$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft File: fD0CKiQM5x4Kbh6argES2oQMw0s.mft (raw, json) Hash identifier: LOICvhJjbgLxrW1gbXbU8XoZZi9XI4KkL/qVNR+R4qk= Subject key identifier: 8E:C2:7A:92:14:ED:7D:59:D9:59:40:0D:BB:22:45:8D:98:DD:C0:40 Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 01947D93BAF96C830B5834D0DAA4FF80128C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft Manifest number: 02C6 Signing time: Sun 19 Jan 2025 08:00:21 +0000 Manifest this update: Sun 19 Jan 2025 08:00:21 +0000 Manifest next update: Mon 20 Jan 2025 08:00:21 +0000 Files and hashes: 1: 1-kafx5uukED-cVD9M8HBDgaFgg0.roa (hash: PWocnJOuokdwKpwSEW7IFlIibLEN7/bxY0Rx7gU9odc=) 2: 5MuegZc941EXlrf0YhhZc8L4RKk.roa (hash: kHiIPTd4Jj/nvsaJvM9+xNmDRvRf/qPKh36k1EGAn74=) 3: 5uBNSDniKhpEF1tunVK1sjbfU1I.roa (hash: hQgaCtEIugntATdpZaXMiJmpwJcW0z774Vj9R49c2KA=) 4: 7hACT5sKnz3HxIi_xLJsA5iZrPQ.roa (hash: kR684iL/BnCvE3LFX4t7FZeKIp8gUxbro9Dzx1l6bTg=) 5: CN8JcZNe6nBmbhnbxKuljzmeRw4.roa (hash: ueo5lBbOlNgxrxTTa+PPhxNr2eig9TfjivNKSsqsvII=) 6: E-Exf78Okb_nD1TcifsRypY-yOM.roa (hash: DfFFnegC57pUWLRM2PFyDIV7xiNhCl5zh2jDdvb0XHc=) 7: FNiNdr2A7OQKs4Lh8NIXmrr0CpY.roa (hash: lzfjAZjaBGiVtNnSHHAFnCh/6pNb/eM+js/obHoKL1U=) 8: HAEssOWQRwSdc5TGWOA9Yahl7WM.roa (hash: GGhgfbO/+6MLQCq+HU+0d0YUwkftNYr1yFwg0YzDhQk=) 9: KMw9RO8VE83AKA46hejCoTUdvF8.roa (hash: doWT4ZOCJNbUZmPRLHzaNHMk/uSDHfapP675fAAElw8=) 10: Xh2ApCckcqQ5ZDPdtmFUvU7_AaU.roa (hash: U6qfjiSu8FmKWlUY8cLRLr8aJRrnWO6dX1j58OsLGHs=) 11: _ts8OAlwojVR7RrxU45171xnFEQ.roa (hash: 1o7jXDgX6gwszcNb2hDK4ztSUb/3OElL3cvx3GiOQa4=) 12: fD0CKiQM5x4Kbh6argES2oQMw0s.crl (hash: yFQ6dS5bTI03lRJcrjiW3YSKu6KNHwHkyxUqTE+C2s8=) 13: hmYWNlQUrakh63o4DSIneiGIAfA.roa (hash: TFy9hjKxFNrv2mCI9kVivNDGS6i161bdc9Ov0a60v/4=) 14: kchdqAvrYtBqhZtEx_cp0fWe3h8.roa (hash: ow9NltT/0nYo1gJRfP0JFtnaIA4gW6pZa8MYDijSwnM=) 15: oXNf5SHrKh2QWntqtmC7qB19SGk.roa (hash: qifSnbRKsEUjrXFAx3OGYSd8X1I2Ha3pqqE8xrvWVLQ=) 16: o_LWOWNZHyUpyFIz2glavZ8eckk.roa (hash: nz7hO/IeuISTjJtAinfjZZVYYIhwCI0rj9pS8T4ksdo=) 17: qILC_Pv0K7-ROV4CDhL6zSnDsio.roa (hash: tV5WuqZJh0gjM0aw66Rwu52v2V+q3xkrQZsO/3MBrn0=) 18: v6DRm2BxHSU2TI8KD12J2fvQjdI.roa (hash: 2jOdiO20NF/908n5Oq5KVZ1zpLepOGdqMBtD3aX7Ya4=) 19: wPd2jQh5vYDkPB3mvkwgjGcGS7Q.roa (hash: 87iPH+iaXK8TJdEdqhbM2SFaQstHud/gD3z/dfFuGvk=) 20: wh8jEnWXwtiWU2SJf4IhY7PabOU.roa (hash: le7RQKgcsNIgosL6N2oHq71ZO9HYlykRb/HvM9wPVFo=) 21: x2XVu0ALr02iGe6yyUDAD6F8NjI.roa (hash: 08nS9hEpSqpZaHf0s18vSYc5qS8WtwFKwLrU014TaPc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Jan 2025 05:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:7d:93:ba:f9:6c:83:0b:58:34:d0:da:a4:ff:80:12:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Jan 19 08:00:21 2025 GMT Not After : Jan 20 08:00:21 2025 GMT Subject: CN=8ec27a9214ed7d59d959400dbb22458d98ddc040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:12:21:04:c1:0a:df:80:bd:ad:44:d9:f3:ea: 92:f0:d1:9a:3a:c5:67:95:15:93:4c:34:6f:d6:0d: a4:78:2d:a8:ac:df:68:b7:eb:9c:12:43:50:dc:11: 0d:62:44:94:9a:57:dd:88:6f:47:3c:50:80:a0:db: d8:05:6b:34:d0:23:ca:73:bf:0d:b9:80:ae:94:8c: b0:64:42:fb:df:61:34:a9:c0:de:8a:4e:bd:20:6b: 1a:56:bd:f2:f4:4d:15:b3:e6:73:34:f7:fc:b5:99: 5a:8d:ae:2c:c9:36:50:aa:97:06:dd:6f:89:15:be: d7:12:e8:cf:fa:a2:5c:f1:22:7d:bb:62:fd:cf:8d: 6b:3a:1a:28:c0:2b:16:f4:ca:d1:a8:f7:c2:a1:f0: 45:37:ef:99:5d:87:be:04:9f:aa:da:bc:19:77:6a: 75:1a:90:d2:25:56:08:ba:fb:69:ed:a6:72:87:49: c1:1a:67:bf:6c:a8:21:7a:9d:3c:d1:50:44:6f:d6: 99:a6:b2:b7:28:9b:53:21:db:6c:0b:6e:d7:6d:35: 24:29:82:f7:40:ac:de:a4:6d:7e:a3:18:ff:8a:67: 91:78:da:22:b7:b9:b7:4d:d9:ba:ad:05:26:35:16: 84:6a:f1:7e:17:05:48:85:96:63:21:60:a2:cf:93: 32:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:C2:7A:92:14:ED:7D:59:D9:59:40:0D:BB:22:45:8D:98:DD:C0:40 X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:34:46:f0:44:c2:a8:dc:6d:cc:b0:51:89:81:cc:dc:df:2b: 51:e6:6f:36:b8:cc:ac:8c:0d:1b:5b:95:8b:75:ed:55:90:f2: 4d:b1:b4:29:1d:a8:5a:76:c8:97:bf:a3:b2:0c:af:82:07:2b: 98:66:c3:7f:c4:db:19:7f:ee:e8:5b:aa:d6:75:ab:c5:0f:b7: b5:de:5a:20:b3:f9:d6:aa:ed:36:af:58:d3:d9:71:14:b9:8e: c9:b4:64:12:11:ec:d3:01:42:10:8d:ef:f7:78:96:19:56:ef: 30:4b:40:17:e5:c7:d5:59:08:87:ad:3f:fb:ce:b7:ac:1a:5c: a4:d9:34:14:74:85:8f:62:86:a1:6f:56:8f:ad:69:9e:06:db: b2:12:4c:d8:8d:30:0d:52:b5:21:ca:64:46:9b:ce:5f:9b:4a: 7e:2f:ab:37:96:d2:c0:04:9f:e3:23:a4:51:eb:24:d8:39:04: a6:8b:cb:44:91:d5:50:a7:9c:cb:1c:d6:26:91:b3:ee:af:e5: 05:50:1f:5b:f6:c9:7e:62:2a:a5:a3:a0:81:2b:7a:37:4f:8e: 5f:bb:76:55:19:9c:d4:6b:91:f3:5a:32:56:1a:a9:ca:37:ca: 93:28:40:11:5e:3a:e8:6c:f7:60:59:ac:4f:f6:6b:4e:38:eb: a1:c5:00:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZR9k7r5bIMLWDTQ2qT/gBKMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjUwMTE5MDgwMDIxWhcNMjUwMTIwMDgwMDIxWjAzMTEwLwYDVQQD Eyg4ZWMyN2E5MjE0ZWQ3ZDU5ZDk1OTQwMGRiYjIyNDU4ZDk4ZGRjMDQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hIhBMEK34C9rUTZ8+qS8NGaOsVn lRWTTDRv1g2keC2orN9ot+ucEkNQ3BENYkSUmlfdiG9HPFCAoNvYBWs00CPKc78N uYCulIywZEL732E0qcDeik69IGsaVr3y9E0Vs+ZzNPf8tZlaja4syTZQqpcG3W+J Fb7XEujP+qJc8SJ9u2L9z41rOhoowCsW9MrRqPfCofBFN++ZXYe+BJ+q2rwZd2p1 GpDSJVYIuvtp7aZyh0nBGme/bKghep080VBEb9aZprK3KJtTIdtsC27XbTUkKYL3 QKzepG1+oxj/imeReNoit7m3Tdm6rQUmNRaEavF+FwVIhZZjIWCiz5MyGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI7CepIU7X1Z2VlADbsiRY2Y3cBAMB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfzRG8ETC qNxtzLBRiYHM3N8rUeZvNrjMrIwNG1uVi3XtVZDyTbG0KR2oWnbIl7+jsgyvggcr mGbDf8TbGX/u6Fuq1nWrxQ+3td5aILP51qrtNq9Y09lxFLmOybRkEhHs0wFCEI3v 93iWGVbvMEtAF+XH1VkIh60/+863rBpcpNk0FHSFj2KGoW9Wj61pngbbshJM2I0w DVK1IcpkRpvOX5tKfi+rN5bSwASf4yOkUesk2DkEpovLRJHVUKecyxzWJpGz7q/l BVAfW/bJfmIqpaOggSt6N0+OX7t2VRmc1GuR81oyVhqpyjfKkyhAEV466Gz3YFms T/ZrTjjrocUAsA== -----END CERTIFICATE-----Generated at Sun Jan 19 10:42:52 2025 by rpki-client on console-fra.rpki-client.org