$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft File: rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft (raw, json) Hash identifier: PSoC3/ah+ElwsrzcKcfuCD+145Q1y2L17BrH67+ODqo= Subject key identifier: 57:7F:B0:F5:4B:AB:30:04:C6:38:A0:E3:B6:35:9C:F1:D5:86:99:16 Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08 Certificate issuer: /CN=adac830ccaa74783dd961fab241a228d7cc6f808 Certificate serial: 0194BABB7980FBA389E10407C1C5C3AB030F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft Manifest number: 1453 Signing time: Fri 31 Jan 2025 05:00:35 +0000 Manifest this update: Fri 31 Jan 2025 05:00:35 +0000 Manifest next update: Sat 01 Feb 2025 05:00:35 +0000 Files and hashes: 1: 04Xl2v7VZUiTmCr_w4v8QX2gTRY.roa (hash: MycY07gNOE3Ooqi4Uv41zgpH/iEzpn8tkzRPcGSW9aU=) 2: 26R907b9JZTa9LMd6c9-dwXbanc.roa (hash: Nr0pZSVAGWFTdm0Q/t/4gBjJB3CHvlfJvfnTY1Rsu6U=) 3: 4CkYdPgwuFRB9yfCSUR4mFZ2aRY.roa (hash: uxH7iNCE7ZmZDPzgHrmT88B0442eI2IPmR0JGvSaYus=) 4: N8IkUZJzTBOZlu70RR-lhbMLsyk.roa (hash: ibQxnRGTbY2fQW1i2qvy/3e4lxCnd9xPyOoTE1V98yc=) 5: Nz5RTdbiVqvTyf1uMtVJTNrUInA.roa (hash: 6DxKi3ibNRNUsq7DVRyyl9egdF22G2yI1jKGFf7eGvI=) 6: OrB13yHYot_uIXf_gXlQc8xI_hE.roa (hash: FMQdsecZx+s70UXzEHExqDx9Jcs+3DRJcI4Unl+IGvY=) 7: Pl7-hE7wkLNvDQabKfSwU8DkQ6w.roa (hash: 27nFWy7GlxT7WEaqE4vpzeeamTgM2rIB5rRF1VNL9hc=) 8: R6LZ_8XH3ExvRg1dUKFNV8Ey0F8.roa (hash: qFpymdyEBp79zE8j0kfuySy0J6zv46CXUcpRwgvhrUg=) 9: cMwLZYfTsXdjIqb9jx4UAT_n7A8.roa (hash: DlDoiDsmZqGB/sH+jVsLeAbtXXyd2YUnrqrE/juxJb0=) 10: d4OCK2D4mSeWoRqf9p5C2kL05YA.roa (hash: Elq7S05bbGTPAkW786TpCyuI8W7H2meHxaBdt6oA0iQ=) 11: eve0R85Bzf8fVYZiz_CwkQbNrfY.roa (hash: C31CurjzM4ZbD0eThfczK/2Jz2E+lMaCmCEqjBcpDzI=) 12: lGrajh7a_wa1_LmUlCkskSpHEUA.roa (hash: cqiS1zwnFw4W1rzDIACXMZPc8ZNVkVV3Hme04FAS5Cc=) 13: mk-EE-jomB4r81nV5hqnq3SbThA.roa (hash: s/WHq7pvPXbuGboH15G/GxJVOO9+dXTAtYjUAcjZio4=) 14: rEnKo4uFTJMFYN6Cn2Ft0459Avg.roa (hash: INMUl7RzFx1P7Rf6UvWbPgwSFgMQsbOXObYuvGU4UyU=) 15: r_x3Fm5qPpLt6tIgjqPoDH6NSOU.roa (hash: eOXFdxOR7gIGvVyPrVo91AN3j7CdU+E/QIH/+e1t/5w=) 16: rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl (hash: MD0uhUF1fc0BWa0y/96zTijgX5xEQ/PHxvj6xjnv+wc=) 17: xgJFjaLiTqyrTAWyq4f18Pg7amk.roa (hash: 2iBDAhKAGL78CKGIrACCnUM4WIuzKixnPTq74lNq4V0=) 18: zNVGFbRsiePBxz6FwsPTrdVje0c.roa (hash: iOwivHuatZu0dYUoIFiY6LVls3U7FPznyEYVX0N4MfQ=) 19: zwam10qTIbqdFHd30kfqv_ZzWgE.roa (hash: FkxbmAbpcrj+MmOQBWMwaW9Kx0P0rYzKKqUDU8tkNdM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 01 Feb 2025 05:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:ba:bb:79:80:fb:a3:89:e1:04:07:c1:c5:c3:ab:03:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808 Validity Not Before: Jan 31 05:00:35 2025 GMT Not After : Feb 1 05:00:35 2025 GMT Subject: CN=577fb0f54bab3004c638a0e3b6359cf1d5869916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1b:fd:e9:81:e6:87:5e:36:c9:c0:f1:49:e2: 93:60:52:43:02:57:0f:5b:85:ab:66:b0:62:ab:67: 73:e5:d2:59:fd:cf:04:0c:72:0e:d5:af:bf:39:06: 6e:67:a9:91:e5:85:4b:11:5e:ee:af:46:d3:ba:71: 9e:84:e1:0c:86:1d:5c:4e:74:01:b9:65:c5:04:e4: 34:37:92:3d:3c:50:04:f0:38:5b:12:73:be:5e:90: e9:8e:2e:cc:87:c6:72:4a:15:76:2c:93:92:a8:89: 1e:f5:1b:33:eb:51:30:69:32:04:54:59:fc:d0:e1: c7:76:3d:03:1e:1b:ea:10:65:5b:f2:16:68:16:8e: c3:13:f0:17:3b:24:8e:c0:bf:d7:c2:dc:6c:5b:71: fb:06:66:1a:a2:f7:72:5a:b7:3f:35:78:bc:9c:d9: aa:cb:fc:8b:18:52:3d:3f:5d:1a:2b:01:19:1b:d0: 75:04:0f:e2:55:91:95:7e:ca:8d:58:6d:04:1f:44: 63:d2:94:29:c2:6a:e1:65:59:ab:fd:f1:58:9a:2f: 28:af:4f:df:80:65:a8:d8:bc:61:6e:7d:95:0f:db: 76:05:b5:26:49:14:27:59:31:f2:cd:66:56:52:d0: 95:47:22:90:20:51:4e:2d:fc:4d:e2:a7:0a:1b:47: b2:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:7F:B0:F5:4B:AB:30:04:C6:38:A0:E3:B6:35:9C:F1:D5:86:99:16 X509v3 Authority Key Identifier: keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:5e:a4:7b:0b:5b:91:f2:e4:e8:5b:64:ea:c4:9f:ba:6a:c5: 47:e0:f0:43:06:df:e3:88:7d:b2:b5:c3:e2:36:48:38:e2:9d: 36:0b:3c:30:ab:16:55:7e:70:89:07:64:b0:d9:6e:f0:aa:96: e0:a5:27:56:1f:a5:45:4e:99:0c:63:3d:a6:ef:8c:5b:5a:b4: e0:11:26:90:d8:05:a1:e0:3b:32:6f:78:a2:0d:2f:05:5f:26: 72:8d:06:1d:dd:c1:0c:84:b3:b1:b6:0b:17:d5:f9:12:e1:fb: 80:a4:18:e1:48:63:da:f8:ba:97:36:9a:2d:e3:c0:04:24:fb: c5:8b:7d:25:2c:5f:78:fc:b0:e8:60:54:67:a9:cb:98:e0:20: 1a:ec:5e:8a:59:84:81:29:d9:cb:f2:9b:bd:dd:a2:58:77:d7: a8:42:3d:b1:36:9d:e6:b1:37:77:a6:0e:32:dd:7b:f2:c5:c6: 67:dd:40:b7:9d:b0:5f:58:6f:43:e4:0e:de:69:70:fc:2f:57: 38:ef:d9:85:75:49:3c:d5:de:2a:8d:01:9f:4f:c8:4b:bc:80: 19:d8:17:d2:14:6c:51:f8:6e:17:5f:a3:2b:da:07:a3:2d:52: 5f:e0:62:1f:a4:91:6a:cc:69:12:23:6e:63:76:a6:fb:77:42: 84:79:6b:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZS6u3mA+6OJ4QQHwcXDqwMPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkYWM4MzBjY2FhNzQ3ODNkZDk2MWZhYjI0MWEyMjhkN2Nj NmY4MDgwHhcNMjUwMTMxMDUwMDM1WhcNMjUwMjAxMDUwMDM1WjAzMTEwLwYDVQQD Eyg1NzdmYjBmNTRiYWIzMDA0YzYzOGEwZTNiNjM1OWNmMWQ1ODY5OTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxv96YHmh142ycDxSeKTYFJDAlcP W4WrZrBiq2dz5dJZ/c8EDHIO1a+/OQZuZ6mR5YVLEV7ur0bTunGehOEMhh1cTnQB uWXFBOQ0N5I9PFAE8DhbEnO+XpDpji7Mh8ZyShV2LJOSqIke9Rsz61EwaTIEVFn8 0OHHdj0DHhvqEGVb8hZoFo7DE/AXOySOwL/XwtxsW3H7BmYaovdyWrc/NXi8nNmq y/yLGFI9P10aKwEZG9B1BA/iVZGVfsqNWG0EH0Rj0pQpwmrhZVmr/fFYmi8or0/f gGWo2Lxhbn2VD9t2BbUmSRQnWTHyzWZWUtCVRyKQIFFOLfxN4qcKG0ey7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFd/sPVLqzAExjig47Y1nPHVhpkWMB8GA1UdIwQY MBaAFK2sgwzKp0eD3ZYfqyQaIo18xvgIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmF5RERNcW5SNFBkbGgtckpCb2lqWHpHLUFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zMjVjOGQtZDM2OC00ZWVlLTljYTgt OTI5ZjdkNjM1ZjRiLzEvcmF5RERNcW5SNFBkbGgtckpCb2lqWHpHLUFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8zMjVjOGQtZDM2OC00ZWVlLTljYTgtOTI5ZjdkNjM1ZjRi LzEvcmF5RERNcW5SNFBkbGgtckpCb2lqWHpHLUFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbV6kewtb kfLk6Ftk6sSfumrFR+DwQwbf44h9srXD4jZIOOKdNgs8MKsWVX5wiQdksNlu8KqW 4KUnVh+lRU6ZDGM9pu+MW1q04BEmkNgFoeA7Mm94og0vBV8mco0GHd3BDISzsbYL F9X5EuH7gKQY4Uhj2vi6lzaaLePABCT7xYt9JSxfePyw6GBUZ6nLmOAgGuxeilmE gSnZy/Kbvd2iWHfXqEI9sTad5rE3d6YOMt178sXGZ91At52wX1hvQ+QO3mlw/C9X OO/ZhXVJPNXeKo0Bn0/IS7yAGdgX0hRsUfhuF1+jK9oHoy1SX+BiH6SRasxpEiNu Y3am+3dChHlr4A== -----END CERTIFICATE-----Generated at Fri Jan 31 15:34:19 2025 by rpki-client on console-fra.rpki-client.org