$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft File: xhlTwImArclPL6OjwbqVxA0h59M.mft (raw, json) Hash identifier: v831gHTHd5gYUmXg333RxMYfAeHa+ymP0HTynQtfYTs= Subject key identifier: 73:94:36:42:5B:E8:09:0F:B4:2A:CC:9C:EE:F3:C3:34:73:0F:6E:7D Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3 Certificate issuer: /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3 Certificate serial: 0193655780A3C09497E8DDFB993B9592992E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft Manifest number: 0A05 Signing time: Mon 25 Nov 2024 22:00:53 +0000 Manifest this update: Mon 25 Nov 2024 22:00:53 +0000 Manifest next update: Tue 26 Nov 2024 22:00:53 +0000 Files and hashes: 1: 119DD30tEeluywdmFKPuQXyaErs.roa (hash: uUxP9pyAo/alpcJhRKwMHv99y+Upd/KE1ABz2kn56k4=) 2: 6zpqv5KzLs8CUU18smIcS3hk0mc.roa (hash: cHqIXnkGAyLZuQ3saScLYw2X+v3tiFY3vP0pXUlNtxw=) 3: DVdCCWbIEjcETINW_LZxmL-Vf_M.roa (hash: 6XZAnl1oPe2/3hZsJe5hnXCQsmSZExnhAQqQ6lAGGII=) 4: FiJw3sNuQZ3Cs3CXLeCZApf3aZY.roa (hash: ShqAWFqtMKAHfsXkf25gpIUqIV+ZnGhCCtm+4tmiAGE=) 5: H9bQQUk39i6y6OeBSg_vcXCwgv8.roa (hash: dChLwSEUYsC1npozhuIRHWZPwujOpqtfnOFzFsOCJtw=) 6: ImDr1fO34O_eYKj3l6XDbLT0dVM.roa (hash: fg6bdgE1BEGScskv4olUG8m6ep9IHThaKK30kccYp3E=) 7: LeF9wI4CcTL9ilZnHIUMu4LMNNg.roa (hash: R/260ayWSds3fkmGf472rAEx+Tu19ConoVaBfpd9ckg=) 8: MmOUK518ins1Lw0fMfBDlcbe4cg.roa (hash: vR3U8T1ijS4vWmNU+GNz78nxQgb0Cp+8OFdSaAKEBLM=) 9: QjvrrFdq7QlvBd65nzaLlBe7pPE.roa (hash: q3TZWIki8qPxAZ9W1qA2l+tw6ChJnWhmGHdtmSrSMAs=) 10: UVwqCdRAr43btl6FtpA_qnTSo7U.roa (hash: YaeYfwMGrJoUVhcwnXkwipP1PWybW9NkF86Z8RNT5d8=) 11: bziqkTd_8Kc3PM729w18HFFPPXc.roa (hash: MGGc6IVe1NgTA3MKq2YwuEsD2dddpvnCAjmfZ1BvyE8=) 12: fXtPvnbbpnIeEuPZfFzs9c8Y_I8.roa (hash: dMbI/SvWU1n6mCuOmDtjgF8MsbaLCUXGuA1MOG7Tkmo=) 13: iQCDbqW9VFW6BdpoRJbdec9wp0U.roa (hash: Z49pQqYiReoZE+sjW9mgWrRKUgxyLFTxxOWowRMUaQg=) 14: tJvA6gkc1fZkIKfqZNTbOO4XdJo.roa (hash: e482Y4pN/I/tCq1pBrPiXfChisbOxHe4mbP+JPplktM=) 15: xhlTwImArclPL6OjwbqVxA0h59M.crl (hash: FSk/D2gnxnII7BqEEyMZyLxlMLmkH6pHx8YSHgQSljw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 26 Nov 2024 22:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:65:57:80:a3:c0:94:97:e8:dd:fb:99:3b:95:92:99:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3 Validity Not Before: Nov 25 22:00:53 2024 GMT Not After : Nov 26 22:00:53 2024 GMT Subject: CN=739436425be8090fb42acc9ceef3c334730f6e7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ca:1f:2c:79:56:04:98:22:ea:17:00:8b:6a: 9a:d7:fd:56:63:c7:52:33:36:ae:ab:45:25:41:6d: 9b:59:77:21:16:2e:da:8d:fd:55:3f:82:0f:97:16: 60:30:30:e5:65:04:d3:73:f4:d6:16:49:9e:49:b1: 6d:28:53:64:17:4e:97:e3:97:bd:b4:62:ba:4f:a4: e9:28:3e:ef:ac:ef:db:5d:42:bd:df:c5:37:6e:d0: 9c:a8:28:58:9b:c8:6e:7b:ae:65:0e:55:64:74:34: 83:ca:81:c0:1c:67:e6:92:fa:38:22:dc:f4:34:4f: f1:53:66:0f:14:c6:94:c7:2b:97:65:54:25:de:0d: 3b:4d:83:23:62:4f:a0:61:a4:76:4e:9f:9a:bb:95: 9a:ac:4b:71:6c:dc:80:f1:a6:7e:c2:a1:3f:15:0b: 72:a1:ae:b4:d7:28:f8:42:5c:3c:aa:86:c2:45:03: 07:03:d4:ee:79:9d:bd:c7:8f:1b:9c:77:d7:ed:67: 32:6b:fc:e9:db:af:a8:4c:5c:20:50:b8:ea:3d:fd: 24:e7:33:e8:b1:59:75:3c:12:ae:1a:c8:e2:0b:6f: 93:f5:58:9f:c7:77:8a:e5:c5:c1:8f:f2:1b:fe:71: eb:cb:4d:0f:4e:7f:72:7b:5f:f1:81:7a:c1:99:fe: 1b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:94:36:42:5B:E8:09:0F:B4:2A:CC:9C:EE:F3:C3:34:73:0F:6E:7D X509v3 Authority Key Identifier: keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:0e:29:49:16:ef:70:ea:fb:61:aa:2b:20:bd:e8:3a:b5:3d: 80:2d:d5:45:68:68:80:7f:06:1c:52:bb:a6:a6:cc:75:46:f6: 9c:31:16:27:d2:f0:23:61:22:63:71:64:cf:44:26:b4:eb:74: 00:14:30:87:dd:a1:e8:6d:da:02:84:9b:27:2c:49:0a:0b:ea: 66:17:76:47:a4:7b:71:a0:3f:5c:a6:3a:16:67:bf:92:e5:89: cc:b1:0b:be:e6:38:32:eb:d0:7c:af:e8:3b:b9:58:57:06:8e: 18:5e:14:e5:33:bd:47:75:7c:b2:70:a5:91:be:65:26:6e:23: d7:e4:75:1d:3d:f2:9f:a2:67:e9:82:52:2b:5a:f1:e2:02:4f: e5:0d:87:0a:04:e3:99:e5:37:24:20:39:e5:9e:d6:9b:1f:55: 7c:21:4c:b9:0e:64:5d:19:f1:77:f9:e3:69:28:b3:aa:f6:11: 0d:e7:25:a2:c0:98:15:d8:cd:79:63:69:29:c7:9e:58:90:d4: 40:0a:ca:67:c8:89:58:57:e1:0a:d0:52:a0:05:23:4e:76:ec: c3:50:1e:0c:75:a4:a1:fe:45:64:14:8e:c3:20:66:f1:13:93: a7:ab:91:b0:c3:d8:3c:23:7d:5f:fe:03:a9:eb:c2:98:7b:e4: e5:28:f1:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNlV4CjwJSX6N37mTuVkpkuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTk1M2MwODk4MGFkYzk0ZjJmYTNhM2MxYmE5NWM0MGQy MWU3ZDMwHhcNMjQxMTI1MjIwMDUzWhcNMjQxMTI2MjIwMDUzWjAzMTEwLwYDVQQD Eyg3Mzk0MzY0MjViZTgwOTBmYjQyYWNjOWNlZWYzYzMzNDczMGY2ZTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cofLHlWBJgi6hcAi2qa1/1WY8dS Mzauq0UlQW2bWXchFi7ajf1VP4IPlxZgMDDlZQTTc/TWFkmeSbFtKFNkF06X45e9 tGK6T6TpKD7vrO/bXUK938U3btCcqChYm8hue65lDlVkdDSDyoHAHGfmkvo4Itz0 NE/xU2YPFMaUxyuXZVQl3g07TYMjYk+gYaR2Tp+au5WarEtxbNyA8aZ+wqE/FQty oa601yj4Qlw8qobCRQMHA9TueZ29x48bnHfX7Wcya/zp26+oTFwgULjqPf0k5zPo sVl1PBKuGsjiC2+T9Vifx3eK5cXBj/Ib/nHry00PTn9ye1/xgXrBmf4brQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHOUNkJb6AkPtCrMnO7zwzRzD259MB8GA1UdIwQY MBaAFMYZU8CJgK3JTy+jo8G6lcQNIefTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYt NjI1MjQ1YTAwYWJmLzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYtNjI1MjQ1YTAwYWJm LzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANQ4pSRbv cOr7YaorIL3oOrU9gC3VRWhogH8GHFK7pqbMdUb2nDEWJ9LwI2EiY3Fkz0QmtOt0 ABQwh92h6G3aAoSbJyxJCgvqZhd2R6R7caA/XKY6Fme/kuWJzLELvuY4MuvQfK/o O7lYVwaOGF4U5TO9R3V8snClkb5lJm4j1+R1HT3yn6Jn6YJSK1rx4gJP5Q2HCgTj meU3JCA55Z7Wmx9VfCFMuQ5kXRnxd/njaSizqvYRDeclosCYFdjNeWNpKceeWJDU QArKZ8iJWFfhCtBSoAUjTnbsw1AeDHWkof5FZBSOwyBm8ROTp6uRsMPYPCN9X/4D qevCmHvk5SjxQw== -----END CERTIFICATE-----Generated at Tue Nov 26 03:28:57 2024 by rpki-client on console-ams.rpki-client.org