$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft File: DXIuRROjlnjYqyOy1kl3U0BRjLk.mft (raw, json) Hash identifier: uEsEcADB69X2j3ZHVhaJ/X8vC1Md2N0xBswqnNtICZg= Subject key identifier: 3E:E8:65:2D:F9:E9:28:84:01:F8:DC:1E:92:FD:18:24:9F:35:CF:5A Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9 Certificate serial: 01935274DD1C76295EC9CD253DD31CC357FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft Manifest number: 09CA Signing time: Fri 22 Nov 2024 06:00:10 +0000 Manifest this update: Fri 22 Nov 2024 06:00:10 +0000 Manifest next update: Sat 23 Nov 2024 06:00:10 +0000 Files and hashes: 1: 1RN91i70aQXHnoK4tOMqnSTJBK4.roa (hash: rja1ar5I8KOEun7Aob6NAuXI9PMmVZcGY1SNOWjrhTg=) 2: 2PbXcElGaHzj3G_BNpVJ5MNzXCc.roa (hash: O6cByBKmRGU5YeYDRXMyjKnnVMKoxPpbIWbHQ6ot3F8=) 3: 2hlTj7WU3AWqVblAoCBFtkmOPoU.roa (hash: V9iJHKt77503S/z4r7FqqlcmWZJPg9vnjy7ix42foRg=) 4: 3JzKPrU0SUeTmApD4Ogy40FMJlM.roa (hash: yn2JNY7LS/EWNacERuetLJZuT/5kqeVJW4WD363xnAY=) 5: 4slX7gowUkDerAvq9YaMDvGvX2Y.roa (hash: +6MhCX2QVAAagqld/2ht3I0+/61ThOZa5SZUbTOHhl8=) 6: 509K0AXFRxiYnBtREpR7oJMAGek.roa (hash: 6HpJfxCd1cFkZtKjHaf7d7QfADuLimJ4JmGi+YxI8R8=) 7: 5bROO6OssbmARJZL02hbbUExW_g.roa (hash: rnvI+xsV9bH1GNElL0/D4h5O2d8QUlgTWw36XQ9zzUQ=) 8: BOQGLvpoGlxp683nk4JNSGjav64.roa (hash: Ug+q7GEgbyR/5vkUoIYlVfPTfsv3oYtlRd+vwp/a92U=) 9: DXIuRROjlnjYqyOy1kl3U0BRjLk.crl (hash: ni8kNrG0VIBp3TrYNyJ0i9zYTkMvrV2cb/7D/USjcTM=) 10: GRL6rC1oTwQK9_dBiKoSUoo_Ux8.roa (hash: OfNktRR0mUWs1zvgd0nXfN28D3hA00Mt+tRax9Jt7Yc=) 11: IiTas-3PSCrTlkrQ7qiniQvfNNA.roa (hash: Nir9+05cbXwtvircpxjrquB6cgIVFG8cFJlcd3VD4Jk=) 12: Lk2FOEWUHHu93f5zdNpJ0rdH4BM.roa (hash: hBtbofxOzoEhgWplFEc5IO1N66Cstoc9Aydqa3EXPCI=) 13: ROxK71begmjdjOJB9LwgubR0R5M.roa (hash: pldv2ohIFe8mNPnqJ12UuGHoez+mSC730+QK+5yNs6k=) 14: TyClMHwrWzPI_e5hs5LfNo5KO-4.roa (hash: TzPFeRBq7iAe4W4r91rRlUBXu4+DGl08HC9ailpxR7A=) 15: UOUgGyLTp0P4eOXWA70ICxbUGOM.roa (hash: UymWont6r1PAexzE87ynb33kGlvikH5b3U6nZzDysGI=) 16: ZR9Ov9LiAN23ihEek5QeTTbgb8o.roa (hash: lVGPwtYqeuqPuV57Hnmk/Ulnil72lE0j9QlfgRc9KRI=) 17: eYrNgv_-Nv9X6yLbdqMJbXizg3s.roa (hash: uor230O+es+CKsz0g3t1Z4iCMFebXhfJjog4K4qDJ+8=) 18: hR3HXIvzfJc7q0vloNSqFJOEjKA.roa (hash: 797Un3j9GszPyx+Jmm4BzPdS7g50SLGy5kq5QigEeWo=) 19: haty20VXglqB-vYvsy0iZ35w8mg.roa (hash: M/IVBBV6LGZY42Rv1MKh7PHX+3GFvIs5U2COapr6JXw=) 20: m8-hYOkuas6iUhhJOoyaLAMQq78.roa (hash: vwxeK0Z69zGAAHGa7/GTXFSmdgOAn6vWYiP6bgsr+6A=) 21: si-TrbaAmYy_EvdsmRp7WNp8QGY.roa (hash: 1/JAQZKuxrCGvVHQndZpgGMajcyZYYAPyKgp0KUAZKs=) 22: ydJGQoVicl_yccq0i1p58yPBXSI.roa (hash: oBeTe8nXlMDGN1d5TcRiGjdEssd5h1TfxGuF8bcoktE=) 23: znmniGbuvC5YwOh2wJgiXf2atIM.roa (hash: XkQnN8TOJHC74kRYXNacir/tJaaRpthPJYSqdosfE9w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 23:17:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:52:74:dd:1c:76:29:5e:c9:cd:25:3d:d3:1c:c3:57:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9 Validity Not Before: Nov 22 06:00:10 2024 GMT Not After : Nov 23 06:00:10 2024 GMT Subject: CN=3ee8652df9e9288401f8dc1e92fd18249f35cf5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2c:d1:d0:e1:97:5e:a8:b1:91:f4:02:ca:fd: ff:d4:01:ed:65:54:c3:8f:76:f7:e4:a2:a6:b5:02: eb:94:27:a1:c6:01:63:44:5d:dd:77:db:bc:cf:16: 23:cd:3d:23:24:3f:c9:b0:1f:b8:dc:5c:90:0a:29: cb:b5:ce:0b:dc:64:82:9d:0a:24:b3:72:cc:e5:53: 89:19:ee:d3:f3:a0:f5:17:52:bc:44:11:49:25:d9: c7:f4:32:2e:12:7e:bc:2e:d6:70:51:b6:f5:26:99: 3a:e1:85:a0:3e:2b:b3:4e:de:f0:c3:22:db:28:80: 98:2f:1a:6d:d8:b2:45:00:f2:48:f3:a8:b6:05:22: 0d:19:f9:01:38:2c:b0:5b:00:a7:c7:1e:81:8d:ca: 78:d3:bd:17:1c:1a:ee:9b:2a:b4:64:cf:31:3c:80: 0e:6a:66:40:f1:4a:91:67:ea:7f:2b:73:a6:31:e4: 9d:18:be:89:36:76:c4:e8:32:38:fe:76:8e:a0:b4: 94:4d:30:61:d4:ec:a5:53:d1:cd:42:2d:ce:d9:63: 40:57:00:d3:9d:dc:b9:6b:26:9f:05:26:67:74:a5: a5:43:a5:92:47:89:82:31:8c:7a:e3:09:f7:bf:9c: 4a:ef:61:fc:a2:c2:40:63:73:d2:99:23:ce:ac:16: 9f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:E8:65:2D:F9:E9:28:84:01:F8:DC:1E:92:FD:18:24:9F:35:CF:5A X509v3 Authority Key Identifier: keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:5e:42:d8:93:38:c2:3a:af:58:ec:d5:4b:b0:23:52:5a:e7: 9e:46:5b:b1:7f:fa:f1:30:5d:1a:94:c3:93:61:31:45:8e:a9: ba:31:b9:c6:ad:27:94:c1:f3:a9:73:5f:88:57:b3:97:fa:fc: 52:f0:89:ff:b8:a8:60:aa:3f:2b:21:c1:7c:02:13:6d:9a:76: 44:2c:5c:ee:49:85:aa:12:4a:98:98:47:d8:ba:10:1f:c3:5a: b1:c0:8e:e7:fa:18:5e:6b:3a:88:7e:86:31:ae:fd:b0:ce:a6: 7b:f3:e3:53:5d:bc:ad:7d:58:5d:40:75:e9:e8:72:29:f6:f1: e7:fa:80:52:63:56:bd:a1:db:8a:c8:e4:07:a2:79:3b:a0:a7: 2e:c8:98:28:ac:9b:f4:4c:be:b8:66:fa:3a:c7:f6:4b:bc:03: b9:65:c5:eb:de:5a:ff:c7:77:9f:fa:73:7b:6f:4b:b1:61:10: 40:99:5e:0d:0c:86:cc:25:bb:fd:88:68:1f:ba:be:a4:16:13: 47:ed:c1:65:93:58:38:6a:79:dc:40:01:8b:f8:a5:16:88:62: 24:df:3f:0a:88:f8:53:d8:9f:50:87:ef:23:36:a3:c8:94:58: 30:3a:77:96:32:3b:b0:c2:d3:6b:08:f3:50:5d:83:3e:3f:eb: 83:4a:75:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNSdN0cdileyc0lPdMcw1f6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1 MThjYjkwHhcNMjQxMTIyMDYwMDEwWhcNMjQxMTIzMDYwMDEwWjAzMTEwLwYDVQQD EygzZWU4NjUyZGY5ZTkyODg0MDFmOGRjMWU5MmZkMTgyNDlmMzVjZjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSzR0OGXXqixkfQCyv3/1AHtZVTD j3b35KKmtQLrlCehxgFjRF3dd9u8zxYjzT0jJD/JsB+43FyQCinLtc4L3GSCnQok s3LM5VOJGe7T86D1F1K8RBFJJdnH9DIuEn68LtZwUbb1Jpk64YWgPiuzTt7wwyLb KICYLxpt2LJFAPJI86i2BSINGfkBOCywWwCnxx6Bjcp4070XHBrumyq0ZM8xPIAO amZA8UqRZ+p/K3OmMeSdGL6JNnbE6DI4/naOoLSUTTBh1OylU9HNQi3O2WNAVwDT ndy5ayafBSZndKWlQ6WSR4mCMYx64wn3v5xK72H8osJAY3PSmSPOrBafhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD7oZS356SiEAfjcHpL9GCSfNc9aMB8GA1UdIwQY MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt MzQyNWIxMjVlYWE3LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3 LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA015C2JM4 wjqvWOzVS7AjUlrnnkZbsX/68TBdGpTDk2ExRY6pujG5xq0nlMHzqXNfiFezl/r8 UvCJ/7ioYKo/KyHBfAITbZp2RCxc7kmFqhJKmJhH2LoQH8NascCO5/oYXms6iH6G Ma79sM6me/PjU128rX1YXUB16ehyKfbx5/qAUmNWvaHbisjkB6J5O6CnLsiYKKyb 9Ey+uGb6Osf2S7wDuWXF695a/8d3n/pze29LsWEQQJleDQyGzCW7/YhoH7q+pBYT R+3BZZNYOGp53EABi/ilFohiJN8/Coj4U9ifUIfvIzajyJRYMDp3ljI7sMLTawjz UF2DPj/rg0p11g== -----END CERTIFICATE-----Generated at Fri Nov 22 07:02:47 2024 by rpki-client on console-fra.rpki-client.org