$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft File: CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft (raw, json) Hash identifier: Uh0739FuIBz+rWX6071bcRfApbGkFAtiY0C+4wAt5xc= Subject key identifier: 88:73:E8:D3:BD:EF:D8:E2:7F:52:3F:21:E9:FD:BB:27:48:AD:7F:00 Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Certificate serial: 0193639F86748793C1185E2C424E44B61631 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft Manifest number: 13A8 Signing time: Mon 25 Nov 2024 14:00:19 +0000 Manifest this update: Mon 25 Nov 2024 14:00:19 +0000 Manifest next update: Tue 26 Nov 2024 14:00:19 +0000 Files and hashes: 1: Av6ADFhe3PaHcBJW6xr18DA9v6M.roa (hash: b23XAlMUkI49YIAVNpnl8tPrFM397w2EnLX6XW8f2E8=) 2: BFIAPGinLq80kciss10DZt2fwFc.roa (hash: X5EIRsWCKs5fuFNOH/+hjQ7jPxTRModZM+LB6Lwg98w=) 3: CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl (hash: rk49yQqjWlYgmy2wGgX5tpA8gAQGq8JiqTssGXWB6x4=) 4: FSLnbe4TJt29VL_O3oZpxa0n6AA.roa (hash: u3pFy7i04o9t3o+pao/14X2I0M8YQhckgfD4PM0GyVo=) 5: JFbRTwrN8TW_19bYxLW2yCRV4I4.roa (hash: seEdq0+Wzb8UFJRE05a8kifb/mDfrz1pG8aZKmvwW4Y=) 6: MMAgcHrQ-TGROCUvSlTTs46saLc.roa (hash: wzAa40QCYrgvluN6j8Nuk0TQrgVEs3jBPRJIFiRB5DA=) 7: MUmG_dA-aavv2uK-xKa6CJUhGHk.roa (hash: gB3RuvGfHULN6avqDd4ZJHMpP+q3GnxO/a7iNGMS9kA=) 8: VfQMGJnUPps_APgM0vmJzkrjqoc.roa (hash: MCpsScLI0I8aeLtldsOQ402lcvmoWaLrA/LtBeNyG/s=) 9: ZxyBZUunAChPzgZWGtPGnoArGrU.roa (hash: RG5dGu15PiWDLMPlxXr9ZsfVhU7f145bxO7z1DwHA+w=) 10: b4fYfIgiMl29Y4eA44p2mPzGUyQ.roa (hash: aqKNFJvxUOaQTzw/0+z0DW8DJMY+vXmlPCkP9UH3L5Q=) 11: iiRK6SjrQDzD7LRT1RkruJaueuc.roa (hash: 8FC6K78lQwGpmO0Beoh5RbQ7gdZMY1Pg+ogF2LxCPQs=) 12: qkQKkMyaAnhct0K28f7-lrZkyM0.roa (hash: iH1veUX6SEIXdltlT6gBQXV253iSYIBm8h0Ocxg4Q4Q=) 13: y3b_Ryw3ZVWyAqwmyXJHbBI-V7E.roa (hash: ZSr/KPYqH1P2d9+YfGve2AmTcGyeAoKLHR1FhVlkEE8=) 14: yCurq0ZUIoxIShLP1KKDF9hPUYQ.roa (hash: T+89pLRXwrByR5yPoMBU33eKRrCT08RHsCMIu4iYn8c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 26 Nov 2024 14:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:63:9f:86:74:87:93:c1:18:5e:2c:42:4e:44:b6:16:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Validity Not Before: Nov 25 14:00:19 2024 GMT Not After : Nov 26 14:00:19 2024 GMT Subject: CN=8873e8d3bdefd8e27f523f21e9fdbb2748ad7f00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c0:08:49:31:fa:3c:33:1c:69:d6:47:d6:ee: 35:d7:71:69:5c:2b:a1:4f:48:84:32:c0:9b:58:56: 43:3e:7e:cf:74:e6:ff:f9:3c:32:83:18:66:b7:bb: 7e:e2:c8:93:f7:5f:e8:36:33:48:57:28:f4:9d:87: 31:43:57:89:ec:27:15:03:50:6a:8f:9e:fc:bc:2e: 72:d2:af:54:9b:cc:43:8e:75:1b:5b:29:d5:99:e4: cb:e1:38:bb:1c:15:8d:50:ad:ea:b8:31:da:c0:43: d7:5d:b8:e4:c1:7b:f2:b5:2a:b4:ed:ab:7e:b3:a2: e6:c4:6b:6f:cd:eb:8d:5e:34:44:c9:fb:30:90:4b: f5:3d:d8:df:c3:8f:36:ca:1a:b4:f8:59:c6:b4:6e: 9d:8b:a4:e0:73:e3:71:6c:5b:75:db:7a:bc:63:e7: c5:83:98:d9:f6:0e:47:0b:2a:a9:11:50:3c:6a:5e: 3c:20:1e:b7:0b:23:0d:83:0a:90:88:3d:2b:6a:bf: d5:23:f9:25:44:b7:0f:01:22:ec:2c:10:48:ef:cc: cd:ef:b2:11:b7:55:1f:1f:97:10:ae:b6:7a:bb:16: 42:3e:cd:f7:db:fa:89:5a:f1:c7:3f:4e:8b:da:2d: 68:9b:e1:07:24:ae:99:79:83:87:e2:aa:53:42:5b: ea:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:73:E8:D3:BD:EF:D8:E2:7F:52:3F:21:E9:FD:BB:27:48:AD:7F:00 X509v3 Authority Key Identifier: keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:c4:f5:35:9c:0c:aa:ed:fb:93:95:45:17:ad:47:19:44:f2: 5c:9a:fd:fc:4d:f1:8c:7d:45:b6:ae:0e:fe:db:30:86:c5:83: 91:25:87:24:86:07:57:1b:8a:3b:c3:52:c6:81:d0:dd:94:08: 8c:c3:c2:94:bf:75:03:91:aa:d3:a5:17:de:36:72:5e:aa:00: a3:85:1f:8c:b9:cf:bc:95:71:92:14:54:34:19:18:0d:10:88: 09:a7:e8:c4:11:e0:9e:03:bf:90:cd:19:1e:3a:4e:51:67:78: 57:5f:92:f4:e4:85:d4:d9:b0:3e:b3:5f:0a:e8:2c:1f:05:49: 17:37:3a:ce:23:52:56:85:37:72:fd:1e:a1:78:3d:83:cd:b9: 57:46:39:b6:b8:f9:c9:d7:a6:37:79:9c:ec:45:69:00:81:57: d3:62:bd:9c:90:d7:b9:40:65:8a:dc:e9:05:4b:89:1d:07:2a: cd:bc:d7:63:58:84:44:d8:73:b1:26:eb:ea:fc:e9:c8:1d:27: 0c:6d:b6:1a:c0:6c:ae:1f:07:36:10:cf:b3:45:4e:bc:46:81: 3e:67:d0:52:de:19:11:6c:2c:18:cf:4f:e1:27:5d:66:d9:cd: 59:b7:5e:aa:c2:b5:93:3a:2d:06:ce:4f:6f:4f:20:2d:16:bd: 04:33:a8:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNjn4Z0h5PBGF4sQk5EthYxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MWI3YTIyZTUxY2ZiOWNmODQyMDVlNDQ0OTk5OGFkNTVk OGYwNjUwHhcNMjQxMTI1MTQwMDE5WhcNMjQxMTI2MTQwMDE5WjAzMTEwLwYDVQQD Eyg4ODczZThkM2JkZWZkOGUyN2Y1MjNmMjFlOWZkYmIyNzQ4YWQ3ZjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcAISTH6PDMcadZH1u4113FpXCuh T0iEMsCbWFZDPn7PdOb/+Twygxhmt7t+4siT91/oNjNIVyj0nYcxQ1eJ7CcVA1Bq j578vC5y0q9Um8xDjnUbWynVmeTL4Ti7HBWNUK3quDHawEPXXbjkwXvytSq07at+ s6LmxGtvzeuNXjREyfswkEv1Pdjfw482yhq0+FnGtG6di6Tgc+NxbFt123q8Y+fF g5jZ9g5HCyqpEVA8al48IB63CyMNgwqQiD0rar/VI/klRLcPASLsLBBI78zN77IR t1UfH5cQrrZ6uxZCPs332/qJWvHHP06L2i1om+EHJK6ZeYOH4qpTQlvqKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIhz6NO979jif1I/Ien9uydIrX8AMB8GA1UdIwQY MBaAFAgbeiLlHPuc+EIF5ESZmK1V2PBlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYt MDM2NzI2OGZmODcxLzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYtMDM2NzI2OGZmODcx LzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr8T1NZwM qu37k5VFF61HGUTyXJr9/E3xjH1Ftq4O/tswhsWDkSWHJIYHVxuKO8NSxoHQ3ZQI jMPClL91A5Gq06UX3jZyXqoAo4UfjLnPvJVxkhRUNBkYDRCICafoxBHgngO/kM0Z HjpOUWd4V1+S9OSF1NmwPrNfCugsHwVJFzc6ziNSVoU3cv0eoXg9g825V0Y5trj5 ydemN3mc7EVpAIFX02K9nJDXuUBlitzpBUuJHQcqzbzXY1iERNhzsSbr6vzpyB0n DG22GsBsrh8HNhDPs0VOvEaBPmfQUt4ZEWwsGM9P4SddZtnNWbdeqsK1kzotBs5P b08gLRa9BDOomw== -----END CERTIFICATE-----Generated at Mon Nov 25 22:18:06 2024 by rpki-client on console-ams.rpki-client.org