$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft File: s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft (raw, json) Hash identifier: wCoXucC969/Y/foofLghY5zdr4tlCoTnY4xN9/Au6t8= Subject key identifier: CA:74:D0:1E:2D:59:0F:A2:F4:2D:69:8F:6D:F9:11:DC:02:13:9F:A1 Authority key identifier: B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2 Certificate issuer: /CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2 Certificate serial: 019354D11F21E093277E2136041EE2833985 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft Manifest number: 1383 Signing time: Fri 22 Nov 2024 17:00:11 +0000 Manifest this update: Fri 22 Nov 2024 17:00:11 +0000 Manifest next update: Sat 23 Nov 2024 17:00:11 +0000 Files and hashes: 1: 1MxAxNJkLUVLRJIjhfKn_NtpnRc.roa (hash: nEbeoF/yoY3jvmxeIbw39Q0G57SQQ7egaIsnOj5XR8w=) 2: 7Z0zfJyumEq6PQBdZKcbE76lUL8.roa (hash: LA0UWi8nIdX+iB45r2XgQZOG7L76/oMOpnzIulyrEjY=) 3: BoR2VIryTsHHcWj-FDFDFmt5Nzo.roa (hash: OQITac9AherGb72sUGcK8Cs2Z8KQFS7mmKbQfWEJd04=) 4: Fft_vQuJeJyt3IV4pTw2voRpntk.roa (hash: pu2GY6gx4o5hCrK12BSHnTA38YNbvDt3Ez+KWVxqU00=) 5: P6E1it89HIgLIF9ONw1xVf0429g.roa (hash: nXKlmpX9NKxytZ2cvGpKOkD9F1vseXV8FabZWpNkMRg=) 6: PbkJxqA5PmNFabqTw1fKGFVkjV0.roa (hash: mDjtZOTD8H5hXGsyS+GZVD0fycZ0nmfA1pzJGIv3NDE=) 7: PhsDfVgJ05TgrB6k6mu5W8_N2sE.roa (hash: u+zxxe+PxRzw33Mn85UddaUXLK2cPj4E/cvYptSUOBk=) 8: QdHm7On3zoGKrTv3CU4gY5CT5VU.roa (hash: InPHpksy4nUT4Nu+mpJO4rs7QCEoVmiu6cReok/9aNc=) 9: TR7Lfe9EIldCywvzm10EkRJwmBg.roa (hash: vx+d21f2ENm4TogU8IhlCECITu67YSg5fHdHLXGFAo4=) 10: UoA72pGEBpbhKyRmV5SX18ctcVs.roa (hash: m9zr0+RVKcPRIg+rWIHpkfFG95gevfP36Ptu3FNSTnM=) 11: V6cR19X84nxLG7BpHxSvQUosV98.roa (hash: 9EcE69J6jodQ2yyXbKBeUrLPhsNHz/c19W39iLokXJI=) 12: d7E4iyie1l75_Naeqjb8ufmcPc0.roa (hash: ubzg9pOBWpUGlN5MjZvWpnhkC0mO3ymuJ5OSt+ll3/o=) 13: jDMNkLbwU_r5bJFRwIsnJdTDAEg.roa (hash: vB6tP6FoX9/9v0Lwpiz67K6uHA0agYCMcD88mPQcMmA=) 14: ks7Gv0GevhgQIkHF8geXzgMCF8E.roa (hash: F4mLBEL+n7QH3r325/M+QH1I6r+39DXfTB7LaHLXieM=) 15: s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl (hash: dRqdR90K4uDXpg/0Xv6QHwx3V7qNNtpnzH9BghOco+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:54:d1:1f:21:e0:93:27:7e:21:36:04:1e:e2:83:39:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2 Validity Not Before: Nov 22 17:00:11 2024 GMT Not After : Nov 23 17:00:11 2024 GMT Subject: CN=ca74d01e2d590fa2f42d698f6df911dc02139fa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:6e:57:e7:ae:33:78:7a:7d:08:0b:a6:0b:fe: bb:2b:20:e0:4a:5d:48:07:2a:74:97:a6:1f:a5:70: 05:47:a2:74:48:57:dd:f4:22:22:0c:2d:f8:29:0a: 4b:58:28:98:d6:69:98:07:33:1a:ab:83:2a:c5:30: ce:9c:19:b4:80:76:35:6f:25:85:25:75:c9:68:af: 59:cb:7e:8f:25:29:6c:cd:98:95:64:d7:4d:92:78: 07:0f:ca:63:c0:5e:ab:88:10:4f:62:06:e6:42:27: aa:88:76:5c:0b:64:35:83:25:7e:b7:c1:37:28:6e: 86:f1:5c:37:84:2b:e0:b5:51:b3:98:95:3d:c6:6d: df:7d:d3:23:58:f7:e7:3f:8f:75:4e:01:a6:cf:48: 03:46:51:dc:c2:17:51:fc:06:3a:fe:53:7f:ed:89: f6:b4:00:4f:fd:69:8f:ad:8a:1a:10:58:c5:38:f6: df:c7:09:a9:cd:30:b0:65:54:b8:8a:8a:62:b9:61: 37:63:e5:7d:1c:bf:7d:1b:aa:80:5a:15:7c:2f:20: 5b:16:bc:f9:7b:13:c8:0b:86:01:64:17:c0:a1:c6: e4:e1:3d:d9:92:16:a7:93:0d:82:d8:7f:4e:9f:71: d8:32:1d:25:15:5b:29:7a:46:17:16:dd:9c:18:2f: 59:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:74:D0:1E:2D:59:0F:A2:F4:2D:69:8F:6D:F9:11:DC:02:13:9F:A1 X509v3 Authority Key Identifier: keyid:B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:e6:0f:21:cd:29:d4:f8:60:32:08:0f:3e:35:a0:22:44:04: 51:3f:28:51:e5:35:ed:e9:f3:0a:f8:ef:f9:78:2c:c6:04:93: cf:5b:1d:80:1d:72:47:3a:ec:1e:ce:19:6c:29:eb:01:ec:4e: 15:35:96:32:2f:ab:38:fb:2d:b5:d2:ae:75:a1:d9:db:96:53: e7:50:9f:d6:38:0a:86:f6:4b:dc:79:36:fe:1b:72:6e:73:26: 4b:41:5f:6a:92:a8:f1:99:57:75:b8:d4:56:69:8c:ed:72:f3: b7:88:87:10:51:77:23:d0:1b:3a:c9:19:e4:c5:f4:08:b7:94: 30:52:08:d5:fa:9d:49:49:f2:40:37:a3:9a:6e:f9:41:34:9a: 7d:82:84:68:d3:58:1e:10:24:9f:33:cc:d8:3f:fc:19:f2:09: aa:f4:26:34:f4:9e:1f:a3:5c:d8:f5:50:67:41:5e:a5:24:2d: cd:cc:f8:a4:4b:49:94:0f:82:8d:3b:80:94:7c:fc:8d:1d:25: 37:84:c3:f9:18:45:1e:a3:e8:8a:65:66:24:8c:3e:b3:b4:9d: 10:ac:cf:6d:c2:01:2e:8e:70:51:77:38:49:1c:4a:c7:d8:13: 11:b4:ee:89:3c:61:13:35:8f:05:b5:82:0b:c3:88:a1:d4:45: 9c:4e:b3:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNU0R8h4JMnfiE2BB7igzmFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYTVkOTk4NjNkYjJlNDliNDRmNmMzMjRlYjA0Mzg4ZmM3 NTE1ZDIwHhcNMjQxMTIyMTcwMDExWhcNMjQxMTIzMTcwMDExWjAzMTEwLwYDVQQD EyhjYTc0ZDAxZTJkNTkwZmEyZjQyZDY5OGY2ZGY5MTFkYzAyMTM5ZmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjG5X564zeHp9CAumC/67KyDgSl1I Byp0l6YfpXAFR6J0SFfd9CIiDC34KQpLWCiY1mmYBzMaq4MqxTDOnBm0gHY1byWF JXXJaK9Zy36PJSlszZiVZNdNkngHD8pjwF6riBBPYgbmQieqiHZcC2Q1gyV+t8E3 KG6G8Vw3hCvgtVGzmJU9xm3ffdMjWPfnP491TgGmz0gDRlHcwhdR/AY6/lN/7Yn2 tABP/WmPrYoaEFjFOPbfxwmpzTCwZVS4iopiuWE3Y+V9HL99G6qAWhV8LyBbFrz5 exPIC4YBZBfAocbk4T3Zkhankw2C2H9On3HYMh0lFVspekYXFt2cGC9Z/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMp00B4tWQ+i9C1pj235EdwCE5+hMB8GA1UdIwQY MBaAFLOl2Zhj2y5JtE9sMk6wQ4j8dRXSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczZYWm1HUGJMa20wVDJ3eVRyQkRpUHgxRmRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8yOWU5YmMtYjE5MC00MDllLTg2YjAt ZWVjNWQ1MGVmYTk0LzEvczZYWm1HUGJMa20wVDJ3eVRyQkRpUHgxRmRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8yOWU5YmMtYjE5MC00MDllLTg2YjAtZWVjNWQ1MGVmYTk0 LzEvczZYWm1HUGJMa20wVDJ3eVRyQkRpUHgxRmRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc+YPIc0p 1PhgMggPPjWgIkQEUT8oUeU17enzCvjv+XgsxgSTz1sdgB1yRzrsHs4ZbCnrAexO FTWWMi+rOPsttdKudaHZ25ZT51Cf1jgKhvZL3Hk2/htybnMmS0FfapKo8ZlXdbjU VmmM7XLzt4iHEFF3I9AbOskZ5MX0CLeUMFII1fqdSUnyQDejmm75QTSafYKEaNNY HhAknzPM2D/8GfIJqvQmNPSeH6Nc2PVQZ0FepSQtzcz4pEtJlA+CjTuAlHz8jR0l N4TD+RhFHqPoimVmJIw+s7SdEKzPbcIBLo5wUXc4SRxKx9gTEbTuiTxhEzWPBbWC C8OIodRFnE6zpQ== -----END CERTIFICATE-----Generated at Fri Nov 22 18:05:40 2024 by rpki-client on console-fra.rpki-client.org