$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft File: _2mO6y5J_LX5xlqZhXrynOBmQdk.mft (raw, json) Hash identifier: uaJjsXfvpD88a3ePdkpsBwtPkGBRlqLKrvz9w9A65Mw= Subject key identifier: BF:76:3E:1B:2F:28:5F:D0:F3:F8:F2:7F:6E:E3:97:0F:2D:17:59:E7 Authority key identifier: FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9 Certificate issuer: /CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9 Certificate serial: 01935877B56B0574B56FA0E562C271F54C6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft Manifest number: 137C Signing time: Sat 23 Nov 2024 10:01:00 +0000 Manifest this update: Sat 23 Nov 2024 10:01:00 +0000 Manifest next update: Sun 24 Nov 2024 10:01:00 +0000 Files and hashes: 1: 0FfyJmN2EbnynffMxPrbFs3Kl2o.roa (hash: SR9xAPs2ztA+mCPZ80CiyeJzbK42NiNkqWdD4hSu4LM=) 2: 4D_qC5uUEDm5VyWP5gDlD49YL4w.roa (hash: Bg/ru1OED9OlufKrIYBZo/uTt0J4wvaVEHKxiNfvXQo=) 3: 7KkW14ahMzeaT8EoEQ23HB7RNXo.roa (hash: o5D0+Zq1jCZzwXVpNDpv1ot0oIEGzoIraQrW/aJdrVk=) 4: G11vFfXXdEe3Qy-0eI63pXK25bE.roa (hash: lYmNaiVmp8tTYUT01ahbjAUCqutS8j85xnSbsOrUkM4=) 5: PXNKggnLJHJ79VJZNQ1NNsBM9fk.roa (hash: jq9E23F1hdYz8aTPK7v37vEK5jeG35ZSnsshWqPR/wU=) 6: UI10HeKpZ12yElideg6Ypy0YOrI.roa (hash: nGRGGu6pkeVRXFPWe1y7x9bYJMVRgA7xuawV8vIW0Ik=) 7: VPZTN-vneKZtBqoLiZfvkQiYqJE.roa (hash: sAEoFBnXT8Zv/5cGDDNWXZv6RdAdfNrV7+Pahdtbkj4=) 8: _2mO6y5J_LX5xlqZhXrynOBmQdk.crl (hash: OzS1zLWYQM1RFyWk5YlEiVieP+fKw2MG2iRkt7SVB9Y=) 9: fjPWN2Ncsp23Eb5vbu4iajC4oRU.roa (hash: Hzwnk2JOWLhLcVpRDzbZJpGbj0qPSBbQP3GCzzmWZNs=) 10: pbo7eyjpwFZQvloWo5irHchbiio.roa (hash: YvQlFR2kJRDzpKaX2+HdX0GUAoHN6Vy1uKakNac4fO8=) 11: pkJ995NiuUP8QD6ER4F1xxvcBu0.roa (hash: r+6yDPX3HDEpLU9NuQfre/ZR6BWuiF/+21B1j1xMWdo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Nov 2024 06:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:58:77:b5:6b:05:74:b5:6f:a0:e5:62:c2:71:f5:4c:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9 Validity Not Before: Nov 23 10:01:00 2024 GMT Not After : Nov 24 10:01:00 2024 GMT Subject: CN=bf763e1b2f285fd0f3f8f27f6ee3970f2d1759e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4a:5a:d8:62:43:99:63:7c:1e:47:5d:eb:36: 6b:1e:45:b1:df:62:8d:95:2e:76:ca:8d:4c:0c:4c: 63:07:a6:31:f6:d9:74:b1:78:d8:c0:25:f2:ed:f2: f9:8e:46:e5:20:82:2a:e4:2a:9a:03:83:a1:9f:3f: 0e:59:f7:37:88:95:90:c5:ee:1e:9b:55:f8:00:67: 26:18:d6:30:48:af:19:d4:7e:73:ac:b8:7a:eb:72: a5:fb:9d:fe:46:47:53:a3:ce:c6:2c:4b:ff:98:f6: 95:7c:3e:a6:b6:69:d2:68:34:57:db:cb:c2:d6:91: 14:a6:e5:d6:cd:68:75:88:46:03:d1:d5:28:d4:58: 13:fc:75:b1:47:b5:a9:29:6e:f6:33:1f:f5:af:78: e8:b8:b1:c8:a2:21:25:fc:5b:e7:b3:91:f2:51:f2: fd:ee:f1:98:3c:1f:2a:52:48:f1:77:23:6b:7c:39: 4e:e1:c6:3f:f6:f3:c9:45:51:a9:d8:54:a1:db:98: 7a:fe:01:07:35:59:47:d5:b8:50:0c:a2:10:b9:de: f4:ff:ed:30:7e:4b:29:b9:41:03:93:c5:80:a3:1c: 2f:b1:10:20:2b:ed:84:b0:85:79:a1:4a:60:d6:cc: 45:23:50:57:aa:50:fc:98:18:80:24:29:66:2f:90: 74:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:76:3E:1B:2F:28:5F:D0:F3:F8:F2:7F:6E:E3:97:0F:2D:17:59:E7 X509v3 Authority Key Identifier: keyid:FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:c4:1c:2c:bd:ae:4a:d7:7b:44:92:43:1e:1a:3b:84:43:60: dc:00:07:13:be:63:03:e6:37:2e:dc:8c:aa:10:54:75:f2:1c: 3d:77:87:c8:fc:2d:be:07:c3:7f:a5:57:b9:26:68:83:21:fc: b0:10:a0:dc:c9:ee:4f:9a:4d:85:58:28:fe:8d:53:de:56:13: fb:1c:f5:72:07:7c:3c:91:47:77:72:d6:c8:f7:e1:93:49:ae: 6d:e4:d1:f2:7f:66:f7:9a:52:9f:c3:bf:1a:37:4b:bb:81:80: 24:be:3e:18:9b:03:b3:cd:78:4f:93:60:ca:69:20:bb:e9:28: 95:0a:e3:c8:f2:5a:67:d4:e5:0c:de:ae:cd:10:f1:ca:1d:26: d5:f9:0c:18:e2:0a:51:b4:ad:e4:5f:0e:26:f7:ca:11:78:f5: a9:3a:39:c3:bb:d5:d4:40:5d:1c:fb:95:36:f7:a5:8d:1a:71: 43:32:90:16:b6:4d:f8:8e:aa:63:6d:65:f5:0a:18:b1:a4:ce: 44:96:c0:f1:cb:62:6c:fc:24:7b:37:49:f2:f1:c8:2b:c5:00: 86:27:19:e7:8b:ca:4b:d9:cc:bf:2f:3a:f2:52:f5:44:2b:0c: 05:01:d5:46:67:d8:74:db:88:35:8c:f8:8e:24:ba:d3:d8:15: 17:bf:cb:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNYd7VrBXS1b6DlYsJx9UxvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNjk4ZWViMmU0OWZjYjVmOWM2NWE5OTg1N2FmMjljZTA2 NjQxZDkwHhcNMjQxMTIzMTAwMTAwWhcNMjQxMTI0MTAwMTAwWjAzMTEwLwYDVQQD EyhiZjc2M2UxYjJmMjg1ZmQwZjNmOGYyN2Y2ZWUzOTcwZjJkMTc1OWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0pa2GJDmWN8Hkdd6zZrHkWx32KN lS52yo1MDExjB6Yx9tl0sXjYwCXy7fL5jkblIIIq5CqaA4Ohnz8OWfc3iJWQxe4e m1X4AGcmGNYwSK8Z1H5zrLh663Kl+53+RkdTo87GLEv/mPaVfD6mtmnSaDRX28vC 1pEUpuXWzWh1iEYD0dUo1FgT/HWxR7WpKW72Mx/1r3jouLHIoiEl/Fvns5HyUfL9 7vGYPB8qUkjxdyNrfDlO4cY/9vPJRVGp2FSh25h6/gEHNVlH1bhQDKIQud70/+0w fkspuUEDk8WAoxwvsRAgK+2EsIV5oUpg1sxFI1BXqlD8mBiAJClmL5B0dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL92PhsvKF/Q8/jyf27jlw8tF1nnMB8GA1UdIwQY MBaAFP9pjusuSfy1+cZamYV68pzgZkHZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4Mzkt NTdjZDY4ZDljYjRlLzEvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4MzktNTdjZDY4ZDljYjRl LzEvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOsQcLL2u Std7RJJDHho7hENg3AAHE75jA+Y3LtyMqhBUdfIcPXeHyPwtvgfDf6VXuSZogyH8 sBCg3MnuT5pNhVgo/o1T3lYT+xz1cgd8PJFHd3LWyPfhk0mubeTR8n9m95pSn8O/ GjdLu4GAJL4+GJsDs814T5Ngymkgu+kolQrjyPJaZ9TlDN6uzRDxyh0m1fkMGOIK UbSt5F8OJvfKEXj1qTo5w7vV1EBdHPuVNveljRpxQzKQFrZN+I6qY21l9QoYsaTO RJbA8ctibPwkezdJ8vHIK8UAhicZ54vKS9nMvy868lL1RCsMBQHVRmfYdNuINYz4 jiS609gVF7/LDA== -----END CERTIFICATE-----Generated at Sat Nov 23 13:09:34 2024 by rpki-client on console-ams.rpki-client.org