$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft File: MaGF0OsMp4EcWGQl3g6WDhz-ths.mft (raw, json) Hash identifier: dcwIUSK2cTVC5YS5FkqzrKC9vR+AtgIpsNLegMKKsqU= Subject key identifier: 1A:A8:5E:86:E7:E3:E5:EF:F2:C1:C1:8D:C5:51:C1:DE:88:D9:7D:FA Authority key identifier: 31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B Certificate issuer: /CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b Certificate serial: 0194BAF276C82D31AD91887B0A7BCB881541 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft Manifest number: 149B Signing time: Fri 31 Jan 2025 06:00:39 +0000 Manifest this update: Fri 31 Jan 2025 06:00:39 +0000 Manifest next update: Sat 01 Feb 2025 06:00:39 +0000 Files and hashes: 1: BEWUUb6Sb5YAERA7Rm-cdwFsmF0.roa (hash: +Qt2yDKsz2L2j/WArrE4B6qzTe0DbfXxEvpfQa5HyZw=) 2: EnWNHEKE4As2dY7z8H4f1zMv8PE.roa (hash: hirWkRxOPTdm/HJ/WnnegZ8yGMndTUx93DgHktqjC64=) 3: LlMngn95TdQ9s1lobSIfFiaxwMc.roa (hash: WeKn9zwaRRHjlRd4WIjiQWXgKdTTEMZ6BTo5nLZ3Ai4=) 4: MaGF0OsMp4EcWGQl3g6WDhz-ths.crl (hash: jSyFrNAezftTXq/vbDfxSLOFJMga0nSBvtoxJwN9PSw=) 5: O9d_gV74yYpX6Um_s3aWdDm_Ej0.roa (hash: RbexetxXBeJZCWdrT/LqIU6zAstJlnMOcoJBHKsXhoQ=) 6: SuAwx53ztZ8nH6iQDl-exiTpB9U.roa (hash: OW4UNz0fPDN3E3BkjgDIvFCnQ13CpXoOp18yw+GY/do=) 7: aQ0BCg7T0qvdq_rjilld2qmDCCA.roa (hash: FUk+EtDI/Bw1Ith6izcMbGQJ0XgwGEmYYqaLt5/+JX8=) 8: e9kzaC5aK1AvC-cHsDdx9haP07k.roa (hash: QuaA/YDvF9Gcy4o2L6hDN/avQ+2ifpi3IVCtvCyZW14=) 9: pGg5IZ4_Rh_E3JxX0-HT9TgVPxM.roa (hash: 5liIqRjQ5b6iul4uHIld/la3AWJyxn6cmBEC3D1GVaQ=) 10: s3By1xAgm0Piz-TUrYDBrs1WoXU.roa (hash: BgzNGbdXko+tn+sFUWTRIfviR0vd7FxJVj54FcWlz/E=) 11: yEAhGBhhnsGlSwmABMxYXMoVFmo.roa (hash: 4gRmJAIY5iMdHyen9IsOKFW1O1UVQrjj3rH4hihkCu4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 01 Feb 2025 06:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:ba:f2:76:c8:2d:31:ad:91:88:7b:0a:7b:cb:88:15:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b Validity Not Before: Jan 31 06:00:39 2025 GMT Not After : Feb 1 06:00:39 2025 GMT Subject: CN=1aa85e86e7e3e5eff2c1c18dc551c1de88d97dfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:50:8f:77:96:21:a3:14:f3:6f:df:07:80:f2: d2:de:d3:dd:a0:87:0d:84:1e:7c:ac:0c:e9:cb:6a: ef:75:4a:5d:93:d3:6a:f7:08:b5:3a:a9:8a:dc:ec: 7a:23:b6:f1:cb:31:d3:94:76:fb:4c:54:71:95:14: fd:8d:60:03:68:be:6e:b4:50:be:23:51:58:db:a0: 7a:85:2d:f8:a4:a7:88:5a:1d:49:85:c6:19:b5:24: e9:23:b3:60:cf:55:0d:ac:4b:83:6e:99:2a:44:d7: 66:b9:cc:6e:b2:25:2f:d8:5a:89:5d:eb:21:46:4f: d0:4a:84:a0:76:dd:7b:0c:57:20:a7:8f:bf:8a:0f: ff:94:f3:88:6b:ba:49:20:15:d4:8c:40:ef:be:a6: 9f:e0:b6:cc:61:d6:f1:c3:90:31:44:da:19:a0:d2: 06:76:24:42:7b:eb:b1:67:03:95:93:76:87:e4:04: 7a:0e:e7:d3:79:7a:ee:44:2d:e9:e7:44:9c:a0:f3: 82:55:ad:d6:6b:c1:e1:bf:22:b9:d5:8f:12:2d:5e: be:9f:4c:ba:e3:fc:98:0a:7a:84:58:d7:2a:80:d0: 2b:95:5f:b4:f8:12:a5:99:06:65:ea:8c:bc:fb:8d: bd:37:a7:b1:10:16:e2:22:41:f7:66:31:a0:dd:07: 40:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:A8:5E:86:E7:E3:E5:EF:F2:C1:C1:8D:C5:51:C1:DE:88:D9:7D:FA X509v3 Authority Key Identifier: keyid:31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:39:fd:cb:24:10:f2:34:91:ba:17:40:ec:49:a6:d8:b0:78: ae:00:16:f4:40:0b:c6:aa:5d:c7:da:bf:eb:e8:57:22:c1:66: c9:4c:39:a6:81:cb:ed:48:4b:d2:41:a9:cc:ca:3f:cf:e7:d6: db:6a:c4:a3:7c:22:69:1c:b7:c9:8e:56:76:55:65:5e:fd:1c: da:f0:02:c8:d4:32:50:2b:bb:2d:91:b5:a0:c3:8b:ee:dd:35: 33:53:df:e6:f3:69:38:45:71:49:18:6b:9c:e1:e3:2b:01:d0: a0:29:e7:e8:94:73:40:34:65:75:7c:ff:88:61:3c:6d:c7:e8: 1a:a0:c1:88:a0:d7:ed:bd:e5:16:4a:9d:4b:fd:2b:6a:05:43: ef:61:7d:93:b8:4a:29:16:07:d5:12:f3:0c:52:14:40:84:67: 5e:12:30:d2:a8:f7:e2:96:3c:83:e6:01:4f:8c:d8:db:98:45: 3c:ce:58:10:f8:a5:13:40:40:30:43:39:28:94:f3:e3:94:e1: 7f:0c:7c:c5:3a:a4:30:82:ce:fc:44:5b:19:5c:b8:32:89:fb: 38:bc:ef:fa:a6:c5:d8:e5:d9:66:63:90:4a:69:e6:0a:12:c9: 59:c5:ca:44:2c:3c:5f:61:ae:65:0b:99:f7:cb:55:82:a6:ff: f0:8f:db:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZS68nbILTGtkYh7CnvLiBVBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxYTE4NWQwZWIwY2E3ODExYzU4NjQyNWRlMGU5NjBlMWNm ZWI2MWIwHhcNMjUwMTMxMDYwMDM5WhcNMjUwMjAxMDYwMDM5WjAzMTEwLwYDVQQD EygxYWE4NWU4NmU3ZTNlNWVmZjJjMWMxOGRjNTUxYzFkZTg4ZDk3ZGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FCPd5YhoxTzb98HgPLS3tPdoIcN hB58rAzpy2rvdUpdk9Nq9wi1OqmK3Ox6I7bxyzHTlHb7TFRxlRT9jWADaL5utFC+ I1FY26B6hS34pKeIWh1JhcYZtSTpI7Ngz1UNrEuDbpkqRNdmucxusiUv2FqJXesh Rk/QSoSgdt17DFcgp4+/ig//lPOIa7pJIBXUjEDvvqaf4LbMYdbxw5AxRNoZoNIG diRCe+uxZwOVk3aH5AR6DufTeXruRC3p50ScoPOCVa3Wa8HhvyK51Y8SLV6+n0y6 4/yYCnqEWNcqgNArlV+0+BKlmQZl6oy8+429N6exEBbiIkH3ZjGg3QdANwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBqoXobn4+Xv8sHBjcVRwd6I2X36MB8GA1UdIwQY MBaAFDGhhdDrDKeBHFhkJd4Olg4c/rYbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWFHRjBPc01wNEVjV0dRbDNnNldEaHotdGhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8wODFjNmUtMWQ2NS00Y2NkLTk2ZjUt MWRjYzg2YzExZTc0LzEvTWFHRjBPc01wNEVjV0dRbDNnNldEaHotdGhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny8wODFjNmUtMWQ2NS00Y2NkLTk2ZjUtMWRjYzg2YzExZTc0 LzEvTWFHRjBPc01wNEVjV0dRbDNnNldEaHotdGhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAojn9yyQQ 8jSRuhdA7Emm2LB4rgAW9EALxqpdx9q/6+hXIsFmyUw5poHL7UhL0kGpzMo/z+fW 22rEo3wiaRy3yY5WdlVlXv0c2vACyNQyUCu7LZG1oMOL7t01M1Pf5vNpOEVxSRhr nOHjKwHQoCnn6JRzQDRldXz/iGE8bcfoGqDBiKDX7b3lFkqdS/0ragVD72F9k7hK KRYH1RLzDFIUQIRnXhIw0qj34pY8g+YBT4zY25hFPM5YEPilE0BAMEM5KJTz45Th fwx8xTqkMILO/ERbGVy4Mon7OLzv+qbF2OXZZmOQSmnmChLJWcXKRCw8X2GuZQuZ 98tVgqb/8I/bMQ== -----END CERTIFICATE-----Generated at Fri Jan 31 15:35:38 2025 by rpki-client on console-fra.rpki-client.org