$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft File: CoH-kFn2ggvBitWALy8fynfSVLc.mft (raw, json) Hash identifier: /OQqstQKTdYLRJpM/Wcpduu1eY7NAzjJbyEXZjEPUis= Subject key identifier: 18:2B:AE:BE:BB:DE:B0:74:5D:44:5D:D2:04:64:84:39:3B:2D:88:78 Authority key identifier: 0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7 Certificate issuer: /CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7 Certificate serial: 0194BB297E372EF2F4165EA2A83746C0706D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft Manifest number: 078A Signing time: Fri 31 Jan 2025 07:00:46 +0000 Manifest this update: Fri 31 Jan 2025 07:00:46 +0000 Manifest next update: Sat 01 Feb 2025 07:00:46 +0000 Files and hashes: 1: 31z7eSu8--35kebgOlCIABBeVf8.roa (hash: Bo6lIvIlV0RX6xhodzhO7tuvgscKOLMBcfTJSKlUYZw=) 2: 38qwOchGJ_A-9FTGlrpJJL-yZxA.roa (hash: yoh81RGXEUS06sBHWHeNKK9lZEYPXQYPgqR5celg/x8=) 3: 7pPLJaN3OTQBK8i-P4GOQNKJPho.roa (hash: HpLQLLrJKx/bS+zdiKUm5TCX+jRSuh5jVP1YSt/MOZY=) 4: CoH-kFn2ggvBitWALy8fynfSVLc.crl (hash: HN2cMj5hOf5jg9cIMKq2ZOCP2wDVcAmK5vXiq+DmeRo=) 5: EacbpO8P-LkG-h50-C35fVYJXyI.roa (hash: btUaf5jDz02025fLzDlihBUOmr88cX2MxuDiHPb5dc4=) 6: LI3W9bAGcJfYeSECRSILu1bw8kk.roa (hash: Wl5pxXd1n1csv2tQU5l7gpWl7BWI1Z8ORecwJV0UFps=) 7: N0ylFt5LVYNjTI-_TsSgO84trzU.roa (hash: FGN5RCpPLee+DVEx92LqF5VUyDDoLbxxrafkYHnOVZg=) 8: PEEbtcraLxJZAPZLAW5H_KDLDwQ.roa (hash: wU0HPJ884+fnbW1G1BaCynti9gWD3Sn+0YrIsJUp3ns=) 9: hLdZE5q1FOXSO44ZofCjRXN9z7I.roa (hash: CmOCZv7BugezIWG5ZPHeIaee5S3CP9UP9zRJfwRzazg=) 10: n_d7GjbZ9YbYK045nkHL_lX76pM.roa (hash: L6McSAJwh8T7ZY3ArgurepjkJRDGFkS06sAchDylLyc=) 11: pW-Kl5UPWqu6KG3_J4t1h52HuR0.roa (hash: 0HOBimxzzdToQy38vYlAJbGZVaBtPNrg0qioOLxF/+Q=) 12: tlqKEYYvFMWYK-JPntFn1nyKI1U.roa (hash: /wIoPxgkbhHCyNQ8NB2J0bNqG5fb1wxitY8EONuXMt0=) 13: yFPiywRMEHaITt3TRPzJux8bzAU.roa (hash: WnTskmfJ1KLR7sA0SYoAyMqXx6u45IJAhh3f7ztydOk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 01 Feb 2025 07:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:bb:29:7e:37:2e:f2:f4:16:5e:a2:a8:37:46:c0:70:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7 Validity Not Before: Jan 31 07:00:46 2025 GMT Not After : Feb 1 07:00:46 2025 GMT Subject: CN=182baebebbdeb0745d445dd2046484393b2d8878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:4b:97:74:b0:a4:ea:51:3c:52:f7:05:1e:91: af:71:89:7d:b5:98:01:fb:ee:56:09:5f:dd:57:29: 6c:c4:46:af:0c:0e:aa:d9:c5:36:9c:8d:1e:f5:f0: 00:57:a1:f1:bf:79:f6:75:ae:47:36:d5:71:db:07: c8:b2:70:1d:a7:02:5d:28:4d:ea:1c:fd:35:af:73: e6:23:2f:cc:cf:3c:0e:6b:94:38:99:6b:a4:15:70: b1:3b:6f:3f:1d:2d:c8:42:ac:28:eb:a0:d0:b8:23: e3:29:99:bf:86:cf:d1:3f:25:b9:71:e6:be:37:02: 03:95:2e:44:12:87:74:9d:93:15:c7:70:34:0a:ff: b7:da:43:2f:4c:6f:12:75:81:1f:a2:df:a3:d5:c4: f5:a0:9a:80:0a:64:bc:cf:13:14:8d:ad:50:38:01: 18:68:a1:6c:c6:97:eb:2f:0f:2e:ba:ee:ee:98:24: 48:61:00:5d:03:76:71:fb:f6:4a:ed:ab:8a:ec:04: f2:2d:66:dc:7e:e2:aa:df:31:af:d9:37:74:49:dc: f3:36:79:26:e3:07:f8:3b:14:df:b5:cc:e2:0f:fd: 76:22:ec:23:ff:23:e1:56:64:0f:ca:d9:6c:c2:cf: 4e:99:09:bb:5e:96:5d:78:b9:89:ba:08:98:32:59: 13:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:2B:AE:BE:BB:DE:B0:74:5D:44:5D:D2:04:64:84:39:3B:2D:88:78 X509v3 Authority Key Identifier: keyid:0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:68:4a:7a:0b:1a:4f:32:1e:3d:24:65:ce:51:69:04:e3:d9: 9b:28:c1:04:66:1f:7e:cb:26:00:8a:dc:ae:a8:08:02:fe:af: 4c:87:25:8b:97:f3:1e:ba:01:60:38:39:30:61:a5:17:aa:fc: 7e:84:82:e2:8c:fe:5b:69:7f:5d:ca:3d:2a:ab:3f:e6:e9:ad: 1d:2c:ba:7d:a8:56:1a:3c:60:1a:09:bd:35:f2:34:f1:c8:f9: 54:cc:17:94:ab:e4:ac:00:13:e9:94:5f:1d:e6:30:ba:8b:e7: cf:bb:e0:ac:8c:cc:ae:48:58:0d:54:96:b3:98:6c:25:bf:a3: b3:e1:9b:48:ec:a2:67:aa:b3:85:eb:bb:c6:ec:f9:62:e6:af: b7:f2:93:58:74:c6:96:2b:f5:20:83:25:56:89:f1:77:b8:34: 89:72:c3:8e:31:cc:7a:bb:45:8c:a9:d9:16:e4:0f:00:1d:94: 85:5d:f4:97:33:07:87:0a:6b:3f:d9:14:31:29:05:d4:a7:eb: 19:bd:ed:5c:4b:8d:80:43:46:02:d3:d1:95:5c:7e:3a:8d:07: 5f:47:fa:94:91:59:d6:58:fd:bd:7e:4a:b4:d5:87:9e:36:82: 47:b3:37:e4:a0:c8:a9:6c:be:4f:d1:3a:e1:0e:94:f3:61:11: 4e:a9:f3:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZS7KX43LvL0Fl6iqDdGwHBtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhODFmZTkwNTlmNjgyMGJjMThhZDU4MDJmMmYxZmNhNzdk MjU0YjcwHhcNMjUwMTMxMDcwMDQ2WhcNMjUwMjAxMDcwMDQ2WjAzMTEwLwYDVQQD EygxODJiYWViZWJiZGViMDc0NWQ0NDVkZDIwNDY0ODQzOTNiMmQ4ODc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEuXdLCk6lE8UvcFHpGvcYl9tZgB ++5WCV/dVylsxEavDA6q2cU2nI0e9fAAV6Hxv3n2da5HNtVx2wfIsnAdpwJdKE3q HP01r3PmIy/MzzwOa5Q4mWukFXCxO28/HS3IQqwo66DQuCPjKZm/hs/RPyW5cea+ NwIDlS5EEod0nZMVx3A0Cv+32kMvTG8SdYEfot+j1cT1oJqACmS8zxMUja1QOAEY aKFsxpfrLw8uuu7umCRIYQBdA3Zx+/ZK7auK7ATyLWbcfuKq3zGv2Td0SdzzNnkm 4wf4OxTftcziD/12Iuwj/yPhVmQPytlsws9OmQm7XpZdeLmJugiYMlkTDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBgrrr673rB0XURd0gRkhDk7LYh4MB8GA1UdIwQY MBaAFAqB/pBZ9oILwYrVgC8vH8p30lS3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgt YmYwNWFjYzgyYmQxLzEvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgtYmYwNWFjYzgyYmQx LzEvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASWhKegsa TzIePSRlzlFpBOPZmyjBBGYffssmAIrcrqgIAv6vTIcli5fzHroBYDg5MGGlF6r8 foSC4oz+W2l/Xco9Kqs/5umtHSy6fahWGjxgGgm9NfI08cj5VMwXlKvkrAAT6ZRf HeYwuovnz7vgrIzMrkhYDVSWs5hsJb+js+GbSOyiZ6qzheu7xuz5Yuavt/KTWHTG liv1IIMlVonxd7g0iXLDjjHMertFjKnZFuQPAB2UhV30lzMHhwprP9kUMSkF1Kfr Gb3tXEuNgENGAtPRlVx+Oo0HX0f6lJFZ1lj9vX5KtNWHnjaCR7M35KDIqWy+T9E6 4Q6U82ERTqnzHg== -----END CERTIFICATE-----Generated at Fri Jan 31 15:33:36 2025 by rpki-client on console-fra.rpki-client.org