$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft File: iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft (raw, json) Hash identifier: RlZq7R5f8m0a6j8Mnd1KRVe5kyQ/Psi+IB0XwmzjWws= Subject key identifier: 69:A2:9B:35:C8:FA:B0:FA:0E:05:0E:29:57:4D:01:17:5F:A2:3B:EE Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045 Certificate serial: 019351D0BBDD58AF372830D54B634A32C07E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft Manifest number: 138E Signing time: Fri 22 Nov 2024 03:00:54 +0000 Manifest this update: Fri 22 Nov 2024 03:00:54 +0000 Manifest next update: Sat 23 Nov 2024 03:00:54 +0000 Files and hashes: 1: 1-KEulmNZtWvcyDhap83s-wjfIM8.roa (hash: dfGzd1vhtQLVPFyKNlYVxHdZiPz5oxIB8lrJfzz5P6A=) 2: 3QJbmr0R1bBjoRiwJnUTCZzSOHg.roa (hash: ETdBwgjb1qIsUB+xFtN554lDgeb3GQYuJvYScri04MY=) 3: 7Ba72zDtXAybzRm2KOKEbGVRRww.roa (hash: tMQI4Y9Bo17Yqk731Ar9qtK/Ruk6JfH+hTGXpdeXSyo=) 4: 9KnfPBD7j9DLqAKLewP-5J5L1r8.roa (hash: zNuh2xHXH96+Kk9oi9AyyPCv4DU+/4I6SMedEqqFjLg=) 5: FqBDVoNMuqA-RZdAZz68-1JcKlU.roa (hash: ERMgNkQ3eJdCns7eC1EvPixVR/O04k8TdPWXvsS/MJk=) 6: JlNM9w7-91PZB8Hap_TDo4JUCRk.roa (hash: idWr2q/dqzgCpmaaitmmr7sJLI5Yo8fsNgEArKmJj+E=) 7: KjuiUgiTfYUxLjF36WCXBhKk16Q.roa (hash: sD2NiykZfxS0saADsdBm/VuF/P0Ss3ZVwp0/V4t3aCs=) 8: ML9DXyMJzByBK1y6IcZs6ZLmnG0.roa (hash: Fsnp61B3QdHqx9yS2al3cTcIoC5jnTNan0SzBCxUF4w=) 9: SkQQoP1m2vbJLPtDcaEWDEDG_AQ.roa (hash: N6TOkYUshwFPgbthVHmFtkaMydRZ8lj88eOUcXCtd18=) 10: U_GtMP2x_0G5oZGJQBGEdVDGjsc.roa (hash: 5Dh5I9/j3YNcyVSmsZ0m9ECaIGXYXbiI60TYaDDzlbQ=) 11: aNdqF8ehhvqsHMW-wJfvCLG64kQ.roa (hash: SdDy/dqbLF8eh7ans6HU47ZD9DyrxiFa8lMboopKE3k=) 12: bM1xaStBKvXEaTchnSWr5n6B7MQ.roa (hash: kMlcVNFsxi8aSTmgdGVNY3FH/waBXSAZsr90I2onw2k=) 13: cBP8zn9MM65dNrPCaBUZYMycZIA.roa (hash: cjVJfPYrl8mN5o5FZ7oIbqlY3veyPBe88RGoKDW5jsU=) 14: gTkJvjy9A4c53WcF3c4oBPT0rgA.roa (hash: E8UfrAtMOUdVQNGSivMk3uCV21A9a6oA3BS+kByXpnI=) 15: hJGINXpWC_rl5K0iacpe-TSRZTI.roa (hash: 80nkDC/Whe/aBGEl/t7tIeoqXxL0f1cDoLohViL589Q=) 16: iC9ezub5GESJYOPbA-aJUoYdyDk.roa (hash: XTbvjRrxLs1HohPfOI6DUN6vMsqi1ZfN+toBrfSX1iU=) 17: iLPO8p9kluTHAmYdReR215Z0eGY.roa (hash: RTAs1x6vSxj06of7nM7ALTE9p/gCBlf+WIB7RDUTqVY=) 18: iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl (hash: XJYSSp95SyExkOXKruL3y4XE3ntHiL/rc4SoVvH73F4=) 19: rRmUa8Glw6004jIOE7e1nUddFhM.roa (hash: nG7jcc2osfxL/77c2w5BV8UAFT6wGMsou1EVsN5VkGU=) 20: t-stjlWJNWZujqboj1vmlnZooto.roa (hash: oxtd6VJpZy5e1+rCbkaKVYDVfzMnieSurl6oorDyryI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 23:17:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:51:d0:bb:dd:58:af:37:28:30:d5:4b:63:4a:32:c0:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045 Validity Not Before: Nov 22 03:00:54 2024 GMT Not After : Nov 23 03:00:54 2024 GMT Subject: CN=69a29b35c8fab0fa0e050e29574d01175fa23bee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:52:31:ab:44:b3:3b:48:2a:33:44:2b:65:0b: 23:74:dc:83:58:56:4b:5a:a7:38:8d:e6:29:b6:e9: e2:ba:33:56:79:c5:e2:95:93:52:bd:04:75:83:e3: ae:26:d5:60:d4:23:19:65:44:13:84:28:78:a1:22: 30:1a:b0:59:59:4a:b3:77:32:a3:c4:af:ab:0f:fc: 3a:92:3a:b5:9a:41:d8:7f:44:c7:3b:0c:86:72:27: 42:02:33:09:56:26:cd:16:45:d2:af:14:a5:62:d2: db:8b:73:a2:2a:ec:0e:a1:0e:ba:d4:e0:23:6f:47: 64:e9:95:97:67:04:cc:dc:0a:16:0e:b6:12:d1:30: 4d:1a:28:82:47:36:81:ae:b3:f2:e6:49:cb:d7:6c: 92:35:8f:69:10:86:2d:d9:a3:89:14:2b:3d:82:54: a7:c1:66:78:ce:2f:75:6c:46:3f:97:14:8b:f0:0e: 24:95:c1:5d:79:3b:06:09:d8:68:07:13:cc:eb:64: 79:b7:25:29:fe:77:5c:03:c5:6c:48:02:91:c4:8a: c8:61:8a:35:29:b6:f4:5e:6b:36:ee:7b:90:89:b8: e5:69:3f:5c:bc:75:6d:0e:cd:54:8a:ec:1c:f6:e9: 1b:86:99:e6:5f:57:7d:bd:f2:5c:9a:5f:a9:a4:f0: 61:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:A2:9B:35:C8:FA:B0:FA:0E:05:0E:29:57:4D:01:17:5F:A2:3B:EE X509v3 Authority Key Identifier: keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:81:7a:65:5b:4a:a7:1d:43:ad:55:db:af:1e:f7:af:0a:80: 1a:07:e9:7b:de:ff:9e:be:79:89:df:e4:b8:a2:db:f9:e1:bd: 7d:d3:6d:b2:6d:02:a2:4c:61:42:5f:9d:16:81:9c:65:72:cd: c2:67:39:31:63:3f:41:fb:1a:cc:23:fb:a0:f6:5d:09:7f:ce: 39:86:39:cb:92:41:0f:5d:c5:92:76:ef:92:f0:ef:78:55:32: 35:eb:96:5f:a8:32:e5:75:75:2c:48:6a:14:d7:3b:5c:b5:93: 9f:52:4f:64:d4:e8:6c:9c:44:d9:70:2d:82:24:8e:99:b6:13: 5c:c3:2e:11:72:9d:18:35:da:25:c6:1c:e5:b3:a4:cc:60:f2: 8e:54:3e:65:95:51:a1:06:aa:f1:06:50:fb:2d:3a:fa:c6:f9: 15:fa:f0:01:b0:15:36:bf:50:b2:9c:6d:f2:48:a1:b3:8f:bb: 90:fa:b4:12:7d:c5:b2:09:ea:2f:4a:0f:08:7e:4c:ed:fc:55: 3e:35:79:da:50:7e:92:d1:e0:57:7b:6f:39:7c:9e:b6:39:51: ee:1e:56:2e:47:bf:b4:87:6e:48:d4:c2:10:d0:d6:46:69:5d: 0e:40:f2:a4:ad:e1:d4:43:f9:90:ae:92:af:25:05:de:ea:cb: 8e:c9:af:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNR0LvdWK83KDDVS2NKMsB+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5MDU2ZmE5NjI1YjZjODc0MDQyNjdjNmRjMjE5OTI0YWMx NjAwNDUwHhcNMjQxMTIyMDMwMDU0WhcNMjQxMTIzMDMwMDU0WjAzMTEwLwYDVQQD Eyg2OWEyOWIzNWM4ZmFiMGZhMGUwNTBlMjk1NzRkMDExNzVmYTIzYmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVIxq0SzO0gqM0QrZQsjdNyDWFZL Wqc4jeYptuniujNWecXilZNSvQR1g+OuJtVg1CMZZUQThCh4oSIwGrBZWUqzdzKj xK+rD/w6kjq1mkHYf0THOwyGcidCAjMJVibNFkXSrxSlYtLbi3OiKuwOoQ661OAj b0dk6ZWXZwTM3AoWDrYS0TBNGiiCRzaBrrPy5knL12ySNY9pEIYt2aOJFCs9glSn wWZ4zi91bEY/lxSL8A4klcFdeTsGCdhoBxPM62R5tyUp/ndcA8VsSAKRxIrIYYo1 Kbb0Xms27nuQibjlaT9cvHVtDs1Uiuwc9ukbhpnmX1d9vfJcml+ppPBh/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGmimzXI+rD6DgUOKVdNARdfojvuMB8GA1UdIwQY MBaAFIkFb6liW2yHQEJnxtwhmSSsFgBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQt NTE5MjAzNzMzNTNjLzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQtNTE5MjAzNzMzNTNj LzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZoF6ZVtK px1DrVXbrx73rwqAGgfpe97/nr55id/kuKLb+eG9fdNtsm0CokxhQl+dFoGcZXLN wmc5MWM/QfsazCP7oPZdCX/OOYY5y5JBD13FknbvkvDveFUyNeuWX6gy5XV1LEhq FNc7XLWTn1JPZNTobJxE2XAtgiSOmbYTXMMuEXKdGDXaJcYc5bOkzGDyjlQ+ZZVR oQaq8QZQ+y06+sb5FfrwAbAVNr9Qspxt8kihs4+7kPq0En3FsgnqL0oPCH5M7fxV PjV52lB+ktHgV3tvOXyetjlR7h5WLke/tIduSNTCENDWRmldDkDypK3h1EP5kK6S ryUF3urLjsmv3Q== -----END CERTIFICATE-----Generated at Fri Nov 22 04:35:35 2024 by rpki-client on console-fra.rpki-client.org