$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft File: DXIuRROjlnjYqyOy1kl3U0BRjLk.mft (raw, json) Hash identifier: 4oYfbxBQcSzMs0TaZTIPHe9l4w0herKqYtwv8wATgn4= Subject key identifier: DE:CD:11:42:11:7D:03:D6:E5:2C:01:77:63:45:17:48:82:EC:86:B6 Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9 Certificate serial: 01947E389155B911D45C1C5DF53F4BFE840B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft Manifest number: 0A6C Signing time: Sun 19 Jan 2025 11:00:23 +0000 Manifest this update: Sun 19 Jan 2025 11:00:23 +0000 Manifest next update: Mon 20 Jan 2025 11:00:23 +0000 Files and hashes: 1: 1-SuCdrSYVaSGRDl6MjmQoNYKCRc.roa (hash: PIhrxODAFtgG3dfsYaLperI2OIRUWbYJVbFGMFnLxuI=) 2: 249gTQMSJSpG-EMBCDNkFZo6KfY.roa (hash: FM2w6rRpmRNy4pkvq/ltjXR9cpyAy1qnATg+Or8+D7c=) 3: 6TauPTrrYu2XtkFKKlQ2u7VDDno.roa (hash: n6010YujWfquA7qOkV2BHT4bCszagBkp571M6qN6nZc=) 4: 790iVL4e4fee91oD970D0-w9Sb4.roa (hash: BsO1v80PoevYr29+BJ5jHFvk2e9qzzdheuF5aYuPG6s=) 5: 8iIYolCxGRxz8TNi8KfyB6eNhzo.roa (hash: qCapP64kycDhbf/1rZ0laRWKXpyjDof/0V3kjvsJoMk=) 6: A8kvmU8mAkaJxiKEyTXgwsEm7XM.roa (hash: D8+3fx4gYQaNHQapnvOFft5PFT5iwq9PguobVpgPBm8=) 7: Csnk3a3ep1Kuhq_uYIPFt9oEx54.roa (hash: pQI4ia2pZhXHZ1e6yhDMKY3ec6GDJA8BN0tKEQGAjHE=) 8: DXIuRROjlnjYqyOy1kl3U0BRjLk.crl (hash: XFbIa68o7DwqnJIMWNZiDZJ8PxSrBaMAQ2LCoXyFons=) 9: DqIwBz09GVkZK_gZ5I10qjJf_ys.roa (hash: c0iRzQrUBzV64ZvugD7r5Tge4OFGYDIQjIm+fC8puK4=) 10: ECqrLMrFfD90pszf7knR2cpQyh0.roa (hash: Q3DUlwJygjUeoWaRH5s8fB7GS7FOmUc/yzv3gDOfLYQ=) 11: GDKqvDV3tg8euG7iA-40pDu81dg.roa (hash: DIPUgYEMtsUW2SsY0gpVq2Amy3DeiC7nGWJEdov3OAc=) 12: Gv5HrL2f33_QVcVgXo5CsM0Vaho.roa (hash: LEWORZbggYg+nZNcCLA8VUA/7SebS6hs8+TL4nNmjcg=) 13: IFZfMutJXaUH01Jg6XYISidfz2I.roa (hash: azYJhLJf2wdhPjZ5DVuYcZQAAok6CUBDcnPLNas2maw=) 14: TPKhJ6iPLAZIsgGhlDM9QxRsHPk.roa (hash: z0IRo5PxSUnSd8wOnL5dq3lEYmycGU7B265DtPJnaBE=) 15: Tfg3jqM-y4B9_0O830RjMgiNMwI.roa (hash: KhUTb4LC7xdbTloQRmriQdzEeWTgLwDx3/uTjpbvQFU=) 16: V2Ei32pldnvEfX7-MOV98CBbvqs.roa (hash: pkd2u2AiMIDj1vMjt09XptY7JsRn5R0rojUcZBXfHoY=) 17: aw9onhWyE0X_G2dqIAr21daa77Y.roa (hash: x+QX04yDVmZf+2LdMkeQARN3ELWJN+aDlPdYgim8Xno=) 18: bunFK9av8RfknnXIgouVNVSj7lg.roa (hash: oaHs1Qr4+X8d39BaWoE1d0HAMovpW6wQdYQeMQErL34=) 19: dYTB5uFARs2s4EvY2l6JyFsQr8s.roa (hash: GAn94IfRAoXkQ0mUCSIrD+5VLnBxIQTLNyCWkmlcU4o=) 20: e8JWpozjp2CQVeh0fKR2of1rmnU.roa (hash: cncyccKFGSSxuzQyK2QlQLGesHp6P7TKw/dYGMrOaLM=) 21: hmab6__F2XjPI4pz-S7ZDMsGfQ8.roa (hash: VKioes1rRTD3dBB9IXmj0I4YiJbzOl3bkffS8nKiVMw=) 22: kK9iFD86F2TbKF1-MK7LXjXrS2w.roa (hash: qP4mb8DT5u0ulqTppD9Fz+HOfaj4p6ZrC8wxXFNUrXI=) 23: lgBmfJ4pdpPhLUFGbohh0OwY1ME.roa (hash: x8hNwusXBAvn6wxypmaX2FEwzDRNl0nacxt9bBpq2Fc=) 24: nEtni_xbFe8uMKn7lNre_DGe-iI.roa (hash: H6QijqDmjL6blsOSOiprWmtN5FAUxeo34Tfbyral+Co=) 25: snhgZyKIl81SdGEMa8SNezN2B-8.roa (hash: q+Juob+GqX3pjwEyROSsOIkH/g4f1ysryJqAil4DeqU=) 26: t8bQyCaG5BN-N4F3Nx30KH5gFqU.roa (hash: moTeQKGuQJjtOuH9bwQLJXR1uXdXDyAyV/k+LcsmXkU=) 27: uHW8s4So2LMq5MxaMXPpI-lhJfA.roa (hash: MnMGvcSAZicv0Yn3QAwx2n0+uUqytuFdlE7u+YN2W7s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Jan 2025 05:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:7e:38:91:55:b9:11:d4:5c:1c:5d:f5:3f:4b:fe:84:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9 Validity Not Before: Jan 19 11:00:23 2025 GMT Not After : Jan 20 11:00:23 2025 GMT Subject: CN=decd1142117d03d6e52c01776345174882ec86b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d1:5c:6b:21:8a:81:8e:4d:f3:87:09:fc:77: 89:0a:70:3d:19:96:86:d1:f5:16:4c:40:cf:c2:aa: 71:5f:9a:d2:12:8d:1f:8f:f2:80:c5:5f:ea:85:fa: 13:b6:aa:ea:34:c1:3c:74:ab:ee:5b:c7:7c:90:53: 04:1e:2c:da:6c:87:44:cb:4b:68:79:38:cc:bf:83: 69:4e:e1:50:c4:53:80:5b:c7:95:7b:bd:53:40:7d: 3a:34:e6:fc:45:76:eb:68:c4:1c:67:55:ba:3d:cd: 04:2d:48:6d:a7:fd:8a:e5:37:6c:a1:ce:8b:e7:26: 00:0a:1f:13:bc:f4:cd:61:2b:8b:b6:3a:75:12:be: 2b:f3:16:8c:6d:b9:2b:be:06:70:23:81:ff:c2:32: 80:00:dc:c3:0d:9b:06:59:aa:42:be:06:a2:2b:51: 30:4a:fb:03:19:4d:63:5e:e1:10:bb:d8:87:9b:ba: bc:50:93:c7:5a:45:fe:ad:bc:c9:a9:47:75:73:77: 4d:0b:97:9f:ba:85:bc:15:63:9e:8f:3a:3d:66:d0: 50:a9:3b:9d:4a:c4:d6:ec:3f:fa:1d:79:3b:59:64: 46:2b:5c:ac:0d:93:d0:bb:a2:59:3a:3f:17:35:7f: 45:01:f1:f8:24:76:04:90:ff:e4:f8:cc:24:79:b6: 1f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:CD:11:42:11:7D:03:D6:E5:2C:01:77:63:45:17:48:82:EC:86:B6 X509v3 Authority Key Identifier: keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:fd:4b:29:9b:55:e2:f5:e5:ce:fd:e8:bb:05:ce:93:c1:6c: ae:6e:17:1c:f6:88:cf:7b:01:f6:86:3e:4e:c4:c1:4b:c2:5c: d5:54:87:d3:c2:e2:71:3d:a7:86:23:0a:bc:3b:a7:49:30:c4: b3:74:dd:f0:4a:97:da:92:11:45:96:08:4b:d0:6c:56:34:1a: f6:1d:a4:9e:15:a6:fe:0b:be:94:82:e2:08:9f:5b:a4:63:cd: a6:2c:35:72:51:71:f2:64:fc:20:4e:9d:04:44:77:3e:24:4e: f0:f1:78:6c:46:f5:a6:9e:1c:78:92:09:6d:4c:85:00:1e:19: 0b:bc:a6:d2:a0:58:97:dd:d3:18:4b:bf:39:a7:50:c7:97:0e: 19:f8:8a:6e:8b:57:ff:2e:0d:85:22:76:24:65:08:69:ed:7a: 2b:1f:cb:c5:ee:f8:80:c3:0c:72:53:48:b1:c4:e3:b3:11:27: f1:42:d2:b9:c4:2b:15:17:bd:63:a5:7d:42:ae:09:4e:49:7e: c5:71:3d:59:18:88:25:a1:9e:8f:89:e5:cf:f5:33:70:3f:a4: 75:2f:8f:81:00:e0:dc:90:cf:9c:fd:54:bc:39:71:1e:f9:11: 23:9a:1e:fd:a1:a2:a4:54:5f:ad:72:0c:45:70:03:d5:66:43: 5c:26:c6:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZR+OJFVuRHUXBxd9T9L/oQLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1 MThjYjkwHhcNMjUwMTE5MTEwMDIzWhcNMjUwMTIwMTEwMDIzWjAzMTEwLwYDVQQD EyhkZWNkMTE0MjExN2QwM2Q2ZTUyYzAxNzc2MzQ1MTc0ODgyZWM4NmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9FcayGKgY5N84cJ/HeJCnA9GZaG 0fUWTEDPwqpxX5rSEo0fj/KAxV/qhfoTtqrqNME8dKvuW8d8kFMEHizabIdEy0to eTjMv4NpTuFQxFOAW8eVe71TQH06NOb8RXbraMQcZ1W6Pc0ELUhtp/2K5Tdsoc6L 5yYACh8TvPTNYSuLtjp1Er4r8xaMbbkrvgZwI4H/wjKAANzDDZsGWapCvgaiK1Ew SvsDGU1jXuEQu9iHm7q8UJPHWkX+rbzJqUd1c3dNC5efuoW8FWOejzo9ZtBQqTud SsTW7D/6HXk7WWRGK1ysDZPQu6JZOj8XNX9FAfH4JHYEkP/k+MwkebYfpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN7NEUIRfQPW5SwBd2NFF0iC7Ia2MB8GA1UdIwQY MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt MzQyNWIxMjVlYWE3LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3 LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAff1LKZtV 4vXlzv3ouwXOk8Fsrm4XHPaIz3sB9oY+TsTBS8Jc1VSH08LicT2nhiMKvDunSTDE s3Td8EqX2pIRRZYIS9BsVjQa9h2knhWm/gu+lILiCJ9bpGPNpiw1clFx8mT8IE6d BER3PiRO8PF4bEb1pp4ceJIJbUyFAB4ZC7ym0qBYl93TGEu/OadQx5cOGfiKbotX /y4NhSJ2JGUIae16Kx/Lxe74gMMMclNIscTjsxEn8ULSucQrFRe9Y6V9Qq4JTkl+ xXE9WRiIJaGej4nlz/UzcD+kdS+PgQDg3JDPnP1UvDlxHvkRI5oe/aGipFRfrXIM RXAD1WZDXCbGGA== -----END CERTIFICATE-----Generated at Sun Jan 19 12:57:18 2025 by rpki-client on console-fra.rpki-client.org