$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft File: ZbfWaZg1v-moCB38EU3xv20hXac.mft (raw, json) Hash identifier: bt0BDlSd6o+qObJaKKhkhGykJqLhfZVRcF9H9QemqyQ= Subject key identifier: FD:06:A6:01:09:A7:66:9F:A6:91:97:5C:BD:C9:D3:F9:26:CD:B4:23 Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7 Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7 Certificate serial: 0194BB29754C326F08E61BF3D4A2C825DAF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft Manifest number: 148A Signing time: Fri 31 Jan 2025 07:00:43 +0000 Manifest this update: Fri 31 Jan 2025 07:00:43 +0000 Manifest next update: Sat 01 Feb 2025 07:00:43 +0000 Files and hashes: 1: 18sxOB5Kpihtussm1nLKSIGMFSE.roa (hash: b7X7RSJm4cnyNvUC/xqU2kCOGFYxn6Od5qlq/zQq/DM=) 2: 2SAQLA7QMTW3rJ2MPjCOahlOsgA.roa (hash: YQiN3iKo5zTaytwvVXkZsjdfMdlDibNqV0v4+CZFgPw=) 3: 4ugbCy83DcO9TYhxoGqg3xYqKBI.roa (hash: uW7VWLBw91JN4k11JcZFpOcPQ5HtPfwoG25WkIgbLeQ=) 4: 633vYI0vgawtTiAsAfetuclpLa4.roa (hash: QZjDUE+Ik13/OlCkdc+ycs4ujBDr7OuwjAkTuz9Kz8Q=) 5: 9_6Qgvz8x0xmVgbjQq9RZaCrzwI.roa (hash: XDjG9XViYUZoXuJfh57cLMJxvVfFwPpTj7Ylh+rpLA4=) 6: Av9JpZ7UD9REZPJ-Z_fVHzsfJME.roa (hash: Iv8/KTPfD2/e9NrMyN7kOevvk68zlDQYUklQZlmENuA=) 7: H3Ae8Q3e_rR7MK4hAzj1EvP8VEU.roa (hash: 5P9vQwM4b6vv//hAIabzYt+PZ71OKqlHd9YyRRPD468=) 8: IGXep-Sp1xTx1rwpzVruBZRjNug.roa (hash: cujh35boqOnCbI1nKqG05ttKtrmdk5otJzYosXhUDII=) 9: NNPkTDbtxCjIv0T_rkcglbIHKsI.roa (hash: IKxplvCU83AT08NdV5QMZT2pNZspbe6MXkpY4tcztgc=) 10: XAAB7ErjyjCfUt-bBjZ5UZySstM.roa (hash: xgD/DWg6heYAPl/OR3IjIUBhRfp/RJ6utRTPnuEm3I8=) 11: YHSxqiNEFwuFpuDI4drCA2zup4I.roa (hash: yv4ghEr4spN3t8KOmDLuvdlQYs+qOLtn2bpKJylJTxA=) 12: YVwxp9vRo78D3Zkq4PWUJjvh2ys.roa (hash: 6SWi7F6i8jnqxlALTm3akUKfwciw3a80Vo8UDIGTBq0=) 13: ZbfWaZg1v-moCB38EU3xv20hXac.crl (hash: N11yD9wF8w1IQSyyyjT93eD/KwRvNNGstKqrzBtqBLI=) 14: lAb9RBA01K4gUbdUlXjRheZBvO0.roa (hash: zjGOSVwUy9hMnYD8GEG9lZULYJEj9vGVyVzW3rH4iO0=) 15: llk4ofXvRzHEH-qWue__dsHka_s.roa (hash: K2BZhTog7Vh0tYt+YbAIQfdPEsZY55aQG6EI2WxH2g8=) 16: mF-qnHCYHA9WTNp9j6yOA_R4yu8.roa (hash: jrTEg5IuAZrOX+dmbHaApAZQghmofnNMmUTvEgxMTkw=) 17: sqIW9ZKXX1cs9z8XDKB6U-j5moM.roa (hash: jo0gVB0hojEZMPutTd5wMHL6sbsNdbqC5YRwxV5cYZw=) 18: wCb4vbrgGFRhU-Cc5NMZl-jzWqo.roa (hash: zpBJ6kRrehBfcMMd+SMf9RfgRe0zUoI1wInwbsH+nsg=) 19: z9Z9t7kfWwit4I9_Rt9Xt7bo-ms.roa (hash: xjQ2gHL1Jh7hwOv5Vlv0kGkojGyyO/DQzH561lm74tc=) 20: zmWLRvZ7XMmYhQOppzBvFxRjR9o.roa (hash: 6Q/6wdfAylMsEZywBPJb5E0+PJFDXtpbTad0L2I6rWg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 01 Feb 2025 07:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:bb:29:75:4c:32:6f:08:e6:1b:f3:d4:a2:c8:25:da:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7 Validity Not Before: Jan 31 07:00:43 2025 GMT Not After : Feb 1 07:00:43 2025 GMT Subject: CN=fd06a60109a7669fa691975cbdc9d3f926cdb423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f4:c5:7b:6a:ba:70:9b:1b:35:71:ad:b4:3f: fa:ab:88:7b:2c:bd:ad:61:dc:fd:36:60:b0:f3:ee: 53:3b:3f:5d:17:a2:ca:3a:f0:1c:86:50:3e:aa:79: fd:b8:bf:87:60:3e:da:48:09:9f:c5:40:09:51:0c: e8:8a:92:84:82:8a:f6:cd:09:58:7e:e0:4e:e8:8c: 63:c0:da:8c:19:60:9d:be:74:1e:9a:c1:36:64:71: 31:1e:ab:c5:9d:cf:44:a4:fb:9f:ed:98:4e:73:71: 0c:73:8f:17:1e:37:dc:49:2a:4c:13:af:83:ce:bc: 22:9a:85:e0:b6:9e:48:57:d0:4c:a1:30:67:bb:c7: c1:aa:e7:61:c8:7a:bb:da:91:66:95:37:64:05:92: fe:62:35:53:d1:44:fc:e5:8d:27:cc:82:e0:8a:a5: 60:c2:e8:29:71:7d:44:67:fe:10:0e:1b:e2:be:2e: 70:26:f7:99:94:96:60:88:c5:f9:0a:40:cf:ab:b5: 1b:29:89:d9:77:e2:08:a8:9f:45:46:d8:be:f7:74: af:36:7f:53:0b:75:10:c0:f4:0d:19:ba:69:0e:42: 40:b3:6a:32:fa:9d:1a:21:de:14:b4:79:19:53:8a: 71:6d:38:b1:15:7f:be:7c:0d:ab:28:4e:74:88:60: a1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:06:A6:01:09:A7:66:9F:A6:91:97:5C:BD:C9:D3:F9:26:CD:B4:23 X509v3 Authority Key Identifier: keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:68:92:79:8b:92:b2:4c:3c:d7:46:a3:01:70:a6:7b:f9:fb: 8c:e3:d6:d8:ca:cf:29:9f:cf:4c:2e:6d:63:7c:6b:b1:13:1b: e6:ae:95:dc:30:fb:eb:a2:8b:87:0b:00:c1:09:19:08:01:1b: 1e:9a:28:bc:61:05:28:33:75:e8:54:55:0b:44:f7:c1:9e:a1: b9:de:02:b7:dd:ee:39:51:ac:a1:a6:6e:fa:2d:dc:ff:f4:0a: d3:33:fc:93:9b:da:d7:3c:80:e5:15:9f:ec:bf:bc:d7:bc:fe: dd:59:69:9f:0f:22:a0:85:ff:ff:3e:35:0d:03:60:d3:62:76: 2c:50:5c:81:9d:38:d9:e0:7d:dc:20:77:cc:35:13:d4:3b:73: 50:42:53:4a:a9:75:aa:14:bb:2a:60:c3:9a:45:94:5c:6d:35: e6:e2:b4:9e:ef:7b:c1:cd:15:81:35:17:ad:06:c1:79:b2:b8: 2f:3a:a4:57:17:90:d5:fb:b2:73:cc:63:09:7a:4d:b4:e1:fe: e6:85:6d:79:6b:be:3e:59:f8:f8:df:d1:c8:e2:01:d6:35:bb: 29:2b:3e:fe:6b:fd:2c:7b:50:d7:e6:75:7c:41:5b:4c:de:8b: 0b:29:a2:41:5f:a0:4a:9a:39:89:2b:a1:7a:90:0e:59:3a:33: ce:3d:48:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZS7KXVMMm8I5hvz1KLIJdr5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YjdkNjY5OTgzNWJmZTlhODA4MWRmYzExNGRmMWJmNmQy MTVkYTcwHhcNMjUwMTMxMDcwMDQzWhcNMjUwMjAxMDcwMDQzWjAzMTEwLwYDVQQD EyhmZDA2YTYwMTA5YTc2NjlmYTY5MTk3NWNiZGM5ZDNmOTI2Y2RiNDIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/TFe2q6cJsbNXGttD/6q4h7LL2t Ydz9NmCw8+5TOz9dF6LKOvAchlA+qnn9uL+HYD7aSAmfxUAJUQzoipKEgor2zQlY fuBO6IxjwNqMGWCdvnQemsE2ZHExHqvFnc9EpPuf7ZhOc3EMc48XHjfcSSpME6+D zrwimoXgtp5IV9BMoTBnu8fBqudhyHq72pFmlTdkBZL+YjVT0UT85Y0nzILgiqVg wugpcX1EZ/4QDhvivi5wJveZlJZgiMX5CkDPq7UbKYnZd+IIqJ9FRti+93SvNn9T C3UQwPQNGbppDkJAs2oy+p0aId4UtHkZU4pxbTixFX++fA2rKE50iGCh7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP0GpgEJp2afppGXXL3J0/kmzbQjMB8GA1UdIwQY MBaAFGW31mmYNb/pqAgd/BFN8b9tIV2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDct OWU0MTNlYmY0MmYzLzEvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDctOWU0MTNlYmY0MmYz LzEvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAemiSeYuS skw810ajAXCme/n7jOPW2MrPKZ/PTC5tY3xrsRMb5q6V3DD766KLhwsAwQkZCAEb HpoovGEFKDN16FRVC0T3wZ6hud4Ct93uOVGsoaZu+i3c//QK0zP8k5va1zyA5RWf 7L+817z+3Vlpnw8ioIX//z41DQNg02J2LFBcgZ042eB93CB3zDUT1DtzUEJTSql1 qhS7KmDDmkWUXG015uK0nu97wc0VgTUXrQbBebK4LzqkVxeQ1fuyc8xjCXpNtOH+ 5oVteWu+Pln4+N/RyOIB1jW7KSs+/mv9LHtQ1+Z1fEFbTN6LCymiQV+gSpo5iSuh epAOWTozzj1IQw== -----END CERTIFICATE-----Generated at Fri Jan 31 15:39:26 2025 by rpki-client on console-fra.rpki-client.org