$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.mft File: 488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.mft (raw, json) Hash identifier: 7wM315VsZ+ndDs2uvvOmnBGS1zEPNoqoE81Vvg+iMME= Subject key identifier: 6D:7F:A1:EF:31:8D:69:41:ED:09:65:D8:68:1A:02:A4:BE:4D:AD:B8 Authority key identifier: 48:8B:D8:6A:FD:B1:BE:23:8E:1E:3E:AD:E8:5A:05:20:B2:AF:66:DF Certificate issuer: /CN=488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF Certificate serial: 4FADE79EB846307E40A3721428CD4F748511A73B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.mft Manifest number: B8 Signing time: Sun 30 Jun 2024 19:44:48 +0000 Manifest this update: Sun 30 Jun 2024 19:39:48 +0000 Manifest next update: Mon 01 Jul 2024 20:09:48 +0000 Files and hashes: 1: 326130613a363034343a393032303a3a2f34342d3434203d3e20323135353930.roa (hash: 8z/u3oMp7pRsAS7NaPJ16DpgAAP2eKfJs4XUiSJwoZg=) 2: 488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.crl (hash: 0RMTR2cLENBBI+Fb4MXAZVCXBo59tH74q/eJOkT6ubw=) 3: 326130613a363034343a393030303a3a2f34382d3438203d3e20323135343433.roa (hash: ryNu5VnlTJpvhtmeoULn3Z7FvBn2WZxeh1CyJiVI3d8=) 4: 326130613a363034343a393030343a3a2f34382d3438203d3e20323135343433.roa (hash: N53r+fj2CPzmLYdetT5f7xYtYHnCPblA/IGh+xuvj+s=) 5: 326130613a363034343a393035303a3a2f34342d3434203d3e20323135353930.roa (hash: 4s76+hjle7KOmr0oXZaew7Z44NKxKS5Gb9h6WpO2Mqk=) 6: 326130613a363034343a393033303a3a2f34342d3434203d3e203239363332.roa (hash: Zh5hks5i2myHJnt+VJ/jLtpQSEq/jvoUP97/xsTJbEM=) 7: 326130613a363034343a393034303a3a2f34342d3434203d3e20323135343433.roa (hash: rPND7tpo4s+6EgOD+JGwDP7hLnU6yGM4NcO2Imnx5jQ=) 8: 326130613a363034343a393033303a3a2f34342d3434203d3e2038373732.roa (hash: 92qpHT0MuFEE1iyV8h1/4QM2HD797hwHEuNZAyfUwBI=) 9: 326130613a363034343a393033303a3a2f34342d3434203d3e20323135323332.roa (hash: ZmUx6T9QZCqdwLpnTe2pjNUl5+p3SFgFCFUVwxwmZA4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.crl rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.mft rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.cer rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 01 Jul 2024 11:07:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:ad:e7:9e:b8:46:30:7e:40:a3:72:14:28:cd:4f:74:85:11:a7:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF Validity Not Before: Jun 30 19:39:48 2024 GMT Not After : Jul 1 20:09:48 2024 GMT Subject: CN=6D7FA1EF318D6941ED0965D8681A02A4BE4DADB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:26:af:a6:88:46:5b:73:8b:8c:85:1d:5d:57: 4a:6f:05:b5:7f:f4:3e:6c:89:d2:53:f4:88:b8:e9: b3:fe:57:a9:7b:5b:75:80:f2:7c:82:bd:bd:2a:81: a8:51:25:9d:3d:72:54:09:5d:6d:b0:9f:23:e2:fc: ac:cd:3b:a7:83:63:bd:c2:b2:9b:b9:0d:04:4d:13: c6:e0:d0:2c:b1:34:bb:30:0f:19:ff:9b:0d:98:f6: 42:a5:c8:28:fa:70:a0:ba:57:43:0a:6b:68:37:f2: 2d:a8:05:15:dc:8e:41:1c:26:13:70:73:a6:df:08: 5b:41:80:5b:be:2d:17:0b:d2:dd:03:ca:97:62:e2: 6e:f1:30:ea:4c:94:9e:d2:f8:2c:ef:20:80:76:1e: ec:a1:71:52:08:82:57:ea:42:d7:3d:ea:5f:80:04: 33:14:dd:31:6a:df:d8:cc:20:e2:f0:77:ed:82:8a: a7:93:aa:24:69:52:3f:74:d0:53:3f:15:f2:72:bd: ea:63:1b:2f:ae:f1:2c:77:3f:05:1d:dd:92:e1:b1: 9f:5f:f1:38:0f:b9:3d:b3:41:a8:fa:53:29:5d:56: 43:e3:8f:06:32:ce:05:1d:6f:57:7b:b0:0d:98:d6: 22:43:52:03:73:cb:de:9c:6b:fa:e5:09:01:0e:76: c8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:7F:A1:EF:31:8D:69:41:ED:09:65:D8:68:1A:02:A4:BE:4D:AD:B8 X509v3 Authority Key Identifier: keyid:48:8B:D8:6A:FD:B1:BE:23:8E:1E:3E:AD:E8:5A:05:20:B2:AF:66:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:9e:88:74:78:37:25:46:27:63:f9:45:3e:35:a7:05:5d:26: 27:96:65:51:6f:d7:be:75:d4:2e:49:b0:fc:81:13:af:8c:95: d1:2c:f2:d6:31:c1:99:8d:fe:cb:32:35:f7:92:52:3d:9e:fb: ee:d0:b7:db:56:27:6b:29:06:05:a9:92:85:18:c5:84:e4:fe: 8d:30:87:f2:65:af:30:da:15:0f:88:d2:2f:c3:1b:1b:76:27: 07:34:ed:58:67:2b:d2:34:bb:c1:5a:82:dc:5f:94:97:88:41: c6:e5:c6:db:1e:d9:3c:66:18:d5:93:4f:0b:9f:fb:85:46:17: aa:e9:74:d2:9c:09:4e:bf:5b:71:18:e5:47:76:2a:c3:70:2a: e2:c3:05:24:fd:02:31:30:5f:9a:25:96:fd:b0:a4:31:f5:ea: 94:b5:f4:eb:db:f2:e3:83:1e:89:38:a1:54:e6:7c:db:da:a1: 54:ba:c3:3f:c1:97:d7:25:94:b7:27:c3:05:cf:42:f1:60:2f: d0:61:37:c0:dc:95:36:d3:3b:c6:96:41:91:e4:ec:99:c7:53: 84:e3:c4:65:34:c8:cc:46:be:46:4b:f7:26:8e:8d:6c:cc:e6: fa:86:8f:62:fb:c6:4f:09:58:b4:1f:3b:91:5d:4f:d8:84:90: 1e:51:b1:97 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUT63nnrhGMH5Ao3IUKM1PdIURpzswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg4QkQ4NkFGREIxQkUyMzhFMUUzRUFERTg1QTA1MjBC MkFGNjZERjAeFw0yNDA2MzAxOTM5NDhaFw0yNDA3MDEyMDA5NDhaMDMxMTAvBgNV BAMTKDZEN0ZBMUVGMzE4RDY5NDFFRDA5NjVEODY4MUEwMkE0QkU0REFEQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzJq+miEZbc4uMhR1dV0pvBbV/ 9D5sidJT9Ii46bP+V6l7W3WA8nyCvb0qgahRJZ09clQJXW2wnyPi/KzNO6eDY73C spu5DQRNE8bg0CyxNLswDxn/mw2Y9kKlyCj6cKC6V0MKa2g38i2oBRXcjkEcJhNw c6bfCFtBgFu+LRcL0t0Dypdi4m7xMOpMlJ7S+CzvIIB2HuyhcVIIglfqQtc96l+A BDMU3TFq39jMIOLwd+2CiqeTqiRpUj900FM/FfJyvepjGy+u8Sx3PwUd3ZLhsZ9f 8TgPuT2zQaj6UyldVkPjjwYyzgUdb1d7sA2Y1iJDUgNzy96ca/rlCQEOdsgTAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUbX+h7zGNaUHtCWXYaBoCpL5NrbgwHwYDVR0j BBgwFoAUSIvYav2xviOOHj6t6FoFILKvZt8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWNiMzAzMjItOTRmNy00ZTYxLTg2OTEtNWMxYjYxMWIw YTk1LzEvNDg4QkQ4NkFGREIxQkUyMzhFMUUzRUFERTg1QTA1MjBCMkFGNjZERi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1 NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC80ODhCRDg2QUZEQjFCRTIzOEUxRTNFQURF ODVBMDUyMEIyQUY2NkRGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2VjYjMwMzIyLTk0ZjctNGU2MS04NjkxLTVjMWI2MTFiMGE5NS8xLzQ4OEJEODZB RkRCMUJFMjM4RTFFM0VBREU4NUEwNTIwQjJBRjY2REYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCEnoh0 eDclRidj+UU+NacFXSYnlmVRb9e+ddQuSbD8gROvjJXRLPLWMcGZjf7LMjX3klI9 nvvu0LfbVidrKQYFqZKFGMWE5P6NMIfyZa8w2hUPiNIvwxsbdicHNO1YZyvSNLvB WoLcX5SXiEHG5cbbHtk8ZhjVk08Ln/uFRheq6XTSnAlOv1txGOVHdirDcCriwwUk /QIxMF+aJZb9sKQx9eqUtfTr2/Ljgx6JOKFU5nzb2qFUusM/wZfXJZS3J8MFz0Lx YC/QYTfA3JU20zvGlkGR5OyZx1OE48RlNMjMRr5GS/cmjo1szOb6ho9i+8ZPCVi0 HzuRXU/YhJAeUbGX -----END CERTIFICATE-----Generated at Sun Jun 30 23:37:08 2024 by rpki-client on console-ams.rpki-client.org