$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft File: R3avt0-tW68KYYC0lRDYuEl9-NM.mft (raw, json) Hash identifier: wYzQrWyikLlAZDvPOS1q0NiVZTvnnjoo24FIcYn4CBs= Subject key identifier: E3:B9:A8:7B:32:BC:5F:43:E7:DD:AF:81:34:25:C5:42:85:C7:BB:F8 Authority key identifier: 47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3 Certificate issuer: /CN=4776afb74fad5baf0a6180b49510d8b8497df8d3 Certificate serial: 0194BA849F31D677F5D53572CA31FE5BA993 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft Manifest number: 142A Signing time: Fri 31 Jan 2025 04:00:41 +0000 Manifest this update: Fri 31 Jan 2025 04:00:41 +0000 Manifest next update: Sat 01 Feb 2025 04:00:41 +0000 Files and hashes: 1: 1h855CNEVOjEfeY3xJdnjH3udfA.roa (hash: LnReL4xvvQZDIPnpuzGkg0WHy3mNK+PRykuvMTviVRU=) 2: 9TPdAIfPUajUjs2DsbC3GN5w1mM.roa (hash: f998uOYMTFD5RySwHTrfZLXT9MQqC7DQiOZI706CLv0=) 3: BjNcWgFCcgba03gZ00Wn0vEqj3g.roa (hash: U/XRsHv7C+f9dXk91I1pC9Y4HNFCH0uKUdMuFoDViRQ=) 4: BrfY4YW_yXK06U0eOLt-LobfjzY.roa (hash: Hv6+aEBXmMC9XH4TQkng0p4jntb620WSOaHbhPCP9JQ=) 5: Cw1uuAeUBhAelOLTm4Dk1iRffEA.roa (hash: z7x5PkssyE32f3g9waLhPt3Hl1C8H5f4Iw04pNNOOB8=) 6: EcRwtilhZy6tNswg6gPS5OkvUlQ.roa (hash: qBDPjWgpNJxholOTWxrJUnO/kRkTjC8UXjWmpsN+tAc=) 7: R3avt0-tW68KYYC0lRDYuEl9-NM.crl (hash: P4psR1Gxm7LD9ZB8+HX87KfTZnQQxsx++3xp5OX8y6Y=) 8: T8_EmiMUPF83zSf_CWDX1W5xQ1k.roa (hash: d6CAaY4KcSFvMEPDFQGYRUngwvkhFj6iBm1RzRLZ++4=) 9: WUYHmqFyP61kI6BD9sMT7KF9l-U.roa (hash: xFiWBHTwLfZ5M8eQEBathNKsbTc1PcIqXDpV9YTX3G8=) 10: g5kj0c5gIcfXvJMBxVW2-IvShUI.roa (hash: CKgIE1v8ZknTa0F780Va3Q+BXidD3R6HaKXYmqUb3wg=) 11: kKoWp4Lx502DAZ2dTiIEcojnfao.roa (hash: wbMVZciEXcbsx0EhcS9t8+gUwRDnIiXLOoH2KSH13m8=) 12: m0urSftBhVugiQE6mFeNiCtZVI8.roa (hash: xOqBMnBvPEbbfCmZX1QX9FuTGPEracGRpzNmhAwuxVM=) 13: p9BRYnl3EKm9TTth6amvuszGxmw.roa (hash: RclXNVeUwytI6eicBVcxuy79LLzQjb8L+50PtV/MwdU=) 14: rq0QSGPYNrEzw6-22i_TjD_5ytM.roa (hash: GZherMDntzrMQ22JN8aWo0GpEMJ9AqPJdM6Y8aGsT1I=) 15: tWTx91zKwnMqo4ymab78lMSrAv8.roa (hash: ueVp+aZdHi8wvh5xrtibgRIouCvFn7uQziD4gJ74yO0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 01 Feb 2025 04:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:ba:84:9f:31:d6:77:f5:d5:35:72:ca:31:fe:5b:a9:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4776afb74fad5baf0a6180b49510d8b8497df8d3 Validity Not Before: Jan 31 04:00:41 2025 GMT Not After : Feb 1 04:00:41 2025 GMT Subject: CN=e3b9a87b32bc5f43e7ddaf813425c54285c7bbf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3b:17:d2:d1:13:6c:bc:10:f6:14:9d:59:0a: 91:82:66:e7:0b:5e:9c:fd:cd:e8:59:14:ac:86:97: f6:fe:af:c7:4b:25:94:11:f2:6c:33:04:a9:c3:83: 56:13:ed:03:06:e6:48:3c:c1:60:82:e1:60:b6:72: 38:20:60:41:88:ba:09:d1:04:d6:2f:8b:a4:43:a6: 75:3f:6a:e5:13:b9:14:2f:1e:6b:54:4c:6c:db:ce: 7f:be:0d:3a:3b:51:92:b3:ed:af:ef:d6:19:d7:80: b9:a4:86:23:4c:35:f4:6c:98:4d:a1:ec:57:1b:16: de:65:14:b4:02:65:13:4a:95:20:ba:29:c2:cb:8e: b5:d1:a1:8e:13:96:5b:a6:50:93:51:c9:df:39:89: 98:ad:65:42:09:3b:f6:84:45:83:9f:76:c3:b4:fc: 62:3f:52:a2:6b:59:4e:0f:28:7d:a6:a1:b4:3d:82: 7a:a6:6e:98:a9:f5:eb:11:3e:fb:22:f0:fe:90:0f: 38:cb:68:6f:61:8d:8a:06:61:92:50:a1:46:b5:48: 37:91:e3:f9:3a:e5:bc:ab:59:d0:a9:3e:3e:31:cf: ae:21:8e:2b:1c:fc:24:b2:14:8e:bb:b8:87:24:46: 47:cd:ac:ed:ec:6b:22:80:dd:f6:8f:ed:c7:8c:62: a7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:B9:A8:7B:32:BC:5F:43:E7:DD:AF:81:34:25:C5:42:85:C7:BB:F8 X509v3 Authority Key Identifier: keyid:47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:da:85:a8:66:9d:52:90:f7:6e:99:7c:28:bd:fe:34:e4:3c: 59:14:3d:40:4e:c8:90:b2:8b:a7:e4:7d:6c:b1:bf:93:96:49: 80:8e:ce:9e:0b:33:2f:e9:58:c5:0f:7b:11:65:1a:75:c0:8e: 06:14:e8:82:78:88:b4:be:e5:5c:72:11:be:9e:eb:42:e2:a5: d5:c8:4c:98:4a:1f:3c:7e:01:92:2e:e7:68:ee:43:fe:a6:3f: 7c:ed:5c:4e:91:dc:80:97:c5:c7:96:40:2f:56:8e:6b:03:a1: 66:fa:ce:b1:0b:bd:c4:89:6f:8b:a6:f4:81:61:a1:3b:9f:b3: 56:71:17:6a:f4:6d:d4:f7:94:ed:8e:31:7c:86:c4:0b:77:36: 9d:e6:b5:d3:05:cb:46:4b:8e:75:f9:85:bc:c8:cd:c9:ce:1b: d7:4b:56:66:57:69:03:d8:c3:4d:85:6a:21:38:47:b4:36:ad: ce:48:c9:d9:bf:70:12:14:4b:60:5a:74:38:f0:5a:59:74:31: 08:cb:63:44:31:22:ee:cc:6f:40:5c:f1:12:97:29:f1:56:10: ad:39:71:ed:ba:26:03:65:c6:e2:d3:59:b2:9f:c9:e7:a3:77: 97:72:41:4c:e1:98:98:ed:09:b8:a2:0e:4c:f4:33:75:06:62: 3a:c7:1b:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZS6hJ8x1nf11TVyyjH+W6mTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NzZhZmI3NGZhZDViYWYwYTYxODBiNDk1MTBkOGI4NDk3 ZGY4ZDMwHhcNMjUwMTMxMDQwMDQxWhcNMjUwMjAxMDQwMDQxWjAzMTEwLwYDVQQD EyhlM2I5YTg3YjMyYmM1ZjQzZTdkZGFmODEzNDI1YzU0Mjg1YzdiYmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjsX0tETbLwQ9hSdWQqRgmbnC16c /c3oWRSshpf2/q/HSyWUEfJsMwSpw4NWE+0DBuZIPMFgguFgtnI4IGBBiLoJ0QTW L4ukQ6Z1P2rlE7kULx5rVExs285/vg06O1GSs+2v79YZ14C5pIYjTDX0bJhNoexX GxbeZRS0AmUTSpUguinCy4610aGOE5ZbplCTUcnfOYmYrWVCCTv2hEWDn3bDtPxi P1Kia1lODyh9pqG0PYJ6pm6YqfXrET77IvD+kA84y2hvYY2KBmGSUKFGtUg3keP5 OuW8q1nQqT4+Mc+uIY4rHPwkshSOu7iHJEZHzazt7GsigN32j+3HjGKnxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOO5qHsyvF9D592vgTQlxUKFx7v4MB8GA1UdIwQY MBaAFEd2r7dPrVuvCmGAtJUQ2LhJffjTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mNzFjYzItYjcxZC00NjY4LTg2NjEt MDUzOGU5NWYzZjEyLzEvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9mNzFjYzItYjcxZC00NjY4LTg2NjEtMDUzOGU5NWYzZjEy LzEvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAatqFqGad UpD3bpl8KL3+NOQ8WRQ9QE7IkLKLp+R9bLG/k5ZJgI7OngszL+lYxQ97EWUadcCO BhTogniItL7lXHIRvp7rQuKl1chMmEofPH4Bki7naO5D/qY/fO1cTpHcgJfFx5ZA L1aOawOhZvrOsQu9xIlvi6b0gWGhO5+zVnEXavRt1PeU7Y4xfIbEC3c2nea10wXL RkuOdfmFvMjNyc4b10tWZldpA9jDTYVqIThHtDatzkjJ2b9wEhRLYFp0OPBaWXQx CMtjRDEi7sxvQFzxEpcp8VYQrTlx7bomA2XG4tNZsp/J56N3l3JBTOGYmO0JuKIO TPQzdQZiOscbpA== -----END CERTIFICATE-----Generated at Fri Jan 31 15:41:07 2025 by rpki-client on console-fra.rpki-client.org