$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.mft File: 488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.mft (raw, json) Hash identifier: MywgLl6ucVCcGdOC/mah9+lXJ1xGc73XqCJ/b+n3fTw= Subject key identifier: C4:AA:3C:54:9A:73:CD:6F:DE:A0:B7:87:FD:A6:FE:09:25:74:94:4D Authority key identifier: 48:8B:D8:6A:FD:B1:BE:23:8E:1E:3E:AD:E8:5A:05:20:B2:AF:66:DF Certificate issuer: /CN=488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF Certificate serial: 226E849E28AC32D6E47363F1F148EB762F9AF3E9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.mft Manifest number: 0183 Signing time: Thu 21 Nov 2024 17:16:19 +0000 Manifest this update: Thu 21 Nov 2024 17:11:19 +0000 Manifest next update: Fri 22 Nov 2024 20:58:19 +0000 Files and hashes: 1: 326130613a363034343a393030363a3a2f34382d3438203d3e20323135353930.roa (hash: AfzgORGNBz+QXzbNFXc6g6iPrPpHM5f2+sQ8boLLtk8=) 2: 326130613a363034343a393032303a3a2f34342d3434203d3e20323135353930.roa (hash: 8z/u3oMp7pRsAS7NaPJ16DpgAAP2eKfJs4XUiSJwoZg=) 3: 326130613a363034343a393030383a3a2f34382d3438203d3e20323134323930.roa (hash: XpXMXD7WLvF9GioVgay+deJvR4n/11AkEGGwbKMgjqI=) 4: 326130613a363034343a393030343a3a2f34382d3438203d3e20323135343433.roa (hash: N53r+fj2CPzmLYdetT5f7xYtYHnCPblA/IGh+xuvj+s=) 5: 326130613a363034343a393036303a3a2f34342d3434203d3e20323135343339.roa (hash: pd2Lrnwn2H4VmAPI0n0iBYgBDsKpqvsJNjLpsnux5z0=) 6: 326130613a363034343a393035303a3a2f34342d3434203d3e20323135353930.roa (hash: 4s76+hjle7KOmr0oXZaew7Z44NKxKS5Gb9h6WpO2Mqk=) 7: 488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.crl (hash: PNzbbxBzHyl9gUIv+1wIvWezzV5CBtykaLH7X44aMcA=) 8: 326130613a363034343a393033303a3a2f34342d3434203d3e20323135323332.roa (hash: ZmUx6T9QZCqdwLpnTe2pjNUl5+p3SFgFCFUVwxwmZA4=) 9: 326130613a363034343a393030373a3a2f34382d3438203d3e2030.roa (hash: zdoHRl9eAZv7jX3eavPcp2wW0eTr8w9Ub9N1fnI5ZzE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.crl rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.mft rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.cer rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:6e:84:9e:28:ac:32:d6:e4:73:63:f1:f1:48:eb:76:2f:9a:f3:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF Validity Not Before: Nov 21 17:11:19 2024 GMT Not After : Nov 22 20:58:19 2024 GMT Subject: CN=C4AA3C549A73CD6FDEA0B787FDA6FE092574944D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:06:e9:0c:ee:a5:ed:a0:1a:69:b8:29:61:62: 3e:d9:b3:08:41:4b:a1:87:63:0f:f9:9f:37:6d:b4: 81:11:5e:68:4a:fa:99:e9:f1:a8:14:ca:e5:b1:a8: 3f:5e:2c:b7:f9:e2:05:b9:3f:db:2f:72:61:85:54: c7:a0:6f:74:6d:bb:1f:08:b1:84:a5:5a:44:b7:59: c6:b0:c8:8a:4b:3a:f3:cc:f7:c0:3d:80:6b:f6:c3: 88:d5:a8:81:88:9f:7e:e6:4c:8f:b3:6f:8a:b2:88: 19:36:51:00:69:82:12:52:f1:9e:e8:07:f8:d8:71: 39:c6:49:b8:85:09:4a:ed:8c:24:10:c2:da:2b:4c: a7:bc:e0:b8:b6:46:95:53:7d:3a:07:c5:68:a3:86: a2:11:e1:ab:ab:a0:b7:16:7f:56:02:2f:30:bb:27: dc:54:34:70:ad:1c:68:5c:a9:bc:5b:b0:e8:dc:0c: 55:46:61:14:0b:6a:8a:49:64:03:54:b8:b9:63:5d: ed:87:14:aa:ee:02:85:34:9e:bf:41:69:0c:a5:f7: ac:e9:e6:6a:ad:c4:76:4e:9f:43:02:47:fa:30:ba: 0b:c9:0f:82:2f:b9:f4:f5:01:a4:44:b2:dd:27:b3: 52:e2:10:c8:b4:94:de:81:0b:0c:62:54:5b:d4:c7: d7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:AA:3C:54:9A:73:CD:6F:DE:A0:B7:87:FD:A6:FE:09:25:74:94:4D X509v3 Authority Key Identifier: keyid:48:8B:D8:6A:FD:B1:BE:23:8E:1E:3E:AD:E8:5A:05:20:B2:AF:66:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:25:66:1a:6c:54:96:ed:f1:60:75:3b:6b:18:74:4f:34:cb: b0:e3:a7:f6:cb:49:30:2c:5f:a2:f0:57:30:7f:ac:b6:69:08: 2a:f7:ed:3d:ed:ec:e0:a3:ba:e1:0b:c9:c8:5b:c1:9b:a2:fd: 35:5f:31:93:75:11:c0:1e:2e:e3:96:a3:4e:e8:e6:6f:ea:e9: 2d:68:79:65:4f:ea:f0:0c:7b:40:81:76:a6:df:8b:ae:7e:f1: 79:3f:58:da:d3:92:3d:22:e6:80:94:89:54:62:23:0d:31:00: c2:e8:64:e1:df:8e:24:f4:f6:64:a0:d0:92:a2:9a:2c:90:04: ea:d8:1f:05:67:cf:36:d3:57:9c:e8:b6:96:d4:57:98:3c:18: 5f:77:84:be:a6:37:37:df:98:f6:2f:a9:cb:39:d2:3c:ad:df: ee:73:e4:ef:c6:b3:4a:4d:29:32:50:8e:de:a5:54:4c:a6:11: 93:8f:a2:11:d7:86:18:1e:65:31:a5:73:cb:b6:96:5b:51:23: e2:1e:62:c8:4e:47:26:a1:f2:af:c7:c9:46:16:41:36:5a:79: 7f:db:15:c7:85:95:90:d9:81:b0:86:b0:7a:4d:0c:d4:da:89: fb:a9:c0:44:7e:c3:32:76:b3:0a:d0:94:1a:60:7b:cb:e4:4f: a8:35:02:96 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUIm6EniisMtbkc2Px8Ujrdi+a8+kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg4QkQ4NkFGREIxQkUyMzhFMUUzRUFERTg1QTA1MjBC MkFGNjZERjAeFw0yNDExMjExNzExMTlaFw0yNDExMjIyMDU4MTlaMDMxMTAvBgNV BAMTKEM0QUEzQzU0OUE3M0NENkZERUEwQjc4N0ZEQTZGRTA5MjU3NDk0NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEBukM7qXtoBppuClhYj7ZswhB S6GHYw/5nzdttIERXmhK+pnp8agUyuWxqD9eLLf54gW5P9svcmGFVMegb3Rtux8I sYSlWkS3WcawyIpLOvPM98A9gGv2w4jVqIGIn37mTI+zb4qyiBk2UQBpghJS8Z7o B/jYcTnGSbiFCUrtjCQQwtorTKe84Li2RpVTfToHxWijhqIR4auroLcWf1YCLzC7 J9xUNHCtHGhcqbxbsOjcDFVGYRQLaopJZANUuLljXe2HFKruAoU0nr9BaQyl96zp 5mqtxHZOn0MCR/owugvJD4IvufT1AaREst0ns1LiEMi0lN6BCwxiVFvUx9e3AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUxKo8VJpzzW/eoLeH/ab+CSV0lE0wHwYDVR0j BBgwFoAUSIvYav2xviOOHj6t6FoFILKvZt8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWNiMzAzMjItOTRmNy00ZTYxLTg2OTEtNWMxYjYxMWIw YTk1LzEvNDg4QkQ4NkFGREIxQkUyMzhFMUUzRUFERTg1QTA1MjBCMkFGNjZERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1 NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC80ODhCRDg2QUZEQjFCRTIzOEUxRTNFQURF ODVBMDUyMEIyQUY2NkRGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2VjYjMwMzIyLTk0ZjctNGU2MS04NjkxLTVjMWI2MTFiMGE5NS8xLzQ4OEJEODZB RkRCMUJFMjM4RTFFM0VBREU4NUEwNTIwQjJBRjY2REYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAVJWYa bFSW7fFgdTtrGHRPNMuw46f2y0kwLF+i8Fcwf6y2aQgq9+097ezgo7rhC8nIW8Gb ov01XzGTdRHAHi7jlqNO6OZv6uktaHllT+rwDHtAgXam34uufvF5P1ja05I9IuaA lIlUYiMNMQDC6GTh344k9PZkoNCSoposkATq2B8FZ88201ec6LaW1FeYPBhfd4S+ pjc335j2L6nLOdI8rd/uc+TvxrNKTSkyUI7epVRMphGTj6IR14YYHmUxpXPLtpZb USPiHmLITkcmofKvx8lGFkE2Wnl/2xXHhZWQ2YGwhrB6TQzU2on7qcBEfsMydrMK 0JQaYHvL5E+oNQKW -----END CERTIFICATE-----Generated at Thu Nov 21 19:50:41 2024 by rpki-client on console-fra.rpki-client.org