$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft File: zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft (raw, json) Hash identifier: dmi56s4g/WpK66xYaNCsf3X0YRzXEJwyv0dUXSKHS98= Subject key identifier: FB:B8:7A:E0:80:B1:0E:49:1C:6F:3E:E0:79:5C:0C:9B:2A:F9:1D:1E Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10 Certificate serial: 0193610C8C5B859A929EAEF5B8A039F5578A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft Manifest number: 1068 Signing time: Mon 25 Nov 2024 02:00:32 +0000 Manifest this update: Mon 25 Nov 2024 02:00:32 +0000 Manifest next update: Tue 26 Nov 2024 02:00:32 +0000 Files and hashes: 1: 1-gYRTEDgBogd3mXfDu-gGMVlMfs.roa (hash: 1/N4+O1zGf490R5GwGGO9rqov3KpiVu2vaX1gaZCaPI=) 2: 18wdImIjdKXa97zZMdZbf1WScgc.roa (hash: k1kZLZyXZ84VbViiGupycHumOeGbcuw0NgIg2Y2Ql9w=) 3: 1OXDrnKBaQKAtdtYIsVIxZDJJhs.roa (hash: 6M3hKsb/SQxfZym82J66oBqdUaT6NRsCJ344/lNmn2A=) 4: 1qEBqvtcz5mI9_DFE--K0cXvkAU.roa (hash: 4mQU3XK1Y7DLKaw2RSaKFGbXf6Vj+JNhDOwUsqYB/r0=) 5: 1wBalx9WDLcBACbpU9hwC1crxOM.roa (hash: E+AQusnxoOIWMPpr3gYfcxHhS/KWBayHugfHAUV9qrQ=) 6: 76Pvi-mCI_kvhvChxawAq9WxpI8.roa (hash: or/y7oUYC2QGqUuHt0KNrVhCZ0/7+EVN745Zbj3NAY0=) 7: 7B4t3xKdAEsO0Oagglr9OxEV818.roa (hash: Dr/Vnv6Ovz4rO3TqddbEYb/kqUauUf9dC1lf5zzFHuE=) 8: 8EOXoah0yB1la4V4npqxZcxxO-E.roa (hash: Ggd1O8SZhiJMcS/5L5RD+8LJQjT8sxS1mEooec2MuCY=) 9: DyXUbwpIEDome5ow3Bh9K4jpUYk.roa (hash: 5X926MC42+33sQIuGK3+5uem3apC+MV36YpyhXpHp3o=) 10: EsI7ujn32y4U8uFwbmeTekyo2Hg.roa (hash: M8Z2yuO7Rc3GojBg4Cy8SjIRfAJ81uPPHSAkaRoTa0o=) 11: FtiSi90aZYGVntvQxRcS5-xWS70.roa (hash: 2j+rFyjZENTv+0RadA9U4ynXOznAmp2l7c5kyK66Lwg=) 12: G6NSWYCvniGQNwfFgci0NfgxLgE.roa (hash: dbFO28SvWoFJIF8W5Qm2OIWehlVm9N61zjPD+CVfZcc=) 13: GCLgFqoTcQ802wZnSDTURAeovpw.roa (hash: SBGZh5wVAPwbiYYdurTn2HT2C+lZ+iAY0CkVMSPQ49o=) 14: NQdUkIc5JM3qTXrb1E-haJySqwQ.roa (hash: Coy20L0cpkpksUx8J7nGBXkDlyK5yeQJ/4TKHNB/s/Q=) 15: RvJWmaU305TeL5TYZxubp0dyCN8.roa (hash: GA2vEA35htCf5tcaqfUGmC9+pW+O+YQeU7vZzxgpdQQ=) 16: S-RP-rIyn8JGou7rP7iUSDEgZlY.roa (hash: hE2r0OYHWw+/9x03Wtj1i6lkSxGDptaekNPoJKUJOOs=) 17: TVlYzO7iFrFR7ikbMWSWbdaXcGw.roa (hash: MLAwG29bhYYYWSABqQxjddnibiRarsIbXFU5jo3pXzA=) 18: Ut0GWWrjpXgJBXhNZsL1nQJtzXQ.roa (hash: YhATTWjiuMXY5dXW7m2vmgONAPrYPIoCr94lFRWz2Js=) 19: VBztEHNOJu9i_9mirhkNTqtlMSc.roa (hash: C9riKjV7XKb/QKs4rXbSt2NIvRUT3MF5HPB+dW23pDc=) 20: VdYLbstMzE9hiBKWz4nx_oDRAsU.roa (hash: i1ClkBCcGb1AU43EQC3FZdPkPh3N8gVV637B5KYNWLM=) 21: WKgw5P4mzgoKXrVm15Pz8vylFPU.roa (hash: 2WbDmBNb+B4B7nyhUvN6gbAL/S7BP2+iT/LvGMkqet0=) 22: X3C6LAK-QE0is9X8n4Dl2RErIUM.roa (hash: ZqE0hmGRT04RF6I9/LcTNcEZ/sB++9JPc2l3swOoswE=) 23: XConMz4OsqWcLJS53McmQapQqZw.roa (hash: jHRWzv7bAcsAmX6ErO+SwnSip9a14dcT4C0po91a37E=) 24: Y9kbOok1m2TARy4RoZILF50w4WI.roa (hash: 5n4SDAhLWtmGYFme8QOvDziLgh832TC+HEA7EF2IUQ8=) 25: Zn4z7djRxj35GnT6XX7XDgrLjmQ.roa (hash: TWKOTHUACbr9uGhBhtBJfvzK+cMyaIW4ziORHkkBYJI=) 26: _yvMuwLQOOs9T04o2lBzsdR5RLI.roa (hash: zXfO2VOt+xSDyGtPtSAC9lHn5l4jfLJwezEfjkcnS+Y=) 27: ajxA6lhO3asXKigx5WkWNdRsQ-4.roa (hash: hos3iNB0zeqGz8v3O3sNyz1iqqGIzhNNboBk6N7lp8M=) 28: fec7JqC-wOo8nCxUs-nKrzz06TA.roa (hash: oOxRIO29PVAVo8lz8nDYuFby/jpsSkl7n+OyaQjrk0A=) 29: hRdFyAwb4_Q8ZVb_tEz5hM6YrAQ.roa (hash: OOF3AJ9AmM2BsTS138Bqim74T3BtvzNIxeelRHnZ8Zo=) 30: i9DQ_ehQGK2G0JOGkm-5UQ4QRnM.roa (hash: Z+RgGR5FT52zh9qeGhbOxt6CxeBCrsk1sH7jphtY7Vs=) 31: iBA9VEi9aBPF0OkI-cLi8Dp9UZs.roa (hash: UL7/hqPAtlUAPV17SaCcOm/8+EaEmdYUpCIbwuHD0U4=) 32: ldbZHv2thMeZxsZDg7x8wRMENBk.roa (hash: UxhBCBKsIKJeDA4PtEND1X9jK0f1GPspP6dDePUAadY=) 33: m9LCFz5xLfc4cljH-wG5be6Lw68.roa (hash: 5JHvMT30DNy79BTMrBYOZlkuZy0xDZde4R/SmH9ui18=) 34: ncRqXQFyR6xDZB32ht1Nacue3c8.roa (hash: dXFaiWo+I+LI+WYlG87fg09TwTXq2nWWt8CvpmzV+EM=) 35: o39pGXona0O4f_TsLBlawIcYL9A.roa (hash: 4Zne6ocEsolkkMtOIOZGNm80jFsZNtpxM5i38nr4SgE=) 36: oEYYpaDFfedJB5n-5ZB-hiCNQw0.roa (hash: NkX+Gnens741Jl7DJk7QHUiiaxbN9ctgMymqQeHPBic=) 37: oqawLEFFJaiowe1iTKwHYuOqNlE.roa (hash: LPpE55zvZDWHl/Hxwb77r2CzUIfckaSuynmPy9W5XDc=) 38: qjih2glBF2RTM7Wk6jgpUGwi1N0.roa (hash: 1W/ZAB71nRSFEt2W5wWe1rKCAtyMBrMZ0FVbko5Mipg=) 39: rmo13AJJDF-BtjluribLOJFTz3Y.roa (hash: Cv/X1+Qghd4HTcTzm7TxufQhGYdJh+3cmGpBY3SQnpU=) 40: sbB5rWznkx11a-ml7F5dgxBdLB8.roa (hash: hZDJbvnmqoTqmB24xt4Zqd+OZQtbN/yic/4pL/K8uVA=) 41: toBUQK64vtxiKMA2SsP9lh1zHzw.roa (hash: gJ8O6JqGEMddFHPg1GsouuAbYZ6G0et3gJMLl6Thjj4=) 42: wSnw1DMsaCQ0d1eByR8MqM27TpE.roa (hash: +IDU02yZxdB9iSa/v+qTnC753n6GPLSXTGomLR5zVmw=) 43: wpf13-x14zOfH-bp7l3X8Yj9fqA.roa (hash: x6f2jbju1jsmUlOU8zlQJBVLOnT6rjpbzMQ7NJcIe8w=) 44: y0zdRWuzmIRAskpsFNPm0uwwsKY.roa (hash: msvJ/R06trDjxb6r8ztanpJcgLakTgUxB4wZRY6B+8E=) 45: y9uAGCONvqstezPxQAk-PtnGJn8.roa (hash: 2hQ17lR8xgsu0ik7iAOlbT1BVVZufhuDEjce5om4sWU=) 46: zMQ9S7mv5PJCO25bYmKTKG3loBs.roa (hash: 41tffzG/FW+bZmKTa9me0//+FMCtND6Ja2MNxctrVa8=) 47: zTtRvwmwWXjwB_er0GN8H_Wnd18.roa (hash: XzYZeKgz2TQZ4DRlejY02I1XQf1hkwUDpgPdv07qxSg=) 48: zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl (hash: yfLpJAReA0iyvDfWr1OL5+3d4eIEN32i7PlreGxIVZs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 26 Nov 2024 02:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:61:0c:8c:5b:85:9a:92:9e:ae:f5:b8:a0:39:f5:57:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10 Validity Not Before: Nov 25 02:00:32 2024 GMT Not After : Nov 26 02:00:32 2024 GMT Subject: CN=fbb87ae080b10e491c6f3ee0795c0c9b2af91d1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:20:23:0a:9f:db:63:84:3d:d1:ec:37:03:de: d9:9a:f6:c5:5d:6d:f0:ae:d9:1d:db:8a:4a:71:5c: eb:07:a0:0a:aa:a4:67:e1:14:52:ae:c4:6f:81:dd: 25:34:99:36:67:45:c8:83:93:bb:38:ce:0a:6a:73: ac:2f:b9:60:b6:a4:69:66:05:13:39:26:84:22:72: b0:41:6b:2e:fb:65:7b:57:c5:60:d6:bd:57:2f:83: 2f:fd:ec:44:fb:82:e3:de:1f:49:d3:16:28:85:a7: cb:d5:1c:f6:e0:2f:59:d8:fc:10:ba:70:97:86:5e: f4:d0:71:05:5b:7d:cb:70:a1:c4:fd:06:aa:08:ae: 06:ea:a7:28:c3:8d:58:c6:1c:3e:5d:94:2a:14:1f: b5:e5:4d:9a:ca:9b:b1:9d:82:c2:02:1e:03:3b:c6: 3e:c9:07:4d:79:c7:97:0a:5a:84:ed:e6:14:ec:bd: e2:34:da:9b:01:8f:77:07:1c:7c:7f:3b:41:69:6e: 55:80:ba:d0:fd:f1:fe:d5:13:bc:39:73:bb:b4:5f: 16:9b:f9:9f:37:1d:f5:66:52:8e:64:3e:71:fc:70: ba:88:49:76:b1:8b:ef:b1:1b:44:65:d9:27:17:0b: a3:af:a4:c2:84:9a:cc:07:40:d0:11:3c:04:79:63: 5e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:B8:7A:E0:80:B1:0E:49:1C:6F:3E:E0:79:5C:0C:9B:2A:F9:1D:1E X509v3 Authority Key Identifier: keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:79:63:47:d5:99:bc:70:9d:89:5d:93:41:3c:c8:9e:23:5c: e9:52:23:d3:1f:6d:16:4e:e5:19:ef:8e:1a:6f:8e:a7:ff:71: 78:52:38:1c:08:32:3e:08:c1:1f:aa:01:40:f1:8f:69:49:fe: 6a:fa:86:82:9c:a5:0f:5c:df:0d:dd:03:33:f8:34:4d:6e:f6: c7:bf:3c:cd:0c:99:5c:4d:fb:db:49:b7:d2:62:b0:05:3a:f9: 75:3b:57:f6:be:82:5f:46:c8:f6:12:c7:72:ba:10:2d:01:91: 09:d8:5d:61:5b:d2:80:76:47:74:c9:a3:64:c0:cf:bb:65:74: d6:22:84:5e:4e:77:30:da:6d:5c:ff:09:a6:72:a5:1d:d4:57: 14:6e:a0:51:6e:79:0d:e2:ff:d0:a3:37:6e:9a:d2:6a:53:4b: 57:f5:6d:52:65:72:3c:1d:84:b7:f3:c5:4b:c9:d2:21:00:3f: f4:d4:33:68:42:95:9f:cf:2b:42:cb:61:19:30:7b:ae:c8:aa: 89:21:59:11:99:22:4f:10:fe:eb:83:b8:6d:1e:13:de:cd:7e: 96:ff:b4:18:00:81:b2:95:fd:db:4e:42:bf:68:c5:bc:6d:a3: e5:b0:80:e1:cc:3b:d9:25:66:a8:64:f0:e7:b7:6e:9b:fa:2c: 2d:65:60:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNhDIxbhZqSnq71uKA59VeKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx MWRhMTAwHhcNMjQxMTI1MDIwMDMyWhcNMjQxMTI2MDIwMDMyWjAzMTEwLwYDVQQD EyhmYmI4N2FlMDgwYjEwZTQ5MWM2ZjNlZTA3OTVjMGM5YjJhZjkxZDFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSAjCp/bY4Q90ew3A97ZmvbFXW3w rtkd24pKcVzrB6AKqqRn4RRSrsRvgd0lNJk2Z0XIg5O7OM4KanOsL7lgtqRpZgUT OSaEInKwQWsu+2V7V8Vg1r1XL4Mv/exE+4Lj3h9J0xYohafL1Rz24C9Z2PwQunCX hl700HEFW33LcKHE/QaqCK4G6qcow41Yxhw+XZQqFB+15U2aypuxnYLCAh4DO8Y+ yQdNeceXClqE7eYU7L3iNNqbAY93Bxx8fztBaW5VgLrQ/fH+1RO8OXO7tF8Wm/mf Nx31ZlKOZD5x/HC6iEl2sYvvsRtEZdknFwujr6TChJrMB0DQETwEeWNeJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPu4euCAsQ5JHG8+4HlcDJsq+R0eMB8GA1UdIwQY MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt N2U0ZDZmNmY2ZTY2LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2 LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa3ljR9WZ vHCdiV2TQTzIniNc6VIj0x9tFk7lGe+OGm+Op/9xeFI4HAgyPgjBH6oBQPGPaUn+ avqGgpylD1zfDd0DM/g0TW72x788zQyZXE3720m30mKwBTr5dTtX9r6CX0bI9hLH croQLQGRCdhdYVvSgHZHdMmjZMDPu2V01iKEXk53MNptXP8JpnKlHdRXFG6gUW55 DeL/0KM3bprSalNLV/VtUmVyPB2Et/PFS8nSIQA/9NQzaEKVn88rQsthGTB7rsiq iSFZEZkiTxD+64O4bR4T3s1+lv+0GACBspX9205Cv2jFvG2j5bCA4cw72SVmqGTw 57dum/osLWVg9A== -----END CERTIFICATE-----Generated at Mon Nov 25 07:44:56 2024 by rpki-client on console-fra.rpki-client.org