$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft File: 1DdYFDRN8L9tAXczrNxIjwAmMbI.mft (raw, json) Hash identifier: JTIg57cSFOslZwdmqGTuLw6QlxTJl/vpYoZcK8J6jpE= Subject key identifier: BC:0A:47:2C:C0:B8:96:A8:D8:46:8D:73:FA:5E:40:65:41:AB:3F:A3 Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2 Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2 Certificate serial: 0193512BA9A9479782556D5929293BA4D5A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft Manifest number: 1383 Signing time: Fri 22 Nov 2024 00:00:36 +0000 Manifest this update: Fri 22 Nov 2024 00:00:36 +0000 Manifest next update: Sat 23 Nov 2024 00:00:36 +0000 Files and hashes: 1: 0i0RGXEVZsyAZydOZfuXfHvET_4.roa (hash: 4yqjGkBFd9HrZrzi5JhC3WSImZgfTdGyndOCW6c0TZ0=) 2: 1-mIOfOveJhOJMvHaHkjpGcXsV5o.roa (hash: HezCoZsvzYRMFoFmWh7XbF3FrbTCrUJ/yXC+l2pubz8=) 3: 1DdYFDRN8L9tAXczrNxIjwAmMbI.crl (hash: 20v+hU5Im/g/83g2Q7byXFh4FhT+jziZA/dUhmcSibo=) 4: 1mmwb-F46j9DXohyWeLLhwGxf50.roa (hash: lOTh3g94wpht0hjhnzN+8n6sFqivEqsCfQWwaXJU0e0=) 5: ARDOL48R3H62jF-FnANr5YAgl04.roa (hash: Re+EhHyWY6o0z2hzC9K2DFcfL+dFkJNt7qA03FAk2fY=) 6: Gwbru8yU9kzziokWhCCzl1GBn9A.roa (hash: /3Jqu0WxT4zHo+cqR5LmzhezLAHHhShpOHSHkqJ56YY=) 7: M3Vx5hZFVMOqsZbqB64n3zKM1l4.roa (hash: Je9mxIbUjpzdpZtZnYCm0gdkd6XaDPU0fCJCGiI1CuY=) 8: PyAskcsDyuA7YkdbsUCAPinY9wE.roa (hash: HflhVaMVMY39XmudaVsCNRbMqk74yX2bCdkOC3G3QTg=) 9: SoIXdO-AHnQF2G4umvA5it7CbD0.roa (hash: i9EtEeswbfMv0SeOOi9U5QB+dsjgFMINx+xOYYVZmY8=) 10: TJAXeF4w7zY7ZuQD6XWOgWmNqVM.roa (hash: GGmkbtKkpANuKCucnbld/R71j/LUkoU1WGz0TGj6Fw8=) 11: UFrWEkoYA6F2pMB5CJvLZRe9OIk.roa (hash: 32siyvZIXjQJMK3nnJO2A6U0OY/yXQdYkrf+IV/sj44=) 12: UZREhjZ1Cer6EzgTd-99-HqH1Lw.roa (hash: 9/QQVQLX/bHlr4B0l/OF+uZ41qW5wQBKalgO0kEj/SE=) 13: XlBJazSkMouXx8MtFWER-ctPR18.roa (hash: MEWW0YtEjEnIFpjCiHkqOOzROj/0DUhvbU/Ear2Ej0U=) 14: XwRj9Wx-qcqFTfZXJpcfHb3fVT0.roa (hash: IFQKAOBkC9Hb+q27xTGrg1VN6Bx2tGMvBWLizShhT5w=) 15: e_4FKuujqvGNTZn2mBQxBFOmLyk.roa (hash: FgAOXRknJbgkcYa9a6nj3I5/0JFmN9UXM4jEXCnXIis=) 16: sw7N6Cc4KE34r0NlHRhM__pW04Q.roa (hash: a3o9j+EGRi8OiDBySmf5KPr+kdM9QxhWgxoKqcdAAlY=) 17: wqiNo3UmtCW1e_e9iCA8kGVCQ3Q.roa (hash: BtRvxJdAgL9lCR/HV6RuahxN9+3tduBkl+QMZd+SuxM=) 18: xz2PE_KAkZBHdGq2aHQ54qK4XX4.roa (hash: OiICJFOLJQmkpzPyBOTS9vTkIrulMZG1nNqy3+RnTYc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:51:2b:a9:a9:47:97:82:55:6d:59:29:29:3b:a4:d5:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2 Validity Not Before: Nov 22 00:00:36 2024 GMT Not After : Nov 23 00:00:36 2024 GMT Subject: CN=bc0a472cc0b896a8d8468d73fa5e406541ab3fa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ae:27:db:50:02:6c:13:f2:9a:a2:41:29:c1: 09:45:a9:f1:73:6f:ae:c7:f8:cd:53:35:06:ab:78: eb:12:cc:2f:8d:bc:a2:03:da:16:da:3a:05:6f:3d: 10:d4:a9:c1:e8:c2:b3:cf:c1:36:1a:11:8b:c6:e0: 9c:05:5f:45:ba:3d:f7:38:b6:9b:32:21:98:74:17: f8:9e:1d:fb:db:51:6e:a6:64:cf:89:4c:b4:50:84: 6d:a5:e5:1d:70:78:1f:36:17:2f:de:cd:f6:66:56: 9e:f1:13:b3:f0:07:bf:ca:43:f5:99:e1:9a:72:7a: ee:61:e0:02:75:cc:4b:89:b0:c8:6d:3b:b8:09:bb: ec:a3:5a:34:11:3a:16:81:49:da:70:7c:a8:26:77: 8e:a9:bc:5b:35:b5:ac:0d:c2:e6:98:39:20:f7:19: 8a:59:00:f6:23:7d:2e:56:72:67:fc:99:03:6f:f3: 77:ef:91:b6:51:8a:79:a0:55:f2:43:35:00:6b:f9: 9d:d5:57:de:4f:bf:ef:eb:fc:05:94:65:4c:d3:cf: 0b:e3:1f:3f:92:7a:88:68:08:9a:88:f1:22:3c:85: de:0c:d9:6a:ba:b4:1c:a6:ed:2e:25:55:70:ed:8d: 0c:bb:61:f8:a6:bb:2c:23:40:63:73:7f:c2:36:d0: 97:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:0A:47:2C:C0:B8:96:A8:D8:46:8D:73:FA:5E:40:65:41:AB:3F:A3 X509v3 Authority Key Identifier: keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:a6:38:8a:27:fb:52:9e:ca:9e:8a:48:23:d2:54:99:e4:9a: 43:e9:99:73:b9:db:ea:e8:06:87:d7:5c:ff:11:2a:d2:06:0a: 78:86:f9:ab:0c:b7:48:0e:ab:f0:78:7d:84:c5:7a:ec:1c:42: 60:db:3e:98:71:c4:87:a2:94:7f:ce:0a:93:95:cb:11:91:0c: 11:9e:51:76:cb:23:d8:cc:bd:94:21:f5:ab:01:44:d6:11:68: 2d:bd:03:ac:fc:dd:e4:3a:1c:d9:8e:9a:7e:b3:9d:84:49:9f: 0f:e6:73:a2:7f:a6:4a:fd:45:09:b0:f3:1d:36:b4:13:2c:ee: 21:da:e1:6e:80:e1:ba:ec:9e:35:08:b5:b3:14:d7:c8:e3:6b: fa:8c:1e:d0:a5:56:8d:22:4b:cf:d9:65:47:ac:ad:d7:24:9b: 84:e7:09:5d:7d:ac:f7:72:8d:c4:9f:80:b8:39:6e:13:8c:ab: 39:a0:9a:e5:34:66:e5:96:03:d6:e7:e4:88:bb:7e:17:90:01: 9b:10:b8:6b:2a:4b:33:a7:7d:c1:ae:ab:46:dd:3f:bb:5f:96: 1a:06:10:46:40:f7:3b:b4:c9:28:03:f2:c3:63:6e:7f:f7:ff: f8:81:17:65:1e:d3:f6:1e:64:95:83:04:8c:5d:0d:1a:2d:6b: cc:d5:dd:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNRK6mpR5eCVW1ZKSk7pNWmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Mzc1ODE0MzQ0ZGYwYmY2ZDAxNzczM2FjZGM0ODhmMDAy NjMxYjIwHhcNMjQxMTIyMDAwMDM2WhcNMjQxMTIzMDAwMDM2WjAzMTEwLwYDVQQD EyhiYzBhNDcyY2MwYjg5NmE4ZDg0NjhkNzNmYTVlNDA2NTQxYWIzZmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtK4n21ACbBPymqJBKcEJRanxc2+u x/jNUzUGq3jrEswvjbyiA9oW2joFbz0Q1KnB6MKzz8E2GhGLxuCcBV9Fuj33OLab MiGYdBf4nh3721FupmTPiUy0UIRtpeUdcHgfNhcv3s32Zlae8ROz8Ae/ykP1meGa cnruYeACdcxLibDIbTu4Cbvso1o0EToWgUnacHyoJneOqbxbNbWsDcLmmDkg9xmK WQD2I30uVnJn/JkDb/N375G2UYp5oFXyQzUAa/md1VfeT7/v6/wFlGVM088L4x8/ knqIaAiaiPEiPIXeDNlqurQcpu0uJVVw7Y0Mu2H4prssI0Bjc3/CNtCXGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLwKRyzAuJao2EaNc/peQGVBqz+jMB8GA1UdIwQY MBaAFNQ3WBQ0TfC/bQF3M6zcSI8AJjGyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMURkWUZEUk44TDl0QVhjenJOeElqd0FtTWJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9iMjRiMmQtMzUyMy00MjJlLTliY2Yt MzY3MWQ2N2ViOWY4LzEvMURkWUZEUk44TDl0QVhjenJOeElqd0FtTWJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9iMjRiMmQtMzUyMy00MjJlLTliY2YtMzY3MWQ2N2ViOWY4 LzEvMURkWUZEUk44TDl0QVhjenJOeElqd0FtTWJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF6Y4iif7 Up7KnopII9JUmeSaQ+mZc7nb6ugGh9dc/xEq0gYKeIb5qwy3SA6r8Hh9hMV67BxC YNs+mHHEh6KUf84Kk5XLEZEMEZ5Rdssj2My9lCH1qwFE1hFoLb0DrPzd5Doc2Y6a frOdhEmfD+Zzon+mSv1FCbDzHTa0EyzuIdrhboDhuuyeNQi1sxTXyONr+owe0KVW jSJLz9llR6yt1ySbhOcJXX2s93KNxJ+AuDluE4yrOaCa5TRm5ZYD1ufkiLt+F5AB mxC4aypLM6d9wa6rRt0/u1+WGgYQRkD3O7TJKAPyw2Nuf/f/+IEXZR7T9h5klYME jF0NGi1rzNXdcQ== -----END CERTIFICATE-----Generated at Fri Nov 22 09:45:53 2024 by rpki-client on console-fra.rpki-client.org