$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft File: bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft (raw, json) Hash identifier: HIjWCjiVPCKfMDSYEHnJlWnKztlQULB+nqIbrPKMMUY= Subject key identifier: 65:96:5E:54:B4:D9:3F:02:9A:EB:9D:AF:AA:37:24:35:59:D3:4A:73 Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35 Certificate issuer: /CN=6d088cef28e02af7d00f297816c55f8e3c43d535 Certificate serial: 019352E2C226A039C5D4CFC58D114CABFEE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft Manifest number: 0670 Signing time: Fri 22 Nov 2024 08:00:12 +0000 Manifest this update: Fri 22 Nov 2024 08:00:12 +0000 Manifest next update: Sat 23 Nov 2024 08:00:12 +0000 Files and hashes: 1: 8zxjVJpPTSMQwI1H7bCVpwSIp8M.roa (hash: cOdTDBa/kBlmMDXHZ+W6sVW768XvZaP7aXtlN7aVZbo=) 2: AcLlbTcmLoFi_Wo5PCFu0v3MtDU.roa (hash: kY2icN5p5PkGisykNZMB5FeNidJWWGCG2m4wEhRQeGo=) 3: LgNFPhnWy6Vt3xZ-iuXMi1B8QKg.roa (hash: Y9scOPtRX9c+caOQLbgzvfJmUjQRiKdHNdVZR9KAGQY=) 4: PYHeIla2qpaw9QjqJpHqayh-wa0.roa (hash: mXN73ITLODSvMh2ujjMchZdonu/TcmPR3P50YgM8XXE=) 5: TCwEH5vEBSfz50ADgl45cmj8r8Q.roa (hash: EW48+ehFgAgOCvKw10Jtnwko9OFNJ8xGxkZ9GUHbcf4=) 6: WYKizgGcoUCdlTOYIVFfr8oO6lw.roa (hash: ESlsm2IYQJpi7Qs72+wrqrRHh6jzZNuhitMZQ8Yhg1o=) 7: bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl (hash: bDxM7Bj79zU4RIbniN4HlFu08lDqV8AevE2usFDH0As=) 8: blfh47uO_n08BJoI1YRg2PcFskA.roa (hash: mggOqhtTrGuqgqsgjmPk7tiH4MZV6WdAewE1C5N0DFY=) 9: hvFegFTTNohHULpFosHs8dLDb8M.roa (hash: PZgTje9yDageCvCNHAAmGgpxQGopHzcz1EI9h9nGKi0=) 10: jk4X6JPtWVp1aG8p5Kwqrbr8Elk.roa (hash: 8s1rXWJTo+yGs8UOpSbHhnJf4g/d+GUFzfg+z/bQrx0=) 11: k2zhLzk45XAnY3QUNxb498qcyyU.roa (hash: /beoQ3YwWyJ6KWsk4Y7/qr/gGew299W9WCx++S7EFMw=) 12: kdirFnVZVoElu1y7Yw-zrN35Xso.roa (hash: ZUbd6lfECVdXELUR9rKzGeUiE94Vj68BChM/vHNEiGU=) 13: qiOMFPkOMmRpMrcttqK-Vdsi2eE.roa (hash: vA4MKeiXjgxGL3Bw8sxY50vbOm/YzcweyTJCpT5Iou8=) 14: vZ5QVu5-r3zXVUWUc79AzKzJ-M0.roa (hash: BlnXH0HsjaSrf0ef+5Fspw1sC2Z5kuVCIkbJiq0EYGo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 03:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:52:e2:c2:26:a0:39:c5:d4:cf:c5:8d:11:4c:ab:fe:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535 Validity Not Before: Nov 22 08:00:12 2024 GMT Not After : Nov 23 08:00:12 2024 GMT Subject: CN=65965e54b4d93f029aeb9dafaa37243559d34a73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b7:c5:a2:c5:ab:41:e8:9c:4f:d3:18:4c:e3: de:24:75:89:28:d8:3b:bc:fd:fa:52:c9:b4:a3:9f: be:19:a5:5a:5d:69:fc:03:59:01:4c:e4:11:6c:3b: 08:93:b7:4a:49:d9:a6:b4:10:37:52:93:d6:9d:bf: 4c:af:44:10:34:a3:5c:57:be:d8:aa:fb:3c:ad:66: 4a:1e:5f:54:49:db:03:83:9f:8d:1e:cf:28:d6:ea: 43:f3:d9:df:41:d4:f7:18:37:d5:f0:fb:79:b8:26: e6:5c:a7:2e:c9:87:28:4d:6a:bf:3c:89:cc:09:2c: 16:86:db:a9:a4:91:8c:1f:d6:53:6d:a1:d9:dd:be: 1a:3e:5f:9f:44:1d:54:24:60:56:9d:f0:b5:f8:be: 87:32:2c:2b:10:8c:4b:19:4a:67:54:70:85:23:c6: 1f:68:39:11:c1:4b:f4:94:bf:95:ef:1c:d2:c3:c3: 72:93:04:89:db:d7:e9:8d:bd:c6:6a:bf:ce:b2:0b: 29:55:0c:34:f0:51:b5:d7:0a:af:d4:e4:71:71:48: c7:a6:9a:22:d9:9d:78:11:31:30:f5:15:0d:a6:c1: 25:4d:73:10:9e:57:cd:a2:cc:49:46:16:c4:2d:d6: da:a0:46:4a:7b:8a:b9:3e:0a:07:8c:49:59:43:1c: cc:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:96:5E:54:B4:D9:3F:02:9A:EB:9D:AF:AA:37:24:35:59:D3:4A:73 X509v3 Authority Key Identifier: keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:4a:d6:45:a8:bb:7c:2b:2c:95:fd:7c:f0:49:4c:23:8e:3d: 89:bf:46:49:44:56:17:12:e2:43:2f:47:c6:fc:6e:5e:8d:62: 45:3a:64:ad:a7:e3:6a:e3:6d:41:52:52:c7:ac:22:62:d1:0e: d9:c1:cd:d5:c7:c3:5e:b0:b0:ac:70:75:6d:dc:a8:f5:ba:22: b9:f3:e9:b9:92:5a:cc:d7:ca:02:cb:73:00:11:f1:f3:30:23: f0:a5:64:a3:e9:b9:5a:99:ac:39:35:e4:68:03:cb:4b:04:d8: 51:ca:22:82:37:44:7d:75:0f:4c:8a:fa:16:27:b4:fb:62:5d: 1d:d4:25:9f:02:40:a4:2c:80:fb:d2:69:28:44:09:84:ff:e9: cb:50:dd:17:b3:81:d8:14:8b:ef:31:f8:34:a3:e5:98:12:70: 3e:19:1d:09:2e:60:6d:9d:f0:39:e8:19:13:a1:3a:d8:fb:fd: b0:ce:80:51:48:3d:9c:c3:96:0c:13:cd:62:68:89:01:0e:b5: 4e:b2:0b:d9:a1:10:05:4e:67:61:9b:cb:92:3a:2e:cb:ca:c7: 2f:55:49:15:e3:0f:0f:01:db:a8:3b:da:40:65:80:1a:45:ee: ad:7a:38:85:f4:45:11:94:56:a7:6a:23:82:ef:6b:9b:ec:9c: 66:c9:c9:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNS4sImoDnF1M/FjRFMq/7gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMDg4Y2VmMjhlMDJhZjdkMDBmMjk3ODE2YzU1ZjhlM2M0 M2Q1MzUwHhcNMjQxMTIyMDgwMDEyWhcNMjQxMTIzMDgwMDEyWjAzMTEwLwYDVQQD Eyg2NTk2NWU1NGI0ZDkzZjAyOWFlYjlkYWZhYTM3MjQzNTU5ZDM0YTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrfFosWrQeicT9MYTOPeJHWJKNg7 vP36Usm0o5++GaVaXWn8A1kBTOQRbDsIk7dKSdmmtBA3UpPWnb9Mr0QQNKNcV77Y qvs8rWZKHl9USdsDg5+NHs8o1upD89nfQdT3GDfV8Pt5uCbmXKcuyYcoTWq/PInM CSwWhtuppJGMH9ZTbaHZ3b4aPl+fRB1UJGBWnfC1+L6HMiwrEIxLGUpnVHCFI8Yf aDkRwUv0lL+V7xzSw8NykwSJ29fpjb3Gar/OsgspVQw08FG11wqv1ORxcUjHppoi 2Z14ETEw9RUNpsElTXMQnlfNosxJRhbELdbaoEZKe4q5PgoHjElZQxzMrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGWWXlS02T8Cmuudr6o3JDVZ00pzMB8GA1UdIwQY MBaAFG0IjO8o4Cr30A8peBbFX448Q9U1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYt ZmVlOGVhZjczYjBkLzEvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYtZmVlOGVhZjczYjBk LzEvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARkrWRai7 fCsslf188ElMI449ib9GSURWFxLiQy9HxvxuXo1iRTpkrafjauNtQVJSx6wiYtEO 2cHN1cfDXrCwrHB1bdyo9boiufPpuZJazNfKAstzABHx8zAj8KVko+m5WpmsOTXk aAPLSwTYUcoigjdEfXUPTIr6Fie0+2JdHdQlnwJApCyA+9JpKEQJhP/py1DdF7OB 2BSL7zH4NKPlmBJwPhkdCS5gbZ3wOegZE6E62Pv9sM6AUUg9nMOWDBPNYmiJAQ61 TrIL2aEQBU5nYZvLkjouy8rHL1VJFeMPDwHbqDvaQGWAGkXurXo4hfRFEZRWp2oj gu9rm+ycZsnJyg== -----END CERTIFICATE-----Generated at Fri Nov 22 09:38:31 2024 by rpki-client on console-fra.rpki-client.org