$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft File: 3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft (raw, json) Hash identifier: FZ5ApBvg41mkGaVjCDGBazhs7mnle4geezCAiFr34Ss= Subject key identifier: 1E:6C:52:43:9D:4B:4A:B0:41:AC:6F:D1:DE:88:C2:C0:8A:F9:87:BE Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89 Certificate issuer: /CN=dcef58d4cfa35543f8488a2756e6924e647b4589 Certificate serial: 0193512BA1E46A6BC7FEB2E475A047C70B2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft Manifest number: 12DD Signing time: Fri 22 Nov 2024 00:00:34 +0000 Manifest this update: Fri 22 Nov 2024 00:00:34 +0000 Manifest next update: Sat 23 Nov 2024 00:00:34 +0000 Files and hashes: 1: 1-exKtRbbKLh9NGtBizbU6Qs91nY.roa (hash: lpGUGnwnf3JuDnYve72WAVx+p0Jo5z0gOwnEBvUU/as=) 2: 3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl (hash: wVAvJb05vDHgVrAMZQhBhffQx2Up5hAtAWkoW1u7M7A=) 3: 3SNzzp25ZDXyL5JEejs_k3zPRnU.roa (hash: bp44VlU0QQEDzxKOxYiSYreM6WJnPiX/OU5ugONIzgA=) 4: 4rJs4liSligk4htLUPChvwGnHfg.roa (hash: 7OtAUFDZorntUBWkWww6j0LJFLBFLaPAZNBrcOy7XnI=) 5: 6u6RLy_5PqEmcfjyrMHqhyJMEGA.roa (hash: exsWcdwGamrDnKH5ao2Y8Nsq4yGhf95bx0Moy1eIW6s=) 6: B8XNd75SwcAXU7MwOR8hDEGoo4w.roa (hash: qOivhZQLosqYBqxnN+1fp5afWYko45j7LbvWPk4BinM=) 7: Ef_4OzhB1QnH2BA6C-mxdkXeH3M.roa (hash: TB3VjbZpIJsuv9FhIX1yeBGVeGKFcfJ5Vxzsd1abI3A=) 8: EnkUpKrN79gl4l8kn3MzKuW5R5E.roa (hash: rgYfyBDjI2oBr/0jQbkr4epb/lAql6S3UKir52D0Iv0=) 9: GzY_tqZQyZA7O-iVYWBPt4-AvO4.roa (hash: Oi6NcZWhtde2pSviJOSgpORMSptYX6avLAFarENKIck=) 10: I2uF5C-7hWT7y3naeNRoK4lfSZk.roa (hash: P2kb7aG2o8w/e4vKcSw9Nx8Tnto1z1ETB1aTnE8yQPA=) 11: JOLykskWxbMXIR7z8ciGpDjkIJQ.roa (hash: C5wqwywL5MveLyH7kQz1JW+lzfUPbdfmHa/3ac96BAE=) 12: KLBs_kVcHuwf9ZBz9PnFQsUNnTo.roa (hash: 6Ao+Ll64ziXh8yXNr11ghqJC3+hOLxIBU5uHnxGV1bA=) 13: LeLpc6dgtZHGeNO0yqAt0uj6fTI.roa (hash: b7rtoZDgwrWnHrFrTCaqrpeLOk5J8VXu02VgBrCWYEQ=) 14: PUWLKLpI6CS2Iw1pI-xhCQLH8dE.roa (hash: /foqgpDSPzPM2Wwk/Uv4jU7kI/LT0huOqCbZtReSxNE=) 15: R1L4RtgPRkaw1v1KJCuXp-AiBNo.roa (hash: nGOHWhbdXLHaJlQDHhswqiqh6P+Ha6dOei1hwUnK0rI=) 16: Sg6p5jxDucyiytdA_BHqhYP26RE.roa (hash: 1CDCKk++UOusosn8rB1u0l+vBhsIumTsE9XqilKvR/c=) 17: UeQOZVLrd6vHXtOWm2LoGJtiGqQ.roa (hash: rycqQdVy6me64GFb0iJRFxTQ5B4G71VLP5RP6AmHVJg=) 18: V1IHpErbztKUndLcBCon-fv-6nc.roa (hash: zy9T5ejXitS6HaQU41xje/kG6hFQ/BfPX2Hwbojd9tM=) 19: bSXXByjX4ABueVmz7_oe4wGlUnc.roa (hash: iwswvOATIevzG17rXtU8Co41yyT6Qu3yisOHfrsjYgI=) 20: fEQuMvgPPuDdrWFgBDXN0z2uT6A.roa (hash: 3CuMLmkwpXx0znmuC/lyJxr7E9Rj6NeTrbBAI1+lj40=) 21: hUerxVxPM-NZ-z12wu9AU-VSS_A.roa (hash: 2YAiuAdoex60BIiou9EAjZwAl4AzCmOUbnRsX9H+uGM=) 22: hwyASXpaMFYiNjgADt25bvnjQus.roa (hash: kTHisCsATnwUnAhW51j6JitWa/bfiANnQlHlOA3PJIY=) 23: jIv-sXNCDkuBlXy7FHmcCYNpARQ.roa (hash: 32v2gdg05ualub/MOuveYgfa8/6L1Zlo30w94Wz1vKs=) 24: kLapSaCszHTkHjj-5D35BnwdX3U.roa (hash: aum+w/zWFNqnp2yXDmIDbNJpry2kTCqoMURv44gS960=) 25: sU35PHBn_2cVSSYPcFpp_LjFi84.roa (hash: r0vwyPC9BULhHpKPcIU4JoMjMWc6rMdWHZuL5fFBp4M=) 26: xDCukfRi9itiHCw-2QNikYDvd8A.roa (hash: +smY2YcoWxf0JA5G5YeReu4zZNG58HkKBlXDf9HM660=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 00:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:51:2b:a1:e4:6a:6b:c7:fe:b2:e4:75:a0:47:c7:0b:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589 Validity Not Before: Nov 22 00:00:34 2024 GMT Not After : Nov 23 00:00:34 2024 GMT Subject: CN=1e6c52439d4b4ab041ac6fd1de88c2c08af987be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:1f:06:97:19:c0:53:cd:5a:af:f4:2b:d7:2b: ca:a0:bd:c5:53:0e:cc:e1:9e:eb:06:10:95:92:2b: 3e:c4:4f:32:db:6c:4b:d5:db:82:7d:37:5a:cb:80: 73:e9:e4:67:9b:3c:01:db:7e:b0:5e:16:e9:4d:c3: 9b:e8:4e:d4:55:af:58:fb:21:b4:77:fc:f2:2e:27: c2:22:3b:da:92:e9:f2:bd:19:a5:b5:3f:bd:25:e0: 8c:cb:3e:dd:40:05:ea:9e:a6:e6:26:74:e7:76:f2: 16:a8:bf:c8:5d:33:62:cf:32:d5:c7:14:6a:ca:db: 29:93:69:39:45:a2:ef:21:7d:e1:7e:d6:29:da:ca: b4:e6:51:6f:07:6a:7a:c6:27:17:fe:02:4c:59:61: d5:69:e8:e9:4b:25:2e:39:70:37:29:e6:47:d4:ef: 77:8b:24:1e:cf:6f:13:b5:1e:65:27:16:33:30:18: 30:80:98:50:27:63:ca:d7:7b:e0:ce:5e:85:42:49: 1b:fa:65:c4:b3:bd:49:44:4e:96:17:b8:6d:5d:1f: 37:50:f9:44:6f:80:b0:e5:fd:88:9b:db:bc:91:35: 0d:cd:f8:8f:36:cd:fa:29:05:ac:6d:9f:cc:8a:5d: 64:c7:8f:92:86:f5:1b:96:df:0c:4b:00:41:6e:d2: 95:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:6C:52:43:9D:4B:4A:B0:41:AC:6F:D1:DE:88:C2:C0:8A:F9:87:BE X509v3 Authority Key Identifier: keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:56:3c:c1:71:94:9b:23:f7:d6:63:ce:e4:aa:0a:f6:2e:c9: bb:7f:81:41:7a:5e:32:7c:4a:fd:28:34:ee:3c:57:59:1f:b0: 8c:4c:f1:8f:69:12:3e:df:2a:b8:bf:84:90:cd:f0:11:f6:93: b8:42:5b:0a:3a:01:21:a6:8c:21:72:7a:02:b9:24:31:16:8d: 6a:84:18:5c:33:b3:7e:6b:24:e2:75:83:02:cf:54:39:b1:17: 6a:d7:b6:84:2a:f0:84:30:ac:3d:ea:74:5e:6b:b5:88:e7:85: 05:1b:b7:11:a2:bf:6d:a7:32:d2:56:8f:07:d7:1c:98:78:df: b5:01:b9:31:3f:73:d1:2c:d4:08:ba:9c:8e:43:e2:3d:97:65: 0b:39:d9:d0:86:27:d3:41:a0:a1:c6:d8:5e:64:99:9e:da:a5: 21:f5:3d:39:93:af:36:d2:3d:e9:6b:4f:d1:11:3e:ea:13:8f: 67:85:18:94:1d:fe:20:27:63:82:59:6d:e0:f5:a8:a8:8f:b8: 1a:2a:c1:37:75:12:66:7a:2e:89:95:ee:42:bb:bf:7c:ab:6b: a9:93:3f:04:5f:31:d3:d7:83:e1:d9:f8:a9:c7:71:54:dc:a1: d6:79:24:dd:bd:04:3d:68:35:5c:0f:d3:d2:1d:5f:44:ee:05: 38:07:3b:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNRK6HkamvH/rLkdaBHxwstMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZWY1OGQ0Y2ZhMzU1NDNmODQ4OGEyNzU2ZTY5MjRlNjQ3 YjQ1ODkwHhcNMjQxMTIyMDAwMDM0WhcNMjQxMTIzMDAwMDM0WjAzMTEwLwYDVQQD EygxZTZjNTI0MzlkNGI0YWIwNDFhYzZmZDFkZTg4YzJjMDhhZjk4N2JlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8h8GlxnAU81ar/Qr1yvKoL3FUw7M 4Z7rBhCVkis+xE8y22xL1duCfTday4Bz6eRnmzwB236wXhbpTcOb6E7UVa9Y+yG0 d/zyLifCIjvakunyvRmltT+9JeCMyz7dQAXqnqbmJnTndvIWqL/IXTNizzLVxxRq ytspk2k5RaLvIX3hftYp2sq05lFvB2p6xicX/gJMWWHVaejpSyUuOXA3KeZH1O93 iyQez28TtR5lJxYzMBgwgJhQJ2PK13vgzl6FQkkb+mXEs71JRE6WF7htXR83UPlE b4Cw5f2Im9u8kTUNzfiPNs36KQWsbZ/Mil1kx4+ShvUblt8MSwBBbtKVJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB5sUkOdS0qwQaxv0d6IwsCK+Ye+MB8GA1UdIwQY MBaAFNzvWNTPo1VD+EiKJ1bmkk5ke0WJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMt MmVjZTA0ZTE4NWMyLzEvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMtMmVjZTA0ZTE4NWMy LzEvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVFY8wXGU myP31mPO5KoK9i7Ju3+BQXpeMnxK/Sg07jxXWR+wjEzxj2kSPt8quL+EkM3wEfaT uEJbCjoBIaaMIXJ6ArkkMRaNaoQYXDOzfmsk4nWDAs9UObEXate2hCrwhDCsPep0 Xmu1iOeFBRu3EaK/bacy0laPB9ccmHjftQG5MT9z0SzUCLqcjkPiPZdlCznZ0IYn 00GgocbYXmSZntqlIfU9OZOvNtI96WtP0RE+6hOPZ4UYlB3+ICdjgllt4PWoqI+4 GirBN3USZnouiZXuQru/fKtrqZM/BF8x09eD4dn4qcdxVNyh1nkk3b0EPWg1XA/T 0h1fRO4FOAc7GQ== -----END CERTIFICATE-----Generated at Fri Nov 22 09:54:37 2024 by rpki-client on console-fra.rpki-client.org