$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft File: 0he0cshBwdaFUKJPGTbSnMbCj2o.mft (raw, json) Hash identifier: VMw1aIFTBXxtBLvPL0/Bqgd5KIynXyWdU9NDT5P213s= Subject key identifier: 18:8B:11:05:3F:B6:02:F5:CC:0D:33:51:8B:CE:8F:98:BE:58:44:48 Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Certificate serial: 019350F47C972319E2DF379FCE9B9905ED9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft Manifest number: 13BB Signing time: Thu 21 Nov 2024 23:00:20 +0000 Manifest this update: Thu 21 Nov 2024 23:00:20 +0000 Manifest next update: Fri 22 Nov 2024 23:00:20 +0000 Files and hashes: 1: 0he0cshBwdaFUKJPGTbSnMbCj2o.crl (hash: Rxb/137ErUmCq00YDt6GXEkFD28/8uHxqQH6Ppx6VcU=) 2: 1-ru45WX50nqE1nkkiAh6wbMYSKE.roa (hash: 6VMyn58eJX/7qjDu0gid/FtESObauEZYtrO05J2qzTY=) 3: 409r4FTmvCNaaZy8TGynMtRlPvE.roa (hash: SqPUHo+iI/MiHCjEYNNax3VWc88UhmhyadijI80tOPQ=) 4: 5TGqEtYcLlsuaRnFJmm1FEwf3tg.roa (hash: +amXpXAIkQhvJqFEJfTXrs7yvRw+YmvpS0ow1KOtCvU=) 5: 7Xbjk3gHmNSh4jMhe1E9Qftj2Rs.roa (hash: 6U+SMw5hvdHlN3FV3LdaJis1ZpkAIJeKzDcJ0HQBo6E=) 6: 80rCcXN6U3l6c3pqPcp-TsbQHx4.roa (hash: dLshUJ/c9gDz9OkUGfsARS5j/snimHxtTpVF2/QzS+4=) 7: 9FbYUtvhSiGnwkgWnPEe8LBbWTE.roa (hash: VH+23ZEyZD/zIeAjQCb1brr5cQuLUhCHdf4WE3EDIV0=) 8: 9NwP_dr0hugt83MSZ3uolV7CFyk.roa (hash: xgVNfXThnOGNymsgEuG6ysiwomnLdpjW8LFsdx+jygg=) 9: BGv1PWma16f4ctAQJCrVoQubGBo.roa (hash: pfWL3xKc+QttrMTYA6gs1NSPLhjXFXzGZMdIvCtI0fI=) 10: GRoTqbzlgb7LL4qGT9vOrU_aI7M.roa (hash: bQIg/nd1fvR/UyqcjO6aYkXwwfFBucsHdfsZFyoF3Os=) 11: Gd5QqaUdZ3JqwMe5M0NIvfI4A-c.roa (hash: v/fu5jXAF5WqeaQJxzMq41FUnzS5PVCrC6BypLN3mGo=) 12: HSoX_K6mRymgKR8u64Utiw4ECj4.roa (hash: PLs8j0i03MuKtVCREktjn4noNaVnP7QLnyhQuadNyc8=) 13: Ikpj4jEaS2DoLgaAtEHrLHIjbjc.roa (hash: XySfojAZAgmgAuLkk/BdqsdZo0ICghtyJKx6Krx90k0=) 14: Mnd7bRBFbm95zrp-3u8GFynm7SM.roa (hash: 6rGg4MKfJedOrnocpFtDXqMuYVQBSiNHaCbLj6j4K6g=) 15: OekVUlL62k3MfmorH64N4csCLHk.roa (hash: xQ9rcTAtQmygtTqy6Ajl+ad6ty0/daQ/dFCY09VssX8=) 16: OfF7PvwCC27fW-6kfStrwwRrO7E.roa (hash: S4DRXm/lpOdZ+Tiabo7f1Eyfj8mMWn4Ersz+p+4G3hg=) 17: P4weekf1aKUcnkp8fHX-k_Gt_sI.roa (hash: fIq9ZB4SDhzeK0PefN08AJbeELON7JjrHLasilYncFM=) 18: PD79CufWsAn3sQd4KY0rWG8tuw0.roa (hash: ydtWXsgHsS3B+Dkrf9mRdY4++Zk+7SXieOvRV/PlsfI=) 19: QFDwHj-j-y33uDhFUsrE-1OKCE0.roa (hash: zupjnMRcjVnfmgFPyHKsQHldn/aPiQG7UKeQJHmAcy4=) 20: Sef28NKppSJav9L25T-eCc8LWHg.roa (hash: eVRNJvOmTnXMBrADlfqwv9vwpSUzjLsPa4lc8cWhfu0=) 21: VImUHTDDRHKWm4JlJloTojQOE9k.roa (hash: e/b/XPAmPyj+bqr/kvQosXTMROaPtpsPB/pPFqntsgQ=) 22: X-iCnqmNG6j885gxiyPbYDqPEtc.roa (hash: cB3ZnO+ne1w3OWuzgaqgeTrJOUkZQMqe2HjvqHud/S0=) 23: Z1ZQR08H4ewbrfjeHEbWgsc3lcE.roa (hash: KIzAnt9ls/xXzz8K38qYuJBdznqQEV++2uLw5j5JppQ=) 24: ZSbMBkg5xp7_TVR7KyMk1DXg_q4.roa (hash: BzkiSkwbhKimfBpKKS8Vu4nKfdMTWPwiDw1JwR5MD0w=) 25: _BntLA1ByxKmEH1meyX9Ac_ENgo.roa (hash: TUPv5gmhwM2daPbnbN57P3T8IlhR7ks/v0VAHtkzI+0=) 26: aYF30ZFrvtaKBZWNizoCpyO21v8.roa (hash: 7A8iDphnqdnGZ4tAakv6xwpniHRTTqZsTmwWqCPgjqc=) 27: bMgG-YKJdRlrtS6AMBxcdiRC7ZU.roa (hash: eiQIhIGfrHWjznQoqOUCj+ID7gpuyUMLFZdTGbOr80w=) 28: drD_voSc89fRTwHpi-hKKYrsxZ8.roa (hash: WRDEGGXowsCU2eWKfE6Pn3kL+yV3SO8NKL8ns9VmbbU=) 29: efCOFmsfSLRoNKt0dEfRzs6eu6o.roa (hash: 1mPlWhqIukcjMep3y+IWnUquE2flzs5hd9dWYCBq5Gw=) 30: iT5K7jrvKPIb3MIbXgkOBNs6J3g.roa (hash: JD5cuSLx2TQWAN/32n4QOen1lg/FPsM0kaCR7e8lgKc=) 31: qm6M43Bf3k_6oSMSeKVcRjDddHY.roa (hash: kyBJJpiiEML0MPFZQKFxW0Zd2rH4A3TKitJIZijmKyY=) 32: rLJBW-lVLAhd5TXpRwsmdfXF2_E.roa (hash: wnWD+7jtLO15EQ/RITt2PLn50YkBXJMnrr6YS0mhGXM=) 33: rYFL_p4yDkcqiSfAnDeGzKaCqQ8.roa (hash: jT6da3psj4zOLcBy69IGN6FaAZulVMyHDlJ1ErBnWUE=) 34: y5bjjlCHP_eMFY_hKvS_Ckup73A.roa (hash: 1nyFzL3E1AO+7HEYIZ5GRJyB6HFnz3QPQnBu/sN+QyU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 18:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:50:f4:7c:97:23:19:e2:df:37:9f:ce:9b:99:05:ed:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Validity Not Before: Nov 21 23:00:20 2024 GMT Not After : Nov 22 23:00:20 2024 GMT Subject: CN=188b11053fb602f5cc0d33518bce8f98be584448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d1:83:6c:fa:5e:df:a7:1a:4b:3a:89:a4:40: 71:6f:7a:2e:4d:e8:37:d2:69:90:b5:0f:28:31:57: ca:bd:75:ee:bf:96:47:a6:9b:ea:5e:54:8a:52:65: 53:e7:0e:7c:30:d3:14:9f:22:14:02:51:0d:96:1b: f0:19:41:2f:87:f4:73:3c:72:3f:f6:33:74:dc:f0: bd:3e:e0:e9:0c:27:3e:24:e5:ca:ae:8e:8e:0c:4a: 93:9d:32:62:51:f2:71:81:8b:fb:e5:1d:5e:2d:31: a3:06:e3:7e:6b:f0:fe:2d:85:c3:b1:aa:aa:95:c5: 88:0a:7e:89:ff:10:35:0d:5d:22:51:61:6f:a3:ac: c9:cc:98:f7:7a:81:f2:ce:57:33:f8:04:eb:cd:50: d0:68:ad:7b:e1:b7:b7:35:f9:09:56:aa:05:22:4b: 65:f0:2a:b3:85:8e:74:2f:a6:71:99:eb:b0:67:6b: 45:92:52:57:3f:a5:9b:8b:a4:9e:1c:33:a3:d1:3c: 8e:2d:07:7f:4f:16:d4:d3:64:16:76:91:f5:4a:54: 79:ca:8d:20:35:b7:3b:86:f7:d5:37:aa:bd:e8:37: 07:2e:a7:07:95:d0:a1:f2:8d:d6:e0:9f:2a:54:83: 78:c4:ee:b3:d4:57:e7:ac:2e:89:00:95:12:ee:16: f3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:8B:11:05:3F:B6:02:F5:CC:0D:33:51:8B:CE:8F:98:BE:58:44:48 X509v3 Authority Key Identifier: keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:99:c7:d3:87:87:49:30:d8:db:1f:c7:0b:0e:07:5b:37:0f: f4:dc:dd:ae:2c:82:9f:7b:b1:16:09:b6:bc:81:5c:90:51:b1: 56:e0:f5:67:52:fe:d2:c7:e7:60:69:4b:83:43:d6:81:fc:b8: 8b:1d:fd:b7:32:ea:86:1f:eb:c6:e9:70:1d:ab:36:f8:d5:8b: ec:5c:34:1e:28:66:27:29:8a:29:9d:a0:21:31:f1:04:f4:10: 9d:95:47:89:f1:fe:f6:8a:7d:5a:8a:84:ad:a1:93:6a:99:a9: f8:2d:82:df:ab:e8:f1:77:76:af:3d:09:51:b7:a3:2f:d2:3d: b0:44:f5:2d:e4:d8:2d:31:3b:ce:15:88:72:9b:b2:2c:fd:64: a7:c1:6c:9c:b0:87:f0:ec:fc:dd:a6:28:a4:5c:52:a5:71:83: a1:8d:72:00:c9:95:37:8b:9e:3f:98:e0:22:5b:43:41:5b:e0: ac:c3:84:e7:dd:23:d2:f4:3f:11:dc:ba:db:d9:37:99:fe:95: 6e:95:1d:0f:60:62:c8:0e:84:b7:38:f2:dd:00:72:81:d2:40: 5c:15:99:70:8b:00:63:c4:dd:ee:48:46:db:2c:3f:63:e5:04: 06:ce:e1:08:75:54:31:f7:5e:df:16:06:b7:c0:dd:ca:45:1a: f2:ad:78:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNQ9HyXIxni3zefzpuZBe2bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj MjhmNmEwHhcNMjQxMTIxMjMwMDIwWhcNMjQxMTIyMjMwMDIwWjAzMTEwLwYDVQQD EygxODhiMTEwNTNmYjYwMmY1Y2MwZDMzNTE4YmNlOGY5OGJlNTg0NDQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdGDbPpe36caSzqJpEBxb3ouTeg3 0mmQtQ8oMVfKvXXuv5ZHppvqXlSKUmVT5w58MNMUnyIUAlENlhvwGUEvh/RzPHI/ 9jN03PC9PuDpDCc+JOXKro6ODEqTnTJiUfJxgYv75R1eLTGjBuN+a/D+LYXDsaqq lcWICn6J/xA1DV0iUWFvo6zJzJj3eoHyzlcz+ATrzVDQaK174be3NfkJVqoFIktl 8CqzhY50L6ZxmeuwZ2tFklJXP6Wbi6SeHDOj0TyOLQd/TxbU02QWdpH1SlR5yo0g Nbc7hvfVN6q96DcHLqcHldCh8o3W4J8qVIN4xO6z1FfnrC6JAJUS7hbzkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBiLEQU/tgL1zA0zUYvOj5i+WERIMB8GA1UdIwQY MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt YjM4ZTI2NzdiM2RjLzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUpnH04eH STDY2x/HCw4HWzcP9NzdriyCn3uxFgm2vIFckFGxVuD1Z1L+0sfnYGlLg0PWgfy4 ix39tzLqhh/rxulwHas2+NWL7Fw0HihmJymKKZ2gITHxBPQQnZVHifH+9op9WoqE raGTapmp+C2C36vo8Xd2rz0JUbejL9I9sET1LeTYLTE7zhWIcpuyLP1kp8FsnLCH 8Oz83aYopFxSpXGDoY1yAMmVN4ueP5jgIltDQVvgrMOE590j0vQ/Edy629k3mf6V bpUdD2BiyA6Etzjy3QBygdJAXBWZcIsAY8Td7khG2yw/Y+UEBs7hCHVUMfde3xYG t8DdykUa8q14SA== -----END CERTIFICATE-----Generated at Fri Nov 22 02:06:01 2024 by rpki-client on console-ams.rpki-client.org