$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft File: xCcI35OVSqxgGu8YNb1daSRfsC8.mft (raw, json) Hash identifier: jvGPzUNvJ2I40j2naR/gpvgGbYyVkCBz2DrYgZPSpr8= Subject key identifier: 7A:54:63:3A:08:8A:1F:6A:81:79:F0:A0:92:50:D7:09:15:EC:37:D2 Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f Certificate serial: 019363323C06D9626386105EFB9B532C18C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft Manifest number: 13AE Signing time: Mon 25 Nov 2024 12:00:56 +0000 Manifest this update: Mon 25 Nov 2024 12:00:56 +0000 Manifest next update: Tue 26 Nov 2024 12:00:56 +0000 Files and hashes: 1: 6afxs1bdeD5yaqefdk0QB9wMEX0.roa (hash: Tq2jOBjdP5DHJtw2wpcac1XtvZ84CvjharbJzjYnFAE=) 2: 76bGrAxO4__XTrKj6weRjk_4p1g.roa (hash: Su6LwPnNwpyKtqX0qCFxne39014DgwzYBnXu/SgORtg=) 3: C3ez_uT3mg7_L2Do5GbNbhX_zDE.roa (hash: mqMcgfdbVZjP60SVIlFgw7vuEu6yuczVGaQcdx3gw10=) 4: DDNbL8-muhovLIUMdkkW6YplPYU.roa (hash: g3gx/4T723kZ6tCstIQEjwIBuCuNUfdMYWI0oHuRSVw=) 5: HnnD_7XhH9OBQ7cIKqP7BLd_UvU.roa (hash: FpcS4AoJ4gblz3e5AQXlJVCrbA8SwRdpeE/GxhW2qok=) 6: OSF8LiDxq7e-LDbq47CGMYGj2qw.roa (hash: xBfxNdey2jWs6zqLMX5bpyIo1IxfsfS+rpVW1z48gCs=) 7: R6uc_9XJrtKt2yKdd2bETBPJFSw.roa (hash: EYSDnF5scGmzh1oj29cAxbDYxPjemEyyOcX+/Atton4=) 8: TTKPJTYmt2cb4vrRMrCdEj2nomM.roa (hash: 2hm4SUs9bM4xKwfQaya5g33MsaKnVuAPLMr6R+vB7FY=) 9: jTmYzQ9cNjXldeMTYNpyUS3USDM.roa (hash: k4FAbMOK57vwnqeHf44P3VWa2YCdK3a+4qU8QWvETy8=) 10: oyQl-p0yHveWQ5WbLsqdKR5R4IA.roa (hash: FDh2QEgnpWDg9F22qrW73bU8CFk28iAsmB2pry11r1Q=) 11: si1yhExQ_0nYACPoO2FmQ9ybWeo.roa (hash: 9LG/J61+GAJRp+fNz2NgfeylxTsuTUMLn/dXb0PPJuc=) 12: v7zLIYUSWwOYyqVWA2y_f6m2mAo.roa (hash: EN24B3E4yTdeauOBtTLRoOVxe5fxY3jlaiyu75rCDsQ=) 13: xCcI35OVSqxgGu8YNb1daSRfsC8.crl (hash: viB9R+f7D3KcQycT35wD5CdtZrdh7HnUqgDg2hdbMTg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 26 Nov 2024 12:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:63:32:3c:06:d9:62:63:86:10:5e:fb:9b:53:2c:18:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f Validity Not Before: Nov 25 12:00:56 2024 GMT Not After : Nov 26 12:00:56 2024 GMT Subject: CN=7a54633a088a1f6a8179f0a09250d70915ec37d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:ad:a2:49:4e:cb:86:d6:91:71:53:fc:ac:bd: 2d:3e:d9:76:02:fa:c5:6b:48:01:10:4e:d0:c0:37: 2d:fb:7d:81:54:61:7d:bf:88:6a:aa:de:82:e6:d9: d6:a6:fd:75:89:39:e7:23:1e:80:29:f8:96:5a:e9: 3d:f1:9e:b8:ea:64:4c:08:88:7b:57:87:89:b4:9c: 6e:c8:c0:a1:c2:d5:5a:88:1a:b8:42:f7:b1:e4:7a: d9:89:1b:53:80:52:48:19:99:cd:ad:0c:05:97:a5: e7:23:f8:19:7e:a4:f7:67:a8:b7:5b:2b:31:41:71: 43:63:5a:41:63:66:a1:6f:f4:f8:a4:a7:5c:df:b6: 59:2c:2f:bb:de:1a:fa:83:9c:21:10:92:af:e4:55: ac:e2:17:d5:fe:41:e5:e4:01:9a:a5:f1:a5:dd:4f: 93:97:ac:7d:02:8b:92:52:c6:79:a7:ea:d2:b2:c5: b3:9b:4c:10:49:79:8e:7e:1b:b7:6f:f4:4b:67:74: cb:8c:57:b7:3e:82:ab:f7:0e:90:aa:52:c9:69:94: 96:fa:bb:5f:e2:14:9d:8e:1d:2d:fb:ac:49:24:79: 6f:63:7e:d2:3c:10:07:8c:a8:8c:86:9f:1e:f9:1e: b3:77:52:1e:a4:44:dc:e6:d3:aa:2d:9b:2f:8c:4a: 65:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:54:63:3A:08:8A:1F:6A:81:79:F0:A0:92:50:D7:09:15:EC:37:D2 X509v3 Authority Key Identifier: keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:8c:2f:42:a9:3d:10:e1:a1:f1:ef:69:6c:ef:a3:2c:22:37: 07:5d:ff:22:56:d5:37:f4:1f:bd:92:ad:01:d6:46:23:6b:d6: 20:d2:82:73:a8:6a:a0:8d:22:9f:d9:c8:92:23:f5:73:73:46: 8a:8b:01:9b:ef:90:4c:f1:6f:d2:ae:3c:f3:54:95:d3:37:02: 75:ee:5c:c1:d4:fb:0b:6f:91:e7:d0:af:09:2c:7b:36:d3:51: 02:34:0a:6b:47:a6:15:da:30:eb:5a:57:48:ad:d3:f4:a0:11: 3d:8d:3d:7f:60:68:2c:b4:31:66:48:d6:99:43:2e:cf:51:ff: 88:88:85:10:b6:a4:aa:41:d3:87:d8:c7:4c:5b:0e:7e:9a:ee: f1:3f:10:65:a0:41:e4:99:59:dd:c5:82:bc:b2:1e:50:06:41: ba:05:9d:84:31:52:e7:f8:9d:cf:31:f8:00:3b:d7:ba:7b:35: fe:77:0b:5a:d1:af:e5:fb:dc:0a:b0:dd:a2:f4:11:48:12:d0: ec:b9:76:d7:b6:9d:cf:29:ef:14:83:95:5a:86:63:f6:e6:2f: 90:9d:58:4a:b6:a8:53:dc:49:ea:88:12:18:8c:b2:d9:4a:fb: 8a:ba:48:d8:56:89:bf:be:3d:a4:86:c2:cd:d2:6e:12:92:16: 84:df:b0:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNjMjwG2WJjhhBe+5tTLBjJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MjcwOGRmOTM5NTRhYWM2MDFhZWYxODM1YmQ1ZDY5MjQ1 ZmIwMmYwHhcNMjQxMTI1MTIwMDU2WhcNMjQxMTI2MTIwMDU2WjAzMTEwLwYDVQQD Eyg3YTU0NjMzYTA4OGExZjZhODE3OWYwYTA5MjUwZDcwOTE1ZWMzN2QyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+62iSU7LhtaRcVP8rL0tPtl2AvrF a0gBEE7QwDct+32BVGF9v4hqqt6C5tnWpv11iTnnIx6AKfiWWuk98Z646mRMCIh7 V4eJtJxuyMChwtVaiBq4Qvex5HrZiRtTgFJIGZnNrQwFl6XnI/gZfqT3Z6i3Wysx QXFDY1pBY2ahb/T4pKdc37ZZLC+73hr6g5whEJKv5FWs4hfV/kHl5AGapfGl3U+T l6x9AouSUsZ5p+rSssWzm0wQSXmOfhu3b/RLZ3TLjFe3PoKr9w6QqlLJaZSW+rtf 4hSdjh0t+6xJJHlvY37SPBAHjKiMhp8e+R6zd1IepETc5tOqLZsvjEplIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHpUYzoIih9qgXnwoJJQ1wkV7DfSMB8GA1UdIwQY MBaAFMQnCN+TlUqsYBrvGDW9XWkkX7AvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYt NzQxYzFkOGRlYTJiLzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYtNzQxYzFkOGRlYTJi LzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZYwvQqk9 EOGh8e9pbO+jLCI3B13/IlbVN/QfvZKtAdZGI2vWINKCc6hqoI0in9nIkiP1c3NG iosBm++QTPFv0q4881SV0zcCde5cwdT7C2+R59CvCSx7NtNRAjQKa0emFdow61pX SK3T9KARPY09f2BoLLQxZkjWmUMuz1H/iIiFELakqkHTh9jHTFsOfpru8T8QZaBB 5JlZ3cWCvLIeUAZBugWdhDFS5/idzzH4ADvXuns1/ncLWtGv5fvcCrDdovQRSBLQ 7Ll217adzynvFIOVWoZj9uYvkJ1YSraoU9xJ6ogSGIyy2Ur7irpI2FaJv749pIbC zdJuEpIWhN+w6Q== -----END CERTIFICATE-----Generated at Mon Nov 25 22:14:15 2024 by rpki-client on console-ams.rpki-client.org