa:3e:d9:37:8c:bb:af:38:a7:19:59:3d:32:c7:31: b7:62:42:6a:f1:da:a1:d2:16:4a:14:02:b0:b4:38: c7:a3:43:c1:7a:80:a8:d6:f2:51:d3:bc:3a:47:0e: c8:05:18:3b:5a:d0:07:96:6b:10:08:a5:b5:b4:83: a5:62:21:17:af:dd:ad:3d:2a:38:f3:74:0e:09:8c: 38:ed:40:1a:58:d8:55:5c:95:21:85:d6:c5:d7:26: 06:c9:0e:73:3c:e9:a6:5a:80:8f:97:7b:8b:70:15: 20:b9:6a:f5:85:94:b8:d9:84:49:d4:6b:da:cf:1d: 59:af:fd:96:0c:d2:e2:7c:ba:b8:a2:06:c0:68:03: 40:24:92:8f:cc:1f:10:96:82:4e:67:c4:20:41:0f: 45:83:47:f9:b8:06:7f:d3:40:1a:46:2b:57:15:06: 37:50:6f:af:fc:3a:e0:ec:5e:2a:cb:56:08:0d:37: 04:9a:7a:56:82:02:8a:26:a0:87:b8:3a:88:fa:f5: 1d:7d:7d:77:0d:42:41:b6:70:5a:a0:a2:89:c8:81: 74:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:CE:FA:02:C5:1C:2A:90:54:B5:B2:46:DE:4C:D4:36:05:F8:59:43 X509v3 Authority Key Identifier: keyid:F9:F7:A2:88:5C:F3:01:2F:A1:39:0D:3B:32:59:FC:78:AE:F7:AD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/1/F9F7A2885CF3012FA1390D3B3259FC78AEF7AD1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:2e:75:df:8b:64:81:25:f2:c4:ea:ee:8b:bf:fb:52:79:a5: 0f:6b:30:81:9e:4b:83:78:65:51:f2:31:8c:26:c0:b9:d3:87: 74:bc:23:45:93:ca:6f:4b:16:fa:83:81:56:2a:ce:6b:2b:19: f1:e6:d1:7e:7a:d3:0a:5e:bd:ea:62:72:c7:70:41:3a:39:cc: af:98:c4:d6:9b:ec:14:18:77:9c:dd:22:6c:a6:a4:f8:c9:0e: 13:c9:39:f2:27:9c:21:4d:fb:ff:2a:91:d7:54:d1:2b:f8:84: 93:b7:6d:66:93:8e:94:6e:6c:4c:4d:a4:07:ad:38:ab:fb:2b: ea:a5:e4:bc:11:d7:1b:00:88:06:9b:ca:71:c6:a1:d0:58:fa: 7e:78:ab:a2:61:b3:16:ba:06:6b:dc:e7:b5:c9:49:e7:04:db: 04:c1:82:1a:9d:42:1c:be:b1:8d:53:0b:09:59:71:fa:60:98: 6d:21:21:1e:1d:d4:76:b9:18:48:9f:45:2a:c6:1c:b5:85:80: ba:4e:24:dd:e3:2d:d8:c8:9e:17:ab:24:68:e8:27:4c:96:73: c1:45:73:c7:fa:e4:12:7d:ad:ec:d6:aa:66:12:9b:80:35:d0: 52:88:89:c1:14:cf:3a:18:ab:20:32:cf:4f:ab:b6:af:5a:df: 16:c1:2d:d0 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUYXma53hnxVUbnMndRethCzD8MrMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhB RUY3QUQxQTAeFw0yNDExMjEwOTMzMTRaFw0yNDExMjIxMjM0MTRaMDMxMTAvBgNV BAMTKDgyQ0VGQTAyQzUxQzJBOTA1NEI1QjI0NkRFNENENDM2MDVGODU5NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJeVmpXvSXMejiPHemtPrjjH0F VgQNJuTPXl1q13d6d4xXzqSdd/Fm3leImvo+2TeMu684pxlZPTLHMbdiQmrx2qHS FkoUArC0OMejQ8F6gKjW8lHTvDpHDsgFGDta0AeWaxAIpbW0g6ViIRev3a09Kjjz dA4JjDjtQBpY2FVclSGF1sXXJgbJDnM86aZagI+Xe4twFSC5avWFlLjZhEnUa9rP HVmv/ZYM0uJ8uriiBsBoA0Akko/MHxCWgk5nxCBBD0WDR/m4Bn/TQBpGK1cVBjdQ b6/8OuDsXirLVggNNwSaelaCAoomoIe4Ooj69R19fXcNQkG2cFqgoonIgXQDAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUgs76AsUcKpBUtbJG3kzUNgX4WUMwHwYDVR0j BBgwFoAU+feiiFzzAS+hOQ07Mln8eK73rRowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGI4ZDhiN2QtYzQ4Ni00MjM5LTlkOWYtOGY4ZjVkY2Vk OGQwLzEvRjlGN0EyODg1Q0YzMDEyRkExMzkwRDNCMzI1OUZDNzhBRUY3QUQxQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GOUY3QTI4ODVDRjMwMTJGQTEzOTBEM0Iz MjU5RkM3OEFFRjdBRDFBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2RiOGQ4YjdkLWM0ODYtNDIzOS05ZDlmLThmOGY1ZGNlZDhkMC8xL0Y5RjdBMjg4 NUNGMzAxMkZBMTM5MEQzQjMyNTlGQzc4QUVGN0FEMUEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQByLnXf i2SBJfLE6u6Lv/tSeaUPazCBnkuDeGVR8jGMJsC504d0vCNFk8pvSxb6g4FWKs5r Kxnx5tF+etMKXr3qYnLHcEE6OcyvmMTWm+wUGHec3SJspqT4yQ4TyTnyJ5whTfv/ KpHXVNEr+ISTt21mk46UbmxMTaQHrTir+yvqpeS8EdcbAIgGm8pxxqHQWPp+eKui YbMWugZr3Oe1yUnnBNsEwYIanUIcvrGNUwsJWXH6YJhtISEeHdR2uRhIn0Uqxhy1 hYC6TiTd4y3YyJ4XqyRo6CdMlnPBRXPH+uQSfa3s1qpmEpuANdBSiInBFM86GKsg Ms9Pq7avWt8WwS3Q -----END CERTIFICATE-----Generated at Thu Nov 21 12:18:37 2024 by rpki-client on console-ams.rpki-client.org