$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft File: H0c4OJyzuZjsT6bUJy-N15n7xKk.mft (raw, json) Hash identifier: qWBqrgIjmWptnBsi0y1AesPztOGdq23DSKCH2fR6Els= Subject key identifier: C9:F5:41:9F:ED:13:BA:26:54:75:59:FA:62:D9:F3:62:34:AB:B4:65 Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9 Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9 Certificate serial: 0194BB2965978218823B03E8D248AA883191 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft Manifest number: 1191 Signing time: Fri 31 Jan 2025 07:00:39 +0000 Manifest this update: Fri 31 Jan 2025 07:00:39 +0000 Manifest next update: Sat 01 Feb 2025 07:00:39 +0000 Files and hashes: 1: 1-6x9jHZ3cw39179HQd4O3fAvnpk.roa (hash: PgXhvVg0YUToc07oyC3isPahNyz6852StHcO0CF7qN8=) 2: 1nUEd9XAFqDWEykKA06-e3Jht8E.roa (hash: FjXuDY1LWSoerVvC1COnQH7k++3mS52vkkMLizNO12Q=) 3: 2pdvmZCHvau2bejs7kiQ6VYT8aY.roa (hash: sxVxk1VG9jbnXlYRRTgFy8naU2+NPtqmSzhI8JvCk0Q=) 4: 7jhea4Z45q_-w6Bw5hm9Ljo6jd0.roa (hash: 0432QcgMFkJ7sn27j+nTeHIZYZPsrtQmgOnk9+WOg5s=) 5: E2kHiMdYodrnFH2KHA9US6yByGg.roa (hash: 4gqy0Z2gsQk+minstyMsiIr4y+M4uI9pxsNNqBMzDmE=) 6: H0c4OJyzuZjsT6bUJy-N15n7xKk.crl (hash: 3HuKdg3Dt9sQzr04KMQxbxIhJk4gjH7TeTyp7TCZ0+8=) 7: H46sB790XpHEnYv4TqNMx8liI5A.roa (hash: tky/zzkhPHiHwewqdrJ7FzGu6YnMSWzvscvwv5Raoik=) 8: LIpJLbylGhFRNKd4Vb6i8k36YRg.roa (hash: Uma+Nee5Et6Up+tXMeUjv4OVtrZCCxIFiku3HIhbB/4=) 9: ORp5S2gwOdo1fvVCheux3Z-tEqE.roa (hash: 6QCXpLzMvGC+j67Cjb2lewZSHVD5p64YnzlA/zGClIY=) 10: PLU8wqNdMXnL9v3tJJzISiKB10E.roa (hash: VqGtKJSXmrM4NojpQ2fDKWSLpkBqvw8V5Igvg7IZsCo=) 11: RNEGyKfylX6Y800rWZPCCJc50_A.roa (hash: VU3yf9iAHvzAzzlVwWU4OukRHg8QQbxfRarucNtL/BU=) 12: VZ4v5Zl_fSWlCJddoFWAprfwDEQ.roa (hash: HSIRCE/846JiI6ro7JECbGIyt/cQkLU+ZkGrpS5afGk=) 13: WZBLvv9OFIzqKVar5Stt9tIoe6c.roa (hash: eDDz9g857ZbC4qMPJ/+ARLyYUZhWBgiSlQKhk+w4u2c=) 14: YGMe0KWo_m6eJ0gMSerQxd_mK7o.roa (hash: TX2OaT/Kq4swweS2SKxtiDq7F1NZ0dIzMpi6TRLh/ZA=) 15: c_pxESaR2x3BQriZw_LEmjpxO70.roa (hash: ITBXKxhG6Il2Rusll6rxDZnAehiUkrccIwyacpQft4Y=) 16: dpNKQ2Sgz6QIHDbXymZzkoop83E.roa (hash: VrlYMgpMUbMGcZ9vFi+tBzjsUYnk4uGqxHrElmnVkpU=) 17: gDccJCyvv-XSleOWBZa0j1v0ILc.roa (hash: CO5e5TItEhwMis3LPrh0yYWspCPoVfBb8vdm/rXIFt8=) 18: gfqVNhzGNxb7VDFrcNLUrtDXd5o.roa (hash: Krtgp6Kar2XuUAEtscbGlUw/+BkCTJxFBL71vdsXlls=) 19: sQpCyqrYhPNlqPdrmizFtrGO14c.roa (hash: yjB8Md4YNzJrNV3sVTOoBXACOOSqrVWUCWDSaqokA0I=) 20: sTCjVSTmDshI0UQ4XJFDWyeTvEw.roa (hash: kRON3o29OnRVzY/uFJzsoCpOZD9O1rSV9QBQnyCi9Nk=) 21: z10me3-6yqryER4MpvIKiLcjNws.roa (hash: PjRl12NyPSpVNtUWuutmb/VXRvozChTacSvxqPRianU=) 22: zd8S8_RgIECBQgNFopt3gQi-4JA.roa (hash: 1PRRid9DTRPe3oTZKlt84NqobBLMXq/tvroFe+HAuOY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 01 Feb 2025 07:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:bb:29:65:97:82:18:82:3b:03:e8:d2:48:aa:88:31:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9 Validity Not Before: Jan 31 07:00:39 2025 GMT Not After : Feb 1 07:00:39 2025 GMT Subject: CN=c9f5419fed13ba26547559fa62d9f36234abb465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5e:0f:fe:8f:cb:6f:79:03:4f:89:e5:5d:a2: a3:29:2e:bc:e9:a7:d5:f2:cc:ce:8d:d6:86:5b:64: c3:09:8b:35:c1:f1:f9:d6:70:cf:a9:00:6c:51:7d: 04:da:6e:07:24:76:9b:c0:8e:ae:c3:d6:69:7b:3b: 6c:ce:52:d5:9e:4c:b4:63:e7:6c:e3:26:c1:a4:fc: 4c:42:87:97:2b:e5:98:d5:ee:ab:4e:62:64:a3:f4: bf:c8:2d:5b:87:44:bb:b4:84:19:77:5c:3b:57:3f: ae:b4:16:4e:86:f1:45:66:e9:c8:1a:12:29:df:01: 93:41:91:26:fc:44:fa:72:61:b9:d3:de:f5:06:32: d6:32:66:32:f0:10:08:6a:a0:f6:5a:85:ad:79:7e: fe:77:47:2c:1b:e0:14:a0:05:d4:2e:bd:51:da:70: 14:69:ee:92:67:0c:04:a9:db:c5:bb:69:dc:e8:ab: a6:74:df:0a:b7:5d:75:fd:99:3b:ee:93:71:15:45: 36:3a:6d:42:fb:c1:c9:51:9b:a9:89:59:9b:67:06: a7:09:26:b5:5a:93:f7:0a:b9:96:0e:f7:88:be:d7: 2f:44:bc:a0:a3:f9:c4:10:5b:ab:08:d7:3b:3e:cf: 21:e9:18:10:c8:1f:7c:f3:3d:cf:cb:5a:d3:74:c9: bf:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:F5:41:9F:ED:13:BA:26:54:75:59:FA:62:D9:F3:62:34:AB:B4:65 X509v3 Authority Key Identifier: keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:b7:97:d3:17:0f:42:78:2a:73:07:ea:36:26:5b:69:8b:06: d3:82:b2:e9:c2:5d:c1:7c:04:48:b1:71:0f:79:af:d9:d3:17: 56:3b:c8:fb:dc:56:2f:9d:c8:04:91:78:2f:9c:ca:bf:ac:93: 38:9d:4d:15:a1:b8:03:71:56:7b:e7:9d:fb:8f:06:cd:11:ae: 7f:ca:f8:de:1c:a4:cd:02:91:49:63:62:e9:9f:4a:64:9d:a4: 66:30:cd:97:03:e7:66:51:13:6f:0d:ee:4f:fc:9e:df:c4:e2: 20:05:f7:8d:76:d7:e3:90:00:ed:aa:39:54:9a:c9:4d:6e:29: 9c:a6:cc:e9:b3:d9:99:67:75:66:65:1f:fb:6f:07:61:bc:86: a4:83:4d:6f:59:c1:74:a2:53:59:11:9a:82:dc:4a:ae:6c:c2: a2:73:da:58:05:a6:f0:9a:7e:f2:74:83:b9:b7:2a:13:75:fb: 9c:51:a6:7e:66:89:9b:23:b1:0d:2a:22:8a:f7:8b:04:d4:0a: 1d:57:79:02:43:89:f1:11:cd:67:9b:5a:be:12:e1:9a:83:8f: fa:c3:46:6c:fa:30:89:80:9f:8b:a7:d8:6f:06:29:2f:8e:5f: 44:b8:4b:b2:e6:a1:54:4a:5c:7d:96:4f:32:40:16:f6:c2:f2: 65:6a:de:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZS7KWWXghiCOwPo0kiqiDGRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNDczODM4OWNiM2I5OThlYzRmYTZkNDI3MmY4ZGQ3OTlm YmM0YTkwHhcNMjUwMTMxMDcwMDM5WhcNMjUwMjAxMDcwMDM5WjAzMTEwLwYDVQQD EyhjOWY1NDE5ZmVkMTNiYTI2NTQ3NTU5ZmE2MmQ5ZjM2MjM0YWJiNDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyl4P/o/Lb3kDT4nlXaKjKS686afV 8szOjdaGW2TDCYs1wfH51nDPqQBsUX0E2m4HJHabwI6uw9ZpeztszlLVnky0Y+ds 4ybBpPxMQoeXK+WY1e6rTmJko/S/yC1bh0S7tIQZd1w7Vz+utBZOhvFFZunIGhIp 3wGTQZEm/ET6cmG50971BjLWMmYy8BAIaqD2WoWteX7+d0csG+AUoAXULr1R2nAU ae6SZwwEqdvFu2nc6KumdN8Kt111/Zk77pNxFUU2Om1C+8HJUZupiVmbZwanCSa1 WpP3CrmWDveIvtcvRLygo/nEEFurCNc7Ps8h6RgQyB988z3Py1rTdMm/8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMn1QZ/tE7omVHVZ+mLZ82I0q7RlMB8GA1UdIwQY MBaAFB9HODics7mY7E+m1CcvjdeZ+8SpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjIt NmM3ZTU2ODU4OTBjLzEvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjItNmM3ZTU2ODU4OTBj LzEvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAreX0xcP QngqcwfqNiZbaYsG04Ky6cJdwXwESLFxD3mv2dMXVjvI+9xWL53IBJF4L5zKv6yT OJ1NFaG4A3FWe+ed+48GzRGuf8r43hykzQKRSWNi6Z9KZJ2kZjDNlwPnZlETbw3u T/ye38TiIAX3jXbX45AA7ao5VJrJTW4pnKbM6bPZmWd1ZmUf+28HYbyGpINNb1nB dKJTWRGagtxKrmzConPaWAWm8Jp+8nSDubcqE3X7nFGmfmaJmyOxDSoiiveLBNQK HVd5AkOJ8RHNZ5tavhLhmoOP+sNGbPowiYCfi6fYbwYpL45fRLhLsuahVEpcfZZP MkAW9sLyZWrecg== -----END CERTIFICATE-----Generated at Fri Jan 31 15:29:19 2025 by rpki-client on console-fra.rpki-client.org