$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft File: up0w5gNb6Lg4YGHycUgccH4Ezis.mft (raw, json) Hash identifier: ctNOu/zL7y9JteKwNU5jLXJhC7+wBRWME3luE4S9byw= Subject key identifier: 54:1F:83:42:BA:0D:F1:C7:1E:19:58:B9:38:83:01:2E:6F:E8:A1:AF Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b Certificate serial: 019366D7B141B2875B3B28AD23A9CD3A7074 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft Manifest number: 1387 Signing time: Tue 26 Nov 2024 05:00:31 +0000 Manifest this update: Tue 26 Nov 2024 05:00:31 +0000 Manifest next update: Wed 27 Nov 2024 05:00:31 +0000 Files and hashes: 1: 3p97eb_nPKQl9h75_z6MeKVSS_4.roa (hash: 2fmYI0EbsOrzqb8wH8j7+Lg8HrIgluI9+lMApId/k8s=) 2: 77NO6tLNxkae4veGuwNzZGue28E.roa (hash: XywBxLSCNRuvCGQoMpHjh0m7Hml44UnaDQnBtQ5YIFQ=) 3: B_-7ho9QuVyLg_U_gPqfl4swqLI.roa (hash: oF/SVAgVz0ypcxed7zAvV4COoebiFc7NSDQbhLkK+dE=) 4: CMr7HCXowgMN2oafvNHg18V9rCA.roa (hash: dh5h5bOobWCbv/erFPmMLb9imN6QlShX80pvBM9XSqA=) 5: EKSHjsIN4Zne4gJT5_o_zMlnmu0.roa (hash: KFjZk5tIDRwiJFWxHdumzcBOJhVM7Y0ZQLmqGbNfBYM=) 6: EwMF18KczrR_QTpFk4HfQW7t5Xo.roa (hash: 2LkFQ+qfaqIkMJV7dD0N/27W8aZUtVqLrCIwoujFJXo=) 7: GtLY_pVhwlWDavIVEM6RpYEN4Xs.roa (hash: 0Dhnw+/t6GwxU7dK+dfW8qZLKBJfXJGn83iUQrNAFSA=) 8: Gx5MrDTFQnFJCEodloN8XhqEmCs.roa (hash: 4qtH+Wm1kxIi57fxB/08xFabLrSHLISL33Yz6Ie9MDI=) 9: MEFuouRdyYupys37C42vx4trO4Q.roa (hash: HFej5hL/DtUaosiZ3ff5LDeF0Rn58lz8+2N9WU82ryk=) 10: Oh03zzoh7tKCMDV6Qwsc0LRWOn0.roa (hash: v9IGKJqPGKg3RRDAeGgfqgetanLx8AEXETIe45kq0O8=) 11: SKEazOGjemu1hh5OYwsMHCwKrzA.roa (hash: aP8vHN4J83z89uZdd/4mFjI+k+MJSZJEYCP5LFdGl2c=) 12: TSFhW3P2sk4rq8BMclJGfwcfvpU.roa (hash: AtNeNLgwio5anQrCdGYK4mrOHeMW5e4pL5qWZP84knI=) 13: Ud5hZdkp6jln1CdMXX_bG2UcvCI.roa (hash: ZQHEw4Jqd7ul0veKX4uI9N1BqFb7Mb6yKzqiIIQYboE=) 14: VE6xRYrSD3hLT9D0Vf5a83jsC3g.roa (hash: X6m/d5We0AAD+aP6gC04dXS/GrqFjSDg6cCo4XtM88E=) 15: WD3Et402oafGKTaAVSrUUri55Ec.roa (hash: PHItFjB1LzCG4+U6Suflg3VH1azLkBujkxFuTopYFlQ=) 16: WNxsdPmHEOad17P3ScTB1Tz9uEQ.roa (hash: TckXPIvzhA0HXZ8ALeQ84JuiWM9IdgR9X/FlxaLjKxg=) 17: Z32CAJehgk7rySfiQJAurqsn3YA.roa (hash: NWLrVak/N1nDaRCBSrmr5W2qya1LT5YsaouMRSYw/Kw=) 18: Ziu5g0MY6oFcCgKA3tECb8AnA1Y.roa (hash: qycc6NY4iGabp0/FSRuUPiHeZXM6GBcIVWL32nPvFtE=) 19: a4atPBjnhCc2E-dzbt1gbriagzY.roa (hash: E8Uj4YMwXD5rhFxq6r3p2AuRXycaLLjoDHcCd49Gi34=) 20: b5q-f9b3DiX-MSurPvw9yfSHAKg.roa (hash: gnTJ4PhndQ/+9J8sfdVVMmcEfN79WyR6ewKak/OCohc=) 21: hB_bF40OQ1fP_dJH2lPdGvhynUA.roa (hash: uO5FaYJD3D1BELoM9lwklnA7+EozF2DRcG4Xt22yHkc=) 22: iNI2ujDjs0N9CZ-xmu7XALxNWfQ.roa (hash: yQiGRQ+Nu9qUMG/pK08kul6xp4GGqElCgVaHihMzmVs=) 23: su4cojcfmYwGObALQAkATJFzD7E.roa (hash: IQR2LiC9AIImTz098PmNSWxI3X1ySsp4SyNlm0G9GzQ=) 24: uNFnmjiLLIPmjwVmN5svj-8R8FI.roa (hash: u4otIOPtrkKYaKTQc+kmUvGx9PzRNPTbne2QoOIrFNk=) 25: up0w5gNb6Lg4YGHycUgccH4Ezis.crl (hash: y317bKoyzsscWlYTSX9OqF+qjKDF2cUt3L2/dtMgtss=) 26: wQqKG7cVGs2CJDAxdiiBYl3tY70.roa (hash: 0Mmiq8tYwkVgvvfzlXAO3GS8f4dfqFX/hq90ajVnLvE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 26 Nov 2024 23:23:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:66:d7:b1:41:b2:87:5b:3b:28:ad:23:a9:cd:3a:70:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b Validity Not Before: Nov 26 05:00:31 2024 GMT Not After : Nov 27 05:00:31 2024 GMT Subject: CN=541f8342ba0df1c71e1958b93883012e6fe8a1af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:a2:a0:4c:0c:1a:2a:03:ab:dd:26:50:6e:9f: fb:e7:4c:2c:41:7b:2e:a7:a3:b1:8d:34:09:ff:10: 23:7d:ae:a0:b0:70:0e:61:1a:c0:2b:ef:a3:26:f0: 17:16:25:5c:3a:6f:94:65:11:5a:87:de:9c:bb:b4: 0c:1b:d5:86:a6:14:7c:03:e5:e4:8e:6c:52:10:33: cf:b6:b8:e6:94:e7:71:8c:a1:6b:07:3f:d3:78:48: 46:4d:bc:0a:09:47:19:fa:fc:1e:91:5c:14:1d:3a: 1c:b3:55:19:9c:e8:81:f7:ab:b3:a5:87:0b:53:c3: 72:04:c3:b9:24:75:25:4b:0e:46:f3:b6:a4:e6:16: e6:ec:a8:cf:9d:47:6b:be:90:68:90:c1:d3:ff:24: 84:f8:82:49:77:8d:31:02:6d:cb:95:84:22:5c:19: 34:da:2c:9b:8a:63:e2:2e:18:03:40:b7:5f:06:54: f4:00:d9:0e:6c:11:03:47:99:ce:73:fb:8f:d7:68: d1:e4:0d:91:59:81:ea:6e:08:a3:41:2b:d6:36:46: 83:1d:23:68:a2:92:dd:18:ae:27:8f:24:33:a5:47: f2:bf:fa:29:93:42:94:46:f8:14:de:9c:65:d3:b0: 89:a9:42:20:7e:50:6b:f7:0d:c1:9a:0e:b6:77:06: 69:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:1F:83:42:BA:0D:F1:C7:1E:19:58:B9:38:83:01:2E:6F:E8:A1:AF X509v3 Authority Key Identifier: keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:66:2a:25:16:c6:53:7b:95:e2:bc:09:d0:50:03:9b:87:f2: f4:9e:52:f3:e4:f6:32:60:ff:31:f7:df:fb:55:b4:47:22:6b: 10:0c:e7:b2:f0:36:09:dc:ed:12:e5:68:72:2b:de:59:5f:51: 29:c5:d7:97:2f:1c:39:fe:05:15:c5:fd:79:bb:76:b9:40:c3: c6:e2:77:51:ba:54:51:ab:9d:b9:e4:c0:2c:2b:1b:37:f0:5b: 3a:ef:a2:c8:13:f2:52:b7:3d:95:24:4c:a7:0b:42:95:f6:5f: e5:6e:7c:e5:dc:a5:06:45:09:2d:f6:68:07:91:63:f2:e6:5c: 8b:c8:c6:20:a3:8c:b0:75:8e:c9:b7:b3:db:8f:2d:19:71:7d: 52:99:48:6e:7c:ec:63:dc:08:56:ee:ba:db:81:35:79:2c:cb: 33:78:21:04:65:a6:2c:6e:05:0e:b3:75:72:9d:43:39:01:b6: 29:67:33:54:2d:c1:8c:c1:d9:ef:fe:b7:c5:2b:ca:da:70:67: 30:03:81:e9:d4:ef:c4:fa:a6:fb:59:28:55:11:06:ea:14:e1: f4:18:24:26:ac:4a:b3:f1:eb:0d:73:ab:64:c6:2f:b2:9b:c9: ee:e9:dc:b1:7f:93:3a:fe:51:85:bf:2c:75:75:18:e2:04:18: f7:d5:15:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNm17FBsodbOyitI6nNOnB0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhOWQzMGU2MDM1YmU4YjgzODYwNjFmMjcxNDgxYzcwN2Uw NGNlMmIwHhcNMjQxMTI2MDUwMDMxWhcNMjQxMTI3MDUwMDMxWjAzMTEwLwYDVQQD Eyg1NDFmODM0MmJhMGRmMWM3MWUxOTU4YjkzODgzMDEyZTZmZThhMWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8aKgTAwaKgOr3SZQbp/750wsQXsu p6OxjTQJ/xAjfa6gsHAOYRrAK++jJvAXFiVcOm+UZRFah96cu7QMG9WGphR8A+Xk jmxSEDPPtrjmlOdxjKFrBz/TeEhGTbwKCUcZ+vwekVwUHTocs1UZnOiB96uzpYcL U8NyBMO5JHUlSw5G87ak5hbm7KjPnUdrvpBokMHT/ySE+IJJd40xAm3LlYQiXBk0 2iybimPiLhgDQLdfBlT0ANkObBEDR5nOc/uP12jR5A2RWYHqbgijQSvWNkaDHSNo opLdGK4njyQzpUfyv/opk0KURvgU3pxl07CJqUIgflBr9w3Bmg62dwZpeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFQfg0K6DfHHHhlYuTiDAS5v6KGvMB8GA1UdIwQY MBaAFLqdMOYDW+i4OGBh8nFIHHB+BM4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgt NWQ1ODRmYmM1ZDI3LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgtNWQ1ODRmYmM1ZDI3 LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANmYqJRbG U3uV4rwJ0FADm4fy9J5S8+T2MmD/Mfff+1W0RyJrEAznsvA2CdztEuVociveWV9R KcXXly8cOf4FFcX9ebt2uUDDxuJ3UbpUUaudueTALCsbN/BbOu+iyBPyUrc9lSRM pwtClfZf5W585dylBkUJLfZoB5Fj8uZci8jGIKOMsHWOybez248tGXF9UplIbnzs Y9wIVu6624E1eSzLM3ghBGWmLG4FDrN1cp1DOQG2KWczVC3BjMHZ7/63xSvK2nBn MAOB6dTvxPqm+1koVREG6hTh9BgkJqxKs/HrDXOrZMYvspvJ7uncsX+TOv5Rhb8s dXUY4gQY99UVOw== -----END CERTIFICATE-----Generated at Tue Nov 26 07:09:25 2024 by rpki-client on console-ams.rpki-client.org