$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/MzNh-6hAkXT7PEgrjKJvI169IsI.mft File: MzNh-6hAkXT7PEgrjKJvI169IsI.mft (raw, json) Hash identifier: utTZ/bcR6z7JhqS3ou3BAGPtuMxgKXzNie5lTD9lTHg= Subject key identifier: AD:17:CA:68:31:7C:2D:74:8C:27:F8:C0:1C:BD:9C:3D:48:D8:A8:61 Authority key identifier: 33:33:61:FB:A8:40:91:74:FB:3C:48:2B:8C:A2:6F:23:5E:BD:22:C2 Certificate issuer: /CN=333361fba8409174fb3c482b8ca26f235ebd22c2 Certificate serial: 019352ABFE3449847E0219D25F6CD016FBCE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/MzNh-6hAkXT7PEgrjKJvI169IsI.mft Manifest number: 1025 Signing time: Fri 22 Nov 2024 07:00:23 +0000 Manifest this update: Fri 22 Nov 2024 07:00:23 +0000 Manifest next update: Sat 23 Nov 2024 07:00:23 +0000 Files and hashes: 1: 1YRFJFjt_V8c9VCN38TSFurQUoU.roa (hash: yugKgDYPZDhIV2RQoGC6LGWdnVG3iuC+lo4dWGVcxoE=) 2: 46Az8scpD6TVDTBbwyi3z6jW8jk.roa (hash: 6YpWxwSOJjA2gXHo8/YKsD/E7b6hMhH33IgDNcckVr4=) 3: CcXH-cLLA_SKELt2JW2HdU571Hw.roa (hash: k9VenjScAMHHa0twfvU2xTA1u/GJ2yM+7pdsqZ8t+mM=) 4: Di9DPoOAbeqE_GWJlpJUJPHU_O4.roa (hash: IS7sS3vo6JTKZSE0QWsc60Kr7HVfxyo1ECFPXtSN+OU=) 5: G_SAoqaEiJ096namykASikB7JsE.roa (hash: FoNHY2JPtoAhbzB0yNg+qdKISxF88NcOYIhwayOrrJY=) 6: GbSAbHb3Fx3eYq8xBhdeJRasCy0.roa (hash: dMV/nfX3NcemmfAF7uVasJF4OnoXDf3tPaNhcdZmNQQ=) 7: LAp-CPHHHOcSOA4snUb_Eh4S4x4.roa (hash: xA6hYL9pB3s93k5OW6mJVCO3xscntbaRGIdJh/41s4Q=) 8: MJjEVoagsDSDGrzrW-f3UW3-SPk.roa (hash: TdvMWsmlLCAyZX+sr1q4q6+Ley7q7KC8HsFAlNl+90Q=) 9: MzNh-6hAkXT7PEgrjKJvI169IsI.crl (hash: Yvx+CL3zMfoftWlQR4mI23f8JALhDSR5OuaU8bu4xYg=) 10: R9wUUxEZgePPXyn-IKAc1bT4zJM.roa (hash: CUrtNPNgAmNOcvGU4t5zsr/pgzNA3mLtv1PoCmEyWc4=) 11: V8lvStC1EBsjmDbW-LuI1zc_kxQ.roa (hash: nOBw7Em4gzuuzT/VlbvZB5GKi6RWg4JjQn3d88vR9NE=) 12: ZLwRkKQh_7POyioEYrZ3Uz23ZrM.roa (hash: 9P6WXqns21QO/p0vnb7Lim3P8BNFktkGNpHdprvdTDc=) 13: bpkmbmgFnuRRBpan_wgQHNfDmjw.roa (hash: zRu2Z/ZXS8X6LRRiD1mpCUgs7zmw8unwSjVbhCYw34g=) 14: jEUFf3pxC8n1zLzOzhWpfcf6zl4.roa (hash: /kg05YFubmtcvvAsZie5UqBuZgRizmj0Ax6qgP6KaGQ=) 15: l7IlR1DeKDBgMdzXroAqSH9LkCg.roa (hash: rSsu8fDAHSVlx9DwiQwF93j+Fz+wTO/h3Bm+MaN+Jsg=) 16: ltDakS8w_PS6tT-6x2Esmlj46pA.roa (hash: X8Au7QSJmspd4mX7lWrMdsOwgfsTly3Qclvj8KUq3nM=) 17: xu9wSrYV4BujPO-Qu1YL5Rc7X0Q.roa (hash: aEWg42tCq29HROb1+rUjWuKsYU4hTgnOEZm3dVyEpvc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/MzNh-6hAkXT7PEgrjKJvI169IsI.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/MzNh-6hAkXT7PEgrjKJvI169IsI.mft rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 03:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:52:ab:fe:34:49:84:7e:02:19:d2:5f:6c:d0:16:fb:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=333361fba8409174fb3c482b8ca26f235ebd22c2 Validity Not Before: Nov 22 07:00:23 2024 GMT Not After : Nov 23 07:00:23 2024 GMT Subject: CN=ad17ca68317c2d748c27f8c01cbd9c3d48d8a861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:03:9f:e7:af:53:b4:5d:ea:a6:c9:65:cf:60: fb:6c:09:f2:8c:8c:60:29:d7:95:c1:65:71:e7:36: 97:98:4d:bd:88:85:83:d9:33:0b:3d:45:ca:ad:c1: 81:3d:57:ed:c8:71:14:f3:ca:e0:58:68:ac:6c:19: a7:3f:ed:1a:39:4d:23:78:cb:97:da:78:77:83:ec: 31:ea:b5:cf:76:13:19:28:d5:e0:14:24:c0:b4:a9: 61:30:34:07:ba:b7:81:c0:a3:3b:fa:bd:46:74:7d: b9:06:15:5d:ed:ad:85:42:01:db:a3:c1:ad:c6:6c: c3:86:4e:fb:f2:01:cd:47:11:a2:32:03:88:e7:4c: fb:19:b6:f8:28:05:cd:33:a4:2d:b3:0f:81:e4:2b: 18:06:36:3b:69:1f:6c:05:2e:b9:f4:32:ec:9f:a4: d2:a8:04:9d:f2:e2:d6:12:3b:ad:01:8d:f6:66:e4: a1:ba:3f:37:c1:6f:74:03:8a:3c:fa:78:10:46:aa: e5:fb:3b:01:b4:dc:bb:b2:45:73:62:52:32:be:73: 47:86:12:78:00:77:53:58:4c:7c:54:0b:56:7d:de: 4f:3b:68:d2:bd:cf:5e:f9:9b:e1:04:8e:c1:a6:67: 53:8e:ef:92:38:e6:a1:9b:c4:79:d8:75:5a:87:06: e5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:17:CA:68:31:7C:2D:74:8C:27:F8:C0:1C:BD:9C:3D:48:D8:A8:61 X509v3 Authority Key Identifier: keyid:33:33:61:FB:A8:40:91:74:FB:3C:48:2B:8C:A2:6F:23:5E:BD:22:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/MzNh-6hAkXT7PEgrjKJvI169IsI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/MzNh-6hAkXT7PEgrjKJvI169IsI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:8a:7c:cd:37:c3:c4:cf:38:72:3a:29:e0:2b:0a:f1:ed:d2: 4c:de:97:c7:19:64:7d:7c:dc:59:07:31:1f:55:c3:f7:2f:d1: dc:a9:2e:2e:d9:4e:3e:4b:78:a9:c6:84:c2:78:0c:55:dd:3f: 06:13:e1:9e:77:06:31:ba:f9:d5:bb:59:c9:71:96:d5:c9:5d: 80:e6:a3:0b:21:d6:be:96:cc:a5:f6:c3:a8:3e:2c:37:c3:dc: 87:d0:78:99:ed:d6:4d:4a:e3:e2:59:fb:67:f2:72:4e:64:a8: a1:9c:a6:d9:4d:bf:cd:c3:36:d7:4e:c4:05:71:26:7e:89:3e: d9:5e:61:b0:f0:15:fe:14:12:dd:69:4c:a5:b0:a2:f8:48:e2: 74:3a:0f:a7:01:c7:c5:29:e7:40:3a:18:f7:1d:4c:50:6b:75: 72:4c:43:2f:1f:d5:ac:69:11:25:bf:52:08:6e:ef:06:23:21: 49:6a:62:0a:22:c2:aa:9d:8a:92:d9:3e:4e:cf:70:06:0e:ee: 77:9d:66:e9:bf:75:82:71:0c:65:18:9d:fc:08:e6:f1:50:28: e1:58:3a:2d:45:7a:91:1c:66:a3:4d:6f:63:bf:e6:b9:34:74: d9:9d:c3:f4:86:32:4b:bb:19:40:fc:72:37:f1:de:d2:e1:ad: 30:7e:e1:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNSq/40SYR+AhnSX2zQFvvOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzMzM2MWZiYTg0MDkxNzRmYjNjNDgyYjhjYTI2ZjIzNWVi ZDIyYzIwHhcNMjQxMTIyMDcwMDIzWhcNMjQxMTIzMDcwMDIzWjAzMTEwLwYDVQQD EyhhZDE3Y2E2ODMxN2MyZDc0OGMyN2Y4YzAxY2JkOWMzZDQ4ZDhhODYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgOf569TtF3qpsllz2D7bAnyjIxg KdeVwWVx5zaXmE29iIWD2TMLPUXKrcGBPVftyHEU88rgWGisbBmnP+0aOU0jeMuX 2nh3g+wx6rXPdhMZKNXgFCTAtKlhMDQHureBwKM7+r1GdH25BhVd7a2FQgHbo8Gt xmzDhk778gHNRxGiMgOI50z7Gbb4KAXNM6Qtsw+B5CsYBjY7aR9sBS659DLsn6TS qASd8uLWEjutAY32ZuShuj83wW90A4o8+ngQRqrl+zsBtNy7skVzYlIyvnNHhhJ4 AHdTWEx8VAtWfd5PO2jSvc9e+ZvhBI7BpmdTju+SOOahm8R52HVahwblYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK0XymgxfC10jCf4wBy9nD1I2KhhMB8GA1UdIwQY MBaAFDMzYfuoQJF0+zxIK4yibyNevSLCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXpOaC02aEFrWFQ3UEVncmpLSnZJMTY5SXNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8xMWUxM2YtNGNlYS00NGFmLTgxZjkt YjJjY2NmMGVhZGFiLzEvTXpOaC02aEFrWFQ3UEVncmpLSnZJMTY5SXNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi8xMWUxM2YtNGNlYS00NGFmLTgxZjktYjJjY2NmMGVhZGFi LzEvTXpOaC02aEFrWFQ3UEVncmpLSnZJMTY5SXNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATYp8zTfD xM84cjop4CsK8e3STN6XxxlkfXzcWQcxH1XD9y/R3KkuLtlOPkt4qcaEwngMVd0/ BhPhnncGMbr51btZyXGW1cldgOajCyHWvpbMpfbDqD4sN8Pch9B4me3WTUrj4ln7 Z/JyTmSooZym2U2/zcM2107EBXEmfok+2V5hsPAV/hQS3WlMpbCi+EjidDoPpwHH xSnnQDoY9x1MUGt1ckxDLx/VrGkRJb9SCG7vBiMhSWpiCiLCqp2Kktk+Ts9wBg7u d51m6b91gnEMZRid/Ajm8VAo4Vg6LUV6kRxmo01vY7/muTR02Z3D9IYyS7sZQPxy N/He0uGtMH7hmg== -----END CERTIFICATE-----Generated at Fri Nov 22 12:12:24 2024 by rpki-client on console-fra.rpki-client.org