$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft File: ciqMHTEYlQFhCP-9FFdcd8wodzo.mft (raw, json) Hash identifier: LsGV0gWNlzbfZhXLcJ9MsFgEJFJbEzTp9o8wq8JCo9g= Subject key identifier: 98:2B:BA:11:69:DD:75:77:01:49:FC:AA:FA:41:AF:F9:83:65:C5:A5 Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a Certificate serial: 0193609ED4DAD638507B1E2E2882EFE3B056 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft Manifest number: 13CD Signing time: Mon 25 Nov 2024 00:00:42 +0000 Manifest this update: Mon 25 Nov 2024 00:00:42 +0000 Manifest next update: Tue 26 Nov 2024 00:00:42 +0000 Files and hashes: 1: 4X9OOZldc0fX97ZLZ6dWObvK0Kg.roa (hash: x/ozK5i7M+5xK74PPVGdQPhZbLhoNhN6wLvo9WrZV4U=) 2: 8EgsfRmJh9mHd5U9GquCG9McXqI.roa (hash: c3jDLvgwF8HnCVIIswwp+CNpVMNwV3FNVM2JKP/Eoww=) 3: 8woF160MDWHqw-07_aILHtwcnPU.roa (hash: BMx48hxDsmMWm3iVl3tu1voFNtybQJuZkyswWtMvGls=) 4: 9CaW8Cm5pubEGGOfwek_c6sT2AU.roa (hash: qG/NF4ailzUajkvTAz77jK9BjcUKSMqsM0/K9uMsDqc=) 5: BpeNKYzwF3Fgnlnqurb02ZwTcFM.roa (hash: bCdaiqSQvrbdFhRwyzIn0G2bXIvcsDuxEtfgMevksgM=) 6: DcWrDv1rHtKQyWc4WrCMByJ4rL4.roa (hash: EmT3rf7qF8tnaRcpw2JQfI9POl4y2iAn/l/I3/iU190=) 7: DmQM-gHCvLXgPEdA-k1kCgUAvIQ.roa (hash: 2kMMc98x3ZrC6W1/fzpcbla5ZTaYWoTsRqYpe2C5xC4=) 8: EpChshjRzOWfMvnKC0R2RE6AT6g.roa (hash: C+Mck7/VxMy6wEn8M/SzyhMwXAUEBD1/0VFUSiiOrFg=) 9: FFAM2sQWxr7kFN135RbqCINCJ3A.roa (hash: 2NZW8nkyEbJXUDaLXGe8LPuBw1901xyNfmDZQycm9WE=) 10: FwU2VF8hh8pBlDStZ_qFKJ_Sprg.roa (hash: ZT8MaK1EFvfyOxDxQV/mARjvwT96Jqce3wWON3xKTlQ=) 11: Hc7WZT-6F7LTNA8XtIkOmtir8YM.roa (hash: LACvYnmOpuYcA8nSW/t0UC5vSRvBPa2rmI0jPv3f3zc=) 12: JtcoeLNgIpy4h7DSh1FGa_rABRM.roa (hash: 8ba6tIu4Aw0YQA3zC48ViVNKS1s+lLdpfoIeGXNiWN8=) 13: K6YhMZnSs27VV5lESl6YYfuwzgQ.roa (hash: VRkXOnsOV3TLwgmpv72XdWuWvhqKsvrx2TFjTdEkQbQ=) 14: Kn7MDXlNGlATKoeiTIA7J6uCQTg.roa (hash: ErnQVPS51Dpf0L5u2FRTLChfvQq9ArDVz179RCPgB2E=) 15: Nr_TKGVx0V9_SkxJoSrX06iWDcs.roa (hash: yItth5hRVwon1iJTagof8eybJ/LJdtuccp/luQ2Ec58=) 16: OU0cv3nKYaib5bOSkCrAQimVRFE.roa (hash: 2iK2z/J47JcslUPTE/dIloP0jrUlfqfwIkwUBn9rwi0=) 17: Omubk_Atwdrkux0ODpT1kR4GcX8.roa (hash: hCxiRHgrE8e9qdZuSF5qqnSfB2sO3Mg9IiKFX7iT8eg=) 18: PeB9hlYebaMQFBuQtkV2zHnMfvI.roa (hash: hC+ipAsGL4/WV9pwUAhWeIgOuMgeLMjgtgBuEYIWUeY=) 19: WVtfr5QN_VUJpPKYVWUe0eEIk0U.roa (hash: JpTStKIojL8jmCvOwDfp2jnKsrEWT2x8QH8IO3Z9gQk=) 20: WdAA6KZr8RUDsTz-VDKNcrLla0g.roa (hash: AEpTH5CnH1XF4YCC9N9e9iVCd6InkVaAYjnrexOYQMY=) 21: _vcxWZJHmCi5gFbsO3LW4-YH3-M.roa (hash: lZroghrXbNbJMK/kkX5LoAfxQ5sgYYQNoEYkJ7G5NZo=) 22: bouhLrz3htaAbR4z2VdcALdtNX4.roa (hash: cZsi2HweVBH6QtoHJXl52HlOe07OzY76ZO0fC7PMG9w=) 23: ciqMHTEYlQFhCP-9FFdcd8wodzo.crl (hash: fQcIcKctG8b7+3kRRAnkeSk5K+sgjgy7lbfJxbIEayg=) 24: dEZBKDH4NpJ7CvL0QqK3d9e7HyU.roa (hash: NyhLYweSepNgskIkKuy/DukSLuaroBvyEjHZCYcIbaU=) 25: eIBl1HoQNQ-VQP6EOhhLTAxPq7A.roa (hash: 2lO+vZHEUS9Rm/g+axX1OhG/iYyKH5hZJNahstXtg2k=) 26: fGTXMMZuR4ucIouXUDbuvx6P_I0.roa (hash: JitB1TOBL6DCm1S0/oVy6FW/8h+GYzmL0hmiqKP3Rnk=) 27: gQPLxngSYwT39WFntuhtHPOFffw.roa (hash: eq+GpsGLp3S8yRLtMVpEEJiak8gESCMaSDWC5OQdMz0=) 28: hKNKDsDwyK_1xnWFNJFA8DBbOeI.roa (hash: 8Dswq0iF3xWVIF0r77Meyg1UO+ZNfivx6/23Agm5Bio=) 29: j7ddnzrimFkUJ5_Lh8F1w6P8Bj4.roa (hash: gYTjxjyimnFgPf4eKSYpREk/D99KhXNlU+DonCprGa4=) 30: wqaok-bqRgMiW3VqW5qyrdF1yZY.roa (hash: KBy/OjOpgBAmgF8HPzbQuyCG3sivK+oMIxlzMtbK7ls=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 26 Nov 2024 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:60:9e:d4:da:d6:38:50:7b:1e:2e:28:82:ef:e3:b0:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a Validity Not Before: Nov 25 00:00:42 2024 GMT Not After : Nov 26 00:00:42 2024 GMT Subject: CN=982bba1169dd75770149fcaafa41aff98365c5a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5f:24:6c:c2:19:59:0c:f5:0f:76:9e:ca:4f: 16:da:d1:60:35:50:a6:79:6f:77:bf:59:64:68:53: 04:68:0f:59:74:60:c9:89:33:c9:f4:52:57:a7:46: 1e:80:70:9a:8c:95:9b:82:98:97:d1:13:7e:60:b8: 4f:4a:80:15:7a:b6:d9:be:57:04:45:aa:54:91:d4: c5:0d:67:75:4f:a4:80:7e:55:25:52:37:d4:a2:ea: af:9e:e5:28:5e:68:65:54:8a:82:03:6a:e9:1e:de: 29:38:d5:3f:23:da:1c:aa:91:bd:52:9b:40:97:38: d1:2d:cb:75:ef:40:97:c4:d7:18:17:74:e9:f3:61: 07:92:d7:71:98:ab:70:b1:b0:c0:70:74:1a:9c:a9: bf:0b:8e:82:19:e9:4c:e2:05:79:56:ac:d7:06:aa: e7:aa:26:fe:b3:b6:a7:43:06:8f:3d:57:db:9d:87: c1:a2:52:dd:f9:06:51:64:37:26:b6:5d:43:7a:b2: b4:24:09:4c:e5:e3:f1:2d:1e:0d:17:f7:18:80:ff: 1f:4a:9f:b3:9f:af:87:08:e4:cd:1c:27:87:ac:93: 5c:e0:3a:ad:c0:5d:d1:91:5e:52:9b:f6:39:58:37: f6:c4:94:48:76:6e:dc:f8:ec:dc:53:ae:e9:9b:d3: da:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:2B:BA:11:69:DD:75:77:01:49:FC:AA:FA:41:AF:F9:83:65:C5:A5 X509v3 Authority Key Identifier: keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:0f:08:d1:69:9e:d7:b7:ec:c5:d1:47:e6:f7:c5:2c:b7:d6: 50:90:e0:59:71:71:35:07:10:60:a2:de:20:d9:8c:0c:e3:1a: e2:6d:1d:1c:14:76:7b:ff:d1:35:99:9a:13:b3:1c:83:f0:7c: 91:f0:b9:d0:97:3e:4d:b9:f4:f8:12:17:67:31:e2:16:34:8f: 97:42:74:a7:da:a0:8b:f5:fd:25:2c:34:50:c8:58:7d:83:17: df:c1:8f:96:13:d3:07:82:d3:0a:a2:b5:2c:e7:45:49:ac:1c: 08:96:bc:27:0a:33:8b:44:58:10:2e:0f:5a:c2:17:67:a0:69: e1:d5:2a:18:ff:5b:0c:b5:1f:d4:3a:1f:4d:9f:96:c6:cd:10: 1e:e1:db:f2:38:0a:a5:ab:f3:b9:3c:de:4a:bb:65:1d:de:6a: 29:cb:cf:ac:d4:c2:f4:f6:13:d4:f1:fd:7c:d7:f2:f9:30:4e: 54:c3:a1:f8:d9:2a:80:f9:7a:7a:5f:85:ba:01:0e:93:c7:fe: ae:08:b2:92:e9:93:00:11:25:5e:3b:ea:64:80:48:7d:f2:10: 3e:fd:e2:c8:ea:46:e8:c8:f7:fe:29:75:07:94:83:87:9d:04: 4d:9f:b9:43:61:ca:a0:95:06:86:06:9f:cc:02:4c:e7:ac:3f: 87:e1:54:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNgntTa1jhQex4uKILv47BWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMmE4YzFkMzExODk1MDE2MTA4ZmZiZDE0NTc1Yzc3Y2My ODc3M2EwHhcNMjQxMTI1MDAwMDQyWhcNMjQxMTI2MDAwMDQyWjAzMTEwLwYDVQQD Eyg5ODJiYmExMTY5ZGQ3NTc3MDE0OWZjYWFmYTQxYWZmOTgzNjVjNWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvl8kbMIZWQz1D3aeyk8W2tFgNVCm eW93v1lkaFMEaA9ZdGDJiTPJ9FJXp0YegHCajJWbgpiX0RN+YLhPSoAVerbZvlcE RapUkdTFDWd1T6SAflUlUjfUouqvnuUoXmhlVIqCA2rpHt4pONU/I9ocqpG9UptA lzjRLct170CXxNcYF3Tp82EHktdxmKtwsbDAcHQanKm/C46CGelM4gV5VqzXBqrn qib+s7anQwaPPVfbnYfBolLd+QZRZDcmtl1DerK0JAlM5ePxLR4NF/cYgP8fSp+z n6+HCOTNHCeHrJNc4DqtwF3RkV5Sm/Y5WDf2xJRIdm7c+OzcU67pm9PaPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJgruhFp3XV3AUn8qvpBr/mDZcWlMB8GA1UdIwQY MBaAFHIqjB0xGJUBYQj/vRRXXHfMKHc6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYt YTU1OGVlNjU0MzFmLzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYtYTU1OGVlNjU0MzFm LzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXA8I0Wme 17fsxdFH5vfFLLfWUJDgWXFxNQcQYKLeINmMDOMa4m0dHBR2e//RNZmaE7Mcg/B8 kfC50Jc+Tbn0+BIXZzHiFjSPl0J0p9qgi/X9JSw0UMhYfYMX38GPlhPTB4LTCqK1 LOdFSawcCJa8Jwozi0RYEC4PWsIXZ6Bp4dUqGP9bDLUf1DofTZ+Wxs0QHuHb8jgK pavzuTzeSrtlHd5qKcvPrNTC9PYT1PH9fNfy+TBOVMOh+NkqgPl6el+FugEOk8f+ rgiykumTABElXjvqZIBIffIQPv3iyOpG6Mj3/il1B5SDh50ETZ+5Q2HKoJUGhgaf zAJM56w/h+FU5w== -----END CERTIFICATE-----Generated at Mon Nov 25 07:50:55 2024 by rpki-client on console-ams.rpki-client.org