$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft File: 9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft (raw, json) Hash identifier: KIs92DdkUg9F1X26Tf0MaaonxbG0eISmXf9M+oCUNZE= Subject key identifier: 8A:E0:A2:DC:BA:2E:16:5F:6A:B2:B0:14:10:EA:54:B6:1D:BE:5C:16 Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2 Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2 Certificate serial: 0194BA84913485AEA8E26EC6E504E0111E6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft Manifest number: 0DCB Signing time: Fri 31 Jan 2025 04:00:37 +0000 Manifest this update: Fri 31 Jan 2025 04:00:37 +0000 Manifest next update: Sat 01 Feb 2025 04:00:37 +0000 Files and hashes: 1: 71FX_4A119IhuC8f7Bs2Xv3DNc8.roa (hash: S8IGbQh64+6h6zHqJyAc+cCUyK59GfIN1I9QddYyZQo=) 2: 7InXKoGXPyPmSkShdNo1bN5BHPE.roa (hash: p0vQNoVwsgdCf98zXzcil2JDwtIbKg4o52YVuAX43Qg=) 3: 9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl (hash: 2l0mjIRALbCGnoiWfaiFGvVA3qwx8/ap4iyiWft74aM=) 4: G7eTk3jqB-BdA_Wy3K2E2YFtyTA.roa (hash: OtseOoY4gfu7tKjqn1wIwpg1/zv9XoIf0fx8DQ1CUfM=) 5: ISNHkwTdIse1R5eVAbZVrpNzf7I.roa (hash: aWcNBCaUk6iVQl/ljrkexa0tplOypXs9VyEvekzMA3M=) 6: L0ujmwzkJ6RRH45eugAjMYC2Zhg.roa (hash: ZYuGlloJDpR2SY2TTczc6v50q6dosW6j6YAj25G96Pg=) 7: LII7hRC3tP9UTUOEbD-OlE2YLz0.roa (hash: 2G0IT+KoXJQxpXp8HjaK3udKnKhR8XLas866IuV7Mj4=) 8: MGAJtndIL2Zkck_RVFiKK_Egp5c.roa (hash: 3Dl+p66+/Z3qtyr+Z1rkPfMp8vG5nBq1fl9w3qHRGM4=) 9: VTdQuPLguO6Ibw0Th9ypJCxyOf8.roa (hash: ipcRPToVDEN7EVH1AfqkAeCn3ymsz/f4y1+i87V66wQ=) 10: YcILjJ2UUGgCuCC12yOfJNMv73A.roa (hash: LkG7c2XHk04tNUbocK/Q+08kZv1dTJbsIklF0rBAfA0=) 11: _nLYAZC-VddX97JjR5Q6LKKqBQ4.roa (hash: ndREz8aC1hd1w5pe58qePL+6kw9PyDSZ6Q1HeOlC7Rc=) 12: d1Mc0OsWnepemmVerPa7kdZl1N8.roa (hash: JRdvIEtlRj7j9yeTQYkXzcTmst5QyvuiftJaDhMJ8Og=) 13: gZtcQ4r6Woqv34G6dpT_HEC-DoY.roa (hash: FjGgXSzWLOa8xqz/zgnt2HT+YvKm/u5bq1IXo4VHelQ=) 14: k_9bhWj2JcQnyMq-FPfEv0otOUw.roa (hash: Zs3oxA2HTYXtiE5lUDi8OJy4SVF/+vQT5qkuzqaf+ew=) 15: o4_pEwPipmYi6C3PXNhpC7by3MA.roa (hash: HbprNAxeP8NoQY7jwdw1Rs3l1Tj/TI85puQfPIX124c=) 16: qjxC3CMWMpiM1TpibiIWl8s1Se0.roa (hash: vL7m0foCqcx4qZwFUYV1ieilxVwO5UgoFDNdvDch1DE=) 17: t0gWV72zLQLExI3pDHKlUQNMCLg.roa (hash: sZqkeiCyvYuQZJfxR8h/KOL8f5qWehA/zicZawvNouA=) 18: wj2VxfuvQPp_y-B-S4cBoG4no9E.roa (hash: NUb/774hisZdKkcNsYbowzixlPdgcgSeN+DazRzxjeU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 01 Feb 2025 04:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:ba:84:91:34:85:ae:a8:e2:6e:c6:e5:04:e0:11:1e:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2 Validity Not Before: Jan 31 04:00:37 2025 GMT Not After : Feb 1 04:00:37 2025 GMT Subject: CN=8ae0a2dcba2e165f6ab2b01410ea54b61dbe5c16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:98:6e:f5:f9:90:92:7a:dd:82:d2:20:4b:79: cb:f2:ab:38:33:e0:a3:2a:ee:a0:b5:b3:bb:96:5a: 60:ec:57:e6:30:b5:37:a9:43:52:9c:d1:4e:ed:1e: ee:5f:e6:5c:b9:5c:23:9f:a0:25:39:9a:c1:c5:8b: 3a:7a:37:e0:49:8d:fd:79:33:13:c4:99:67:bb:5e: 91:9b:96:43:4b:01:25:07:14:2b:8a:a8:4a:23:c7: 75:3f:50:f4:b7:d3:e4:6f:90:29:c2:e3:15:d9:d9: f6:a4:57:5d:a0:bb:cb:e2:b7:eb:01:71:e8:b1:63: a7:d3:ba:c5:67:ba:0f:61:05:21:2b:e2:2e:5b:c5: f9:f8:af:59:90:e1:70:32:67:53:71:5a:84:76:89: 4a:b5:db:4e:6d:d8:3f:6b:3a:18:1d:35:aa:8b:ef: 9c:89:6c:8a:b1:05:52:d9:71:be:3e:24:22:72:87: 31:56:84:33:28:29:e8:42:07:04:80:b0:56:7f:17: dd:3e:24:92:18:cc:e1:6e:dd:13:d4:d7:f6:67:7c: 56:13:d0:38:42:7f:a1:49:d1:46:a7:a5:39:b6:69: ff:3f:41:03:87:27:f2:ce:37:01:a4:38:f5:2f:81: c7:0e:b1:56:0c:78:ee:d2:b3:47:97:33:9c:cc:be: a7:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:E0:A2:DC:BA:2E:16:5F:6A:B2:B0:14:10:EA:54:B6:1D:BE:5C:16 X509v3 Authority Key Identifier: keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:e3:68:52:e3:72:54:d6:20:02:00:7e:8d:d6:b5:8f:72:6b: 40:00:e3:46:a1:4d:88:fd:75:d8:73:64:01:56:66:44:45:2d: c7:8a:33:a2:18:e2:c6:39:17:f6:76:33:5b:08:7d:c8:9e:6a: cf:93:23:2b:b5:11:19:c1:2f:05:4a:3b:04:74:83:d6:be:cc: ed:8e:a6:ae:ae:b9:be:05:59:06:ed:17:2b:a8:4d:6f:49:87: b3:4f:c9:86:c0:d4:00:12:78:a0:94:dd:37:3e:a7:fd:83:77: 35:04:f7:8c:5b:01:0b:e0:aa:1a:3b:22:83:26:8e:62:5e:8f: b9:26:06:c5:e1:3d:81:7d:79:f8:4c:f0:67:45:27:6b:58:25: 9d:b3:bd:39:ac:91:a9:32:1a:60:7b:fa:36:ee:b6:6b:e1:95: cd:1b:d5:5e:45:63:04:42:62:2e:c3:87:4f:f3:7f:28:f2:86: 87:73:2f:f1:82:cc:e5:a0:59:6f:f9:14:ee:dc:33:26:bb:86: ea:58:81:55:70:b4:d0:84:49:dd:72:24:3c:af:a6:91:f3:f6: fd:96:14:0e:d3:c9:53:88:a4:ed:4b:f2:f1:6f:cc:22:42:5b: 69:db:b6:4c:d5:ab:8e:9f:47:2c:c6:05:0b:db:20:ea:82:38: 3d:45:35:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZS6hJE0ha6o4m7G5QTgER5tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZmIzMmQyMjY2YjFmOWJjZTU3Y2FjOThiYzAyNDdmMmM5 MTk3ZjIwHhcNMjUwMTMxMDQwMDM3WhcNMjUwMjAxMDQwMDM3WjAzMTEwLwYDVQQD Eyg4YWUwYTJkY2JhMmUxNjVmNmFiMmIwMTQxMGVhNTRiNjFkYmU1YzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqphu9fmQknrdgtIgS3nL8qs4M+Cj Ku6gtbO7llpg7FfmMLU3qUNSnNFO7R7uX+ZcuVwjn6AlOZrBxYs6ejfgSY39eTMT xJlnu16Rm5ZDSwElBxQriqhKI8d1P1D0t9Pkb5ApwuMV2dn2pFddoLvL4rfrAXHo sWOn07rFZ7oPYQUhK+IuW8X5+K9ZkOFwMmdTcVqEdolKtdtObdg/azoYHTWqi++c iWyKsQVS2XG+PiQicocxVoQzKCnoQgcEgLBWfxfdPiSSGMzhbt0T1Nf2Z3xWE9A4 Qn+hSdFGp6U5tmn/P0EDhyfyzjcBpDj1L4HHDrFWDHju0rNHlzOczL6nHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIrgoty6LhZfarKwFBDqVLYdvlwWMB8GA1UdIwQY MBaAFPX7MtImax+bzlfKyYvAJH8skZfyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAt MmQxNDNkN2I4NTNjLzEvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAtMmQxNDNkN2I4NTNj LzEvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqeNoUuNy VNYgAgB+jda1j3JrQADjRqFNiP112HNkAVZmREUtx4ozohjixjkX9nYzWwh9yJ5q z5MjK7URGcEvBUo7BHSD1r7M7Y6mrq65vgVZBu0XK6hNb0mHs0/JhsDUABJ4oJTd Nz6n/YN3NQT3jFsBC+CqGjsigyaOYl6PuSYGxeE9gX15+EzwZ0Una1glnbO9OayR qTIaYHv6Nu62a+GVzRvVXkVjBEJiLsOHT/N/KPKGh3Mv8YLM5aBZb/kU7twzJruG 6liBVXC00IRJ3XIkPK+mkfP2/ZYUDtPJU4ik7Uvy8W/MIkJbadu2TNWrjp9HLMYF C9sg6oI4PUU1Dw== -----END CERTIFICATE-----Generated at Fri Jan 31 15:33:51 2025 by rpki-client on console-fra.rpki-client.org