$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft File: Hq9cLl7cGXg00H80WWKwdFvuZtc.mft (raw, json) Hash identifier: 5XZHUSWBgA2qVd0bpFsRD8G4GKTCHLmX3X21uFXqyGo= Subject key identifier: 96:1F:DD:E7:04:9A:9B:50:67:0A:91:34:8F:2A:1F:0E:77:A9:7F:13 Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7 Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7 Certificate serial: 019355AD0AF5C1320E02A5C1B3780B33961B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft Manifest number: 139D Signing time: Fri 22 Nov 2024 21:00:24 +0000 Manifest this update: Fri 22 Nov 2024 21:00:24 +0000 Manifest next update: Sat 23 Nov 2024 21:00:24 +0000 Files and hashes: 1: 1jIHvXuKWH1LeGqeIEX8AO1UND8.roa (hash: HSAyNX8Ee+VfiYpgtkoVoc4F8FxOvBqf5Vql5u0vPdc=) 2: 2AjxqXdANhe0nrjnXx-bFUDf_zk.roa (hash: PZnuZtEOp/IwFZRIZNZyr4SdRwm9rv2fwjo1rVjHe0Y=) 3: 52OaR0m0IanaCeJC23OkHPr3WHQ.roa (hash: vum6Zw+p2PuAyoCFPK/P08naDdoSfZ646o+6LqyMFPI=) 4: 6lS6x4Bv4zk3kNuviP7JXaD8N-8.roa (hash: IE4Zw9aMH+DR6CKDo2WAUU3hejYi3taCq6Y9Yi7+MsQ=) 5: AxYmYew-8GkvvEdONlUZ2C5eznw.roa (hash: Rjyz9bZz9t/HLx+4uBG/Nu7v/cHXAAlnqPtbI9bPg2o=) 6: DSOSzAC0sVNLVr6SMLBToEwn1R4.roa (hash: SXnx9YXI7lOq1Pnyz2Ta2KwdHY5ZBVdyw3HwAyvb4dE=) 7: F-X7vILIbug4XS1gIVruc1T3jfQ.roa (hash: WTv+7FT5It0Cz+hQx94uD888+SHdOVv6RkRn0ZVDrGg=) 8: Hq9cLl7cGXg00H80WWKwdFvuZtc.crl (hash: b0TiG9HzEUVkXx8X2QsyWeKIO9ZqzP+pmEkamMqCqe0=) 9: UgXHmzPcvEI-vewGgOz-MM9fD_c.roa (hash: 4xC3GZ0CsKTFh1bxI3tx7v+DDAGWjsjRiUXiEM5yG/o=) 10: WQeBwosOSRn-LJVtQmY3LGYKkNQ.roa (hash: 9NG05NL2fM1WiqYYzsb6GD5g8H6uYdVSRzijEk52Q2k=) 11: ZrzYAmGs-VUvz7f1ocFvpe8gzpU.roa (hash: mUvy8LY4BDUu5sAXkySh9jjR1xl8x3UXWQZhQpCJIJs=) 12: grt2xaKyXtS6a-XIx5FIjDFxvZI.roa (hash: 5BJCJGca6wRnZ0Mvern3IPJ8eSo/5heC4or/5N8feD4=) 13: h81o7e7452I3p0eIwB0D9--i7k8.roa (hash: u0+QHKVrDwUZMdEcci0nRfEGM1/z0/iCj8yohL0NfHw=) 14: nfBxZzjhR0teH86punjBxOO3eSw.roa (hash: 3g3Aujecgqnx8q3IdVPVsuzp3b3y1+OMCH454RIpbhI=) 15: z80FgjYgFDVPOcE938goaNNpRwc.roa (hash: s6lt4elLYIBYduh/fs4MpMl5mEZxfa7OvdHtka/h7hI=) 16: zWPxYfvcYsg2QgXZyTOdzAr9xac.roa (hash: ySeBR3UPrhRxGvFrrMBam7pqlheWgq7Hwem/P5ANnPc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 21:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:55:ad:0a:f5:c1:32:0e:02:a5:c1:b3:78:0b:33:96:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7 Validity Not Before: Nov 22 21:00:24 2024 GMT Not After : Nov 23 21:00:24 2024 GMT Subject: CN=961fdde7049a9b50670a91348f2a1f0e77a97f13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:69:71:ac:e0:0a:e1:01:48:ef:dd:e2:89:4c: a5:2b:51:44:a0:c1:58:13:4a:f5:03:0f:a0:31:7c: 15:d4:79:d7:5a:39:2d:bb:83:c1:cd:28:6c:0d:d4: 01:63:37:e7:69:61:20:da:df:97:b2:01:ef:bc:d2: d0:06:49:8a:ae:7d:79:46:40:34:e1:c2:32:98:87: 08:68:92:f2:f3:70:0a:a7:45:64:5f:50:5f:89:70: 3b:ea:88:e2:9c:a6:bf:c1:6c:ac:5c:5a:b0:98:be: 5b:63:de:bf:2d:bb:dc:83:97:0d:a7:7a:28:72:68: 78:1b:85:e9:e1:75:b3:fe:60:8b:d5:48:76:a0:a0: 16:e6:ae:af:59:3f:1d:1c:a9:bf:c9:bb:0f:01:8d: 18:42:d6:12:9e:3e:a5:a6:13:71:77:97:d0:a1:61: 0b:b4:a1:87:2d:4f:ae:5f:61:ee:f1:8c:14:4c:f5: 05:f5:ee:94:37:69:4b:78:cc:cd:39:97:29:64:b6: 30:bf:84:75:a5:2f:fd:a4:d2:c2:29:f0:7f:4a:bc: 11:09:19:11:26:02:44:be:b2:f0:1a:52:c7:29:5e: cf:a6:25:91:4d:64:c0:81:29:58:11:18:e9:77:b3: 44:51:49:5c:9f:45:8f:2e:03:cf:cb:d6:06:55:09: f9:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:1F:DD:E7:04:9A:9B:50:67:0A:91:34:8F:2A:1F:0E:77:A9:7F:13 X509v3 Authority Key Identifier: keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:45:25:d5:49:ea:79:fd:ac:46:65:fc:ee:0f:d1:08:53:1d: 72:b7:2c:29:f5:fa:df:a9:92:91:b0:7c:0a:2c:7a:3f:3c:20: dd:eb:84:ea:32:d8:db:87:2b:21:1c:ed:1f:14:89:54:0b:5c: 0b:be:a7:8c:98:fe:26:ff:10:9b:ef:a6:09:7e:5d:d6:93:ca: b3:a7:6f:69:f4:80:92:f2:32:86:86:32:7e:13:b4:a4:31:cc: a5:72:cb:91:a0:92:3c:70:53:f6:85:0a:8a:d9:35:cb:56:43: 3c:e0:13:e8:e4:72:07:4e:2c:fa:3e:04:c8:97:73:31:cb:2e: 80:76:0b:e6:73:b5:1d:d1:55:ab:d5:c0:10:4f:4b:0d:35:bf: 5f:54:20:a1:ad:3b:91:11:71:76:6f:7d:6a:95:11:76:0d:41: a1:55:c5:87:9e:8c:d0:98:ba:a0:14:1e:e4:c4:cd:67:5b:2e: 0a:3b:06:02:9f:f8:e8:94:71:6f:7b:e3:70:f3:e7:ff:b0:ae: 66:9a:03:9b:16:51:2e:39:b1:5d:9a:eb:d9:7e:81:db:db:e1: de:1f:96:c5:7f:08:66:7f:12:ae:b5:4c:f6:4a:6b:49:94:cc: 53:f9:8c:f0:3c:da:26:27:44:44:63:32:95:95:5b:92:6b:97: ed:a3:bf:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNVrQr1wTIOAqXBs3gLM5YbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlYWY1YzJlNWVkYzE5NzgzNGQwN2YzNDU5NjJiMDc0NWJl ZTY2ZDcwHhcNMjQxMTIyMjEwMDI0WhcNMjQxMTIzMjEwMDI0WjAzMTEwLwYDVQQD Eyg5NjFmZGRlNzA0OWE5YjUwNjcwYTkxMzQ4ZjJhMWYwZTc3YTk3ZjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGlxrOAK4QFI793iiUylK1FEoMFY E0r1Aw+gMXwV1HnXWjktu4PBzShsDdQBYzfnaWEg2t+XsgHvvNLQBkmKrn15RkA0 4cIymIcIaJLy83AKp0VkX1BfiXA76ojinKa/wWysXFqwmL5bY96/Lbvcg5cNp3oo cmh4G4Xp4XWz/mCL1Uh2oKAW5q6vWT8dHKm/ybsPAY0YQtYSnj6lphNxd5fQoWEL tKGHLU+uX2Hu8YwUTPUF9e6UN2lLeMzNOZcpZLYwv4R1pS/9pNLCKfB/SrwRCRkR JgJEvrLwGlLHKV7PpiWRTWTAgSlYERjpd7NEUUlcn0WPLgPPy9YGVQn5ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJYf3ecEmptQZwqRNI8qHw53qX8TMB8GA1UdIwQY MBaAFB6vXC5e3Bl4NNB/NFlisHRb7mbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8xY2ZiOTItOWMzMS00NjRmLTkzODIt NGEzNGMxYmJhYjJiLzEvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni8xY2ZiOTItOWMzMS00NjRmLTkzODItNGEzNGMxYmJhYjJi LzEvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc0Ul1Unq ef2sRmX87g/RCFMdcrcsKfX636mSkbB8Cix6Pzwg3euE6jLY24crIRztHxSJVAtc C76njJj+Jv8Qm++mCX5d1pPKs6dvafSAkvIyhoYyfhO0pDHMpXLLkaCSPHBT9oUK itk1y1ZDPOAT6ORyB04s+j4EyJdzMcsugHYL5nO1HdFVq9XAEE9LDTW/X1Qgoa07 kRFxdm99apURdg1BoVXFh56M0Ji6oBQe5MTNZ1suCjsGAp/46JRxb3vjcPPn/7Cu ZpoDmxZRLjmxXZrr2X6B29vh3h+WxX8IZn8SrrVM9kprSZTMU/mM8DzaJidERGMy lZVbkmuX7aO/Cg== -----END CERTIFICATE-----Generated at Sat Nov 23 03:23:21 2024 by rpki-client on console-fra.rpki-client.org