$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft File: W1JjSi6wP4VlteM9wrn0kEH3z7A.mft (raw, json) Hash identifier: kdvdppqMx5w1LI0jUvX5iXxual7UD/X0kw4Q+bmBkM8= Subject key identifier: 35:D9:64:B6:14:94:AE:AA:33:F3:29:55:68:C0:4B:CF:C7:DC:73:DC Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Certificate serial: 01935388009F9086900A122BC04137519FFF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft Manifest number: 138E Signing time: Fri 22 Nov 2024 11:00:42 +0000 Manifest this update: Fri 22 Nov 2024 11:00:42 +0000 Manifest next update: Sat 23 Nov 2024 11:00:42 +0000 Files and hashes: 1: BXDe_Az_ihUHdG_dhks3640Kmiw.roa (hash: SrSdiisioBvyKKXREmeKmGHqpKkEj2kdd9r1s4N6/yI=) 2: DCPnLNmVUVIC8Virb7CzCbX7bTA.roa (hash: poC0njw2gGFdjJkWV4AUTcCNKFmJRb3ZqUq3Z4DXkzA=) 3: EinaYUKdL9Pfswka9B_vt5rcZPo.roa (hash: cIzqSPwD+RaXxLmQDlYnukjZZNN6P/pymXkxHSth8Kg=) 4: GxK70MZxLYx8qXLUPuipKdF6AD4.roa (hash: YnqugVgTD4pnamRm/fSWmHvH92SK1OGc52L7IowKS14=) 5: HLaLnUoZDsAxT0J0mMSNf6xCwS4.roa (hash: TThjJU9AhEkDmXqPhkv0wm16qiM4exiODsKLEGlw9A8=) 6: Jg_o77Wkgf0eDRk7GQyovBKyA_M.roa (hash: 2HFwxti9mhd5XNesoQ10OCFzKlSSqRHZSMdDZsUMLKs=) 7: Jt9b3fZfT_CLq9TZmbcgob67QK8.roa (hash: Glahka348WvApywlwyfNy/D4YX/eX7UcrB1nQBCBm90=) 8: K9WgGc9u_fHigoKJQQfMB9Plov8.roa (hash: cwMavgSSRVxQWBMDMJ29BWIEKvJROt+BH/RkI/tPbOE=) 9: Nw-NS4F_D_Co6zRIbVPlMWKqe0s.roa (hash: Md2NDQJ6IRg63Vm7cwkKZTnyIu0FgZXHJyZWqiE67uw=) 10: Qg1pjyJeDihNmhSniN58UqwOhRA.roa (hash: NRosJANV6haYkvmzAyilEuXCkhp9Cegc8VBD1jurSg8=) 11: W1JjSi6wP4VlteM9wrn0kEH3z7A.crl (hash: QNKF69Mp9sUaX8666T+yrUN8RVbW1iJ6GvLAdLNCojc=) 12: _eOkdTh5AZb_4-tj0jYibkxj6xI.roa (hash: j7JG/NKL/ofOkXGMCJPyR/L24k8qbMqX+dxFy1+5eto=) 13: hQfxCNo0M9zd9zv2AmYQGGTCLIQ.roa (hash: MTMl9kbiED2Rbg+rkBpLr1aqe+2CEP33i9wRdR2hewE=) 14: nJzYieTbgieqMc8WKD2qAGo3yTI.roa (hash: RILWbBILVUrL9jEVQjaketReijK2z8WG00dK7TaSGXw=) 15: n_SfCSn85vzjJN30OyRYin2zkog.roa (hash: MPpJrQbun1JSWCIGNzebQh5HpGoD8O8CLt28Ayev8L8=) 16: tmuaHvhAnvCikWKokNa5tHYSdzc.roa (hash: pjLWo0wpEzGpIZFPgcSv47yOWZTxlT82m5AHj3pypCg=) 17: wToPZdoXJWHlnb1OKiu-CqfEPbw.roa (hash: 5MdqQwCOvFiQ4m5jniXB6QEWkAi2G7KL/9y/28JbRRQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 11:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:53:88:00:9f:90:86:90:0a:12:2b:c0:41:37:51:9f:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Validity Not Before: Nov 22 11:00:42 2024 GMT Not After : Nov 23 11:00:42 2024 GMT Subject: CN=35d964b61494aeaa33f3295568c04bcfc7dc73dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:25:da:5b:b4:5e:41:a6:da:32:43:56:30:8a: 3a:57:83:4a:42:b2:47:56:a9:a3:38:d5:42:d1:f1: 91:5c:fe:99:79:27:3b:54:d2:ae:61:a1:94:da:46: 3c:93:6c:99:ac:4b:d0:7c:f1:4b:05:47:ee:4e:3e: 91:5b:4d:3f:f4:b1:c3:15:d3:6c:4a:15:6a:ed:7a: 0d:04:45:7e:02:84:63:15:20:46:9e:c1:f5:c5:f4: 29:e1:4c:c0:8d:0e:54:72:d6:be:80:14:55:da:42: 82:2e:4f:d7:8b:df:4b:6b:7b:f0:7b:ab:97:af:49: ea:8c:20:33:25:f7:c3:ad:bc:c4:af:11:40:42:44: 01:d0:7c:cc:34:7f:f3:5a:c1:52:07:27:49:1e:e8: dd:20:cd:79:89:13:cd:f5:1c:48:a4:53:88:86:16: af:e8:f7:62:3b:c3:4e:32:b9:94:1c:79:9f:df:b4: 07:70:26:83:f5:50:b9:f4:8f:fb:97:dd:80:6f:3c: d2:47:28:4a:89:d7:eb:ac:df:47:17:4d:93:54:66: e6:ae:2e:08:51:26:11:ef:ec:94:52:ae:d4:8e:d4: 2f:44:8e:6f:65:4a:b5:41:e1:20:09:77:b7:a5:62: 88:2b:06:47:f5:88:8a:fa:e0:5c:f6:ed:a0:b4:9b: 56:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:D9:64:B6:14:94:AE:AA:33:F3:29:55:68:C0:4B:CF:C7:DC:73:DC X509v3 Authority Key Identifier: keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:17:d7:39:20:f3:fc:41:21:f6:08:13:ab:22:29:14:ea:bf: 4d:6d:8e:f8:c0:96:3e:43:81:98:2a:c9:fe:85:b6:53:df:57: a5:47:c4:1e:f3:83:ef:bc:97:3b:32:92:6f:e5:dd:9e:64:83: be:c1:b6:f0:61:fc:5a:0d:eb:86:ba:b5:a9:75:b2:65:12:4d: 18:6b:4f:13:c6:85:7f:ad:b6:63:58:94:e5:10:bf:53:eb:c0: a4:54:49:5b:79:07:e7:29:2a:30:30:2d:48:72:61:0c:cb:46: c4:c6:df:b3:83:0d:db:ce:ec:e3:a1:c0:d5:f9:1c:27:70:bd: 58:e3:3d:9f:42:0b:70:d3:2a:4e:0f:17:b0:2f:7c:2d:b2:11: 86:d0:22:e0:cb:7d:22:30:c7:cb:b6:cb:44:f8:0b:e9:ee:0a: 80:9d:8b:78:7f:18:f0:60:6d:61:50:b7:07:9c:e4:bc:4e:b5: 9a:bd:cf:8d:6b:35:d8:9a:ce:6e:3a:8d:f6:3d:8b:9d:65:75: 6b:95:67:0d:7e:80:1a:24:37:20:c5:b3:54:90:b0:32:78:6c: bd:d3:ca:9e:22:b8:0f:0e:20:c1:84:65:c0:60:04:e0:83:60: a7:24:84:c9:00:05:cb:46:ba:d6:57:8d:cc:40:bf:52:f3:84: 39:12:45:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNTiACfkIaQChIrwEE3UZ//MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNTI2MzRhMmViMDNmODU2NWI1ZTMzZGMyYjlmNDkwNDFm N2NmYjAwHhcNMjQxMTIyMTEwMDQyWhcNMjQxMTIzMTEwMDQyWjAzMTEwLwYDVQQD EygzNWQ5NjRiNjE0OTRhZWFhMzNmMzI5NTU2OGMwNGJjZmM3ZGM3M2RjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiXaW7ReQabaMkNWMIo6V4NKQrJH VqmjONVC0fGRXP6ZeSc7VNKuYaGU2kY8k2yZrEvQfPFLBUfuTj6RW00/9LHDFdNs ShVq7XoNBEV+AoRjFSBGnsH1xfQp4UzAjQ5Ucta+gBRV2kKCLk/Xi99La3vwe6uX r0nqjCAzJffDrbzErxFAQkQB0HzMNH/zWsFSBydJHujdIM15iRPN9RxIpFOIhhav 6PdiO8NOMrmUHHmf37QHcCaD9VC59I/7l92AbzzSRyhKidfrrN9HF02TVGbmri4I USYR7+yUUq7UjtQvRI5vZUq1QeEgCXe3pWKIKwZH9YiK+uBc9u2gtJtWxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDXZZLYUlK6qM/MpVWjAS8/H3HPcMB8GA1UdIwQY MBaAFFtSY0ousD+FZbXjPcK59JBB98+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUt ZGM2NTU0ZmQxMjM1LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUtZGM2NTU0ZmQxMjM1 LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAahfXOSDz /EEh9ggTqyIpFOq/TW2O+MCWPkOBmCrJ/oW2U99XpUfEHvOD77yXOzKSb+XdnmSD vsG28GH8Wg3rhrq1qXWyZRJNGGtPE8aFf622Y1iU5RC/U+vApFRJW3kH5ykqMDAt SHJhDMtGxMbfs4MN287s46HA1fkcJ3C9WOM9n0ILcNMqTg8XsC98LbIRhtAi4Mt9 IjDHy7bLRPgL6e4KgJ2LeH8Y8GBtYVC3B5zkvE61mr3PjWs12JrObjqN9j2LnWV1 a5VnDX6AGiQ3IMWzVJCwMnhsvdPKniK4Dw4gwYRlwGAE4INgpySEyQAFy0a61leN zEC/UvOEORJFdw== -----END CERTIFICATE-----Generated at Fri Nov 22 18:22:36 2024 by rpki-client on console-fra.rpki-client.org