$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft File: 8EpYBH83u8BXlEu_jK2HQoeVkto.mft (raw, json) Hash identifier: FDTbPuTxAOE3XWa+gmQCaBIVbwyY4c3j2nlruMZym7s= Subject key identifier: 37:BF:AD:14:8A:FA:7D:EF:2E:44:CD:84:23:BB:3F:80:52:43:D7:D7 Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da Certificate serial: 0193523E299022FEC841DFE41132CCC1F113 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft Manifest number: 01D9 Signing time: Fri 22 Nov 2024 05:00:25 +0000 Manifest this update: Fri 22 Nov 2024 05:00:25 +0000 Manifest next update: Sat 23 Nov 2024 05:00:25 +0000 Files and hashes: 1: 0HuPQoQJtD4_eJkRPoOjTJmAFu8.roa (hash: LxyK41q1CvN7wgv66Lr4B7qVHDVYhBKIC+8jJpr2fgQ=) 2: 4ilFx2_g9_bGOH8N4bldsE-MZsQ.roa (hash: a86btDXqjhOiCCnsvs3g/18kJwvIJ97v1//JqbnmvFA=) 3: 58guWZv4SYLXAkZH_qU3pvd-zEY.roa (hash: BgNPFyX+N0xZd+6eVC5wC/nCZfcJ7VXggP7w4a6eClk=) 4: 6knSuGxoa84UpsSh1pq0ZMPAIlI.roa (hash: CP5bI+fDjifx7Zm+6897ecq5vDTWAa2KiwiH4eTYUfM=) 5: 8EpYBH83u8BXlEu_jK2HQoeVkto.crl (hash: PQ+3A+6UXyFsSQP8hi6dEcHzgngI5u5hpaNOQCNYTeQ=) 6: KJR7-IqRRlbMQLf8-5AoKFLpSbE.roa (hash: z7nLLFNufGDsQvSxWMo76sAeq/4hWg5EmtSqXZOP3qs=) 7: KyksSzNk0uekdI0kt_wBIpwTyX8.roa (hash: RwJaU2URFEpVmlldktj5SDbcONdCva8ixNKayrpqVr0=) 8: S0vSbU01S9ItJ-UwBRv--R-iBvI.roa (hash: G1Ael5iCT4NF6NtIr0dZiu1glOLWgY+sUZUmwT1473o=) 9: TkToD_H1ekCM_j4lHtsMx3f6OD4.roa (hash: eDy7irDxRyzxUDEY9PbBrujENzF7ppTGScjUhZVdnUE=) 10: XhEWPlKF8E_xzquozYlsYpQIiys.roa (hash: qTv4hK5lTRjAWQ+7fzOUr4t+4VwN3A7BAYUA7yqWx1Q=) 11: YM1tKfihR4z5cXmE1Jjl24S18eg.roa (hash: U43Ucgs65abrclVtS1PPkbK1jJhb18h1M2nHnnl+CL4=) 12: atFhyi7gWxV2La5_lU9KIlieNIU.roa (hash: JEn4qsPWhY9F+xrVjW60O5AHPawjuz+5mrlZBPNXMos=) 13: efP4Dktot21j2v4ko3pXy4i55d8.roa (hash: iBtVJb8u3EnSleqllRfSZBP101OAavzb/vrmJOfEZEs=) 14: fp9PQtu62Ub6kx91jcWQrC_PgRI.roa (hash: pMeO0yybt/4DBKSC3zYq4chrQlmYKvrBRORrPi7DDvE=) 15: gNXDjGJgnElzGJw3o-3Ql5EZL4o.roa (hash: TJgckhJBBRpGYhyFD0yw9m34NxU8anFsSaa5uVJg8R8=) 16: gi4rNk-7pyNGhmQq8040k4Mc6DI.roa (hash: Y3+op0bF4O7Rdmvi9FK/04wfydeHFid5TZZrXT0ZYSA=) 17: k7d3LA1YIWqnahmt-7x8f3_nXM4.roa (hash: Ut5wyTFNMnOguvZ/IXfxpTL5+wEhKu4r94ZXUtHnpvA=) 18: neq9VT5oHeDFLQRo4N9m6wlldQg.roa (hash: iuEZzNuV7Puajkqk/Cq7gQXve9j0W2wUql/7EniiQl4=) 19: sd6v89zIPJtb8Ql4lzq3HU29X5Y.roa (hash: S1CW8ivn0ByAeLCebySyrjQIx+0KzxMzdt3E1pJcaZk=) 20: ucEOUhU3l0s_qDGiUbvzb1dVB6Q.roa (hash: wQMe6LXIoAZf+HvUdmkwIBlFs0SFQwnGhzpHY3/Fl6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 23:17:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:52:3e:29:90:22:fe:c8:41:df:e4:11:32:cc:c1:f1:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da Validity Not Before: Nov 22 05:00:25 2024 GMT Not After : Nov 23 05:00:25 2024 GMT Subject: CN=37bfad148afa7def2e44cd8423bb3f805243d7d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:fd:71:f2:e3:1c:37:3a:c2:4f:5e:3f:00:90: 1e:ab:26:d4:f4:7a:9e:41:91:e8:b5:3c:7f:35:c4: c2:35:22:d4:f7:a5:69:fe:de:7d:c9:2b:f6:fe:65: cc:78:87:48:34:64:fd:b5:bc:60:1c:94:45:6e:8f: 2a:d9:22:8b:d8:6b:fa:dd:5d:c4:4d:c9:8b:21:eb: 32:e0:e0:b7:40:8c:f7:58:27:f7:18:d4:93:13:93: ad:98:94:f0:ce:60:80:e5:a8:da:bb:42:6e:a6:cf: 47:a0:d6:94:b1:8d:13:8d:af:f6:96:f3:c5:be:4a: 9b:73:13:24:9a:2f:67:f8:d4:36:4c:dc:f0:44:f0: dc:16:07:b5:ae:9c:7a:e8:25:ba:af:7e:f3:c7:99: 47:7b:c8:8d:39:22:17:df:22:9b:0e:e1:98:0f:9d: 9c:0f:94:06:82:7b:60:76:31:fe:ee:f3:10:95:43: 9c:d3:3e:e6:34:c1:67:d5:12:77:d7:a6:e2:51:a5: 1a:09:fe:44:a6:9e:21:df:42:c5:a4:70:3f:45:91: 81:e8:26:c3:32:88:3a:48:22:f3:c8:70:f2:3d:08: f3:0d:b6:5c:73:4b:77:3e:f7:6d:00:1f:7e:2e:7e: 9f:57:89:9a:6a:f3:66:12:6e:67:24:bb:9f:44:38: 91:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:BF:AD:14:8A:FA:7D:EF:2E:44:CD:84:23:BB:3F:80:52:43:D7:D7 X509v3 Authority Key Identifier: keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:d5:fb:4b:ad:bf:00:76:6c:dd:69:91:eb:16:65:7f:eb:ba: 73:73:f4:46:77:a1:7b:a8:c3:ff:a6:71:a0:86:ac:a3:31:a9: 16:bc:fc:aa:14:27:7d:7e:bd:41:ee:eb:9e:f5:99:a5:9b:34: 3e:50:9b:55:5d:8a:87:0c:fc:67:7b:8d:01:c9:2d:24:0b:57: ef:1c:b9:16:12:8e:45:01:9c:8c:2a:4d:a1:79:60:be:b3:ee: 4e:b9:22:00:73:fa:2a:2f:42:fa:53:aa:18:a1:ed:64:97:a3: 4b:04:8c:f6:a9:69:a2:cf:87:d0:e7:52:c9:4d:42:28:27:a6: 4f:2d:11:76:22:ec:43:ca:46:88:21:25:a1:a3:7e:4d:38:2e: 85:61:3c:47:3c:32:c8:39:b8:d9:11:dc:98:ea:c9:3b:86:20: 8d:9f:54:1e:fa:0f:62:74:19:9e:a7:4d:aa:e1:77:8c:e1:38: 3e:5c:46:1a:5b:49:11:00:57:4e:35:c8:24:0c:d0:38:ca:7e: 73:77:d1:eb:ef:0a:c1:d9:eb:af:07:e1:0c:8d:d9:35:25:67: 24:06:94:08:e0:bf:71:1c:79:ed:7c:ba:ee:2b:48:cb:4a:29: e0:d9:64:ca:87:d6:db:3b:b0:c4:32:87:83:2d:47:45:ea:6a: 6f:1a:11:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNSPimQIv7IQd/kETLMwfETMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5 NTkyZGEwHhcNMjQxMTIyMDUwMDI1WhcNMjQxMTIzMDUwMDI1WjAzMTEwLwYDVQQD EygzN2JmYWQxNDhhZmE3ZGVmMmU0NGNkODQyM2JiM2Y4MDUyNDNkN2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/1x8uMcNzrCT14/AJAeqybU9Hqe QZHotTx/NcTCNSLU96Vp/t59ySv2/mXMeIdINGT9tbxgHJRFbo8q2SKL2Gv63V3E TcmLIesy4OC3QIz3WCf3GNSTE5OtmJTwzmCA5ajau0Jups9HoNaUsY0Tja/2lvPF vkqbcxMkmi9n+NQ2TNzwRPDcFge1rpx66CW6r37zx5lHe8iNOSIX3yKbDuGYD52c D5QGgntgdjH+7vMQlUOc0z7mNMFn1RJ316biUaUaCf5Epp4h30LFpHA/RZGB6CbD Mog6SCLzyHDyPQjzDbZcc0t3PvdtAB9+Ln6fV4maavNmEm5nJLufRDiRAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDe/rRSK+n3vLkTNhCO7P4BSQ9fXMB8GA1UdIwQY MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt ZjVmYjcxYjlhNTFmLzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAitX7S62/ AHZs3WmR6xZlf+u6c3P0Rnehe6jD/6ZxoIasozGpFrz8qhQnfX69Qe7rnvWZpZs0 PlCbVV2Khwz8Z3uNAcktJAtX7xy5FhKORQGcjCpNoXlgvrPuTrkiAHP6Ki9C+lOq GKHtZJejSwSM9qlpos+H0OdSyU1CKCemTy0RdiLsQ8pGiCEloaN+TTguhWE8Rzwy yDm42RHcmOrJO4YgjZ9UHvoPYnQZnqdNquF3jOE4PlxGGltJEQBXTjXIJAzQOMp+ c3fR6+8KwdnrrwfhDI3ZNSVnJAaUCOC/cRx57Xy67itIy0op4NlkyofW2zuwxDKH gy1HRepqbxoR4Q== -----END CERTIFICATE-----Generated at Fri Nov 22 06:39:34 2024 by rpki-client on console-ams.rpki-client.org