$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft File: a8XefXJVt9WCYMZaEgsWTvEO-QM.mft (raw, json) Hash identifier: 93M3G9xxnbsFcay2hDnL5APkvUHQTJGP2kK78rZ/gWg= Subject key identifier: 22:F0:72:B6:B7:82:00:71:E9:57:78:5A:BE:B3:3E:B6:B4:80:53:B4 Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03 Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903 Certificate serial: 019352073D3A6DB9CFBA910EDD8F0F648A63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft Manifest number: 133F Signing time: Fri 22 Nov 2024 04:00:26 +0000 Manifest this update: Fri 22 Nov 2024 04:00:26 +0000 Manifest next update: Sat 23 Nov 2024 04:00:26 +0000 Files and hashes: 1: 2cHk9_buKYiX30mHgoHc4ZQZrHA.roa (hash: 93rwnFsl7ylvp3wL3LOYaGqkxv7SDBnj+sGjSGI8BHQ=) 2: 5tgvBqAn45q56volhgsie_7CV2M.roa (hash: mOVCJg54wvWm5Bo6SQOd2fn6Aprl0DBUEjycsY1KAFo=) 3: 8qViCiKE7iygXEoBGAXXwkLoEiE.roa (hash: nNhaAZ8OxYeaBlSY4uRxU0Lhx3osUEpfABC/CL++fEU=) 4: GRh9QwgE5LoxRxx9odajH0mDNBs.roa (hash: AvBJ2Wmv6jOS1SztnAZDMDVRSYP7h6DtwN72R+6N2Ng=) 5: LmsF6en2yF_XQAtp4skc6KkHN4Y.roa (hash: kUkoSPFvCrhadTrABXUJOp58EqmYlXpwVWzucbYRc2Y=) 6: OfPy0pCRuVFc6SxF7yPGK6sQwYg.roa (hash: t7Is9cBFUc86dkWvFlD9PpTlDV5TUlXmLWOP+ZjqcPk=) 7: VC8SzUTlVGdkZb7eBtipVK73hb8.roa (hash: VP04w0kV7s7qbOUkGhj3lIUU1V+Zuc7Fgp/tvdoQciE=) 8: a8XefXJVt9WCYMZaEgsWTvEO-QM.crl (hash: 87EqF10VqBrPEOf+p+O6wpThOatbM15CILTkAg4O5Ig=) 9: gd16XCTd40pjPZt9CZMO_Ll32ws.roa (hash: Siaj/KjTj5pl5vKJSUai95R+Pqp6uGnQCfbTrTopz4U=) 10: mLRz5OTjGh9j7g5duC4Xo9OJGbg.roa (hash: iQBsyo2HfK7eeZxhvywxycGtouL3b3WXXJtpQJukQt8=) 11: nlQD8SD3p1UnjOZs-Tk6PwVhNzw.roa (hash: h8ocq5AxBE3xwuh/hiHRPhfS4y7WxJtZGX5t64qVT90=) 12: plbz6WTi8JD1x6uwoFoWd1r9ztk.roa (hash: RviB+k991a3CipxMaZckBGVPGYFgO/g+d34Atsdv8BQ=) 13: qUPiWYBxMhrVDhExyWktSo_ymro.roa (hash: H3xvI4Ba70FwGz8pPDt4cQ2EVQ1UgJ0CZGl5tpUvOlY=) 14: szm6l9JGqE-llppKd0R-qzrbslk.roa (hash: M19C8G3o3ZNfSCLgVvLPddal1ABTSHXzqqLvfOIoAc0=) 15: xLQSt71Yd9Jc22clZeK3jBu6Uck.roa (hash: Qd9egGESjxPoweeY2+8wysr/ajK1Wo7eZ9g7EhhWf3U=) 16: yarR2uScHV73oe0TXy1hUnxTlVc.roa (hash: c7hRApIT53c6x3dFu2cqPS7OEdZ3Y00ueDkIEvDgyMw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 04:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:52:07:3d:3a:6d:b9:cf:ba:91:0e:dd:8f:0f:64:8a:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903 Validity Not Before: Nov 22 04:00:26 2024 GMT Not After : Nov 23 04:00:26 2024 GMT Subject: CN=22f072b6b7820071e957785abeb33eb6b48053b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:83:16:70:77:9b:14:b9:ac:d9:a1:06:52:e3: 09:d9:df:03:53:64:7d:4d:c6:1e:d7:be:1c:0f:38: c9:71:a5:18:c4:5e:45:2d:e4:34:03:2c:11:ea:53: 15:7a:32:f1:38:e2:1f:13:22:e3:78:2a:81:b8:8e: 85:26:c7:34:51:dc:17:1f:4d:f8:fd:a1:b0:88:43: 1d:90:f8:d8:a7:92:18:7f:13:bf:48:f0:a5:80:f6: 77:28:e7:dd:55:93:88:d8:15:78:95:f1:be:8d:de: 9e:cc:79:03:4b:0a:95:fe:6d:12:36:97:b7:d1:40: 24:1d:cb:d2:d1:e4:6c:a9:22:0d:fd:5f:0c:9b:fc: bc:d8:60:ee:fd:33:7b:8a:8c:1b:7f:e8:82:3b:65: 00:06:a5:1a:31:4c:45:d7:ac:59:d0:2a:9e:e3:66: ec:72:bd:6d:27:41:4e:fe:f3:25:79:fe:01:ae:8e: 69:e4:6c:20:9e:39:38:ab:a8:63:b1:ef:ef:2c:ff: a7:c7:90:41:a8:d0:e3:5c:29:b6:bf:a6:38:0f:1d: 9e:f5:74:2d:35:e6:33:c9:1b:d8:49:8d:93:49:31: db:4d:58:33:d7:81:19:91:d4:44:5c:44:12:a1:c0: 88:7a:2f:dc:10:a9:9a:0d:69:d0:01:31:9c:3e:72: 5d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:F0:72:B6:B7:82:00:71:E9:57:78:5A:BE:B3:3E:B6:B4:80:53:B4 X509v3 Authority Key Identifier: keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:bf:45:e4:90:5d:3b:76:f8:97:09:d9:31:7e:98:0f:b2:2b: e1:bd:3d:78:31:c1:df:f2:f5:82:ba:3e:70:af:e9:98:d7:f8: e3:67:97:0a:e7:e6:64:44:2e:2f:39:8a:ac:ac:b3:4f:3a:5d: 44:29:21:6d:59:6c:a2:8f:2b:3c:2c:fb:96:f9:f2:3e:7b:f3: 7d:54:0a:e9:38:11:02:f8:76:35:85:65:62:6d:a3:ef:0d:c3: ec:5b:67:02:b1:af:07:48:21:a1:0c:08:13:bf:3a:18:fe:e2: 82:76:70:c2:2f:84:be:20:01:e5:bb:b0:27:e6:81:66:bd:48: 35:5f:7e:7e:01:4d:41:78:c4:57:08:9e:e4:8a:3a:48:45:86: 40:65:ac:f7:86:97:71:4a:4c:d1:1e:b0:f7:b3:6a:04:21:9c: a9:4c:71:aa:68:bf:bb:97:5e:43:25:62:7b:f1:55:0b:56:06: b7:3e:af:4e:7c:ad:d0:5d:c2:4f:9f:17:31:bf:c3:4a:e6:ae: 0e:a9:6c:4b:97:7d:de:92:f3:d4:fd:82:76:47:8c:0d:a6:af: 48:44:e9:45:a7:82:e4:9d:bd:29:4d:be:16:d7:12:43:48:01: ca:27:b0:74:5c:3f:b4:44:e0:76:5a:b9:4e:62:e6:f3:3e:c7: 8f:c7:ff:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNSBz06bbnPupEO3Y8PZIpjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYzVkZTdkNzI1NWI3ZDU4MjYwYzY1YTEyMGIxNjRlZjEw ZWY5MDMwHhcNMjQxMTIyMDQwMDI2WhcNMjQxMTIzMDQwMDI2WjAzMTEwLwYDVQQD EygyMmYwNzJiNmI3ODIwMDcxZTk1Nzc4NWFiZWIzM2ViNmI0ODA1M2I0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIMWcHebFLms2aEGUuMJ2d8DU2R9 TcYe174cDzjJcaUYxF5FLeQ0AywR6lMVejLxOOIfEyLjeCqBuI6FJsc0UdwXH034 /aGwiEMdkPjYp5IYfxO/SPClgPZ3KOfdVZOI2BV4lfG+jd6ezHkDSwqV/m0SNpe3 0UAkHcvS0eRsqSIN/V8Mm/y82GDu/TN7iowbf+iCO2UABqUaMUxF16xZ0Cqe42bs cr1tJ0FO/vMlef4Bro5p5Gwgnjk4q6hjse/vLP+nx5BBqNDjXCm2v6Y4Dx2e9XQt NeYzyRvYSY2TSTHbTVgz14EZkdREXEQSocCIei/cEKmaDWnQATGcPnJdMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCLwcra3ggBx6Vd4Wr6zPra0gFO0MB8GA1UdIwQY MBaAFGvF3n1yVbfVgmDGWhILFk7xDvkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgt ZmRmNjYzOGQyYzA0LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgtZmRmNjYzOGQyYzA0 LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGb9F5JBd O3b4lwnZMX6YD7Ir4b09eDHB3/L1gro+cK/pmNf442eXCufmZEQuLzmKrKyzTzpd RCkhbVlsoo8rPCz7lvnyPnvzfVQK6TgRAvh2NYVlYm2j7w3D7FtnArGvB0ghoQwI E786GP7ignZwwi+EviAB5buwJ+aBZr1INV9+fgFNQXjEVwie5Io6SEWGQGWs94aX cUpM0R6w97NqBCGcqUxxqmi/u5deQyVie/FVC1YGtz6vTnyt0F3CT58XMb/DSuau DqlsS5d93pLz1P2CdkeMDaavSETpRaeC5J29KU2+FtcSQ0gByiewdFw/tETgdlq5 TmLm8z7Hj8f/cA== -----END CERTIFICATE-----Generated at Fri Nov 22 14:01:40 2024 by rpki-client on console-fra.rpki-client.org