$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft File: vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft (raw, json) Hash identifier: mbuByPyLmfORAFHFp0lrWvr+AZGQbN/05AwihIf8Tcs= Subject key identifier: 24:7B:60:1A:1B:78:57:8F:67:6A:39:8A:52:43:27:E0:36:87:D1:85 Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Certificate serial: 0193595366C4EC0CB5955CFA8A90A0F32769 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft Manifest number: 10B4 Signing time: Sat 23 Nov 2024 14:00:58 +0000 Manifest this update: Sat 23 Nov 2024 14:00:58 +0000 Manifest next update: Sun 24 Nov 2024 14:00:58 +0000 Files and hashes: 1: 1bHl9aLfGvTwPFGUoriNVyob_wk.roa (hash: KnnPPixxkATGqNZFkXtqFHW1MYvaWyMBEvfw5hOBlEE=) 2: 29ikNcyfMGJL8GmtQRltXvPSJH0.roa (hash: BJoxt45VcYC1d4HxRIXGzQxe4CqrzBpZAtsTGyB580A=) 3: 3SbOfJ60h-wCYSjMST_edIFSm2g.roa (hash: TmI+1Aqdc3ruq38XjOxIE3lX/8tZQzH8PFAXz5MYS1A=) 4: 6lwxLrN65MFR2ZJIhwRQWmo7rcI.roa (hash: J2Te4fV9ob5tFSXM6rAhWsK7WOBaDle0ihkJlIQ+C80=) 5: 93nVoOkxrI2IFkAch-By_33q6Q8.roa (hash: lgZKBLixYYj6gHyYiUuWvPGFwEeCXiuCFr1U60VzVic=) 6: 9bA4ssV9rTfVlS1i0qVD-wrdqj8.roa (hash: e6PLAsyP58uKFiGXg8EYnDMMPYm9mzRQi/UtLI2qrFU=) 7: IxtMID-LayU__IW7nnF-9kp2uOw.roa (hash: 3fnJhcYlW8adrdNlD3ire3qkn7LGjA1tD8mRV2yz1Y4=) 8: U3-2Aub9_7zuX6Vqcc15UX8nBK8.roa (hash: HV/z7z1MahJf9VLaADpd5J3TEzlLj/DwTGGx7lmfBEY=) 9: _Yh4WFwPTuILTqkIrEhfTKfs6bw.roa (hash: HR6DZn4vP6AEDBE7s/s5YwjUNxydsvcIBrGNhZz2ceg=) 10: c92eF-Wr5zJHdI0bKQjtNzHP4YU.roa (hash: x2+EkrubW8DDqxaWsy9DUwLYTFGTOGYsJh6hC/biOw4=) 11: gJg2Se-GMCUBSeTfxcdAIMwAO6s.roa (hash: FTybVhHbVNRLALGCFhTIHZGMnUs1sGSaRrpV+YPR1hs=) 12: gibppeWkb6BcMnYYfYpspwaMuYM.roa (hash: LciJpsRZ8YWZUY6sBz6Y+XqWdD5HGkLo1waPJ+t14bY=) 13: gy6hO3sL8Pzu5MsFt_Ab1Pmn6og.roa (hash: 8JqnRVWZA1q+1hFWOtRbgwtNNHsn7/Rya81nxJfHE8Q=) 14: mG1bGxHLl7iyYyCYEUNXrl7TYrw.roa (hash: 9MmXhLBmGBUcy8uWpFOtW+Ahou/UqZhP51DKLqYwPGI=) 15: vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl (hash: bxGmVh5O/3+7Vv7iTZOxRaXM7UNeZP+t+UukNyxtO3A=) 16: wNIsa-0BZln1rRwb1GF7fg6iEjA.roa (hash: dgevSzMuBEflArxttbjKNuq3WnTys6mwpRdcLB/TIxs=) 17: wsj837Y1SNFjOezJl4TN0j8mjYI.roa (hash: 6NuuqxeL3fvf7kCk45DltQJ7ZGod/862RrRP4MTCWSQ=) 18: z9p0pmU8e27DZXNTaLkfZwIsI3M.roa (hash: uuhaBw+5owZv0yvCWTgiVO4Nxj2HBejqAkJRFGx2aj4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Nov 2024 14:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:59:53:66:c4:ec:0c:b5:95:5c:fa:8a:90:a0:f3:27:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Validity Not Before: Nov 23 14:00:58 2024 GMT Not After : Nov 24 14:00:58 2024 GMT Subject: CN=247b601a1b78578f676a398a524327e03687d185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:df:6e:09:08:a4:0f:90:d3:0f:ba:dd:1f:29: 70:78:91:79:5c:15:3f:29:7b:b2:2c:02:2f:f9:0a: 2a:80:35:d4:7c:2e:6c:f1:df:1f:40:ec:66:0c:e8: bd:11:d0:f8:9e:13:a8:fc:14:1c:4a:17:6d:8f:81: 96:32:de:b5:ed:f5:61:7c:29:f3:08:58:1d:72:99: 9e:d1:12:f4:84:45:c0:d4:d2:2c:ca:de:9c:46:a6: da:ce:6f:f3:d9:b0:1b:78:a7:ea:38:d8:4a:c7:4b: 50:02:df:f8:22:21:04:c9:f5:04:05:43:9d:61:af: 63:7a:b2:b3:8a:cc:49:26:57:bd:5a:15:8d:f6:0f: 78:60:75:e1:12:5c:ad:e5:cc:48:76:ab:f3:f6:f8: 6b:fe:d5:0c:45:d2:66:a0:58:a7:ad:08:7b:c5:a0: ea:36:6c:d4:c9:0c:5d:8e:9d:3c:18:1f:c2:84:24: 65:61:4c:9e:23:77:cd:fe:16:24:6c:d6:ba:ec:e5: 50:26:3a:d1:05:af:ca:e4:5d:44:d1:0d:49:ee:88: 40:fe:b0:8c:1f:6f:4f:a8:c1:38:75:5c:11:0c:ec: 71:43:52:54:ee:f5:b9:32:92:af:21:a8:ff:af:83: f6:ec:13:c4:7a:6c:6f:9f:e2:0c:d7:7a:8f:03:f4: ef:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:7B:60:1A:1B:78:57:8F:67:6A:39:8A:52:43:27:E0:36:87:D1:85 X509v3 Authority Key Identifier: keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:a0:87:e9:fe:71:92:a6:b5:ff:70:9e:2f:14:77:94:03:b4: 84:30:5a:bb:59:61:6c:21:b8:97:ba:d4:f5:09:8c:66:4a:f3: 68:9c:3f:5a:73:34:b7:67:5b:ba:ed:38:34:5e:22:7b:6a:e1: 84:af:2f:c2:65:07:63:02:cc:ae:04:a0:55:c9:36:55:49:f9: 2f:04:4f:9c:8c:47:23:93:78:c0:19:c6:8d:59:84:73:ba:e6: 2a:d9:1a:fc:3a:4e:2d:71:cd:07:57:1f:00:17:15:e0:8b:e9: 99:4e:60:44:00:ae:53:00:fe:68:f2:38:04:e4:f0:d7:58:ee: a8:54:59:1a:23:a5:26:e4:bc:61:34:d4:43:6c:83:ae:6a:09: 5e:f2:c4:fc:28:31:e1:1f:60:2c:cc:74:ca:36:b4:34:7f:db: c1:64:84:b2:2d:c6:78:ec:10:c5:6f:20:fb:9c:a9:89:8a:2d: ec:2b:9e:a9:b3:6c:a4:4f:1f:8a:bf:62:c6:4d:f2:cd:e2:dc: ef:7f:03:49:58:9e:6f:61:14:26:dd:21:f8:93:1e:d3:d9:2e: ca:56:5f:7a:8b:c7:03:83:8c:f2:a3:c8:14:00:a4:32:3f:ba: d4:eb:2f:34:0f:7f:16:69:27:56:cd:c1:94:ad:ae:97:91:62: ce:94:7f:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNZU2bE7Ay1lVz6ipCg8ydpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjZmRmZTZkY2E4YWM3YmZhMWE5NDUwZWY5OWZkMzE1ZWQw MmFjZDkwHhcNMjQxMTIzMTQwMDU4WhcNMjQxMTI0MTQwMDU4WjAzMTEwLwYDVQQD EygyNDdiNjAxYTFiNzg1NzhmNjc2YTM5OGE1MjQzMjdlMDM2ODdkMTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4t9uCQikD5DTD7rdHylweJF5XBU/ KXuyLAIv+QoqgDXUfC5s8d8fQOxmDOi9EdD4nhOo/BQcShdtj4GWMt617fVhfCnz CFgdcpme0RL0hEXA1NIsyt6cRqbazm/z2bAbeKfqONhKx0tQAt/4IiEEyfUEBUOd Ya9jerKzisxJJle9WhWN9g94YHXhElyt5cxIdqvz9vhr/tUMRdJmoFinrQh7xaDq NmzUyQxdjp08GB/ChCRlYUyeI3fN/hYkbNa67OVQJjrRBa/K5F1E0Q1J7ohA/rCM H29PqME4dVwRDOxxQ1JU7vW5MpKvIaj/r4P27BPEemxvn+IM13qPA/TvvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCR7YBobeFePZ2o5ilJDJ+A2h9GFMB8GA1UdIwQY MBaAFLz9/m3Kise/oalFDvmf0xXtAqzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmIt MWFmMjQ2NWE4ZWVjLzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmItMWFmMjQ2NWE4ZWVj LzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYqCH6f5x kqa1/3CeLxR3lAO0hDBau1lhbCG4l7rU9QmMZkrzaJw/WnM0t2dbuu04NF4ie2rh hK8vwmUHYwLMrgSgVck2VUn5LwRPnIxHI5N4wBnGjVmEc7rmKtka/DpOLXHNB1cf ABcV4IvpmU5gRACuUwD+aPI4BOTw11juqFRZGiOlJuS8YTTUQ2yDrmoJXvLE/Cgx 4R9gLMx0yja0NH/bwWSEsi3GeOwQxW8g+5ypiYot7CueqbNspE8fir9ixk3yzeLc 738DSVieb2EUJt0h+JMe09kuylZfeovHA4OM8qPIFACkMj+61OsvNA9/FmknVs3B lK2ul5FizpR/MA== -----END CERTIFICATE-----Generated at Sat Nov 23 20:53:25 2024 by rpki-client on console-ams.rpki-client.org