$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft File: mGihmSu4A33egdDIzcBpX87hfCc.mft (raw, json) Hash identifier: Sk1LulPbUfOX8cbKvg6aWe2a0MpkH+//N/18SU/i0fw= Subject key identifier: 7D:58:73:86:19:C5:55:59:1C:71:7F:3E:EF:55:AE:6A:11:29:B8:FA Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27 Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27 Certificate serial: 0193512C132BBA580298EF8C017BFB4457CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft Manifest number: 0D72 Signing time: Fri 22 Nov 2024 00:01:03 +0000 Manifest this update: Fri 22 Nov 2024 00:01:03 +0000 Manifest next update: Sat 23 Nov 2024 00:01:03 +0000 Files and hashes: 1: 7zVc7wmUZnjAPdAtLO46mzekulE.roa (hash: Ayi3lpkHD04ZTNGDvAY6GkZuUDnwqVYMAqpx0EOO/qE=) 2: CoIYpy3VLhMQV8g7pJcwywCQLGk.roa (hash: dkcbFCYYFVDK6Brd0cU1w+sLxHPq6T3LWZ6PjqnmcSE=) 3: CrVIolPEotg8qGsn9w-GvWNCquc.roa (hash: UsUA7AJ66WIrMfMj4+hz+dvj1foKCK4LDHLDz8+PJ6Y=) 4: DnxsQzpPQwAnw5uab7H64Rl5O2s.roa (hash: a4lMFiuy5JgmrdTVD1f1bCaHQRxea3op3RWpTWQuMSg=) 5: EVdaAJISdVmosuzILhlOI6T3nRs.roa (hash: QZNKovN2Ky9v2hyaEh8It7MLleCAQnxdVeHVy01Uaq4=) 6: FFhkc3DwswkRPKHQC-FORjK2Pas.roa (hash: Hol8LO4KXLXuuc8LOrkh8GLEeb1+8kYJiuD9TO3gzY0=) 7: J7EuqQK4OIYkTGAWIhQHAePBUhM.roa (hash: qBdxz2k/Igp/+WkNl+mMKEfF+BzZc38wqgKqhz/k5YM=) 8: Yr9cS6aCn5m-fuVWUB1GoA1PzVA.roa (hash: o3hn48UKGemH/EAdaXizsjOSOVz9DyWl8XxLdB4iehg=) 9: Zn-0KNo23XFZDb_LOZgl_wZp6Uk.roa (hash: JtjzhWRIabRXCm/SECM9nYC/NKvBvBBwWrzCIBlBWaQ=) 10: aP1DvXKE9ZUimpGTBFs_V0NpIN0.roa (hash: aGzjLjBHJu6T8kFuHFOIMYfMTarItKhfMk/DWdFZ3Ko=) 11: i8qP7Q5sFQjmPm2wvsWmiYcx8fc.roa (hash: Jlj9RcT6JfTxPI1D/juUCCbmuAGCKeClW5CAw6vV4NU=) 12: io3oWFLFcE18lhokaWMUKOaMeWM.roa (hash: hC1liZ4zdbzKgsvg1C7alyZvEaXycuVKKq2V70Ue4Ls=) 13: kLZSwry8evCYbG-t5X_ZG_vL21A.roa (hash: ibJaQXw/08ynoYrKpthBbharRPbj1MXxCGnxw/VCCn0=) 14: mGihmSu4A33egdDIzcBpX87hfCc.crl (hash: qj/Mfvx5NBcx7jhqIinJMIvNkZh8VvnyUY1OLztIXPg=) 15: obdMkPAqMza3lryzlg5CB2LyyV8.roa (hash: RYKzdmifhXRDogcdeO+27HbMlLp9wQCOKSqDtwDYR4E=) 16: xeRQVS-ZtLiTtbWyIXbpclBfva8.roa (hash: 7kzjCoRcWv4AYFtStH7ycW1iLIAL8e62zRhdtIPDPEQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 18:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:51:2c:13:2b:ba:58:02:98:ef:8c:01:7b:fb:44:57:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27 Validity Not Before: Nov 22 00:01:03 2024 GMT Not After : Nov 23 00:01:03 2024 GMT Subject: CN=7d58738619c555591c717f3eef55ae6a1129b8fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:70:c6:2b:8f:65:c3:3a:37:dd:42:fe:04:52: ae:97:9c:7a:7d:7d:c9:ea:e3:75:d4:4d:db:bf:f5: e4:13:19:31:e3:c7:c9:9f:e6:a4:7b:f7:27:ba:d3: f9:50:38:e8:80:5f:26:73:65:03:87:f3:b7:c5:1f: 29:ff:fe:92:36:6a:63:a2:7f:db:69:4f:6f:5b:15: b2:51:68:c8:e9:00:ef:29:74:43:d4:97:be:c0:bf: 85:df:57:aa:ff:dc:d8:23:47:41:15:d8:82:80:21: 58:01:cd:fa:a6:50:25:25:c0:a5:97:19:99:ad:23: 4e:5e:ed:1e:21:71:4c:d1:67:e3:67:0f:d0:21:07: 34:0f:b3:5d:14:b2:c2:07:29:34:d7:86:26:e0:96: 2c:9e:6a:3d:67:15:20:20:10:ac:99:38:10:05:95: 21:dd:f8:2b:ce:90:ef:52:c3:56:44:dd:f7:ee:71: 76:fa:27:6c:82:98:62:6c:87:55:4b:ec:fb:3a:86: 38:61:cd:54:92:76:e8:c5:84:1b:9d:23:ad:2c:1e: ea:c0:b4:75:fd:30:f1:8b:09:16:e1:70:76:6f:6e: 09:2a:7c:c5:a1:4f:ea:0c:29:26:75:8e:8c:de:d9: e2:7c:09:27:81:e8:a1:64:42:f3:82:ef:6b:e9:d2: 63:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:58:73:86:19:C5:55:59:1C:71:7F:3E:EF:55:AE:6A:11:29:B8:FA X509v3 Authority Key Identifier: keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:d2:fa:6e:da:f0:ac:91:8f:c8:a7:4a:81:b0:ae:44:1d:b8: 4a:f1:94:ee:43:9f:57:7d:6f:4d:40:e6:fe:ff:64:17:3a:5f: b7:c7:27:18:7b:cf:90:41:62:7c:cb:75:3d:cd:b6:c7:7d:67: e6:d3:eb:44:43:90:48:3c:29:5b:51:70:b7:f2:45:82:dd:8a: 65:12:61:78:e2:35:e8:18:71:ec:a9:01:2a:86:b1:7d:7e:23: 75:49:34:0f:94:6e:c1:5f:2e:ae:79:8a:f7:5d:a4:01:8b:06: 91:17:ab:ba:49:8e:c5:0a:1c:ce:8a:45:c5:0d:47:8e:44:ba: 47:02:82:4e:8b:fd:50:55:75:3d:07:11:55:77:27:86:4d:38: 7e:52:b6:67:7f:8b:e6:4f:40:36:df:37:3a:25:9c:a2:6c:44: a9:db:20:2b:64:f1:24:ad:8d:12:eb:6f:67:9c:0d:83:73:92: dd:f1:30:70:7c:d5:33:1d:3e:ed:70:ee:d3:3c:29:6c:94:60: ff:89:b2:fc:39:47:68:f6:63:60:60:07:cc:ce:e8:99:3f:86: 7e:d8:0d:3d:54:82:5e:35:35:f9:d6:3c:20:80:00:79:24:f3: fa:75:6b:63:6a:b2:20:bf:44:40:c1:5f:f6:2c:7f:2e:3c:dd: 1d:02:e3:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNRLBMrulgCmO+MAXv7RFfLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NjhhMTk5MmJiODAzN2RkZTgxZDBjOGNkYzA2OTVmY2Vl MTdjMjcwHhcNMjQxMTIyMDAwMTAzWhcNMjQxMTIzMDAwMTAzWjAzMTEwLwYDVQQD Eyg3ZDU4NzM4NjE5YzU1NTU5MWM3MTdmM2VlZjU1YWU2YTExMjliOGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4XDGK49lwzo33UL+BFKul5x6fX3J 6uN11E3bv/XkExkx48fJn+ake/cnutP5UDjogF8mc2UDh/O3xR8p//6SNmpjon/b aU9vWxWyUWjI6QDvKXRD1Je+wL+F31eq/9zYI0dBFdiCgCFYAc36plAlJcCllxmZ rSNOXu0eIXFM0WfjZw/QIQc0D7NdFLLCByk014Ym4JYsnmo9ZxUgIBCsmTgQBZUh 3fgrzpDvUsNWRN337nF2+idsgphibIdVS+z7OoY4Yc1UknboxYQbnSOtLB7qwLR1 /TDxiwkW4XB2b24JKnzFoU/qDCkmdY6M3tnifAkngeihZELzgu9r6dJj6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH1Yc4YZxVVZHHF/Pu9VrmoRKbj6MB8GA1UdIwQY MBaAFJhooZkruAN93oHQyM3AaV/O4XwnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2It ZDc4ZDU2MzFkN2Y2LzEvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2ItZDc4ZDU2MzFkN2Y2 LzEvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAntL6btrw rJGPyKdKgbCuRB24SvGU7kOfV31vTUDm/v9kFzpft8cnGHvPkEFifMt1Pc22x31n 5tPrREOQSDwpW1Fwt/JFgt2KZRJheOI16Bhx7KkBKoaxfX4jdUk0D5RuwV8urnmK 912kAYsGkRerukmOxQoczopFxQ1HjkS6RwKCTov9UFV1PQcRVXcnhk04flK2Z3+L 5k9ANt83OiWcomxEqdsgK2TxJK2NEutvZ5wNg3OS3fEwcHzVMx0+7XDu0zwpbJRg /4my/DlHaPZjYGAHzM7omT+GftgNPVSCXjU1+dY8IIAAeSTz+nVrY2qyIL9EQMFf 9ix/LjzdHQLjjg== -----END CERTIFICATE-----Generated at Fri Nov 22 02:11:15 2024 by rpki-client on console-ams.rpki-client.org