$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft File: zRCMIl8keM1CMBeYkNByhL4WNs0.mft (raw, json) Hash identifier: uVyJCTxZxREP0SFeuOsKci99SRiKLptn0/8WisYWXuo= Subject key identifier: 2D:FE:F6:38:B6:99:57:20:E5:3E:F1:AF:5C:81:21:D5:29:AB:42:2F Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd Certificate serial: 019350F45E6680BB6346C156F62F519FECEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft Manifest number: 0BBB Signing time: Thu 21 Nov 2024 23:00:12 +0000 Manifest this update: Thu 21 Nov 2024 23:00:12 +0000 Manifest next update: Fri 22 Nov 2024 23:00:12 +0000 Files and hashes: 1: 3vL54CcmSqQff8eMRv0AFPhZY6o.roa (hash: 9DoDfPhSYdHmZHw1rP75r5G7ns+1K8JGugdlzsGWVTY=) 2: J_T7zSn_2TEGNeAK-Jlqn_aOXXA.roa (hash: s4cN7/YJkEYdpkAgLoAvsaHUMa8Gnw2/qhoQFH15f94=) 3: KpTd00Hd8isuOTOggJdnX7FsNW4.roa (hash: XlrznAgUlaw887KMYtabPV7XafcIZ2TgyNaRlsE2Fow=) 4: ORlp1QE8Ll2GKDUnm3cYWAtUT2k.roa (hash: XGOAOkBlarLy7DGSzn8EJkaXAuHFZeLFwO/f5aAhjKA=) 5: PJ100iO3kB74HSUZcx5y_CmGnOs.roa (hash: /lBxXhWVgEjaltshxeZ4FTdroWln5mGt7mt4gH3CQqM=) 6: WWG8cl62eoFmDUUJlZdEhQuKHlw.roa (hash: jBpKShS1hwrz6xGwFiW2ZXHY7KZk/QwDcti9KVVNp3E=) 7: aGLA8I06d3YrvKWL7uRSR-77xG4.roa (hash: Ff+snKBTYeaUtDAibzoJdqSfFJNk/kWT+FLx1MZTY4M=) 8: dmkq9CPEjyItANEhY7T6cJaz-_I.roa (hash: hytt1pHrwW3BeZol5gd0WcTz8a6IHsbP/eNXKB+XTLc=) 9: fDMD6FQr0xZLWH7J861_InkMwZY.roa (hash: ov5HzwQZqF5XAu1IHd+wHwrrTV0DHpB7avZVbnSizng=) 10: iLB9ybcRFPYh7-KiWvpXj0J_kt8.roa (hash: bdSwoyHCOcBjvMzjyD2eFaoWFYNitJbTHGTTR2BEuns=) 11: jfTd-w-WiIazPCSLCHhtko6hMDI.roa (hash: chXM+gibHR7EplNSiZMiPgnUrLEKnaXwcA2lNHc77+0=) 12: omyKQ0XqdMImp2o5ZxZI0oHwiYI.roa (hash: /uq+BG8FllzdpidXRFdwjob9RrgvN6fhAsPyVjWEPbg=) 13: sAdnLOMB2-SIzibVYgNReKrsRkI.roa (hash: jUc5E22rfIqjqdiYtrFEZGxOD37Hbil8Hmx66oYFrqQ=) 14: yEEz9RomBl9KOtnBpPAv69xhYo4.roa (hash: FzxNeuev1ifWcvDAWPB0Q8PrLmfQQt0ET0Cbf3DSc4E=) 15: zRCMIl8keM1CMBeYkNByhL4WNs0.crl (hash: PCC9BfrIqVBvYIHEprudrR3uyASQ0zR+dEYOHMkL8CY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 18:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:50:f4:5e:66:80:bb:63:46:c1:56:f6:2f:51:9f:ec:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd Validity Not Before: Nov 21 23:00:12 2024 GMT Not After : Nov 22 23:00:12 2024 GMT Subject: CN=2dfef638b6995720e53ef1af5c8121d529ab422f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:35:83:01:95:9f:f0:70:bd:b4:1d:52:c2:c5: 86:b3:33:ee:ba:c1:0f:bd:9b:1a:46:35:1b:87:79: dd:aa:86:05:db:13:f0:10:bc:db:7f:2b:87:4e:ec: ea:4e:30:2a:ca:5f:8f:ac:bd:ba:13:e9:ed:7d:f9: 06:60:27:5e:c3:00:8e:a5:c8:66:a4:b3:d0:1f:8a: a7:56:0a:39:36:8c:34:76:6c:f3:91:30:15:2f:ca: 55:81:f0:76:d7:ac:3d:46:14:0e:44:ab:32:23:28: 9a:8f:ff:6b:a2:fa:68:4c:47:35:6f:0e:38:47:16: 5f:d2:00:b3:84:93:68:59:34:dc:22:ea:93:52:a4: 60:65:92:87:59:79:8e:b9:af:43:af:40:3e:38:4e: 4f:c4:c6:5a:0f:a3:1e:c7:a4:ba:0e:7c:d3:a1:24: 78:d4:fe:0c:61:40:59:9f:39:3d:9d:ba:7a:e2:fe: c2:ee:02:ea:63:dd:fa:48:b7:38:a3:b0:4a:0f:e6: f1:4d:e6:ab:0f:b4:12:26:55:a7:7c:d3:1a:d1:af: b9:2a:84:1a:ba:eb:cf:58:cc:bf:65:7f:84:ec:0c: 7e:b4:bc:f5:95:7e:5e:76:d3:fd:d9:ab:e3:ac:da: 73:58:9d:db:ba:aa:2c:88:df:55:c3:ad:60:1c:10: c4:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:FE:F6:38:B6:99:57:20:E5:3E:F1:AF:5C:81:21:D5:29:AB:42:2F X509v3 Authority Key Identifier: keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:14:da:e4:84:38:a4:ba:50:00:e2:0f:ab:b1:16:21:7e:3b: c1:f3:89:6f:d4:a0:47:35:09:9a:a3:19:e6:3e:cb:3c:59:91: 65:22:4d:bc:5a:1d:0a:bb:ec:88:ff:c9:eb:79:94:48:55:16: 8c:a9:44:a6:d4:a9:d6:f5:3e:8b:ea:f4:93:c5:f3:93:81:a6: 4c:35:c0:fb:46:18:a2:07:98:92:57:57:73:54:1a:8c:d3:07: c5:8a:b5:a3:83:ad:c1:f2:6e:02:42:f8:08:61:a7:eb:a5:9c: 99:6f:4a:8b:33:da:36:ae:77:39:a1:db:33:d5:08:dc:a4:25: 9f:5d:b8:7f:c3:68:a9:97:b2:5d:50:62:48:32:98:f7:16:67: cf:42:87:1e:2f:c6:e0:fc:f8:de:b3:78:57:ff:7f:ed:7b:92: b6:99:dc:81:a2:b9:ec:ef:d8:61:5d:36:64:0e:77:f5:e4:b8: 0d:9d:af:10:e9:d8:c2:ac:ef:90:58:5a:01:9c:42:52:f3:62: 82:56:17:ff:48:57:1d:39:fd:bc:de:82:d0:b2:b7:2e:59:63: 72:7f:f1:4d:42:3c:81:a3:64:a3:e0:6f:e4:8d:85:9f:b4:da: 26:d4:9e:96:df:7a:78:5e:ac:f5:ba:15:4a:e4:a7:ba:7b:ba: 21:28:be:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNQ9F5mgLtjRsFW9i9Rn+zrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMTA4YzIyNWYyNDc4Y2Q0MjMwMTc5ODkwZDA3Mjg0YmUx NjM2Y2QwHhcNMjQxMTIxMjMwMDEyWhcNMjQxMTIyMjMwMDEyWjAzMTEwLwYDVQQD EygyZGZlZjYzOGI2OTk1NzIwZTUzZWYxYWY1YzgxMjFkNTI5YWI0MjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzWDAZWf8HC9tB1SwsWGszPuusEP vZsaRjUbh3ndqoYF2xPwELzbfyuHTuzqTjAqyl+PrL26E+ntffkGYCdewwCOpchm pLPQH4qnVgo5Now0dmzzkTAVL8pVgfB216w9RhQORKsyIyiaj/9rovpoTEc1bw44 RxZf0gCzhJNoWTTcIuqTUqRgZZKHWXmOua9Dr0A+OE5PxMZaD6Mex6S6DnzToSR4 1P4MYUBZnzk9nbp64v7C7gLqY936SLc4o7BKD+bxTearD7QSJlWnfNMa0a+5KoQa uuvPWMy/ZX+E7Ax+tLz1lX5edtP92avjrNpzWJ3buqosiN9Vw61gHBDEcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC3+9ji2mVcg5T7xr1yBIdUpq0IvMB8GA1UdIwQY MBaAFM0QjCJfJHjNQjAXmJDQcoS+FjbNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQt YWU1MDI3MzY4MWE3LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQtYWU1MDI3MzY4MWE3 LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKRTa5IQ4 pLpQAOIPq7EWIX47wfOJb9SgRzUJmqMZ5j7LPFmRZSJNvFodCrvsiP/J63mUSFUW jKlEptSp1vU+i+r0k8Xzk4GmTDXA+0YYogeYkldXc1QajNMHxYq1o4OtwfJuAkL4 CGGn66WcmW9KizPaNq53OaHbM9UI3KQln124f8NoqZeyXVBiSDKY9xZnz0KHHi/G 4Pz43rN4V/9/7XuStpncgaK57O/YYV02ZA539eS4DZ2vEOnYwqzvkFhaAZxCUvNi glYX/0hXHTn9vN6C0LK3Llljcn/xTUI8gaNko+Bv5I2Fn7TaJtSelt96eF6s9boV SuSnunu6ISi+sA== -----END CERTIFICATE-----Generated at Fri Nov 22 02:08:28 2024 by rpki-client on console-ams.rpki-client.org