$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft File: nFQvXfPBrLhX_VDusBbu0HOF_4w.mft (raw, json) Hash identifier: 64Rbs3i1pGbtKxkmeTGJtDLGaEVHdtQX1E/JowJc2gI= Subject key identifier: 7B:B0:3F:E1:EC:62:4E:21:84:8C:14:F6:75:CF:F8:C0:54:AA:EE:D3 Authority key identifier: 9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C Certificate issuer: /CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c Certificate serial: 0194BB97337F74098E98526AA8E4BB20F64A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft Manifest number: 0841 Signing time: Fri 31 Jan 2025 09:00:35 +0000 Manifest this update: Fri 31 Jan 2025 09:00:35 +0000 Manifest next update: Sat 01 Feb 2025 09:00:35 +0000 Files and hashes: 1: 93UY4dqb05zYXsrBSgY_SUWy1OE.roa (hash: SWhjxZR4qmQCp7MeCgzZuMrb6QG5ysKe/Q0l50PE6Rk=) 2: BorusD87l5J2TYxre3Gw8ED14c0.roa (hash: xxXysVTbA/0WGCy4sb2ruRMVMBKnhW6YWf0n8anG8zk=) 3: EEKlI2T6FZUgLn4m9dFt2jmmjug.roa (hash: NhLG/JHJb6nBfntTyOXn48rJIGdq84bLDpAP5xe+ZAE=) 4: KnmFh3qNXzClOAnP3N3_zOdYRAo.roa (hash: +qqI3RCcMPzqW1FNd6qeiI1Hp+fo8ydp1FHu51Tncg4=) 5: MHNWn_bNBX1lqcEOD0mTT7wACrI.roa (hash: clLcaYzI7DQcX+Fv2rNG1C3Zllntv/UDtJxJ/vRXxoQ=) 6: Re_UifNbcWs-_GiyHAPPOm-yvBI.roa (hash: /7ri6bimyKdV62h18w2ONkdLybTnrpaymT5BH6L1jYA=) 7: VcO4qJxU40K9kxUnEeW--IFaX04.roa (hash: X/O0h17oYuRQs7Z/RvZag6iy4Bl2stwkspMMrvsPNYY=) 8: XbSJLVClFYLx347mvDQ0S5hsX4g.roa (hash: lybO1wHjq/XifCJ733TrvdLHgJspRMxJWxwTnG2IJ3k=) 9: _FIw_A5dt1xU03Zbhge-_m33JRg.roa (hash: detBPIO7UYh9KdSe2E/Nz7Rkxgy8iMeWzoXOu0ZPnXY=) 10: _eUdNns9K3pmktpDjbsJKL25mLM.roa (hash: H1epmYT39WpWPDkyNBRD00gVA4UMe6PA7lYf9t27Nt8=) 11: cEhFqbjTQFHrRV4Ybw-hc_cZuJo.roa (hash: W1+Ofl4oiuSVllcGbGWdf+VY2bftQGwfHUHzFsY/Q7Y=) 12: cRJHBNdmbpUyHqOEUpwKzTFuNCk.roa (hash: SS69vXe4PhGUYENzPrsqk18OCamPGc10AVGsVohBJGk=) 13: czgjqrf2lapbXeVYP9ODbikQ6sU.roa (hash: Sob92iox8FAuLbYC7O6yXinthlLYCpBjBKCErucg688=) 14: epelwHANh7OiGsK_9lXuxpfMg6A.roa (hash: cvIngfrBRq+miG7IEBZb12qk6qbFmlm6tUzWI+SSFws=) 15: exmtqeslQldhovSpOC-CSOrLj4s.roa (hash: IXHYJUqvNFWkYhESKi5QnQyfrtPde8hk0KEfvOUYiSw=) 16: irT4DdDzgeP-65AGXrk0PHCAQVY.roa (hash: RsayR2J7jayb/ZHPN+8XPFdXktAjeGK/x5tQjIbG8/Y=) 17: nFQvXfPBrLhX_VDusBbu0HOF_4w.crl (hash: M90w0B+8LhC51BFoG5/fNxGEP98p7Uiwlazc9LME7VY=) 18: uO1pFwRy8AJGX4SwnDjfNrYIKos.roa (hash: 2ZU1WLrzVVRfNgET3SFbUEMACq2+Y8CsJcuFHw7Rrv0=) 19: wy1RBt9-FTDUKThwB6O8_c8fLfA.roa (hash: Fllwvy2h9OiyLGl6uM6ez626CNdcbz90U+OjeiGk5Os=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 01 Feb 2025 09:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:bb:97:33:7f:74:09:8e:98:52:6a:a8:e4:bb:20:f6:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c Validity Not Before: Jan 31 09:00:35 2025 GMT Not After : Feb 1 09:00:35 2025 GMT Subject: CN=7bb03fe1ec624e21848c14f675cff8c054aaeed3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b9:0b:9e:4a:63:4f:0e:dc:00:7c:27:6b:19: 1a:c4:46:09:5d:8f:9d:d3:0c:6f:12:98:c9:43:6e: 1c:0f:0a:84:c5:bf:cc:06:b5:39:9b:e9:1f:46:da: 45:3f:a3:ba:89:dc:a2:45:3f:78:b2:49:03:f1:1a: c9:de:95:e1:fd:c9:08:65:ce:f9:2e:64:f0:4d:b6: a8:60:bc:a8:e9:53:3a:a0:80:ef:cb:80:f1:df:ff: 57:3d:51:c9:19:6a:df:47:39:c3:72:3c:85:0f:7f: 0a:aa:07:a1:88:35:91:de:89:e2:2e:20:0a:72:f9: 7e:11:c3:7f:02:c8:9b:72:87:e6:8d:21:b9:ab:e2: 6c:74:c7:20:aa:e3:b6:77:5d:61:c8:43:e8:1a:1d: 82:eb:78:85:ad:0d:d8:ab:07:4a:8a:81:36:15:e1: ba:0d:79:17:d2:fc:de:23:d4:a7:b1:c8:3d:45:fb: 8b:8c:0b:83:00:77:91:f2:30:d4:10:9c:2d:c9:ca: 68:6e:e6:27:d4:c4:15:78:ad:42:06:68:be:8e:5e: 98:c3:43:8b:ec:2d:28:76:1a:18:7e:f2:3b:44:ed: 39:c2:bb:f2:6f:e7:e6:c0:b5:d0:ff:06:e9:8b:b3: f3:a1:96:54:8b:b6:90:89:e7:fa:d6:d3:02:87:47: 06:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:B0:3F:E1:EC:62:4E:21:84:8C:14:F6:75:CF:F8:C0:54:AA:EE:D3 X509v3 Authority Key Identifier: keyid:9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:eb:b9:a5:8a:dc:4e:fc:39:f9:ba:62:a8:3a:a8:da:e4:92: 53:c4:05:b4:3b:3d:03:35:54:d8:e5:b4:94:4f:b9:f0:80:9b: bb:51:3f:17:7f:8c:5b:ad:e3:9c:32:89:32:68:dd:68:01:09: 42:e6:95:f6:b6:1b:3d:e1:0d:a8:fc:21:ca:63:e3:cf:15:4e: c1:b3:19:12:49:e4:bd:dc:26:49:f4:ef:7a:c4:8d:84:8b:91: f8:93:b3:46:52:cd:bf:7e:7f:d3:7f:7b:83:e0:93:ac:0b:13: b2:a2:63:c9:55:a0:ef:7c:27:a1:cc:4a:72:ac:e1:25:58:1f: 87:56:ec:d6:2f:e1:4a:dd:bd:25:56:ac:1a:e4:7c:9c:fb:8c: 9e:f3:c1:f9:d6:15:ff:ab:34:d4:d3:5b:40:4d:bc:1c:36:67: dc:2f:af:f1:8a:83:8b:3c:01:65:ed:d4:4d:4c:da:d5:c5:81: 99:76:d8:47:3a:a9:bd:20:5e:57:91:cd:f1:86:5e:22:13:4c: b6:45:9a:ca:80:53:45:c0:f4:d2:2d:95:c3:8f:5b:67:c8:5d: b0:ee:ab:cd:6c:67:8c:d1:22:ab:c8:bb:b3:91:fa:66:25:8e: 92:2a:09:59:15:fb:12:0b:d4:a2:af:80:ff:8f:42:1a:3b:06: 4c:0b:e4:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZS7lzN/dAmOmFJqqOS7IPZKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNTQyZjVkZjNjMWFjYjg1N2ZkNTBlZWIwMTZlZWQwNzM4 NWZmOGMwHhcNMjUwMTMxMDkwMDM1WhcNMjUwMjAxMDkwMDM1WjAzMTEwLwYDVQQD Eyg3YmIwM2ZlMWVjNjI0ZTIxODQ4YzE0ZjY3NWNmZjhjMDU0YWFlZWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbkLnkpjTw7cAHwnaxkaxEYJXY+d 0wxvEpjJQ24cDwqExb/MBrU5m+kfRtpFP6O6idyiRT94skkD8RrJ3pXh/ckIZc75 LmTwTbaoYLyo6VM6oIDvy4Dx3/9XPVHJGWrfRznDcjyFD38KqgehiDWR3oniLiAK cvl+EcN/AsibcofmjSG5q+JsdMcgquO2d11hyEPoGh2C63iFrQ3YqwdKioE2FeG6 DXkX0vzeI9Snscg9RfuLjAuDAHeR8jDUEJwtycpobuYn1MQVeK1CBmi+jl6Yw0OL 7C0odhoYfvI7RO05wrvyb+fmwLXQ/wbpi7PzoZZUi7aQief61tMCh0cG2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHuwP+HsYk4hhIwU9nXP+MBUqu7TMB8GA1UdIwQY MBaAFJxUL13zway4V/1Q7rAW7tBzhf+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mYjc5MWItODAxMy00NThhLTlhMWUt MjVkYmY0MzgwNGM1LzEvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9mYjc5MWItODAxMy00NThhLTlhMWUtMjVkYmY0MzgwNGM1 LzEvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADOu5pYrc Tvw5+bpiqDqo2uSSU8QFtDs9AzVU2OW0lE+58ICbu1E/F3+MW63jnDKJMmjdaAEJ QuaV9rYbPeENqPwhymPjzxVOwbMZEknkvdwmSfTvesSNhIuR+JOzRlLNv35/0397 g+CTrAsTsqJjyVWg73wnocxKcqzhJVgfh1bs1i/hSt29JVasGuR8nPuMnvPB+dYV /6s01NNbQE28HDZn3C+v8YqDizwBZe3UTUza1cWBmXbYRzqpvSBeV5HN8YZeIhNM tkWayoBTRcD00i2Vw49bZ8hdsO6rzWxnjNEiq8i7s5H6ZiWOkioJWRX7EgvUoq+A /49CGjsGTAvkow== -----END CERTIFICATE-----Generated at Fri Jan 31 15:37:17 2025 by rpki-client on console-fra.rpki-client.org