$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft File: EmxmCzD1aSsrFuKJskkBxRj9pSA.mft (raw, json) Hash identifier: gjRU1kU44G4jisHIYJ/9ndIWm8kG4KesCcpaLP1+OOU= Subject key identifier: DC:7E:E2:9C:56:4F:3C:6F:85:9A:72:28:50:A2:83:F0:FD:30:DC:4B Authority key identifier: 12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20 Certificate issuer: /CN=126c660b30f5692b2b16e289b24901c518fda520 Certificate serial: 01935274FED15D2D867C3096A5C039EF8DB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft Manifest number: 138B Signing time: Fri 22 Nov 2024 06:00:19 +0000 Manifest this update: Fri 22 Nov 2024 06:00:19 +0000 Manifest next update: Sat 23 Nov 2024 06:00:19 +0000 Files and hashes: 1: E1oroh8wTQ_uKqUraD1dfoKIu28.roa (hash: 2a+nfNyW8UtSqSEyAiUnud2xMo3xyWFVYLXXODxYZ5Y=) 2: EmxmCzD1aSsrFuKJskkBxRj9pSA.crl (hash: IwEVG9cS5uoqoT8OaxKpy00grHMT54eRNRO3Hsg6EQc=) 3: F_aEh5fiZmwP_Ab1vB3nZAIr3qM.roa (hash: D+J48d5ngLGUEIS3LjR/DLLqOdyVovrnqOzYCvPj7mc=) 4: KrwYPYjkTBLxy_cFHXBQtyoKXik.roa (hash: aPQYqENdlMsS0aU+8yi2EjEZAegi5Lk8Fsh4BKzRL7w=) 5: LN3dUajDPEWpjGqlVDAI6FUfQ2w.roa (hash: Q+fS+M+fU8HTHJgIVJkSdY/oE08wNrtBcL1TmNJ+gqg=) 6: Os4V_uoUzWtpbQ6OzJwuKYHZMpg.roa (hash: kUyWI3HvlWziG2f/NGSGYN+snmx3ZTwrybkDoiBDgK8=) 7: VgfO7RaufVDcFVeMgpAsBrDLYcA.roa (hash: 1qORJiI0+BIP2JWeD+zNoqHEunmsEGYfGIcMKGxmzvk=) 8: c4qlsVsbd3AwmJFx-KLGTkPy1Hc.roa (hash: GWzoEvplqubkjRrg2BElSVXfmX326SRByKn887h+FRQ=) 9: fEJyU8ayQMgGM_AzcEgx18Chplo.roa (hash: 3fb/kwM1XTxTCBQLXLm9fweK1aOaql+nJiFpoftEvY4=) 10: ggs1IDloIgZ4eOP7V4Xb06S-xns.roa (hash: BUSV9fURPsRifkrcN5yJQ87/I0YqMgJm3owtiOQUuiY=) 11: otvOxfzhuh3JlMmQpDZd4yu5ot4.roa (hash: p309rhUQgKkxGVEOELudSS8osJnVhSn6eGXxbYDckbg=) 12: r9W5a75k_9JlOUI7oztKaQ0fjHc.roa (hash: EfsQLa8GhdOW295qX/xMrfGGtpTwt7q79TbE+VMGYus=) 13: x-13MQKMlYh1FKuZXBHrIxx4HmQ.roa (hash: DI59oZKoUKh4xqTw8NoIpYFMWnhJd2hWiOIVAIFOd9Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 23:17:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:52:74:fe:d1:5d:2d:86:7c:30:96:a5:c0:39:ef:8d:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=126c660b30f5692b2b16e289b24901c518fda520 Validity Not Before: Nov 22 06:00:19 2024 GMT Not After : Nov 23 06:00:19 2024 GMT Subject: CN=dc7ee29c564f3c6f859a722850a283f0fd30dc4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:27:1e:0c:39:0c:90:51:e4:3a:d1:22:28:39: 84:80:8e:66:3c:ef:f5:f0:ed:60:75:ad:77:7b:fb: bc:26:34:e6:da:1e:c4:12:0f:78:e6:c4:24:0c:9f: 2a:4d:2e:ab:d5:e9:60:af:86:b7:1c:16:24:b7:de: b5:3b:13:de:fd:e5:e3:c4:e0:ef:15:64:71:17:af: 59:b5:06:40:3b:e4:85:f2:f1:a0:0a:76:b6:97:4b: ba:a9:8d:1b:a7:67:dd:8c:aa:bd:67:ea:ff:67:ed: d5:ea:90:60:88:9a:e7:d3:94:3b:ba:5b:3b:29:b7: f7:f9:35:90:cf:89:f0:51:73:fa:03:c6:13:8d:bf: 8b:e1:47:c6:4d:e0:a7:9d:e8:ec:55:b0:c9:1a:01: 55:47:fd:48:af:db:c8:ca:a9:d0:ad:2f:e8:3d:33: e3:e3:cd:b3:94:b5:e6:73:88:fb:b6:f0:fe:7c:63: d9:e5:7f:bd:16:0b:6f:8b:90:ae:42:b2:c5:21:65: 67:70:2a:eb:9b:a2:a4:ea:e2:0b:26:59:76:3b:cd: dc:fa:16:5f:d2:92:e4:09:ff:06:9a:55:ba:96:c5: b9:34:90:8d:3f:4d:d0:f6:44:07:d2:11:d7:ad:b2: b6:e9:2c:91:e0:05:7e:fa:72:d3:34:4c:7e:90:08: 74:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:7E:E2:9C:56:4F:3C:6F:85:9A:72:28:50:A2:83:F0:FD:30:DC:4B X509v3 Authority Key Identifier: keyid:12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:9d:b8:10:a2:aa:45:58:e9:b5:a4:68:b1:b9:86:f2:32:2b: bb:ef:28:3b:8e:6c:ef:63:fd:13:8d:0c:8b:fc:6b:a6:6f:db: c3:41:11:55:be:6a:ba:47:9b:83:2b:47:7f:24:6e:a1:4a:2e: 6e:30:2d:f2:3b:e6:0e:d4:b6:a1:0b:8b:de:13:f1:a9:69:84: 13:64:f2:4d:f0:61:fa:ae:31:59:67:ea:5e:5d:58:58:90:0d: c7:35:10:9f:c3:23:6b:c1:58:ea:b4:31:e5:6d:18:2e:d9:ed: 33:39:ab:6c:51:f5:24:80:74:dd:d9:a8:89:c8:33:96:86:74: df:75:9d:30:ac:64:eb:4b:2b:65:d2:dd:f4:88:16:83:f6:51: 58:8c:0c:87:58:67:8f:0d:a3:89:be:66:4c:41:10:ef:dc:c2: 36:c4:df:a4:41:53:12:00:db:2f:17:29:a6:10:84:e5:90:3d: 21:f6:07:de:99:2e:7e:25:76:63:25:f4:7f:15:a9:2a:7f:bd: 98:bf:ad:50:ce:84:5e:43:70:ee:bb:c3:2b:0d:3c:b8:d7:fa: 44:08:b9:74:fa:6d:0e:d7:87:fc:f5:fe:f0:54:88:de:ce:70: 30:b2:5d:8f:65:09:37:da:4a:dd:ae:87:fd:6b:17:d4:4e:fb: 69:3b:9d:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNSdP7RXS2GfDCWpcA57422MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNmM2NjBiMzBmNTY5MmIyYjE2ZTI4OWIyNDkwMWM1MThm ZGE1MjAwHhcNMjQxMTIyMDYwMDE5WhcNMjQxMTIzMDYwMDE5WjAzMTEwLwYDVQQD EyhkYzdlZTI5YzU2NGYzYzZmODU5YTcyMjg1MGEyODNmMGZkMzBkYzRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyceDDkMkFHkOtEiKDmEgI5mPO/1 8O1gda13e/u8JjTm2h7EEg945sQkDJ8qTS6r1elgr4a3HBYkt961OxPe/eXjxODv FWRxF69ZtQZAO+SF8vGgCna2l0u6qY0bp2fdjKq9Z+r/Z+3V6pBgiJrn05Q7uls7 Kbf3+TWQz4nwUXP6A8YTjb+L4UfGTeCnnejsVbDJGgFVR/1Ir9vIyqnQrS/oPTPj 482zlLXmc4j7tvD+fGPZ5X+9Fgtvi5CuQrLFIWVncCrrm6Kk6uILJll2O83c+hZf 0pLkCf8GmlW6lsW5NJCNP03Q9kQH0hHXrbK26SyR4AV++nLTNEx+kAh0hwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNx+4pxWTzxvhZpyKFCig/D9MNxLMB8GA1UdIwQY MBaAFBJsZgsw9WkrKxbiibJJAcUY/aUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9kYjc4N2YtYzI3YS00ZjIzLTk5YjIt NDM4YWNiNzJmYzViLzEvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9kYjc4N2YtYzI3YS00ZjIzLTk5YjItNDM4YWNiNzJmYzVi LzEvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFp24EKKq RVjptaRosbmG8jIru+8oO45s72P9E40Mi/xrpm/bw0ERVb5qukebgytHfyRuoUou bjAt8jvmDtS2oQuL3hPxqWmEE2TyTfBh+q4xWWfqXl1YWJANxzUQn8Mja8FY6rQx 5W0YLtntMzmrbFH1JIB03dmoicgzloZ033WdMKxk60srZdLd9IgWg/ZRWIwMh1hn jw2jib5mTEEQ79zCNsTfpEFTEgDbLxcpphCE5ZA9IfYH3pkufiV2YyX0fxWpKn+9 mL+tUM6EXkNw7rvDKw08uNf6RAi5dPptDteH/PX+8FSI3s5wMLJdj2UJN9pK3a6H /WsX1E77aTudxg== -----END CERTIFICATE-----Generated at Fri Nov 22 07:03:03 2024 by rpki-client on console-fra.rpki-client.org