$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft File: MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft (raw, json) Hash identifier: DIkhjL++Hrj9XMisN5S/t9i7NWG/C3Gf2unfr724dbM= Subject key identifier: CF:88:04:30:05:E6:06:63:C5:00:09:68:25:30:FF:D9:7E:90:91:17 Authority key identifier: 30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2 Certificate issuer: /CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2 Certificate serial: 019366A0AC111FD6F77D7FE632A9E66B0EB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft Manifest number: 1381 Signing time: Tue 26 Nov 2024 04:00:26 +0000 Manifest this update: Tue 26 Nov 2024 04:00:26 +0000 Manifest next update: Wed 27 Nov 2024 04:00:26 +0000 Files and hashes: 1: 6kR0y783iUwPfelync_sBfyVTtw.roa (hash: nQbYJceJ1fXk9mTfIM1NG7mZwFODOmMdTrm/xj1qX8Y=) 2: 8NrkEfHhOfyprS-1MC097etJKvo.roa (hash: F90RSW6EJfqrSRaf/LqBjpHBSg9OVs+X1NcVzJbQ/Gc=) 3: CZBYtFtERvkk-WebE5L-8PzVC4s.roa (hash: UBICLIySEJDFFBa6wTrrci90rqH33Dk9Dlw5oMDE5mg=) 4: GbF6GK6Sxg8Cn5X-sfkuO7Q6TKI.roa (hash: WSkb9t33QAB7tewHHfvjlolWLibBycu/qtSnvvqJoxI=) 5: LAk4H6vFIjjq6_YRTc7Qrx4uqpE.roa (hash: EbwMEFIlbW1529xw0b9vZngQyETisP0KjXydhPonaSs=) 6: LTlSZZQaFF2GTxGI_WNKE-Ou_xo.roa (hash: 2Mt11r+p071nTd8rH/zYUW00AKTGyGAW3CvbkdDcg7U=) 7: MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl (hash: t1Cyuw0Zt2KsbhMvf97kEIlTpgNQmxLvN6fV6ZT+sQY=) 8: MvMdMTN2IBOJbybqeLRWDPhpaB8.roa (hash: K8SanZHq6nN/KhBOTFDVxgVSd55JD+Pc/Z4HvPQJiUU=) 9: N8MPPRmWIZO1VqByq4Aor9q0IYE.roa (hash: cfCL0Bel0kRIlJnp3HoTCbrQZ/HmRdpFehMnYYS++Y8=) 10: Najl_-94Uy9H5I0mC8-rKld706Y.roa (hash: BCAN7KlMGnxS4yfe4tLMtgNNpxpEbtkCM65s0qqpFuk=) 11: Nn4s79cmGN8GKnYtH6FbeyKHpMM.roa (hash: D64o6YmW4z7iXTcM7gqxmWe1Em8zx32EZRHk7NWMISY=) 12: pbtL8KQCQMTjd0KV58RPCEl3e2A.roa (hash: pTpBb+psk6drGCYzkcDayTNoZ2vn069aCqczKpx1Pqo=) 13: vXE8u8P-8u_-MbMt8pt0ylu3UT4.roa (hash: FpYxPqAmaIsF0CD6eiLGMgY19R22GIm67/1axzP/kOI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 26 Nov 2024 23:23:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:66:a0:ac:11:1f:d6:f7:7d:7f:e6:32:a9:e6:6b:0e:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2 Validity Not Before: Nov 26 04:00:26 2024 GMT Not After : Nov 27 04:00:26 2024 GMT Subject: CN=cf88043005e60663c50009682530ffd97e909117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ad:b5:40:c9:08:10:25:ff:68:9c:30:df:99: 19:c5:c7:1d:e3:e4:c6:cf:fd:0f:72:7a:94:a0:54: 40:f0:a1:fe:6e:af:d5:34:6b:53:76:fc:4e:bf:9f: a4:c3:d2:d6:44:f4:9a:bb:67:97:9c:7e:4b:85:65: a4:76:81:1e:0a:22:17:b7:46:ac:0b:75:f1:3e:ba: 3e:df:04:4f:bd:4a:05:ec:36:2c:03:a6:ca:ae:d1: 51:25:43:ee:ce:fe:77:14:b0:fd:6b:5a:39:f1:71: 04:84:58:03:b1:a9:64:17:a7:05:0e:cc:0e:72:73: de:c0:19:16:d1:25:ab:a2:ca:fb:42:95:24:77:d4: c6:0c:9e:2c:80:db:18:9f:22:e1:3d:2e:7c:cf:84: e4:f3:f8:6f:50:89:64:a1:0f:61:87:9f:79:ec:bd: 8c:45:cd:bb:de:91:1e:51:e1:99:ef:b7:20:b4:33: d5:ef:23:f8:81:3b:70:0f:0e:a9:6b:dc:14:81:a5: c4:4b:3a:b2:2b:e4:de:b5:14:56:7c:c6:a1:e2:2d: 34:7a:8f:61:61:e6:2d:5a:f8:fb:ad:27:7c:b0:99: c2:41:e0:f7:07:a9:2d:33:23:64:00:f7:8d:17:11: 66:50:f6:ab:29:84:21:24:2e:60:61:4c:57:f0:ea: 21:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:88:04:30:05:E6:06:63:C5:00:09:68:25:30:FF:D9:7E:90:91:17 X509v3 Authority Key Identifier: keyid:30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:c6:8c:85:e4:f9:11:e9:94:09:d5:5b:91:05:dc:9e:f9:9c: 0b:f5:cc:1b:8e:fa:c1:12:13:21:b6:31:c4:44:f2:08:12:fa: f5:0f:76:73:de:fa:7f:5c:40:3d:78:d7:58:db:7a:d2:51:71: 44:69:bb:a7:7a:98:db:57:f0:9b:bd:42:c6:22:c2:5f:5f:fd: ce:14:01:a6:98:df:94:ec:ff:a3:81:02:79:d3:5e:59:da:4a: ef:ce:bb:18:d1:78:58:30:91:a3:a4:97:56:c5:c9:3f:8d:f2: 02:1a:04:2d:c1:ec:f6:f0:b6:f5:ef:cb:c3:02:8b:ef:13:b8: cb:6f:45:a7:9e:9d:f1:c0:2d:88:46:40:bb:fd:db:42:1a:ce: b3:c4:77:34:46:a6:f1:dd:05:28:0f:7e:3a:b2:d8:a1:47:4a: 05:24:b6:80:7b:9a:f7:1a:13:9f:76:b9:e1:fc:9f:8c:44:2a: 7a:a6:d9:20:58:80:6e:3d:1c:7f:00:f7:98:7c:25:c7:80:1e: ec:e3:3f:6b:ff:d5:44:9d:36:0c:fb:a0:5b:09:9b:71:68:75: b3:26:59:aa:e3:50:47:df:dd:c2:6c:3e:11:07:6b:86:91:64: b6:5a:b2:92:2a:0a:63:cb:e2:a8:f9:77:7f:05:2a:ec:dc:31: cc:b4:93:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNmoKwRH9b3fX/mMqnmaw6zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwZjFiYTYxMTFjOGYxZDNmMzdjMWI3YzFhNWVkNzM3NDAy MTkyZjIwHhcNMjQxMTI2MDQwMDI2WhcNMjQxMTI3MDQwMDI2WjAzMTEwLwYDVQQD EyhjZjg4MDQzMDA1ZTYwNjYzYzUwMDA5NjgyNTMwZmZkOTdlOTA5MTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm621QMkIECX/aJww35kZxccd4+TG z/0PcnqUoFRA8KH+bq/VNGtTdvxOv5+kw9LWRPSau2eXnH5LhWWkdoEeCiIXt0as C3XxPro+3wRPvUoF7DYsA6bKrtFRJUPuzv53FLD9a1o58XEEhFgDsalkF6cFDswO cnPewBkW0SWrosr7QpUkd9TGDJ4sgNsYnyLhPS58z4Tk8/hvUIlkoQ9hh5957L2M Rc273pEeUeGZ77cgtDPV7yP4gTtwDw6pa9wUgaXESzqyK+TetRRWfMah4i00eo9h YeYtWvj7rSd8sJnCQeD3B6ktMyNkAPeNFxFmUParKYQhJC5gYUxX8OohvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM+IBDAF5gZjxQAJaCUw/9l+kJEXMB8GA1UdIwQY MBaAFDDxumERyPHT83wbfBpe1zdAIZLyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy84ZDdjNTctYmE2NS00N2ZjLWJjYzQt YzMzMDE4NjMzZDMzLzEvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy84ZDdjNTctYmE2NS00N2ZjLWJjYzQtYzMzMDE4NjMzZDMz LzEvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPMaMheT5 EemUCdVbkQXcnvmcC/XMG476wRITIbYxxETyCBL69Q92c976f1xAPXjXWNt60lFx RGm7p3qY21fwm71CxiLCX1/9zhQBppjflOz/o4ECedNeWdpK7867GNF4WDCRo6SX VsXJP43yAhoELcHs9vC29e/LwwKL7xO4y29Fp56d8cAtiEZAu/3bQhrOs8R3NEam 8d0FKA9+OrLYoUdKBSS2gHua9xoTn3a54fyfjEQqeqbZIFiAbj0cfwD3mHwlx4Ae 7OM/a//VRJ02DPugWwmbcWh1syZZquNQR9/dwmw+EQdrhpFktlqykioKY8viqPl3 fwUq7NwxzLSTjw== -----END CERTIFICATE-----Generated at Tue Nov 26 06:38:17 2024 by rpki-client on console-fra.rpki-client.org