$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft File: XGT50E79Wp_C4jtC1bUa79mlAlA.mft (raw, json) Hash identifier: qdqd00T0v9kBiV2NdEREfwNX3LawSamJ+EQh76tWHeE= Subject key identifier: A2:00:95:87:C6:D2:BC:4D:30:64:8C:2A:51:1C:D7:6E:6E:BA:F5:D6 Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Certificate serial: 019510FDAF19A6FDC8907F0A302165BFED90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft Manifest number: 1473 Signing time: Sun 16 Feb 2025 23:00:15 +0000 Manifest this update: Sun 16 Feb 2025 23:00:15 +0000 Manifest next update: Mon 17 Feb 2025 23:00:15 +0000 Files and hashes: 1: 06heLpkhPZDIbobUdBVrEl7tRaM.roa (hash: 1VfnXVrmD1QJCPPP0yoMA9t0Y95B+NtzKULxpukikqQ=) 2: 1-7srUVzARA4xVURDrN0ctODQwdQ.roa (hash: P4YrVg252IK8SRFMmJgFTH+iwKi8WxZPmHvSUJo9IQg=) 3: 528KTEkQew3OKB0sdZbyrpr76lo.roa (hash: vzEojXovmM1vbii6xpgBaXVLuyQKtmvj4cwlpTlnTnA=) 4: 72JEe-00Ual0E3pLPOzH6dkP-3w.roa (hash: o/FbFlYdu7g/7qsp0pKUPBU58dJygqt7aSC469aYwb8=) 5: Ixb9Rp3BUGuCjodjx9_sm0c2sXM.roa (hash: qXvey4tAX4WrIl01LSbpPMRORAk5gKbyzsotdzlnvoo=) 6: KiJzynW70gOM8utuToFlDE5SLhE.roa (hash: VbxFgoFKgh7bEAINakuNKMNp8+JyIC/TKEKu7KN+dqM=) 7: PssutozgBGzRs26W1ySJCO5ROLo.roa (hash: YT+U5YwGeEWz48rjXImiq+AZg6CEQyCsEppguEQLMZ0=) 8: QuvIHJ_zDp79PlKu2Sbh4NNdspg.roa (hash: hhfcVBSgfoghlGavFr1P4xcaklB4xBtbf4e22DxcY90=) 9: XGT50E79Wp_C4jtC1bUa79mlAlA.crl (hash: Tiv1flKP5deVRhPGLDIQM8WgF1zPBVmSxF7rgBSWeiE=) 10: Z4QpcHYXBCOxLZCFjGoLrz6cFGk.roa (hash: oyUwzFN1AaMW4pBeh+gugcld7qVJlrTpQ8Umw+uhKM4=) 11: a2zXnZAHmh1NIwZ9fUmSeVc-vBI.roa (hash: Z/HZstAfRIWxIQG++DsdK1OrDaZy2rJY9S8trXlDxcg=) 12: fRzBlknRWk3t4b91mxQk8dqb_2Y.roa (hash: cPMuJbsksIwU/j2kV2oDubx0GXlx2nf0bAxSupdFKUs=) 13: jPANCISyHLo1EQMQo3UvOCo2r-g.roa (hash: QX0NEmXb/V/lbpN+XcN8zgz+/ba2in1l075yFkCu/48=) 14: tqcB3IDCxjadXrA6Ts7NqmHf1Lo.roa (hash: Wfp7RVYDKQPn5CU+Zk9mzBupBD5mIq/A37zszm0IaiQ=) 15: xb3vyIEtuTHF1sdQebrEb3z28Q4.roa (hash: 1xi/Jh3IEnrX/jjKazAV/ViHmezAQHHlu2yeCxiDRno=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 17 Feb 2025 23:00:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:95:10:fd:af:19:a6:fd:c8:90:7f:0a:30:21:65:bf:ed:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Validity Not Before: Feb 16 23:00:15 2025 GMT Not After : Feb 17 23:00:15 2025 GMT Subject: CN=a2009587c6d2bc4d30648c2a511cd76e6ebaf5d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:d8:e1:d7:db:b4:1d:fb:13:f3:f8:c5:c6:78: 77:e4:5d:9c:bf:b8:94:43:e8:ef:41:97:ae:e1:d1: 3c:8a:85:1d:cc:1b:68:d8:81:fc:af:e6:d5:3c:22: 37:f6:f4:36:d6:ee:e4:84:aa:a5:81:f1:70:00:51: 57:80:df:66:3a:53:80:b7:92:96:27:46:69:c3:9f: 15:d1:1a:24:1a:1b:db:3a:79:23:41:ca:b3:eb:00: 63:99:34:fe:f4:28:2d:3a:b3:30:86:8b:22:81:b6: 42:b3:58:19:31:04:4a:f4:f3:14:89:e5:03:14:44: b2:85:4a:76:d2:59:5c:4e:a0:29:9f:64:d5:95:0b: d8:99:82:e4:13:0d:1b:ed:c9:eb:ae:9c:2a:e0:92: c0:07:07:17:f1:89:0c:65:de:3b:79:28:04:5c:74: f3:8f:8f:ac:47:3c:73:63:3f:88:ae:7f:4d:a4:07: d9:dc:87:fc:98:fb:28:42:a1:47:9c:c3:b9:df:27: 4d:7e:a8:71:c7:e1:61:96:ee:fe:02:06:d1:46:2d: ef:24:f8:32:3d:f6:88:9b:1d:17:d5:a2:1d:e7:53: 46:61:61:42:cb:20:6d:9c:dc:e8:95:df:41:8f:c3: 21:4e:cc:9f:78:d7:05:87:a8:c2:8b:bf:e5:bd:89: c5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:00:95:87:C6:D2:BC:4D:30:64:8C:2A:51:1C:D7:6E:6E:BA:F5:D6 X509v3 Authority Key Identifier: keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:d4:3b:41:31:1f:ba:7e:a6:b3:d6:22:d2:f3:36:46:0c:fb: 96:dd:71:ab:3b:fa:bc:d9:da:a9:76:67:c3:da:40:97:c5:97: 72:ad:c1:0f:b8:be:63:63:fc:bf:70:6a:98:9d:91:9d:1a:73: 93:b4:b9:19:a1:6f:b3:bc:4e:05:03:92:09:26:b4:91:71:49: 32:e8:59:5d:62:83:03:51:d1:92:f6:dd:b2:26:67:a6:f9:c2: f5:a2:29:8f:3a:a2:37:92:6b:35:a0:95:ec:73:f7:bc:02:05: 1e:60:89:04:26:3c:89:f8:7a:a5:30:47:f5:9f:96:c0:ff:80: f0:dc:46:5b:f8:01:64:43:1c:93:22:90:0f:09:09:c1:a5:dd: 3f:72:bd:20:e8:1a:8f:79:dc:8d:0f:93:c4:3b:79:69:b7:eb: 27:4a:6e:35:4c:a4:04:ba:83:44:de:01:e0:f8:fe:3d:aa:df: 92:8b:43:62:60:da:04:55:00:61:e9:22:bb:a2:43:04:e1:5c: 27:80:72:b7:8c:4b:eb:ba:3f:c4:89:9f:20:35:b4:79:a0:1d: 69:12:82:64:20:f6:50:0c:71:68:a6:fe:5b:f3:c9:59:78:c3: 7a:f0:8e:61:12:6b:c3:e5:a1:ac:16:df:26:24:f1:83:ad:59: f1:04:d6:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZUQ/a8Zpv3IkH8KMCFlv+2QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNjRmOWQwNGVmZDVhOWZjMmUyM2I0MmQ1YjUxYWVmZDlh NTAyNTAwHhcNMjUwMjE2MjMwMDE1WhcNMjUwMjE3MjMwMDE1WjAzMTEwLwYDVQQD EyhhMjAwOTU4N2M2ZDJiYzRkMzA2NDhjMmE1MTFjZDc2ZTZlYmFmNWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5tjh19u0HfsT8/jFxnh35F2cv7iU Q+jvQZeu4dE8ioUdzBto2IH8r+bVPCI39vQ21u7khKqlgfFwAFFXgN9mOlOAt5KW J0Zpw58V0RokGhvbOnkjQcqz6wBjmTT+9CgtOrMwhosigbZCs1gZMQRK9PMUieUD FESyhUp20llcTqApn2TVlQvYmYLkEw0b7cnrrpwq4JLABwcX8YkMZd47eSgEXHTz j4+sRzxzYz+Irn9NpAfZ3If8mPsoQqFHnMO53ydNfqhxx+Fhlu7+AgbRRi3vJPgy PfaImx0X1aId51NGYWFCyyBtnNzold9Bj8MhTsyfeNcFh6jCi7/lvYnF7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKIAlYfG0rxNMGSMKlEc125uuvXWMB8GA1UdIwQY MBaAFFxk+dBO/VqfwuI7QtW1Gu/ZpQJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUt YjY2ZmE0ZjQ3NjNhLzEvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUtYjY2ZmE0ZjQ3NjNh LzEvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhtQ7QTEf un6ms9Yi0vM2Rgz7lt1xqzv6vNnaqXZnw9pAl8WXcq3BD7i+Y2P8v3BqmJ2RnRpz k7S5GaFvs7xOBQOSCSa0kXFJMuhZXWKDA1HRkvbdsiZnpvnC9aIpjzqiN5JrNaCV 7HP3vAIFHmCJBCY8ifh6pTBH9Z+WwP+A8NxGW/gBZEMckyKQDwkJwaXdP3K9IOga j3ncjQ+TxDt5abfrJ0puNUykBLqDRN4B4Pj+ParfkotDYmDaBFUAYekiu6JDBOFc J4Byt4xL67o/xImfIDW0eaAdaRKCZCD2UAxxaKb+W/PJWXjDevCOYRJrw+WhrBbf JiTxg61Z8QTWMg== -----END CERTIFICATE-----Generated at Mon Feb 17 07:52:47 2025 by rpki-client