$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft File: BVFgW2dezk4PznF1rjGpP6gnK6Y.mft (raw, json) Hash identifier: ZYeCV9vPMWDW0Bn6rHy05EbAVoYhb0RUrMQJUl9d1QI= Subject key identifier: D8:40:3C:D8:DF:22:E1:5C:A4:67:EE:50:2F:95:E8:9B:C5:3C:52:54 Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6 Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6 Certificate serial: 0193628CEFD536B3994FD03809088F6E552C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft Manifest number: 13A9 Signing time: Mon 25 Nov 2024 09:00:23 +0000 Manifest this update: Mon 25 Nov 2024 09:00:23 +0000 Manifest next update: Tue 26 Nov 2024 09:00:23 +0000 Files and hashes: 1: 70zkDo5I6FAud-vYzAFjuWpiYXc.roa (hash: vtcB4WpDFnHCrfzXvVfJ5UK7hNf1m35Ybw18CAVL7Cc=) 2: BVFgW2dezk4PznF1rjGpP6gnK6Y.crl (hash: v7ctfLuJJR6T5z2UyYVp4CE+Bqfbt0VCyF0g2P6wJ6E=) 3: H4ZOrP9F0MEuQqVg6AYmoOPLQDg.roa (hash: MozpigqtvqUhqbBs2/h6MWLEpVITWTGgcffP6LjH1ZY=) 4: MTckVLo32sMls5KM9TC1YJRfScs.roa (hash: 4CLC82KjVGjzjbMAyc7bkj2lirVcDwnrUOm2MJsBDco=) 5: MzO_hlzRIGdrXRD8ZJKWdDZawto.roa (hash: S+LPw8pYzFvsU5te2LsbQ0TJgTDz89il1/yD+/tgtlE=) 6: QKbhqnsXiFGdhBwUUpg2AzDZkD4.roa (hash: TWcedXtEbo5FQjEyEEJlIG6MmjkrznkKDE+P6JeqhBY=) 7: Ui4VJiTOkYD1-Bk0bLVrq2cIzWY.roa (hash: D9d+MSOWsOMv6yefcHoiKuRtPM5X0TuAezL8hOjBZSM=) 8: ZBWGWAqzzMphg8N26iWCScRydeg.roa (hash: A6bFWbJ2kwMwkm3nxNWtNaJhbLgU7mMYdBxgzHzi2zU=) 9: bImFPT4_xl9jMcSdRmVSxVZflKo.roa (hash: FlIBwa8jS/7+t5bT/WA3N1pwc1fnXK0HW5G8zKkHMNg=) 10: dQhDG0xX-qThErXogqMiaL2Bf9I.roa (hash: 6VrItchjVA3XiBywKvD5gKgXOe1f0uI2hvo6vWF12Uc=) 11: f2e3pBYArH8MRuEYi3JDqJGGX_I.roa (hash: HDiLeae1WjBqOdkX1l7fFhyS6eC70vWko4BVEbFuf5Y=) 12: jO-V0f7GA4fOEWb20-4_t4pJ5Rg.roa (hash: h2KqJxX+xdGpGNslXDiYmoBfr1soy2toBPqs2bemrtU=) 13: o5dk2bQL82y5bzm4M6QKGm7CLTE.roa (hash: 23RcwbQ+hrXZ4r/iDXVkJvpHKaq6VMIDPdWK5TTjXvc=) 14: p0UnklHT7AYiN5pDFR_gtRKYHnI.roa (hash: bOavOiYH2nkgwWIUrE7ZQfh8h4hS3dTPbD/djKvp10I=) 15: z9iVptFKI5R17f4E0awYZQ2kWmQ.roa (hash: AqPa3VPdK6wi9PMlVVsn6LTcZ48mUlpkiqaBalCY6JM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 26 Nov 2024 09:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:62:8c:ef:d5:36:b3:99:4f:d0:38:09:08:8f:6e:55:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6 Validity Not Before: Nov 25 09:00:23 2024 GMT Not After : Nov 26 09:00:23 2024 GMT Subject: CN=d8403cd8df22e15ca467ee502f95e89bc53c5254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8d:50:f8:17:8f:d9:de:2e:43:aa:64:6a:7b: 20:f4:71:00:42:6e:91:35:f7:39:d8:76:8a:92:a5: ad:21:8a:7d:f6:b0:77:a3:36:ac:0f:81:9c:82:77: 78:48:5c:35:a7:8b:22:6a:01:bf:5f:69:cd:94:7a: 0b:3b:3e:84:71:5e:94:e4:f8:12:68:e3:3d:d2:85: 12:32:1c:6a:1d:0c:ae:1c:98:38:53:cc:77:a5:5c: 23:de:f9:1d:18:9d:bf:99:70:0c:86:e6:04:ac:de: 62:94:85:40:5e:af:0e:c4:8c:a4:01:0b:72:e0:18: 08:b4:f7:0b:3c:72:86:cf:47:c9:5a:d8:12:95:49: 27:b1:6a:c8:f4:1c:af:97:9a:24:3e:30:9a:f5:d1: d9:d9:d7:4e:29:36:00:02:65:01:65:f7:af:c8:4a: 83:93:df:aa:8b:14:88:2c:67:cc:e4:15:43:79:89: d9:52:87:57:1c:c2:2c:58:62:f3:02:c7:17:4d:cd: 0b:49:7e:ea:78:82:7c:53:03:cb:e0:bd:24:3c:e4: c0:66:2d:84:34:9e:29:30:2a:6b:73:ab:0f:a1:2c: 29:00:28:91:54:46:ac:56:d8:55:b1:88:12:d1:0d: 6c:c1:0b:a2:bf:bb:2d:74:a4:85:80:f8:09:fd:7c: 0e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:40:3C:D8:DF:22:E1:5C:A4:67:EE:50:2F:95:E8:9B:C5:3C:52:54 X509v3 Authority Key Identifier: keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:ec:00:b7:88:48:df:8b:9a:1a:a9:ad:cf:11:8b:c4:41:a9: c5:c6:27:62:a0:fd:ba:42:c8:a4:7d:67:66:55:57:80:a0:5b: f1:40:81:3d:a0:c0:35:f4:21:65:70:b8:f0:61:c0:84:a9:79: e0:d0:50:94:0b:e5:c5:6c:b3:35:f3:b2:25:59:83:55:72:aa: 63:c8:77:56:74:0c:fd:97:81:a0:7a:45:c9:d1:27:66:81:9c: 6e:15:6c:d2:12:ea:c8:72:86:34:ec:03:cf:33:47:95:75:74: ac:f1:a6:34:19:0b:3f:d2:df:0c:fa:7d:59:a1:30:82:18:11: 07:b4:8b:ff:22:03:0d:e8:7a:19:5d:c5:45:d9:c2:5a:b3:e6: ac:8c:2d:23:3f:6a:eb:d4:92:c6:32:92:2c:80:d2:ed:54:ef: f5:f3:36:64:ad:f3:0a:a0:d9:69:09:e0:7b:7e:ed:c4:90:ec: 8c:62:40:bd:c5:ef:13:ce:68:98:f3:05:82:b0:2f:6f:f2:b0: 54:5f:4d:14:77:2a:c0:ef:b0:35:24:5d:b2:e8:76:2a:7e:4c: 53:c7:e1:16:65:9a:f6:59:02:8d:24:fd:7a:d4:2c:4b:f2:72: b2:98:cb:2b:d4:ee:87:6b:f5:38:04:f2:1e:fa:19:25:5b:e6: 15:63:f2:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNijO/VNrOZT9A4CQiPblUsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NTE2MDViNjc1ZWNlNGUwZmNlNzE3NWFlMzFhOTNmYTgy NzJiYTYwHhcNMjQxMTI1MDkwMDIzWhcNMjQxMTI2MDkwMDIzWjAzMTEwLwYDVQQD EyhkODQwM2NkOGRmMjJlMTVjYTQ2N2VlNTAyZjk1ZTg5YmM1M2M1MjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwY1Q+BeP2d4uQ6pkansg9HEAQm6R Nfc52HaKkqWtIYp99rB3ozasD4Gcgnd4SFw1p4siagG/X2nNlHoLOz6EcV6U5PgS aOM90oUSMhxqHQyuHJg4U8x3pVwj3vkdGJ2/mXAMhuYErN5ilIVAXq8OxIykAQty 4BgItPcLPHKGz0fJWtgSlUknsWrI9Byvl5okPjCa9dHZ2ddOKTYAAmUBZfevyEqD k9+qixSILGfM5BVDeYnZUodXHMIsWGLzAscXTc0LSX7qeIJ8UwPL4L0kPOTAZi2E NJ4pMCprc6sPoSwpACiRVEasVthVsYgS0Q1swQuiv7stdKSFgPgJ/XwOTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNhAPNjfIuFcpGfuUC+V6JvFPFJUMB8GA1UdIwQY MBaAFAVRYFtnXs5OD85xda4xqT+oJyumMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEt MDc3OWY0OGVjZWEwLzEvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEtMDc3OWY0OGVjZWEw LzEvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAOwAt4hI 34uaGqmtzxGLxEGpxcYnYqD9ukLIpH1nZlVXgKBb8UCBPaDANfQhZXC48GHAhKl5 4NBQlAvlxWyzNfOyJVmDVXKqY8h3VnQM/ZeBoHpFydEnZoGcbhVs0hLqyHKGNOwD zzNHlXV0rPGmNBkLP9LfDPp9WaEwghgRB7SL/yIDDeh6GV3FRdnCWrPmrIwtIz9q 69SSxjKSLIDS7VTv9fM2ZK3zCqDZaQnge37txJDsjGJAvcXvE85omPMFgrAvb/Kw VF9NFHcqwO+wNSRdsuh2Kn5MU8fhFmWa9lkCjST9etQsS/JyspjLK9Tuh2v1OATy HvoZJVvmFWPyzA== -----END CERTIFICATE-----Generated at Mon Nov 25 19:26:56 2024 by rpki-client on console-ams.rpki-client.org