$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft File: XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft (raw, json) Hash identifier: 1mpKXT219SU8ziR3peFYxOz24jWbG2hhPoDUiEFY3eo= Subject key identifier: 1A:03:CE:07:0F:32:84:CE:CD:CD:AF:52:C1:79:27:BC:E6:69:10:23 Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61 Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361 Certificate serial: 019351D0360D4628C38BF5FD8B0C35B92263 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft Manifest number: 0AE5 Signing time: Fri 22 Nov 2024 03:00:19 +0000 Manifest this update: Fri 22 Nov 2024 03:00:19 +0000 Manifest next update: Sat 23 Nov 2024 03:00:19 +0000 Files and hashes: 1: 0YrXI1Pj2UOA2gkmzFtffZko9GI.roa (hash: uHDmHcL6zSQfTcMqsovH2FnJ20LJudGVFpwckARykF0=) 2: 0n9uM7MJxSV21ye_zJmnKYdCoC8.roa (hash: U6tmxjvRLy7ELZOS/YuQfIbLqQ8r86Rp6VuosrsYtCc=) 3: 5xAiSENvpaQY7HjBK_c7TAIY4vg.roa (hash: g9OMq/a70KDyagPAvgGWt0zXZoKviJEEC9zQ0mi1T6Q=) 4: 7JYEH2LUdqQWSKQsummow14r5TY.roa (hash: bMlz3j7C2lwKY3gaVemvArI/bZtzt/HeOLZAWcbRKDI=) 5: CdwEWFQqUP71ZBGNYAf4eyrPQtY.roa (hash: 5CAsyG3WjE3mmHwdsM7LIDJJH859CaMctKwblEScDQY=) 6: N0esUVp68uV9q2BplL9puG23dkE.roa (hash: Jtbl74XHS4zTEDiVdUfkMTWia/xaO+ytYkd3wliRZ7s=) 7: TbZyIIM6i9ampNbUUZwYSSurOfM.roa (hash: qYBKeXID0I+EY5KOYtC//IDAfJ4ePYiUnWu5AB687FU=) 8: VG8_1kfRCxrU2KHxSoXmG8gC94Y.roa (hash: gKRSRk7t0YzO9tLfsVCNYDe7yWkFP/33bg1WVn1YyrA=) 9: XEtaDT0YjvtJCZ6gOV18zb12aW8.roa (hash: gApTxZ3FLt09iBiYntacMzRVW6/ybC6npt6BkVK+zIA=) 10: XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl (hash: U9U384hHNG3lqP9BD7pTBYDTutlL20sHOk88boiT2zo=) 11: Z_jyMM7ugZPGwYIkwMU446e3P7w.roa (hash: b+fcKkLPC2Zi/VNIDIkoFRugtVLS4bTpd4Y8OXIWERk=) 12: _BY1IAVADsEASNh3JpvN2SJkRcs.roa (hash: i3aTkfJk7tJsJuiy6pHZ5KC7XR3uhGjpjKH6JILJaA0=) 13: dqKhTCBCj7byrVcX8hCr1bEox4k.roa (hash: aA+JTqCCd41OQkp4Vr0uDc2E6ciMoqkVkyAkxL5zBv0=) 14: glVw9SEt_aKjhXF3BtMS552WIaY.roa (hash: TdwbgwAIZgEKPbKOyWC6Y9YGI8UmRNj1w9fLJQzoT0c=) 15: iMBzmbZ9KU8Rmxal_2HTjm_xb2c.roa (hash: jS+9LK/h6ugVYhU/3PXzh0DmStwku+QF91/c55lnnBA=) 16: iqVCWnQAefmccyWauiqGEdhkrBc.roa (hash: aqZIsVAj4myvKk+JEr87WycFwqPQY/0X9VeN+ifABgc=) 17: nx4fmnC5ehWSt_AsAL7NGVXVEc4.roa (hash: xTaUmqhhPyp2n4FokJzwZETEBFzo0y9JExrehOJRG/8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 23:17:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:51:d0:36:0d:46:28:c3:8b:f5:fd:8b:0c:35:b9:22:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361 Validity Not Before: Nov 22 03:00:19 2024 GMT Not After : Nov 23 03:00:19 2024 GMT Subject: CN=1a03ce070f3284cecdcdaf52c17927bce6691023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:13:f0:6a:52:ec:ee:78:86:a8:e0:9f:a4:f1: ea:78:fb:4c:96:03:df:dd:a8:82:84:b1:bc:62:14: 5a:42:45:7e:84:17:8c:8d:2e:5a:ff:2d:e7:7a:08: 80:b4:d8:c2:ee:bc:c9:74:3a:f9:cf:4e:4a:87:e4: 96:82:aa:cc:03:84:a0:f0:ea:4b:7d:dc:2e:6c:78: b9:f3:1f:af:dd:45:07:d7:19:4b:fb:b1:5a:dc:97: bc:4b:8e:ab:b3:45:d4:85:66:d1:24:e9:eb:ff:8d: 04:4e:33:11:a1:37:1e:0e:e6:f1:80:19:45:15:63: 03:ee:8d:44:eb:a7:67:4c:56:a7:1f:d7:83:bb:69: d3:28:f0:c5:7b:88:05:1e:58:ed:e8:c0:5a:0b:5f: 0b:4d:fa:40:d6:88:ea:a6:5f:e4:c3:56:aa:c0:4f: 62:0d:52:d2:6f:0e:10:31:29:64:00:24:91:88:5e: b6:6e:f5:ba:97:03:a5:7a:1e:c4:ae:fe:07:ad:f4: c2:d8:78:b2:81:d0:0b:4b:07:35:38:d2:88:a0:07: a2:60:57:02:ac:87:70:65:a2:c5:95:e9:d2:a2:ab: 06:d0:eb:e7:26:66:e5:38:ab:19:b8:54:07:99:fd: f4:8f:7d:35:21:2c:9f:18:79:8f:df:7a:0c:51:66: 7f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:03:CE:07:0F:32:84:CE:CD:CD:AF:52:C1:79:27:BC:E6:69:10:23 X509v3 Authority Key Identifier: keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:30:b3:bf:ee:0e:bc:d1:54:70:32:5e:9b:f1:c7:94:75:2f: c7:28:51:16:3a:be:f1:0b:4d:4d:ff:81:cb:39:ac:25:91:fc: d0:9c:70:a5:17:17:fc:1f:c8:10:90:55:fd:f3:9f:8c:25:ab: 65:38:52:0d:83:7c:2f:31:4f:c5:2d:09:83:ac:bd:9b:f7:56: 78:6b:76:65:06:bb:0f:c3:84:21:ee:98:24:5d:d4:39:2c:e7: b5:3d:c1:aa:44:2c:34:7c:7d:4a:01:97:a8:c6:d2:db:ac:f9: d0:8d:fd:de:ee:7e:bb:03:5c:ac:43:12:04:e6:f6:16:62:7a: 46:a9:08:f0:d6:50:a4:e9:9a:85:1b:e0:c5:1c:6a:7d:e2:72: 63:c7:2f:aa:53:b9:9e:d4:f3:aa:92:7b:cf:dd:d9:fb:92:aa: 7a:c9:ed:c5:72:28:84:00:28:1c:72:a7:b8:38:a0:7d:e2:75: 6c:69:de:bf:f7:18:79:ad:de:53:9d:cb:70:9f:c5:db:fa:a5: db:d0:65:58:ad:32:8e:c0:20:d7:b8:f1:1c:77:10:95:42:c2: aa:e2:58:e4:fa:d5:4f:8f:72:fd:e6:0b:78:02:2a:62:f5:df: 50:8e:06:84:6b:11:5d:5e:d6:81:95:fa:9b:06:9a:b9:7f:bb: 4e:db:28:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNR0DYNRijDi/X9iww1uSJjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjODkyYWVkMzgzM2U2MTAwZjVlMGNmMTIyNzFmZDgwYjc1 NWMzNjEwHhcNMjQxMTIyMDMwMDE5WhcNMjQxMTIzMDMwMDE5WjAzMTEwLwYDVQQD EygxYTAzY2UwNzBmMzI4NGNlY2RjZGFmNTJjMTc5MjdiY2U2NjkxMDIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBPwalLs7niGqOCfpPHqePtMlgPf 3aiChLG8YhRaQkV+hBeMjS5a/y3negiAtNjC7rzJdDr5z05Kh+SWgqrMA4Sg8OpL fdwubHi58x+v3UUH1xlL+7Fa3Je8S46rs0XUhWbRJOnr/40ETjMRoTceDubxgBlF FWMD7o1E66dnTFanH9eDu2nTKPDFe4gFHljt6MBaC18LTfpA1ojqpl/kw1aqwE9i DVLSbw4QMSlkACSRiF62bvW6lwOleh7Erv4HrfTC2HiygdALSwc1ONKIoAeiYFcC rIdwZaLFlenSoqsG0OvnJmblOKsZuFQHmf30j301ISyfGHmP33oMUWZ/0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBoDzgcPMoTOzc2vUsF5J7zmaRAjMB8GA1UdIwQY MBaAFFyJKu04M+YQD14M8SJx/YC3VcNhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWElrcTdUZ3o1aEFQWGd6eEluSDlnTGRWdzJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi84NmZiNDYtZDcxMi00NjAyLTljY2Ut M2FhN2RhYTlkM2VjLzEvWElrcTdUZ3o1aEFQWGd6eEluSDlnTGRWdzJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi84NmZiNDYtZDcxMi00NjAyLTljY2UtM2FhN2RhYTlkM2Vj LzEvWElrcTdUZ3o1aEFQWGd6eEluSDlnTGRWdzJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjDCzv+4O vNFUcDJem/HHlHUvxyhRFjq+8QtNTf+ByzmsJZH80JxwpRcX/B/IEJBV/fOfjCWr ZThSDYN8LzFPxS0Jg6y9m/dWeGt2ZQa7D8OEIe6YJF3UOSzntT3BqkQsNHx9SgGX qMbS26z50I393u5+uwNcrEMSBOb2FmJ6RqkI8NZQpOmahRvgxRxqfeJyY8cvqlO5 ntTzqpJ7z93Z+5KqesntxXIohAAoHHKnuDigfeJ1bGnev/cYea3eU53LcJ/F2/ql 29BlWK0yjsAg17jxHHcQlULCquJY5PrVT49y/eYLeAIqYvXfUI4GhGsRXV7WgZX6 mwaauX+7TtsoFw== -----END CERTIFICATE-----Generated at Fri Nov 22 04:34:21 2024 by rpki-client on console-fra.rpki-client.org