$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft File: Vw-w8di4wZiw3IYVivvLxSnPFr4.mft (raw, json) Hash identifier: yi5ZEYkRzBC+RoRIPhiYMIM03n/NUieXQTMwDSs0KxA= Subject key identifier: 51:E0:D4:21:7D:9B:6D:AD:6A:5C:B1:7B:FE:DC:D3:B0:69:C9:6D:5D Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be Certificate serial: 01947E3864A9183C462368B1C384B2721765 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft Manifest number: 0EDC Signing time: Sun 19 Jan 2025 11:00:12 +0000 Manifest this update: Sun 19 Jan 2025 11:00:12 +0000 Manifest next update: Mon 20 Jan 2025 11:00:12 +0000 Files and hashes: 1: 394tf-42F2nqTQBsIqtkSRmucjA.roa (hash: FEgkNeogh00D0/bMKIclm4PWisfm2kigk4t326/BxbM=) 2: LhiSCtln5FtX__OORvWyogq6e1Q.roa (hash: hy6v9rxifRC/tHX6TRNuZxsYh5g9SsOUALYCNaysw+8=) 3: OcYqxTzrKk51o7UzflMDq0IEkmU.roa (hash: r3dK9LV9mG8s5RFEYjKSnWAnYTPlW4DqfejV7eJjGtw=) 4: U0iiCyVKkBtsYKQQ59uFgwV0vUY.roa (hash: Kg0XkwtjvHqkxTV75IaHlum33qw8f4RzUFb1Bkwzos0=) 5: Vw-w8di4wZiw3IYVivvLxSnPFr4.crl (hash: NYsNPDPIJVrnQrJo4m8TZFUxP6SJeOehR6na/8QAMog=) 6: WqmTZ4m41hvTlRmViTPXUbHm2Sg.roa (hash: xKBMJIJh5raQvQfdRg85d1f2E/l7FH4ANZ47yFzBD4E=) 7: Yv7t3JcMlnLq6LmhF7HwnRYSWKk.roa (hash: l7wdE+sV0g9cjTrlw7G2ssjLOZesCabZWTcJYBa/3fo=) 8: _OYA4765g9NJpcF7TDI32R4HwJ8.roa (hash: Yn+kaEeIeAIZFGdnv8IGAlURa//73XSkwoeGL0+JgXY=) 9: ss9acv__B4xuRCikM6Q1io4S-n8.roa (hash: pFGlfxJ1WiZHMyxc9wr2pYkizcAW4NxGW31B+3adYmw=) 10: xP_OgtuvPLIy6f3OgcMLRqYdB6o.roa (hash: /xteHtlPoU7Xt/uO/23RugSaavsPJ92G0OJK6/uUxx0=) 11: xtQkvE-BfPKmkRCMT0mfTaY-Qnk.roa (hash: bWoWLjpB0/INlSEEwksj7kb2GcvU1sLoTUOKUQMOGh8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Jan 2025 05:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:7e:38:64:a9:18:3c:46:23:68:b1:c3:84:b2:72:17:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be Validity Not Before: Jan 19 11:00:12 2025 GMT Not After : Jan 20 11:00:12 2025 GMT Subject: CN=51e0d4217d9b6dad6a5cb17bfedcd3b069c96d5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b4:9e:9d:32:7b:d0:be:81:29:b8:23:22:f1: ec:28:ff:0d:e2:cd:ee:3a:3d:db:97:76:33:45:1e: 50:89:8e:72:2b:0d:f4:32:aa:1c:41:d9:c6:89:df: fd:5a:97:14:03:cb:00:11:25:68:1b:49:ee:bc:37: 5d:7e:c1:15:b0:da:1c:be:2c:d6:3b:bb:08:2b:d5: 2d:21:d1:52:55:4d:ea:5a:bf:c3:67:32:34:9e:6a: 45:d4:a9:20:56:bf:5d:00:1a:ed:9d:09:ed:dc:a9: 8a:2e:92:96:99:d6:71:bb:35:28:48:57:a6:d6:d3: 12:fd:54:7d:b1:d2:a2:b8:98:7d:61:c0:1c:d9:d9: 86:d4:df:e4:3a:7b:29:f2:41:35:fc:dd:40:b3:03: 99:23:60:80:88:59:60:f1:31:67:ed:67:3c:8e:40: 7c:62:95:96:dc:55:0b:51:b4:9d:58:72:46:90:0d: 68:59:e2:8c:e9:72:fb:fc:a0:53:d7:1e:85:0b:d7: 3f:9a:bc:e8:73:dd:8b:80:31:1e:54:6f:85:a5:fd: a6:50:7a:2c:21:2c:f6:e2:bf:61:6a:02:6b:64:57: 79:a9:f9:fb:fb:f2:c7:06:bd:67:2f:27:64:5a:18: ca:16:cb:ce:fc:0b:2e:b7:06:89:74:86:8a:30:79: 67:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:E0:D4:21:7D:9B:6D:AD:6A:5C:B1:7B:FE:DC:D3:B0:69:C9:6D:5D X509v3 Authority Key Identifier: keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:49:af:7b:cd:2c:9d:ba:be:2b:85:bf:55:16:9d:1e:71:44: 7b:f0:8f:f7:bb:58:7e:43:45:a4:5b:50:c7:87:22:0f:f5:21: f6:4d:ba:2d:df:09:9b:75:34:97:ff:11:dd:8a:0c:92:30:96: 4b:da:67:ca:37:ca:b4:fc:98:81:16:6f:71:0f:e5:96:f8:0c: 62:a5:35:61:f2:aa:0a:6b:e0:95:9e:76:8b:1d:e5:35:f5:7a: 15:4c:e8:09:92:17:6f:f8:18:ce:b1:c9:dd:b1:c2:fb:f6:01: d3:64:9c:15:1a:14:89:5f:00:7b:19:e3:bb:9f:de:a6:b8:a6: 3e:93:9c:d9:e3:10:99:a3:a4:78:91:04:30:e9:f2:7e:f7:5a: b5:42:cd:a0:fb:76:a1:83:7a:f4:5e:d0:04:11:58:6f:74:43: c8:0f:32:3e:ac:60:47:b6:99:c0:9b:59:ef:0e:99:33:17:1d: 01:5e:9f:46:ea:d7:16:5d:18:f6:68:fd:38:27:bf:6d:8a:cf: 8a:91:23:47:f5:e7:f9:31:cd:bf:d6:20:fb:2a:4f:1e:fb:f1: 1e:b7:9d:8d:80:d4:5f:12:c9:62:3b:9a:b3:50:fb:ec:54:e6: 3c:26:89:e1:3a:6e:c4:c6:b7:f3:92:c4:c0:2b:42:98:4a:19: 22:99:c1:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZR+OGSpGDxGI2ixw4SychdlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MGZiMGYxZDhiOGMxOThiMGRjODYxNThhZmJjYmM1Mjlj ZjE2YmUwHhcNMjUwMTE5MTEwMDEyWhcNMjUwMTIwMTEwMDEyWjAzMTEwLwYDVQQD Eyg1MWUwZDQyMTdkOWI2ZGFkNmE1Y2IxN2JmZWRjZDNiMDY5Yzk2ZDVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7SenTJ70L6BKbgjIvHsKP8N4s3u Oj3bl3YzRR5QiY5yKw30MqocQdnGid/9WpcUA8sAESVoG0nuvDddfsEVsNocvizW O7sIK9UtIdFSVU3qWr/DZzI0nmpF1KkgVr9dABrtnQnt3KmKLpKWmdZxuzUoSFem 1tMS/VR9sdKiuJh9YcAc2dmG1N/kOnsp8kE1/N1AswOZI2CAiFlg8TFn7Wc8jkB8 YpWW3FULUbSdWHJGkA1oWeKM6XL7/KBT1x6FC9c/mrzoc92LgDEeVG+Fpf2mUHos ISz24r9hagJrZFd5qfn7+/LHBr1nLydkWhjKFsvO/AsutwaJdIaKMHlnwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFHg1CF9m22talyxe/7c07BpyW1dMB8GA1UdIwQY MBaAFFcPsPHYuMGYsNyGFYr7y8Upzxa+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2Qt OTcyNDNlMzE2MjcyLzEvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2QtOTcyNDNlMzE2Mjcy LzEvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs0mve80s nbq+K4W/VRadHnFEe/CP97tYfkNFpFtQx4ciD/Uh9k26Ld8Jm3U0l/8R3YoMkjCW S9pnyjfKtPyYgRZvcQ/llvgMYqU1YfKqCmvglZ52ix3lNfV6FUzoCZIXb/gYzrHJ 3bHC+/YB02ScFRoUiV8Aexnju5/eprimPpOc2eMQmaOkeJEEMOnyfvdatULNoPt2 oYN69F7QBBFYb3RDyA8yPqxgR7aZwJtZ7w6ZMxcdAV6fRurXFl0Y9mj9OCe/bYrP ipEjR/Xn+THNv9Yg+ypPHvvxHredjYDUXxLJYjuas1D77FTmPCaJ4TpuxMa385LE wCtCmEoZIpnBuA== -----END CERTIFICATE-----Generated at Sun Jan 19 13:52:28 2025 by rpki-client on console-ams.rpki-client.org