$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft File: BMvltGI9q0LxWpBQAtt85i6FTyk.mft (raw, json) Hash identifier: YAlTySu25940B8sdCz+5LsJlBmCNZ+truWg5FzR8/iQ= Subject key identifier: F7:91:84:0A:A4:CA:81:6E:65:AD:E8:44:17:10:85:09:61:F9:3F:A5 Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Certificate serial: 019352AC9C52C1E4E5E251A71E7168A492A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft Manifest number: 10CA Signing time: Fri 22 Nov 2024 07:01:04 +0000 Manifest this update: Fri 22 Nov 2024 07:01:04 +0000 Manifest next update: Sat 23 Nov 2024 07:01:04 +0000 Files and hashes: 1: 2pAru1Er-omNMzjpXxXX5QCu9dw.roa (hash: jzotIQOGmOcfuIo5BOobmbaMoQA+VeTDZv3ZUSQumFI=) 2: 4ATeCpuXYO0_0kFf5t4Tti-keJI.roa (hash: UBKwsNQHXObFvH+c/pXBaATBl7AAtwKTAaK4AIQ5AgA=) 3: 4yHr9-l1CbbxANcIh06x6HIOj4Y.roa (hash: wJoBDBsZruQvi4J4ZdZlqe6D3koco/lpPC119krFeDc=) 4: 73KMnL4IFNQ-Y6Xo0BeA6Jj3XoI.roa (hash: FNhkde4qv+stjMUZzWkmF7XX/h8/ANIn8SVd6h+QKQY=) 5: 8GNymxHgYzccC_OsVx4IAE7pHO0.roa (hash: D3F0FEtAh7EdwIFp/EpUMnSLvFYvS2z3xfeuipEM80Y=) 6: 8aeSVpJcfSJW1iwHzpRPoAA-tHE.roa (hash: Bsh4miGhcJxpY4NMOANMMKb7Z2277tqDJiujXgXQ+6c=) 7: 8yqU5YTNWMTQpmMCHvZGuWfFtYw.roa (hash: Z0f7wsRfXNqqadxnRsY88EJegn+HRljfSWRDxAqUD40=) 8: AqI_KogMr2irDOl-E8AosFNr4y8.roa (hash: GiTulLY0Z/jdC6OJyzCqGn7s0wtnTZj46BniPx7YEco=) 9: BMvltGI9q0LxWpBQAtt85i6FTyk.crl (hash: e2opIZ/LUQYFhqLK1+yj4IIoNDkTFdHjzGfOAL1B+Uw=) 10: Gnv0fjJBVZlIcFtK97G5VNN1xtg.roa (hash: UALO1a/mPkQcU15pOqt6Fcj59tU6ObKH2BiRFp0/ZCE=) 11: RdSnPYQL0uYwqHq2ewQyyxK1N-g.roa (hash: Pw3RuljdTsOUFO3NE6KQ5M+CO3FjhV43p+jtCot1epE=) 12: k9kwUTMXRJRJwV5ANx6-vBRPH9g.roa (hash: oh7hI2qshP1WbOOwit0yZUI5/HfQ+4tcS3emdIxxJuc=) 13: lseQebEqUeW4TSi3gnmG5RYKSPg.roa (hash: +pRHTW+s5O1G80eLUfbL/xA6esXdjoYzdv9NcbI+uRM=) 14: nQnAnlPJebG7244qFFDuRF2JQfE.roa (hash: XcMHujCUb0tO9VnBSEqYuGtxUeuSywhoznOkTWsw1a0=) 15: oPHeMyYXr7pqfsWQHQQSFVyn-p8.roa (hash: dAenC7KdhdZ0vvkRMDFimZaeTGp9dXw+hT3vbQvBNB8=) 16: sTKsT3yqB5aV5OZc5oftIMxxBaw.roa (hash: iD0wDrja6LQp1VVVA5RxlkPuofU0N1dcsTrc8hyWVas=) 17: uzjqgeIkSDIv2l0aY4cVREn3y_c.roa (hash: 2GlFHRGoqzueizD/BdGkrX2fb2LG6+CJdLbJIaFQ8js=) 18: vXND_x7skyTvt7ZsSyPIENyMNR4.roa (hash: dbx/+n9QBAyqXHuZB5TrNksmeXPfw8rZibK3OeMiU6Y=) 19: x6v3kOVm35aJLKVKmsFciEubcOo.roa (hash: f5Va+EA30+4q2K7ooRQU4yObo27+gd22mhk4V/OuWYQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 03:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:52:ac:9c:52:c1:e4:e5:e2:51:a7:1e:71:68:a4:92:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Validity Not Before: Nov 22 07:01:04 2024 GMT Not After : Nov 23 07:01:04 2024 GMT Subject: CN=f791840aa4ca816e65ade8441710850961f93fa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:37:03:5f:77:fb:82:b7:5c:db:dc:7d:13:fd: 34:6c:94:10:95:94:c0:25:c3:84:b8:90:39:d4:55: 72:18:be:99:e0:99:1b:b1:a0:4c:27:51:b1:33:a3: ce:33:5a:a2:14:01:1a:47:8f:e0:02:58:d3:93:b8: f8:23:a5:4e:d8:6f:2c:35:39:34:f9:8b:36:c9:8a: 53:02:1c:28:05:67:e8:0e:31:b8:bf:ab:cc:56:5a: 63:e3:f0:6d:da:e7:7e:b2:df:94:03:bf:dc:95:87: 98:1e:c1:e3:d3:89:b0:d6:00:ce:22:c4:54:9a:4c: 24:68:44:ca:24:f0:a8:2f:e5:89:e9:2e:40:26:48: c0:6d:67:27:48:76:ca:a8:9e:97:55:32:65:be:bd: 4d:c4:b8:fd:c3:e3:d6:b8:2b:bb:8d:98:0e:61:32: 24:1c:14:a8:e6:8d:8e:17:39:0c:ad:f4:e6:82:d9: 45:88:4a:23:d2:33:f5:b3:84:fb:00:c5:2e:5f:2f: d6:d7:71:db:5f:9a:11:eb:cb:2b:33:d5:28:77:bb: 8d:15:cd:c7:af:f2:0c:9b:de:13:29:e9:5f:db:d3: 4f:0d:a9:1a:7a:64:67:e1:ed:6b:3e:6d:6e:53:7d: ca:1e:9a:86:41:6f:c9:ea:b1:3a:c1:ac:7c:4a:c0: 6c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:91:84:0A:A4:CA:81:6E:65:AD:E8:44:17:10:85:09:61:F9:3F:A5 X509v3 Authority Key Identifier: keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:ea:1b:10:3f:b9:54:89:50:34:34:39:0d:eb:48:2d:82:61: 40:e2:5a:a6:0d:5e:07:60:4c:83:08:1f:86:e8:e2:b8:0f:57: 5c:6a:9e:1e:be:c8:ed:aa:62:a4:47:2f:d2:c3:45:77:7e:23: c1:56:3f:4c:c2:a5:f0:a8:50:0e:39:cb:a6:6c:37:7f:47:79: 7e:7e:bb:77:c5:98:91:64:cf:66:6c:92:91:b4:f0:13:d5:ee: 3c:65:8c:e7:3a:f3:80:7b:c7:85:40:55:fe:16:c8:50:ee:ef: 62:bb:01:5b:cb:27:8d:bd:2d:d1:4d:d7:88:ba:dd:ee:a8:43: 64:19:a1:84:7e:d1:0f:13:1b:d2:8c:fa:f7:fe:89:00:33:58: c1:ea:0a:68:e0:c3:b6:58:20:31:8f:69:f7:44:66:fd:1b:89: cc:36:81:f7:72:20:d4:61:bd:53:fe:fe:30:0d:72:dd:6a:08: 24:ce:1d:ee:26:dd:9f:3c:6c:7d:ab:5d:9d:52:07:95:b8:3b: 5c:04:9a:0f:46:2c:c6:a3:39:17:62:51:c9:95:2c:3d:d4:53: 98:a2:7e:61:c9:de:98:a6:15:7f:65:28:6a:41:cf:15:80:00: 9f:e1:c3:0d:1b:56:c1:17:e3:b5:07:9e:99:ff:fe:3f:fb:21: ec:e8:74:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNSrJxSweTl4lGnHnFopJKoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0Y2JlNWI0NjIzZGFiNDJmMTVhOTA1MDAyZGI3Y2U2MmU4 NTRmMjkwHhcNMjQxMTIyMDcwMTA0WhcNMjQxMTIzMDcwMTA0WjAzMTEwLwYDVQQD EyhmNzkxODQwYWE0Y2E4MTZlNjVhZGU4NDQxNzEwODUwOTYxZjkzZmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTcDX3f7grdc29x9E/00bJQQlZTA JcOEuJA51FVyGL6Z4JkbsaBMJ1GxM6POM1qiFAEaR4/gAljTk7j4I6VO2G8sNTk0 +Ys2yYpTAhwoBWfoDjG4v6vMVlpj4/Bt2ud+st+UA7/clYeYHsHj04mw1gDOIsRU mkwkaETKJPCoL+WJ6S5AJkjAbWcnSHbKqJ6XVTJlvr1NxLj9w+PWuCu7jZgOYTIk HBSo5o2OFzkMrfTmgtlFiEoj0jP1s4T7AMUuXy/W13HbX5oR68srM9Uod7uNFc3H r/IMm94TKelf29NPDakaemRn4e1rPm1uU33KHpqGQW/J6rE6wax8SsBsbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPeRhAqkyoFuZa3oRBcQhQlh+T+lMB8GA1UdIwQY MBaAFATL5bRiPatC8VqQUALbfOYuhU8pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODct MDU3ODE3YmE5ZmI3LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODctMDU3ODE3YmE5ZmI3 LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWuobED+5 VIlQNDQ5DetILYJhQOJapg1eB2BMgwgfhujiuA9XXGqeHr7I7apipEcv0sNFd34j wVY/TMKl8KhQDjnLpmw3f0d5fn67d8WYkWTPZmySkbTwE9XuPGWM5zrzgHvHhUBV /hbIUO7vYrsBW8snjb0t0U3XiLrd7qhDZBmhhH7RDxMb0oz69/6JADNYweoKaODD tlggMY9p90Rm/RuJzDaB93Ig1GG9U/7+MA1y3WoIJM4d7ibdnzxsfatdnVIHlbg7 XASaD0YsxqM5F2JRyZUsPdRTmKJ+YcnemKYVf2UoakHPFYAAn+HDDRtWwRfjtQee mf/+P/sh7Oh0zQ== -----END CERTIFICATE-----Generated at Fri Nov 22 09:46:56 2024 by rpki-client on console-ams.rpki-client.org