$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft File: UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft (raw, json) Hash identifier: zKyYhEeBmFKy3dPnI8kDHJAO8NUJc6sgr2VjGbSz3vg= Subject key identifier: 07:4A:A5:1A:64:DA:91:3D:66:30:DF:DF:95:9E:E2:B9:DE:76:C2:B0 Authority key identifier: 50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7 Certificate issuer: /CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7 Certificate serial: 0194BABB71F28A3E1D5358DF82B2F47A99A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft Manifest number: 14D6 Signing time: Fri 31 Jan 2025 05:00:33 +0000 Manifest this update: Fri 31 Jan 2025 05:00:33 +0000 Manifest next update: Sat 01 Feb 2025 05:00:33 +0000 Files and hashes: 1: 2D8GskUOctsT18ewUQERiVKSyqY.roa (hash: 81yC075gcHWBzZ9r1FLaXrPHKC2rS2Rq+/AZd9LK1O0=) 2: 3rRM1UU67-NncVP3_LftMbl2hFY.roa (hash: CmDqzWxPDccHaO9H4nIQm1+mJLI9vAQm75ESbo4gAFw=) 3: 6MsDvK1-WGC9RDIaMU0NJQXi_WA.roa (hash: N4CgWW54RCc4pQhXmSwerDVdxqnSumkj3/I4KPyGdXw=) 4: HA-r46DGrSX6ZsGKVUa30hJ1jyk.roa (hash: Nwcsh74PJ+Ju/lz6N+VQcsogsPHxdHhSZbEsnfHlkss=) 5: HJ2Ej1XnMez_6zjEhFT9gySMGiM.roa (hash: Tk//MwFVEMDrbw7kPqT+aJGJ2AwGRLjUiZiXfu/Ik0U=) 6: Kt3pW9wP8W20NKHZRRAiZP2I8oQ.roa (hash: V9vawdS9Sz2AnVaicZMwx6YiRLzlvhL+EuIZw4u+bFM=) 7: TmtbffGKJCoB6KaITSDYwVaNuwg.roa (hash: 9FENVzGrCx3+V6le/ReQ6+C3ptJBYI3u30nI4IXsVV4=) 8: UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl (hash: ye5s3/pniflWj0EtN5DBnm/oVNqZ6D66lIfzZhUEKSs=) 9: dw6fYArhndr9OHyiwkGdN32rJ08.roa (hash: 9uc2Yj3dajQn3veP+iEA8czeMrzLkCSGvgH42cP6lcs=) 10: oOYI1o8RT1W_jG5F8_TINuUiUMQ.roa (hash: SMVQvDfO97QFDnaGUjkB1vbQp6PFud0xX6WvTiegAb0=) 11: pdE9jYgps_x2zZleZNeiVBZrLS4.roa (hash: 2tpInmxNwOGO6jkHQZzD8hPYsZ+9KF9Fp+XqzI+5N4A=) 12: pzO_vf4S85qGYsEOeaoc-NqBUG4.roa (hash: dQpCMi5DIsAy32ym2T+shCsk+2yMX+WZ0xQ8KadnYks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 01 Feb 2025 05:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:ba:bb:71:f2:8a:3e:1d:53:58:df:82:b2:f4:7a:99:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7 Validity Not Before: Jan 31 05:00:33 2025 GMT Not After : Feb 1 05:00:33 2025 GMT Subject: CN=074aa51a64da913d6630dfdf959ee2b9de76c2b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4e:53:ec:00:48:15:24:90:99:dc:e3:2f:1a: b5:96:ad:1e:0b:04:f0:23:d1:13:22:a1:5a:ce:42: 9f:75:7d:d0:fc:5a:12:9e:f7:6b:6d:c9:d1:9f:00: 82:48:ac:e4:11:f1:f6:1c:cc:f2:09:c9:2c:ca:b4: bd:f8:ed:0b:57:9b:6c:f7:2e:23:3c:59:10:66:f6: e2:6e:56:04:e3:33:38:36:bf:5a:e9:dc:94:ff:ec: a5:85:04:e5:96:61:c8:0e:10:64:35:68:76:6a:2a: d5:5c:48:03:b0:34:d6:fc:a8:93:77:41:94:3f:8e: 14:d0:f0:84:dc:83:72:27:e1:30:44:39:6a:f9:03: 95:0a:33:f1:91:af:05:aa:2c:db:07:b6:31:30:b4: f7:4f:ea:dc:28:86:d9:94:0c:31:09:c3:7c:64:40: f8:66:80:5e:a6:bc:41:08:de:57:0c:6e:48:5e:c9: bd:1a:c3:9f:15:56:71:01:38:7a:b7:07:dd:99:78: 87:52:a3:14:69:b4:1e:15:b5:25:8c:81:12:a9:c0: d9:80:66:b4:c5:1c:7b:e9:9d:c4:c7:04:5e:e1:3f: 84:9b:4b:57:58:6c:f9:df:f0:5a:85:4b:ae:3f:fb: 4a:fc:2b:0f:d8:ca:0b:04:08:09:e8:5a:7d:95:29: 5a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:4A:A5:1A:64:DA:91:3D:66:30:DF:DF:95:9E:E2:B9:DE:76:C2:B0 X509v3 Authority Key Identifier: keyid:50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:d5:f6:a0:21:18:35:df:50:3b:6f:8a:9d:11:57:cd:48:02: cd:bb:89:b8:c6:da:07:db:1d:ef:e0:9a:22:f8:3b:3d:fc:55: cb:16:58:dd:bd:9d:e0:7b:40:d1:1a:04:ac:5f:0f:d5:76:61: 44:da:87:03:7a:2e:2d:3d:e2:cb:7e:6b:c5:74:12:c7:65:44: c0:40:8b:14:d0:81:ae:a8:7a:37:f0:81:e5:95:e5:b5:97:46: 72:09:4d:8e:7d:bb:f9:15:1b:48:16:91:a3:7e:4f:e4:e1:64: 92:9d:be:fd:7a:23:2a:32:82:7d:bd:f3:39:1d:95:64:22:e2: cd:cc:ab:29:c3:74:d8:ee:ac:95:a5:98:92:ae:c4:11:7a:d0: 9b:e6:9f:1b:f4:8f:9d:55:9f:18:a3:3b:77:c8:bd:5e:41:50: 78:47:49:c7:ce:55:6a:98:1e:52:d1:c2:22:58:ef:7e:10:bd: a1:46:3a:4f:01:91:08:0c:98:ec:a3:ad:bc:43:7a:5a:0f:f3: 01:d2:e2:20:5d:ec:ee:e6:d4:25:24:3e:e8:9a:25:32:51:91: bd:21:8c:da:2e:4a:39:3d:15:1f:9a:a9:ed:08:29:45:8b:7d: 4a:06:51:06:89:77:60:55:07:ed:70:14:ba:50:4f:ea:28:65: 69:54:29:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZS6u3Hyij4dU1jfgrL0epmlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwMTgyYmVlOWFhMDEwYzFmZmQyZDgwNGY2YWE3YjE0YmRk YjkxZjcwHhcNMjUwMTMxMDUwMDMzWhcNMjUwMjAxMDUwMDMzWjAzMTEwLwYDVQQD EygwNzRhYTUxYTY0ZGE5MTNkNjYzMGRmZGY5NTllZTJiOWRlNzZjMmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv05T7ABIFSSQmdzjLxq1lq0eCwTw I9ETIqFazkKfdX3Q/FoSnvdrbcnRnwCCSKzkEfH2HMzyCcksyrS9+O0LV5ts9y4j PFkQZvbiblYE4zM4Nr9a6dyU/+ylhQTllmHIDhBkNWh2airVXEgDsDTW/KiTd0GU P44U0PCE3INyJ+EwRDlq+QOVCjPxka8FqizbB7YxMLT3T+rcKIbZlAwxCcN8ZED4 ZoBeprxBCN5XDG5IXsm9GsOfFVZxATh6twfdmXiHUqMUabQeFbUljIESqcDZgGa0 xRx76Z3ExwRe4T+Em0tXWGz53/BahUuuP/tK/CsP2MoLBAgJ6Fp9lSlayQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAdKpRpk2pE9ZjDf35We4rnedsKwMB8GA1UdIwQY MBaAFFAYK+6aoBDB/9LYBPaqexS925H3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUJncjdwcWdFTUhfMHRnRTlxcDdGTDNia2ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9iZDQ1NjYtYWMyNy00NmY4LTk0Zjkt MTlkMWJiNjFkOWE3LzEvVUJncjdwcWdFTUhfMHRnRTlxcDdGTDNia2ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9iZDQ1NjYtYWMyNy00NmY4LTk0ZjktMTlkMWJiNjFkOWE3 LzEvVUJncjdwcWdFTUhfMHRnRTlxcDdGTDNia2ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM9X2oCEY Nd9QO2+KnRFXzUgCzbuJuMbaB9sd7+CaIvg7PfxVyxZY3b2d4HtA0RoErF8P1XZh RNqHA3ouLT3iy35rxXQSx2VEwECLFNCBrqh6N/CB5ZXltZdGcglNjn27+RUbSBaR o35P5OFkkp2+/XojKjKCfb3zOR2VZCLizcyrKcN02O6slaWYkq7EEXrQm+afG/SP nVWfGKM7d8i9XkFQeEdJx85VapgeUtHCIljvfhC9oUY6TwGRCAyY7KOtvEN6Wg/z AdLiIF3s7ubUJSQ+6JolMlGRvSGM2i5KOT0VH5qp7QgpRYt9SgZRBol3YFUH7XAU ulBP6ihlaVQpuw== -----END CERTIFICATE-----Generated at Fri Jan 31 15:30:13 2025 by rpki-client on console-fra.rpki-client.org