$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft File: ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft (raw, json) Hash identifier: 4TvP4Gv4cex5ajCMJnC6JsS16lhDe7ZlT/wI2i67dUg= Subject key identifier: 2C:A5:9F:8F:3C:49:42:F9:B5:49:78:A2:2C:27:83:62:CC:61:4C:4C Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66 Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566 Certificate serial: 0193512B4CBB1E54846408F9679E29DF5196 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft Manifest number: 03AB Signing time: Fri 22 Nov 2024 00:00:12 +0000 Manifest this update: Fri 22 Nov 2024 00:00:12 +0000 Manifest next update: Sat 23 Nov 2024 00:00:12 +0000 Files and hashes: 1: 1-MEHsVh5N3S_k6QUakG3j5CktQE.roa (hash: +oC9RFVLe+3AO4FP3dRNxFhOPpKjbEq/Z1DpWkqMJmI=) 2: 7Gz7F6SbjnOu6GPRgEBfeNd7Bow.roa (hash: bmIKpMupbrZARbJLk4eDVsqE2D47xdr4gwMqDJDsAeI=) 3: ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl (hash: qXyf6T2NArcFvGknWJpS9c3UjZKp3AiEUPCVrpbG7w0=) 4: ArC_ookRtGptDq-wixK5yg1hYWE.roa (hash: efs4IlCG87zYsSdepieX+HVwidhnIQ+i5W+pwF8T9fg=) 5: BC87XYMU3Vf03Nlscg7F9q166Dk.roa (hash: IAHIUqj0wb+aHvrvzANmxNWWzZl/niP5qrs98Ur9p14=) 6: CrLVpC0mj22DIo6dIwNnwW8l22M.roa (hash: aPRsqFYqYRDDS9J9vbOPUX7TPF5/yAQNQj5mPVvJwbU=) 7: HXyITlixjYGfL7sKVukfLgsYwFI.roa (hash: eWd6xtFMMqK2yEmQQeOC4/bOEbV+0Qhrbjd/CE+t00Y=) 8: MCZMOSBzv4DiO1oHpwY3zlQ3kiw.roa (hash: eQ4SXKFXAnWB9g6eHB/Y4T8SX257oXD76fkze3L3IyA=) 9: T4r7ehHWZFTA3luDjdTgYYK_bEg.roa (hash: +FTwBsLYDy3+I+qE8F+Oa96qmYh1ezdf8ZuzFI6ztIs=) 10: VbmmV2yyE6vmCUd0455mxv-BNZM.roa (hash: bTMZwtQMQLleItplOcfnRUg74wJYpXzNP9ssN/LiDm0=) 11: _y77E66mdL6BsRuOSVc6_Z1vfOc.roa (hash: D/oyeF+hoxsXvct0hnu9rNkr21KEpsjvAH7JdMKEsS8=) 12: jqoxpIIdFCLXL2OSG9NpUwlEj-Y.roa (hash: 8KLYxHqCD+LR3VFdf41thJoo4BrhedqBfRekdStrOLg=) 13: mW8VQal48w2oErTZzy-GbeM_wZI.roa (hash: m32I+p1hqH6oohP1RMzGhIwqG/IE4A7WNZqOOc9S8W4=) 14: nG8HZu0kN_rvhOPvh9BGeV2lFog.roa (hash: EpUy6yTfAo2RuHT3MNAMed9pPEI0T5IpX0NXP5n5nAs=) 15: pL0sdsxxWmxptldg8lq7XK67EW8.roa (hash: OimH241EZjmk1clX2Dr4Zdk1eJpPT7GKv5pfGIIR380=) 16: r-m_8LKnNq84VbvzLye_S6ae8Tc.roa (hash: C6hsQlrxTKSfZNVNbUKibO2NTzQOJbEf63GYItP1wfc=) 17: rpmC05yvMgrqBbwgt-NJfb13ryk.roa (hash: RZ9AozzzdIXmLU4n1keCqrHsj+hAbncel1mq6a9N6Kc=) 18: sT1Vy62sMuvLba4Gz61YfPa5ofA.roa (hash: PoYa1sgAccBniNLARhZ4V8Yt0E0ua86XhQpAFUvt31U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 18:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:51:2b:4c:bb:1e:54:84:64:08:f9:67:9e:29:df:51:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566 Validity Not Before: Nov 22 00:00:12 2024 GMT Not After : Nov 23 00:00:12 2024 GMT Subject: CN=2ca59f8f3c4942f9b54978a22c278362cc614c4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4d:c6:9d:bc:7a:b4:22:eb:c3:06:2e:b0:3e: ba:6a:de:da:a0:37:e7:18:fb:75:e1:9b:2f:d2:03: a4:9d:d1:1e:dd:ea:43:a8:f1:d7:13:85:82:79:6f: 33:63:9b:3a:15:10:55:03:1a:26:53:06:8a:35:59: e2:dd:bc:d4:f2:e6:e4:d8:d0:33:87:4f:9f:2d:b4: dc:3e:2d:df:93:7d:57:a1:ca:93:12:f7:d5:07:f9: eb:61:4d:fd:01:34:74:fa:48:b2:bd:42:fd:ed:fa: 1c:c4:bb:4d:d1:e2:43:3f:1c:29:17:31:37:e9:0e: 84:9f:ca:1c:b8:83:f8:a5:cc:78:c6:6f:c6:4b:62: 8f:7d:a3:05:9c:66:97:d0:1e:5e:82:a6:4c:23:43: ea:42:f8:2b:79:1c:21:21:2c:2c:92:1e:11:2f:d6: bc:79:ab:1a:ff:a5:56:be:29:9b:bc:11:3e:ee:06: 86:46:3c:50:ad:4f:c4:1c:75:b4:b6:b0:de:b1:3f: 9b:43:bd:7a:6f:36:ef:52:4b:78:5b:da:02:ef:39: ce:2c:98:ba:a2:48:cf:34:5c:84:db:a7:5a:4f:e1: 49:47:59:f6:12:6d:c8:2d:ef:3a:c0:32:f5:a4:30: ad:79:e4:01:42:04:39:1c:b2:c3:4e:e8:75:35:3a: e9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:A5:9F:8F:3C:49:42:F9:B5:49:78:A2:2C:27:83:62:CC:61:4C:4C X509v3 Authority Key Identifier: keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:95:1c:c3:a9:7e:23:21:7b:42:e2:09:d6:9d:d7:fa:13:3a: 0d:19:33:21:b5:5a:c3:7d:ce:c7:98:77:0d:cb:e6:7a:20:4a: 4d:e2:e9:c6:46:b8:70:bf:e7:c7:2e:45:c5:a7:3d:9a:f2:3c: 9e:97:28:54:8f:c6:de:3c:36:02:9e:81:a8:bb:45:aa:42:b0: e7:35:ca:bf:17:58:00:0e:2f:8c:51:b9:ce:b9:6c:17:38:63: 30:c5:6a:e2:5f:eb:d4:aa:5c:63:26:0e:53:e8:2d:e6:2a:c5: 73:5b:87:81:25:2e:05:dc:c7:c6:fb:7b:08:7e:08:15:c3:1d: 6c:59:72:24:50:b6:4b:4c:7a:b8:82:62:40:ee:d0:57:03:6b: 69:c2:b1:2a:b9:a8:ee:5c:d9:ec:ff:b7:48:78:39:b1:54:33: 07:24:19:cf:43:12:e9:7e:6c:26:18:4a:d4:a6:f2:40:54:d8: 10:44:30:4b:93:eb:c8:c3:e3:a7:05:90:b8:67:86:1e:e8:a8: 7f:d1:59:c1:b0:a9:24:30:f6:75:65:16:25:e7:7b:89:d6:c5: c4:eb:bc:88:d0:06:67:02:f4:af:e0:aa:57:65:b6:ae:9c:b9: 2e:4b:ac:a1:97:e3:94:65:de:9f:bd:95:2f:99:f9:fe:0f:b7: 0a:20:0d:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNRK0y7HlSEZAj5Z54p31GWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMjY0N2M4MDFmYjU4ZmNmYWFjMTM1YmI0OGY1ZTYxZmVh N2U1NjYwHhcNMjQxMTIyMDAwMDEyWhcNMjQxMTIzMDAwMDEyWjAzMTEwLwYDVQQD EygyY2E1OWY4ZjNjNDk0MmY5YjU0OTc4YTIyYzI3ODM2MmNjNjE0YzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApE3Gnbx6tCLrwwYusD66at7aoDfn GPt14Zsv0gOkndEe3epDqPHXE4WCeW8zY5s6FRBVAxomUwaKNVni3bzU8ubk2NAz h0+fLbTcPi3fk31XocqTEvfVB/nrYU39ATR0+kiyvUL97focxLtN0eJDPxwpFzE3 6Q6En8ocuIP4pcx4xm/GS2KPfaMFnGaX0B5egqZMI0PqQvgreRwhISwskh4RL9a8 easa/6VWvimbvBE+7gaGRjxQrU/EHHW0trDesT+bQ716bzbvUkt4W9oC7znOLJi6 okjPNFyE26daT+FJR1n2Em3ILe86wDL1pDCteeQBQgQ5HLLDTuh1NTrpWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCyln488SUL5tUl4oiwng2LMYUxMMB8GA1UdIwQY MBaAFAAmR8gB+1j8+qwTW7SPXmH+p+VmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9jZmMwNmYtODJiZS00OWZiLWJjODIt OTRlZmJmNWNlY2Q0LzEvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9jZmMwNmYtODJiZS00OWZiLWJjODItOTRlZmJmNWNlY2Q0 LzEvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF5Ucw6l+ IyF7QuIJ1p3X+hM6DRkzIbVaw33Ox5h3DcvmeiBKTeLpxka4cL/nxy5Fxac9mvI8 npcoVI/G3jw2Ap6BqLtFqkKw5zXKvxdYAA4vjFG5zrlsFzhjMMVq4l/r1KpcYyYO U+gt5irFc1uHgSUuBdzHxvt7CH4IFcMdbFlyJFC2S0x6uIJiQO7QVwNracKxKrmo 7lzZ7P+3SHg5sVQzByQZz0MS6X5sJhhK1KbyQFTYEEQwS5PryMPjpwWQuGeGHuio f9FZwbCpJDD2dWUWJed7idbFxOu8iNAGZwL0r+CqV2W2rpy5LkusoZfjlGXen72V L5n5/g+3CiANTA== -----END CERTIFICATE-----Generated at Fri Nov 22 02:39:26 2024 by rpki-client on console-fra.rpki-client.org