$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft File: 6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft (raw, json) Hash identifier: rShnXcGtd/F0FO5AmNFYbRBaDz50ylPmHuJ5+/nmnIA= Subject key identifier: CC:AB:B1:4E:97:91:73:99:3D:19:98:37:40:1C:E3:54:7C:61:34:8E Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3 Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3 Certificate serial: 01935207AA70FFD348BD7C001AF09B02685B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft Manifest number: 138E Signing time: Fri 22 Nov 2024 04:00:54 +0000 Manifest this update: Fri 22 Nov 2024 04:00:54 +0000 Manifest next update: Sat 23 Nov 2024 04:00:54 +0000 Files and hashes: 1: 1-bnIjhaSQ7E1q7jxc6bxA-QJIg0.roa (hash: CmkxEJqXfv/lXNyw9ylACyJrOR1mG09OzcXUlESsIaM=) 2: 3_A2__qbd1ZaH227vd1hu0VtaBI.roa (hash: gMnn2be33qnp7WN4fSgS1C5Hgdu4DWrSK7M5cqbWQpY=) 3: 4A02ozJJTsvpsFG_Q4Ob91VfUuw.roa (hash: ZqJmPBB4fDThliTZFs+y0JdBAKAYnenl+zyFP3XCD5c=) 4: 6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl (hash: 52FwTz+WNmxy3a36YuKvFpW2RjbXS8qDjVNFIbT2yrU=) 5: 8BGJXe8toCOqvw-tyiL0QX3k5zE.roa (hash: w6F7zk5Lq8Idel2STI+7xWWeabGvhkZWCTmTED5lIT0=) 6: 8fhC5tkIAIg1YlAM_0mY3z4c6rc.roa (hash: zx1cDU/JXMXQA/a9UjAV2CsrXChrZOJD/EGV8bweIIo=) 7: CQcSmsbasRrqtIm9hGYbVGdXB-U.roa (hash: FC1/g9bPSRuS+2q+PCte4hOc3bHwwYUMhTNiAk72AYs=) 8: G3vt7vZ2hGa_zEnowAwyVUpVWeU.roa (hash: pTgWsW4z5yVH8AEDXAGgSywO7DjeKCj9szyRJaA6XfU=) 9: G8RmS1irjyOQ_R_OfQrQZD1RRW8.roa (hash: xYM/g2dwTuuUUvfrLdHY56hSNs/5sAL333GU93nxbqA=) 10: L3vYaHt-JMwUyuDSnZF6MARkTgY.roa (hash: J3D6Eci2SgB/PEaq9mdT0nurOJlW7uOOMKfldvlNzsY=) 11: MGFHhAlbBZjtxgEqOVS-x23yPNY.roa (hash: J9QB5ZjhT9XXwhx/EOES2P6JU4Nh4RP6Rmn8RfkEwNs=) 12: T_o0IAswKPwE52TyswMIu64IhT0.roa (hash: TWCPQ7RH5F7DsZ48NeYnRq8IfFgToEzE4Mqi/ek6HNE=) 13: WMIivNMDYm_GHcj3Y6Bl-1A3TT4.roa (hash: 6DPLbh8Rds7/7D/GQsw45T/Dqv3U52k1rGDjHP88Hz8=) 14: Y6Frgb86jilSF-PLpUtOe0SUWx8.roa (hash: nNj1h8pX9W3qBMOXDk+6yHrUES9MQE/7o8xn8aDGgcQ=) 15: bYmB2DxHDKjmzpHlGM1HdzTzH6k.roa (hash: rtOYfi76pX8hvn8UbFMrfOfKcNQgvWXIjROPXI6kJVc=) 16: dJJsWbcTf29TxL4C1QDXdgVGi6g.roa (hash: QTir2y2zkatQ++kvz8SfyukKFyoob7zYavjJkFZ3x4Y=) 17: diZhoHJwvSDvOlHIyHrc8k046Jc.roa (hash: n+aOmPp6mwEMRDH1NS8XcKY3QoDe94b32HT2FU56mas=) 18: elwm09BwP1VPEnes7-mlZaInm5g.roa (hash: tRmtrJaLjPsl/5qwW8pQTJHIJfMPFr6f7m/2QZBIxu0=) 19: fKa2pPEwgWubyIepWNsrourrtUA.roa (hash: 5JFaayud5MuD4+1U6LBeHYpEPFV1xUEJqt2WbrDpVkc=) 20: fsUSecMjEz5QM86rhQMI9sZTclg.roa (hash: WMQcW1+Jvg3OzOTTnSx4QhVNCjyK3WVGt1CBTK+pQCw=) 21: k5RfzPFOZIBNR-Mmgbv_FpUDlRg.roa (hash: dSc+LD4lic2d6hfxUILtUDk97FSxhMrp/VVLwZcXDXQ=) 22: lU0XgAvF1MXdvrqd1avo64xeBs0.roa (hash: COjkGuJIEP2tiqN69/pKoxWcefpsc6CHjzKD0d6VOQE=) 23: owGgLm2II_wyrH50PjYKYl9oQOs.roa (hash: /LLWy8ISz0ohbQeD3TTONBJTE8/Gcj+akKknKqYmbzg=) 24: rZvM614fqocxjgYlUdRuZhE2Uwk.roa (hash: SyTIsvvdpbAWfT+bLFlKn6lRswrgOmeOd5qt30AjLaY=) 25: z7O5CsRGU2CfMtpzSdu18ikUgGs.roa (hash: fABS3pes9UlijsUnbPUeDLJFOyoEX8Q+Af8jjaknMj4=) 26: zatuypQvthJHhNCBmhzb6Q_JHCA.roa (hash: 4rM8/gabJYA7ijP+NBTYP2ide8/3d/6yreUeVAc/3KE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 03:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:52:07:aa:70:ff:d3:48:bd:7c:00:1a:f0:9b:02:68:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3 Validity Not Before: Nov 22 04:00:54 2024 GMT Not After : Nov 23 04:00:54 2024 GMT Subject: CN=ccabb14e979173993d199837401ce3547c61348e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:be:70:18:7e:24:80:b8:ff:49:ed:41:55:63: a7:4f:23:52:51:4b:f3:71:cd:f0:87:eb:b8:1e:05: 32:4f:d4:26:29:19:c8:88:b0:27:3b:86:20:a6:d1: 5e:7e:54:71:9d:f0:8b:0f:31:2a:b7:75:7d:76:af: bf:51:36:96:54:cd:d6:13:d0:5a:fe:89:5a:a9:5b: 9f:5b:78:4f:fe:e5:f4:67:48:c5:3f:77:3b:7c:d5: 86:95:a2:55:ff:2f:6c:c6:dc:08:bd:34:38:ae:30: 6a:3d:ac:48:43:59:c4:ab:1d:01:fb:d5:5b:73:72: cf:e9:dc:a9:4f:02:5e:14:a0:0a:82:1b:98:26:b8: bc:74:83:19:ea:81:ba:6f:91:9f:36:7e:09:87:a6: 8c:e3:a2:78:f6:d6:be:00:16:e6:f3:26:8f:2b:7d: 18:83:a1:65:a5:f6:db:da:88:7b:bf:e3:6f:cd:2e: 24:1c:2a:ff:58:44:5c:1f:07:88:78:7b:7e:9e:fe: 3e:a5:8b:ed:ac:25:3d:7d:2b:6d:82:43:8a:c7:f5: cc:65:f6:df:1c:be:fd:9b:ec:f8:fd:83:67:fe:16: c7:07:b6:bb:7e:36:97:a4:a2:4a:9b:5f:46:1a:54: 18:3c:ef:39:24:0f:fa:c5:96:38:2e:23:b4:04:25: 6f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:AB:B1:4E:97:91:73:99:3D:19:98:37:40:1C:E3:54:7C:61:34:8E X509v3 Authority Key Identifier: keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:5c:91:87:bd:43:b7:9d:ca:31:5e:69:9a:b5:10:dd:c3:2f: d7:75:8a:86:52:1f:54:be:62:a5:a3:86:0a:7e:2f:01:8b:d2: b3:89:2f:3d:9e:8a:cc:67:0a:61:79:54:9b:6c:69:98:9c:e9: 66:c8:ca:9d:1a:55:e3:7a:ed:fa:75:0e:f2:4d:d0:2c:16:8f: 37:2a:a8:a2:d4:09:e7:df:d1:bd:a4:ee:01:a9:7d:27:1a:a7: f2:71:d0:9a:c1:5e:90:2c:e7:2d:1b:ff:64:35:6c:07:4f:f9: bc:d9:a8:17:96:6e:15:82:d5:45:79:64:2b:43:95:79:76:29: 15:26:52:04:3e:2e:46:0f:a4:db:6b:93:de:49:25:19:9a:ac: 3e:57:36:1b:30:c6:ed:ca:7a:e0:b8:1c:2a:2e:db:5d:77:84: fd:79:9a:82:4e:4d:4b:f5:10:1a:ff:89:1e:5c:03:4f:e5:d5: 19:76:f4:15:43:56:15:87:c8:a2:ef:93:a4:4a:a3:ee:ab:2d: 6f:cb:e6:eb:31:f6:f0:f6:a3:9b:e8:ea:d0:bc:c5:30:7f:1c: 80:4d:d7:78:e1:23:86:93:e6:22:4b:69:f4:16:d0:e7:7f:89: 90:5a:37:7e:3e:38:dd:d6:2a:8a:ca:b4:f1:87:d6:37:79:1e: fc:12:e1:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNSB6pw/9NIvXwAGvCbAmhbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViZWM5MDMwYzcwYTNkNDE5MmQ1OWMyOGRjYzhkNTQ3Njk0 MzQwYjMwHhcNMjQxMTIyMDQwMDU0WhcNMjQxMTIzMDQwMDU0WjAzMTEwLwYDVQQD EyhjY2FiYjE0ZTk3OTE3Mzk5M2QxOTk4Mzc0MDFjZTM1NDdjNjEzNDhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuL5wGH4kgLj/Se1BVWOnTyNSUUvz cc3wh+u4HgUyT9QmKRnIiLAnO4YgptFeflRxnfCLDzEqt3V9dq+/UTaWVM3WE9Ba /olaqVufW3hP/uX0Z0jFP3c7fNWGlaJV/y9sxtwIvTQ4rjBqPaxIQ1nEqx0B+9Vb c3LP6dypTwJeFKAKghuYJri8dIMZ6oG6b5GfNn4Jh6aM46J49ta+ABbm8yaPK30Y g6Flpfbb2oh7v+NvzS4kHCr/WERcHweIeHt+nv4+pYvtrCU9fSttgkOKx/XMZfbf HL79m+z4/YNn/hbHB7a7fjaXpKJKm19GGlQYPO85JA/6xZY4LiO0BCVvMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMyrsU6XkXOZPRmYN0Ac41R8YTSOMB8GA1UdIwQY MBaAFOvskDDHCj1BktWcKNzI1UdpQ0CzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQt NGE2Zjg2ODMyNjVjLzEvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQtNGE2Zjg2ODMyNjVj LzEvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeFyRh71D t53KMV5pmrUQ3cMv13WKhlIfVL5ipaOGCn4vAYvSs4kvPZ6KzGcKYXlUm2xpmJzp ZsjKnRpV43rt+nUO8k3QLBaPNyqootQJ59/RvaTuAal9Jxqn8nHQmsFekCznLRv/ ZDVsB0/5vNmoF5ZuFYLVRXlkK0OVeXYpFSZSBD4uRg+k22uT3kklGZqsPlc2GzDG 7cp64LgcKi7bXXeE/Xmagk5NS/UQGv+JHlwDT+XVGXb0FUNWFYfIou+TpEqj7qst b8vm6zH28Pajm+jq0LzFMH8cgE3XeOEjhpPmIktp9BbQ53+JkFo3fj443dYqisq0 8YfWN3ke/BLhYQ== -----END CERTIFICATE-----Generated at Fri Nov 22 10:03:34 2024 by rpki-client on console-ams.rpki-client.org