$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft File: OroRckcuqAJl0SmCln3gqLC8WQE.mft (raw, json) Hash identifier: Uezshyyzt1b5ek93w8pxVGCLJqXVDlfzl9rYm/sGplY= Subject key identifier: 19:9D:87:5F:42:8C:81:D4:40:03:4B:95:42:A9:84:7D:B2:33:43:B1 Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01 Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901 Certificate serial: 019364B2B1DD2F85ECC2CC8B31111D661F4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft Manifest number: 1398 Signing time: Mon 25 Nov 2024 19:00:52 +0000 Manifest this update: Mon 25 Nov 2024 19:00:52 +0000 Manifest next update: Tue 26 Nov 2024 19:00:52 +0000 Files and hashes: 1: 0YIlzBLxLzuWctKtQaMF4nWjTpY.roa (hash: 6E/fnASnVJZjbuBYAjpofGoRfn+J4kYI+z3Tjo4lAts=) 2: 0dQubYWgWZNshp4TptP26xgUfjU.roa (hash: gfeRKkdNSQ8h6doIPUrlDdtpMwjMXfsk0QGwfESWfzk=) 3: 1-QU7AV0CgBj1dc2osLeL-ouNDrc.roa (hash: Sg7e/ubr8nCFeItpVGZAyAtGQD166Nvt0dR9TLD0wkc=) 4: 3mrARwRgtgA0CnXy6mUsH_i8uQg.roa (hash: 9izCk+yrQNd6ROGo1OWva7bv4AcFrWKps6fbNx4cViY=) 5: 47IDj-Ak1jrVSqUp12LdxdbpsXI.roa (hash: QNKYfZboyMSnpOub7YmKDwiRMC1qgA41ElzReZYlJRg=) 6: 7KQCvCvT9ytYVLRU_ccxo51yQOg.roa (hash: k0NZu4y/42Zc9MXpBjUA4yLVvl1s5IWHm8Pf1Qy5WV8=) 7: 7Pa6P8FjpahPpb2cPy-ypm1Hqnc.roa (hash: PHOGgePgriiWQBL94ybDAWQ84/Gx++68mEpmBOHlp1A=) 8: 9TPKUsOh6ckdQD-UWC80AcW65Ho.roa (hash: rAbARoYDDdjsVPZ7iUfSLngY8oYSNhDafzf5//vOgA4=) 9: HZ79KS0pMsBgKjYWTvo-bPfKqKA.roa (hash: deD0urEz1rdMuyzJ79Cd3utiOFOYJYTkb8g0CPXgvGs=) 10: OroRckcuqAJl0SmCln3gqLC8WQE.crl (hash: dIoTjBpzzO+P32F3bEgfoq2IIGRIkBPL1NOBCPrRHSo=) 11: SzBJlVHh9D6OA7gsJy8haUSSpdA.roa (hash: EqQOez1rCM8FLTIRLGrmN2TtUuO1MfHfpNj5EOKFCUA=) 12: VQMaGGLKRed3TeOP2jjxU9-JJ0I.roa (hash: DozZZe+osIfn7/wiMBfMhIeTOXgnonX86v0pQ0Sg8CY=) 13: XHOttDDchq7OiOnHo7-HIRVEOT0.roa (hash: f0bmJO7jCa6VyMQPPkc0PM12ZRTR3cxB0xD48ofJ2gU=) 14: bloNylIHC4VE2h97lnNT2pCUoxc.roa (hash: OndsONs9A2J7CeRcbrn03HzcOYYDgkJ2LqgTCmGLlUc=) 15: dmllw1MdBefh4ekUgIGGogcCO6g.roa (hash: ukmAKo6TIW0bIfc2lp8GHjOFrMUmQ2TZMECEOxXMlgY=) 16: fhjBzpCcwbNNm6h5eURZnuCnsLI.roa (hash: KxA7QWKe/xYXN7rNW9iZVoDB9eQ6O6IbjvKzDzKyRqI=) 17: iQdsJ0iD54bbhPhNXpU4JB6UwRw.roa (hash: wue5X/Y6Cqzf2UI/m7t0ygFpnpreQ6af9lqLsbGN9zY=) 18: j_q8KgpHr7oCuK76v8dpHlBv1uM.roa (hash: pf+9vEOscx1tS6TOpO45zuLG7IhRooNDWfPIcylbD0U=) 19: nK-a1rUBHOjD2-u6za1yiniNaSc.roa (hash: Rq1/IXwyeHSmK9Yc5SB6KeFtrbwIXWYLvzkKihEJjkE=) 20: pBhv9P68i-8YzlNPdovuXbN9lYo.roa (hash: +Qod0Y0FAvigFElY7sHUgjZc6918YdsWDv/Jcr7RR/o=) 21: q9fcq4y-HVIoae_QByCLdJQtAUI.roa (hash: jZtMi+PoMkhOfpmGDjJ9unfpo95EVjUm0pmmbq6gM3M=) 22: u2gi_DPYBi28NHysLns9faZsdnU.roa (hash: 1L0rMfkwPGRVmPIfi/YNwT8CX54up28vaW6fOLLRIiM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 26 Nov 2024 16:12:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:64:b2:b1:dd:2f:85:ec:c2:cc:8b:31:11:1d:66:1f:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901 Validity Not Before: Nov 25 19:00:52 2024 GMT Not After : Nov 26 19:00:52 2024 GMT Subject: CN=199d875f428c81d440034b9542a9847db23343b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:26:4b:83:d5:c8:58:d7:be:e2:0f:d1:02:b5: 6a:9a:57:8e:d9:70:91:34:b2:71:05:fd:3d:04:99: 82:2d:ad:9c:99:68:cf:7b:67:00:fb:3e:00:f6:10: ec:d4:b7:a2:c3:f8:ce:cb:29:37:5d:d4:40:48:92: cc:6d:76:65:0f:d7:4f:4d:ff:fe:6e:e5:51:b4:e6: 3e:92:49:b6:b5:12:2f:f7:e9:35:72:3a:6f:a6:82: e4:85:7b:36:f1:c1:04:98:19:65:9e:a3:3b:f9:c7: 4c:d2:32:6e:dd:f9:aa:c9:5f:1b:0f:30:89:f8:5b: 01:3c:28:c8:a2:69:43:f6:84:8c:5c:84:df:1f:af: ad:e7:a3:60:95:1e:2e:b8:59:8b:e4:fa:06:c0:b1: a5:58:e1:57:66:bb:35:0a:c7:45:d6:6e:86:28:c4: e0:65:eb:cb:48:73:b2:99:7c:6f:ee:52:69:cc:c6: b8:aa:0a:1a:88:3f:00:71:21:c0:66:35:a4:40:de: 73:da:d3:14:58:13:91:b0:c4:d2:aa:2d:2e:c8:ff: 38:d0:26:69:48:eb:38:fd:9c:7b:a5:d6:79:0e:4d: fa:08:b3:17:b2:ec:be:c0:db:5a:92:35:97:14:70: 3a:e9:df:67:be:8e:48:c1:8a:51:19:d0:28:72:3f: f6:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:9D:87:5F:42:8C:81:D4:40:03:4B:95:42:A9:84:7D:B2:33:43:B1 X509v3 Authority Key Identifier: keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:40:2d:82:14:a8:ba:8f:8a:3c:05:71:f0:8e:72:aa:ce:55: bd:78:ca:58:b5:ce:e7:c5:1f:55:fd:ec:32:92:db:46:7e:f9: 83:2e:a5:05:60:10:c1:31:56:e6:e3:3e:5a:b2:2f:c9:66:21: e3:60:b5:48:96:c6:56:df:9e:ce:13:f0:40:6a:c2:53:d1:d6: f8:7e:64:c8:aa:e6:4a:da:a8:c3:2f:b5:13:6e:49:ca:7c:79: fb:b6:89:f6:b7:ce:80:c4:1a:85:ea:be:7d:96:74:d4:5d:11: 51:52:de:5a:5e:d2:47:da:54:36:f0:8e:ff:17:2b:53:92:18: 4b:c8:ec:9a:26:57:fc:63:b3:7f:93:d9:d4:4e:48:74:bf:10: ff:86:c8:37:a1:97:a7:36:11:b0:b7:56:47:be:28:b3:db:34: a7:0d:ad:9b:58:b3:df:42:56:90:da:81:ad:ec:97:24:5a:77: e0:a7:b0:4c:0b:a9:d2:09:45:25:ef:1a:09:7e:31:0f:35:70: 57:69:c3:d8:ed:4d:54:f8:87:65:dc:c8:c9:1f:39:27:c2:3b: ba:31:dc:53:42:57:7e:44:7c:10:5a:9c:59:ac:77:e6:54:07: ab:a8:99:ef:30:48:c3:30:92:d8:37:4c:84:3c:71:7c:22:7e: 07:a2:c3:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNksrHdL4XswsyLMREdZh9PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhYmExMTcyNDcyZWE4MDI2NWQxMjk4Mjk2N2RlMGE4YjBi YzU5MDEwHhcNMjQxMTI1MTkwMDUyWhcNMjQxMTI2MTkwMDUyWjAzMTEwLwYDVQQD EygxOTlkODc1ZjQyOGM4MWQ0NDAwMzRiOTU0MmE5ODQ3ZGIyMzM0M2IxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SZLg9XIWNe+4g/RArVqmleO2XCR NLJxBf09BJmCLa2cmWjPe2cA+z4A9hDs1Leiw/jOyyk3XdRASJLMbXZlD9dPTf/+ buVRtOY+kkm2tRIv9+k1cjpvpoLkhXs28cEEmBllnqM7+cdM0jJu3fmqyV8bDzCJ +FsBPCjIomlD9oSMXITfH6+t56NglR4uuFmL5PoGwLGlWOFXZrs1CsdF1m6GKMTg ZevLSHOymXxv7lJpzMa4qgoaiD8AcSHAZjWkQN5z2tMUWBORsMTSqi0uyP840CZp SOs4/Zx7pdZ5Dk36CLMXsuy+wNtakjWXFHA66d9nvo5IwYpRGdAocj/2ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBmdh19CjIHUQANLlUKphH2yM0OxMB8GA1UdIwQY MBaAFDq6EXJHLqgCZdEpgpZ94KiwvFkBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgt NGRkMDQzNDZhYmMzLzEvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgtNGRkMDQzNDZhYmMz LzEvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd0AtghSo uo+KPAVx8I5yqs5VvXjKWLXO58UfVf3sMpLbRn75gy6lBWAQwTFW5uM+WrIvyWYh 42C1SJbGVt+ezhPwQGrCU9HW+H5kyKrmStqowy+1E25Jynx5+7aJ9rfOgMQaheq+ fZZ01F0RUVLeWl7SR9pUNvCO/xcrU5IYS8jsmiZX/GOzf5PZ1E5IdL8Q/4bIN6GX pzYRsLdWR74os9s0pw2tm1iz30JWkNqBreyXJFp34KewTAup0glFJe8aCX4xDzVw V2nD2O1NVPiHZdzIyR85J8I7ujHcU0JXfkR8EFqcWax35lQHq6iZ7zBIwzCS2DdM hDxxfCJ+B6LDyA== -----END CERTIFICATE-----Generated at Mon Nov 25 20:33:53 2024 by rpki-client on console-fra.rpki-client.org