$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft File: zbg8_lSJg18pTQr03U2249wl8fM.mft (raw, json) Hash identifier: zsUuufG+Ch6EeUvolqzJUSBBuvxoXOpPH6mZHPDlzzs= Subject key identifier: 65:B3:97:21:EC:24:E7:FC:2C:DA:34:4F:C5:28:8C:D9:58:1F:02:DB Authority key identifier: CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3 Certificate issuer: /CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3 Certificate serial: 0194BA8499E540344CE2BFF869DA4F33A78C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft Manifest number: 1443 Signing time: Fri 31 Jan 2025 04:00:39 +0000 Manifest this update: Fri 31 Jan 2025 04:00:39 +0000 Manifest next update: Sat 01 Feb 2025 04:00:39 +0000 Files and hashes: 1: 0jypa2Y6gbHdmPjB5cUrL6HFbjY.roa (hash: /hz8ZuFYY6yHXSyTdbZx1ueR0hVf4uL/YlGGZn54tJc=) 2: 1-UmZ0qaeCWaJjSQeWdowEec2Vgs.roa (hash: rtV+AgS70YkljbsF1mLGSzdsR69goFmM5hHoLdiWS/M=) 3: 21E38ZJn3Y3wnYOg6rZryW7jINU.roa (hash: SAUPXrysKyx0/ciMHZtWkr2xOaCTGgvaZdUfJqupJuQ=) 4: HzNyysceRKeRdA1hjWYRZPbP3bg.roa (hash: LjbMsGUdE/LEpP15YVSK6PhMb+v41cEg4eSzCdw3tFc=) 5: JkkdgtULLN5YFOoQYdjnkQtxRiA.roa (hash: WC9ErWl9RKhrEYqpczI/9k3EhKFlr59+yinuHTpWjE8=) 6: O-Hk60iWFBySjfmtIEbOjzMsIwE.roa (hash: DMf7R1BlmQppApyXpHiUTsmI5ATEPn/jHL+WMkSNnPM=) 7: Po-xudB0HE48UZHOpupwvz9yrbQ.roa (hash: lVFatq2L+Iy6QmpWtRbFHS1vI3rllhStxmnJByjduMY=) 8: QOlU2_199XSOE961RlohguyMUYA.roa (hash: lKmPNrtTDIHyXPpE+Nt8+JIY99D22fB//poGRt2tIMg=) 9: V6zEBzayoar1bRNapjv0e_aKUGw.roa (hash: vKxfd+7Tf7rGFq+FI1UaxDCPBksjmSItIcWGviDha9E=) 10: ___AQ3LSe3WVBreiiJRB_AYfZx0.roa (hash: wcJBacx0bgBybMykDVZxbki0j6CqQ53t27MFPiiNswk=) 11: b0tYC7kbQ5yQLuO0rNO86tSY9_M.roa (hash: JhPFYcaqWvvNtwLm0T45vgJgebIRB5cWijzT6ON31V0=) 12: e5M5ScLaYw3XnoOsMxW_rdC-Zy8.roa (hash: v9RrKSRn6Graw0XMotW5Q/F2MEOdN/akjPpJcokpNts=) 13: koxHsCOglgaz0t3iqVnSlyxk1ow.roa (hash: ezCqjwYzx/s/HM4jbyHE+jja9xXjGxsuVYdaEiacu30=) 14: mJZPhz5T9AlnY5d-UbrRSZKK3MI.roa (hash: lDzuVpP6RmyH8wWHb3wCkNQZZMUB33h0hM3H0/qcoZw=) 15: pvRIKp7ter4l53fy9my93MgYKtc.roa (hash: YhNOC9YS9JUzZo1Ux+veDSPjyhDLIExrmW905QsVrpI=) 16: tAcjFos5oDT4EzynP-yphmNjnYw.roa (hash: VWOhT61czYSeN9S1ms3okP9vpKMGiU0IJN+FU1lJ6sQ=) 17: uVnErfl-xwbjkgiYLPvKRi9Q_KQ.roa (hash: wUoD3qQGS3ZnrXf66OJ6AmxAYBOVrPCIA6y9gHjS9Js=) 18: upmvRKLP0ZU9huQZm3R45yCba8w.roa (hash: Ze4hSd6gSnJhj9RVYqePJmO26WqF9E8nQZjA9SW32Gg=) 19: zbg8_lSJg18pTQr03U2249wl8fM.crl (hash: BPNlwDdS7j+eP16tZzWYczUJd2kho/BTRB4AmyKW9vc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 01 Feb 2025 04:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:ba:84:99:e5:40:34:4c:e2:bf:f8:69:da:4f:33:a7:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3 Validity Not Before: Jan 31 04:00:39 2025 GMT Not After : Feb 1 04:00:39 2025 GMT Subject: CN=65b39721ec24e7fc2cda344fc5288cd9581f02db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:50:60:17:13:01:ea:8b:41:9c:86:bd:c5:03: 6c:1c:b6:7c:b6:ca:41:6c:49:9e:08:f7:f6:d0:01: ee:07:98:fc:9b:71:f9:8a:b4:d6:5d:c5:ba:79:35: b9:70:d3:9a:f5:1f:84:db:af:dc:91:c7:b0:02:c7: 99:f7:0c:ec:1a:2f:0c:d7:85:9d:b9:11:2a:7a:cf: d0:82:6b:3b:46:d1:88:b8:d0:13:c5:6f:04:d7:12: 97:a5:83:b5:d6:27:fe:50:98:3d:6e:94:f9:22:fe: 93:02:24:a6:14:1b:a8:aa:a8:32:44:b1:de:1e:c2: 74:6c:9c:d7:19:80:98:b9:33:b8:8c:41:f1:61:15: fa:14:15:cb:12:40:8f:b9:a4:1e:92:d3:8e:f9:08: f4:61:c7:e8:b7:09:75:c6:bd:b0:aa:bc:2a:99:f7: fb:e2:42:4d:e2:bf:8b:43:ae:8d:02:52:98:5e:d1: 71:92:d4:f5:4c:a0:94:08:4f:86:ad:30:26:79:80: 1b:e8:6d:4f:3e:ae:ce:e6:16:1b:3d:99:9d:ee:48: a8:b6:3c:8a:99:33:d3:2e:ac:56:09:77:dc:fc:cf: bc:0c:40:62:c1:f7:99:fa:b2:50:31:0b:50:f9:54: a5:28:8d:af:9b:73:9c:b9:4d:5d:e5:98:f2:7c:6e: dc:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:B3:97:21:EC:24:E7:FC:2C:DA:34:4F:C5:28:8C:D9:58:1F:02:DB X509v3 Authority Key Identifier: keyid:CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:88:d9:79:ee:32:6c:72:09:e1:a4:bc:78:f3:8a:d6:8a:d5: 7d:c5:c9:a2:cb:28:9e:bb:c3:39:40:69:7e:d2:80:bb:9b:bd: 18:01:a7:62:83:75:78:a6:43:c0:b6:52:bf:b5:59:98:2f:7f: d0:29:65:95:9e:4a:e7:a7:9b:48:e9:db:df:d4:c6:e4:15:bb: 97:5f:1b:83:f6:05:52:11:c1:d3:fa:98:3a:05:cc:3b:7c:2e: 5b:9a:50:73:99:a4:51:8f:51:1b:7f:ed:1a:cb:5b:32:1f:c5: 93:1b:4a:d6:8f:38:1c:b5:e0:00:b3:48:a7:d8:40:35:cd:ac: 82:53:22:2a:e2:7a:64:62:6c:41:fa:47:6e:28:67:2b:8f:b1: 42:c0:2c:b0:7b:7c:54:7b:d8:6b:e1:90:86:82:7a:89:31:98: af:23:35:d4:c8:63:74:98:96:ef:16:fc:79:08:f7:ca:de:13: aa:80:77:84:fe:f4:40:c4:00:e4:bc:eb:b3:66:9e:b7:d3:f2: 48:a3:65:a9:39:3b:6d:4b:5f:55:9a:4e:77:28:ce:6b:0a:28: 1d:15:d6:16:68:fb:bf:95:fa:36:ce:db:a7:1a:61:b7:d7:6f: 50:a3:61:b9:23:ff:3a:f0:7c:ab:0a:22:06:8a:b9:12:29:df: d0:1e:12:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZS6hJnlQDRM4r/4adpPM6eMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYjgzY2ZlNTQ4OTgzNWYyOTRkMGFmNGRkNGRiNmUzZGMy NWYxZjMwHhcNMjUwMTMxMDQwMDM5WhcNMjUwMjAxMDQwMDM5WjAzMTEwLwYDVQQD Eyg2NWIzOTcyMWVjMjRlN2ZjMmNkYTM0NGZjNTI4OGNkOTU4MWYwMmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lBgFxMB6otBnIa9xQNsHLZ8tspB bEmeCPf20AHuB5j8m3H5irTWXcW6eTW5cNOa9R+E26/ckcewAseZ9wzsGi8M14Wd uREqes/Qgms7RtGIuNATxW8E1xKXpYO11if+UJg9bpT5Iv6TAiSmFBuoqqgyRLHe HsJ0bJzXGYCYuTO4jEHxYRX6FBXLEkCPuaQektOO+Qj0Ycfotwl1xr2wqrwqmff7 4kJN4r+LQ66NAlKYXtFxktT1TKCUCE+GrTAmeYAb6G1PPq7O5hYbPZmd7kiotjyK mTPTLqxWCXfc/M+8DEBiwfeZ+rJQMQtQ+VSlKI2vm3OcuU1d5ZjyfG7cGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGWzlyHsJOf8LNo0T8UojNlYHwLbMB8GA1UdIwQY MBaAFM24PP5UiYNfKU0K9N1NtuPcJfHzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemJnOF9sU0pnMThwVFFyMDNVMjI0OXdsOGZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS83Mzk3MTYtOWFmMi00N2Y1LWE2ZjEt YTNiNzRmOTY0MWFjLzEvemJnOF9sU0pnMThwVFFyMDNVMjI0OXdsOGZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS83Mzk3MTYtOWFmMi00N2Y1LWE2ZjEtYTNiNzRmOTY0MWFj LzEvemJnOF9sU0pnMThwVFFyMDNVMjI0OXdsOGZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf4jZee4y bHIJ4aS8ePOK1orVfcXJossonrvDOUBpftKAu5u9GAGnYoN1eKZDwLZSv7VZmC9/ 0ClllZ5K56ebSOnb39TG5BW7l18bg/YFUhHB0/qYOgXMO3wuW5pQc5mkUY9RG3/t GstbMh/FkxtK1o84HLXgALNIp9hANc2sglMiKuJ6ZGJsQfpHbihnK4+xQsAssHt8 VHvYa+GQhoJ6iTGYryM11MhjdJiW7xb8eQj3yt4TqoB3hP70QMQA5Lzrs2aet9Py SKNlqTk7bUtfVZpOdyjOawooHRXWFmj7v5X6Ns7bpxpht9dvUKNhuSP/OvB8qwoi Boq5Einf0B4Sdg== -----END CERTIFICATE-----Generated at Fri Jan 31 15:28:15 2025 by rpki-client on console-fra.rpki-client.org