$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.mft File: NHtIeEj_9jUz2HwyTsxRwsPqKts.mft (raw, json) Hash identifier: Bh8xGwtas/fKRKZxIxwlkowPmFTAUy8+3+ytXuVztfo= Subject key identifier: 9E:A4:13:05:B1:3C:C9:8A:68:47:74:B8:BC:E5:C9:96:B6:67:5A:59 Authority key identifier: 34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB Certificate issuer: /CN=347b487848fff63533d87c324ecc51c2c3ea2adb Certificate serial: 0193512BD00769F616C4DC81E9CE700DBF1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.mft Manifest number: 0FAA Signing time: Fri 22 Nov 2024 00:00:45 +0000 Manifest this update: Fri 22 Nov 2024 00:00:45 +0000 Manifest next update: Sat 23 Nov 2024 00:00:45 +0000 Files and hashes: 1: 2HcapEz0Gu7D6h7Ws_IBTDSVGvc.roa (hash: B8x5vu6zwkQf+Be6IIzAVTqn+aHQHDow30Jj8rCs/Dw=) 2: 2wMbk_qVGtVccWM2YIia2pV1fbk.roa (hash: 1pxcMmNL7jdPgaKgQhChMODtIi7KVC9aYsiMrMJL91s=) 3: 8iMVH1niMlNTpkT0JomcP-iiv5M.roa (hash: +m3jR2gHg/q/N7Mg99y7hewVffvge00T+3iDHU4mMZM=) 4: 9rcxzQtK9yzqaJiUI5dn3XlbqjE.roa (hash: uwhpyc+NVyRSIxHllCLSCWLQdJrDvgriuCvH3g+ixMg=) 5: EV1aSDbnyDbzpRXAQrNfNst7LdM.roa (hash: JkVoJQ5I6cv9XOkwrUu9zRo//UKv/0lBk4gOmo2rBok=) 6: M1mBcsQxGLKIziW_PsbHHFdIE7M.roa (hash: WObgTt6fiPcAVI+PuqxBC0jjE2LAM/RvUq4lR73cSso=) 7: MQu_fYJw4lXX2Xn8sHwRNMr-YGA.roa (hash: d1eqowaSo8oO0AxZaKYVdAdvtyaapqXssLrJg3l8Fgo=) 8: MSR_7VYucX1j62nT-NuetbLNTLc.roa (hash: ZH5xj+BDu5offBuaSE9ktb4RRBFrbyuDDLJ+5/t0mkI=) 9: NHtIeEj_9jUz2HwyTsxRwsPqKts.crl (hash: 63Avi3ij9Ua8I7rA3WsWoRn+ib6un1IB/Ma6DdxiAmQ=) 10: R2y_DeVkpkDvwEkOFd0P3ZHYGVQ.roa (hash: /rfbmBWhOSme2aElNSCGiojtGVvi0L44BMgtFUKta1w=) 11: _DRYEaHuBZ9JZxS_7dr4WSeJ2NY.roa (hash: DkT6nTO+F5C20plKkL+17scNuazPJPQ/ROmRI9wO19Q=) 12: aXJrr0AlHeXLke7y62hFJyWFeto.roa (hash: Mydv8SC0h2sUo3at7zXgpSgLBQ0iknnN5HFjOI1m3NU=) 13: hL9nVg0PCz1iH0t0zZu_EP6kUq8.roa (hash: 2p1Y9iwQtnOqZMVomgNhiXW8UZHRVORDwOVUKz9BJLU=) 14: kERcqft_pG_zk5ei3ZDMGiUbwZ4.roa (hash: Bu3NELL9Hqz2/9ZJg7Zi2VUM6PEebjE405iW7pQaalw=) 15: kZP6MCw0QIKlmDn280ska7mo4XU.roa (hash: 61p1PWgE1/QLEDUpWO8SZlN6/NpIW53FIObOwZb1Djo=) 16: luixh66HXVZrqWNYKfATyCLBX7M.roa (hash: 7BAUkmn7bFOsNpAHk+CLAyokqLpdsA64kxSRTk6lV2M=) 17: qcQ9uMtkt7KCwNpDHQ-qb7jerDU.roa (hash: dAjtEhSL3MKSox+8jXNw54GHiDBibfIKRBgT2m7R8JE=) 18: td4_ttmZZyDn6CGTQ0EIsnB1NqE.roa (hash: 948BPTxHrxFN3ayuuyv4YdwamazdiCaiCJkPb/KM8qI=) 19: uHfUEqkCodLF34LZDzQsFEiN8yI.roa (hash: ZoSTY9TBok9V/rrcD8VdhUGAqxK68oROuu4q2O6V1iw=) 20: y4_u6jmAtI6tlWVCWmH8wvZDVz0.roa (hash: oghy7D2kYSP5lnsEAK8Pdnr7BmqhXcT1nLJbMSA1bkE=) 21: z2xuoMmNOeExmNpY8SNR_pfV4WE.roa (hash: ThEFR4xMgfCPhXPtUOG0hfFz4oN+BwIs+HfTptLFXXs=) 22: zz-r-PF2DytCgcjR39zKCqKQZQY.roa (hash: C8ugx/qMDCIAX8Yc79P/CeVDI2v5BeKXAYjWUSiGSEo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.crl rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.mft rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 18:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:51:2b:d0:07:69:f6:16:c4:dc:81:e9:ce:70:0d:bf:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=347b487848fff63533d87c324ecc51c2c3ea2adb Validity Not Before: Nov 22 00:00:45 2024 GMT Not After : Nov 23 00:00:45 2024 GMT Subject: CN=9ea41305b13cc98a684774b8bce5c996b6675a59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:bf:8c:ad:11:ec:de:6e:64:24:fb:c9:9d:6f: 6f:3a:8d:57:da:79:d9:8f:f8:ac:8e:1e:46:e7:e3: b3:ba:6b:e7:b0:b5:b5:0b:9c:eb:f0:ab:05:9e:fa: 15:24:75:aa:e0:15:5c:83:fc:e4:73:2a:6b:69:a2: 7c:89:b8:fe:96:92:8a:d5:29:d4:8c:99:7e:23:2b: 38:e5:66:19:51:69:21:8b:2a:5e:2e:66:56:7c:11: 35:60:1b:04:bd:8e:61:5e:2e:cc:cc:a5:b2:f9:5f: 11:29:d7:ae:6f:2e:16:6a:7d:2d:c1:e7:4f:9d:e7: 93:50:7e:47:cd:3b:1a:3c:ec:74:a5:2a:e8:66:05: 23:01:9d:b4:c9:e9:5b:59:3e:95:99:63:83:97:06: 70:54:0e:ec:ef:b2:47:14:ba:17:45:bc:f8:72:c3: 90:9e:5b:73:98:61:70:32:f7:74:ca:d9:77:88:55: ab:9e:96:d4:c1:cd:f7:fa:b6:8c:28:5c:3c:ae:df: 8b:a6:5b:6e:56:34:05:87:7a:3f:70:7f:c1:4c:f7: e6:30:c9:91:93:6b:d0:6b:e6:34:ac:32:71:6f:7d: 05:77:73:f2:a2:d3:97:49:21:26:4f:f3:43:fb:dd: 92:78:a3:63:84:7a:d1:fc:ff:2a:5e:71:56:fb:45: 28:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:A4:13:05:B1:3C:C9:8A:68:47:74:B8:BC:E5:C9:96:B6:67:5A:59 X509v3 Authority Key Identifier: keyid:34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:80:07:35:d5:f8:4d:30:2c:1e:71:64:89:64:0d:f7:df:b9: 4b:da:3a:ae:7a:04:bf:9a:c1:b5:ed:06:ad:e1:5a:74:f6:b7: 61:e2:c2:d5:7a:6c:82:9d:34:22:18:e6:3b:80:3e:05:91:7d: 13:42:83:ec:c0:b8:0b:a8:2d:71:1f:6f:6d:9b:94:bb:24:99: 89:8f:30:66:f9:36:df:6c:2d:89:5d:6f:2c:3f:4d:68:42:3e: 69:c7:c5:5d:2b:e8:5d:39:a4:8e:9a:44:4e:c3:a1:c6:a4:41: 76:77:8e:97:f8:4d:4b:ba:59:52:ac:42:cb:58:62:88:71:d6: 88:a0:94:b9:9a:ad:12:36:f0:7f:e3:7f:e2:52:ad:25:e2:79: 64:72:5c:a5:70:5b:c1:fe:ad:45:aa:5b:37:0a:65:43:7a:77: 56:ec:11:75:01:36:31:28:41:d9:1c:8f:cc:35:d3:63:26:dd: 23:9e:a5:4e:54:5c:cb:12:4a:fa:af:b6:01:f9:08:d7:58:15: af:65:c7:1f:a9:19:20:64:37:24:f8:c5:33:d7:d7:a4:69:01: aa:30:c7:b1:4f:ce:cf:6c:4e:3e:26:62:3f:1b:01:4f:9d:ac: 9a:9d:9f:af:43:3f:9d:2a:3d:61:0b:6d:6c:8b:2d:25:65:a2: f0:67:39:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNRK9AHafYWxNyB6c5wDb8eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0N2I0ODc4NDhmZmY2MzUzM2Q4N2MzMjRlY2M1MWMyYzNl YTJhZGIwHhcNMjQxMTIyMDAwMDQ1WhcNMjQxMTIzMDAwMDQ1WjAzMTEwLwYDVQQD Eyg5ZWE0MTMwNWIxM2NjOThhNjg0Nzc0YjhiY2U1Yzk5NmI2Njc1YTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17+MrRHs3m5kJPvJnW9vOo1X2nnZ j/isjh5G5+OzumvnsLW1C5zr8KsFnvoVJHWq4BVcg/zkcypraaJ8ibj+lpKK1SnU jJl+Iys45WYZUWkhiypeLmZWfBE1YBsEvY5hXi7MzKWy+V8RKdeuby4Wan0twedP neeTUH5HzTsaPOx0pSroZgUjAZ20yelbWT6VmWODlwZwVA7s77JHFLoXRbz4csOQ nltzmGFwMvd0ytl3iFWrnpbUwc33+raMKFw8rt+LpltuVjQFh3o/cH/BTPfmMMmR k2vQa+Y0rDJxb30Fd3PyotOXSSEmT/ND+92SeKNjhHrR/P8qXnFW+0UotQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ6kEwWxPMmKaEd0uLzlyZa2Z1pZMB8GA1UdIwQY MBaAFDR7SHhI//Y1M9h8Mk7MUcLD6irbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkh0SWVFal85alV6Mkh3eVRzeFJ3c1BxS3RzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9iYzcxMjItNGQxYi00NmE3LWFlY2It MjMwYjNiNzJhMTc1LzEvTkh0SWVFal85alV6Mkh3eVRzeFJ3c1BxS3RzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9iYzcxMjItNGQxYi00NmE3LWFlY2ItMjMwYjNiNzJhMTc1 LzEvTkh0SWVFal85alV6Mkh3eVRzeFJ3c1BxS3RzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUIAHNdX4 TTAsHnFkiWQN99+5S9o6rnoEv5rBte0GreFadPa3YeLC1Xpsgp00IhjmO4A+BZF9 E0KD7MC4C6gtcR9vbZuUuySZiY8wZvk232wtiV1vLD9NaEI+acfFXSvoXTmkjppE TsOhxqRBdneOl/hNS7pZUqxCy1hiiHHWiKCUuZqtEjbwf+N/4lKtJeJ5ZHJcpXBb wf6tRapbNwplQ3p3VuwRdQE2MShB2RyPzDXTYybdI56lTlRcyxJK+q+2AfkI11gV r2XHH6kZIGQ3JPjFM9fXpGkBqjDHsU/Oz2xOPiZiPxsBT52smp2fr0M/nSo9YQtt bIstJWWi8Gc54Q== -----END CERTIFICATE-----Generated at Fri Nov 22 02:08:31 2024 by rpki-client on console-ams.rpki-client.org