$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft File: 1nPYSbfVBHN21X5veW8AGLcLRQY.mft (raw, json) Hash identifier: 5nXPo2l0edrvak+eI1y4VL1cYbx+WYWLaavfJckSm5M= Subject key identifier: 2C:5C:11:4F:F6:B4:BA:28:55:7C:E4:3B:E4:2C:DC:AA:63:CD:BE:65 Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06 Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506 Certificate serial: 0193640F48EADEE17E78051344217CEF4CC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft Manifest number: 1380 Signing time: Mon 25 Nov 2024 16:02:23 +0000 Manifest this update: Mon 25 Nov 2024 16:02:23 +0000 Manifest next update: Tue 26 Nov 2024 16:02:23 +0000 Files and hashes: 1: 1nPYSbfVBHN21X5veW8AGLcLRQY.crl (hash: rVBrmmhc5A3is4kYk8SNo5FrxMkLJFKN3yEW4VbtrG0=) 2: 1pvbd9pf2ZD3mGzrAGan63RcRsE.roa (hash: SMNg5ZLAaNiRNf3/8kV9SIk2TjsCaGy1OMMfVoOj/oA=) 3: 63ong1PXxAsMuI9LsKO02cXfqFc.roa (hash: P5P7Hyf4vETRSjxCsbyqxr5/eBxx5HBDKDmAeJZQZbA=) 4: 8qpOQEkld-OCE327WDPvfwz8NTc.roa (hash: TbtnOjFPISiCKQ5Eo05EabfgkT3k9A2fhlIo4BBx5I0=) 5: B8rGcPKJF5f1wEBkzjKpT2dRuoo.roa (hash: pAWL99iYUwCyljKF2iUrndLopI7MfgMdEZUHL+1XHHs=) 6: Bj2LFAbOgKMR2NXBjTclhHV1aag.roa (hash: Q830XGnF8ByDmLrlT/LkmqVLHKlTHq70xGiNb0VwqA0=) 7: LNgDnrHM7ii_QTnTkLinr59AUeQ.roa (hash: IWp+z7twTuEbxlkzYqPjQVg6B2xaBrvNskt7X77HYxE=) 8: M378Jiav0hx3KAeGl5YoW97pz7M.roa (hash: 3DaI+UOX6y9aSwUvdKOCFjAsxxuUV/XFPhSSwOdAKcI=) 9: N9c3boAv5mJgjG2higtglPUJGWI.roa (hash: 2BLOMJNgeLw4GeqAKNj6M2zM/JazTZVIrWMx3Gl/6Lg=) 10: Qyttwg3pmxGgDqXwllRkY9Ul1tw.roa (hash: gpYEbp6fN/SNv3pbuSJLohmNIbw2RU7bBH2ATBZa0uA=) 11: bo3Au_JS80UuU5XPgVVcU4UAl2Q.roa (hash: hmPm6ijITvgkAMuVXFKWvViNfsI54a7uN1RwdUKJvn8=) 12: cOfIzPHzxzO1k9-eyVc6POQcSq8.roa (hash: p+iWrAPwc3HN52EdbThkLHZjd5jV8Cs8TQ72IX/IMH4=) 13: f049LRi_jvtJNCpihFFUT2fZhT8.roa (hash: wOBAhY+Y/ISRTlCwOfE7p5S1+iVVvAFO0CQVKBvRRIk=) 14: j7PzXo_C9wrJS3cCrUgQVgE5aq4.roa (hash: TpwUYrkVwIBKmq3kWfm1uZapg5jg9Q9t+zAXqND6e3k=) 15: jEKmzPSGlitg2Y612KKDOs_lDg8.roa (hash: ytYdVeAglMXZKzGzfZBgmDlroGq1yRkb/AVRpMzC56A=) 16: m-LpYapnSdCJzKWk2xzexUp2fes.roa (hash: 4y2XyVBZuZsM4SUdEmcs0nDofBeBjYmBa3UBc9IuwYo=) 17: s3xN3EuKyCaYnSH-ezxDexmB20Q.roa (hash: LQ60hRL6xjznjAQ2w/wkWJ/AJ/Q5sFaId7RoqI+m/2I=) 18: sy0TYoXuL0Hz8DIGwy3rz_e-tZs.roa (hash: 5GusHLC5gSab0J6A1QYWk8PsA40CWk+3VnxiN3/265w=) 19: t32PQAx_M_CVr0gQB_32VcpGrUw.roa (hash: IoL+LgMIoeG0uFpxyLzIQK3K4RSHdGQGa6PDnndFMNI=) 20: uEkq7oeIIHvOTSH_sqXxqyt4bM4.roa (hash: xv56lLwgDgfFZKqIE8KDMM6r28GVlObB7r8Nz5wkLuU=) 21: vKJBGSjWvGiP2-0Ac_g8pCCJoq0.roa (hash: TQXfDEJaWBuIVRDifgPe75hUlhqUjg92NoyfFjag6ds=) 22: zj8ix-9wNIiIl1G99PjmHJBfx50.roa (hash: I5GVyjdZbps16VY4UCizUYfKV+pmqkjFbyIgL1mY2ls=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 26 Nov 2024 16:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:64:0f:48:ea:de:e1:7e:78:05:13:44:21:7c:ef:4c:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506 Validity Not Before: Nov 25 16:02:23 2024 GMT Not After : Nov 26 16:02:23 2024 GMT Subject: CN=2c5c114ff6b4ba28557ce43be42cdcaa63cdbe65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:92:49:31:6c:0a:fa:18:3e:27:c7:52:c6:92: b4:93:0c:a6:6a:2e:eb:42:3e:c4:16:6f:46:e4:a6: fb:37:86:7d:b2:59:af:31:75:0d:73:4f:23:52:66: dc:38:21:10:ca:20:e5:c8:dc:29:05:5f:9f:87:80: ff:d0:8d:91:2f:3e:1f:df:8d:e8:7d:db:80:ff:b1: d5:27:ef:a2:5a:8a:7e:8e:00:26:12:19:9c:48:6f: d9:2f:86:b7:95:42:d0:c1:f0:90:e2:76:8d:8e:11: 6c:4e:b1:db:8a:ed:20:b1:9c:32:6c:53:05:51:3c: 3e:f3:44:38:e6:8d:c0:1b:a0:4d:cc:ae:3f:b8:56: de:48:36:a8:90:55:2f:93:62:e8:26:70:2b:5d:20: d0:69:48:68:7f:b2:69:8d:ed:a4:78:14:e8:bd:f8: d6:63:73:31:f2:54:44:74:a6:9d:34:b0:90:49:72: 13:2d:38:26:5e:85:47:20:54:50:9d:74:3f:42:34: e3:d1:19:9d:94:13:e1:fc:16:27:02:9a:72:7c:80: 65:88:bc:65:0e:37:da:77:e6:73:bf:99:f2:53:f2: 4f:09:c8:3a:dd:06:e0:24:7e:a6:c4:58:54:11:a4: 2b:96:76:b7:5f:29:ee:4d:00:b1:58:ee:8a:6f:c1: 4a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:5C:11:4F:F6:B4:BA:28:55:7C:E4:3B:E4:2C:DC:AA:63:CD:BE:65 X509v3 Authority Key Identifier: keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:c6:fe:35:f4:e0:91:60:85:45:5f:da:ca:65:45:b1:7d:56: 85:ee:42:98:b6:fe:d2:6f:a3:0e:f1:97:10:22:28:43:48:55: 81:2a:7b:f3:5f:51:55:72:03:f9:b4:91:c2:0e:b3:56:e0:ec: c3:a8:06:4f:ed:dc:83:ad:dd:ad:98:58:47:c9:be:f5:75:6f: 95:d7:bf:cf:29:a8:31:27:dc:94:28:16:ee:06:f0:15:d5:80: 12:b6:eb:10:b5:eb:2d:e4:13:33:bc:c7:6b:39:96:17:64:0a: 84:44:dc:00:55:0d:8f:af:86:4e:0b:5a:3f:88:f6:aa:8a:ea: 42:33:c4:f2:7d:a9:ae:ff:9a:c6:60:83:5c:1b:ed:c7:55:ee: b5:47:2c:94:ba:17:7b:a2:23:92:cd:d7:6f:ca:61:3a:ca:87: ab:4b:8e:2d:38:a0:a2:ac:57:c0:27:6e:4c:ab:4d:40:bd:28: 68:f7:01:cb:38:df:fd:4f:f9:30:27:30:79:6f:7d:89:49:18: 31:48:6b:d3:2d:64:32:43:15:76:81:6a:91:a8:92:77:20:9b: 0a:df:bf:2d:a0:82:2f:75:b3:4b:39:85:cd:68:c1:7a:b5:dc: a6:1e:ef:96:b6:4f:1f:0b:4e:6c:4d:b9:58:84:a0:68:20:ca: 64:a1:1b:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNkD0jq3uF+eAUTRCF870zDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NzNkODQ5YjdkNTA0NzM3NmQ1N2U2Zjc5NmYwMDE4Yjcw YjQ1MDYwHhcNMjQxMTI1MTYwMjIzWhcNMjQxMTI2MTYwMjIzWjAzMTEwLwYDVQQD EygyYzVjMTE0ZmY2YjRiYTI4NTU3Y2U0M2JlNDJjZGNhYTYzY2RiZTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJJJMWwK+hg+J8dSxpK0kwymai7r Qj7EFm9G5Kb7N4Z9slmvMXUNc08jUmbcOCEQyiDlyNwpBV+fh4D/0I2RLz4f343o fduA/7HVJ++iWop+jgAmEhmcSG/ZL4a3lULQwfCQ4naNjhFsTrHbiu0gsZwybFMF UTw+80Q45o3AG6BNzK4/uFbeSDaokFUvk2LoJnArXSDQaUhof7Jpje2keBTovfjW Y3Mx8lREdKadNLCQSXITLTgmXoVHIFRQnXQ/QjTj0RmdlBPh/BYnAppyfIBliLxl Djfad+Zzv5nyU/JPCcg63QbgJH6mxFhUEaQrlna3XynuTQCxWO6Kb8FKkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCxcEU/2tLooVXzkO+Qs3Kpjzb5lMB8GA1UdIwQY MBaAFNZz2Em31QRzdtV+b3lvABi3C0UGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgt OGVlYjc1N2NmNTQ1LzEvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgtOGVlYjc1N2NmNTQ1 LzEvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr8b+NfTg kWCFRV/aymVFsX1Whe5CmLb+0m+jDvGXECIoQ0hVgSp7819RVXID+bSRwg6zVuDs w6gGT+3cg63drZhYR8m+9XVvlde/zymoMSfclCgW7gbwFdWAErbrELXrLeQTM7zH azmWF2QKhETcAFUNj6+GTgtaP4j2qorqQjPE8n2prv+axmCDXBvtx1XutUcslLoX e6Ijks3Xb8phOsqHq0uOLTigoqxXwCduTKtNQL0oaPcByzjf/U/5MCcweW99iUkY MUhr0y1kMkMVdoFqkaiSdyCbCt+/LaCCL3WzSzmFzWjBerXcph7vlrZPHwtObE25 WISgaCDKZKEbVw== -----END CERTIFICATE-----Generated at Mon Nov 25 19:37:36 2024 by rpki-client on console-ams.rpki-client.org