$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft File: BztMEkjEvPIrBXffypsU2QY8KMA.mft (raw, json) Hash identifier: BDXJNEii6arkzkDV9SYr0DWMfVuCP7BKubOmEbZQSR4= Subject key identifier: C5:4D:4D:B9:89:67:BB:C2:7F:51:71:1E:69:9C:11:56:3F:87:0D:FA Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0 Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0 Certificate serial: 019352ADC50BF0A1F5974D715F8399371CCC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft Manifest number: 11B5 Signing time: Fri 22 Nov 2024 07:02:20 +0000 Manifest this update: Fri 22 Nov 2024 07:02:20 +0000 Manifest next update: Sat 23 Nov 2024 07:02:20 +0000 Files and hashes: 1: 1B0MjJvImsmwnBC54J1UxQN0O-8.roa (hash: EwXvEJhnIv7c1sS/pbpigr1iO1F/0Uk6hhVQTnNgrNs=) 2: 2UR7n5W2YH2DkF5Xpufws-QOw2M.roa (hash: T79yZiReAyVWYO9VqL1KX+dHjDEhEzPut3+iTxpGaMk=) 3: 3qq6o7e9LSH7mJWTjqi3lyFqw5U.roa (hash: dho1GYRt0l2Wr3tggGU32gbZxI5GFSZvfLpy8Tsgxo0=) 4: 7jlk6DFx6zzLFMshUVQFSCNh1gk.roa (hash: mvNRCoHNOlcbKeKo6B3KLXjDEaqvaRZkX6K1KmoMMHc=) 5: 7vrnu67xIoSE_pu2BZVnQBkMX6w.roa (hash: i9/GsLbRSNoL62qFquUYOvMjKfuAj9tP/QPnCR15B1Y=) 6: BztMEkjEvPIrBXffypsU2QY8KMA.crl (hash: WKy7lubyhjmJq1U9lruFKQlEGp9TwPpmyaTs3WnRL1I=) 7: M5qvFaZa0jjX6USKWgwabLQ71GA.roa (hash: WeMMEHXwKsigOeHICITkoK6YmZYDY/LxBORSEwZHG14=) 8: Md-crvhdTpDpDvWZiF-t87BiFi8.roa (hash: wRs1I/W6rUmHPf9ky7qxgoVzRRGifkp3gc6WUm7ierU=) 9: NxftkZQxhYA3gBK3YLZ--5dhjYY.roa (hash: 4yrwLP1M0nV7nvr8eZqE21N8mlyaBcxifLM+RHEawwg=) 10: QTNYwKTQq4V_8Ba7DXovWn-UJf4.roa (hash: aUFXAIcoTOn9phW1VaarOK8yet7G3VS0br+ZMIAbJzI=) 11: RJYL095BXPZRuECIDjJxfXjEOA8.roa (hash: X8MP8WeVxYBtX5YvdfYlzaTq4Qbp1xmhinLiIQL+gTU=) 12: TvvxXYs1iLCo0S2nPEz8X1hhjtc.roa (hash: sBYWauWFHJNJqDddsXXMNATaZ/bU3/UVdKBh3/8uZIA=) 13: VSftAl8CS2FVSqGw4I2Tc74L344.roa (hash: teF8p1/matweefE/W+rPPeuf5hbvgnstY2MupD+Nr44=) 14: Vzu9LGhrwScWPRXVowbWLFMZNQg.roa (hash: W4EXSzL9KXSVpRMdwESQIOOlVWWbP9qBkbILyjRV/KY=) 15: XHgWcdgiF6OT-5UTQ3RXeJVj7Hk.roa (hash: QDB2vUqc8UGGS3i0XOSWM8X9BPgcotRpYF+dKhbrNTM=) 16: Z9ln1zHGg4dXPHdYUCwUEGik6Z4.roa (hash: 8BnER/mvx0nzyN/lQ+wslvkmwX7mangYsFUR9zE4o60=) 17: a8OQkvKCwaalzHJV8ZnmdhdEec8.roa (hash: u0BT7utTh1usGrC4FywgdWEqhgBE9AVHaQJlUIGy4U4=) 18: aA3Wc6FdIQRBGV-CVjQvKlREFUY.roa (hash: nCauzRVxbwRaMjsofeKLnZvG6FX8RhNG0vZ3Rm607cI=) 19: cc5vFGSjl_YA6g66PnN-FEIefPE.roa (hash: bCiu7ZQXfIGWtcNxFJE4qJlyv27S14YTe4JPHS7pEwQ=) 20: dgs0vnL-bpGllISxQ2yvfCblR9o.roa (hash: aPDzjBOaCwyR/T4JoMEBhbkwPHUggin7oTpeir5gVYk=) 21: eHMGQjOZXw5_rgA5oZKFNp9N7uM.roa (hash: q00YxCXZiKyV5wcFj6KKfNq78k1TGXTXOtVaRpAUIsY=) 22: e_8OyKXT4_wQAu4mMprIonNhVes.roa (hash: HtOMx5VxC0eT8TL1PF4v39TUfYxy/ATRtXyPJTujF3M=) 23: eyd9mYBiy1QWZ6eLRCi7H1QcORI.roa (hash: kFMsYJHjYrwcyvDYbkIFRERNd4DIOW6is4VTwSXZp+I=) 24: mHPI6ziQlfw_LqOAsA9ciBy0btU.roa (hash: rGOCR6nuyMuqjGzrjZryVLVUqTtjVCBQMkXUQ60z0BA=) 25: oVYxan-GXhsmrmb41bN8odlAt4k.roa (hash: 833Ix0wX4tLDeRRUyNavAIl46KZywd6YLxdzDFuv02w=) 26: wSEfPAomuVv66ROBOQh7GkyZOeQ.roa (hash: PmOV+z+rCWXNn/Vh2k/XpmdSE1NxBPZ83KCn3DNE3m8=) 27: xEkiw27nSRXD0YX8mmmgmkPtAns.roa (hash: YYM95/iDyLjUrsE4wJBcmuwEac+F2swUyOhTmU5i+Ww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 07:02:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:52:ad:c5:0b:f0:a1:f5:97:4d:71:5f:83:99:37:1c:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0 Validity Not Before: Nov 22 07:02:20 2024 GMT Not After : Nov 23 07:02:20 2024 GMT Subject: CN=c54d4db98967bbc27f51711e699c11563f870dfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:0e:b1:2f:3a:3a:da:52:4a:0a:0c:a4:56:c1: 72:2e:5c:bd:23:bd:12:c6:6b:76:a5:81:75:c5:3e: b3:9d:99:c7:ee:91:74:8c:c0:c2:61:3c:b1:79:81: 2a:91:3a:f0:b8:28:38:81:6b:78:d6:49:6c:16:80: 4c:62:c1:97:f8:af:e6:76:20:7f:e9:6a:f9:80:74: f1:db:b6:a1:54:71:c8:b0:44:a8:a4:4e:b1:d9:e0: ff:1f:10:23:6d:1c:e4:82:31:7f:92:ca:42:d0:2d: b4:50:46:fd:7e:11:1c:d0:1c:f6:c3:ad:d2:79:ee: 21:2c:b7:6b:42:41:eb:90:c0:16:4f:01:4c:76:88: 69:d0:47:48:1c:c1:c9:26:8c:f2:9c:1e:3e:b2:3e: 01:dc:63:93:36:e5:e7:27:86:28:4d:ba:15:9c:4f: cc:4a:95:df:f5:1d:ba:74:27:c3:6c:97:54:14:e6: d3:a3:f1:85:ce:04:a9:58:82:76:3f:e3:fd:be:b3: cb:90:de:58:a5:d9:60:99:0e:4a:f9:8a:e7:4d:5d: 4b:29:ce:5c:89:a4:c6:08:6b:31:7f:19:ce:22:95: 50:ca:3b:56:f9:f9:92:4d:a4:0e:3a:b4:97:32:46: c0:c0:98:62:06:82:ab:98:b8:a0:0d:b7:0a:65:0b: e5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:4D:4D:B9:89:67:BB:C2:7F:51:71:1E:69:9C:11:56:3F:87:0D:FA X509v3 Authority Key Identifier: keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:f0:7e:f1:75:8d:c3:05:7b:d3:0a:d6:2f:cc:94:17:6e:54: 0b:6d:8a:aa:24:b3:b8:47:85:52:98:75:4b:05:8f:e2:4e:ab: a6:cb:df:bc:cd:64:e7:f9:80:1d:d8:06:c8:4e:56:29:b9:f1: 0e:31:dc:3b:a5:84:0f:86:19:2a:a3:7f:9e:73:84:79:e9:e0: 6b:7a:da:69:04:95:bd:60:35:14:76:0e:5e:c9:46:a9:ba:c8: 1f:bf:cb:e2:60:70:3f:6e:f2:63:0c:49:34:97:82:40:31:33: 97:ec:1d:05:c4:8a:f7:2a:32:23:d1:8e:bd:ec:4e:37:8c:e0: c1:6e:44:62:39:b3:c2:e3:c9:15:af:49:25:e1:66:e3:7f:4b: ef:e7:fc:d7:13:46:93:84:ef:61:df:ba:69:85:dd:fd:ed:be: 43:0f:84:93:e0:16:16:28:7d:c6:bd:ce:bf:bf:bd:01:50:ac: 10:70:31:dc:83:23:df:84:f5:b6:32:77:cb:5c:94:cf:f8:a0: dc:f5:63:9b:7d:b8:12:2f:a7:e0:a2:2d:66:c6:23:c3:23:58: 26:d0:89:60:37:9e:8a:dd:98:85:35:5f:5b:7f:c1:ca:18:c4: 3a:d7:17:1d:9d:1c:21:2e:ad:ba:60:bb:c4:1a:83:e8:8f:54: 35:2d:22:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNSrcUL8KH1l01xX4OZNxzMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3M2I0YzEyNDhjNGJjZjIyYjA1NzdkZmNhOWIxNGQ5MDYz YzI4YzAwHhcNMjQxMTIyMDcwMjIwWhcNMjQxMTIzMDcwMjIwWjAzMTEwLwYDVQQD EyhjNTRkNGRiOTg5NjdiYmMyN2Y1MTcxMWU2OTljMTE1NjNmODcwZGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjg6xLzo62lJKCgykVsFyLly9I70S xmt2pYF1xT6znZnH7pF0jMDCYTyxeYEqkTrwuCg4gWt41klsFoBMYsGX+K/mdiB/ 6Wr5gHTx27ahVHHIsESopE6x2eD/HxAjbRzkgjF/kspC0C20UEb9fhEc0Bz2w63S ee4hLLdrQkHrkMAWTwFMdohp0EdIHMHJJozynB4+sj4B3GOTNuXnJ4YoTboVnE/M SpXf9R26dCfDbJdUFObTo/GFzgSpWIJ2P+P9vrPLkN5YpdlgmQ5K+YrnTV1LKc5c iaTGCGsxfxnOIpVQyjtW+fmSTaQOOrSXMkbAwJhiBoKrmLigDbcKZQvllQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMVNTbmJZ7vCf1FxHmmcEVY/hw36MB8GA1UdIwQY MBaAFAc7TBJIxLzyKwV338qbFNkGPCjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQt YThkMzYxY2U2NGFhLzEvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQtYThkMzYxY2U2NGFh LzEvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR/B+8XWN wwV70wrWL8yUF25UC22KqiSzuEeFUph1SwWP4k6rpsvfvM1k5/mAHdgGyE5WKbnx DjHcO6WED4YZKqN/nnOEeenga3raaQSVvWA1FHYOXslGqbrIH7/L4mBwP27yYwxJ NJeCQDEzl+wdBcSK9yoyI9GOvexON4zgwW5EYjmzwuPJFa9JJeFm439L7+f81xNG k4TvYd+6aYXd/e2+Qw+Ek+AWFih9xr3Ov7+9AVCsEHAx3IMj34T1tjJ3y1yUz/ig 3PVjm324Ei+n4KItZsYjwyNYJtCJYDeeit2YhTVfW3/ByhjEOtcXHZ0cIS6tumC7 xBqD6I9UNS0iGg== -----END CERTIFICATE-----Generated at Fri Nov 22 14:39:09 2024 by rpki-client on console-ams.rpki-client.org