$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft File: F7UEL8INm6sWduCa9_8bpb-trnU.mft (raw, json) Hash identifier: u59Ftf+/SavjSRRd25IyhwtKXUtSydrL2/7kvVkCda0= Subject key identifier: 98:B3:06:A2:43:16:80:DA:9F:4A:2B:32:31:28:66:57:49:E0:28:29 Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75 Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75 Certificate serial: 01935319B116AC66ECDBC0A12CCE4B426030 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft Manifest number: 0CDA Signing time: Fri 22 Nov 2024 09:00:12 +0000 Manifest this update: Fri 22 Nov 2024 09:00:12 +0000 Manifest next update: Sat 23 Nov 2024 09:00:12 +0000 Files and hashes: 1: 7erOOiy1Kz-639fqjRntq0tIdgw.roa (hash: kCOMjLlq9HyJX+BZiqepnviVMaepC+M2166rKXlLJl4=) 2: 9lCaNz-2GZusLAM_lPhdP0SqXFU.roa (hash: AcJFP9Ql5elErgwMcX53O/jDhAn0aOjwoZWJhABWvi8=) 3: DuU1uBwHxDFL5vgUvbCmzhWsThg.roa (hash: s/CUE7C5yLqY6vKrrRTEvcokXoeJkTQZuPuZcZ279rc=) 4: F7UEL8INm6sWduCa9_8bpb-trnU.crl (hash: rBZsz6+zYygBXVjDqmnZX2YBPcF/L5ORl0LIt4FNLxY=) 5: HkcWh0Is3p1QloSPW_5suNLrIp8.roa (hash: jdrcpvYsLK3IYTBJyacL49MpIH7ic53aM/1JfgvTx6g=) 6: WmPQld-coiRvXCf-mGavzR9A3V0.roa (hash: MRZUousPg/dms04xcrQySsRmUHVVCjTxxePwTJf+EjE=) 7: bzRVZzwxJy5dYKFSWsSjSmSpVsE.roa (hash: Dsg6c4WKp0zrzcb4oQ19HmyIZUTzPjHyVURfsWD40SM=) 8: fXast75ukZxIG3MoCUhnQkdl1k8.roa (hash: 1b1YPyy+51NhEm2rU/5vFFBjt4CH6BXQftw72EVLBfk=) 9: g7z1EqpCsBQj3T7AQDwJ4PvrG7w.roa (hash: x5XaIeBMijpV4o4gEqGRwHaw4Ow93GtIRVwZqWw4iao=) 10: gg77wRa0WvEzuM2O73_HQN_8X58.roa (hash: TGyM58KpY178PAJOFEPpx8MLnI4l/n6gIYZxdmUggd4=) 11: huUEZ_XmGpGyzbVMyLMohv0hHgc.roa (hash: /gL1VnivQOaVZO41KNZWzSN35ipJpTx/suf3VVhNxss=) 12: jIvtIZ0CWivOddOI9j3CPDWt3Kk.roa (hash: lbdMciSqJjuSOYLfYqmNlQCsoLoSpkkmbELI9DU6oQw=) 13: sMb5OZgjg89ALeVR1cHVHEvK55E.roa (hash: UGBvMpSjDSDd4iHW9CZiVTwzEwf5zk1T6LnFrFlDUC8=) 14: sxgO5gRtWj4ncCsUAGBKyh9KcOQ.roa (hash: ZHpvHmk9QNAAqDZcVik167UFUKvsPL1GCtylt/NtG2o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 03:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:53:19:b1:16:ac:66:ec:db:c0:a1:2c:ce:4b:42:60:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75 Validity Not Before: Nov 22 09:00:12 2024 GMT Not After : Nov 23 09:00:12 2024 GMT Subject: CN=98b306a2431680da9f4a2b323128665749e02829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ef:9c:29:14:e5:bd:55:29:3f:ca:69:63:33: e6:61:60:97:a5:4e:75:a4:b1:28:01:00:cd:e4:10: e2:8b:42:f7:05:a5:de:4b:1f:d2:c3:ac:da:4d:f6: 78:73:74:9b:a6:fb:46:62:a5:7e:6b:de:1f:b5:3b: 6a:33:d4:0e:06:5e:40:51:12:0e:c4:ea:54:03:24: 6b:7d:33:0f:70:e8:c9:f1:21:e9:86:e9:c4:6a:07: 59:79:50:e1:b6:57:45:ba:52:e8:14:34:32:98:ab: a8:c1:26:3e:cb:b3:4a:ba:b6:bd:4d:e0:b1:9e:a0: 04:82:88:15:de:f0:73:03:8f:60:91:d0:62:69:51: ae:e5:34:f2:13:b7:de:d0:a6:15:bd:41:8c:76:59: e9:b2:b2:cc:df:cd:ef:2c:10:8d:82:df:fd:a2:98: 0d:da:54:b9:a6:a1:b5:50:4f:a0:a4:0e:e4:9e:2d: 32:6a:53:9a:86:47:ca:38:27:f1:bc:45:29:be:8d: f3:b7:d0:ea:92:ea:2a:e6:40:7d:32:2c:24:a6:d8: be:18:39:6f:90:1c:62:0e:54:a8:cf:02:7d:90:6f: 11:4d:98:4c:f8:75:23:59:d2:e5:03:60:ce:99:e6: da:8b:1d:d6:a2:83:66:c2:09:0a:f9:aa:48:7e:55: 3b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:B3:06:A2:43:16:80:DA:9F:4A:2B:32:31:28:66:57:49:E0:28:29 X509v3 Authority Key Identifier: keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:fa:df:cd:2f:80:f0:4b:83:c7:c9:15:af:5c:bd:14:33:49: 45:a8:40:51:14:65:8e:f4:1b:55:3d:a0:09:87:a8:60:36:6f: 1f:ab:07:f3:ea:89:a6:f6:51:86:35:8e:3a:08:4f:de:ef:61: 43:9e:e2:c5:39:26:b1:48:cf:7b:18:65:54:2e:87:0e:2d:84: 73:7a:d8:99:46:c0:81:c4:f0:ef:00:4a:cc:94:4f:68:e7:59: 2d:80:a6:5c:30:a1:ca:e5:cb:95:c0:ed:e6:bf:24:13:38:1f: 05:b5:82:84:38:4a:0e:d3:0d:f9:fb:c8:20:7e:b2:08:ff:0a: 72:74:11:80:23:f8:99:b8:7c:c3:c6:45:d3:ba:9a:3f:e5:b1: 69:b2:8e:33:41:7b:8a:bd:03:64:21:f0:52:71:bd:c9:92:3b: 31:30:d2:99:60:8a:79:03:70:13:96:31:9a:fe:0f:72:78:44: c5:cf:ec:9a:11:0c:48:a3:1d:48:3b:88:ed:d7:1a:62:4c:93: b7:25:9a:32:56:94:50:c6:32:cb:4e:8b:ff:91:3d:87:83:5d: 81:1a:6b:23:5a:9e:4a:c0:c7:cf:39:49:51:6d:77:b2:1a:cf: 72:b5:05:a6:93:ee:9b:81:09:08:79:05:62:8d:fd:f0:75:df: 86:a9:24:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNTGbEWrGbs28ChLM5LQmAwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3YjUwNDJmYzIwZDliYWIxNjc2ZTA5YWY3ZmYxYmE1YmZh ZGFlNzUwHhcNMjQxMTIyMDkwMDEyWhcNMjQxMTIzMDkwMDEyWjAzMTEwLwYDVQQD Eyg5OGIzMDZhMjQzMTY4MGRhOWY0YTJiMzIzMTI4NjY1NzQ5ZTAyODI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu++cKRTlvVUpP8ppYzPmYWCXpU51 pLEoAQDN5BDii0L3BaXeSx/Sw6zaTfZ4c3SbpvtGYqV+a94ftTtqM9QOBl5AURIO xOpUAyRrfTMPcOjJ8SHphunEagdZeVDhtldFulLoFDQymKuowSY+y7NKura9TeCx nqAEgogV3vBzA49gkdBiaVGu5TTyE7fe0KYVvUGMdlnpsrLM383vLBCNgt/9opgN 2lS5pqG1UE+gpA7kni0yalOahkfKOCfxvEUpvo3zt9Dqkuoq5kB9Miwkpti+GDlv kBxiDlSozwJ9kG8RTZhM+HUjWdLlA2DOmebaix3WooNmwgkK+apIflU78QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJizBqJDFoDan0orMjEoZldJ4CgpMB8GA1UdIwQY MBaAFBe1BC/CDZurFnbgmvf/G6W/ra51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQt YmM2Nzk0ZTk1ZTVhLzEvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQtYmM2Nzk0ZTk1ZTVh LzEvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi/rfzS+A 8EuDx8kVr1y9FDNJRahAURRljvQbVT2gCYeoYDZvH6sH8+qJpvZRhjWOOghP3u9h Q57ixTkmsUjPexhlVC6HDi2Ec3rYmUbAgcTw7wBKzJRPaOdZLYCmXDChyuXLlcDt 5r8kEzgfBbWChDhKDtMN+fvIIH6yCP8KcnQRgCP4mbh8w8ZF07qaP+WxabKOM0F7 ir0DZCHwUnG9yZI7MTDSmWCKeQNwE5Yxmv4PcnhExc/smhEMSKMdSDuI7dcaYkyT tyWaMlaUUMYyy06L/5E9h4NdgRprI1qeSsDHzzlJUW13shrPcrUFppPum4EJCHkF Yo398HXfhqkkIA== -----END CERTIFICATE-----Generated at Fri Nov 22 12:40:09 2024 by rpki-client on console-ams.rpki-client.org