$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft File: oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft (raw, json) Hash identifier: uOO45J3OeiGxvOiHG2AtODj6cO2HT/IMoxilcdQb4wg= Subject key identifier: BD:52:F0:FE:52:31:27:87:22:FC:BC:D6:C4:DA:6D:B4:CB:1C:FF:68 Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e Certificate serial: 0194BABB4A1981888C259DCBB2F57BDA5C85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft Manifest number: 14E1 Signing time: Fri 31 Jan 2025 05:00:23 +0000 Manifest this update: Fri 31 Jan 2025 05:00:23 +0000 Manifest next update: Sat 01 Feb 2025 05:00:23 +0000 Files and hashes: 1: 0RUOONXtK-xnpFxCmylvITWTv1A.roa (hash: juC085Z7eJPIlR1nHHnYnvsB/lwXA6XSQb/r2/mA2Fo=) 2: 1-l8IN9WmFAM_8sHp6ULKXINOpuo.roa (hash: OepTW0KIexB7Ma6Qq1vDY3wE1ZrCvSqnaxM/NAfOK20=) 3: 5srUWfK2Cdi4wHjqlySTWyZ4Low.roa (hash: LNg07RRevBAHX1c+iNg80ZacJiC/7ZrA4U+xATH+Y0g=) 4: 76VUgp5SZiljoXMdH27M1WokZq4.roa (hash: Gt2mY+WHASt1A7urXQdxyZNvHjql+4oSWrhOyd/M4yA=) 5: BMJdY3jfum9cY_qSovBneozIqmk.roa (hash: 5bomYS0a5ldGp9NDRpDIwTBFazokTmGrUrKzMgXOvbw=) 6: CbhEbMn4AKVVqgWoX2_ZAyPcZvU.roa (hash: 20BJw7BzxjCOyEcdCPIydH+ZU0GghmGQyM/ZvZpvSVM=) 7: EDx9UJr_bR_MLAO7n7AlYPzVgHk.roa (hash: PJhAgFMtqQqa+J5NxHAYtorfHqm6JLgt9UdAzlPMssM=) 8: ET5ktSLYx20FiZvcfV7WlxLAP90.roa (hash: LeGC8Ch7ger4+lrPmWB9y7tizVscPnaCfIghH0zaa+8=) 9: GIY6t8WXECqHBNB2XBzSrMQvdIc.roa (hash: ++2yNzUE5GKDvynAIsGfNfxbtdcmBjle2edzJpUiOrg=) 10: GPv7Cu3AAIV17OB2hoOeeln0z0U.roa (hash: n6wsikUe3lM4uYpVDKStgKJqtWUTWWFr66jlTc1qP8w=) 11: K_S25NvkOjpU_Bj9DbxQmJazd14.roa (hash: a1rxYtnZvodVSuCoVwHSmnvLNqe2f/aY8+zJP3kLU8Y=) 12: LIDGUWG6p3GJZZCu1Hpsr5bUXFc.roa (hash: PRox2/jLDeyB3TXExAWa7wQfqJBFS5HwT01/wjYfdq4=) 13: MI2MLphBpmPMjSMPt-CUURdJC0U.roa (hash: SxH7HYoFbVv194fh23JHJCaM+xcxOdCQONsLew0Wilo=) 14: OS_CktR-hc4-NmLRLJBYinV6euI.roa (hash: 9QN9UeCEXOiGtg3kQ+agPvu30JRzcGfSpwpa4N4C9hs=) 15: PyYRd3fvjwf2XwMzhVw-yfBSITk.roa (hash: UX2MZbdWYkreQb29muw85i4mv4Ra+tHmSoCun2B6Gco=) 16: Qwpf-kiwbO_OPLSLiB_ygb5q-20.roa (hash: qLLsphukrV5VtmXPOKcL5XLUp8BzRBTUoReDYiiTOso=) 17: R0dlQD847tZZ6Sme0uHqVL1A8SE.roa (hash: aqwVbQ/5C0zR8yt+iaSmmHLJT4dD7bnIMHMb82qWbS4=) 18: RoYso11jd9T7PPOmcOBQI38Eu58.roa (hash: ZJ07qxFqR3YEtyKB17Jnz0m/pp0W8NnB+YodlGTa2Yg=) 19: U0UedjwFm98ns_lAKOOXn5f0A5o.roa (hash: UJnZuL0xV2NkJnE82ZqSllhysuKGYoP0ufoIJUA/SkI=) 20: UCe95u6GACs5-LEqrQoGtiD4Qyc.roa (hash: fWIhlO/tzw5gQd0aSlrmvFLetMTNXBRD0DWVGpqMdrE=) 21: UhqzZ_6AzqTu1dmJtW9IhIN1Tq4.roa (hash: jNmq8wYSt+YEqXawq8ZAK2MJD+GERg82XrAGvB/zrpQ=) 22: XS6PxuLhSit4pPummN3D9rt_XyI.roa (hash: 947+sGtOkf9LWyXo/fSAaJ6OjjRfkyNgwZLg86SCJxI=) 23: YwyROsLXS46Sx4a7dO7BvxlhzcM.roa (hash: 0Aw01zQYIIojYrmRbQn7ALYRxmwBexME2a27WU1nXKc=) 24: eLugRLDui958XmylSjkxP3wnTMY.roa (hash: PBCwpuzp3sL6oE89Qyaa4YR3Aa/1ZZavbG6JwYcrhzA=) 25: em928uE801tncexTsiwdYgbCyFs.roa (hash: 1Ae8DHrnQc4neMkHdKNSjlxKrv6jUbvWVefMenI+FSo=) 26: iXuidHo1QSBSsFaoOTf1QHBof7o.roa (hash: SwI6517kDyPUXy1d894x4OYleQzHpw1lcJfr2I15BNA=) 27: oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl (hash: i92c0RQy/Tt4lcN9dO5XZe1FA4dVAMtzRozkhyUvTSk=) 28: qPpBNHFSRXsXJbG7ijJdfFuA3wg.roa (hash: OibYoEU3gvGhbn290KkIrMwaycvVv5dsiDJFjwsvuuQ=) 29: rTXg68wsMIftLmpexV7EYbNGuq0.roa (hash: oUuz6Mh1F7BCjTAodcbrClwpt+TS4kM1ywRGR/A1/uk=) 30: rYugMFgVZ8X-I2-jsX4dF3aTxvQ.roa (hash: k+GFKByMw5K8SoNqNuEda0gdRBQB4x51TeQEsjZVh6w=) 31: rtz3qC9idXx0_hTVcLvfRzUUQ90.roa (hash: 7y0gqO8gR/cVJ2yXfPcNMo6vDwpg4ULFhgIIv/G88ls=) 32: t4_sItGLetnCYeXERod5-ebrm9I.roa (hash: AiOBn1us05R9pPuObBSz8aWjDmfVrdiLt6SCizxK1Rw=) 33: ubTG6wM5WMjPJjVlRxDKUEK_Sr4.roa (hash: hK1TX6u9txAOjU3mw0jZQz1mYIY2Z4Fk7zlDvmJpl3A=) 34: vFC2uylNiU2-KynZ7D80tgt5RFs.roa (hash: QeSBEhAjlJvU31T+N79Cbo6bfDL5IEBI1tHuOBKwUeM=) 35: vQvAhs3X9SIrwTiZLcGRbLHAse8.roa (hash: NgpNHRkuHeYtV5T9QGV0qWm2Ew38Qqs1VxG+Tb300CI=) 36: wwk7jEvd5L4YZES1E9puWxeNbgI.roa (hash: lBMJB934mzmC5MKmNtcjd0YdBXtrbY3Uex1I8nAQBqM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 01 Feb 2025 05:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:ba:bb:4a:19:81:88:8c:25:9d:cb:b2:f5:7b:da:5c:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e Validity Not Before: Jan 31 05:00:23 2025 GMT Not After : Feb 1 05:00:23 2025 GMT Subject: CN=bd52f0fe5231278722fcbcd6c4da6db4cb1cff68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:dc:e9:55:29:55:7d:63:64:10:e9:7a:76:48: 57:41:b3:b5:67:7a:08:04:19:3b:29:de:d4:0e:0d: 4a:10:1e:d0:dd:5a:2a:96:31:13:99:48:0f:a0:41: 86:51:ad:2f:2a:12:f8:b7:01:92:dc:f2:ea:63:4b: 57:f0:2d:75:a5:d6:e8:43:1b:af:9a:59:0e:cd:11: b8:4e:ae:48:12:ef:50:8a:6d:06:f7:df:85:36:db: 2f:b5:a4:11:c9:b8:9f:af:bd:49:e2:cf:a7:11:69: dd:a5:09:36:4a:ad:2b:9c:7b:b0:a6:f4:91:04:97: 3b:93:aa:b2:5c:08:db:ac:fc:91:91:55:0e:29:36: aa:fd:82:f3:da:b1:9f:ca:88:25:3b:d0:65:8f:01: d2:ae:dd:7a:83:14:91:b6:02:8c:7a:9b:cb:63:84: d7:d4:b9:cd:7a:71:31:d2:17:53:c5:64:e3:69:ca: 9f:2c:b2:a1:94:91:02:88:53:c6:ac:bd:de:26:77: 1d:5f:79:2b:2c:8f:1d:90:86:90:5a:25:31:3b:9b: 13:91:38:73:b3:c2:0b:bd:75:76:be:2f:1d:c1:da: 58:6d:e7:f3:79:2f:0a:47:21:54:f1:1c:62:96:2f: ce:af:f1:58:a6:fa:fd:88:56:9a:40:7c:8a:95:e0: c3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:52:F0:FE:52:31:27:87:22:FC:BC:D6:C4:DA:6D:B4:CB:1C:FF:68 X509v3 Authority Key Identifier: keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:ce:11:8e:dc:0f:67:98:2e:50:1d:3e:5f:c9:43:fb:19:d4: 22:52:c3:7e:e1:a0:2d:70:23:9f:a8:26:97:46:5b:6a:e0:7f: fe:2f:1d:67:5e:79:9d:c1:60:88:6b:3f:b2:ba:b0:99:eb:56: 1f:61:4f:5a:7d:d2:03:59:61:87:1f:35:b2:f1:e1:96:8f:08: c9:f2:51:4d:1b:09:49:9e:5e:58:e7:d3:72:f9:41:00:46:52: df:9b:32:9d:1c:33:45:39:76:00:a5:ed:1d:6d:2e:dd:66:34: 36:10:5c:ae:ff:95:ca:20:cf:a8:12:b5:65:37:54:a5:e9:07: 00:f4:75:14:94:db:7e:d2:48:29:2a:3c:f6:22:a7:0a:d2:cd: 98:1f:94:0a:50:81:84:e5:fb:2e:30:65:46:d3:ff:ea:8d:2d: 6f:f0:bd:d4:2a:97:b7:00:0f:95:f8:80:2d:e8:30:00:f1:69: f5:7d:42:d6:51:95:59:a7:44:83:d6:72:1d:89:ff:23:09:20: ec:a3:af:b1:58:ff:63:03:97:c0:ac:8d:c6:f5:f5:5b:7d:bd: ff:c2:de:76:5c:c9:7f:b8:26:02:f5:11:0d:71:89:dd:72:29: 6b:77:46:b9:54:1f:4f:f7:5a:1a:7e:b1:30:89:91:46:d8:a9: 7b:32:af:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZS6u0oZgYiMJZ3LsvV72lyFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwZWY1ZmJiZmNhN2E5M2NmZWU5NjVlZWI2YmRlZTZmYjQz YzQwM2UwHhcNMjUwMTMxMDUwMDIzWhcNMjUwMjAxMDUwMDIzWjAzMTEwLwYDVQQD EyhiZDUyZjBmZTUyMzEyNzg3MjJmY2JjZDZjNGRhNmRiNGNiMWNmZjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtzpVSlVfWNkEOl6dkhXQbO1Z3oI BBk7Kd7UDg1KEB7Q3VoqljETmUgPoEGGUa0vKhL4twGS3PLqY0tX8C11pdboQxuv mlkOzRG4Tq5IEu9Qim0G99+FNtsvtaQRybifr71J4s+nEWndpQk2Sq0rnHuwpvSR BJc7k6qyXAjbrPyRkVUOKTaq/YLz2rGfyoglO9BljwHSrt16gxSRtgKMepvLY4TX 1LnNenEx0hdTxWTjacqfLLKhlJECiFPGrL3eJncdX3krLI8dkIaQWiUxO5sTkThz s8ILvXV2vi8dwdpYbefzeS8KRyFU8Rxili/Or/FYpvr9iFaaQHyKleDDeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL1S8P5SMSeHIvy81sTabbTLHP9oMB8GA1UdIwQY MBaAFKDvX7v8p6k8/ull7ra97m+0PEA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2Mt MDI5MmIwMjAxNTBhLzEvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2MtMDI5MmIwMjAxNTBh LzEvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAis4RjtwP Z5guUB0+X8lD+xnUIlLDfuGgLXAjn6gml0ZbauB//i8dZ155ncFgiGs/srqwmetW H2FPWn3SA1lhhx81svHhlo8IyfJRTRsJSZ5eWOfTcvlBAEZS35synRwzRTl2AKXt HW0u3WY0NhBcrv+VyiDPqBK1ZTdUpekHAPR1FJTbftJIKSo89iKnCtLNmB+UClCB hOX7LjBlRtP/6o0tb/C91CqXtwAPlfiALegwAPFp9X1C1lGVWadEg9ZyHYn/Iwkg 7KOvsVj/YwOXwKyNxvX1W329/8LedlzJf7gmAvURDXGJ3XIpa3dGuVQfT/daGn6x MImRRtipezKvqQ== -----END CERTIFICATE-----Generated at Fri Jan 31 15:28:40 2025 by rpki-client on console-fra.rpki-client.org