$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft File: ayM9dVCLToXMz0Q0mny3AxmNHSY.mft (raw, json) Hash identifier: W1d/D7ylYNZJVRv3Qgxkjl9XJyHiHKdTAtjc9S5G2oA= Subject key identifier: 4E:3F:37:EC:EC:2A:C3:01:29:D6:09:9D:D5:36:F2:70:20:07:A0:47 Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26 Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26 Certificate serial: 0194BC3C77F1F1C9FC7B9669D42021E59E30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft Manifest number: 1182 Signing time: Fri 31 Jan 2025 12:01:06 +0000 Manifest this update: Fri 31 Jan 2025 12:01:06 +0000 Manifest next update: Sat 01 Feb 2025 12:01:06 +0000 Files and hashes: 1: 2ROF8Qa_v2lcTDHa4rUTy1yASPM.roa (hash: zOHm82LzBaKqnKGenPioYgrMkdwM5rJWiCClNZMGx10=) 2: 2cIKXah99bs326V7_K2_ATU1wCc.roa (hash: 8U7vy7F8tH1dtIEl5RJoquiwlVH7Dw2C2urkmS/8Z1s=) 3: AjBp57cbFRBUIwIaXhNlUU4xc9Y.roa (hash: ZV9AX+FvWa4YVP0u/DD5byIthcNtHTveftQNUrL/KbI=) 4: CMxibTdZ-IzTtbNjsHEuGJLmc08.roa (hash: h3s5HNsZsrtEKeZ3dZjj9ubR1NCifH/ZKj3bCLL8amE=) 5: MWVrNJSe74q7kEhW6qS8QXcSrrc.roa (hash: SMPMCny2Jv5HoImrcf2XEmoMCaHU3khczb0z6CCQ9uc=) 6: UeaUMTENz6rEtOnCBMfG9gC-gkA.roa (hash: Gae4+Xp55CQ/qfOEbOd8MSojTwvPkhhJCtVDf0XS3FE=) 7: ZkxRUMGE9CQRvySfgcJj3kHytZg.roa (hash: UKRx7jBVZPPDl6SgbH7t7Qygyz8pBsSIfl7nu9h+mgg=) 8: a-X3or7INLR4ufjB9kuZV5a-EWw.roa (hash: sniBfUMDypmwdmcp8fUhggMJCblXPCEL7WLhlXEA+cI=) 9: aB6sxL1ZlKSQNpa4jL29xIkPi_I.roa (hash: zA0AFONbK9br9fZoJVU4SW6cugn1tuIJBYSB1Nl3/G8=) 10: ayM9dVCLToXMz0Q0mny3AxmNHSY.crl (hash: xodl0fPUG4m10W3nx6wVn4nCbeQct8rcJ5j1jLtJlyc=) 11: dDKyjw96L2KxmUYkqX4D6dJ8pGU.roa (hash: kfwSB1OMsfj4L5k2NALhSvO4jbjcB88dINhnvrovmYI=) 12: fZeNbyH5ujZlgqfP9AgorOMXohA.roa (hash: Dn0aZqCRGKt2adMmUTTsiPmw4Pp+E7zhFHoCHO312UY=) 13: fb3lzsKRuT3DqmRVbbR-BGF4wXU.roa (hash: pxuBhHoXzqbakdVTx6L5TNOxX98HDl41yiAFcXSWT3Q=) 14: gYds0JITWToRAWO6EmM06xkOA-g.roa (hash: jtWYGOQZO5pMtNPGec2KrPh/oTve8btfCfcQpgZ5xYs=) 15: hZs6PbiV1FHRQvgoNjIWkApb1x4.roa (hash: slbvJPVch+dH2HvE/UBBZulZ2jCavWoY4Ccie6OcAiU=) 16: itqdYmGsrfepmyYSKCd1c5R77js.roa (hash: W2/G8eoM3IFmeLBvMWU5XzC6g/z37f1zNFuZs/37yXE=) 17: np9eNjgoLA0jYeMYnFqjApZ6K1s.roa (hash: rFv0HF9ou+nHz2ggvRQ0cKKf/+Wgihlq0XkCRw5GtV4=) 18: u5pfngYD-0MqXeQ11DbdTP8EwmU.roa (hash: xtu5m2bHnGuokc2D/B489MeQCUa3PeUYpTlbCBj8908=) 19: zwwQDmkjyzkHQoSt9yvuLKYH4g4.roa (hash: EbdIlUIf/V4IPQb4IjhvCPCvUZmRh/sZMHvATjYb0m8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 01 Feb 2025 11:23:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:bc:3c:77:f1:f1:c9:fc:7b:96:69:d4:20:21:e5:9e:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26 Validity Not Before: Jan 31 12:01:06 2025 GMT Not After : Feb 1 12:01:06 2025 GMT Subject: CN=4e3f37ecec2ac30129d6099dd536f2702007a047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b4:9d:16:5c:42:83:58:13:b0:fa:90:c2:38: 3c:eb:db:09:82:e4:ca:c6:eb:2a:a3:b0:44:ec:62: c7:22:bf:41:a4:36:d9:52:11:12:91:de:8d:28:3b: 31:0a:9a:14:8e:d4:f9:17:d2:94:4d:2e:18:20:07: 3b:ad:ad:45:13:b9:cb:67:98:34:a0:7a:c6:22:38: f0:da:68:03:3a:33:af:c5:3b:32:ae:5a:9f:a8:b3: 4d:78:50:ab:c9:08:51:99:05:f8:93:3e:b5:03:f1: 6e:3e:86:f3:ea:b8:5a:0d:f6:e2:50:32:5d:bd:1d: f4:90:e7:b9:22:0b:4f:99:c2:f0:41:62:1a:f4:a5: 24:cb:28:29:7f:6a:33:6b:97:62:3d:51:bb:cd:7f: 71:6b:a7:be:25:fb:f4:1d:51:73:4a:d4:36:5f:83: 8a:89:4b:25:d4:57:72:95:73:5d:38:7f:9e:96:4c: 3c:b9:bd:b6:3a:f3:38:70:a1:92:27:5d:dc:60:c2: 75:33:e5:60:22:3e:ca:c3:7a:d3:cd:7f:1f:91:86: 41:ec:5b:35:c2:a2:c4:1e:64:75:af:c5:85:fc:29: f4:45:2e:76:9c:c4:5e:e5:1a:50:c6:5e:96:65:a1: 5d:e6:f2:fc:f0:91:25:d5:2e:d2:25:0b:c0:b9:4f: 83:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:3F:37:EC:EC:2A:C3:01:29:D6:09:9D:D5:36:F2:70:20:07:A0:47 X509v3 Authority Key Identifier: keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:92:e2:fd:f4:2b:01:4e:a3:4c:32:8a:62:7b:b0:86:6e:95: 05:85:96:7d:14:30:9d:48:a1:a3:71:55:32:77:91:62:82:18: cd:61:06:36:3b:c3:aa:02:40:ab:53:24:14:42:36:f1:e8:a4: 47:f6:07:43:3b:11:96:2c:9e:95:c6:e5:7b:a3:90:2a:43:f2: 3e:80:5b:06:29:0a:17:d8:93:9d:49:c0:02:3d:f9:19:cf:43: 5c:ee:8e:4a:b3:09:b1:a3:ef:67:b4:28:b4:0f:39:60:12:dd: 62:66:08:45:56:8e:ee:ec:37:a2:ab:35:b6:ba:b8:3f:3d:d5: e4:73:c8:4e:e0:c8:98:a2:9c:46:ae:4f:51:80:b5:3b:5f:cb: 05:13:20:a4:6d:60:be:12:b0:83:15:95:55:41:86:a8:1c:62: 73:7d:99:10:d3:e0:fe:d2:20:ff:ad:1e:ee:e2:25:64:a4:a3: f1:c3:c4:dd:0b:34:b1:47:f9:30:5c:e1:03:e2:69:1b:dd:d8: cf:56:86:78:95:53:a4:df:b8:6d:d2:c3:75:3a:b1:70:50:a2: a5:0d:27:65:42:6c:27:c5:e8:20:7d:e4:b9:60:f2:7f:5c:2a: f7:a1:ff:cd:b2:44:c1:98:28:6e:7a:f0:0c:c9:98:04:f3:a7: c8:7f:f6:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZS8PHfx8cn8e5Zp1CAh5Z4wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMjMzZDc1NTA4YjRlODVjY2NmNDQzNDlhN2NiNzAzMTk4 ZDFkMjYwHhcNMjUwMTMxMTIwMTA2WhcNMjUwMjAxMTIwMTA2WjAzMTEwLwYDVQQD Eyg0ZTNmMzdlY2VjMmFjMzAxMjlkNjA5OWRkNTM2ZjI3MDIwMDdhMDQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbSdFlxCg1gTsPqQwjg869sJguTK xusqo7BE7GLHIr9BpDbZUhESkd6NKDsxCpoUjtT5F9KUTS4YIAc7ra1FE7nLZ5g0 oHrGIjjw2mgDOjOvxTsyrlqfqLNNeFCryQhRmQX4kz61A/FuPobz6rhaDfbiUDJd vR30kOe5IgtPmcLwQWIa9KUkyygpf2oza5diPVG7zX9xa6e+Jfv0HVFzStQ2X4OK iUsl1FdylXNdOH+elkw8ub22OvM4cKGSJ13cYMJ1M+VgIj7Kw3rTzX8fkYZB7Fs1 wqLEHmR1r8WF/Cn0RS52nMRe5RpQxl6WZaFd5vL88JEl1S7SJQvAuU+DFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE4/N+zsKsMBKdYJndU28nAgB6BHMB8GA1UdIwQY MBaAFGsjPXVQi06FzM9ENJp8twMZjR0mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEt ZmE5Y2I1MWNkMGYxLzEvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEtZmE5Y2I1MWNkMGYx LzEvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO5Li/fQr AU6jTDKKYnuwhm6VBYWWfRQwnUiho3FVMneRYoIYzWEGNjvDqgJAq1MkFEI28eik R/YHQzsRliyelcble6OQKkPyPoBbBikKF9iTnUnAAj35Gc9DXO6OSrMJsaPvZ7Qo tA85YBLdYmYIRVaO7uw3oqs1trq4Pz3V5HPITuDImKKcRq5PUYC1O1/LBRMgpG1g vhKwgxWVVUGGqBxic32ZENPg/tIg/60e7uIlZKSj8cPE3Qs0sUf5MFzhA+JpG93Y z1aGeJVTpN+4bdLDdTqxcFCipQ0nZUJsJ8XoIH3kuWDyf1wq96H/zbJEwZgobnrw DMmYBPOnyH/2Ew== -----END CERTIFICATE-----Generated at Fri Jan 31 15:39:37 2025 by rpki-client on console-fra.rpki-client.org