$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/8/32398A1406A1C1D323CA63CB320FFD1EB4D1B0C4.mft File: 32398A1406A1C1D323CA63CB320FFD1EB4D1B0C4.mft (raw, json) Hash identifier: WNbkrATfJF/iRDHu5yFTZAsj2ykNW9jhWLqTT70iCAU= Subject key identifier: 9E:84:0F:0B:33:A0:31:D8:03:CB:38:13:32:F5:89:80:35:8B:46:F8 Authority key identifier: 32:39:8A:14:06:A1:C1:D3:23:CA:63:CB:32:0F:FD:1E:B4:D1:B0:C4 Certificate issuer: /CN=32398A1406A1C1D323CA63CB320FFD1EB4D1B0C4 Certificate serial: 56E9FB5ADEB5185B3336D650898F1042017CB4D6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/32398A1406A1C1D323CA63CB320FFD1EB4D1B0C4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/8/32398A1406A1C1D323CA63CB320FFD1EB4D1B0C4.mft Manifest number: C4 Signing time: Fri 21 Jun 2024 15:07:32 +0000 Manifest this update: Fri 21 Jun 2024 15:02:32 +0000 Manifest next update: Sat 22 Jun 2024 18:44:32 +0000 Files and hashes: 1: 326131313a323963303a396562653a3a2f34372d3438203d3e203134363138.roa (hash: fycC0UeL6liXoK+7uZCbJcRap3WaS0JUMwnW8BsbcDk=) 2: 326131313a323963303a396562383a3a2f34362d3438203d3e203136353039.roa (hash: et596bH8tUxjFHs2a6/cNPZoQPevbHRyR0lQ65/r2nA=) 3: 326131313a323963303a396562303a3a2f34342d3438203d3e20323033303639.roa (hash: EzDrSU0tEdoyrWBny4WwvfoAYESt5HomMWAJ483CPZA=) 4: 326131313a323963303a396562653a3a2f34372d3438203d3e203136353039.roa (hash: +Gy89ybA1Z02ZVk1Qb4p4nTUf+b8bekfP/lbqOu4QMw=) 5: 326131313a323963303a396562383a3a2f34362d3438203d3e203134363138.roa (hash: VairAG1GH3Nqpnot+beTl4FtLl0ofBKMtMIyfr2b4xQ=) 6: 32398A1406A1C1D323CA63CB320FFD1EB4D1B0C4.crl (hash: RBpXgnIF4cH5YHqHUC0CtuJrHm5jN7TvqUT+tlLsQT0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/8/32398A1406A1C1D323CA63CB320FFD1EB4D1B0C4.crl rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/8/32398A1406A1C1D323CA63CB320FFD1EB4D1B0C4.mft rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/32398A1406A1C1D323CA63CB320FFD1EB4D1B0C4.cer rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/CDC014669D381152AFB94B76936268BFF73E7D50.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/CDC014669D381152AFB94B76936268BFF73E7D50.mft rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/CDC014669D381152AFB94B76936268BFF73E7D50.cer rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 22 Jun 2024 06:12:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:e9:fb:5a:de:b5:18:5b:33:36:d6:50:89:8f:10:42:01:7c:b4:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32398A1406A1C1D323CA63CB320FFD1EB4D1B0C4 Validity Not Before: Jun 21 15:02:32 2024 GMT Not After : Jun 22 18:44:32 2024 GMT Subject: CN=9E840F0B33A031D803CB381332F58980358B46F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:05:e3:90:ac:6e:66:53:f4:1c:f5:b1:12:87: ba:c4:a7:e7:91:1d:fb:22:79:d3:4b:82:9d:2b:40: fe:31:4b:16:1a:e9:ff:98:f2:5f:2e:d9:48:b2:bb: 90:dd:ba:01:6b:4d:8e:1c:01:c1:af:d1:05:df:cc: 1e:d1:71:19:61:02:37:b9:f3:ad:a2:de:0c:b9:84: 34:bd:62:ad:2c:fd:9b:a5:d5:47:09:9d:a8:dd:f2: 7a:72:9b:b1:09:eb:bc:76:ed:25:93:3d:fc:da:0c: 72:a3:5e:14:19:59:69:44:c4:e2:bb:40:bd:d8:62: ae:29:71:4e:50:20:b1:93:59:df:7d:ee:ff:43:ce: 62:c9:d6:1b:c0:13:8b:c9:8e:f4:cb:bf:84:da:6f: a0:fe:25:fa:44:54:44:1f:68:77:cd:d8:1c:a4:75: f2:15:e6:1e:61:9b:d5:ac:34:e9:60:5f:aa:f6:68: 12:02:cf:74:e9:47:2c:be:0d:51:a9:00:f9:9c:3a: a4:c4:e7:ae:16:06:6b:61:bc:cc:28:48:04:af:37: b4:e2:29:8f:ff:87:88:1a:37:5e:2d:13:ca:a1:8a: 01:9c:a0:f5:61:b8:96:35:fa:0f:44:0b:9c:af:55: 93:d0:0a:40:de:5b:09:54:95:60:5a:60:cc:09:2d: 7a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:84:0F:0B:33:A0:31:D8:03:CB:38:13:32:F5:89:80:35:8B:46:F8 X509v3 Authority Key Identifier: keyid:32:39:8A:14:06:A1:C1:D3:23:CA:63:CB:32:0F:FD:1E:B4:D1:B0:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/8/32398A1406A1C1D323CA63CB320FFD1EB4D1B0C4.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/2/32398A1406A1C1D323CA63CB320FFD1EB4D1B0C4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/8/32398A1406A1C1D323CA63CB320FFD1EB4D1B0C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:92:d4:c5:26:35:0c:ec:6b:15:ab:66:95:d1:62:7e:64:50: 3b:a3:66:51:6d:31:0e:62:02:21:b4:ca:82:25:3b:56:7f:74: b6:11:dd:70:f2:bd:bf:e1:62:4c:bf:86:16:6d:3a:1d:c2:a6: 31:ca:57:86:d8:5f:ae:6d:f2:d2:78:05:a4:5f:61:1d:07:6f: 76:d0:57:42:c7:66:c7:e7:7e:3b:8c:b5:2a:87:c7:ca:87:c5: 27:52:c6:e4:ac:b5:fc:b0:c6:4e:0a:b5:b4:d4:0d:f7:34:0d: 29:41:19:1a:53:9e:bd:03:41:b8:3a:21:24:25:01:bf:ca:37: dc:c6:fd:48:79:d6:7f:25:cd:b9:7c:21:44:33:3e:97:43:f3: 1a:62:7e:e8:a5:fd:00:53:de:c4:aa:93:4f:97:24:1b:e9:01: 0c:5e:2c:9d:b5:9b:3e:9e:75:b9:31:ef:cd:d5:03:15:0a:11: 1f:80:8e:f7:d2:b6:fc:15:2a:c1:36:6c:d5:6c:02:47:68:78: a9:f2:5d:67:8e:55:b2:fc:a8:cd:5d:2a:8b:31:64:b1:d5:44: 01:8e:b1:a3:97:cf:59:f2:6c:1c:65:74:fd:4c:cc:ce:0b:d6: 5c:b8:7a:41:8e:e1:03:24:ff:5a:3b:0c:9b:1c:78:5f:e3:02: df:3f:10:79 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUVun7Wt61GFszNtZQiY8QQgF8tNYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzIzOThBMTQwNkExQzFEMzIzQ0E2M0NCMzIwRkZEMUVC NEQxQjBDNDAeFw0yNDA2MjExNTAyMzJaFw0yNDA2MjIxODQ0MzJaMDMxMTAvBgNV BAMTKDlFODQwRjBCMzNBMDMxRDgwM0NCMzgxMzMyRjU4OTgwMzU4QjQ2RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMBeOQrG5mU/Qc9bESh7rEp+eR HfsiedNLgp0rQP4xSxYa6f+Y8l8u2Uiyu5DdugFrTY4cAcGv0QXfzB7RcRlhAje5 862i3gy5hDS9Yq0s/Zul1UcJnajd8npym7EJ67x27SWTPfzaDHKjXhQZWWlExOK7 QL3YYq4pcU5QILGTWd997v9DzmLJ1hvAE4vJjvTLv4Tab6D+JfpEVEQfaHfN2Byk dfIV5h5hm9WsNOlgX6r2aBICz3TpRyy+DVGpAPmcOqTE564WBmthvMwoSASvN7Ti KY//h4gaN14tE8qhigGcoPVhuJY1+g9EC5yvVZPQCkDeWwlUlWBaYMwJLXoLAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUnoQPCzOgMdgDyzgTMvWJgDWLRvgwHwYDVR0j BBgwFoAUMjmKFAahwdMjymPLMg/9HrTRsMQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi ZTRlLzgvMzIzOThBMTQwNkExQzFEMzIzQ0E2M0NCMzIwRkZEMUVCNEQxQjBDNC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1 NDEtYmNjMS0yNzY1NDNhMjVjN2QvMi8zMjM5OEExNDA2QTFDMUQzMjNDQTYzQ0Iz MjBGRkQxRUI0RDFCMEM0LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzFiZjhlOTc3LTcyNzgtNDZjZi1hYmQxLTk5Y2QxZmQyYmU0ZS84LzMyMzk4QTE0 MDZBMUMxRDMyM0NBNjNDQjMyMEZGRDFFQjREMUIwQzQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBxktTF JjUM7GsVq2aV0WJ+ZFA7o2ZRbTEOYgIhtMqCJTtWf3S2Ed1w8r2/4WJMv4YWbTod wqYxyleG2F+ubfLSeAWkX2EdB2920FdCx2bH5347jLUqh8fKh8UnUsbkrLX8sMZO CrW01A33NA0pQRkaU569A0G4OiEkJQG/yjfcxv1IedZ/Jc25fCFEMz6XQ/MaYn7o pf0AU97EqpNPlyQb6QEMXiydtZs+nnW5Me/N1QMVChEfgI730rb8FSrBNmzVbAJH aHip8l1njlWy/KjNXSqLMWSx1UQBjrGjl89Z8mwcZXT9TMzOC9ZcuHpBjuEDJP9a OwybHHhf4wLfPxB5 -----END CERTIFICATE-----Generated at Fri Jun 21 16:34:22 2024 by rpki-client on console.sobornost.net