$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft File: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft (raw, json) Hash identifier: hlkXRWLNml3bsuC9SXdp424lqlVMWYFe3rwc7G0hD5Q= Subject key identifier: CD:38:E3:73:AE:5A:45:02:F5:B2:1C:17:18:58:9E:74:00:AE:13:D6 Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Certificate serial: 0193527516D923ED3A000486413D7471F308 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft Manifest number: 058A Signing time: Fri 22 Nov 2024 06:00:25 +0000 Manifest this update: Fri 22 Nov 2024 06:00:25 +0000 Manifest next update: Sat 23 Nov 2024 06:00:25 +0000 Files and hashes: 1: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl (hash: Q6cqt0ZoJQHy1coorZUyka6/u425t1vgXrWl/b/If/Q=) 2: 1AQWjSnm0WhJ6F0b5y-3-DLej7o.roa (hash: GLxy2r6SeeNieaOiiANfcBtZOgBNio3BYpARbVg+yhI=) 3: 4xpXR_Etd35vjdJ3Q8jnYYRjNUg.roa (hash: UkJKgfmJnEMd5ritlhT5EU8VRL4jVhV5OjU6kdyjBkA=) 4: DNfhm4AoJ40rzATCHrfWx5qbol0.roa (hash: l+6KwIgtURszIE9NQBLBTuBUzHWhnZpoziHxXdpJlmQ=) 5: EnGnf8k30dGR_pX5oQlfubt0KsY.roa (hash: D7S22eHOUV/y6yaMVRcgHilzikQ7NKXRSVRU2PzQc2Y=) 6: IEgLQasIvxFgpbs3nHHDTsw_UsY.roa (hash: gFy6uf5fLDb8up3vJkiCcsZAC9FEQ+3Nx4++GBLSHUM=) 7: SA4--3RL1LKqftGapPAScoFDGdM.roa (hash: 9BSX+UaSRLiXdFwKfd1GLeQrhAGBTCGU7o960nM2+GY=) 8: ToF5l8DCExkQcY0QHp9NExWH5RA.roa (hash: P5+ykW4ltz6S9olm6Oh/wv18eyEbePulWULbAVEpMOI=) 9: XUV4JRW-ai1T4wF5ZAfu-Ue0Opg.roa (hash: 6g9sUspuesWJYqdJawnK4pgjfM/4XBYjUI9a8ZkJJWo=) 10: cdsoUFAdJgWL_j4rHsZ2vMBUeI8.roa (hash: x6nJ8K6G0r9cKksDQfXKr3zsOqSkQ6B1qQIpitYM+k4=) 11: dFYPzOgdi-o0CqAiwUEDqujH8jM.roa (hash: wnjpZzhWqA5Sarwurpd6l20OKLL/O3LvkhvptyJeruY=) 12: eIO97GZXBydXQFj6kpA2-L-rYcU.roa (hash: XipyPoVrZXunqXyqFQy4aTj+gTaY0boeIvO5yibA6pc=) 13: eaYzedJj0iHFcG0KYnXaq2WaMrg.roa (hash: EFdmtdvNcZKPHNju/URsb5ZZ0wsMbSniQxdmPqLJJss=) 14: jzXTPTSD_K215cMwmji9Zln3piA.roa (hash: dwRwG+tHI3ydjTnXB6lcJhROeJNPUuHHKZQu6XT1Nu0=) 15: kz3hoOWyavw2LrJQcxkzBKUy5ZI.roa (hash: 0JtDfkag4LIPJIPlxvxwqeq+8Znouwd3p2cvXxm+OJ8=) 16: lEpdcOOSnqCtPstkDPmQZY9LdDw.roa (hash: xXnCJM6QOJ9sG4LIVJ7Xc9EaDGHbE2E7DOKKIFu713w=) 17: mHzZzgknUAcrvhj_kjntELHvMB0.roa (hash: gwynICDbz58p3mWrfvUhWqu+cbZbFB/4R9mNZkHZYwo=) 18: s1EaQ-YL_sgjCndIS6g3bXrXxIY.roa (hash: +8Pq6Wxmq7kvchQzxKBoNTOpN70O8J+c8N8Rb29Hhho=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 03:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:52:75:16:d9:23:ed:3a:00:04:86:41:3d:74:71:f3:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Validity Not Before: Nov 22 06:00:25 2024 GMT Not After : Nov 23 06:00:25 2024 GMT Subject: CN=cd38e373ae5a4502f5b21c1718589e7400ae13d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7d:cc:27:ec:df:14:be:ff:a1:ce:74:42:11: 15:98:f2:38:21:9e:9a:f3:f1:45:d1:a2:cf:4d:c1: 9f:49:89:d3:98:20:78:fe:c6:76:3e:4e:92:15:bf: 6a:f5:fb:d3:c4:11:7b:d0:17:33:7d:ae:e2:9b:a3: 96:ab:5f:e2:1f:ff:fa:d4:bb:4d:ce:0d:db:89:a1: a6:15:b0:20:bd:63:67:e4:70:f2:3b:5a:44:43:7f: c2:5e:c5:4f:8b:0e:e8:58:b8:cd:27:39:e2:33:fc: 1e:52:48:2e:cd:c4:01:46:47:af:e0:3c:86:80:ad: bd:51:20:92:70:6f:9c:90:11:d4:82:59:57:79:fb: 12:7d:ac:10:1c:66:2b:d4:6c:40:ce:75:0d:1e:c0: 4e:f6:67:0e:f6:74:b3:29:bc:bb:95:17:21:fb:f5: a2:fe:2e:69:f7:0d:d4:55:44:d9:3b:ed:23:48:cf: 6f:bb:a8:d6:da:04:08:8c:a1:04:c5:3f:42:d6:fd: 09:72:58:6f:bd:24:2c:40:3a:c7:d6:4a:b8:fa:8f: 65:9d:5e:f7:70:3a:c0:69:21:83:a8:bd:46:df:37: f4:12:ef:24:dc:75:cb:a4:18:ff:29:ae:f5:50:9a: f7:fe:ae:03:e7:d9:be:f9:39:1f:ea:d2:4d:31:30: e8:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:38:E3:73:AE:5A:45:02:F5:B2:1C:17:18:58:9E:74:00:AE:13:D6 X509v3 Authority Key Identifier: keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:9f:3c:0d:31:3d:2a:3d:82:4c:34:07:6b:1a:ff:32:69:ba: 56:8a:44:b6:96:5e:c1:21:68:84:ab:09:7a:60:58:6a:04:b7: bd:1c:f3:2d:d4:9e:89:7c:7a:ff:e3:6c:8e:56:a6:2b:05:5d: 72:64:4a:00:b5:26:61:a2:26:bc:0e:0b:3d:38:2f:5e:2e:a8: ae:b3:5f:91:2d:7c:41:34:a2:9e:cd:f9:42:82:5c:39:1a:d9: 60:61:31:84:67:b1:6a:d8:43:01:52:68:dc:9e:5a:16:0a:9c: d3:c3:72:d6:5d:0e:a4:74:62:ac:95:c1:e7:ab:a8:2f:72:0c: b2:89:e9:8a:32:f1:63:e3:c4:ea:1c:50:48:5c:61:1c:8e:2f: 0e:bc:b8:d4:53:ff:a9:7a:34:74:ea:6b:88:59:87:8c:9f:b0: a6:5d:9f:94:c4:06:ab:4a:e1:9f:8f:a4:39:20:a7:fb:76:5a: fe:10:d1:c0:1e:99:ab:a7:47:0b:d0:90:df:c0:89:26:80:03: dc:da:c6:48:3a:de:2b:3b:85:1f:c9:66:3d:f9:88:27:8d:c0: c5:8b:9f:cf:b2:95:c4:a0:35:ad:a9:88:f6:c7:ca:c2:20:cd: 52:35:67:d7:29:b4:1b:2b:11:21:a4:55:5e:3d:5b:c9:d8:45: e2:bd:c5:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNSdRbZI+06AASGQT10cfMIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZTk3MDMzYTM2YWE5YmNjMGMyZjE2N2U2MjBkN2NhMTQ5 M2NiZWEwHhcNMjQxMTIyMDYwMDI1WhcNMjQxMTIzMDYwMDI1WjAzMTEwLwYDVQQD EyhjZDM4ZTM3M2FlNWE0NTAyZjViMjFjMTcxODU4OWU3NDAwYWUxM2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvX3MJ+zfFL7/oc50QhEVmPI4IZ6a 8/FF0aLPTcGfSYnTmCB4/sZ2Pk6SFb9q9fvTxBF70Bczfa7im6OWq1/iH//61LtN zg3biaGmFbAgvWNn5HDyO1pEQ3/CXsVPiw7oWLjNJzniM/weUkguzcQBRkev4DyG gK29USCScG+ckBHUgllXefsSfawQHGYr1GxAznUNHsBO9mcO9nSzKby7lRch+/Wi /i5p9w3UVUTZO+0jSM9vu6jW2gQIjKEExT9C1v0JclhvvSQsQDrH1kq4+o9lnV73 cDrAaSGDqL1G3zf0Eu8k3HXLpBj/Ka71UJr3/q4D59m++Tkf6tJNMTDoaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM0443OuWkUC9bIcFxhYnnQArhPWMB8GA1UdIwQY MBaAFNPpcDOjaqm8wMLxZ+Yg18oUk8vqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMt ZGJmOWQ0MWYxNzk4LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMtZGJmOWQ0MWYxNzk4 LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASp88DTE9 Kj2CTDQHaxr/Mmm6VopEtpZewSFohKsJemBYagS3vRzzLdSeiXx6/+NsjlamKwVd cmRKALUmYaImvA4LPTgvXi6orrNfkS18QTSins35QoJcORrZYGExhGexathDAVJo 3J5aFgqc08Ny1l0OpHRirJXB56uoL3IMsonpijLxY+PE6hxQSFxhHI4vDry41FP/ qXo0dOpriFmHjJ+wpl2flMQGq0rhn4+kOSCn+3Za/hDRwB6Zq6dHC9CQ38CJJoAD 3NrGSDreKzuFH8lmPfmIJ43AxYufz7KVxKA1ramI9sfKwiDNUjVn1ym0GysRIaRV Xj1bydhF4r3FZQ== -----END CERTIFICATE-----Generated at Fri Nov 22 09:51:30 2024 by rpki-client on console-ams.rpki-client.org