$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft File: OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft (raw, json) Hash identifier: Il28G8N0wi/S5zet4WGAaFbEXmjxPTOneLWCGrYLOTs= Subject key identifier: 91:F0:EF:3E:61:9F:49:AB:D7:10:24:5E:1D:64:71:84:AD:E3:7F:3A Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b Certificate serial: 0193512BC7B0C79B0E2EA07AA5FC3A8011B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft Manifest number: 137D Signing time: Fri 22 Nov 2024 00:00:43 +0000 Manifest this update: Fri 22 Nov 2024 00:00:43 +0000 Manifest next update: Sat 23 Nov 2024 00:00:43 +0000 Files and hashes: 1: 2DCNhxfoavfo11LT4hYvKEAYMfo.roa (hash: Yj5oNbp5Ysf02sjS+XSA4JvHyIMVOZOl7GhAOHpp7/s=) 2: 3IQqyO9fJBa1I6ky_oO8SIUsDUo.roa (hash: kyqQ8Kuk6WcYOo2ed7rf7uxKgp2DICcg1zXbMlp9UvA=) 3: 6zy-yGteu_QOVFVheLJN_EIBs-s.roa (hash: ZAlLfdGsy3DtB3HP6kSfOQPV49frEoIuZGrOEiK2PSU=) 4: Bkc9iWc5ZnaYbOuwLo34Hv4x7FE.roa (hash: 0p5uSvaK0z/WGxzSzBdFiT0s0O82Vy1XlgRvXW/XzSE=) 5: CNnnlNkzGN9E-RJPLlBZNlvnGSM.roa (hash: ix9zEGDdUjxM/R2MWsr6ejb5+aPhNefVqqenK5xnRAE=) 6: F9rGy4PEKKhzo-smv15e0DrNR5Q.roa (hash: wjrUdJ24VV9fQpy3osfJeh1yYtU3LfzWYuDForDfkyE=) 7: FU6z30DCjQEgb-72ZagDp3c65sQ.roa (hash: su4J6iep0+gHzratHsQW6jYI1AiMjD+jU173/8ycl/w=) 8: FwnaWIz2mF3qmyQF3TgYaddFip0.roa (hash: zDVL4fF1+4JmkeNJFodWO/2zK1Nys25GwDGc6Q/jpXY=) 9: Jz5y5G95sSvH5ArYkJm9xIKyXyw.roa (hash: jkaLRXBT0MqjZV0cjVtdUP73N0w+WYp/xnyTle/OOHk=) 10: LOKXzhyRbwzG_hrS1YAPYSCG45A.roa (hash: PU0bWjY54ItE6c99rFrvQCEZcmOkLKNdUqfP5HFfRRM=) 11: ObFNvYTM4Vv4BtKCvMozzqY-SJ8.roa (hash: oU4GTOD4WtYCL1yiDaa9fSuoWuwNEUuecc+QLnmDFZg=) 12: OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl (hash: PSkyWA8d/aN9puVth6LD8qPi8nejUpT1jIMhheNN7Xs=) 13: P3d0hMDzpnWmmvvZffbbWYQIi9U.roa (hash: CMzo0yfhmf8AiXZGglyDkJDYjHqOZQJBtJb1oGFsGgw=) 14: fN8NDnxCUfZEKFZ_eoNGOjxvkyY.roa (hash: Evj1tbQ3gAo87o+97aSEvUMzpqxEMM2P9tx1vR6Izqk=) 15: mjwnBLyzBImQhPNxHzvICuw6hM0.roa (hash: 1qpfM/xpHgDJ8BFfcOR8gLapWBnub+ga3s8rJjHQHWA=) 16: nTsUj7kifBjaOhZ7KP00q6rDg7k.roa (hash: lz+vPetPmK6koFSS3ezJ61iozctQZOXK9IbQY4Nq8Qw=) 17: tdMsMQN57N51aIOR_QbAsSj_3nA.roa (hash: 7eRnY4ouoJPajHdojLFwelxt5ieoutooDogyoWKiB1A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:51:2b:c7:b0:c7:9b:0e:2e:a0:7a:a5:fc:3a:80:11:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b Validity Not Before: Nov 22 00:00:43 2024 GMT Not After : Nov 23 00:00:43 2024 GMT Subject: CN=91f0ef3e619f49abd710245e1d647184ade37f3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:46:01:f1:a8:0b:c4:05:05:ed:d7:ef:7e:dc: 90:9e:4b:8d:2b:72:34:00:db:36:a8:4d:8b:14:ee: 79:3b:75:16:6b:62:e8:ad:12:4b:d8:d1:4b:b3:e3: 49:a3:d9:6b:37:7c:3b:75:9b:23:a8:07:88:58:95: 46:d9:b4:9c:3f:45:fb:d0:d6:99:12:ae:d1:86:71: 21:7d:a3:01:0b:11:07:29:ff:f4:61:32:5f:0b:b1: 1f:82:61:bf:bb:41:05:a2:80:52:f4:5f:1c:13:aa: 7f:f7:dd:71:0a:96:c5:cf:94:ce:c7:fc:1c:06:7b: 90:cf:18:67:e2:af:5e:f7:c5:12:6b:9e:c8:86:29: 5a:c5:c2:40:af:7c:31:e5:69:5d:d8:70:61:13:b0: 60:9d:12:21:b9:b6:1f:4d:f6:ee:8f:43:10:0b:e5: 96:9f:c4:d8:fa:22:83:70:75:8a:59:b0:8c:5e:1e: 51:ca:84:f9:6a:4c:1c:a2:13:19:7f:b9:e1:a4:a5: 2a:10:a4:97:f6:9f:de:76:b8:7a:ee:58:f8:5e:1a: d7:72:8d:55:cb:6b:dc:98:1d:1c:a9:d4:4e:c1:77: d2:df:db:5e:b4:60:47:79:b1:49:b0:39:30:91:1e: 44:f9:35:07:aa:5c:6a:7c:09:1a:64:fe:f5:ca:1d: 43:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:F0:EF:3E:61:9F:49:AB:D7:10:24:5E:1D:64:71:84:AD:E3:7F:3A X509v3 Authority Key Identifier: keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:75:d0:0f:83:b0:ea:50:3a:d3:81:4d:48:d7:dc:e6:18:c1: 63:ae:bf:27:8c:35:86:29:29:83:21:38:1a:a8:c0:4d:e9:38: 93:f6:f1:fc:6e:44:87:b4:9a:60:4f:42:08:a8:a7:71:ac:55: 5f:0b:eb:62:8c:d5:ee:36:ba:0a:a8:a0:0e:47:85:0c:af:a9: 88:d1:fe:5f:1f:07:41:c6:65:35:4f:2b:83:98:73:94:4c:d9: 52:5c:0d:ce:25:c3:59:4b:74:5a:50:6e:66:b7:1c:36:c2:f2: 83:9f:26:3f:c6:d7:e6:47:f4:4f:71:a7:2a:a4:e4:25:ac:59: 7e:a3:d0:e7:8e:a2:98:b7:95:ca:c5:66:7b:be:52:44:b0:13: e1:53:69:5f:05:65:1b:0e:a6:f3:bd:b5:d8:c9:70:82:df:2d: 92:e8:c2:52:1b:a7:aa:85:76:83:23:7b:f2:c9:4c:f2:5a:20: f1:63:a5:e4:08:c1:b4:3e:cb:b4:1c:61:16:39:ca:fd:44:98: f0:42:1f:44:6f:e7:6b:be:4e:47:7e:cc:9e:47:39:43:fb:48: 06:d8:a1:8c:24:35:c8:4b:1b:f3:d8:a3:34:fd:8d:24:96:c1: bd:8e:9f:d4:a4:2a:a0:91:eb:70:ae:48:c7:89:f9:f4:21:43: dc:81:79:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNRK8ewx5sOLqB6pfw6gBGyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhMGIwNWY0MGE2OTE2Mzk0NzgyMzAyZDFiNTY2MDczNzI1 N2E0OGIwHhcNMjQxMTIyMDAwMDQzWhcNMjQxMTIzMDAwMDQzWjAzMTEwLwYDVQQD Eyg5MWYwZWYzZTYxOWY0OWFiZDcxMDI0NWUxZDY0NzE4NGFkZTM3ZjNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkYB8agLxAUF7dfvftyQnkuNK3I0 ANs2qE2LFO55O3UWa2LorRJL2NFLs+NJo9lrN3w7dZsjqAeIWJVG2bScP0X70NaZ Eq7RhnEhfaMBCxEHKf/0YTJfC7EfgmG/u0EFooBS9F8cE6p/991xCpbFz5TOx/wc BnuQzxhn4q9e98USa57IhilaxcJAr3wx5Wld2HBhE7BgnRIhubYfTfbuj0MQC+WW n8TY+iKDcHWKWbCMXh5RyoT5akwcohMZf7nhpKUqEKSX9p/edrh67lj4XhrXco1V y2vcmB0cqdROwXfS39tetGBHebFJsDkwkR5E+TUHqlxqfAkaZP71yh1D3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJHw7z5hn0mr1xAkXh1kcYSt4386MB8GA1UdIwQY MBaAFDoLBfQKaRY5R4IwLRtWYHNyV6SLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGIt YjIwZTI4ZjUxODhmLzEvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC83NTgzY2ItZDMxZS00ZTAzLWIxNGItYjIwZTI4ZjUxODhm LzEvT2dzRjlBcHBGamxIZ2pBdEcxWmdjM0pYcElzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwnXQD4Ow 6lA604FNSNfc5hjBY66/J4w1hikpgyE4GqjATek4k/bx/G5Eh7SaYE9CCKincaxV XwvrYozV7ja6CqigDkeFDK+piNH+Xx8HQcZlNU8rg5hzlEzZUlwNziXDWUt0WlBu ZrccNsLyg58mP8bX5kf0T3GnKqTkJaxZfqPQ546imLeVysVme75SRLAT4VNpXwVl Gw6m87212Mlwgt8tkujCUhunqoV2gyN78slM8log8WOl5AjBtD7LtBxhFjnK/USY 8EIfRG/na75OR37Mnkc5Q/tIBtihjCQ1yEsb89ijNP2NJJbBvY6f1KQqoJHrcK5I x4n59CFD3IF58g== -----END CERTIFICATE-----Generated at Fri Nov 22 09:43:35 2024 by rpki-client on console-ams.rpki-client.org