$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft File: 9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft (raw, json) Hash identifier: QiFQOasxw5Rx30rwJhFp8oxd2+bE1wZcd4rHlU+jqdw= Subject key identifier: AB:1C:37:A7:DD:7E:7C:3F:BD:8B:28:05:AC:82:D4:F3:11:13:6A:39 Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2 Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2 Certificate serial: 019350BD9C04FE7186BD3088CCBA37038762 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft Manifest number: 0D0A Signing time: Thu 21 Nov 2024 22:00:23 +0000 Manifest this update: Thu 21 Nov 2024 22:00:23 +0000 Manifest next update: Fri 22 Nov 2024 22:00:23 +0000 Files and hashes: 1: 1--ON0NgvS91en06XYK3j0uR4yAc.roa (hash: MHmEC7CbgcDuUbdEaZi1Hc8eHYkXNTsbv6onD9TfItI=) 2: 23BXV1VLXfR72Lp7_pM3iseHZis.roa (hash: SuR6fxymMaZai0DxylieE81auKzqoIg2RKOy7E5iB3I=) 3: 8q20AD5cnij2ekbAcXZG5ZG1zqg.roa (hash: 6lhuyI+zMmF+Ttdu9Fh9dcEjzvizQqBB+EFyhF8GU40=) 4: 9HKAkHxpbhK8HArIODdxur5J3Bg.roa (hash: ADALvSypY+GZmzPJevp8Flm25zh/3vzBsbQXB7Ntd+k=) 5: 9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl (hash: o89ccsHN7ah/NRl32b/mIfjOxX28dq82DMhFftXbTL8=) 6: EApr4Z72ZNv6-Qhja73XLbTrlmg.roa (hash: Ktrdf1s5QJZ6PhoDT+NTHjgsDHtuzmtrt0ZxRgkLLSM=) 7: GG5l3019Cmza1q1gEOWQhyEeHUo.roa (hash: Jjh5YvreGpkRAcWUqyubR/zeu4LyseTGZV1B8GuN8Ww=) 8: HyBO-kPJAbMiovl3TVObdnE2fq8.roa (hash: /K56UaCly/iwzc2xB4maljrtRqL+LegerhVqI0vl+Kk=) 9: I-N2iK55Kn9pHBCT3L1O1spvf0M.roa (hash: e0Synhjx8gn7Ve0RDYzxPxFzhRt7AMPJklUkHqfMDSk=) 10: K7z1hwkkvZPwTW0CqefikmmBiqc.roa (hash: EK1uSxTp5YX9HrrLY6GLHquTFYQRG3W1Xk/7L8iQbX8=) 11: L1kvufPtQU2EkT32H3Xr51TtdJs.roa (hash: Nfjezk8tYZQHLviZOvfqZWIrM1P0J83wHX1E7wUltYY=) 12: QcO_97kM9oRus7I7ci9eDnU8--Y.roa (hash: Zhat4FpOcass8GhXs5lmNW3mPpCyZNEwjgEqXGcTH7k=) 13: WUNEHvr0ZgHtoqSJbuN62py92Io.roa (hash: lDW06UuCrPMY+xkAqwZXNOm1gvX0QoZBq3udHgV8zvs=) 14: _3tPZpv3Ca2IFe4J3HNt24vXoH4.roa (hash: q+bE5CsnQ1WQOIo88P+Mk9QZ38e1ms+l6WqsZ1Qbsls=) 15: hMQJ0REVAil8ByHZtiDGC_OTbvo.roa (hash: CElKgM0bSkCPlL8WeeZx+gO42wHgy0V05RvEs8vlGZQ=) 16: vhhINde8pr6IniUZPu9g1A1HxLI.roa (hash: /EZkqQztrjHRonhFehIiiH7gCy2pH5kPTbr0oKdPMAc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 18:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:50:bd:9c:04:fe:71:86:bd:30:88:cc:ba:37:03:87:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2 Validity Not Before: Nov 21 22:00:23 2024 GMT Not After : Nov 22 22:00:23 2024 GMT Subject: CN=ab1c37a7dd7e7c3fbd8b2805ac82d4f311136a39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:2e:0d:b7:9f:8d:eb:f0:b8:b9:5c:bb:e4:27: 11:2c:ac:3d:fc:6d:b6:42:3c:72:67:08:60:a3:49: 59:40:a0:3e:fb:0b:fc:1b:33:f1:5d:1b:27:b7:b4: ab:44:c2:de:e8:52:a5:19:53:77:07:e1:3c:3c:2c: 3e:cd:92:4c:f3:02:ec:64:51:ea:4e:c0:c9:5e:f6: 1e:8a:84:66:a2:e2:2e:ef:36:ab:c9:7e:8b:93:89: 4e:43:f0:f9:13:02:81:2c:70:b4:56:f5:05:0a:a3: 48:6d:22:6b:12:d1:f9:a9:0c:43:e3:6a:59:1f:d9: f6:35:5f:80:42:87:65:ed:80:88:ed:d7:e8:e5:32: e2:8d:75:10:d1:13:ab:6c:38:4d:d8:a0:d8:69:d7: 59:cb:14:3a:cb:44:51:4d:0b:b7:26:e5:f6:99:57: f1:bc:c6:31:73:50:41:fa:95:94:16:98:06:30:b8: 99:69:96:f2:2d:e2:f6:26:e3:a8:b9:2f:2a:cb:a7: c3:f7:f8:d4:82:49:32:52:9b:5e:2f:8d:ba:b3:83: 47:c5:c5:28:e5:a0:50:f5:a2:0e:ef:e0:b2:d9:25: b2:db:7c:2c:10:80:a1:52:61:7f:7a:db:85:5b:a8: fd:3d:12:d0:6e:cb:cc:fa:d9:bb:3e:a0:df:f2:d4: 70:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:1C:37:A7:DD:7E:7C:3F:BD:8B:28:05:AC:82:D4:F3:11:13:6A:39 X509v3 Authority Key Identifier: keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:98:24:ea:f9:80:74:a2:b0:61:dd:7f:a4:5f:a0:86:3e:20: 97:5c:95:e1:6d:60:02:85:30:c5:0f:86:8b:77:c5:e0:a9:db: 8c:36:aa:69:ca:48:e6:79:73:b2:17:4f:c8:6f:79:1b:5e:ae: f6:cc:54:0a:f4:32:a1:03:ac:f0:a4:de:90:12:3a:21:13:3e: 2b:f5:0c:1f:fb:5f:74:2e:01:dc:39:1d:47:ff:43:60:4c:f9: 8e:b7:69:5e:d8:9a:30:f8:cd:5b:69:d7:18:f3:02:67:bf:fe: ce:a4:80:63:d3:ed:c8:d0:f6:a3:81:f3:ef:bd:18:e1:7c:1a: 97:37:c0:8e:5c:c5:d5:cd:6a:23:dd:59:bb:46:fd:23:5b:50: e6:ec:bc:15:6e:5a:52:a2:87:71:18:d3:f9:5c:46:f1:83:b8: fb:ca:e6:b5:c9:5d:00:1f:35:aa:19:c6:cb:93:c0:c7:0f:3b: e7:f3:9d:d2:7e:24:fc:c1:ac:a6:1d:be:54:be:bd:31:36:be: 52:e9:51:c8:32:45:90:b6:16:96:ab:41:96:bd:01:a9:0c:d9: 2e:21:e1:60:d1:0f:a7:a4:e2:2e:9b:9f:c5:66:e6:78:89:3a: 6a:46:2a:de:a6:4a:14:5c:de:e9:fc:91:18:ff:cb:2f:e3:3a: d5:eb:d8:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNQvZwE/nGGvTCIzLo3A4diMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZmIzMmQyMjY2YjFmOWJjZTU3Y2FjOThiYzAyNDdmMmM5 MTk3ZjIwHhcNMjQxMTIxMjIwMDIzWhcNMjQxMTIyMjIwMDIzWjAzMTEwLwYDVQQD EyhhYjFjMzdhN2RkN2U3YzNmYmQ4YjI4MDVhYzgyZDRmMzExMTM2YTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1C4Nt5+N6/C4uVy75CcRLKw9/G22 QjxyZwhgo0lZQKA++wv8GzPxXRsnt7SrRMLe6FKlGVN3B+E8PCw+zZJM8wLsZFHq TsDJXvYeioRmouIu7zaryX6Lk4lOQ/D5EwKBLHC0VvUFCqNIbSJrEtH5qQxD42pZ H9n2NV+AQodl7YCI7dfo5TLijXUQ0ROrbDhN2KDYaddZyxQ6y0RRTQu3JuX2mVfx vMYxc1BB+pWUFpgGMLiZaZbyLeL2JuOouS8qy6fD9/jUgkkyUpteL426s4NHxcUo 5aBQ9aIO7+Cy2SWy23wsEIChUmF/etuFW6j9PRLQbsvM+tm7PqDf8tRwJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKscN6fdfnw/vYsoBayC1PMRE2o5MB8GA1UdIwQY MBaAFPX7MtImax+bzlfKyYvAJH8skZfyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAt MmQxNDNkN2I4NTNjLzEvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAtMmQxNDNkN2I4NTNj LzEvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArZgk6vmA dKKwYd1/pF+ghj4gl1yV4W1gAoUwxQ+Gi3fF4KnbjDaqacpI5nlzshdPyG95G16u 9sxUCvQyoQOs8KTekBI6IRM+K/UMH/tfdC4B3DkdR/9DYEz5jrdpXtiaMPjNW2nX GPMCZ7/+zqSAY9PtyND2o4Hz770Y4XwalzfAjlzF1c1qI91Zu0b9I1tQ5uy8FW5a UqKHcRjT+VxG8YO4+8rmtcldAB81qhnGy5PAxw875/Od0n4k/MGsph2+VL69MTa+ UulRyDJFkLYWlqtBlr0BqQzZLiHhYNEPp6TiLpufxWbmeIk6akYq3qZKFFze6fyR GP/LL+M61evYwg== -----END CERTIFICATE-----Generated at Fri Nov 22 00:36:48 2024 by rpki-client on console-fra.rpki-client.org