$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.mft File: XaQypOw7CsTKTk7OwOn01GtJevA.mft (raw, json) Hash identifier: s4nomSlkRrEqgKbXHH93V80U6x4YDXCHAzxhBVVXJiM= Subject key identifier: 0D:C5:24:F7:D7:4C:A8:B6:98:1D:2A:95:BE:E8:F8:8E:1E:F9:E5:A7 Authority key identifier: 5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0 Certificate issuer: /CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0 Certificate serial: 01935764ACC272AE8E98103CB4CAB68693F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.mft Manifest number: 1386 Signing time: Sat 23 Nov 2024 05:00:35 +0000 Manifest this update: Sat 23 Nov 2024 05:00:35 +0000 Manifest next update: Sun 24 Nov 2024 05:00:35 +0000 Files and hashes: 1: 1-YogfmKwQf9EC6HAxHp7tGdiSfA.roa (hash: WamJOgH5ha0T3xvIYHAVd5Z7Mqz1LNgGq/WmPK/1P8g=) 2: 2gfaX-TtZ8RBLV6HMB0j2mDpOPs.roa (hash: eJBEGg56iKPR1WkuHk5oV/dOGDuwQUiZ9yNlN1nM39c=) 3: BOH31QgH3qz2UFIeftjo-6C5Fek.roa (hash: DS5e1ucfdroctk1wEW6B2xFbJ77YyFWDhka5JBYIy2E=) 4: Gq3ZT6bIXdmXcg8c_usJWTADloA.roa (hash: pcjrr2V82T01v9BGN/y/LxJTVfRLhs8qJBHiJqKopKk=) 5: I8sPKRir594lHFeezsaA0WXHd5o.roa (hash: sSiNLodTC/iM3vF3WfZVDjNyACSwr/BSs7i/qiZ/fBM=) 6: JvkKpyhbpGA8UL__3C4XQpWDpAo.roa (hash: DDJVwpDP7p53haa7DBiVldpZA5dYPtkPXnHXowU+vQ4=) 7: OY9tCxWaVrnLcCfXnydN5f_oxmk.roa (hash: n4l7HxWW6k0P3NoGI+OeQZzd7J0Pk3ApBYPbQU3iubI=) 8: P5rGqzmh21na75yPc6OiqdpXpMU.roa (hash: QAj4jlbXmOzOdVejiLbgooiBYvjgHoWNV4qu3UwsxJk=) 9: XaQypOw7CsTKTk7OwOn01GtJevA.crl (hash: EhkJ4Jb/KFeF9XoDeOXJOqUhcQr3bfm0zZ1WRBZMHcQ=) 10: d9L7i7eavo4KcT7yhBKglycpvOQ.roa (hash: K2s6N+OpPcc1gM5yX4y5XAHrlCkHAxropCnZUDIUf8U=) 11: fRsZG0PHZPuhU-6QpDbPAODKMT0.roa (hash: G8+L84DOntGe2pEq0wBTX0ojVKNJaA3Aoeev75Mv1UU=) 12: gdysErM6mUKPV5y0qXDfJYaKs7c.roa (hash: gQXQtxTOiQ3WanX94sA65rTDhydiozAnSrZL/WLCFZ4=) 13: m2E145NPKbRX_VOp8ovV-3hxCb4.roa (hash: DL9/79yMxtcLVnGtVsBdvZ+mMwpJd/l7irsQkxQyzso=) 14: pzTBBG0uTyp8enLIHyx6mvEmH-Q.roa (hash: Z6l5bXBZ6z6xWhBEw8PIduXyxAWND5UIcg3CmXiIMQU=) 15: wPtdxRNZPDzyaKQ1i0f8x95GnC4.roa (hash: WKa+LyaNO21/Pg9zKtPnbQvHksKHLc6fPRTutTGAa/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.crl rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.mft rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 21:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:57:64:ac:c2:72:ae:8e:98:10:3c:b4:ca:b6:86:93:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0 Validity Not Before: Nov 23 05:00:35 2024 GMT Not After : Nov 24 05:00:35 2024 GMT Subject: CN=0dc524f7d74ca8b6981d2a95bee8f88e1ef9e5a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a7:cd:fc:d5:d9:ea:e9:05:85:54:51:53:f0: 0f:44:9b:f2:ab:a7:b6:60:e1:26:00:2c:4f:5d:1d: bf:62:92:8d:61:bb:bd:71:5b:ea:fe:95:01:09:3e: 2b:db:9e:e8:aa:63:14:42:7b:db:e1:34:ff:06:85: d7:28:ef:13:64:2f:0f:03:ce:6f:1f:85:f9:5b:c7: 76:bd:34:a2:b6:52:c9:93:e2:e7:d1:7c:b1:46:ce: ba:1e:62:0c:b5:a4:c0:d4:b4:fc:15:b2:cb:f1:ab: 0b:15:b7:3e:45:9a:52:e7:43:b0:ce:b3:1d:2e:b6: b0:5b:d9:f0:fd:fe:ef:d4:a6:f3:45:4b:53:89:18: 88:d3:13:3a:73:67:82:17:3b:82:a4:ee:dc:6c:65: 44:f9:b5:e3:bd:69:31:8c:43:59:1e:03:fb:f7:bb: 78:b6:cf:f4:b2:4c:1b:4b:e8:09:2f:22:d0:18:21: d5:8e:1e:0d:53:26:cf:46:bb:03:04:00:c2:15:1a: 78:ce:04:bd:14:51:67:dc:a5:0c:19:e5:ff:cd:d7: 10:7c:79:42:55:18:81:be:91:28:f5:af:11:30:9b: 52:00:d1:84:77:2d:29:a3:ef:35:47:a7:90:9b:91: 72:7f:0e:75:97:47:02:69:7e:b3:e3:9f:99:b3:eb: e9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:C5:24:F7:D7:4C:A8:B6:98:1D:2A:95:BE:E8:F8:8E:1E:F9:E5:A7 X509v3 Authority Key Identifier: keyid:5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:55:19:47:50:c1:6f:86:82:cd:98:7e:65:d5:9c:dd:69:e3: 2c:56:e9:9a:01:7c:a6:57:d1:1b:c0:86:b0:c6:fe:98:2c:35: cc:ef:4a:26:a3:1e:1f:a3:d6:bd:12:6c:6c:07:13:80:45:21: 8a:9d:c9:e3:25:79:5d:e0:82:71:ab:ac:f6:f0:ec:84:66:c6: c8:9d:78:db:92:48:60:26:5c:da:3e:17:08:99:10:8c:04:18: 10:20:8a:f5:31:a3:b3:6d:a0:38:65:fd:ce:3b:39:a1:24:ef: 60:70:a1:dd:f2:5f:f4:96:4b:17:da:7c:0e:26:43:24:82:04: 29:f9:87:f9:38:6a:1a:58:c4:72:17:34:b9:cd:1b:ac:cd:11: 22:cc:63:4a:79:29:51:67:e6:80:fc:51:af:44:23:07:1d:0d: 00:f2:0a:c8:ce:d6:46:aa:e2:9d:4d:81:f4:c8:ef:68:56:12: ae:27:1a:65:03:d0:9e:48:50:10:82:5f:50:57:dd:a0:2f:47: f3:66:b4:ce:fc:ce:d1:f2:bd:10:67:49:b2:e6:40:07:d5:4c: 69:38:64:40:5e:a7:c6:e3:2a:b8:d8:65:c7:c3:72:be:fb:24: 18:4b:a0:48:82:9e:44:9b:7f:0b:b1:ef:79:c3:14:7c:c9:9f: da:73:e1:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNXZKzCcq6OmBA8tMq2hpP3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkYTQzMmE0ZWMzYjBhYzRjYTRlNGVjZWMwZTlmNGQ0NmI0 OTdhZjAwHhcNMjQxMTIzMDUwMDM1WhcNMjQxMTI0MDUwMDM1WjAzMTEwLwYDVQQD EygwZGM1MjRmN2Q3NGNhOGI2OTgxZDJhOTViZWU4Zjg4ZTFlZjllNWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApafN/NXZ6ukFhVRRU/APRJvyq6e2 YOEmACxPXR2/YpKNYbu9cVvq/pUBCT4r257oqmMUQnvb4TT/BoXXKO8TZC8PA85v H4X5W8d2vTSitlLJk+Ln0XyxRs66HmIMtaTA1LT8FbLL8asLFbc+RZpS50OwzrMd LrawW9nw/f7v1KbzRUtTiRiI0xM6c2eCFzuCpO7cbGVE+bXjvWkxjENZHgP797t4 ts/0skwbS+gJLyLQGCHVjh4NUybPRrsDBADCFRp4zgS9FFFn3KUMGeX/zdcQfHlC VRiBvpEo9a8RMJtSANGEdy0po+81R6eQm5Fyfw51l0cCaX6z45+Zs+vpoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA3FJPfXTKi2mB0qlb7o+I4e+eWnMB8GA1UdIwQY MBaAFF2kMqTsOwrEyk5OzsDp9NRrSXrwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGFReXBPdzdDc1RLVGs3T3dPbjAxR3RKZXZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85ZTg0N2YtNDE0Ni00NTY2LThjM2Ut MWJhNTQzZWVhZWQ3LzEvWGFReXBPdzdDc1RLVGs3T3dPbjAxR3RKZXZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85ZTg0N2YtNDE0Ni00NTY2LThjM2UtMWJhNTQzZWVhZWQ3 LzEvWGFReXBPdzdDc1RLVGs3T3dPbjAxR3RKZXZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG1UZR1DB b4aCzZh+ZdWc3WnjLFbpmgF8plfRG8CGsMb+mCw1zO9KJqMeH6PWvRJsbAcTgEUh ip3J4yV5XeCCcaus9vDshGbGyJ1425JIYCZc2j4XCJkQjAQYECCK9TGjs22gOGX9 zjs5oSTvYHCh3fJf9JZLF9p8DiZDJIIEKfmH+ThqGljEchc0uc0brM0RIsxjSnkp UWfmgPxRr0QjBx0NAPIKyM7WRqrinU2B9MjvaFYSricaZQPQnkhQEIJfUFfdoC9H 82a0zvzO0fK9EGdJsuZAB9VMaThkQF6nxuMquNhlx8NyvvskGEugSIKeRJt/C7Hv ecMUfMmf2nPhNA== -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:51 2024 by rpki-client on console-fra.rpki-client.org