$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.mft File: KQn__NgaZryYtinUwFeSR2RfD-Q.mft (raw, json) Hash identifier: OpyGKqTgt6mdokVYPb0LrZoQ1RJvLQ3EyG3XUDeAY5A= Subject key identifier: 13:FB:E6:F6:67:46:95:79:5D:51:0E:BE:C8:01:9F:7D:80:3B:AD:F5 Authority key identifier: 29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4 Certificate issuer: /CN=2909fffcd81a66bc98b629d4c0579247645f0fe4 Certificate serial: 0193512BE8D97B77096CCCF17DD0F8CC5891 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.mft Manifest number: 138D Signing time: Fri 22 Nov 2024 00:00:52 +0000 Manifest this update: Fri 22 Nov 2024 00:00:52 +0000 Manifest next update: Sat 23 Nov 2024 00:00:52 +0000 Files and hashes: 1: 3JXJlol2hWtZ67A4NiHo5T5scZk.roa (hash: IwJOyfnUZBTcel/a7NCndXyWpC0YPxZDaX21GFcW0t0=) 2: 7nyqPtYoHXMWuhuH0xJUbFGWGgg.roa (hash: 2CiqNvbHTLLRuoEDyU+kgv+cV9Gy71Fh4kEypMiMI+4=) 3: Aal5fDlv8KTqjduL-1trsHe7lCc.roa (hash: zj/AVp1HZvxzwBQuPni9XQZCW87AasIvY9xqo7RidLM=) 4: ElBNamiGixpZz_l00IXECfbKodM.roa (hash: com0NIM9WeL2GEvN2OJSaX4gbjScrQvUpEBULhGotIo=) 5: IBHQ4Pr--NRO7Obhaw8nPwKad0s.roa (hash: sEqiSbSvymv+lWzERVPv6znMds/WSiWiTb9t5iQBxRI=) 6: JMo5lfYTKWZT9Ef1GDZ0beZKyfc.roa (hash: GecDWZwMVJdaoaQeFoK33CJgNff3vDXN7JIe3Dd2dCA=) 7: KQn__NgaZryYtinUwFeSR2RfD-Q.crl (hash: LG10qXDrR66NzoddW17nIzMVNgR4PhN+x95HQyONEy4=) 8: ORhBz4KRm2gloGHlSyClusZu9tI.roa (hash: JbsoogMNWD/lhbP+4vVwr6exl7qtpby38NnKeDDSUtY=) 9: UTfh3_UjTF5ctqAyjqs4yhkbbVQ.roa (hash: kuhxEaOpC3nBc8FZRnqwbfZbV6GKfFQbDZwzIi4thek=) 10: XzeVIkdyFRWV394J-hMQjZh94l0.roa (hash: kYLAX9K3pbg27Ls9WY0wh7zdYDg51WKsiYamqaX0uFU=) 11: ajWayDIMdZp3qMNs9TNTxPIxFZM.roa (hash: hfJ9wYadBznnrEW9ldNwsFJgWMukbwbfJNuyikUPd5o=) 12: atKomxObHgDEn_ABNq_b4RxNA4M.roa (hash: IId8thkQdFwpEyh6aN4A63s37FPeua1dAlD0VZu6Ig8=) 13: cbqAwGpb0dMFO3g8OTMtkER8uAg.roa (hash: WL465HSaRKRVcqbOC0CTY5BoenUjgFlxnqa1FgmiIdo=) 14: gLqFduyaM-ujPpXoI1wH6cKvKUE.roa (hash: DsCFKo7jLl0JmgBenbA9gcyN8ILsdJkxPnaG/CFbJ14=) 15: gOJj2smQhFOlOiLQZeStq8ANlSo.roa (hash: agLe2wQtDjR1OU0uD3p4d//Z48g4lLvgLqvTJGfM7WA=) 16: kXjEx0YPTAnwXO5zHZtjT8lRViI.roa (hash: 3Tq9HbAl4l4n2bfADTN2bAH7nkhVQqAm4rq7DKvnyi4=) 17: yL9s5mwShdQIVybYAiDh3Mh8ej8.roa (hash: 2nH3ZZWHimz560g4h9zsP1cJYnyzOnQAKqZjg6rUaaY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 18:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:51:2b:e8:d9:7b:77:09:6c:cc:f1:7d:d0:f8:cc:58:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2909fffcd81a66bc98b629d4c0579247645f0fe4 Validity Not Before: Nov 22 00:00:52 2024 GMT Not After : Nov 23 00:00:52 2024 GMT Subject: CN=13fbe6f6674695795d510ebec8019f7d803badf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1c:86:19:d3:a5:f3:83:3f:5f:6b:f9:0a:e9: ef:34:93:bc:fe:c1:06:84:9c:66:d8:76:cf:5a:ae: 38:47:96:4c:1a:53:36:22:44:37:a0:79:76:93:bb: b9:20:f9:b1:e2:37:bc:2a:fc:11:1b:63:1e:c8:cc: 66:f7:83:7c:9d:ad:fe:d4:16:56:8d:18:c3:03:18: 1a:44:61:71:b0:0d:d1:e0:35:0f:21:22:59:0d:67: 07:39:8c:05:9c:66:52:f8:59:9d:2b:36:c8:eb:00: cd:18:86:21:c7:d5:69:d5:b0:d1:68:ad:da:34:ed: 5d:b3:f7:08:43:b3:2b:18:35:e5:21:23:fa:9b:1d: c6:0a:de:0a:1d:74:71:52:52:9f:1f:f1:bb:33:f2: 88:2a:e9:a2:4c:42:6b:28:82:7b:f9:3e:22:8d:0f: db:2e:ba:92:ac:45:89:41:e2:d3:a1:bc:72:93:db: dc:a2:c0:49:06:b0:0c:ae:2b:11:e6:d8:cd:96:99: 08:53:e5:1d:c8:53:47:a0:a1:78:38:d9:6e:d6:dd: 4c:7a:e7:9e:14:d4:03:74:55:59:72:28:d3:88:98: f3:05:60:56:49:64:ad:cf:12:c9:ab:e7:32:1a:36: 17:0b:6f:32:e5:fe:fd:5f:ea:ca:d5:35:03:45:f6: 18:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:FB:E6:F6:67:46:95:79:5D:51:0E:BE:C8:01:9F:7D:80:3B:AD:F5 X509v3 Authority Key Identifier: keyid:29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:ea:1b:f4:7b:8f:2e:bf:4e:67:6c:80:91:ee:d5:19:d5:e5: 84:cf:96:59:37:72:c7:45:71:2a:a5:ba:b9:e4:e8:0c:ac:0d: 8c:68:03:13:a1:80:c6:5f:81:64:7c:98:1f:61:c8:04:06:20: 35:15:ad:f9:57:35:3d:e9:24:dc:e4:2d:b6:63:6b:da:c1:ed: e4:17:65:03:ab:47:ff:22:ce:a2:8f:10:60:53:e2:81:4f:27: 50:a6:40:2c:b1:0b:0a:b2:19:2d:9a:f4:88:f6:5e:ec:f2:2c: cb:0e:5c:d1:53:f9:09:e4:5d:a7:d0:ec:05:2a:ab:a9:33:6c: 5d:db:ec:5f:37:33:f9:5b:9b:c8:4e:a6:3b:05:67:46:bd:aa: 55:1d:37:55:58:3f:e8:5f:1e:2a:34:05:8c:00:33:00:80:a5: 8d:5a:42:22:e5:fb:08:fd:65:a0:25:89:a0:e9:23:18:5b:0d: 5d:c0:66:fd:dd:e0:b0:c3:e3:3d:23:40:7c:48:8f:a5:65:6e: 14:16:45:e8:cd:2c:61:08:1c:c4:13:5c:c1:d4:ed:ed:68:d6: 4e:a6:58:82:8a:82:e7:d6:ef:71:fd:be:f4:11:89:d5:d8:7b: 16:8b:65:e6:fa:05:2a:66:14:f6:81:66:50:d0:e4:60:16:15: 06:0c:e2:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNRK+jZe3cJbMzxfdD4zFiRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MDlmZmZjZDgxYTY2YmM5OGI2MjlkNGMwNTc5MjQ3NjQ1 ZjBmZTQwHhcNMjQxMTIyMDAwMDUyWhcNMjQxMTIzMDAwMDUyWjAzMTEwLwYDVQQD EygxM2ZiZTZmNjY3NDY5NTc5NWQ1MTBlYmVjODAxOWY3ZDgwM2JhZGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoByGGdOl84M/X2v5CunvNJO8/sEG hJxm2HbPWq44R5ZMGlM2IkQ3oHl2k7u5IPmx4je8KvwRG2MeyMxm94N8na3+1BZW jRjDAxgaRGFxsA3R4DUPISJZDWcHOYwFnGZS+FmdKzbI6wDNGIYhx9Vp1bDRaK3a NO1ds/cIQ7MrGDXlISP6mx3GCt4KHXRxUlKfH/G7M/KIKumiTEJrKIJ7+T4ijQ/b LrqSrEWJQeLTobxyk9vcosBJBrAMrisR5tjNlpkIU+UdyFNHoKF4ONlu1t1Meuee FNQDdFVZcijTiJjzBWBWSWStzxLJq+cyGjYXC28y5f79X+rK1TUDRfYYiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBP75vZnRpV5XVEOvsgBn32AO631MB8GA1UdIwQY MBaAFCkJ//zYGma8mLYp1MBXkkdkXw/kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1FuX19OZ2FacnlZdGluVXdGZVNSMlJmRC1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9kZTMwNDEtOTUzNi00OTJlLWE5Y2Qt ZjJhZTdiYzdlY2M1LzEvS1FuX19OZ2FacnlZdGluVXdGZVNSMlJmRC1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9kZTMwNDEtOTUzNi00OTJlLWE5Y2QtZjJhZTdiYzdlY2M1 LzEvS1FuX19OZ2FacnlZdGluVXdGZVNSMlJmRC1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAieob9HuP Lr9OZ2yAke7VGdXlhM+WWTdyx0VxKqW6ueToDKwNjGgDE6GAxl+BZHyYH2HIBAYg NRWt+Vc1Pekk3OQttmNr2sHt5BdlA6tH/yLOoo8QYFPigU8nUKZALLELCrIZLZr0 iPZe7PIsyw5c0VP5CeRdp9DsBSqrqTNsXdvsXzcz+VubyE6mOwVnRr2qVR03VVg/ 6F8eKjQFjAAzAICljVpCIuX7CP1loCWJoOkjGFsNXcBm/d3gsMPjPSNAfEiPpWVu FBZF6M0sYQgcxBNcwdTt7WjWTqZYgoqC59bvcf2+9BGJ1dh7Fotl5voFKmYU9oFm UNDkYBYVBgziww== -----END CERTIFICATE-----Generated at Fri Nov 22 02:09:14 2024 by rpki-client on console-ams.rpki-client.org