$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft File: 27OW36lR7EFX8hHl7XQO2X4bDz8.mft (raw, json) Hash identifier: B1Jr+WQIo/nUHZ0B4TyHV7ffsf+oXFhzHLfzm307rwo= Subject key identifier: E5:8F:59:F7:6C:2E:6E:03:05:95:B1:E9:C0:C2:70:42:7D:FA:5A:21 Authority key identifier: DB:B3:96:DF:A9:51:EC:41:57:F2:11:E5:ED:74:0E:D9:7E:1B:0F:3F Certificate issuer: /CN=dbb396dfa951ec4157f211e5ed740ed97e1b0f3f Certificate serial: 019352751BCDA67D88F19C9D1B415D41FFA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft Manifest number: 0748 Signing time: Fri 22 Nov 2024 06:00:26 +0000 Manifest this update: Fri 22 Nov 2024 06:00:26 +0000 Manifest next update: Sat 23 Nov 2024 06:00:26 +0000 Files and hashes: 1: 1eKDEzanldy-J3Qb2a4L9TCP2oI.roa (hash: AefCrAYMKf/Kh3wl5A0tZpDGYgoDVg6TkEBgLLiVOes=) 2: 27OW36lR7EFX8hHl7XQO2X4bDz8.crl (hash: MbaU5Vd8pX5zsVeEJ8TbuL0g3dkK9PdwEDKEs7/l2FU=) 3: 662Sh5aHIY06ZxdYnbfNzjlIE3k.roa (hash: pukr5Q4MPjRc/svbds90/tHNFyDa+vh8zaIIaflFuD4=) 4: 9aDd_Id1rurNt4oi5lmu7WIOHOg.roa (hash: 6FSb1fyspimYP02BJ4fvNwRZu6D3nENgwJJgoDnRlWk=) 5: JDY8hbsVQnlp8pK16k0307O8xHE.roa (hash: EQ8weOh3AoKPj7UgkiDauTgjUwt1bEUKSu5G/6eHQWk=) 6: JS1fc48y14b9fUL5c6tTMgTXsU4.roa (hash: xCNwNBtgmQInUZvfi4plOU8TOH+xCG/akrREcGUE3Og=) 7: MgZOg0ktgm5JwqLTG2VzoZNqODE.roa (hash: VEBp/uNwKrFwVVYoEQpyaCC7wdRNu65/ank+2GwYngI=) 8: RuSR5j58BZO671JQZDsJI3x-4V0.roa (hash: GhK8qrVUIacjC6eNrQzbq3mbtWDqKXfYDU4u8AsyYhE=) 9: acUnzthTi2Riqn4mE7JCjlKe2P8.roa (hash: PH0Pt/9XVw56PW+Yeh6t2k517DbumYqlGrzuYrGTyks=) 10: bWqw117XshCFIBVlJ_hxDHdcJNg.roa (hash: AZiUzJW5u8a0RWYpgps6PtEUXg1Ip2PI18sVKLxS0Zg=) 11: hIg9r8OpMfX37QOna-BNx0A6PX8.roa (hash: SjB/gXX6frGKBY3Ck3nHx5JYLScdkCtYKv6pD4Am71I=) 12: mf_LtIM1utcdN4JEI4GsEmgO2l0.roa (hash: Qvp1GZ/IhfjYX8lqTMye27O2BlrDTVpCuBK18iWnLyI=) 13: oempqTGTuDtc3IUP17tA6nlInBk.roa (hash: yXDYT4gWgyBOD+syD1Q1qRIVAClXv/dFw7PzP+1qzsA=) 14: zSBhYW8SpTKpjLQaQ0OsrgtP_yQ.roa (hash: n+sc34jE2uK/L7TPDngOUnew5WcMRzIKqMwoOpDuHy4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 03:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:52:75:1b:cd:a6:7d:88:f1:9c:9d:1b:41:5d:41:ff:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbb396dfa951ec4157f211e5ed740ed97e1b0f3f Validity Not Before: Nov 22 06:00:26 2024 GMT Not After : Nov 23 06:00:26 2024 GMT Subject: CN=e58f59f76c2e6e030595b1e9c0c270427dfa5a21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:08:0a:15:86:35:c1:f6:e8:8f:83:9f:71:cd: 7d:22:d0:ef:f8:fd:5a:72:d9:7d:6c:da:a5:ff:04: ce:93:e6:68:c3:39:50:d1:e7:48:c5:80:5e:b9:7c: cf:bb:64:22:38:41:92:5e:d9:5d:07:b8:da:12:95: df:c9:d0:28:80:84:83:da:b2:dc:12:58:1e:3d:24: ab:82:88:a7:75:53:10:a7:02:11:ae:e8:46:10:e5: 5f:7f:1e:03:7d:22:6d:e9:16:2d:0b:9c:48:8b:ef: c2:66:a4:40:22:f9:2a:26:3b:58:2e:6c:e8:b9:e8: 8d:be:dc:5d:7b:f1:d3:b2:d1:62:a8:b1:3e:6f:71: 32:ac:e7:df:49:65:f7:dc:76:24:21:2b:e5:de:3c: fa:15:22:6b:4b:97:91:78:c7:69:0d:1c:df:44:c5: 06:f2:d1:ef:34:21:c1:2b:78:42:bf:ac:7b:d8:d2: 2c:2b:44:0e:47:e7:33:9b:81:da:72:f8:aa:d0:c4: 97:b7:88:5c:6b:01:a3:f2:65:2f:13:2a:13:03:5e: 42:6a:60:a0:f5:bb:be:7d:f8:53:b0:b2:72:cb:0c: b5:dc:2c:e8:06:92:44:46:ef:e3:58:af:e2:16:22: 04:6a:98:f6:7a:f4:50:dc:41:01:91:9a:85:d0:af: 84:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:8F:59:F7:6C:2E:6E:03:05:95:B1:E9:C0:C2:70:42:7D:FA:5A:21 X509v3 Authority Key Identifier: keyid:DB:B3:96:DF:A9:51:EC:41:57:F2:11:E5:ED:74:0E:D9:7E:1B:0F:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:4f:5c:4f:fd:df:19:66:4a:f6:6e:80:ad:71:38:18:6d:f0: 97:e8:31:39:a2:ed:d7:01:0c:77:0a:80:87:97:40:5c:da:bd: 9b:74:a5:99:ee:01:b0:d6:2b:f1:2d:7a:26:43:96:da:61:e2: e9:7e:d8:c2:94:ed:83:f9:02:0b:a8:13:b0:ee:17:c8:cb:59: 2b:1b:d4:f7:38:d8:04:38:05:76:19:68:8a:e9:33:4b:b8:51: 38:42:49:27:1d:e9:8a:5e:b2:f4:95:22:92:b8:14:d6:fd:7d: 38:6f:87:b6:82:6b:be:23:13:94:85:6b:2e:f0:29:94:57:d6: 40:09:3f:99:95:f6:f8:25:c3:26:69:a0:63:51:75:dc:89:66: 30:32:e6:29:e5:2d:06:fc:30:c7:d9:78:29:5d:e9:7f:68:77: 15:ee:b4:ea:45:8f:99:8e:15:9b:7c:84:24:b8:1a:a8:a2:08: c8:62:5b:49:db:2b:09:29:5c:aa:8d:4d:5f:24:56:e2:70:d8: 66:ed:b8:34:b1:25:f4:bc:d6:e0:2a:b7:b8:cf:b8:37:55:3d: f5:72:41:0b:c8:5e:ea:a5:85:27:b8:4f:01:5c:93:d5:85:8b: ff:51:ac:81:be:0d:d6:fc:18:56:e3:1b:ed:bd:12:9f:e1:d2: d8:e4:00:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNSdRvNpn2I8ZydG0FdQf+lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiYjM5NmRmYTk1MWVjNDE1N2YyMTFlNWVkNzQwZWQ5N2Ux YjBmM2YwHhcNMjQxMTIyMDYwMDI2WhcNMjQxMTIzMDYwMDI2WjAzMTEwLwYDVQQD EyhlNThmNTlmNzZjMmU2ZTAzMDU5NWIxZTljMGMyNzA0MjdkZmE1YTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArggKFYY1wfboj4Ofcc19ItDv+P1a ctl9bNql/wTOk+ZowzlQ0edIxYBeuXzPu2QiOEGSXtldB7jaEpXfydAogISD2rLc ElgePSSrgoindVMQpwIRruhGEOVffx4DfSJt6RYtC5xIi+/CZqRAIvkqJjtYLmzo ueiNvtxde/HTstFiqLE+b3EyrOffSWX33HYkISvl3jz6FSJrS5eReMdpDRzfRMUG 8tHvNCHBK3hCv6x72NIsK0QOR+czm4Hacviq0MSXt4hcawGj8mUvEyoTA15CamCg 9bu+ffhTsLJyywy13CzoBpJERu/jWK/iFiIEapj2evRQ3EEBkZqF0K+ESQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOWPWfdsLm4DBZWx6cDCcEJ9+lohMB8GA1UdIwQY MBaAFNuzlt+pUexBV/IR5e10Dtl+Gw8/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjdPVzM2bFI3RUZYOGhIbDdYUU8yWDRiRHo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9iMzk4N2EtNDUwNC00NzQ5LTlkNzMt ZGY1NzJmZTk2NzJhLzEvMjdPVzM2bFI3RUZYOGhIbDdYUU8yWDRiRHo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9iMzk4N2EtNDUwNC00NzQ5LTlkNzMtZGY1NzJmZTk2NzJh LzEvMjdPVzM2bFI3RUZYOGhIbDdYUU8yWDRiRHo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKU9cT/3f GWZK9m6ArXE4GG3wl+gxOaLt1wEMdwqAh5dAXNq9m3Slme4BsNYr8S16JkOW2mHi 6X7YwpTtg/kCC6gTsO4XyMtZKxvU9zjYBDgFdhloiukzS7hROEJJJx3pil6y9JUi krgU1v19OG+HtoJrviMTlIVrLvAplFfWQAk/mZX2+CXDJmmgY1F13IlmMDLmKeUt Bvwwx9l4KV3pf2h3Fe606kWPmY4Vm3yEJLgaqKIIyGJbSdsrCSlcqo1NXyRW4nDY Zu24NLEl9LzW4Cq3uM+4N1U99XJBC8he6qWFJ7hPAVyT1YWL/1Gsgb4N1vwYVuMb 7b0Sn+HS2OQA7w== -----END CERTIFICATE-----Generated at Fri Nov 22 10:00:00 2024 by rpki-client on console-fra.rpki-client.org