$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.mft File: dTm3oSNBeqcZMllGqong8wqwygk.mft (raw, json) Hash identifier: qbxbVLPAXoKaTYYoc9/st7T+27UV/5chuv/jW2B9FoE= Subject key identifier: A6:02:32:9A:66:2D:87:B0:86:96:25:FC:63:BA:6F:4F:DF:DC:1E:60 Authority key identifier: 75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09 Certificate issuer: /CN=7539b7a123417aa719325946aa89e0f30ab0ca09 Certificate serial: 0194BAF269D9F3C87E413E4E5CE23C2FD00C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.mft Manifest number: 1438 Signing time: Fri 31 Jan 2025 06:00:36 +0000 Manifest this update: Fri 31 Jan 2025 06:00:36 +0000 Manifest next update: Sat 01 Feb 2025 06:00:36 +0000 Files and hashes: 1: 6DEouzxjjNK_68sFR-t4CPN-SS8.roa (hash: Oi8D+F91F2i7lr20xSQLbZgZOtgMLQbrK5SvQlzaitc=) 2: GcwznvOYgf-O_ItmFmcLriyXzrs.roa (hash: GxJFlw75s4yOkIPA50toNBLYc/0teNDfXWriesa0E04=) 3: LYviAp3PxmjO3NYT62eUwATXCDA.roa (hash: cNgFyZaC7ifnpFT8pGCK7760nWd6v3gVDQo7PYoFJbc=) 4: MEvLBKznYJtmItKD78ssXi4mzoQ.roa (hash: pEF4lHoNxgZxriIYsg2W9oGgnigGshpc2ELBfuOnvBk=) 5: QL3J5aUF7REcuSuGJkHRh-T_Mlk.roa (hash: NRo/K62fCGXaYZyQldEoQlP95+Ec/K3+eWLflyYVYMA=) 6: Saq3VYHlza0IcEZF1whMhjsSAlA.roa (hash: iAqLC/j/inixhiy0KGKP177bZAzmIcZH/0FDe0WAUeQ=) 7: VOSDfxHvYjtBiBTe909ZadJMtPA.roa (hash: dQcuzaMdOD+0BiceMsluO5RG0GYGErSY43MYPGJaOdo=) 8: VVGAKlexZnslyaxsj979p9-1tLc.roa (hash: zSg/YLF7G2TzXt0TnTqPgj/B+dgWPQfBczFUSMDRTig=) 9: YWpo66YDW4G278af10SMQAtiOHo.roa (hash: Y9X0J6r0SDlIe4fmcLli4bcOvBDBEcbJdPc8zKihBto=) 10: dTm3oSNBeqcZMllGqong8wqwygk.crl (hash: Rio9jqyN8lZjAwKbCFMzY5H78H/LT7iWR7+J7PGG78g=) 11: jiri3_1wYxUytGVauPuF_p1QcDE.roa (hash: pAKnIcLWyugWirmmWEvyvb0vortDg2AUGgIHTvMYhkg=) 12: kV6R2Ovdk9Hj-oCFXECnloFy2r4.roa (hash: PiaTCFnxlB3VR92lDDt5EbEtyX7/8S00PG5z/8wHps0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.mft rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 01 Feb 2025 06:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:ba:f2:69:d9:f3:c8:7e:41:3e:4e:5c:e2:3c:2f:d0:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7539b7a123417aa719325946aa89e0f30ab0ca09 Validity Not Before: Jan 31 06:00:36 2025 GMT Not After : Feb 1 06:00:36 2025 GMT Subject: CN=a602329a662d87b0869625fc63ba6f4fdfdc1e60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:27:25:64:76:e7:10:6e:a3:0c:c4:b9:3d:41: e2:19:47:75:77:de:00:61:c6:fc:3e:c4:4c:49:b5: 69:5b:e2:60:e1:70:37:02:aa:ba:e5:3c:dc:90:a9: 64:20:af:18:78:c5:7e:70:b5:4d:03:ef:9a:f7:cb: 01:f0:6c:8a:d9:fa:11:c0:4f:85:40:69:68:bb:eb: 11:e8:d3:6e:78:8c:79:92:df:0c:5e:da:b1:a5:5f: 48:79:7b:bc:7f:39:c0:fa:a7:92:b1:38:19:d2:a7: 10:32:87:41:b1:7d:12:22:9f:87:d4:0b:2b:bb:dc: ed:23:3a:56:59:b5:27:50:8b:0c:87:4b:d8:98:31: ea:b6:5e:5f:c5:5e:0b:29:52:78:9f:22:8e:d8:63: ef:f0:d1:5c:a3:ea:27:8b:ab:5b:1d:71:24:67:73: cb:0d:bd:89:2a:5f:68:1a:00:2b:d0:4a:01:44:a2: 3d:d8:3d:f2:6e:cb:fa:c0:0e:be:79:0b:10:36:92: cb:e8:cf:86:66:57:3b:8e:0b:2b:27:30:5c:69:b2: 20:12:6d:fd:38:f2:1d:4f:e0:2f:d3:03:6e:c4:3a: af:ac:cd:66:7e:df:52:ce:4c:46:97:b3:84:91:6e: 8b:c3:49:89:61:9e:e8:c3:6a:14:8e:57:52:4b:2d: 3a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:02:32:9A:66:2D:87:B0:86:96:25:FC:63:BA:6F:4F:DF:DC:1E:60 X509v3 Authority Key Identifier: keyid:75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:7b:ed:0c:42:d2:38:52:30:7b:9a:d1:9d:26:db:0b:04:fc: 4d:c0:bd:70:10:3c:51:77:a1:da:4d:13:b2:71:1d:fd:9a:7a: 8e:69:69:9c:7e:9f:48:33:bc:e1:d4:5c:32:0f:38:44:ae:10: 00:5c:e3:4a:0c:b5:57:34:d5:0d:c9:09:04:88:7b:d4:5f:d2: 28:76:b4:3f:6c:06:06:5e:46:ae:a8:29:0f:f0:68:5d:a1:89: 27:73:3e:e1:88:30:05:b6:0a:56:37:21:2d:bf:3c:70:62:70: aa:3a:a6:4b:65:a3:c4:97:bb:61:f7:dc:f5:aa:4c:bd:96:cf: 54:26:fa:51:88:aa:e4:8d:f8:52:85:79:7c:08:48:3d:87:3a: c6:01:1f:a9:f1:08:c7:53:be:c0:81:14:7b:4a:01:b8:d4:69: 93:c8:a8:e2:05:e1:85:b5:f2:be:3e:bc:52:01:be:11:4c:23: b8:7b:fd:e5:2f:df:61:8d:7e:bb:a4:61:46:58:dc:d3:b8:d2: 38:2d:a0:d2:26:91:f5:91:35:3f:97:c9:e4:fd:11:62:24:01: 89:df:fa:18:00:cb:23:70:36:46:43:d5:f2:29:f1:33:29:27: 2f:34:5b:09:d0:21:d9:3c:da:eb:e3:d3:3a:d1:45:2e:6c:7f: 45:d5:7a:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZS68mnZ88h+QT5OXOI8L9AMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MzliN2ExMjM0MTdhYTcxOTMyNTk0NmFhODllMGYzMGFi MGNhMDkwHhcNMjUwMTMxMDYwMDM2WhcNMjUwMjAxMDYwMDM2WjAzMTEwLwYDVQQD EyhhNjAyMzI5YTY2MmQ4N2IwODY5NjI1ZmM2M2JhNmY0ZmRmZGMxZTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCclZHbnEG6jDMS5PUHiGUd1d94A Ycb8PsRMSbVpW+Jg4XA3Aqq65TzckKlkIK8YeMV+cLVNA++a98sB8GyK2foRwE+F QGlou+sR6NNueIx5kt8MXtqxpV9IeXu8fznA+qeSsTgZ0qcQModBsX0SIp+H1Asr u9ztIzpWWbUnUIsMh0vYmDHqtl5fxV4LKVJ4nyKO2GPv8NFco+oni6tbHXEkZ3PL Db2JKl9oGgAr0EoBRKI92D3ybsv6wA6+eQsQNpLL6M+GZlc7jgsrJzBcabIgEm39 OPIdT+Av0wNuxDqvrM1mft9SzkxGl7OEkW6Lw0mJYZ7ow2oUjldSSy067QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKYCMppmLYewhpYl/GO6b0/f3B5gMB8GA1UdIwQY MBaAFHU5t6EjQXqnGTJZRqqJ4PMKsMoJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFRtM29TTkJlcWNaTWxsR3Fvbmc4d3F3eWdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi84MDdlZDUtNTBiMy00ZTVmLTkzNjct NWI1ZTMzY2U3MGFkLzEvZFRtM29TTkJlcWNaTWxsR3Fvbmc4d3F3eWdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi84MDdlZDUtNTBiMy00ZTVmLTkzNjctNWI1ZTMzY2U3MGFk LzEvZFRtM29TTkJlcWNaTWxsR3Fvbmc4d3F3eWdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXXvtDELS OFIwe5rRnSbbCwT8TcC9cBA8UXeh2k0TsnEd/Zp6jmlpnH6fSDO84dRcMg84RK4Q AFzjSgy1VzTVDckJBIh71F/SKHa0P2wGBl5GrqgpD/BoXaGJJ3M+4YgwBbYKVjch Lb88cGJwqjqmS2WjxJe7Yffc9apMvZbPVCb6UYiq5I34UoV5fAhIPYc6xgEfqfEI x1O+wIEUe0oBuNRpk8io4gXhhbXyvj68UgG+EUwjuHv95S/fYY1+u6RhRljc07jS OC2g0iaR9ZE1P5fJ5P0RYiQBid/6GADLI3A2RkPV8inxMyknLzRbCdAh2Tza6+PT OtFFLmx/RdV6Ug== -----END CERTIFICATE-----Generated at Fri Jan 31 15:26:23 2025 by rpki-client on console-fra.rpki-client.org