$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft File: xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft (raw, json) Hash identifier: 6hi64oL7aq89e6vpGNDa3VViQplpGruJoP8yVG80Apw= Subject key identifier: 37:B4:63:19:7D:11:6F:B1:EF:AC:3D:D7:6D:81:BC:CA:5E:DF:30:5A Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 0193523E0A031904952B67E10AE9DE06AAAA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft Manifest number: B7 Signing time: Fri 22 Nov 2024 05:00:17 +0000 Manifest this update: Fri 22 Nov 2024 05:00:17 +0000 Manifest next update: Sat 23 Nov 2024 05:00:17 +0000 Files and hashes: 1: 014GfgLnO9NLJMlz1ji33p7R_mE.roa (hash: yREDgOB+2t7MJ1C0ylSpAXbJSfFhGmuVmZ9g2tLRmzw=) 2: 0IfY02AVn_EuempYma3WJvc3uZY.roa (hash: Hc5KV1bMf1MNLTaRKiCMJLvty2F8DBpOGva19UeyhHU=) 3: 7SEfwsM4N9JJyr5ZUGvCDQ5RgPk.roa (hash: /xCI9oABkIF+xrNpbvysTqH9xbjzmJLuH+tMaTHJ9dw=) 4: 8hOnP6l-xiOgsDmUQK26U9fB7Go.roa (hash: gOL3OE7HVEikD7j6WgtjTPVj9qfNnfSOk9JXiYTiTRI=) 5: HnqDySvvBSULvWz1P8vNATKWW2U.roa (hash: tLHhlghQ1PChoSDbWk7/6sH0RRyruskzALo5IUPwCxk=) 6: IaqBcGKvqdSJroNH-p_31c9--n0.roa (hash: Y84NThEG5BfP+2o/L33zvWldTqI56NjsDY201rHKrig=) 7: LTYr6F04xZxREePPAEg_yrOlzkc.roa (hash: xpB4KauBhshSbX/K5dXFtXez6zmRhAU8x7G5oAKrjeQ=) 8: MoiwtuvjIOONlUuIUGR_GTO9Z58.roa (hash: N0lykUljgftcjHPcEpThkZWtnLdUBvpM1mPMhiYnub4=) 9: Q9ftJkz4TKa4zEi-g5xwaIXjWoA.roa (hash: Ud8LDY9LZbwlMEvNIyrNltgmG7c3N/yd9C4bShgNEec=) 10: RTkwX3a8B4c1BYkhm5Z5BdZpPYA.roa (hash: 4C5fU3ntBjmzrPXv+BLWY7U9J7T4/22mtF9+CUclopw=) 11: Tjje5wdq7fyp3fHpjJjp0Yac3HE.roa (hash: h/oI6965V3DTZphErECUZqcMw2y6G29nuBqf/+Ly7EY=) 12: XEUqePXW54pg6klharHDE3asqlA.roa (hash: YC1S+8sOXm3OCbVpeN0o/5/XG5VxFU6uuTvGkqgqN5I=) 13: bQFVw4GyfmJm69VfnANbupdecp8.roa (hash: qZhEi5YgGc0QIF1qTVkYeDTPkBGXp82lvJz6wQrYVLo=) 14: da7oAMhGukjewt4Zpz2rkFxbMGo.roa (hash: EK6QZlU01aXxJRgJXPqgLpHX3bYC3P/oE0oBEPkTMHY=) 15: dh7M4jFl6yNCRF4YMFcNSoQ6hwI.roa (hash: LXgD4oj+DfSvth6MbDiig1vHq7e4lyhhCpoqBLX3Gn0=) 16: f2UBKOitvJ6P_rFmjW4354SQvaA.roa (hash: oNbm0aB9UvRzHjeAMNd5DhjPerlRMhPWUypdvhPKdlM=) 17: foUnRQGRFOBBdoXTXNHha51LdHg.roa (hash: D7atninC5neEy5jdyN3SxhSozvFEJCKdS5CQwRps4eE=) 18: i1r-rFuJclXyxkx9OsqrdYmWNI8.roa (hash: /44qwdLA8Dr4kx7E0zbSwkK2F/6n3Wox8aDd5OPPLOE=) 19: nKHGLXgIvA0QBRCDuUkg559IK-Y.roa (hash: +25eVKgTl0B0yhNGbpLXl29B4Y8/EJROOldVnFU3yco=) 20: nPTe_raaheiUkvUbS_S3Jqlz4w0.roa (hash: FbDydH+KWQ77YZyvG/+MIAN9wsnU929v2r16PA3XJog=) 21: nkbcL1G-EIAp8FQ9Rwvia5bqofU.roa (hash: 3O+jiCkNOEFJZd+KXlwyKzidrSyRmUq51d7nvux0UdU=) 22: pOr7fgwELpz05qM8mzaZ1FzpdRo.roa (hash: cHr5tLO31T3cZZvjwODQzyuLlSoqw5gZZt54am7igMg=) 23: siuasY9ElyvBkqYi7vIKM0ai5KY.roa (hash: oLHMmYrxF4os701pv+GMexrxmxPNZKNvvFMzJn3P8Hs=) 24: vHsuzpBtSPnoAvmxYYr0WOweq_M.roa (hash: d1+gnQ0Xlfur6cy1zn4BHRKv6VpITNLIGEeECYWqHjQ=) 25: xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl (hash: P0DU9D9oATWuCQLRY0jSe3sRTCwysDrqUH+ChS7x5VY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 23:17:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:52:3e:0a:03:19:04:95:2b:67:e1:0a:e9:de:06:aa:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Nov 22 05:00:17 2024 GMT Not After : Nov 23 05:00:17 2024 GMT Subject: CN=37b463197d116fb1efac3dd76d81bcca5edf305a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:76:47:4a:ba:b6:d3:26:1d:21:c7:e3:0b:62: 74:20:57:09:e6:2f:89:fc:09:1a:70:8b:b1:d6:e5: 61:e1:fd:9f:3c:82:55:c9:0a:6b:4f:38:55:91:d2: 2c:bf:45:89:9b:3c:b4:24:0a:a4:35:c2:e9:1d:0b: 62:f3:f4:4e:5d:92:d9:ef:69:8d:d3:5b:f2:f5:51: 45:48:f3:51:10:bd:0a:24:87:1c:3e:4c:62:48:ed: 7c:80:ef:29:8a:46:62:64:ab:ad:22:6d:43:d9:e8: 8d:d3:a2:da:8c:35:a4:2f:d0:ba:1d:7f:8e:0c:66: 05:7e:21:4b:e4:73:fc:9a:ea:3a:f7:dc:9c:9d:ea: 09:49:e6:61:32:a9:62:40:01:a8:81:cf:1f:ed:a4: 29:42:75:c3:1d:ce:a2:f6:f4:07:4b:3e:4f:f0:89: 21:f0:ed:75:1e:95:14:06:f3:40:8e:28:bb:a4:90: 10:3b:14:88:28:bc:5b:93:f4:c5:6e:7a:b7:aa:e9: 64:90:1c:98:d3:26:d9:2b:4b:1c:e9:96:3f:b6:b2: 9a:77:46:91:b6:b0:2e:d8:c1:1c:7a:2b:90:17:f0: f7:fc:53:00:a2:87:88:bf:ee:a5:4d:02:91:6c:04: dd:75:2e:b6:f4:75:33:83:57:d6:f8:24:65:47:e4: b7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:B4:63:19:7D:11:6F:B1:EF:AC:3D:D7:6D:81:BC:CA:5E:DF:30:5A X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:b4:c0:f9:8c:7b:bd:2e:e2:e0:78:1e:c0:b4:c3:c3:54:78: bf:66:4b:81:23:7c:b9:1b:8c:64:69:bc:64:e7:1d:66:85:32: 97:06:e8:ce:e8:ad:ac:63:f3:a6:a0:e8:1f:0f:b1:f2:01:04: 1d:4e:32:df:6e:dd:3c:fc:c4:8d:c5:e1:3f:74:4d:83:fd:c5: 40:9e:d2:55:58:dc:0e:a2:81:3b:6b:e4:4d:18:42:63:88:cc: 77:c9:ac:60:e0:0c:64:8a:28:f2:e3:30:6f:99:b9:87:d4:e0: 5b:59:5a:a8:21:89:c6:96:2c:d5:65:4b:4e:56:8e:ec:0f:54: 76:84:14:b9:e9:e7:67:ef:c7:7c:f0:91:29:75:08:49:15:24: 9b:72:48:d6:29:99:b7:d4:8b:0a:3f:0f:82:16:ce:5e:48:b7: 42:d4:43:a1:cc:19:2f:42:75:11:78:7c:75:78:4a:c2:4a:0e: 77:3d:a3:3a:c1:61:fa:f0:62:8e:83:08:32:ec:b6:21:4a:f5: ea:c7:9b:35:6b:95:cf:16:15:79:bb:b3:84:7d:ee:28:ab:f2: a3:17:2e:46:a2:62:55:37:9a:da:a0:31:a1:d5:44:02:05:64: be:84:6e:f4:1c:c3:55:f6:55:7e:ea:e6:2f:85:aa:d0:38:4b: e9:54:2a:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNSPgoDGQSVK2fhCuneBqqqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjQxMTIyMDUwMDE3WhcNMjQxMTIzMDUwMDE3WjAzMTEwLwYDVQQD EygzN2I0NjMxOTdkMTE2ZmIxZWZhYzNkZDc2ZDgxYmNjYTVlZGYzMDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHZHSrq20yYdIcfjC2J0IFcJ5i+J /AkacIux1uVh4f2fPIJVyQprTzhVkdIsv0WJmzy0JAqkNcLpHQti8/ROXZLZ72mN 01vy9VFFSPNREL0KJIccPkxiSO18gO8pikZiZKutIm1D2eiN06LajDWkL9C6HX+O DGYFfiFL5HP8muo699ycneoJSeZhMqliQAGogc8f7aQpQnXDHc6i9vQHSz5P8Ikh 8O11HpUUBvNAjii7pJAQOxSIKLxbk/TFbnq3qulkkByY0ybZK0sc6ZY/trKad0aR trAu2MEceiuQF/D3/FMAooeIv+6lTQKRbATddS629HUzg1fW+CRlR+S3lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDe0Yxl9EW+x76w9122BvMpe3zBaMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABrTA+Yx7 vS7i4HgewLTDw1R4v2ZLgSN8uRuMZGm8ZOcdZoUylwbozuitrGPzpqDoHw+x8gEE HU4y327dPPzEjcXhP3RNg/3FQJ7SVVjcDqKBO2vkTRhCY4jMd8msYOAMZIoo8uMw b5m5h9TgW1laqCGJxpYs1WVLTlaO7A9UdoQUuennZ+/HfPCRKXUISRUkm3JI1imZ t9SLCj8PghbOXki3QtRDocwZL0J1EXh8dXhKwkoOdz2jOsFh+vBijoMIMuy2IUr1 6sebNWuVzxYVebuzhH3uKKvyoxcuRqJiVTea2qAxodVEAgVkvoRu9BzDVfZVfurm L4Wq0DhL6VQqQg== -----END CERTIFICATE-----Generated at Fri Nov 22 05:52:19 2024 by rpki-client on console-fra.rpki-client.org