$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft File: YGYXWM4zBiJHCjmujW70ogRPg8Q.mft (raw, json) Hash identifier: O6kR2jK2swY1RfnC0YrChz9iJT6E4SABUtvqUudLfhg= Subject key identifier: 41:CF:E8:97:51:EB:AD:1B:B1:2E:7C:EC:44:AF:AC:8F:8F:16:B5:FF Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4 Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4 Certificate serial: 0193512C0F95A286E19D2126776E674D40FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft Manifest number: 1390 Signing time: Fri 22 Nov 2024 00:01:02 +0000 Manifest this update: Fri 22 Nov 2024 00:01:02 +0000 Manifest next update: Sat 23 Nov 2024 00:01:02 +0000 Files and hashes: 1: 1d6n_FM3UCtuaUTWIxlOm4pTXT0.roa (hash: 9k9QlSGvoZerMN4yMn1MFfZRX1VBW6LDPA742sO5UmQ=) 2: H-wa34U60Z-9d-cK6ju60X-NCSc.roa (hash: VjVVi223hpHPYLNKOqq7AHauSqv069AyDsddeGeYv+Q=) 3: RCyWf3xR1bQjmR133-lDOiSN34M.roa (hash: NNNJaJGU0RHlbGPukzxrSCZkeIExyktSnj+/x6GX7gU=) 4: RoxQdEkUGdU5KFSpqkIqnNwZtEM.roa (hash: ALDbdzxfZqTfYYzXFd8zMZgN3RsXQb1p6U9xBgQanYs=) 5: V0MzdqRkE6guhp3m-uKd0D5oEw8.roa (hash: cwywYwHzeXeg5Da4PfSj/ZTvICthlQGt/vj6WbV3ew4=) 6: Wyxcgb774ohHkZWOd6reEUmVk_Q.roa (hash: vlm1lEjH4YRqjG7JMPAQOkN+JuGgbZNi+MjsTAj7EqY=) 7: YGYXWM4zBiJHCjmujW70ogRPg8Q.crl (hash: PUjY56m5j9JmxypnYjbqNg9iG8N8TlgsFE5APzd3Ehk=) 8: YLzKa4_J3D6Ob-2SByyoqHggVjw.roa (hash: 2lK7l3Hf47jZoPEcm4Z0gl0YRqeljMJg706VoP40+zs=) 9: YTxpiUNYQxfo_ag9IBpew2wWOvk.roa (hash: HQ8Xts9CvpOF+pffN7CpTQbsbywSqYRBmUOEpbPB6XM=) 10: YwQ5Vocw27XNW39iWRRIDGFUmoc.roa (hash: LE4lFPy0GmiqRiUSPNFkTUYGeICb1BQH1puUSyPvYq0=) 11: gaAiHHN2H3jE70iYljLwPEKkyMg.roa (hash: 3TVYYkTBiSQiexhXF31tGtYUCgL51A/1nDr8Ymxj3H8=) 12: mPC8Qzy3dpR56-vpor59DPt9iDo.roa (hash: /+OcXEqBjmHLERxDabPCTff5iI/ChcSfgmMfYTq4Tm4=) 13: t4lIRas0VyGQjw4weHBJ_zRMF20.roa (hash: PwP55EuwyYEY9PLSTWKTjwEr98cpSx5P1PhYU1bU8MM=) 14: tgtmOWqHgNMQwFxtHifEkWmo-mA.roa (hash: Re+HI9XI/ula7arVMlAzOaoplZTZMJQDpmJspHEEAEY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 18:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:51:2c:0f:95:a2:86:e1:9d:21:26:77:6e:67:4d:40:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4 Validity Not Before: Nov 22 00:01:02 2024 GMT Not After : Nov 23 00:01:02 2024 GMT Subject: CN=41cfe89751ebad1bb12e7cec44afac8f8f16b5ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a3:fc:a6:42:a1:c4:5c:f3:41:34:f0:ef:9f: 93:3c:4f:75:4c:e1:08:7c:36:16:66:7a:d3:64:5e: 37:dc:2b:90:1a:f3:24:ca:2b:88:db:90:18:b9:fb: 47:f2:60:47:d9:c5:06:8a:71:ad:c9:1b:43:b5:ce: a8:ca:3d:78:53:33:ec:2d:c4:06:12:89:3a:f1:80: b1:f7:dd:3a:43:21:35:f3:27:91:0d:38:29:73:49: a7:53:98:0c:bf:e7:ae:72:16:16:5a:70:fa:ab:e1: 70:27:01:1c:fa:e3:78:93:4a:89:43:0b:ca:76:2e: 01:61:4a:b8:dd:9d:5e:ea:49:44:b0:c8:06:d9:ff: 02:74:c2:2c:38:24:da:56:05:3e:34:f5:4c:2d:67: 84:c2:16:23:ae:95:73:25:de:a7:fc:84:d7:ec:76: 34:ce:48:e1:c5:ee:54:e7:19:63:ac:03:35:c6:e7: b3:4e:18:21:69:33:8d:0f:ea:95:cb:bf:7f:48:4c: 1b:b3:2e:18:b3:43:54:16:28:42:a9:64:d9:04:96: cc:15:cd:39:73:68:90:08:91:6f:c6:cd:39:b8:b1: 06:89:52:3c:33:53:50:b1:92:06:21:31:7e:97:32: 21:f5:71:b5:33:90:a6:42:7b:ca:50:6a:d4:9c:d1: 64:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:CF:E8:97:51:EB:AD:1B:B1:2E:7C:EC:44:AF:AC:8F:8F:16:B5:FF X509v3 Authority Key Identifier: keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:8a:d7:2c:50:13:de:9d:5c:b4:93:84:bc:f5:c8:0f:ea:40: ec:c8:88:6a:e7:1b:ca:a2:4f:23:55:5c:5d:3a:b5:ba:73:33: 76:1a:95:5c:aa:e0:d5:28:f4:fb:e0:e4:36:90:32:ec:4a:d4: a1:93:88:67:c0:d5:04:38:83:6d:82:9b:5d:5e:38:a9:14:01: 34:f6:21:a7:80:fe:e0:ef:e6:4a:be:c7:8f:bc:89:4f:9d:66: 4a:0b:44:c1:20:fb:3f:63:7d:5c:32:a0:31:c0:77:12:c4:42: 81:be:0d:d3:e3:11:57:fa:e0:44:38:be:b3:cc:df:d1:71:72: de:99:f9:7e:bb:e2:ea:8c:8f:47:40:c4:9b:73:53:31:28:2d: 7b:e4:ce:35:df:a1:42:da:72:99:70:17:1e:e4:d0:f7:a8:11: 12:19:f0:af:77:1a:e0:38:54:55:b2:46:c3:87:ac:44:3d:9d: b2:80:50:39:d2:43:91:bb:69:05:63:6a:a9:d9:2f:7e:45:78: 56:11:46:9e:7a:8c:43:6d:9d:99:2e:62:03:dc:1e:02:68:8c: da:4d:4a:63:a9:96:d2:e3:70:ae:9e:cd:00:8d:54:b9:d4:e7: d5:30:7d:b2:c8:58:97:0c:37:5f:37:06:68:4c:64:4c:66:95: f7:7a:ed:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNRLA+VoobhnSEmd25nTUD6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjYxNzU4Y2UzMzA2MjI0NzBhMzlhZThkNmVmNGEyMDQ0 ZjgzYzQwHhcNMjQxMTIyMDAwMTAyWhcNMjQxMTIzMDAwMTAyWjAzMTEwLwYDVQQD Eyg0MWNmZTg5NzUxZWJhZDFiYjEyZTdjZWM0NGFmYWM4ZjhmMTZiNWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqP8pkKhxFzzQTTw75+TPE91TOEI fDYWZnrTZF433CuQGvMkyiuI25AYuftH8mBH2cUGinGtyRtDtc6oyj14UzPsLcQG Eok68YCx9906QyE18yeRDTgpc0mnU5gMv+euchYWWnD6q+FwJwEc+uN4k0qJQwvK di4BYUq43Z1e6klEsMgG2f8CdMIsOCTaVgU+NPVMLWeEwhYjrpVzJd6n/ITX7HY0 zkjhxe5U5xljrAM1xuezThghaTOND+qVy79/SEwbsy4Ys0NUFihCqWTZBJbMFc05 c2iQCJFvxs05uLEGiVI8M1NQsZIGITF+lzIh9XG1M5CmQnvKUGrUnNFkzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEHP6JdR660bsS587ESvrI+PFrX/MB8GA1UdIwQY MBaAFGBmF1jOMwYiRwo5ro1u9KIET4PEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2Ut MWY4NzQ2OTQ1NDgzLzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2UtMWY4NzQ2OTQ1NDgz LzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ4rXLFAT 3p1ctJOEvPXID+pA7MiIaucbyqJPI1VcXTq1unMzdhqVXKrg1Sj0++DkNpAy7ErU oZOIZ8DVBDiDbYKbXV44qRQBNPYhp4D+4O/mSr7Hj7yJT51mSgtEwSD7P2N9XDKg McB3EsRCgb4N0+MRV/rgRDi+s8zf0XFy3pn5frvi6oyPR0DEm3NTMSgte+TONd+h QtpymXAXHuTQ96gREhnwr3ca4DhUVbJGw4esRD2dsoBQOdJDkbtpBWNqqdkvfkV4 VhFGnnqMQ22dmS5iA9weAmiM2k1KY6mW0uNwrp7NAI1UudTn1TB9sshYlww3XzcG aExkTGaV93rtag== -----END CERTIFICATE-----Generated at Fri Nov 22 02:43:48 2024 by rpki-client on console-fra.rpki-client.org