$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft File: 88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft (raw, json) Hash identifier: PZ4N2MmqtD19Es8ZXqpjjpomyor/A+qwftIGJC/co6Q= Subject key identifier: 61:79:9C:8D:11:05:71:B8:C2:A0:12:DF:CB:8A:3D:D8:D4:2F:9B:85 Authority key identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91 Certificate issuer: /CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491 Certificate serial: 22C3774C29306415A5DE1530A72EE398E46E4E65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft Manifest number: 85 Signing time: Wed 20 Nov 2024 22:31:24 +0000 Manifest this update: Wed 20 Nov 2024 22:26:24 +0000 Manifest next update: Fri 22 Nov 2024 00:02:24 +0000 Files and hashes: 1: 88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl (hash: NKv2DY73vsQxYO+xglgJTSw+/99xUGOdEsYMCZpw4NQ=) 2: 326130643a623238373a656334313a3a2f34382d3438203d3e20323132353136.roa (hash: 5lNL9wmLDlet0KrRB5Z2lMcDOBbA6gqsqoS0zWeKarw=) 3: 3138352e3234322e3138322e302f32342d3234203d3e20323035323139.roa (hash: AhCF4sqO4Q0Rso5PdcIaUsrbWs9QVBfzYdCmt5CoiRg=) 4: 3138352e3234322e3138312e302f32342d3234203d3e203431373230.roa (hash: Wm3IDAOfkV81JSuZK/Na7XnsHjZUJzGcxe64BY1WIhs=) 5: 326130643a623238373a656330303a3a2f34302d3430203d3e20323135363634.roa (hash: ZkXNpKW61UGEN6+3Eq/nkumIj3yuGpDt69ocmobqC/8=) 6: 3138352e3234322e3138332e302f32342d3234203d3e203431373230.roa (hash: pyzsZjErsKF/r6TDE4GaASJZY8jmD+uruFgv90V9cVg=) 7: 326130643a623238373a646130303a3a2f34382d3438203d3e20323135313436.roa (hash: iavCedfpEd5k0rIG/kL5F/xxOAMPmZq43N15rLvPbic=) 8: 326130643a623238373a656530303a3a2f34302d3430203d3e20323038333238.roa (hash: WtqgmDwc3f4nCSOQ8ixLkNx8sXt7FaBWfi7I6des1c8=) 9: 3138352e3234322e3138302e302f32342d3234203d3e203431373230.roa (hash: sx/iVfyDskrQoK42os+6TyQoUVUvVUXlGN9RH2id0Fo=) 10: 326130643a623238373a656363303a3a2f34322d3432203d3e20323135363634.roa (hash: GLrga7I6TmqAcqHZCyQLyo7wEkxzFEUlvkIYE9Jlscs=) 11: 326130643a623238373a656334323a3a2f34382d3438203d3e20323134393235.roa (hash: 9fvE/EKZJ0AUA6jRvgotTKUfh3uMQWCtvLablu7TiLY=) 12: AS41720.asa (hash: +RbH8buX1T5kTWMGsS+k2hctRH6+R8V1cu3+Qe3+/Rs=) 13: 326130643a623238303a383130303a3a2f34382d3438203d3e203431373230.roa (hash: Qv46t81qHTc4uf1Bxldy1f/G+l9sAnh7axBU+G8+9tQ=) 14: 326130643a623238303a3a2f32392d3239203d3e203431373230.roa (hash: YrKMLBs8xCiL955bvB/8G11UYsLmajFWAxqi9VeJEB4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 21 Nov 2024 15:27:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:c3:77:4c:29:30:64:15:a5:de:15:30:a7:2e:e3:98:e4:6e:4e:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491 Validity Not Before: Nov 20 22:26:24 2024 GMT Not After : Nov 22 00:02:24 2024 GMT Subject: CN=61799C8D110571B8C2A012DFCB8A3DD8D42F9B85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c9:ce:3d:02:f5:f5:ed:27:eb:71:24:3d:30: 01:68:1b:76:95:e6:cc:8e:7a:1a:26:5a:5a:fc:5f: 49:11:ce:8d:75:01:ee:69:27:a4:d4:17:fb:c6:ec: b9:44:68:b0:4d:38:76:be:f6:b6:9a:22:bd:83:69: 03:f2:b2:df:b0:7c:7a:11:b6:12:8b:0d:5a:8a:54: 3c:65:c5:9c:9d:ac:2e:fd:c9:9f:d1:4f:7c:cf:03: 5f:76:57:16:19:68:6a:5f:ea:63:11:c3:dc:31:6c: 9c:2b:64:a3:db:13:f8:80:0b:ac:13:fe:cc:9b:ac: 6a:91:52:c1:ef:90:16:e8:8d:3d:f7:0a:80:5a:59: 8a:6a:f9:c9:49:d0:8a:f0:a3:22:fc:59:49:c0:fa: 91:68:09:de:56:f0:dc:a5:74:ed:13:83:5f:1d:9f: b6:f9:62:10:92:cc:c0:a6:89:db:aa:e6:8a:fb:99: fd:6f:a5:55:c0:eb:f4:c1:eb:04:60:81:b6:a0:e0: ba:89:1d:0d:6e:1c:15:26:fc:ae:d3:76:76:13:a7: 3f:17:85:02:c1:60:8c:3c:5a:73:98:e0:d9:e2:2c: cb:37:36:bf:5c:82:06:3f:93:3e:97:9d:af:d0:a4: 4d:f5:39:fb:cb:e2:96:93:ff:57:83:4e:80:f1:f5: 5e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:79:9C:8D:11:05:71:B8:C2:A0:12:DF:CB:8A:3D:D8:D4:2F:9B:85 X509v3 Authority Key Identifier: keyid:88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:df:58:81:01:ac:95:c3:7a:9b:ae:63:0b:94:c8:5c:7e:b6: 16:fc:38:7d:d5:7c:43:df:a5:9e:fa:df:df:56:4d:b0:a7:bb: 68:8c:0a:17:70:ec:ac:fc:7f:cd:d3:f7:db:14:81:f5:bb:73: d5:43:17:fa:fe:cc:80:ec:52:ba:a1:a1:9c:9f:d1:28:58:33: a4:ea:56:60:1d:2d:c7:10:26:c1:48:14:c7:ae:12:c6:9e:88: 5a:cf:24:69:9d:87:45:98:c6:59:24:f6:d9:5f:58:9c:9a:21: 43:fd:7c:64:71:c6:de:ea:5e:5b:24:0f:1c:ca:e2:10:23:1e: c5:fd:f0:ec:6b:8c:5b:4c:7c:53:a1:d6:d9:a5:73:b3:47:67: ea:80:2c:06:a2:ad:99:1d:fe:c1:61:e9:24:02:6c:75:11:69: c3:3a:d0:0d:20:b0:1f:1e:ff:cb:38:68:73:4c:00:e6:48:47: 28:a5:0d:3e:32:f1:a3:be:58:ca:56:e4:a5:a2:10:60:00:fd: 3f:62:a3:b0:dd:99:6c:71:46:f2:7e:77:b1:71:53:f8:39:47: 79:a9:4a:75:91:7a:08:db:88:90:a4:66:6d:fe:28:37:b5:e5: cc:76:20:44:89:32:cb:3c:61:5d:d2:2a:f6:5f:5e:6a:64:ff: 91:4b:0b:68 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUIsN3TCkwZBWl3hUwpy7jmORuTmUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhjZGQ5YzE5M2RhOTE4NWE0YWMxNWIyYWRlODc1ZmU5 N2I2ZjQ5MTAeFw0yNDExMjAyMjI2MjRaFw0yNDExMjIwMDAyMjRaMDMxMTAvBgNV BAMTKDYxNzk5QzhEMTEwNTcxQjhDMkEwMTJERkNCOEEzREQ4RDQyRjlCODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDByc49AvX17SfrcSQ9MAFoG3aV 5syOehomWlr8X0kRzo11Ae5pJ6TUF/vG7LlEaLBNOHa+9raaIr2DaQPyst+wfHoR thKLDVqKVDxlxZydrC79yZ/RT3zPA192VxYZaGpf6mMRw9wxbJwrZKPbE/iAC6wT /sybrGqRUsHvkBbojT33CoBaWYpq+clJ0IrwoyL8WUnA+pFoCd5W8NyldO0Tg18d n7b5YhCSzMCmiduq5or7mf1vpVXA6/TB6wRggbag4LqJHQ1uHBUm/K7TdnYTpz8X hQLBYIw8WnOY4NniLMs3Nr9cggY/kz6Xna/QpE31OfvL4paT/1eDToDx9V6jAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUYXmcjREFcbjCoBLfy4o92NQvm4UwHwYDVR0j BBgwFoAUiM3ZwZPakYWkrBWyreh1/pe29JEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTZhZmYyMzQtNjFjNS00MjkwLThhNmQtNWYyYjkwMjcz MjJmLzAvODhDREQ5QzE5M0RBOTE4NUE0QUMxNUIyQURFODc1RkU5N0I2RjQ5MS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNM1p3WlBha1lXa3JCV3lyZWgxX3Bl MjlKRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lNmFmZjIzNC02 MWM1LTQyOTAtOGE2ZC01ZjJiOTAyNzMyMmYvMC84OENERDlDMTkzREE5MTg1QTRB QzE1QjJBREU4NzVGRTk3QjZGNDkxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKN9YgQGslcN6m65jC5TI XH62Fvw4fdV8Q9+lnvrf31ZNsKe7aIwKF3DsrPx/zdP32xSB9btz1UMX+v7MgOxS uqGhnJ/RKFgzpOpWYB0txxAmwUgUx64Sxp6IWs8kaZ2HRZjGWST22V9YnJohQ/18 ZHHG3upeWyQPHMriECMexf3w7GuMW0x8U6HW2aVzs0dn6oAsBqKtmR3+wWHpJAJs dRFpwzrQDSCwHx7/yzhoc0wA5khHKKUNPjLxo75YylbkpaIQYAD9P2KjsN2ZbHFG 8n53sXFT+DlHealKdZF6CNuIkKRmbf4oN7XlzHYgRIkyyzxhXdIq9l9eamT/kUsL aA== -----END CERTIFICATE-----Generated at Wed Nov 20 23:15:05 2024 by rpki-client on console-fra.rpki-client.org