$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft File: zbg8_lSJg18pTQr03U2249wl8fM.mft (raw, json) Hash identifier: DjRLMeN/o8s6gjiZTfM0ttfCVfb7K7qozWKhJewUSz0= Subject key identifier: 16:96:B8:E8:52:63:BF:2D:6F:B9:9D:A2:B3:01:4A:52:4D:E0:1A:3B Authority key identifier: CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3 Certificate issuer: /CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3 Certificate serial: 0193538833C8C47EE2AF54565F6507C2EA94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft Manifest number: 1387 Signing time: Fri 22 Nov 2024 11:00:55 +0000 Manifest this update: Fri 22 Nov 2024 11:00:55 +0000 Manifest next update: Sat 23 Nov 2024 11:00:55 +0000 Files and hashes: 1: 2B1mQlbgxSaXvo16VT-tf1_f2oE.roa (hash: hlL6IdasOSwfpyusOxkW+2xzRUgHeqpGjKSz9jGe8Eo=) 2: 3Xyrp7wKMOKt0HRsejvTVCzh61I.roa (hash: Vxl5P+4C0ZdUgIPnUJeHQSHPVe6XcawyqFo7xgR4eFY=) 3: 7fSKE-lZMWP26GyEnNVEb3-0Fww.roa (hash: sYEIDE0jVZ+tg+KC9JuVXM+c8CYzQg0VPGbOo+FU0yY=) 4: 8LNtOUXbFEe2EbsIPSH5XczKzlo.roa (hash: TUGsr6svPuccXDxbPIJR+BOyo5thf26v13nJL/NoULY=) 5: 8XxunJ-g7xSrEtc5etT7HR8VZHk.roa (hash: L+KhZqIYAMKgtin1FoFJyyzRZgfXz9xTUCi9fNM6eJA=) 6: 9x-t3vfSWd2gTffxD8u6_zboAMk.roa (hash: wqFOy7SfmKCxQuJRhOTvWvWfG57wvdb+pa58/m4+kIY=) 7: FI_LgreZKWiEKEm-64lqweNAHAE.roa (hash: tG+QCFHYv2wRmRqGDdwnZ/nPygXM/WW4rE4SjbNbjJY=) 8: M9aRoldSPL80zu-Kaoagp2WP3ZQ.roa (hash: 8fJuMkijRNl9SzEIDk8/AYrDLIsWhRWm1dwF7UBzYis=) 9: Q4zuhYGG3L1WBcFO48ljA8rNBKA.roa (hash: wCgcnvjGlJ6QOzoOZEf9C5WB57PdxuAUQh1p+3p6DI8=) 10: Qgjn7zcutHeaWdwb72tXmvasdVs.roa (hash: EvH2ZltKuBiEErhu6P/d/tjpZOgloTr7cZFRDKQ0MLQ=) 11: WH-u_Lbb4qq1ki69Q6CH45I7tuk.roa (hash: bn630h7Plu6LOc7DTwB6XBtAsX4ZbAAKOsi+znYEmWg=) 12: Z3QWWhkZqetlhnS_zvz1qah-JeA.roa (hash: cjiJ9Y6eR4tudOQSpND0P/J0tDKTnG0VtzqaPWqXkKs=) 13: bxoQwGnIjgehyOU5QbPzYLAzirc.roa (hash: YPIzomdG/bJCvbXvPKS6XU87RGOYtzWiK0lVtwY2etE=) 14: iCxZRNuboLSQ_A-b_9ZCwnTR7Sw.roa (hash: up+wwDvYKUVV9SGfbmiipQPTpyc8xi4mM9X2/7uPTio=) 15: mZ6dw2-RWGiPJmI1cofllQ7czLE.roa (hash: wLTfakveqy4UzrNDZuvxH1KuNXzMRVjKwd94EzC3Rdg=) 16: nHz5PYvYhZiTmkWG0ByHbG1ISik.roa (hash: ePaT81BNUTRf5J10vaqe327NI/cpz3KsA1HLhDcPGYk=) 17: totEAJbwgqrbxhgDKUXp2mBz-CM.roa (hash: NlDd0SbheBjrsiHdl/v3fEusRqr4u/br7d/d0DHvJCo=) 18: vSki5H5xYPnND3laqcWNYmQeSwY.roa (hash: AhuH4VJgFtbfomd7/AjjUCKF+gk/CH+YVdW6WNtfHiA=) 19: zbg8_lSJg18pTQr03U2249wl8fM.crl (hash: LVXRhPxhHeQ84JNz7paNNNi9L+tnPOB1ADBiFPELm48=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 11:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:53:88:33:c8:c4:7e:e2:af:54:56:5f:65:07:c2:ea:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3 Validity Not Before: Nov 22 11:00:55 2024 GMT Not After : Nov 23 11:00:55 2024 GMT Subject: CN=1696b8e85263bf2d6fb99da2b3014a524de01a3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d5:be:4c:da:08:32:d9:4a:c6:ec:28:2f:2a: 0f:99:54:97:ac:1e:56:6d:47:9a:40:b3:df:6a:e9: 7a:22:ba:67:d6:13:eb:c2:87:7a:bd:17:ac:7c:a2: 32:70:8b:e6:c4:59:eb:72:0b:41:69:12:7d:54:fc: 50:78:64:4d:dc:6e:61:fe:6d:7c:60:7f:3e:a3:df: 2d:bf:7f:3c:ee:47:c2:36:ea:85:b9:35:4b:4c:d2: ea:75:36:bd:2b:35:16:b0:25:c8:69:e7:c4:7d:a9: fe:e0:57:22:f5:8b:27:22:25:bd:c0:5f:8c:0d:31: 09:ae:14:b2:04:ca:de:fc:ba:1c:d8:3d:66:4b:f5: a6:c7:1e:10:1f:44:82:2f:fe:37:78:3b:59:86:43: a2:13:a1:3d:6d:f6:fe:c2:2d:12:20:97:a1:ff:88: de:c6:84:f1:ae:7f:9f:d3:db:5d:13:81:8f:e6:1b: 5f:6d:36:74:7f:fc:5c:b6:f6:c6:95:30:ad:f9:21: 3e:f3:5d:7d:24:fa:04:9f:aa:25:37:98:cb:df:ec: b3:ca:4a:cc:6a:f8:c3:d9:fe:01:c5:90:a1:c1:c7: 22:10:5a:11:bb:16:61:82:84:1c:da:1e:47:6d:c6: 5c:c4:bc:0b:3e:33:c7:b1:82:8f:80:90:7f:08:15: 82:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:96:B8:E8:52:63:BF:2D:6F:B9:9D:A2:B3:01:4A:52:4D:E0:1A:3B X509v3 Authority Key Identifier: keyid:CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:94:29:fe:4f:ef:4e:d3:b3:d4:11:9d:6f:8f:eb:06:40:89: 81:61:59:7d:71:13:8a:b7:53:ac:0d:3b:95:b1:33:f2:75:46: 07:79:85:ae:39:06:75:aa:65:ef:0a:6d:19:61:5d:81:e4:57: 8e:2b:fa:2f:bf:b0:f9:7b:1d:f0:47:7d:0f:51:61:5a:18:3d: 6c:54:cf:5e:ca:c1:b0:3c:60:07:a9:81:db:1c:41:40:f7:9d: 87:a9:5f:9b:36:2c:56:6c:a8:1d:23:52:4a:03:09:5a:01:a3: e2:b9:77:c2:2e:55:de:a9:e3:36:fa:14:8c:86:c2:00:77:ad: d9:64:17:22:4d:e5:cc:91:70:2a:c0:c2:c9:6d:90:78:32:5d: 86:f0:c1:bc:6d:3b:79:e9:da:1e:a6:f9:c6:5d:cb:95:37:dd: bb:fb:a8:a4:61:5e:1a:36:f2:80:e8:99:46:62:7f:58:03:ec: ac:9a:36:92:40:bd:f2:0c:35:7f:18:d0:8e:13:d4:e1:c7:4b: 1e:24:47:3e:4e:00:16:62:50:4c:56:c8:73:85:95:1c:3c:9b: 67:9e:cf:5f:fe:47:e4:67:38:47:bb:9f:d8:c6:1c:c6:72:d1: f2:1e:1c:7d:84:02:3d:32:bf:53:17:84:57:ba:16:8a:dd:fe: e1:c9:79:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNTiDPIxH7ir1RWX2UHwuqUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYjgzY2ZlNTQ4OTgzNWYyOTRkMGFmNGRkNGRiNmUzZGMy NWYxZjMwHhcNMjQxMTIyMTEwMDU1WhcNMjQxMTIzMTEwMDU1WjAzMTEwLwYDVQQD EygxNjk2YjhlODUyNjNiZjJkNmZiOTlkYTJiMzAxNGE1MjRkZTAxYTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNW+TNoIMtlKxuwoLyoPmVSXrB5W bUeaQLPfaul6Irpn1hPrwod6vResfKIycIvmxFnrcgtBaRJ9VPxQeGRN3G5h/m18 YH8+o98tv3887kfCNuqFuTVLTNLqdTa9KzUWsCXIaefEfan+4Fci9YsnIiW9wF+M DTEJrhSyBMre/Loc2D1mS/Wmxx4QH0SCL/43eDtZhkOiE6E9bfb+wi0SIJeh/4je xoTxrn+f09tdE4GP5htfbTZ0f/xctvbGlTCt+SE+8119JPoEn6olN5jL3+yzykrM avjD2f4BxZChwcciEFoRuxZhgoQc2h5HbcZcxLwLPjPHsYKPgJB/CBWCPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBaWuOhSY78tb7mdorMBSlJN4Bo7MB8GA1UdIwQY MBaAFM24PP5UiYNfKU0K9N1NtuPcJfHzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemJnOF9sU0pnMThwVFFyMDNVMjI0OXdsOGZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS83Mzk3MTYtOWFmMi00N2Y1LWE2ZjEt YTNiNzRmOTY0MWFjLzEvemJnOF9sU0pnMThwVFFyMDNVMjI0OXdsOGZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS83Mzk3MTYtOWFmMi00N2Y1LWE2ZjEtYTNiNzRmOTY0MWFj LzEvemJnOF9sU0pnMThwVFFyMDNVMjI0OXdsOGZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkpQp/k/v TtOz1BGdb4/rBkCJgWFZfXETirdTrA07lbEz8nVGB3mFrjkGdapl7wptGWFdgeRX jiv6L7+w+Xsd8Ed9D1FhWhg9bFTPXsrBsDxgB6mB2xxBQPedh6lfmzYsVmyoHSNS SgMJWgGj4rl3wi5V3qnjNvoUjIbCAHet2WQXIk3lzJFwKsDCyW2QeDJdhvDBvG07 eenaHqb5xl3LlTfdu/uopGFeGjbygOiZRmJ/WAPsrJo2kkC98gw1fxjQjhPU4cdL HiRHPk4AFmJQTFbIc4WVHDybZ57PX/5H5Gc4R7uf2MYcxnLR8h4cfYQCPTK/UxeE V7oWit3+4cl5dw== -----END CERTIFICATE-----Generated at Fri Nov 22 17:48:50 2024 by rpki-client on console-ams.rpki-client.org