$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft File: 0d4STg-K2059lXbOrjJfZo3SJLE.mft (raw, json) Hash identifier: FIFLGlGjcC1sRYadjkIS/qKGbPEsBVHcek6gjF4SlOQ= Subject key identifier: 2B:40:B5:13:2D:9E:37:1B:F1:95:92:BD:83:41:67:51:21:90:DA:74 Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1 Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1 Certificate serial: 01946E8E5894456966FB4DA52C5120BC2316 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft Manifest number: 0F1F Signing time: Thu 16 Jan 2025 10:00:10 +0000 Manifest this update: Thu 16 Jan 2025 10:00:10 +0000 Manifest next update: Fri 17 Jan 2025 10:00:10 +0000 Files and hashes: 1: 0d4STg-K2059lXbOrjJfZo3SJLE.crl (hash: aPILv5CueLMdR3YdJm8GVRiTzutYw43QJmuPj/8T0kA=) 2: 173-Kv1jDbMWH-4jzzP9yAxk8zA.roa (hash: RAtumuE7sBDLlYGFZheJtE3TDChYxfxrc7dviHDr/Y8=) 3: 21R7B0PZj4S2nfPcu6UWFcUKPgw.roa (hash: qB6ZX383pt5nIhJxyHETDpwIazDIAavubmmD8LzTgMY=) 4: 6caVUV-TGB9bU55p1ya71OWBwvg.roa (hash: c0tRExOUVeBF8+Pq6PhYarD4KHj6+N7f0p/w2jdUK80=) 5: 6sAAZc1jz1qslMVpxUqiAgjyC2E.roa (hash: naNGK/pwlUc73tGrH7huzCScLTyWFIA6YFTLkJJSZNw=) 6: NAlGVYpV8OEmdD2nIMiqn334k0M.roa (hash: XrkbVPgrR7sOnmYGzDR8m+MZN8NJUZRQwjZqOHkM5b8=) 7: dNqRqY6tmtgccI8cx_uJ4tWqiZA.roa (hash: g+K2hBhsL/swaozLRy4ek/JzzpG8kCplNhlD1lsyOeY=) 8: dm3YzK1xAmi2Sk5h8a3Khi5LGPM.roa (hash: p3jFvRhnZ5PWDigF+fLcdkZKduSSZASiccn7Ico+UoY=) 9: g8zmfO2HPSEN8YUDrAkY2r7Nlqw.roa (hash: uAg57JMTD8oD+ghOOtfACvdQoLeAHc5YjQ/CuCFoViY=) 10: qnoXcobTtJZawYccy6q_j_ktEjQ.roa (hash: YgqRq2TALdrM9up57j8hrsz1UPh0HBnD1px4pxGN8rs=) 11: xiZp6eivWb7x_d9W-WC8kwhVWsI.roa (hash: GvxU73beqXLMBxGmaGGngexgQ65uQMfsvmeuizGIl8o=) 12: yv08EH90nRPgnJ4aLVioWHP74iI.roa (hash: wfa+cbtIfXj/VcabZ84otkiskAuSmrS6+55fqOkIL+o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Jan 2025 10:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:6e:8e:58:94:45:69:66:fb:4d:a5:2c:51:20:bc:23:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1 Validity Not Before: Jan 16 10:00:10 2025 GMT Not After : Jan 17 10:00:10 2025 GMT Subject: CN=2b40b5132d9e371bf19592bd834167512190da74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c7:c4:aa:f4:25:50:aa:e4:47:1f:dc:c3:bf: f6:e9:58:c3:78:49:48:19:eb:46:d7:67:12:b5:06: ab:fb:01:82:e0:06:b3:a7:b1:36:14:1a:81:36:4b: bf:d3:0d:19:be:17:da:8a:39:a1:71:ac:d5:d8:fe: 34:bb:04:4e:7b:8d:58:65:c7:82:04:43:e3:48:d9: c0:dd:60:52:5b:fd:e2:a1:67:4b:d4:ce:90:80:ca: e2:59:e4:a6:31:40:75:71:5c:e8:06:23:b3:73:8f: d9:9a:f2:e2:1f:6c:e6:45:c2:7b:87:81:a4:e4:c3: 8a:e7:97:49:ab:81:97:d3:e4:00:57:9d:bc:23:2a: 73:ab:2e:7c:b5:f2:38:31:ed:91:cb:c5:d4:73:7e: cf:ce:34:0f:55:64:1c:17:7b:e5:42:45:7e:60:5b: ae:e7:bf:9e:9c:fb:a3:8b:70:d5:45:42:f5:e2:af: 29:81:6a:10:12:9d:14:25:62:fc:ab:60:74:82:69: cf:3b:8b:3f:06:58:ff:ae:68:29:c5:e9:12:c7:91: 71:71:90:e3:f1:75:f3:63:cd:7b:d1:09:0e:d4:f0: a9:57:e2:27:4c:27:8e:04:81:28:b5:50:6f:a3:e4: 7f:1c:77:32:d2:4a:f3:9e:94:70:ef:57:3f:1e:c5: cb:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:40:B5:13:2D:9E:37:1B:F1:95:92:BD:83:41:67:51:21:90:DA:74 X509v3 Authority Key Identifier: keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:7f:c4:d3:86:07:98:83:ff:84:77:48:53:3d:dc:23:80:ef: 27:fd:a2:10:a8:e0:88:3b:55:9c:5f:b1:7f:d9:06:b5:9c:62: df:3f:75:91:9c:0a:ed:d3:56:3f:ef:14:a6:a7:f6:46:1b:0d: ab:ad:07:51:74:4f:ad:3e:48:6c:f6:dc:05:a5:78:4a:bc:3b: 43:87:3a:ac:fe:34:8f:fc:cb:84:b9:de:35:30:ec:e6:14:e0: 38:75:8e:1a:6f:27:bc:5d:05:7b:51:58:b1:88:f9:ef:8d:9c: 7c:d3:a6:49:8f:81:bd:8d:eb:b7:1d:88:65:bb:86:5b:ac:61: 9a:a6:0f:57:a5:07:fa:19:d8:ac:84:96:ca:12:cf:2f:09:fe: da:2d:8d:5a:67:43:88:60:b1:e6:c5:6b:59:30:3f:f9:10:77: 02:cc:56:dc:3a:79:b4:f2:41:60:37:7d:b0:c2:60:bf:e5:c8: 64:fb:e6:2a:b0:92:09:e6:83:74:1f:6a:cb:a8:46:86:18:4d: b5:14:bf:c3:6d:47:1a:d7:a1:f1:d2:a4:65:85:fd:b3:16:45: 24:57:33:8c:41:b4:84:86:72:e5:34:0a:eb:51:82:9b:5d:c8: 1e:b9:a1:f1:62:df:79:10:6b:b8:bb:5a:cc:32:68:aa:d4:a4: 86:5d:0b:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZRujliURWlm+02lLFEgvCMWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxZGUxMjRlMGY4YWRiNGU3ZDk1NzZjZWFlMzI1ZjY2OGRk MjI0YjEwHhcNMjUwMTE2MTAwMDEwWhcNMjUwMTE3MTAwMDEwWjAzMTEwLwYDVQQD EygyYjQwYjUxMzJkOWUzNzFiZjE5NTkyYmQ4MzQxNjc1MTIxOTBkYTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMfEqvQlUKrkRx/cw7/26VjDeElI GetG12cStQar+wGC4Aazp7E2FBqBNku/0w0ZvhfaijmhcazV2P40uwROe41YZceC BEPjSNnA3WBSW/3ioWdL1M6QgMriWeSmMUB1cVzoBiOzc4/ZmvLiH2zmRcJ7h4Gk 5MOK55dJq4GX0+QAV528Iypzqy58tfI4Me2Ry8XUc37PzjQPVWQcF3vlQkV+YFuu 57+enPuji3DVRUL14q8pgWoQEp0UJWL8q2B0gmnPO4s/Blj/rmgpxekSx5FxcZDj 8XXzY8170QkO1PCpV+InTCeOBIEotVBvo+R/HHcy0krznpRw71c/HsXLrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCtAtRMtnjcb8ZWSvYNBZ1EhkNp0MB8GA1UdIwQY MBaAFNHeEk4PittOfZV2zq4yX2aN0iSxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9hYmUxMzQtMDA5My00NjUyLTkwNTct NGY0YzliMzQzZTkwLzEvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9hYmUxMzQtMDA5My00NjUyLTkwNTctNGY0YzliMzQzZTkw LzEvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIH/E04YH mIP/hHdIUz3cI4DvJ/2iEKjgiDtVnF+xf9kGtZxi3z91kZwK7dNWP+8Upqf2RhsN q60HUXRPrT5IbPbcBaV4Srw7Q4c6rP40j/zLhLneNTDs5hTgOHWOGm8nvF0Fe1FY sYj5742cfNOmSY+BvY3rtx2IZbuGW6xhmqYPV6UH+hnYrISWyhLPLwn+2i2NWmdD iGCx5sVrWTA/+RB3AsxW3Dp5tPJBYDd9sMJgv+XIZPvmKrCSCeaDdB9qy6hGhhhN tRS/w21HGteh8dKkZYX9sxZFJFczjEG0hIZy5TQK61GCm13IHrmh8WLfeRBruLta zDJoqtSkhl0LNw== -----END CERTIFICATE-----Generated at Thu Jan 16 18:58:06 2025 by rpki-client on console-ams.rpki-client.org