$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft File: DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft (raw, json) Hash identifier: XvR/xFtUnkBNZSofQcYKJquTctc3l+t6N2k9e/6aopU= Subject key identifier: 30:8A:57:12:07:C8:1F:78:AF:89:E1:C1:F1:97:DD:19:B1:FB:5A:85 Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Certificate serial: 0193520795F3182100862EBDAC8698035E6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft Manifest number: 1377 Signing time: Fri 22 Nov 2024 04:00:49 +0000 Manifest this update: Fri 22 Nov 2024 04:00:49 +0000 Manifest next update: Sat 23 Nov 2024 04:00:49 +0000 Files and hashes: 1: 20q5ylf1YJsm8RXiEl85HQxbM0g.roa (hash: PLHieY+cBGvE+qmRqwBONLcwgkYlaPVnIJ0MzjRIXVY=) 2: 2gUjlPsHqb_ncJcZ78sLRgGxgm0.roa (hash: 6pPasbljOid/unjMtz4muULDrAeLY88ZGgh5fs7tFUA=) 3: 3D7rJFyhnPBQv7KbLuLvgJxN48U.roa (hash: eFSTwFQuCpY+9JuTu481CDzZ+JcTAWphQkHvsTWt1qU=) 4: 3kJfKaEdoRO8F1BsxeAb1_F-eO4.roa (hash: nWHbcOJ7nJfQ34U+mLXxnYhPaiW6rMc/NRjtTtnEFys=) 5: A4ETMnVpd9FKMsWr1xoGVNiRnQ0.roa (hash: om1gO0GDBD6gvouVjflpQK4UVmpP3oimb5oVnEzGSHI=) 6: C6SZ6sx6DqKZyXUk0FyTcVkU28g.roa (hash: 29omU0S1FzDixXTVjlH5LMOkvtB6uWxUWAQvxa0RxFY=) 7: CicAHWRR5XOwNMJCvxwZATnlww8.roa (hash: HD4XTQ66LapfO87iOiV3HPYGdxRYCImk1DdsXwOnng0=) 8: DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl (hash: iya90a8CVX66yy+w2ZA1d4L7ACCjccnU5EEN2oqVquQ=) 9: DS3A8f598VOd6_-2g-KDEl73Fh4.roa (hash: eJzg7+d7/JBTEKtsOdD1OZfc+ifYUlRADs9hIT64vvA=) 10: FEmNV6RCXEyXSd2kVJ8L786goBY.roa (hash: bb6RMCGc4tJgnUSuQIuxYAR34DxEQ6c3anZt6NKD4o4=) 11: NWrwC-CLu-jxgbH3O_DuLYKhOF4.roa (hash: TJ7gN7ruytFjGwlTLNh7t1tWjn1CMeZhzRnEQtjhluU=) 12: NhO3_RjbYIpGKWdlFLCubHI1S1Q.roa (hash: Bx1MYNMWhkMUsNXeW8txyueZdiri180rcR0ME4YiE/o=) 13: OeKoXcd26vyCg9h0RkAhdzBSnoo.roa (hash: 1lzGTe/X4eOGN99jeD4ND4SYrGHbTm9yHFyQfmgf0fE=) 14: PG7Zf8aAWfqw9tKBN6g1hjNwDPQ.roa (hash: sPDzBzy3QYxqJx/oMxGQ1FFccqsNGIFk/vyJOo8gdvU=) 15: S2abFgVBaX0vxIMVaBvfqkautT8.roa (hash: ZIJ5a+Cyw/DlmQJsbFP/o6mLYtorGNIc27EwACJUnDI=) 16: U9dcbHPHf_3ASAJ7POK5fWlL5uw.roa (hash: 3eIXlWjf9tJGyYVtPsciWlDO1pjT8+VzuGXX6vdJE/Y=) 17: WymygCcy2Cth2XCvGhpRvzNvm8U.roa (hash: saRq3HRvr89AG4wdqhPbp/MCJcv27U/aycPomon4sMw=) 18: XgFgH_9RQY6v5e1k8toTXe3dGdA.roa (hash: mjUBb0W676jXnwpAo0EqjPP4mAvi+5/TfeXi0bh4ZJI=) 19: duyt9Q95uxdJTfQpIcIlJc-dN5k.roa (hash: aJN1l/17Ww/SdimLNISIp50voX+ETKkoGnJIVTr+Ej4=) 20: gKxNSLaRPEFnDExhi75buJWdrpU.roa (hash: SumVMzb4NtPBdfqqjxWXnD82kQ3CCubj9rTDNwTZufM=) 21: j2u66JaywmoFYWfPIADVdkPFJQ0.roa (hash: Em5MQjkqzDdxE+eTy+VgcmbQciK3FMpXD4JxzeW/9JQ=) 22: mSiIWURkQkpONEXeScvdUxN-Rrk.roa (hash: Dbf2NNHLkjwbVRVdC0AdCaSnEu/8byFPH6WOmdVAUAM=) 23: pCkXekt-IN15CD9_d0JUkoetpLY.roa (hash: Ic8KLXKTsRta59ty8Jlls4Nhokb7B889HKvIqQ+FqvM=) 24: rUzBuLfMTnGa0Sw4qWDG8MdNv8Y.roa (hash: xgXz1M4afQozNwIOLdafkUm7BvYEWhyCq4btNRWRY+M=) 25: so3611zKNeWDC7xRB_gxQRKcfE0.roa (hash: 1I8I3fP+BXgxqvv4+VEimTztqZSIqwxgXnPKlgwP0KE=) 26: tXzCu7HU1iQIa1IG46ejSsoHoTA.roa (hash: 1qFE0LUluZ0P/Oyt+0AJYBKNasL68koX7VEUM9iuHz8=) 27: uE7fBnbRHYfmBCkHPxXmbGGjA8o.roa (hash: qoYnsB8xu2nQbGo8D50i97IapNq2JumQn04kxc9+nE0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 23:17:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:52:07:95:f3:18:21:00:86:2e:bd:ac:86:98:03:5e:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Validity Not Before: Nov 22 04:00:49 2024 GMT Not After : Nov 23 04:00:49 2024 GMT Subject: CN=308a571207c81f78af89e1c1f197dd19b1fb5a85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6d:66:8c:13:61:ce:eb:9b:00:30:b3:f2:e9: a4:0c:a5:17:35:d8:57:38:1f:4b:48:98:36:2a:d6: 17:73:ef:3e:3f:a3:76:9f:06:60:5c:a9:88:21:82: 80:d4:e4:d0:8c:7e:5b:68:d8:da:7f:7a:ff:25:63: 22:8e:a3:5a:58:87:f4:a3:9b:82:4e:fc:de:c1:59: cb:50:24:5b:25:94:3d:8e:31:f6:56:60:e8:25:99: 35:97:91:05:ac:bb:55:fb:39:19:c4:08:0d:3e:df: d5:01:80:76:fb:7b:2d:77:29:73:eb:33:3d:ad:ad: 08:b3:ea:c8:95:c1:9a:2a:80:cf:83:8a:a4:69:28: 70:cc:90:90:fc:5f:11:49:8f:d9:42:d0:0b:b8:39: 4c:0e:fe:72:ee:ef:0f:1d:69:c1:16:ac:4a:97:22: 82:7e:7e:f5:4b:19:66:ef:fa:5d:fc:cb:de:6c:35: 96:04:aa:fe:99:1b:c9:5d:04:b8:46:39:89:ca:80: 9f:ff:bb:27:3d:1b:ef:e0:2f:72:5f:86:8c:40:17: 25:a7:ec:1d:7f:b6:d0:f7:28:db:33:1c:2a:97:88: c5:69:4c:c0:e0:e5:b2:42:a9:61:18:1d:28:83:59: a3:36:db:6a:7c:e4:c9:b8:2c:07:10:03:48:e7:40: 02:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:8A:57:12:07:C8:1F:78:AF:89:E1:C1:F1:97:DD:19:B1:FB:5A:85 X509v3 Authority Key Identifier: keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:eb:da:ec:9d:00:fa:ec:1c:61:83:02:05:19:35:15:86:7b: 42:1f:0e:22:03:c3:30:9b:80:93:91:6d:c6:83:a6:e6:04:14: fb:c5:bd:fb:51:08:22:cc:d6:28:15:27:73:84:fc:63:bc:48: 0e:91:b8:75:ca:2e:05:2e:72:c4:c6:5f:ab:4b:ae:86:96:ce: bf:d8:0c:b9:e7:ca:90:1a:72:c3:44:e7:c3:8a:e3:05:59:e5: c2:32:6a:49:7b:a7:fd:39:ee:a0:f2:f3:29:57:5d:b1:fb:d4: 83:91:e7:11:5f:0e:95:c6:13:08:a9:63:08:f9:f6:57:ee:00: 54:08:cc:5d:23:e3:1e:2a:8f:98:4a:0a:eb:f0:53:73:2e:44: 3d:90:c3:a3:be:a7:bc:d9:20:f2:9c:ef:fa:df:5a:f2:22:2c: 11:10:e8:f9:ed:88:4a:6b:c9:7e:2b:b5:73:3e:74:ce:fa:ba: 0d:3b:dc:d0:1b:13:08:76:b7:0f:d8:21:08:6e:26:24:78:5d: 54:03:27:11:0e:b0:cf:a6:2a:ac:09:df:22:2d:cd:e7:4e:e3: f3:3f:37:25:53:12:2d:85:5b:af:d9:d1:cb:57:b9:3a:bc:28: 47:11:1a:3b:f3:a8:8b:31:62:c0:21:5f:dd:97:bd:25:46:7e: b2:9f:be:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNSB5XzGCEAhi69rIaYA15tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMjFiOTI1YjRjNGJjYzMwZjc3YzljNDFiYThkMDQwYWM5 NWRmYzYwHhcNMjQxMTIyMDQwMDQ5WhcNMjQxMTIzMDQwMDQ5WjAzMTEwLwYDVQQD EygzMDhhNTcxMjA3YzgxZjc4YWY4OWUxYzFmMTk3ZGQxOWIxZmI1YTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx21mjBNhzuubADCz8umkDKUXNdhX OB9LSJg2KtYXc+8+P6N2nwZgXKmIIYKA1OTQjH5baNjaf3r/JWMijqNaWIf0o5uC TvzewVnLUCRbJZQ9jjH2VmDoJZk1l5EFrLtV+zkZxAgNPt/VAYB2+3stdylz6zM9 ra0Is+rIlcGaKoDPg4qkaShwzJCQ/F8RSY/ZQtALuDlMDv5y7u8PHWnBFqxKlyKC fn71Sxlm7/pd/MvebDWWBKr+mRvJXQS4RjmJyoCf/7snPRvv4C9yX4aMQBclp+wd f7bQ9yjbMxwql4jFaUzA4OWyQqlhGB0og1mjNttqfOTJuCwHEANI50AC7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDCKVxIHyB94r4nhwfGX3Rmx+1qFMB8GA1UdIwQY MBaAFAwhuSW0xLzDD3fJxBuo0ECsld/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2Ut YTM0NzU2NDE1OGY4LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2UtYTM0NzU2NDE1OGY4 LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOuva7J0A +uwcYYMCBRk1FYZ7Qh8OIgPDMJuAk5FtxoOm5gQU+8W9+1EIIszWKBUnc4T8Y7xI DpG4dcouBS5yxMZfq0uuhpbOv9gMuefKkBpyw0Tnw4rjBVnlwjJqSXun/TnuoPLz KVddsfvUg5HnEV8OlcYTCKljCPn2V+4AVAjMXSPjHiqPmEoK6/BTcy5EPZDDo76n vNkg8pzv+t9a8iIsERDo+e2ISmvJfiu1cz50zvq6DTvc0BsTCHa3D9ghCG4mJHhd VAMnEQ6wz6YqrAnfIi3N507j8z83JVMSLYVbr9nRy1e5OrwoRxEaO/OoizFiwCFf 3Ze9JUZ+sp++oQ== -----END CERTIFICATE-----Generated at Fri Nov 22 05:53:03 2024 by rpki-client on console-fra.rpki-client.org