$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.mft File: XaOUHCfP5cI0xL8iHssqV5st6qs.mft (raw, json) Hash identifier: x76V5JQib6IguNI2NJrxXzDMuWA6h/p7DZaj5pqcGAk= Subject key identifier: 42:6A:6A:60:72:A0:A6:B3:04:1B:D5:DB:9A:D2:CC:01:A8:5D:B4:2F Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab Certificate serial: 019351628957F7F03DFE4E5B955D07B0B067 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.mft Manifest number: 10AB Signing time: Fri 22 Nov 2024 01:00:32 +0000 Manifest this update: Fri 22 Nov 2024 01:00:32 +0000 Manifest next update: Sat 23 Nov 2024 01:00:32 +0000 Files and hashes: 1: 1-RkX5OHIqkZAwwZrfy_Yw5tGVHQ.roa (hash: pB2d5UmDbwWH6TUlta/z+rvmCOY6D4LEyE166c9aZrs=) 2: 1-TukFg7Jlr0aAeRcbJUHvPv9CS8.roa (hash: GO7gc+VroePomYfx7mLBOq16/1UGcn/evw+knJr9U/A=) 3: 1-dnQ4456xVAkg-_iaN_HzfxfmOY.roa (hash: +qbwYVJdu/904q480GhdikgzEVZ2ZfLTUpE0EmoAgbM=) 4: 1V0SIb1YQCUIdn6z0bt7Fur5gmQ.roa (hash: KDjWA35utE2XbamX7W7gvqafYqSUj23PtLgyvGYxbx0=) 5: 5-u1Wy3zT9LdZ-_yCeSqFca10H8.roa (hash: o9IJD3P5op5PEPi0GYeI0w0z3pnGjbt0vgyjxP1xuPY=) 6: 5QnARHRDUHW4-K1-cBQM9gWtQws.roa (hash: nwoEo0UgHD810OOXKIgVpixYyMf8treKdI5awrduzvM=) 7: B6K9mS-rdh3K5PZX5nKQUQoZKfU.roa (hash: BVQbpK4VvZLxVp4u/AkgPIy/tiZ6UVdM+E433I+etq4=) 8: H644qvSIi4hwUIb-CyyYUM8rMus.roa (hash: scsi2At85IjeoWklfO7y9OkKDqP3ef8nX067Dkj+VCI=) 9: OCcbVEWwELcChcTjXhchJLSkjrE.roa (hash: RYcNgNo1inPX60Gvc6Jjhf4b2dD4knG9oEEqVFgjmi4=) 10: Q6uUgnqwF1tsvsJggZeRUtjNtRc.roa (hash: xrKPGXj2RKYeUbtbwtL9V3UVkh6Yg0IiGn5ggG50Zw4=) 11: SQyoKUzD-gAoC5dcsClVYVlpeBo.roa (hash: hXMYXVQwAwmUwq6OqQBhp9MMlpTmtFza7VsRqvmV/iM=) 12: VKnSP4-qXwBr4pfrIh_KbpkTLVw.roa (hash: RiqRGWYtvaGRPQ9qd8IrN1fM2OU6pvG5CHxQJsUb1is=) 13: XaOUHCfP5cI0xL8iHssqV5st6qs.crl (hash: OtLGu0zeruwEaOmGeaCaV5o+PwPhGPiUCDeO38wyGFk=) 14: ejWH4iT9TYDB3UnuUWGwJbXsUAY.roa (hash: +V6+giU+e6EOsha6IIH5grqfOccHWjYoPzMkKcL5dZc=) 15: gi3g9lMZqk5LsCUgiLcraEGfl6A.roa (hash: h4Urw5Saf0kr5tR/QvGZIcGQErZllYDwAdh3ZVNABcs=) 16: mUrmeukjQNjozVMBDAi2xF2cBcI.roa (hash: rZTOHZQa2h1xc475bSkNWYD6hOh9BtvrNV19F1O5gpE=) 17: plBciUQQ0ImO2Mhbuam2n_zesjY.roa (hash: Fw/VM4/6pBdVS8mDllOT3UQE3loPzcYi5+HAjA0T6sY=) 18: zS_f_Zqo9G9pzbf77Q6BLBtUGOI.roa (hash: Ie0iFIFpz//23kjn1ZTqjflTheL9juBbcWqSF6uRLTg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.mft rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 01:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:51:62:89:57:f7:f0:3d:fe:4e:5b:95:5d:07:b0:b0:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab Validity Not Before: Nov 22 01:00:32 2024 GMT Not After : Nov 23 01:00:32 2024 GMT Subject: CN=426a6a6072a0a6b3041bd5db9ad2cc01a85db42f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d6:1a:79:4f:a0:48:90:5f:55:af:d5:81:ee: 0a:54:22:1b:f5:fe:28:a3:58:2e:b1:b7:a3:5c:93: ff:1b:b2:b2:53:95:9e:3c:37:7f:81:c7:7c:eb:26: fc:ad:0a:eb:e4:3f:63:f5:52:71:a7:da:fb:8c:ef: c4:c6:68:20:ef:21:1a:73:63:9e:04:34:ca:fa:2f: e0:35:49:ef:cf:7c:38:42:8b:84:90:d8:2a:77:50: 75:01:c0:9a:18:e8:cd:e5:a3:df:fa:2f:58:39:49: 92:6c:1f:7d:f5:ed:a5:1d:90:68:98:d0:c5:10:e0: 4c:8f:19:5a:9c:55:8d:87:cd:b9:21:7c:46:c9:fa: 77:00:fa:b7:8b:12:30:7a:6f:56:fe:79:bf:06:f5: b8:2e:14:94:c6:6b:30:a4:08:51:d5:9c:e7:db:b0: 18:69:66:c5:ff:46:a3:bb:b6:c3:46:48:94:64:5b: ba:ca:38:cf:7c:1c:e6:22:70:a3:cd:e8:6e:2d:9f: c6:6d:92:2c:21:63:eb:ed:49:74:a5:23:dd:fc:c7: 27:72:9a:88:2c:46:5b:cf:8d:c4:12:3d:6e:c6:c7: b9:f0:f1:a7:54:08:95:76:c7:ee:e3:ab:df:28:f3: 7a:67:13:ac:fa:ca:8c:92:a9:9a:05:03:57:26:fd: 21:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:6A:6A:60:72:A0:A6:B3:04:1B:D5:DB:9A:D2:CC:01:A8:5D:B4:2F X509v3 Authority Key Identifier: keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:c2:36:21:e7:52:69:c2:87:4c:80:df:f3:3c:16:80:01:e7: 76:f6:68:67:ff:2c:4b:a2:25:d9:67:54:a4:a1:a3:3d:fe:5c: 15:51:11:25:2b:83:4e:29:54:7b:bc:40:65:0c:57:6a:ec:12: 69:a9:10:db:a0:dd:38:20:8d:98:53:5e:ba:40:2f:8c:bc:72: da:9e:a5:87:d4:a2:74:a8:b2:eb:45:6c:e8:f9:02:ab:75:14: 64:7c:50:6e:a5:25:1c:db:36:9d:8b:c1:79:13:ab:87:e6:5e: 54:31:c1:60:c1:08:3a:25:e5:28:4c:4f:fc:5d:6d:d5:91:8a: 4e:14:25:6a:93:5c:80:a6:e2:0d:fb:65:bd:87:36:f4:3c:6b: 1e:9a:9d:be:a7:76:55:bd:89:e0:3e:ce:3b:5e:75:cc:a8:a2: 03:37:f9:9d:39:bc:d7:7f:d4:81:29:05:60:7a:07:60:b7:ef: 67:7e:69:39:f5:71:6e:70:2a:b8:2c:0f:db:c4:c1:23:33:18: af:b8:59:4e:68:bc:22:32:cc:f1:95:43:fa:ac:3a:6b:4e:43: 31:85:05:ac:93:c5:df:43:c5:8c:40:48:65:b4:c6:08:22:4b: ea:37:bb:8c:21:80:dc:68:44:97:a2:9d:ee:86:38:22:46:57: 95:76:7d:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNRYolX9/A9/k5blV0HsLBnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkYTM5NDFjMjdjZmU1YzIzNGM0YmYyMjFlY2IyYTU3OWIy ZGVhYWIwHhcNMjQxMTIyMDEwMDMyWhcNMjQxMTIzMDEwMDMyWjAzMTEwLwYDVQQD Eyg0MjZhNmE2MDcyYTBhNmIzMDQxYmQ1ZGI5YWQyY2MwMWE4NWRiNDJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttYaeU+gSJBfVa/Vge4KVCIb9f4o o1gusbejXJP/G7KyU5WePDd/gcd86yb8rQrr5D9j9VJxp9r7jO/Exmgg7yEac2Oe BDTK+i/gNUnvz3w4QouEkNgqd1B1AcCaGOjN5aPf+i9YOUmSbB999e2lHZBomNDF EOBMjxlanFWNh825IXxGyfp3APq3ixIwem9W/nm/BvW4LhSUxmswpAhR1Zzn27AY aWbF/0aju7bDRkiUZFu6yjjPfBzmInCjzehuLZ/GbZIsIWPr7Ul0pSPd/McncpqI LEZbz43EEj1uxse58PGnVAiVdsfu46vfKPN6ZxOs+sqMkqmaBQNXJv0hiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEJqamByoKazBBvV25rSzAGoXbQvMB8GA1UdIwQY MBaAFF2jlBwnz+XCNMS/Ih7LKlebLeqrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGFPVUhDZlA1Y0kweEw4aUhzc3FWNXN0NnFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8zMGVkM2UtYzRjNC00ZGU4LWI0ZjEt ZjExYTM5ZjI2YzNiLzEvWGFPVUhDZlA1Y0kweEw4aUhzc3FWNXN0NnFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC8zMGVkM2UtYzRjNC00ZGU4LWI0ZjEtZjExYTM5ZjI2YzNi LzEvWGFPVUhDZlA1Y0kweEw4aUhzc3FWNXN0NnFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAMI2IedS acKHTIDf8zwWgAHndvZoZ/8sS6Il2WdUpKGjPf5cFVERJSuDTilUe7xAZQxXauwS aakQ26DdOCCNmFNeukAvjLxy2p6lh9SidKiy60Vs6PkCq3UUZHxQbqUlHNs2nYvB eROrh+ZeVDHBYMEIOiXlKExP/F1t1ZGKThQlapNcgKbiDftlvYc29DxrHpqdvqd2 Vb2J4D7OO151zKiiAzf5nTm813/UgSkFYHoHYLfvZ35pOfVxbnAquCwP28TBIzMY r7hZTmi8IjLM8ZVD+qw6a05DMYUFrJPF30PFjEBIZbTGCCJL6je7jCGA3GhEl6Kd 7oY4IkZXlXZ9vQ== -----END CERTIFICATE-----Generated at Fri Nov 22 09:53:23 2024 by rpki-client on console-ams.rpki-client.org