$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.mft File: QfWhDk_SZVrbu0Dt4YsmFaxVjqk.mft (raw, json) Hash identifier: p2TijivK2y/eQbrGXeIWkoQ1NBGQQlpl2GYeYnnI5k4= Subject key identifier: 5C:8A:5D:7F:49:43:AA:FB:35:CB:27:31:CF:FE:70:69:38:79:81:EF Authority key identifier: 41:F5:A1:0E:4F:D2:65:5A:DB:BB:40:ED:E1:8B:26:15:AC:55:8E:A9 Certificate issuer: /CN=41f5a10e4fd2655adbbb40ede18b2615ac558ea9 Certificate serial: 01935206FD94EC08B6A371718B3B39D24594 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.mft Manifest number: 1385 Signing time: Fri 22 Nov 2024 04:00:09 +0000 Manifest this update: Fri 22 Nov 2024 04:00:09 +0000 Manifest next update: Sat 23 Nov 2024 04:00:09 +0000 Files and hashes: 1: 0xbd8sgfZcVKF9uWomyenEU41X0.roa (hash: XMjeFyNcoZnVoPCz/mv+4gOhJ8UVJkwIitK6LHkFv54=) 2: 45aXjuokswiW39fx3CqUH82WnIQ.roa (hash: 1bk8sJdmK4vkj68QR/N67ZNIjt+ChruhaQIklCxIbMA=) 3: 924GC8nBu7FtIPgg-A86bbuHqh8.roa (hash: ViSsQ3uPSxAuUOoLeDz86Loel+IAxE5sLvhlVaBmJ7A=) 4: C1ROWJrktcCe7IvBd9c2GgDZuhA.roa (hash: NCcvBC7IX7NGG0jkl4mdO2KjaFjHXAFD9GNcUduHrzs=) 5: GFxsTGRc6lwrbeiKMvqO73tvW9M.roa (hash: WPoYac112CDAtH+vCBXRBpy9Olgu32ZQACBiKGNrBpo=) 6: QfWhDk_SZVrbu0Dt4YsmFaxVjqk.crl (hash: cl5wBUNJkSKYtIosixlCeXYh4Zwj4BBPTnvDGttXu8g=) 7: TmYMHEp35_lvkFrqmdRxv_VpDPo.roa (hash: zw30S+QzCumUMX6LuxmaH7eTDcWskcGNGWrgnhFb22A=) 8: U6CMGZWetkyjmqpyRrZKimchDyk.roa (hash: zHHfrfEft63f1F+weV57nt8ZKPCnuv5c/bqnQUeug/Q=) 9: Uu6M6m1gWFUsIGfL44RBBGQtCR0.roa (hash: Z2EnPuuD9R/VoG9pfDZ3Lepme0USUZSV7wvv496Dseo=) 10: WKmjvN-mPD8di-iGYQiqfhge8Vw.roa (hash: zI48l97EZdJlaUlzK3DPSPK2EIfu4G5TJJaSKzy/CB8=) 11: bM1SIdD5RiywQzJQHXyZ2nXJYQU.roa (hash: /diheX7SO95do/Rxzn8KM52H1xJUm977Q8HjHndrzOM=) 12: dd3oIxIBaBxRer6cZLbvvWg26Os.roa (hash: JD8w4SBsdMT1FEUgLsc4mDvlAo6sAqumvM+7ex6G0SI=) 13: tfrWfX8nW9hcERhoR7qA7pYjfNc.roa (hash: 28W4XhQEiaTovHaQc8GLXVll8SVUmMW2cieRNX6MU88=) 14: xGnFRzveAi6zfLKWD9cZsFrlG1g.roa (hash: E2oPtsKAqI6WshjcMy9vc6tj2OQid+X9SpHgDfIYgaA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.mft rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 23:17:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:52:06:fd:94:ec:08:b6:a3:71:71:8b:3b:39:d2:45:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41f5a10e4fd2655adbbb40ede18b2615ac558ea9 Validity Not Before: Nov 22 04:00:09 2024 GMT Not After : Nov 23 04:00:09 2024 GMT Subject: CN=5c8a5d7f4943aafb35cb2731cffe7069387981ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:7d:cf:60:61:32:5b:99:96:32:8f:eb:28:2a: e4:2e:b0:6c:f2:01:22:ff:14:94:0f:79:d1:65:d5: ef:6f:01:be:78:1b:bf:51:c1:7c:91:04:f0:9b:a7: ff:6f:be:72:42:ee:b1:93:ff:19:4c:fe:11:ba:c3: e1:df:a9:43:3f:e0:b6:e1:94:25:db:a8:6c:e0:16: 6d:4f:81:a1:05:1d:d0:39:5e:24:29:d0:a0:c5:c3: 4a:c0:ce:7b:53:62:1b:e2:1e:d2:21:cc:88:ee:86: cc:77:ac:6d:74:18:8b:3c:57:27:8a:b4:25:07:28: 3a:a9:e7:02:1d:66:21:7a:3a:c1:78:57:e8:4d:d5: b1:3b:a4:4e:ba:dd:1e:24:60:1e:71:e7:c1:35:7d: e3:16:e3:b4:37:2a:f3:00:42:0a:2e:0d:2b:78:0d: ef:97:d8:94:7d:65:23:b6:64:be:bc:23:4d:37:48: 47:77:46:f3:23:45:17:0d:93:58:18:81:5b:22:73: 16:30:ed:49:ad:f3:25:b8:2c:89:cf:99:c7:50:a8: 97:67:8f:d4:b8:f7:6f:54:13:ce:58:5f:9d:35:74: dd:fa:4f:bc:b5:47:7b:62:b3:19:5b:ca:a6:3d:48: 7e:b3:f4:c0:2e:f3:41:f8:c1:e2:cc:8e:b8:9a:46: 54:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:8A:5D:7F:49:43:AA:FB:35:CB:27:31:CF:FE:70:69:38:79:81:EF X509v3 Authority Key Identifier: keyid:41:F5:A1:0E:4F:D2:65:5A:DB:BB:40:ED:E1:8B:26:15:AC:55:8E:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:08:13:16:2a:52:c7:03:15:8d:5b:ea:49:29:78:91:f6:15: b4:1c:fb:dd:41:53:7c:db:cd:46:e2:4f:62:82:76:0e:9c:28: 66:67:f3:ce:38:a6:79:6a:8c:d9:95:ba:a6:cb:d3:71:c9:23: d3:2d:26:75:aa:e3:e1:12:17:3b:ea:33:09:87:30:ee:8e:2f: da:6d:46:ad:bc:24:fc:67:55:5d:8d:9b:bf:73:65:b0:93:69: a5:b8:97:22:31:bd:f9:8d:8b:ec:4b:46:84:71:fb:4c:6f:82: d8:26:db:d9:91:f2:b9:11:8d:66:81:c8:a0:08:2b:8e:a9:6e: c2:9f:3b:5f:c6:d4:0b:78:fd:cb:88:fc:5a:53:88:32:3b:25: 8f:69:8b:94:f1:e7:4d:ad:48:a5:04:27:6e:3e:c5:0f:07:e2: 3c:34:f4:cf:0d:de:b5:7b:22:9f:47:44:56:6b:7b:04:00:96: 7a:68:a1:69:a1:90:e1:ac:1f:28:73:33:fa:3e:6d:1e:4f:1a: 96:40:fb:3a:6c:13:46:62:4b:59:92:9a:fd:31:2f:03:52:87: 77:b5:6c:47:8a:25:18:2f:ac:73:1b:d2:1c:65:9a:31:13:ca: 5a:d8:2e:cb:e1:c3:26:93:70:92:37:64:f6:c2:9a:fb:98:65: 06:29:c6:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNSBv2U7Ai2o3Fxizs50kWUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxZjVhMTBlNGZkMjY1NWFkYmJiNDBlZGUxOGIyNjE1YWM1 NThlYTkwHhcNMjQxMTIyMDQwMDA5WhcNMjQxMTIzMDQwMDA5WjAzMTEwLwYDVQQD Eyg1YzhhNWQ3ZjQ5NDNhYWZiMzVjYjI3MzFjZmZlNzA2OTM4Nzk4MWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA433PYGEyW5mWMo/rKCrkLrBs8gEi /xSUD3nRZdXvbwG+eBu/UcF8kQTwm6f/b75yQu6xk/8ZTP4RusPh36lDP+C24ZQl 26hs4BZtT4GhBR3QOV4kKdCgxcNKwM57U2Ib4h7SIcyI7obMd6xtdBiLPFcnirQl Byg6qecCHWYhejrBeFfoTdWxO6ROut0eJGAecefBNX3jFuO0NyrzAEIKLg0reA3v l9iUfWUjtmS+vCNNN0hHd0bzI0UXDZNYGIFbInMWMO1JrfMluCyJz5nHUKiXZ4/U uPdvVBPOWF+dNXTd+k+8tUd7YrMZW8qmPUh+s/TALvNB+MHizI64mkZUJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFyKXX9JQ6r7NcsnMc/+cGk4eYHvMB8GA1UdIwQY MBaAFEH1oQ5P0mVa27tA7eGLJhWsVY6pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWZXaERrX1NaVnJidTBEdDRZc21GYXhWanFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84ZDNjODItZTQwMy00ZGE2LWIzMTUt ODc5MDIwNmYwZDc0LzEvUWZXaERrX1NaVnJidTBEdDRZc21GYXhWanFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi84ZDNjODItZTQwMy00ZGE2LWIzMTUtODc5MDIwNmYwZDc0 LzEvUWZXaERrX1NaVnJidTBEdDRZc21GYXhWanFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsQgTFipS xwMVjVvqSSl4kfYVtBz73UFTfNvNRuJPYoJ2DpwoZmfzzjimeWqM2ZW6psvTcckj 0y0mdarj4RIXO+ozCYcw7o4v2m1Grbwk/GdVXY2bv3NlsJNppbiXIjG9+Y2L7EtG hHH7TG+C2Cbb2ZHyuRGNZoHIoAgrjqluwp87X8bUC3j9y4j8WlOIMjslj2mLlPHn Ta1IpQQnbj7FDwfiPDT0zw3etXsin0dEVmt7BACWemihaaGQ4awfKHMz+j5tHk8a lkD7OmwTRmJLWZKa/TEvA1KHd7VsR4olGC+scxvSHGWaMRPKWtguy+HDJpNwkjdk 9sKa+5hlBinGRg== -----END CERTIFICATE-----Generated at Fri Nov 22 06:41:18 2024 by rpki-client on console-ams.rpki-client.org