$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft File: ayM9dVCLToXMz0Q0mny3AxmNHSY.mft (raw, json) Hash identifier: ZzcgRWAxDXopwH2j+CfVavYU/oqRXMPwTGj0AnJ0Dao= Subject key identifier: 97:6E:DB:00:6A:59:CD:8E:F2:9F:CF:73:FD:04:02:DA:E9:36:17:E4 Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26 Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26 Certificate serial: 019350F47D89AD3E6C137A9FFDD1D7596CAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft Manifest number: 10C4 Signing time: Thu 21 Nov 2024 23:00:20 +0000 Manifest this update: Thu 21 Nov 2024 23:00:20 +0000 Manifest next update: Fri 22 Nov 2024 23:00:20 +0000 Files and hashes: 1: 1FKMz9AvG63mAuIvkE7qpDnegiU.roa (hash: vWe6ifWzwyUsWhZf6g0aiRsEpN97G7LCHVTXXP4Sf/w=) 2: 82AaFMBhg37Hc4Xk81JKohC1ONo.roa (hash: 71kWXVQuX7SI2uHnRJkSo4Yd47McmR5VwcwqR7m4lrw=) 3: 9FioU1a5I3WRLtaLrJZfAny4OpE.roa (hash: P3TmMQyy64xmu+F7AcgbgpamUtqZrx7cNBpwqQZrJI8=) 4: EAmBdiXx9Mrk6agGnAxAYd5IPxU.roa (hash: 3Bo3CDbAmUzUvqTHgwBvsr8SP7ULvO8vmKKT0cBaF3g=) 5: GdcGiC9cGsttiXPLTJXRuRsafS4.roa (hash: jX6hL3eYspX3B13+r321DXWWdI4PARGGEqjma/tuO3s=) 6: H_M3c8k3BTOHZ2xJjxadP77wVFM.roa (hash: NUMShWGiVB726RBW3qC/63RkLg4jOIESe8fZYNp4DdQ=) 7: T1POvqxZjrhkctwxQC1bSBJl6-k.roa (hash: FLWQ12R2565JfGUBAThHtcRd1IN3C3HGuE4ejo223Wg=) 8: _CBI-xUph-EV2AVx8j6qNT6F6cY.roa (hash: eGGoAm6FxxAsHXaz1GYQBlqYvUDtIyHKVdt98DpdZXY=) 9: ayM9dVCLToXMz0Q0mny3AxmNHSY.crl (hash: ZDFXCrACQuqan5KIk/nhvkUZ21tp6JPxOyaxqp9lWMg=) 10: c-qz21WLjIgnp6jMw2CwZxJKMxM.roa (hash: +p5fsFATD06jL/hc+bHYOLiqBbdUOYXnsU50LImMvSw=) 11: cyI0rvF-ExGYocN9q1HkP5hwucY.roa (hash: 2yMXYpJBZHeHXcGEq0gBJa2LVNW/Ifup+xGmwNDtbpI=) 12: e82ZVuhDr-JCFKgIkHBvc-DcI0o.roa (hash: Tx7fBosWkL3qnMhGmYB08/u3KvJ816tO1zftE/Yh3G0=) 13: gvIKzzI3bwPERJtQe-QqUNiLRlo.roa (hash: 5lxo9uPLb7BD86aeakgfPVc/QTT8eSb62q07S9VDg9I=) 14: l7GDPKdB66TOBAktW0viKbLqoJc.roa (hash: sCr0Hiy5ctuXtTb9BSdPPbjRTY7O1difObgdBh3wQ1I=) 15: tTeu-FiWFjYJX4UnGAbSfHSXWTk.roa (hash: J3kUjg764fcdLyCpo4TLuRk33tv9CshHJ2YHgwcHpnI=) 16: ueJBktQ4v8jP-pfC1XtwzhvXvww.roa (hash: OTz16uXrUneqQ0QZp8v+Glwx6BeXIVxySFFpuBLqSSg=) 17: w2qY6wXryLRJven5jwVHtiFUem8.roa (hash: CVAqLldpWlYK8WqQxUzhDKZUS55ewiAyi6+zFPElId0=) 18: wkGYdhL0DXJxtvUqL6W8lqF5V50.roa (hash: WYrPMT9s0Z7UyIEvob11ZzDXKDbXZ+UV04Rz6Op6VAU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 18:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:50:f4:7d:89:ad:3e:6c:13:7a:9f:fd:d1:d7:59:6c:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26 Validity Not Before: Nov 21 23:00:20 2024 GMT Not After : Nov 22 23:00:20 2024 GMT Subject: CN=976edb006a59cd8ef29fcf73fd0402dae93617e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:55:19:07:a1:6e:5b:50:f8:80:61:4a:97:eb: ea:dc:e9:24:bb:28:af:92:79:61:1d:12:5a:65:cd: 5c:8c:e0:f9:5a:cd:73:73:15:fb:7f:21:c4:90:21: 21:6a:80:be:3b:df:f6:49:a3:4b:24:df:bc:5c:3c: 9e:2b:9a:cd:3f:00:b0:3e:13:ff:06:69:0c:9c:d9: 40:77:00:63:31:b4:bc:ee:cd:fd:5b:3e:cb:0e:9b: 81:72:db:4e:e7:f8:dc:68:2a:d6:04:05:46:fc:6b: 23:26:90:c1:6b:4c:94:ac:3b:19:ae:55:bf:1f:36: be:03:1e:e8:a9:d9:a6:e5:9d:98:12:b4:b2:1a:de: ae:d8:e8:88:ed:e2:11:bb:37:e3:f9:04:b6:43:78: f1:a7:d6:e0:e0:94:5c:8b:07:18:1b:c6:4c:71:40: 66:bf:bb:c7:5f:be:32:c8:bc:7c:eb:76:31:61:65: 86:50:20:9e:11:17:32:69:9b:e4:7e:b2:94:62:67: db:34:c0:db:2d:e5:36:57:58:83:9b:cf:ba:3d:ba: 32:cc:b7:bd:0b:26:11:bc:65:0d:ae:48:9a:55:0d: 2e:2f:d7:d5:a0:b2:23:39:d4:15:c2:ba:16:d9:0d: 5f:00:6c:50:1b:67:95:90:ea:69:8a:0d:df:c2:c3: 6e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:6E:DB:00:6A:59:CD:8E:F2:9F:CF:73:FD:04:02:DA:E9:36:17:E4 X509v3 Authority Key Identifier: keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:03:ee:e0:fc:aa:9d:44:a2:d5:76:2c:d1:e2:05:ff:7b:a1: 04:75:c9:9c:c4:e2:21:23:eb:04:50:4c:45:65:62:08:26:de: 42:5f:d3:55:29:8f:33:32:60:83:76:67:a0:1f:0d:b5:2f:2a: 0a:81:40:7d:87:5b:58:ab:55:e1:43:a0:04:c7:da:f2:9a:82: fa:e9:1f:40:6b:12:ac:fd:b6:26:41:de:c9:56:db:13:4e:d8: 63:8e:a5:5c:ec:be:86:4d:5e:78:45:89:73:ef:52:7b:2d:44: 00:46:4f:bf:16:b9:ea:08:04:a2:f5:91:53:20:62:94:7a:c7: c5:df:b2:dc:5e:aa:4d:77:f2:bc:4d:28:8e:9b:96:09:a3:4e: 6c:fd:04:fc:d3:18:40:78:3f:62:9d:de:62:8c:b3:41:8e:7b: 7e:26:87:6b:ef:ac:18:8f:c3:78:d6:e9:6e:37:2a:d9:e7:51: 0a:c2:65:e9:0f:fd:3b:97:51:cb:e0:03:12:56:d4:9f:58:39: 6b:68:00:ef:75:b5:a3:19:53:04:d3:10:50:2b:7c:b6:08:96: 33:9c:f3:89:3d:80:06:fc:e3:34:ce:0e:31:75:17:8e:42:44: 91:9c:1b:05:24:f4:cd:49:1e:22:18:f5:65:e2:c0:e6:95:06: 2e:55:a1:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNQ9H2JrT5sE3qf/dHXWWyrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMjMzZDc1NTA4YjRlODVjY2NmNDQzNDlhN2NiNzAzMTk4 ZDFkMjYwHhcNMjQxMTIxMjMwMDIwWhcNMjQxMTIyMjMwMDIwWjAzMTEwLwYDVQQD Eyg5NzZlZGIwMDZhNTljZDhlZjI5ZmNmNzNmZDA0MDJkYWU5MzYxN2U0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFUZB6FuW1D4gGFKl+vq3Okkuyiv knlhHRJaZc1cjOD5Ws1zcxX7fyHEkCEhaoC+O9/2SaNLJN+8XDyeK5rNPwCwPhP/ BmkMnNlAdwBjMbS87s39Wz7LDpuBcttO5/jcaCrWBAVG/GsjJpDBa0yUrDsZrlW/ Hza+Ax7oqdmm5Z2YErSyGt6u2OiI7eIRuzfj+QS2Q3jxp9bg4JRciwcYG8ZMcUBm v7vHX74yyLx863YxYWWGUCCeERcyaZvkfrKUYmfbNMDbLeU2V1iDm8+6PboyzLe9 CyYRvGUNrkiaVQ0uL9fVoLIjOdQVwroW2Q1fAGxQG2eVkOppig3fwsNuPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJdu2wBqWc2O8p/Pc/0EAtrpNhfkMB8GA1UdIwQY MBaAFGsjPXVQi06FzM9ENJp8twMZjR0mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEt ZmE5Y2I1MWNkMGYxLzEvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEtZmE5Y2I1MWNkMGYx LzEvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAgPu4Pyq nUSi1XYs0eIF/3uhBHXJnMTiISPrBFBMRWViCCbeQl/TVSmPMzJgg3ZnoB8NtS8q CoFAfYdbWKtV4UOgBMfa8pqC+ukfQGsSrP22JkHeyVbbE07YY46lXOy+hk1eeEWJ c+9Sey1EAEZPvxa56ggEovWRUyBilHrHxd+y3F6qTXfyvE0ojpuWCaNObP0E/NMY QHg/Yp3eYoyzQY57fiaHa++sGI/DeNbpbjcq2edRCsJl6Q/9O5dRy+ADElbUn1g5 a2gA73W1oxlTBNMQUCt8tgiWM5zziT2ABvzjNM4OMXUXjkJEkZwbBST0zUkeIhj1 ZeLA5pUGLlWhZg== -----END CERTIFICATE-----Generated at Fri Nov 22 00:38:04 2024 by rpki-client on console-fra.rpki-client.org