$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.mft File: XaOUHCfP5cI0xL8iHssqV5st6qs.mft (raw, json) Hash identifier: kzFfQFokbzhsnIFUXFIiS84hEJvFrKJLKw/oPTq5fw0= Subject key identifier: EA:0B:D4:F2:10:52:3E:12:3F:AD:25:81:A0:11:B4:F0:AE:15:06:17 Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab Certificate serial: 0194BABB55F3F246F9B8B79CDD2F15C679AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.mft Manifest number: 1170 Signing time: Fri 31 Jan 2025 05:00:26 +0000 Manifest this update: Fri 31 Jan 2025 05:00:26 +0000 Manifest next update: Sat 01 Feb 2025 05:00:26 +0000 Files and hashes: 1: 0NDg7PSFqCtlOZYcAWca7yUfVmo.roa (hash: vxdlDismxivb7YjpnzIGBIMoDZ842tr8eSQHVdPZSK0=) 2: 44V-jFpveDwCvRSgY1bGyBKxKMg.roa (hash: SBBRS+535H/ER4FEKoyxl+HX5+uiiatZ4OyNmO8omfM=) 3: 6xMWEeYr9awMZ7yx3GEOzN5dhPY.roa (hash: i3EKCietWlgVwKiSYdpzAk0qUO8A42y+4Xa5mI7nNOE=) 4: 7uT6U1lLurQEaJor-cFGlwsDu_k.roa (hash: Ui1tug0NBabKJLVWvbF+wZA/W7tLCJHrULtI5KVfo4U=) 5: CJWoMIuHhVD-Efxrbw0jAFhbe-w.roa (hash: Kgwm9eLnChXzut1Wvo58jSxKdzv5IWvQsGfIpc5SNrY=) 6: GaPhNmCLCg6FDzOqGOsmTwzEr2s.roa (hash: s8h3O6KnSTgtqyfNfNsxD91VQjj/kAw0losU0p/2szw=) 7: JRsS63OEIg-RDEt77cmLzheKteg.roa (hash: 6PR4Cpk+9BkN+AncsoVUiTEwpS1IqPFK3JqRVNAKG/Q=) 8: Jy2dzojQmDDHrT1ZglR62KXl9KE.roa (hash: 9d9Gsb0ep9phZqm2SLYU7Tj/IcHV8fHdUCwzejsx/PY=) 9: VwscqchdEAmsVSyV2eD8RGldRmQ.roa (hash: VdjKB9pG2pwAZNShYBPvCakHnXSVowEhPi3XTbCbuyI=) 10: XaOUHCfP5cI0xL8iHssqV5st6qs.crl (hash: 7bAZecu+y5iP8faQrLrsa1jiRiVFT/UV8z8b/fLT2mU=) 11: XrNSTv81nzS1hL9u_qrcT0GHBhE.roa (hash: d3aVYfMijrM4aPuSgEFk9yYZtFRcQmketyz3QICTMbU=) 12: bYPfKSp3uay7u1IBGQCfz9PB7s8.roa (hash: cQdCPGlvEZyuveyWWb2XndmUwLnId4QzQGpaXozykOM=) 13: fX9UYKZO6xd52hU0CG_6QfKAnlI.roa (hash: PeN61zex2Sw5DInmZiyUVF6K0j8DWMly0+OvVLBpOMI=) 14: hSWUv1huf0ZgdEoupOzoYiR-xRY.roa (hash: fUUm9WVh4RT1Bif3s0lLxfArOXO1kV1fWL5woYLGALo=) 15: u1fx_e153PBDwPgyvx0qhpf_7-c.roa (hash: rIfGEdBSwuolAjKZu/D3tV9dA5ieH7tsIwRBMyCCMhA=) 16: uAEY8yf0-OduNKClmzmQfAo_KIE.roa (hash: qEIbThjEj3GBtZEd/ntxaTMGkdBP7P2YKculyoqC1h8=) 17: vQBa0DHzLolz37NUtVTr3McGXdM.roa (hash: jEeBKTmQJb632hn3aeDSG3q3Hax58EZ7ZkfrXZDB5r0=) 18: zLLnY-dQIRtqYuPaqhFMWu0P24Q.roa (hash: NAwFEB8VGQ8kHJYhy4abt4dV8wltJt8R0PlTbgI+GD0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.mft rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 01 Feb 2025 05:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:ba:bb:55:f3:f2:46:f9:b8:b7:9c:dd:2f:15:c6:79:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab Validity Not Before: Jan 31 05:00:26 2025 GMT Not After : Feb 1 05:00:26 2025 GMT Subject: CN=ea0bd4f210523e123fad2581a011b4f0ae150617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:92:07:42:f0:af:2c:1d:ba:91:af:54:83:72: a6:24:71:b0:50:ba:54:67:33:9a:e6:8f:01:cd:8c: 42:52:ac:5d:50:be:f9:16:92:a2:da:bb:2c:ad:4c: 57:2a:a1:12:35:de:31:a3:e0:51:ca:d6:24:ae:21: 11:08:02:a7:37:22:be:6a:20:db:75:9c:3b:d4:82: 6c:33:d5:d0:da:32:95:6f:88:5c:14:70:a1:0b:d0: ba:e2:c0:9e:c0:b8:c7:39:68:fd:3d:23:0f:66:69: ec:22:99:a1:f4:69:98:44:e1:45:da:10:3c:1e:af: 44:0c:22:c4:ce:96:ad:ba:03:66:a9:27:c8:a0:51: 67:46:3c:16:49:57:f8:4e:bd:6f:b0:e4:96:73:62: 2a:8a:fb:c1:21:7b:b2:86:13:a1:b6:a1:9b:bc:6f: 3c:18:72:a6:67:aa:f6:80:dd:90:f0:c6:e8:23:ae: 0c:b1:96:36:15:fd:47:19:d0:4b:d8:45:20:58:12: dd:df:13:e4:c8:63:b6:65:5f:3b:7b:ca:97:f7:73: aa:a6:98:2c:9d:00:1c:95:6f:b7:55:3c:08:85:9c: 68:77:26:de:c6:63:eb:87:72:d6:1e:3a:0c:82:34: c0:32:22:ac:a9:69:cc:36:ee:f5:32:16:10:2c:80: a0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:0B:D4:F2:10:52:3E:12:3F:AD:25:81:A0:11:B4:F0:AE:15:06:17 X509v3 Authority Key Identifier: keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:04:65:b9:63:da:b3:ce:6d:b7:66:6b:b1:94:1e:24:0e:fa: cb:24:6a:60:9c:02:27:7f:65:ae:4e:e2:1a:09:d4:48:d3:0c: ea:6a:35:70:5e:de:7c:6b:01:93:3a:9e:fb:0e:80:e2:e7:04: f0:ae:a4:cf:37:c3:a0:8b:17:ef:a8:2e:36:2e:b0:fc:35:e6: 71:8f:a9:42:07:61:01:ad:24:85:3e:c1:d8:ab:1f:9d:2d:84: 98:e4:cd:e2:76:f2:8f:c9:d1:7a:cf:37:22:17:a8:08:62:30: 95:33:96:96:65:a5:08:a1:9f:0b:3e:a2:6d:6b:fe:27:4b:b7: b1:c7:59:49:70:75:a2:e4:3e:74:23:04:08:fd:38:fe:19:7a: eb:e2:3f:bf:25:68:27:3c:ed:09:3b:45:db:c7:ee:72:84:28: c6:65:48:db:c2:01:62:c2:c2:a4:64:e1:85:e7:aa:43:04:d4: 6a:1b:f4:b3:0c:78:3f:5c:8c:2b:b2:93:11:d7:08:e8:0c:61: 24:5a:66:17:13:3a:c7:fe:0b:ab:04:b5:79:55:b9:b9:e0:ab: 93:e0:1c:a7:40:5e:dc:24:da:78:cc:78:f3:95:1e:81:5a:0d: 85:bc:62:1a:80:1e:8c:fe:3c:cd:47:cd:4b:2d:c0:15:26:92: 31:e0:c3:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZS6u1Xz8kb5uLec3S8VxnmsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkYTM5NDFjMjdjZmU1YzIzNGM0YmYyMjFlY2IyYTU3OWIy ZGVhYWIwHhcNMjUwMTMxMDUwMDI2WhcNMjUwMjAxMDUwMDI2WjAzMTEwLwYDVQQD EyhlYTBiZDRmMjEwNTIzZTEyM2ZhZDI1ODFhMDExYjRmMGFlMTUwNjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZIHQvCvLB26ka9Ug3KmJHGwULpU ZzOa5o8BzYxCUqxdUL75FpKi2rssrUxXKqESNd4xo+BRytYkriERCAKnNyK+aiDb dZw71IJsM9XQ2jKVb4hcFHChC9C64sCewLjHOWj9PSMPZmnsIpmh9GmYROFF2hA8 Hq9EDCLEzpatugNmqSfIoFFnRjwWSVf4Tr1vsOSWc2IqivvBIXuyhhOhtqGbvG88 GHKmZ6r2gN2Q8MboI64MsZY2Ff1HGdBL2EUgWBLd3xPkyGO2ZV87e8qX93Oqppgs nQAclW+3VTwIhZxodybexmPrh3LWHjoMgjTAMiKsqWnMNu71MhYQLICgoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOoL1PIQUj4SP60lgaARtPCuFQYXMB8GA1UdIwQY MBaAFF2jlBwnz+XCNMS/Ih7LKlebLeqrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGFPVUhDZlA1Y0kweEw4aUhzc3FWNXN0NnFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8zMGVkM2UtYzRjNC00ZGU4LWI0ZjEt ZjExYTM5ZjI2YzNiLzEvWGFPVUhDZlA1Y0kweEw4aUhzc3FWNXN0NnFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC8zMGVkM2UtYzRjNC00ZGU4LWI0ZjEtZjExYTM5ZjI2YzNi LzEvWGFPVUhDZlA1Y0kweEw4aUhzc3FWNXN0NnFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcARluWPa s85tt2ZrsZQeJA76yyRqYJwCJ39lrk7iGgnUSNMM6mo1cF7efGsBkzqe+w6A4ucE 8K6kzzfDoIsX76guNi6w/DXmcY+pQgdhAa0khT7B2KsfnS2EmOTN4nbyj8nRes83 IheoCGIwlTOWlmWlCKGfCz6ibWv+J0u3scdZSXB1ouQ+dCMECP04/hl66+I/vyVo JzztCTtF28fucoQoxmVI28IBYsLCpGThheeqQwTUahv0swx4P1yMK7KTEdcI6Axh JFpmFxM6x/4LqwS1eVW5ueCrk+Acp0Be3CTaeMx485UegVoNhbxiGoAejP48zUfN Sy3AFSaSMeDDOg== -----END CERTIFICATE-----Generated at Fri Jan 31 15:33:35 2025 by rpki-client on console-fra.rpki-client.org