$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft File: h3itgWjgnPktTgSYJX-OnOq_BpI.mft (raw, json) Hash identifier: L0Sh+0G+WY5C1epvb2RWQ8GRvAxypXly/H/rjLpTDjc= Subject key identifier: EB:A2:0B:34:B0:40:43:39:C2:C6:4B:D4:5A:8C:59:8F:B9:79:76:16 Authority key identifier: 87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92 Certificate issuer: /CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692 Certificate serial: 0193535104EA8194B12F99F875952835B47F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft Manifest number: 138B Signing time: Fri 22 Nov 2024 10:00:38 +0000 Manifest this update: Fri 22 Nov 2024 10:00:38 +0000 Manifest next update: Sat 23 Nov 2024 10:00:38 +0000 Files and hashes: 1: 68TqYumBsQA8Uy6X5kRbS4habow.roa (hash: /ZpMbVcL+jLEn4INfgnRaWcIrxwjscppon23ropEPSc=) 2: Bb3nt7ZJNgJ_IsOSfTRi94xJdIU.roa (hash: jEpLcItVm5XqrWN7XwZN1w4tCUgb1DJOWzYJIRksl8k=) 3: H-X09CodXgkj0TJFcQva6NLMu3w.roa (hash: xnVRTNWBIAP7eAQuSjN4KhfPwh88JPGs2UAcJg0YNBQ=) 4: HNP10vhJclq2K6qcedBS1eBvynE.roa (hash: d3/JZTqJKY/iu7uaoMdyOb+tS13BUujBggEHEtTw8GE=) 5: IZOqvqGgkILXyyN38uq5sRZpPkk.roa (hash: 9F9VdDjxB3slRRS6nfEgc8tanD5yKRhhgJRCCng9SCc=) 6: PdTq_d240Q4b9VyA91GZrXLlEcs.roa (hash: 68SijHWZs8juRq8uxp9wk3VCWe/NX12WeC2JWmndbB8=) 7: VJexUrP8FbwmSUAAdgR4SU6dJFY.roa (hash: lojiSc2AvnfcAjBPHikspAEM4H6TszWVLCvTC+n5zxg=) 8: WLyH9i-aCykquFeLV9Bfhc3Uoug.roa (hash: s7FIvU5hMF7xd0A2QHbPvElZPSVsNnWFYMwlaEtP+j0=) 9: bM_2w6t4ocKL1Seh6Kkmyv76huY.roa (hash: UhMOxCNIOGsgmP4jZgL8u/YHQUobEthyadpcfOHEcA4=) 10: bY2LMCOGZPnhCGdghvzJ2JPXiDM.roa (hash: HDSMIj/hqKdprhwmTYnJDQfTTm+f7WIFEpYQMO9RzVQ=) 11: fKOyqbm-T9wYBANDUaPmB2msTZc.roa (hash: Yz6pfCZCRpDcm32qIgzR/D1F8qAHAu98gQqoa8Cm7DQ=) 12: h3itgWjgnPktTgSYJX-OnOq_BpI.crl (hash: aZuMdUsuYsqGwpO/zwpo+CRAcs22NO/LcXg6Opuho5c=) 13: leMwNsa5zZpIondmUiWJbd9kobU.roa (hash: SM0Ei2Vh6GLxOLCe0TF7D7/4ICthojIJ+P88z5EJY8M=) 14: qo8hH3umFsFsrmcWHf9AXJqYEd0.roa (hash: FkLjOpjqay7QlxDFP+5MXgv4ECaV9kzUHCNWISKGRqQ=) 15: zGZOqe9cw3qHmOid4N0z-nqdKsQ.roa (hash: rbe1Go0pIWF+3r4+XRxs+jyz9Yy0G75YzXYIf4PeUMw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 03:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:53:51:04:ea:81:94:b1:2f:99:f8:75:95:28:35:b4:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692 Validity Not Before: Nov 22 10:00:38 2024 GMT Not After : Nov 23 10:00:38 2024 GMT Subject: CN=eba20b34b0404339c2c64bd45a8c598fb9797616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f2:35:8b:ab:e2:3c:e3:c7:1f:2e:42:83:94: 77:ec:1c:18:48:61:35:cc:fe:22:aa:59:17:fa:75: 2a:4f:73:e6:81:19:fc:c0:8b:c9:6e:a3:c6:4a:22: d8:16:46:69:e9:7c:84:c1:1d:53:6c:34:b5:9c:79: e0:4d:11:9d:4b:2f:6b:13:49:b0:b6:a6:3a:1d:29: 8a:64:0f:db:e3:06:46:90:28:e9:1f:ab:11:8e:52: 40:3f:1c:af:5d:4a:28:c7:f5:48:11:f7:5c:54:9a: ea:4d:3b:a1:72:78:64:83:89:d0:87:03:2a:0c:f7: 38:4b:ab:2b:3b:d3:6f:c2:e8:11:19:b5:a9:88:82: 47:c3:8a:fc:d0:02:aa:e4:2f:f5:09:3c:7e:35:f0: 2d:5b:93:9f:80:b6:50:a2:0e:d8:dc:fe:7b:e6:6b: 47:6f:8d:be:71:53:d4:c6:73:ec:7f:fa:2f:9c:c1: d4:30:49:74:5a:81:67:d5:98:61:15:ab:80:59:49: 60:aa:1e:13:2f:3c:21:88:06:c2:43:88:e6:c0:5a: 70:8f:43:34:3e:9c:f5:55:6a:92:52:69:1f:c9:66: 6e:fc:ca:e8:b2:c7:0c:f1:a1:c4:80:b8:e0:0c:3d: 65:56:ab:bb:b4:cd:bf:2a:dd:4f:f4:27:5f:6a:4b: 00:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:A2:0B:34:B0:40:43:39:C2:C6:4B:D4:5A:8C:59:8F:B9:79:76:16 X509v3 Authority Key Identifier: keyid:87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:5c:c8:65:f4:62:a4:74:ce:31:47:9e:05:78:a6:82:54:26: fe:96:77:8d:a9:2f:07:86:fa:15:42:0d:a2:4a:09:42:0f:6d: bf:79:eb:25:e0:f6:5b:cd:4f:37:b7:d7:81:7b:43:04:c4:8c: bc:15:96:d0:dc:fe:38:4d:ae:cc:5a:9d:de:44:18:ac:50:8c: 00:d5:0a:0c:f4:f8:c4:1a:19:c1:69:23:a3:9b:a0:b0:3c:30: 4a:b5:98:1c:01:48:6d:19:56:64:2b:6e:a0:1f:a4:2b:c4:22: 4b:72:ef:3c:e2:44:bd:f5:0f:1b:ab:10:b2:3e:fd:76:61:15: d7:6b:a7:e4:03:19:5d:10:a9:e7:de:a7:1f:f4:3d:19:bb:53: 15:ba:ce:4e:99:bb:75:ee:df:e9:09:92:a6:43:cc:97:51:00: ff:00:9c:97:33:99:84:4e:16:a3:77:0d:ee:9b:aa:f2:df:fe: af:a2:1c:7b:a9:39:c1:d3:37:e9:8b:67:1c:0e:66:f9:c7:b0: 3e:7e:e9:35:57:3f:61:5a:87:dc:2d:a6:fb:5b:a0:9f:7d:33: 36:1e:e2:b5:00:5d:af:75:a8:66:ad:74:af:b5:e5:07:dd:95: bb:6f:74:4c:fa:43:df:30:c5:dc:99:05:5d:d5:f5:e5:74:32: 45:74:55:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNTUQTqgZSxL5n4dZUoNbR/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NzhhZDgxNjhlMDljZjkyZDRlMDQ5ODI1N2Y4ZTljZWFi ZjA2OTIwHhcNMjQxMTIyMTAwMDM4WhcNMjQxMTIzMTAwMDM4WjAzMTEwLwYDVQQD EyhlYmEyMGIzNGIwNDA0MzM5YzJjNjRiZDQ1YThjNTk4ZmI5Nzk3NjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPI1i6viPOPHHy5Cg5R37BwYSGE1 zP4iqlkX+nUqT3PmgRn8wIvJbqPGSiLYFkZp6XyEwR1TbDS1nHngTRGdSy9rE0mw tqY6HSmKZA/b4wZGkCjpH6sRjlJAPxyvXUoox/VIEfdcVJrqTTuhcnhkg4nQhwMq DPc4S6srO9NvwugRGbWpiIJHw4r80AKq5C/1CTx+NfAtW5OfgLZQog7Y3P575mtH b42+cVPUxnPsf/ovnMHUMEl0WoFn1ZhhFauAWUlgqh4TLzwhiAbCQ4jmwFpwj0M0 Ppz1VWqSUmkfyWZu/MrosscM8aHEgLjgDD1lVqu7tM2/Kt1P9CdfaksAJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOuiCzSwQEM5wsZL1FqMWY+5eXYWMB8GA1UdIwQY MBaAFId4rYFo4Jz5LU4EmCV/jpzqvwaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mMDdmOGQtOWRmMC00OWM2LWIyZjAt YWE5ZDY5MTgxMWU3LzEvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9mMDdmOGQtOWRmMC00OWM2LWIyZjAtYWE5ZDY5MTgxMWU3 LzEvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZlzIZfRi pHTOMUeeBXimglQm/pZ3jakvB4b6FUINokoJQg9tv3nrJeD2W81PN7fXgXtDBMSM vBWW0Nz+OE2uzFqd3kQYrFCMANUKDPT4xBoZwWkjo5ugsDwwSrWYHAFIbRlWZCtu oB+kK8QiS3LvPOJEvfUPG6sQsj79dmEV12un5AMZXRCp596nH/Q9GbtTFbrOTpm7 de7f6QmSpkPMl1EA/wCclzOZhE4Wo3cN7puq8t/+r6Ice6k5wdM36YtnHA5m+cew Pn7pNVc/YVqH3C2m+1ugn30zNh7itQBdr3WoZq10r7XlB92Vu290TPpD3zDF3JkF XdX15XQyRXRVag== -----END CERTIFICATE-----Generated at Fri Nov 22 11:57:23 2024 by rpki-client on console-fra.rpki-client.org