$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft File: Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft (raw, json) Hash identifier: pl79jl8SdXO/qfJ1DmQDTDdprQetfjJHcSqDKG6it40= Subject key identifier: B5:42:BB:B5:FE:42:D0:3D:F5:D3:71:E3:65:68:AF:BE:12:55:44:DC Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e Certificate serial: 019352750DEE202696052D413E1A8A699242 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft Manifest number: 02D1 Signing time: Fri 22 Nov 2024 06:00:22 +0000 Manifest this update: Fri 22 Nov 2024 06:00:22 +0000 Manifest next update: Sat 23 Nov 2024 06:00:22 +0000 Files and hashes: 1: 3F47ONkNmG4y6ep3RmeANALPy7E.roa (hash: dl1jpQAqlqiYf7TnsmAuOh73rZA+ZLiLHRmHqq38ERQ=) 2: 5w6PENEMRciwpLZ00ck9zbmlgWM.roa (hash: spvc9xlc6NqbJAkfD2Uzmz4op76RA8HEFEtC1+YFuvo=) 3: B72N3-hkcDm2l0G1zqwOKqUPq_g.roa (hash: ZyLI5x7lynXit1kA3fhSfEeisLDoqUMBfOxOFNvGo18=) 4: FWozddvLuq52XcJBbgt4AlIwmj0.roa (hash: QP24nRz6dC+uxniRQqT9pPcaGmZSZBY3tBeDJifgyGc=) 5: Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl (hash: 4yUKQmbvtMjW06AAXexgYBiwDVBW8dtqk452Q69qTU0=) 6: MTNnDZV-MlP6WG1y-4o4qp8lsyg.roa (hash: Lun25VNzyFV5WQ1nZMML4E/6Wps0qhgXpxfi4lOoZ50=) 7: OPiWzmUz5qpy0tmWxyysE2cEBaE.roa (hash: 5Qd8Jp5RPwlHleKDvoq8F0PZaCb8ysob0KM1f3ucIVk=) 8: S7ZyQkVf4m0v3orcylYXFlCmn9Y.roa (hash: fwpsgybcFimiS9wHEouaxMWh/X0cpPM8W/FLYIoPNuc=) 9: UaW7zG2HGo01gVJxSkw6OdjGMMU.roa (hash: uk5XMd7BNOg40JUfygX0cSvVnUHPx9uXOejkZVDIVGM=) 10: WeEl0o2gVUhOZEVxJQLfIqK3lTM.roa (hash: +ZbHzatkpesJfc4zJ4Ri+dRKSGBLTMRdFLEno4GSoQQ=) 11: Xinoe1601OCX-luzD-zzFlT4CCU.roa (hash: jufvNm2VIys02/xYRheANcLuo5pm4OLywW1z+gffJwA=) 12: ZmdKPZitqde_a22dneHqOv7d9sE.roa (hash: 8De/Rx3fsxc088ItBl1n9R0cjNG6WOiQL4xmOGNPJDY=) 13: _TyobVh_GGECJJfh829OLA7jfL4.roa (hash: tzw0+jiMH71eDRWBZhdYwLQMBujP5unrYWFM2Ncr+64=) 14: krWQcS7n7RI8KN22AL7QJxqBAmc.roa (hash: iVjKvzX71DW/zLsg1IqhKN92iglH39Pfyg0X/Mi4GBY=) 15: nB9wgmZdk5LYBFKi1BmY4W12If0.roa (hash: KPglfR72l0JbJDCNEmHxbG4x8Yt0wMedaKJMZhdrQv0=) 16: riCYQ_Y9EZ8qyjNezLv_dODNmcQ.roa (hash: SAMPC/SkdVwSGbYbgsvWQh4MG9t/vb18mOt5XhoMdyE=) 17: xYrO1PXu7z2F_ZuoL-wCUAlK8P8.roa (hash: 8U8w4wzCiqMzY11Ar23O9j2815rpaH6XMp/B/uJcMP0=) 18: yoFz9g0HyqvVvYk6wjKS2k3SDaA.roa (hash: RtYaR0baCg3KQgtOunuEe+2SPtBnh8hWLo1bk7o9nWg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 03:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:52:75:0d:ee:20:26:96:05:2d:41:3e:1a:8a:69:92:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e Validity Not Before: Nov 22 06:00:22 2024 GMT Not After : Nov 23 06:00:22 2024 GMT Subject: CN=b542bbb5fe42d03df5d371e36568afbe125544dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:62:71:31:89:e7:c2:66:4e:45:81:06:48:76: 92:23:c2:e4:00:0d:95:30:f1:ea:7b:00:17:5d:8a: 48:03:70:84:4c:8f:43:cb:42:4a:f1:ff:6d:0d:53: 04:6d:9c:80:d9:ed:28:81:c3:1c:1f:f4:c6:46:e8: cd:37:cb:1c:e3:f2:de:d3:7a:31:8d:8f:7c:8e:ce: ed:e4:3d:b1:5d:99:ea:f6:6c:b2:a6:67:fb:12:5a: 84:0d:b7:14:e5:2d:22:04:a9:fc:56:eb:ff:0b:6e: 19:a0:c8:5b:a0:3c:f8:39:b8:8f:bd:d6:a1:8d:67: 25:d4:f2:d0:b3:99:c4:b7:69:1e:5d:2b:1d:47:3c: 52:62:e3:a4:db:18:59:c4:e6:79:62:cd:e5:98:f0: 31:de:1c:0a:ba:3d:3e:39:14:c6:97:7c:26:72:b8: b1:da:fc:9b:b3:3b:69:81:e5:a7:df:bd:18:b5:5e: 79:a4:f2:f7:30:69:5d:43:d3:aa:cc:32:e8:ee:5d: 02:25:bd:cc:b8:ec:a3:a8:9c:34:5f:92:20:01:91: cc:ff:41:8d:4d:e5:92:38:96:ff:21:a4:d6:75:1b: bd:16:26:2f:50:b3:d4:8d:ed:08:26:6f:c1:5f:2a: f2:2e:41:f5:04:e9:ac:f3:eb:fd:50:c2:d0:b0:32: a5:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:42:BB:B5:FE:42:D0:3D:F5:D3:71:E3:65:68:AF:BE:12:55:44:DC X509v3 Authority Key Identifier: keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:21:a0:a2:ad:fb:ba:df:8a:65:53:44:05:a2:c9:0e:09:db: 62:af:b2:4f:da:cc:ac:97:7c:2e:ce:dc:03:7d:10:c6:e6:c4: b1:47:78:38:4c:23:a7:31:bd:e5:fe:33:b2:86:08:8a:d4:b1: 5a:93:46:b2:27:d3:eb:f5:ee:7e:76:76:4b:8a:a0:fc:bf:d5: 9c:1e:3e:64:4d:2b:d2:d9:94:16:61:6f:b1:d6:c2:c9:50:c0: e4:31:ec:0a:fb:5c:13:c9:6f:9f:36:6b:e9:3c:31:98:98:e3: fc:d6:7a:47:1d:d4:d2:47:d3:3c:d9:7b:74:5e:dc:56:53:ce: 3b:5d:2d:1b:fd:f5:d1:4e:49:5f:2b:91:be:5a:0d:cf:cf:c2: 57:51:54:11:f6:0a:e1:3f:7f:8b:9b:be:17:9e:97:83:c2:68: 41:93:a1:a2:fb:a2:40:e0:5c:b9:a7:54:5f:3c:fa:49:ea:10: 25:4d:2f:2b:90:f0:5b:34:ad:74:58:8c:08:f6:97:71:e2:e6: 34:88:24:74:24:b1:88:18:b0:ae:96:05:41:85:2e:3e:71:9a: c7:96:1d:f1:22:96:03:a8:23:3a:72:1e:bf:67:04:34:4a:d0: 9c:5c:4b:f3:b3:5f:cd:86:bc:22:f8:dd:42:f3:45:fb:55:d6: fb:5f:ff:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNSdQ3uICaWBS1BPhqKaZJCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMmMyMTlmM2MyOTdiNzc1ODgwYzNiNjUxYTIwMDNmOWJl NmRlNWUwHhcNMjQxMTIyMDYwMDIyWhcNMjQxMTIzMDYwMDIyWjAzMTEwLwYDVQQD EyhiNTQyYmJiNWZlNDJkMDNkZjVkMzcxZTM2NTY4YWZiZTEyNTU0NGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmJxMYnnwmZORYEGSHaSI8LkAA2V MPHqewAXXYpIA3CETI9Dy0JK8f9tDVMEbZyA2e0ogcMcH/TGRujNN8sc4/Le03ox jY98js7t5D2xXZnq9myypmf7ElqEDbcU5S0iBKn8Vuv/C24ZoMhboDz4ObiPvdah jWcl1PLQs5nEt2keXSsdRzxSYuOk2xhZxOZ5Ys3lmPAx3hwKuj0+ORTGl3wmcrix 2vybsztpgeWn370YtV55pPL3MGldQ9OqzDLo7l0CJb3MuOyjqJw0X5IgAZHM/0GN TeWSOJb/IaTWdRu9FiYvULPUje0IJm/BXyryLkH1BOms8+v9UMLQsDKliwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLVCu7X+QtA99dNx42Vor74SVUTcMB8GA1UdIwQY MBaAFBssIZ88KXt3WIDDtlGiAD+b5t5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEt OTJjODFmMjJlNzEyLzEvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEtOTJjODFmMjJlNzEy LzEvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUSGgoq37 ut+KZVNEBaLJDgnbYq+yT9rMrJd8Ls7cA30QxubEsUd4OEwjpzG95f4zsoYIitSx WpNGsifT6/XufnZ2S4qg/L/VnB4+ZE0r0tmUFmFvsdbCyVDA5DHsCvtcE8lvnzZr 6TwxmJjj/NZ6Rx3U0kfTPNl7dF7cVlPOO10tG/310U5JXyuRvloNz8/CV1FUEfYK 4T9/i5u+F56Xg8JoQZOhovuiQOBcuadUXzz6SeoQJU0vK5DwWzStdFiMCPaXceLm NIgkdCSxiBiwrpYFQYUuPnGax5Yd8SKWA6gjOnIev2cENErQnFxL87NfzYa8Ivjd QvNF+1XW+1//bg== -----END CERTIFICATE-----Generated at Fri Nov 22 09:51:51 2024 by rpki-client on console-ams.rpki-client.org