$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft File: nFQvXfPBrLhX_VDusBbu0HOF_4w.mft (raw, json) Hash identifier: rES4C7tnFyW31pVXWLfK1ZMbx2CjCJLH/3+3hf2kAF8= Subject key identifier: 80:7A:30:0A:D0:B9:95:D8:7E:6B:D0:CE:E7:6F:3F:C4:B0:37:26:9A Authority key identifier: 9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C Certificate issuer: /CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c Certificate serial: 01935651C986AF104CB84381DDB395602D8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft Manifest number: 0784 Signing time: Sat 23 Nov 2024 00:00:20 +0000 Manifest this update: Sat 23 Nov 2024 00:00:20 +0000 Manifest next update: Sun 24 Nov 2024 00:00:20 +0000 Files and hashes: 1: 4BwCUuKMNHA8_c11opY1y5DHRms.roa (hash: ORxZ2V8wJnqnpNLrKaXtL4EZ44tJFOaDGenY+FNx7SA=) 2: 4VC1NHlhgHd5DpZ2mSCEN3qz_1M.roa (hash: odXzX8/rxsLm7SAqPx9ucfP+pMsvnN8sWTNTjlCoS+o=) 3: 7bX5qjOOa-N6lqtlVE2U3BDpZlU.roa (hash: 8B/O/8m71cF9aZyXDkkPVIOMqx72K0CuLmX7rQIYG8I=) 4: 9FM8Dxsu-DAs5PrINAaJpT3aHoU.roa (hash: EyDSZdPRe/uzwW1Ie5PyH1NdsnHRJJ/Mc7yBre9PDOc=) 5: HiW_pg5Vjx5YVPRzdcrsIseEg6U.roa (hash: tdeBVY3OXoRcuQOJezS0k4iNwtNKPjny6jzLVYerWrY=) 6: JYGBw210xUUzzztNJcZfU1PR4cc.roa (hash: SpBwM82o0JFP1YGoJbRAHij4QP5G4kbkTK4E3Kks6XM=) 7: TQ9IKdKglp7c6npPHqXVI3mwNUw.roa (hash: ExBw/OPrqngAXptHcokOTqQG2hMWHuh/c3vbL8cp5Sw=) 8: VbPK8DNYHFpswy4gFVWt4iECpO8.roa (hash: wugJs231BdSeZrhstp+dcfNqSz3p/SJduwHIkkDvsPQ=) 9: Wdr_SkFuLN4GBL4ee-gy-Y4jZVc.roa (hash: w/wPinp8Kvv7g5wlrw0ISmup7PyxK6QypVHK8dQ3JcU=) 10: bwLcB4QMwEb0Ra37b6n8hFIn1Ss.roa (hash: kKDz11tcuGZCiEbaZCx8KbnMj/9yntCddovOspalB8w=) 11: fPMOD50p7f8VOuNLZG-FDXHThec.roa (hash: 8z3cuA7EtBLaTAhgxoKw2t2+AAHUPP6yvVAECUTimeE=) 12: jrvYIgePqRYuppLQY17_MEDgICQ.roa (hash: 4adPV6KNbAgofQQpNqb8oI5UkSieXcON5O56zj+hbjY=) 13: lvMeUxwjBWNwdWb6qADIHGHulGM.roa (hash: +bJT2RUUm/RKHucZk1Lk/oUQu6PlCQCIBC36z8qezgs=) 14: nFQvXfPBrLhX_VDusBbu0HOF_4w.crl (hash: 8q8BqnjsdcjTKKZ5WjwKV5260p7/82/ErkiUPQ0hXxE=) 15: nlRNapCXU-uiiGyi5VN4b74s2Bc.roa (hash: 4JCXFlthYhp5yFOvcYg+IIjx+EX5pryW30R4qEzjdmU=) 16: xcIgnX71Hpq2h1AwWUjtx8Ka1jM.roa (hash: eNvg6hz5kb2zoF4ZbDg56AH7WgMSmDlIaRqL903h+4c=) 17: yxWxoZ9MX8ZoUyhLS8fsmCsStv0.roa (hash: bD98P+c7QHCtWnLECPPs5qhRhAWvpIV1VQNdW0PTazA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 21:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:56:51:c9:86:af:10:4c:b8:43:81:dd:b3:95:60:2d:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c Validity Not Before: Nov 23 00:00:20 2024 GMT Not After : Nov 24 00:00:20 2024 GMT Subject: CN=807a300ad0b995d87e6bd0cee76f3fc4b037269a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ba:36:e1:0c:ee:3c:a2:6c:88:12:eb:6e:86: 3b:db:77:0e:dd:7e:d4:e8:b4:6f:44:9a:e4:f3:b4: 35:fd:1a:7d:65:17:82:90:5e:9d:22:cd:2c:65:60: 00:75:94:c4:2e:5d:ed:ef:41:fe:19:78:f2:b5:78: a7:b5:f0:91:27:75:97:f6:2f:bb:7c:f1:b5:e4:9b: db:8d:2f:17:80:4a:e3:c9:ef:a2:a2:24:0d:e0:e3: 1b:14:fc:c0:5f:bc:4f:a7:f0:cf:a4:be:57:ec:b1: 54:0b:df:1b:0f:5f:f4:cd:a2:c9:d1:d1:a0:dd:95: c9:45:43:b3:ae:8c:13:a7:e4:5f:d5:c5:f0:8d:53: f9:fc:f0:b0:5a:94:1a:e8:5b:45:a1:1e:d9:5f:2d: e0:1b:c2:d5:56:51:3a:0f:88:9f:39:e5:42:4c:51: e9:9f:13:8a:80:db:0e:6d:7f:fc:02:43:95:2f:50: 21:ac:57:59:75:b4:89:e9:74:fd:1d:36:0a:4e:17: 65:9a:b1:d0:dc:9f:da:0b:48:61:71:dd:a4:f4:df: b0:82:50:54:ea:4b:66:5e:20:0f:ea:4a:6a:5a:71: 0b:91:24:b8:9f:c6:d4:31:b8:19:b8:85:e7:3c:43: e1:fa:eb:20:da:d1:b7:57:d3:7a:d4:0e:04:13:96: d9:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:7A:30:0A:D0:B9:95:D8:7E:6B:D0:CE:E7:6F:3F:C4:B0:37:26:9A X509v3 Authority Key Identifier: keyid:9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:43:63:d9:70:cf:16:ba:97:39:73:da:63:9f:96:1f:c6:be: 95:84:5f:9a:1b:5b:01:ef:87:7a:15:a0:f3:ba:77:ff:7b:b0: 21:fb:30:76:12:f2:e8:48:10:05:76:fc:b6:4d:4d:27:96:09: 6f:38:a9:27:47:44:86:db:51:87:59:91:f5:43:75:96:a1:b6: ac:70:29:31:67:ba:85:8f:07:7c:27:4d:67:56:c9:5d:df:2e: cf:8b:e2:7c:dd:8a:52:93:2a:63:e2:f3:80:47:db:22:61:0e: 55:af:72:af:c0:36:9e:dd:67:e8:ca:d8:7a:76:58:c7:75:dc: cb:cc:33:15:13:ef:5a:c3:d6:44:5a:89:ec:32:b5:ab:e2:6d: 15:1b:32:1f:0b:0c:6b:f7:69:eb:00:9f:80:e6:ca:26:ba:e5: d9:eb:05:c3:3e:4a:44:3d:8f:7a:5f:e4:19:99:17:2e:39:e5: c8:26:11:56:1d:cb:77:9d:88:8c:09:2b:a5:5f:cc:7f:08:ed: 82:ae:11:ce:fb:b4:5e:1e:d9:a6:80:2b:bf:f8:1c:f3:92:20: e0:36:73:6a:27:19:5e:59:4d:af:91:3c:2f:dd:76:e3:e3:b9: e8:e5:8e:26:c6:5a:93:93:0b:50:e0:2d:4a:03:9b:34:66:28: cb:85:ef:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNWUcmGrxBMuEOB3bOVYC2KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNTQyZjVkZjNjMWFjYjg1N2ZkNTBlZWIwMTZlZWQwNzM4 NWZmOGMwHhcNMjQxMTIzMDAwMDIwWhcNMjQxMTI0MDAwMDIwWjAzMTEwLwYDVQQD Eyg4MDdhMzAwYWQwYjk5NWQ4N2U2YmQwY2VlNzZmM2ZjNGIwMzcyNjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLo24QzuPKJsiBLrboY723cO3X7U 6LRvRJrk87Q1/Rp9ZReCkF6dIs0sZWAAdZTELl3t70H+GXjytXintfCRJ3WX9i+7 fPG15JvbjS8XgErjye+ioiQN4OMbFPzAX7xPp/DPpL5X7LFUC98bD1/0zaLJ0dGg 3ZXJRUOzrowTp+Rf1cXwjVP5/PCwWpQa6FtFoR7ZXy3gG8LVVlE6D4ifOeVCTFHp nxOKgNsObX/8AkOVL1AhrFdZdbSJ6XT9HTYKThdlmrHQ3J/aC0hhcd2k9N+wglBU 6ktmXiAP6kpqWnELkSS4n8bUMbgZuIXnPEPh+usg2tG3V9N61A4EE5bZ5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIB6MArQuZXYfmvQzudvP8SwNyaaMB8GA1UdIwQY MBaAFJxUL13zway4V/1Q7rAW7tBzhf+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mYjc5MWItODAxMy00NThhLTlhMWUt MjVkYmY0MzgwNGM1LzEvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9mYjc5MWItODAxMy00NThhLTlhMWUtMjVkYmY0MzgwNGM1 LzEvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD0Nj2XDP FrqXOXPaY5+WH8a+lYRfmhtbAe+HehWg87p3/3uwIfswdhLy6EgQBXb8tk1NJ5YJ bzipJ0dEhttRh1mR9UN1lqG2rHApMWe6hY8HfCdNZ1bJXd8uz4vifN2KUpMqY+Lz gEfbImEOVa9yr8A2nt1n6MrYenZYx3Xcy8wzFRPvWsPWRFqJ7DK1q+JtFRsyHwsM a/dp6wCfgObKJrrl2esFwz5KRD2Pel/kGZkXLjnlyCYRVh3Ld52IjAkrpV/Mfwjt gq4Rzvu0Xh7ZpoArv/gc85Ig4DZzaicZXllNr5E8L9124+O56OWOJsZak5MLUOAt SgObNGYoy4XvPw== -----END CERTIFICATE-----Generated at Sat Nov 23 02:10:07 2024 by rpki-client on console-ams.rpki-client.org