$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft File: lgYvXdsY-W14SSs1ONd0XMRxSiY.mft (raw, json) Hash identifier: y9W1rbRhQ4ck/dVEX8G+o5oFfXawkbx4rz3Mm7/5+Gk= Subject key identifier: E1:42:1C:E6:2C:47:1E:61:F7:81:53:63:AD:79:59:97:07:51:AA:C2 Authority key identifier: 96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26 Certificate issuer: /CN=96062f5ddb18f96d78492b3538d7745cc4714a26 Certificate serial: 019352E2E3A00AA73E2068DFB0D5969B8744 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft Manifest number: 0646 Signing time: Fri 22 Nov 2024 08:00:21 +0000 Manifest this update: Fri 22 Nov 2024 08:00:21 +0000 Manifest next update: Sat 23 Nov 2024 08:00:21 +0000 Files and hashes: 1: 5kuLeQ4Ywxa0BJBUjbYsm0Tcm-w.roa (hash: Q8rnCYKFUtbNeYvTmZ7VYv8s1KoxRzhfdxV9I8S/H2A=) 2: 9Q7XL9GjJwQpD4z9CPCptYEY9JM.roa (hash: 5wSRAAUvRyt/QIapW1gNedEJqAGTw9eBEYNiMzVYMAk=) 3: BktgDjkKfmbCZf-oXx9ENCCGWuA.roa (hash: U0Tq9dxFQ/g+ONwPFeRIgMoYNrmpZ+juaiUEZhEl6jI=) 4: SRQlJnqs_NWkVL5AV8EjEe8F_bs.roa (hash: nf8gZNNxLEFH7IILBZCwRL47ri37i0cYwvQCunSkjQA=) 5: XIB3xR7_mkWl5MP9D9lYrT44G60.roa (hash: xdDaeDJMkhasEA/4MGQFrGgkpY8bX0zp7M5LGGK/uD0=) 6: Y5GGkwcKhGJF1lCIrKcdAW6sqv4.roa (hash: RetxX4S+QsNLnF9SbJfiGrQdWvGjZ4osX9OeJuimA2E=) 7: YAmy0iqh1Ek1zMHipotgF_eX_5c.roa (hash: MffuGg8Ug5wBarMpA0XZVpCMLkICZSpVd4IIW9uem/g=) 8: ZW0HJEzkgHdPvVafP8hTXXITydk.roa (hash: TS57gHooW6S6nlk6HVEY8Yc747W78NYKRdB3ataxVGE=) 9: biPdCcOup6pAhgvAz8-wcX0kbg8.roa (hash: Hb02crWFbm9DylMXW4slMkyjyuhsGVV73vpg5wQs0uA=) 10: gePIK2-VbGIo26x6domZFEVnF2w.roa (hash: UBhLzus5EcSud+9dBZHiyhW/YXKebv6Qx4xzFh52UQY=) 11: lgYvXdsY-W14SSs1ONd0XMRxSiY.crl (hash: 3pehMuy7ZhM5rtX5b1dVtSs9VggUT3H/B6zRSmpPUZ4=) 12: pLWlUaYmWn78k2AVGWqTVrrmC3s.roa (hash: j3F9yFNGX+0czZiLr8uqRivrZWTa8bzOwoUQCFVqN4E=) 13: vERC82ycom8_DPWGZU3g78Nyutg.roa (hash: kLqQ6Zdw2AJBlowYph7nntMBhqHkIwHH/HmBpy8vk8k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 03:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:52:e2:e3:a0:0a:a7:3e:20:68:df:b0:d5:96:9b:87:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96062f5ddb18f96d78492b3538d7745cc4714a26 Validity Not Before: Nov 22 08:00:21 2024 GMT Not After : Nov 23 08:00:21 2024 GMT Subject: CN=e1421ce62c471e61f7815363ad7959970751aac2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c6:69:d2:e6:ef:d6:f5:06:ab:45:bc:fb:34: f4:85:07:b3:a9:6d:e9:ab:10:6b:37:fe:f9:34:9d: 65:e0:a0:fd:b6:09:ed:94:af:3c:0d:fd:b9:40:53: 8d:4f:91:04:e7:ed:56:12:3e:d6:df:94:05:a6:92: 36:07:5f:00:67:a2:15:82:4c:7f:8a:45:d2:6f:99: 65:b1:08:62:b9:5f:52:a2:35:c5:b3:00:aa:c7:d4: ec:28:31:5a:09:83:b6:5b:07:1b:cc:3c:bf:5a:77: 3d:6a:bb:76:75:62:95:f8:9c:a2:41:0e:52:61:01: fe:60:77:71:c7:f5:d4:f6:6d:ec:55:47:94:ef:db: 1d:7a:6b:d9:b8:e5:51:23:f0:07:16:54:1e:d0:2a: 21:b9:f0:8f:cb:53:39:36:9b:6f:98:ef:68:28:50: 2a:41:a6:61:85:82:93:48:09:e2:ea:b9:35:60:3b: 71:76:03:c0:7e:1c:5e:16:f6:47:62:3b:d7:31:38: 8b:8b:85:4d:e0:09:49:9c:90:a1:36:4d:8a:9a:65: 67:a5:95:2f:33:dc:52:38:40:63:b7:c4:4a:e2:93: 60:67:12:f5:dd:c3:8a:77:85:a5:9e:a7:c6:7f:6b: a3:8c:2a:55:b6:62:21:eb:cb:c6:40:01:87:c9:54: b2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:42:1C:E6:2C:47:1E:61:F7:81:53:63:AD:79:59:97:07:51:AA:C2 X509v3 Authority Key Identifier: keyid:96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:8d:04:55:f6:d2:4a:6c:1a:bd:d2:ec:cf:76:61:8a:d2:2f: 1b:e8:ff:bb:2c:e4:1c:b7:8c:52:db:c4:01:30:cd:6b:39:ea: 4c:bf:fc:f5:f4:aa:85:b7:e8:a8:27:9c:67:82:43:b2:13:c8: 8c:4f:0f:a3:fd:39:c3:4b:80:27:df:ae:6a:c9:8a:e4:d1:89: c8:6b:94:a8:2b:90:b8:35:5b:a3:e0:62:a4:87:10:65:c4:78: 16:34:c1:49:ab:11:06:7f:12:0d:40:aa:ed:63:b0:f1:0b:17: e7:2b:52:fa:ce:92:85:f5:14:94:06:32:80:3b:37:ed:99:4e: e5:c0:6f:ea:de:81:83:5a:2c:19:67:5c:5c:35:0c:8f:5f:fe: 62:bb:8f:90:5b:4d:a8:81:f8:01:88:21:96:4f:d8:53:e5:0a: 05:c9:5e:61:78:bc:82:3d:31:40:4f:ea:60:d8:73:bf:85:3d: 5f:15:1b:1c:6e:e0:b1:4c:dd:ee:7f:5b:9f:a8:0c:54:74:86: 9e:bc:f5:55:7b:d8:9b:dc:fa:f5:40:aa:c3:eb:27:d7:ac:96: c3:e1:74:3a:c8:9c:de:3c:f7:9c:8d:11:e1:82:bc:14:f8:4a: 19:d8:54:be:72:1f:31:45:7c:71:f7:ae:6b:c9:1b:13:fc:9b: 82:21:d0:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNS4uOgCqc+IGjfsNWWm4dEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MDYyZjVkZGIxOGY5NmQ3ODQ5MmIzNTM4ZDc3NDVjYzQ3 MTRhMjYwHhcNMjQxMTIyMDgwMDIxWhcNMjQxMTIzMDgwMDIxWjAzMTEwLwYDVQQD EyhlMTQyMWNlNjJjNDcxZTYxZjc4MTUzNjNhZDc5NTk5NzA3NTFhYWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4sZp0ubv1vUGq0W8+zT0hQezqW3p qxBrN/75NJ1l4KD9tgntlK88Df25QFONT5EE5+1WEj7W35QFppI2B18AZ6IVgkx/ ikXSb5llsQhiuV9SojXFswCqx9TsKDFaCYO2WwcbzDy/Wnc9art2dWKV+JyiQQ5S YQH+YHdxx/XU9m3sVUeU79sdemvZuOVRI/AHFlQe0CohufCPy1M5NptvmO9oKFAq QaZhhYKTSAni6rk1YDtxdgPAfhxeFvZHYjvXMTiLi4VN4AlJnJChNk2KmmVnpZUv M9xSOEBjt8RK4pNgZxL13cOKd4WlnqfGf2ujjCpVtmIh68vGQAGHyVSyRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOFCHOYsRx5h94FTY615WZcHUarCMB8GA1UdIwQY MBaAFJYGL13bGPlteEkrNTjXdFzEcUomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGdZdlhkc1ktVzE0U1NzMU9OZDBYTVJ4U2lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9lMDU5NzUtZGE4ZS00NjBiLTllYmIt M2ZjYjVmM2YzYzU5LzEvbGdZdlhkc1ktVzE0U1NzMU9OZDBYTVJ4U2lZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9lMDU5NzUtZGE4ZS00NjBiLTllYmItM2ZjYjVmM2YzYzU5 LzEvbGdZdlhkc1ktVzE0U1NzMU9OZDBYTVJ4U2lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARY0EVfbS SmwavdLsz3ZhitIvG+j/uyzkHLeMUtvEATDNaznqTL/89fSqhbfoqCecZ4JDshPI jE8Po/05w0uAJ9+uasmK5NGJyGuUqCuQuDVbo+BipIcQZcR4FjTBSasRBn8SDUCq 7WOw8QsX5ytS+s6ShfUUlAYygDs37ZlO5cBv6t6Bg1osGWdcXDUMj1/+YruPkFtN qIH4AYghlk/YU+UKBcleYXi8gj0xQE/qYNhzv4U9XxUbHG7gsUzd7n9bn6gMVHSG nrz1VXvYm9z69UCqw+sn16yWw+F0Osic3jz3nI0R4YK8FPhKGdhUvnIfMUV8cfeu a8kbE/ybgiHQhA== -----END CERTIFICATE-----Generated at Fri Nov 22 09:47:19 2024 by rpki-client on console-ams.rpki-client.org