$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft File: hszgbnDflw2Qq_48vn-ogvRnseQ.mft (raw, json) Hash identifier: z9xSnA+PbMZulGL9COqGpAJhPnVkGQEMMNrcKVYz6Ag= Subject key identifier: 9C:FC:E4:D0:F2:57:D9:9B:09:26:6E:6B:BD:F8:DC:5A:0B:51:C7:F3 Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4 Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4 Certificate serial: 0194BA8486AA5422C09C961E64A6C56174FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft Manifest number: 0C72 Signing time: Fri 31 Jan 2025 04:00:34 +0000 Manifest this update: Fri 31 Jan 2025 04:00:34 +0000 Manifest next update: Sat 01 Feb 2025 04:00:34 +0000 Files and hashes: 1: 1KrHnSgllq_k9B2wst0bYaC6fyo.roa (hash: lStApswe2/6Ekqa6XmoUoNcd7HO52b9jBs5I4vOK1gc=) 2: 2r2GG3Z2qTTT4g4Y8XqO_XMC7Eo.roa (hash: 3OHcEZapfFHtZllJ50Vm5hOAGU/4QJA5k3QT//j1G5g=) 3: 5T2bu1MZznUR1RN9nzIhUN9ndjo.roa (hash: 0dmLTT5O4LwcX1oD39PZYRT1M5ADWkC9hV3kx2Ypkhk=) 4: 5rnYyxhwBw8AROEQmkeAEzxafWw.roa (hash: IwtsHWgFIbRrrH4F7EACNw91VbTKrHxJb3ArVqfVMGA=) 5: 7m4fpAGLnYeYzw_LpbbgUyrtkQ4.roa (hash: QCn0wSKzzt7ZbsRCL3R6XrUlE4vfiZ5prjFMeQ+ZRnk=) 6: 8es5WUjCpzbWEQdLdvRmhiI4IP8.roa (hash: wfsLBNN2brN6rPEMEn93CKElPjRpjXrU86X4tDSQcxs=) 7: 9teFqyGZ_mCkqm3X6jE1kAKLwYo.roa (hash: NhbHHFduLIRFVDSRiuXpJny6QZ53ctnpxomqsRiNGGs=) 8: Bu5OSyuwBUvGyz_EW5xEisOkNPE.roa (hash: floFuiP5W+ix524d77mDjkmOxeUI0BamBhf6MRMbiKo=) 9: CYChCUuuTLXoGwleeybv9CkhW-E.roa (hash: 7GzS/ZFBd1eJvJV1A/A9RMJ1Wx5zUc1qu4Jv7DUyWos=) 10: ERVdycpY4bKVWQxSzavqyLO77UA.roa (hash: KjnUBMfnbY2dTYCqn8dXExC2kP5qWbontZX2wFEns5A=) 11: FRwc3NIwLMg85xs9oKQE8y-aSsE.roa (hash: 4ntKtlA4N2n8X73E8ZF+yd2Me5uBBOuZ+BWHkgFL6/M=) 12: FkoYIoWSBeZ8a-nhQtN6839TOmI.roa (hash: sM5/eVFWfDuC35aDtRHxRHtxJltL5PpOmwYrAlidLAU=) 13: ITVTbhXITtbbCNEqCEfxFbgqvU8.roa (hash: kInBZjCzyjFvEkmWMFFIjkVHO0pi6G0oNQxZMoLPtU4=) 14: KA4LwOR0SFFzggv9RjQOIamBBDw.roa (hash: o1AhNBlTNTdw9m6UEzikO/p4j6hDFJ/Wvyqei8f5SQY=) 15: LyVym4UPK98Ng-1a9OLHRZHLRmw.roa (hash: /EWVi2VWVGQ7yEZI1vDOB6bTXscAFP3frjxwug5o7DE=) 16: MTfhoMhVaa2jvLpWsCmafYAY7JA.roa (hash: 3m+kRkEl2wmWqDNlaY4ekeMfluU4hnJDaRCFsllksbo=) 17: Nu6zijQv-DL_hfJdU699EWekTRg.roa (hash: 771rwm16NJYUQ87KCX/qmM+TkgZCBwyWJcoh2RVWoMM=) 18: PKHsjOvOcdlc_y5mG_drpwxHdbc.roa (hash: hbdJYigmCoIQhg2/iQ5VMHWL3khykxXVYtz+M1XpOF0=) 19: WDKIHrVYkHEP-_jHo4nENWRIc38.roa (hash: eRiMu2gAszaQ29h+cDiGSbBxDr/jEEiSq3+mBGq95KQ=) 20: WcNfc2ebH1nabssdIAaljgMAMvI.roa (hash: gIeR1+oo2boP6Zw5hratvRw93AbF/Ul3dA94pgz+zkM=) 21: XAkX5rregKOAZ6goJ5wx9HQsoXA.roa (hash: 2tvW+4GQcYwWdY3d9omkAom+BcKhq65s61hMNNvk19g=) 22: YK43wUlx-m3H_C6o-5_fkIZ3XlU.roa (hash: lZmput/l72Qqm+vzyffdMdSg9aLUuGTEYh4bDbHWmNw=) 23: YkSDoKYOtMCdRX_GWKoH7bN9Qog.roa (hash: i72ku+f2KHytCtL8AK60yC0CuhLhud/m7lirtjbMIIQ=) 24: aqMlRyXFF3MZq_HuCgUUi65uKJg.roa (hash: LyUxXMbv9DIW0MA/p9uc9iCcmc5wGZs1xeaJCZat7fw=) 25: hszgbnDflw2Qq_48vn-ogvRnseQ.crl (hash: yR/cGQpCB6tUAg+skpxu+is86dJ/agi2F1YvotYxQl4=) 26: jZYs0dzIvS25J4lteuVc561ZAY4.roa (hash: rfSaNujzpLss3LyIOfVGL5ba21k4OmOMHbD7Qk5vT8Y=) 27: jqtV_uax1l_jcMRVSpaIyiZ162M.roa (hash: Y4HN1NVU+4Ighjr+8NWHfgFsJcgMLxBPTCdLXtE0n+Q=) 28: nJtWVAK4rVZ-QksjyqcUPdq2E-0.roa (hash: fPIupekHjPTLOUuEW0SI4UjXbZKLCETnBj5TxkygoP8=) 29: nnu54qaAmQ6pvabzFz6Up-pPH0I.roa (hash: kBmeew+tYf4WAQZ+Fc361sy82Oa/VLosP5CcZUUWBvc=) 30: t_NEg6wAORA2z6iY5tzozpqnVeQ.roa (hash: t2U+jSzM9nfj8HCTrMEEUxEUZzl9OlK4KTd8PiWngec=) 31: x1qi7vT6XlkpDqHOF8EBAKymy_8.roa (hash: wBFn1pbZFU8rbNr/Rh62ylE2f+RYhtW7iwkEa54rtdg=) 32: xbB2W_NjgLWlbeNMcYSxlHjDmXE.roa (hash: BDb3t8owAR6ftClX/O++Jozk/RAQpNrFQeIkw/Bo4Vg=) 33: xh90gjkdUREP6u7CqXiyIEvYxEA.roa (hash: iJRqmCsgsCfQh0p+dtT91CErS4lAajKkC3AlO0Q/BlI=) 34: y-q4QvIjOXXAb6phQmiwxEr2T44.roa (hash: Fy91hg1vS4tIXtpEC6wT1knLe6VIcGMT2+6MAUeo8ig=) 35: zUEFatqyx1IZKzX2t06sZD8CpVU.roa (hash: QXwL/UriFGOH6USTOmoWPAfbRYkVx/Bvm5SJbZHfQXQ=) 36: zUc6DqYBO1sj46wWQ3wAEvpXb-4.roa (hash: 2PqxyeqgwIjdfRTudpoarQfGLD6f0RaVLu/VTOBZnS4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 01 Feb 2025 04:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:ba:84:86:aa:54:22:c0:9c:96:1e:64:a6:c5:61:74:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4 Validity Not Before: Jan 31 04:00:34 2025 GMT Not After : Feb 1 04:00:34 2025 GMT Subject: CN=9cfce4d0f257d99b09266e6bbdf8dc5a0b51c7f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0a:92:ff:34:23:81:16:b4:40:c0:00:91:0c: fd:87:1f:4d:22:63:5b:9b:b6:c2:e3:57:5c:c7:e1: c4:ba:33:b8:63:cb:63:20:f7:03:31:b8:e6:36:09: 8a:98:92:85:ca:9d:41:b2:ba:72:8b:c9:c0:cf:ed: 67:a4:ce:9d:e3:6f:fb:75:1d:25:f2:79:b1:51:5d: 84:57:0f:50:54:3a:0d:59:a9:a5:de:07:54:c5:5b: 09:9b:1e:60:ed:21:e6:da:72:79:d1:11:48:c0:58: f5:b7:ab:c1:e8:8f:b3:55:1d:53:de:d9:29:a6:e4: 3c:11:10:0a:50:0f:4a:42:6c:4d:55:2c:32:12:b1: 72:e3:31:67:6c:f2:03:29:57:bd:f9:2d:dd:41:46: 20:d1:69:d7:d2:a5:db:df:c5:4b:ba:9b:8f:11:a8: 97:43:79:01:21:58:ff:1c:03:ca:2c:55:ea:07:6f: 8d:46:64:6f:4d:60:7b:a3:ff:d5:3f:e6:8e:a7:08: 60:3c:c0:b3:e4:e6:68:da:6b:69:9e:83:91:41:07: 92:19:f5:dc:74:dc:4d:73:02:26:26:a5:c8:0b:f4: db:06:a9:ac:32:4a:77:0a:02:e0:6b:6f:a5:52:7d: 14:f5:d9:6f:9c:fd:07:58:4f:65:11:58:8b:9c:0b: 6c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:FC:E4:D0:F2:57:D9:9B:09:26:6E:6B:BD:F8:DC:5A:0B:51:C7:F3 X509v3 Authority Key Identifier: keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:ee:41:ec:80:cc:eb:cf:8e:b3:22:e8:a5:72:75:de:3b:ad: 1c:14:5a:99:35:0c:c8:23:78:7a:f1:a0:c8:aa:d7:46:98:5e: ac:07:42:e0:e0:0d:ab:be:45:ba:fc:b9:60:e7:de:4f:78:a0: 44:98:0e:b9:59:42:08:40:1a:e6:79:ba:08:e5:49:05:ac:df: 47:dc:9e:d3:50:ad:fb:a2:4f:33:4a:57:a5:d0:0b:9a:47:e0: 55:e4:1f:38:56:8f:c0:76:19:3d:22:52:fe:24:50:b1:18:b4: b8:bd:a0:4f:41:69:f5:95:81:21:6d:f6:87:ba:de:1a:9b:c3: 1c:0c:51:1a:e1:1f:d4:28:e7:22:2c:97:20:52:9a:b0:08:18: 44:66:24:68:c4:c5:e3:2b:cc:1b:ec:3d:f4:08:b4:11:c7:7b: 28:f7:ad:78:ef:6a:8f:a0:1b:fd:73:3e:32:bd:48:0b:e4:85: 3a:f1:31:b4:ab:9e:cd:59:1b:8e:64:20:9c:31:f1:2d:00:36: a1:46:c4:a4:a3:54:97:8b:7d:f0:86:3e:8d:42:9e:7b:51:b3: c1:49:53:33:d0:28:51:1b:bb:e4:d1:14:21:e1:19:cd:14:2c: 67:20:0f:f1:68:31:1c:b5:22:7f:f2:f5:43:12:1c:a4:4d:14: 86:2d:49:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZS6hIaqVCLAnJYeZKbFYXT8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2Y2NlMDZlNzBkZjk3MGQ5MGFiZmUzY2JlN2ZhODgyZjQ2 N2IxZTQwHhcNMjUwMTMxMDQwMDM0WhcNMjUwMjAxMDQwMDM0WjAzMTEwLwYDVQQD Eyg5Y2ZjZTRkMGYyNTdkOTliMDkyNjZlNmJiZGY4ZGM1YTBiNTFjN2YzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQqS/zQjgRa0QMAAkQz9hx9NImNb m7bC41dcx+HEujO4Y8tjIPcDMbjmNgmKmJKFyp1Bsrpyi8nAz+1npM6d42/7dR0l 8nmxUV2EVw9QVDoNWaml3gdUxVsJmx5g7SHm2nJ50RFIwFj1t6vB6I+zVR1T3tkp puQ8ERAKUA9KQmxNVSwyErFy4zFnbPIDKVe9+S3dQUYg0WnX0qXb38VLupuPEaiX Q3kBIVj/HAPKLFXqB2+NRmRvTWB7o//VP+aOpwhgPMCz5OZo2mtpnoORQQeSGfXc dNxNcwImJqXIC/TbBqmsMkp3CgLga2+lUn0U9dlvnP0HWE9lEViLnAtsVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJz85NDyV9mbCSZua7343FoLUcfzMB8GA1UdIwQY MBaAFIbM4G5w35cNkKv+PL5/qIL0Z7HkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2Ut ODk3MTRhN2U4ZDU4LzEvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2UtODk3MTRhN2U4ZDU4 LzEvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdO5B7IDM 68+OsyLopXJ13jutHBRamTUMyCN4evGgyKrXRpherAdC4OANq75Fuvy5YOfeT3ig RJgOuVlCCEAa5nm6COVJBazfR9ye01Ct+6JPM0pXpdALmkfgVeQfOFaPwHYZPSJS /iRQsRi0uL2gT0Fp9ZWBIW32h7reGpvDHAxRGuEf1CjnIiyXIFKasAgYRGYkaMTF 4yvMG+w99Ai0Ecd7KPeteO9qj6Ab/XM+Mr1IC+SFOvExtKuezVkbjmQgnDHxLQA2 oUbEpKNUl4t98IY+jUKee1GzwUlTM9AoURu75NEUIeEZzRQsZyAP8WgxHLUif/L1 QxIcpE0Uhi1JxQ== -----END CERTIFICATE-----Generated at Fri Jan 31 15:30:08 2025 by rpki-client on console-fra.rpki-client.org