$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft File: nLJc5VDk2b2gW9XUXItro3Qwu7o.mft (raw, json) Hash identifier: aebTqE9cbeo4OHuE+eGXquPLiRF2to8HQjXSMweKDEs= Subject key identifier: 77:03:C1:AE:64:66:07:18:5C:04:DD:4C:92:48:16:30:F1:A2:95:B0 Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA Certificate issuer: /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Certificate serial: 01935086B4B428AF18FEB000DC64393D0138 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft Manifest number: 0D39 Signing time: Thu 21 Nov 2024 21:00:25 +0000 Manifest this update: Thu 21 Nov 2024 21:00:25 +0000 Manifest next update: Fri 22 Nov 2024 21:00:25 +0000 Files and hashes: 1: 9wkeXjc_OkwzJNASBRs-P6qPMkQ.roa (hash: fmpvo542/M0fE7tnMFQKjET5nsM4x733l8Ua871QisI=) 2: CY1SOGqLnQage4AlLMPTzgQnO4k.roa (hash: 6xvIHW5mYPUy03jlj98uHtau4xCKFvHp4s2k+EbcKTs=) 3: CyV98N9EMWyxflKPXQFcgiSjPHY.roa (hash: Rihov2ja8UcIkzpFTuydvoEHWoaig8C8yBkMG/T6o0o=) 4: D3WzhW5e32dB73n1YltMIVN53XA.roa (hash: u53XDFNLJuSm8BYKMNAiXEFkzp9jSaLpIdYX3GZzy7g=) 5: EbdEBw9khSsZyEvxRDw7Tu5ANLE.roa (hash: JOcS8jr0TvLK4zKsZ9cWaxJDVrCrstxAm5dJS6PXXjU=) 6: WJM4RDhXiCc1nntAouYLafv_YQk.roa (hash: Akke2MjvyfjKCYXC3eGQlXVkBi87hkU5BLy+Q7H/lZE=) 7: XIEZKQ6tOoDAI3WirMqGv12-7oQ.roa (hash: zbm/iqy6oAgDIGFWNnhiv3LGuGJtGyUrHNlSd1Bdc8w=) 8: fcaVSI1wF_tLH1V0FR6P-7LNXrg.roa (hash: Y/g2OWpAp9n9/o6kWMFL9m5UuVK3CKkRDiLfriiw7hc=) 9: hPkT26H9QrrGf9pDhJ_toQld2FE.roa (hash: I2JOAFx02rSfaVzHSHMiA2ciDqamBM3PGW4q1FSmpZ4=) 10: nLJc5VDk2b2gW9XUXItro3Qwu7o.crl (hash: DcrLrm3LT8fUWJi8Rt5DUZHQHqfj7o/J747YXNQ1R5o=) 11: xMvcm_KV6q0WJkvp0p4gD5RNtig.roa (hash: MOFzlknqO7qCpoU+Pp5PBhNUvTsjYxK2qCRh4fdjI0Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 18:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:50:86:b4:b4:28:af:18:fe:b0:00:dc:64:39:3d:01:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Validity Not Before: Nov 21 21:00:25 2024 GMT Not After : Nov 22 21:00:25 2024 GMT Subject: CN=7703c1ae646607185c04dd4c92481630f1a295b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:77:2c:9b:86:df:6a:e5:42:9c:3a:fd:99:dc: c5:06:75:e6:bf:d1:88:38:e7:39:80:2d:cd:b3:ec: 26:16:31:23:b7:fd:0d:c2:fb:3a:bb:e2:8f:5d:96: 19:a9:ef:6f:6b:23:59:31:47:a9:61:b2:8e:b5:23: e4:7d:70:4b:ec:56:ec:4b:d4:bc:90:6c:30:eb:bd: 3a:5c:ad:7f:d7:a9:62:fc:20:28:5b:10:2b:e0:59: be:f1:0c:f1:ce:7b:e2:c6:cb:a3:47:ea:38:cb:a0: bf:44:47:6d:ce:2e:03:ae:ce:d6:53:27:e6:90:7f: 36:56:ef:f7:7b:ee:b5:69:cb:b8:f9:7e:41:05:de: 75:ed:46:6b:1b:a6:df:38:27:af:81:8a:ff:6b:b9: 6d:9a:3a:3e:d8:68:64:7e:66:01:b6:43:9b:fd:9b: 7b:b1:bb:72:45:2b:8d:cc:93:b5:08:1d:77:6f:6f: 6f:f2:2c:bf:cb:48:56:7f:9c:67:75:b1:f3:d7:15: 77:78:c8:f6:0a:31:54:96:e7:0f:75:29:fa:83:68: 8d:f8:93:bb:b6:ca:e8:83:65:f8:c0:9c:1c:67:2d: 33:01:7c:a2:d8:a5:1c:6f:c7:bb:11:77:cf:b7:f7: 33:a7:31:f3:88:e1:41:76:24:2b:ea:4c:90:76:97: 17:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:03:C1:AE:64:66:07:18:5C:04:DD:4C:92:48:16:30:F1:A2:95:B0 X509v3 Authority Key Identifier: keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:9f:d9:e4:33:cb:fc:82:45:07:93:71:f4:c8:df:b0:95:be: f8:07:c1:74:f5:9d:9c:26:27:35:8c:f3:63:a7:6f:89:f9:90: 12:20:61:68:e7:59:7e:3b:23:82:69:ef:13:e5:3b:03:fe:a5: 77:47:35:8c:a7:2f:0c:72:47:da:71:5e:02:7a:72:f2:fd:de: fe:b9:5a:87:3c:43:67:d6:0c:ab:9e:ec:6e:f7:aa:58:17:68: 17:1f:cb:cf:e9:d4:93:05:d6:a0:ec:1f:0d:29:02:d8:04:9e: f4:76:96:32:28:ba:4c:20:39:5c:df:19:6e:74:21:99:5a:90: 9b:af:1e:87:75:ed:2b:a6:9d:b6:42:e5:fd:87:31:6c:35:f2: ef:d1:c9:38:54:b7:a8:fb:56:98:c9:3f:62:96:dd:a0:36:8d: ed:4d:88:fb:a7:53:70:fd:68:93:d1:2b:62:ee:9f:ba:dc:cf: 4b:35:b6:58:88:2d:50:4e:79:bf:df:31:ab:bf:ad:aa:67:4b: 33:70:9f:1a:35:72:e9:03:e9:ef:5d:96:42:95:a1:b2:d9:e0: 25:a4:e8:e9:75:36:6a:78:ba:92:b5:cd:ad:fc:91:b4:12:2b: 70:bc:c5:c1:9f:9e:e3:9a:1b:20:e6:59:18:57:61:b9:41:ac: 73:d0:97:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNQhrS0KK8Y/rAA3GQ5PQE4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYjI1Y2U1NTBlNGQ5YmRhMDViZDVkNDVjOGI2YmEzNzQz MGJiYmEwHhcNMjQxMTIxMjEwMDI1WhcNMjQxMTIyMjEwMDI1WjAzMTEwLwYDVQQD Eyg3NzAzYzFhZTY0NjYwNzE4NWMwNGRkNGM5MjQ4MTYzMGYxYTI5NWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXcsm4bfauVCnDr9mdzFBnXmv9GI OOc5gC3Ns+wmFjEjt/0Nwvs6u+KPXZYZqe9vayNZMUepYbKOtSPkfXBL7FbsS9S8 kGww6706XK1/16li/CAoWxAr4Fm+8QzxznvixsujR+o4y6C/REdtzi4Drs7WUyfm kH82Vu/3e+61acu4+X5BBd517UZrG6bfOCevgYr/a7ltmjo+2GhkfmYBtkOb/Zt7 sbtyRSuNzJO1CB13b29v8iy/y0hWf5xndbHz1xV3eMj2CjFUlucPdSn6g2iN+JO7 tsrog2X4wJwcZy0zAXyi2KUcb8e7EXfPt/czpzHziOFBdiQr6kyQdpcXYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHcDwa5kZgcYXATdTJJIFjDxopWwMB8GA1UdIwQY MBaAFJyyXOVQ5Nm9oFvV1FyLa6N0MLu6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYt YmU0NWYwZDJhYmJiLzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYtYmU0NWYwZDJhYmJi LzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXZ/Z5DPL /IJFB5Nx9MjfsJW++AfBdPWdnCYnNYzzY6dvifmQEiBhaOdZfjsjgmnvE+U7A/6l d0c1jKcvDHJH2nFeAnpy8v3e/rlahzxDZ9YMq57sbveqWBdoFx/Lz+nUkwXWoOwf DSkC2ASe9HaWMii6TCA5XN8ZbnQhmVqQm68eh3XtK6adtkLl/YcxbDXy79HJOFS3 qPtWmMk/YpbdoDaN7U2I+6dTcP1ok9ErYu6futzPSzW2WIgtUE55v98xq7+tqmdL M3CfGjVy6QPp712WQpWhstngJaTo6XU2ani6krXNrfyRtBIrcLzFwZ+e45obIOZZ GFdhuUGsc9CXWg== -----END CERTIFICATE-----Generated at Fri Nov 22 02:07:24 2024 by rpki-client on console-ams.rpki-client.org