$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft File: rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft (raw, json) Hash identifier: n4D498bvHPNVwj+hmzMEAM1t1aoGUfoUyzpQbqqCSi4= Subject key identifier: C4:16:A8:7F:D5:B7:DA:F2:9B:6E:32:7F:D8:0B:F8:33:7F:21:E5:8D Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08 Certificate issuer: /CN=adac830ccaa74783dd961fab241a228d7cc6f808 Certificate serial: 01935651D565381EE0EC05ED87E1A5D68713 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft Manifest number: 139A Signing time: Sat 23 Nov 2024 00:00:23 +0000 Manifest this update: Sat 23 Nov 2024 00:00:23 +0000 Manifest next update: Sun 24 Nov 2024 00:00:23 +0000 Files and hashes: 1: 1no7mIlPgrjGGPboAQeF_6v17z8.roa (hash: WBzZEDjHYRrYFwUvhyGA0hE80adZnx6zkMTmEWqKkVM=) 2: 41l1kiBJ4uQhoInGZmh7tQhxPWM.roa (hash: AzkiaLSDeiF0ObL6P0dm+ULjnzgTP+kCrgE5qwIxX+A=) 3: 5zyfOcwIPRTj30LSpPOg4DpfypU.roa (hash: 61Pux11IMlAOPcbn9LxnkKjFkMmaTfTBWcB2LPDAm6w=) 4: CHf_cTzmdkF7qew1AeAbjle7obM.roa (hash: nSTP6U8yrh3e16Uz96q7ugRBm6vla5/AWu0XzV84wUg=) 5: Ffe50Vt73e6wVaZ13_k_-KDI6ew.roa (hash: B0LhC2sLEHVNLerYpp9hRIlErEsXK6CYSMKewqY5fz8=) 6: HMchJeotIH6djsdLbe4zMY9Mrls.roa (hash: rAwMw2+mcr5HKOWgcP+rbgAotB6plxocppoMoL9dU9Q=) 7: KJTkc8eLrEZaV27oqs83kkNd6QU.roa (hash: bKX+v/PwBxdwWjSWRgnFWaIsadmUHYd1pqB6LAxG8XM=) 8: MPoBn62aJcWRZREL6bYSr3u0Ufg.roa (hash: DW85oTtl1k7coMlzptdYrEA/eF+wu9PgyL8e1/UZJmQ=) 9: OjZxjF2XLWWUE663ywMJDMOaPQ8.roa (hash: fpaBZSPSwFBq0eKY/naz3G7r2Tm2jfEjCswOVbGzCQ4=) 10: TTrD6Od_QmX1qVk4WOcopR8_gUg.roa (hash: Xq4yi8Z+bnburKxcRR4Lo8Mh2DsmDFWtawnV51P2u6k=) 11: V17jz5R-arXrNIGEQU-bV_-V6uY.roa (hash: z8veVHEgC3FX6ZHW9MbQUN79lseLf+LnyMDP3+fPSOs=) 12: W3bGh5xlKb3kugoThLSEbZHF-C8.roa (hash: Zp6K0fameimjy0w7VZFUTkmX4+U+QaOGFwhwIeH1xo8=) 13: YP3KwGEp4OHehKjZFim5d6Ir4Zs.roa (hash: gY2jh53p9w5duXBJWb31Oq9l2EMTRINY9ybVIKPJEFo=) 14: _iE_2MQNp2b3V61CeNOEIXZHbcs.roa (hash: Odr2yO1qkmgbLxwWKL+9y336XqttJ63pR5gTDMzBEAc=) 15: bBX9W9vffFA1CKzckOpDnbV22Ts.roa (hash: QOnOfko0+25LERw4Rnf/RxE+1IxCn+Oh6NKjSejTDAs=) 16: oxKWRW1N2gw8hi2y3-XnWrt9Yow.roa (hash: U7rqvK2orF51VzLOFi9A2WWQ3tZex09yXCx8Dg0aDko=) 17: rD_SQlr9nwqaKHrfr3i6V9xuEYk.roa (hash: 5sgkwIirQp5SZxCboDMGWEDv1wiDNbOqQc8QYANpKrY=) 18: rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl (hash: 3/vpcYUjrt+zLOiHL3tMItIepCdlYnZDA2l7Gnz0vFM=) 19: t9SONAjqj8BPm7mOkgG4yjKIBho.roa (hash: Iu3drvVIKPwpiKUw0uRkRhF8W1CfxTNxOf1AZ8hkjis=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 21:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:56:51:d5:65:38:1e:e0:ec:05:ed:87:e1:a5:d6:87:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808 Validity Not Before: Nov 23 00:00:23 2024 GMT Not After : Nov 24 00:00:23 2024 GMT Subject: CN=c416a87fd5b7daf29b6e327fd80bf8337f21e58d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7d:cc:38:bb:65:a9:a5:dc:30:a0:2d:7f:1c: 86:35:e9:59:8d:c5:62:24:79:13:47:ce:58:4c:d7: 5a:a0:73:70:3b:cf:54:3a:3b:bf:9f:81:83:0a:dd: 9b:2b:bd:b4:1a:09:1b:e4:a7:65:ea:0d:68:29:e7: 0c:50:4b:5f:ff:7a:4f:35:af:91:05:c4:0b:c4:58: 53:b0:8c:b5:09:b7:43:6b:89:e2:bd:92:c9:e5:77: dc:c5:d7:37:db:d8:85:d9:76:f7:e9:0d:2c:5b:87: 58:8f:a4:c9:3a:66:50:15:9b:c0:d3:b4:fc:3d:ad: 96:d4:06:8e:4b:ce:d6:5e:99:cd:53:fe:cf:68:46: 19:f6:b9:4a:12:86:59:0c:57:79:70:0d:96:f1:22: 0b:7c:41:07:6b:44:a1:40:bf:f1:64:6f:2b:c2:05: 2e:f7:52:5e:7e:93:66:6c:df:5c:b2:a5:9c:79:a9: fb:09:b7:3b:7f:7d:e7:3e:7f:f8:32:04:13:63:b0: 9d:fe:43:c5:f4:ef:41:20:e1:2e:de:75:ee:51:66: d8:e6:4c:e8:97:6e:c7:96:a0:e2:52:a7:d4:74:be: 92:78:70:d7:ed:14:a7:24:75:ef:5d:5b:06:bc:d5: a1:7c:52:5b:4e:f3:0d:fe:42:3f:90:60:95:e8:a0: e6:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:16:A8:7F:D5:B7:DA:F2:9B:6E:32:7F:D8:0B:F8:33:7F:21:E5:8D X509v3 Authority Key Identifier: keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:9f:de:a7:46:d6:d1:6d:0f:42:fb:69:1d:d9:9c:fd:26:97: bb:f1:65:7d:29:a9:cb:40:55:5e:19:c9:12:1c:72:5a:0d:87: 28:44:16:a6:7c:f0:2f:99:70:10:4d:5a:a8:5e:11:80:c4:c2: cf:39:eb:da:cb:dd:39:8f:ed:07:9a:07:ab:3f:2f:65:1c:9d: 75:77:69:56:cf:56:89:c3:68:af:13:35:1d:a3:f8:dd:6a:60: eb:c7:de:74:f1:f4:4c:f2:25:e8:0d:fa:ca:c3:22:d7:eb:dc: e7:3d:67:5c:af:cd:7c:c1:6b:9a:d9:02:8d:88:15:a1:18:e4: 04:90:6b:c3:03:26:78:08:a0:3c:f8:71:89:e9:4f:d7:81:b8: 3e:60:ed:f3:e2:60:28:27:01:69:02:cd:e4:5e:a9:be:cf:00: 72:39:d6:c9:5e:31:93:cb:01:c6:02:0e:77:57:91:61:f4:7e: 2d:c0:cf:49:ee:00:e6:33:cd:10:6d:fa:0a:59:40:b3:ab:16: 4f:91:ef:15:8a:84:48:21:7b:c3:37:da:ed:58:20:f0:50:6f: 07:dc:cb:35:2c:7e:f7:49:16:ac:b5:83:58:5a:d3:79:3d:29: d8:36:57:08:a8:49:e6:2d:00:cf:aa:b6:8a:2d:17:23:c7:eb: 6b:4e:52:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNWUdVlOB7g7AXth+Gl1ocTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkYWM4MzBjY2FhNzQ3ODNkZDk2MWZhYjI0MWEyMjhkN2Nj NmY4MDgwHhcNMjQxMTIzMDAwMDIzWhcNMjQxMTI0MDAwMDIzWjAzMTEwLwYDVQQD EyhjNDE2YTg3ZmQ1YjdkYWYyOWI2ZTMyN2ZkODBiZjgzMzdmMjFlNThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvH3MOLtlqaXcMKAtfxyGNelZjcVi JHkTR85YTNdaoHNwO89UOju/n4GDCt2bK720Ggkb5Kdl6g1oKecMUEtf/3pPNa+R BcQLxFhTsIy1CbdDa4nivZLJ5Xfcxdc329iF2Xb36Q0sW4dYj6TJOmZQFZvA07T8 Pa2W1AaOS87WXpnNU/7PaEYZ9rlKEoZZDFd5cA2W8SILfEEHa0ShQL/xZG8rwgUu 91JefpNmbN9csqWcean7Cbc7f33nPn/4MgQTY7Cd/kPF9O9BIOEu3nXuUWbY5kzo l27HlqDiUqfUdL6SeHDX7RSnJHXvXVsGvNWhfFJbTvMN/kI/kGCV6KDmeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMQWqH/Vt9rym24yf9gL+DN/IeWNMB8GA1UdIwQY MBaAFK2sgwzKp0eD3ZYfqyQaIo18xvgIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmF5RERNcW5SNFBkbGgtckpCb2lqWHpHLUFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zMjVjOGQtZDM2OC00ZWVlLTljYTgt OTI5ZjdkNjM1ZjRiLzEvcmF5RERNcW5SNFBkbGgtckpCb2lqWHpHLUFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8zMjVjOGQtZDM2OC00ZWVlLTljYTgtOTI5ZjdkNjM1ZjRi LzEvcmF5RERNcW5SNFBkbGgtckpCb2lqWHpHLUFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANZ/ep0bW 0W0PQvtpHdmc/SaXu/FlfSmpy0BVXhnJEhxyWg2HKEQWpnzwL5lwEE1aqF4RgMTC zznr2svdOY/tB5oHqz8vZRyddXdpVs9WicNorxM1HaP43Wpg68fedPH0TPIl6A36 ysMi1+vc5z1nXK/NfMFrmtkCjYgVoRjkBJBrwwMmeAigPPhxielP14G4PmDt8+Jg KCcBaQLN5F6pvs8AcjnWyV4xk8sBxgIOd1eRYfR+LcDPSe4A5jPNEG36CllAs6sW T5HvFYqESCF7wzfa7Vgg8FBvB9zLNSx+90kWrLWDWFrTeT0p2DZXCKhJ5i0Az6q2 ii0XI8fra05SlA== -----END CERTIFICATE-----Generated at Sat Nov 23 03:24:27 2024 by rpki-client on console-fra.rpki-client.org