$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft File: snJh1xU0i_1zzp27ckiGVpk7ovE.mft (raw, json) Hash identifier: 0iDaQcZ/R2EZDYyJIS1nze4439duTPTo14NP7BeSa6Y= Subject key identifier: 5A:17:F9:8F:E7:90:AA:5D:BC:26:A5:C8:4B:34:0F:1E:9B:ED:62:19 Authority key identifier: B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1 Certificate issuer: /CN=b27261d715348bfd73ce9dbb72488656993ba2f1 Certificate serial: 0194BB96E3CD7424A29BE2FFDAE6101676C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft Manifest number: 0F54 Signing time: Fri 31 Jan 2025 09:00:15 +0000 Manifest this update: Fri 31 Jan 2025 09:00:15 +0000 Manifest next update: Sat 01 Feb 2025 09:00:15 +0000 Files and hashes: 1: 54iLRsUEYQSLlV8kHVTer9P4keA.roa (hash: Oib7LJlXh4bUMGiTPxF+59IQOdwF+fvCUOmQ1Sv5YqM=) 2: 83ZfI9Fyoy0-0Ed7XViCJUVWAUk.roa (hash: x5Erfp0LUGN9evcbs1ECyXblatyvnAhrnm8OrbCDB8k=) 3: GrZCo-Pl-pKds5zmwg7ubalVFTA.roa (hash: XSM4rBpjvcsUyAb/r/u55Oo3ZCJqxZNIGwjYsJQ68bw=) 4: M80ufUXhkNHfa9K4zU6X6k_ofZQ.roa (hash: 4dQl+qST57nUFs67WwcEmlUV01oY2iEO29630JMqbwE=) 5: OcXOGlX2Gc26JEdm5iWVWnBYg58.roa (hash: /vGDKbgE4iZUS4BzIvVP16inipE2apdXrS0M45rcngw=) 6: Oub2lhgmfvMfqkmPb5LyvG3fgGg.roa (hash: +9dI9QuGP90crJ0Jy+OL+st47BSK3Y6Vx4rFFytlOnk=) 7: QpucqboD9L8Uv9-I8wC2eqyytjM.roa (hash: QJ36JcAEae+tPmwoLHxsrKQ/qHkNlapv2iTQudy3nXg=) 8: W95VCieFrYA-UWvQbNSL7N3Y2Cg.roa (hash: YvWvtJ9d+roXNfi60DzUNUYY7G9jfkQp1ZTCPAwbx+g=) 9: Yw4yz2qvg4rQujrK-dIx_KPixQM.roa (hash: rPOdhOXTd0LJkvjvgXHjpfcSX15w4WKfBaBl0s4PykM=) 10: mMdAkncXd62KSLEMH5-GZ2xifmI.roa (hash: BsiKxHj0OcEVg20ZYqrvGiqQgj+ynivI6054d313+QE=) 11: snJh1xU0i_1zzp27ckiGVpk7ovE.crl (hash: jDFB6Te4+31JV101fKvBW7dsRPpMQULP3uLSB4S7ozI=) 12: tXmj_lk4J_cxjq5mg9Y-DnR4g68.roa (hash: FkJnyg1Nbp4kUP6A2c71ys6CgKIoTjWwYiDec6OD1BY=) 13: x93oIxwN7f9CnY5MK-gEMFA9RCs.roa (hash: iUrM+UkqfotbOBAOD6sNrVDAFzEQJnu2I0F39zCKGjM=) 14: x_9TAtatN7OaJxTBmrfHpUlXZDA.roa (hash: 2gG4s/omQ5P0Lbi33p1Th/x4L/bao6YkNKtuc6UmamA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 01 Feb 2025 09:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:bb:96:e3:cd:74:24:a2:9b:e2:ff:da:e6:10:16:76:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b27261d715348bfd73ce9dbb72488656993ba2f1 Validity Not Before: Jan 31 09:00:15 2025 GMT Not After : Feb 1 09:00:15 2025 GMT Subject: CN=5a17f98fe790aa5dbc26a5c84b340f1e9bed6219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b8:ef:a0:09:df:87:9b:86:16:02:ae:c4:89: 8b:21:49:62:0f:ed:1f:34:a2:1a:e4:5d:45:61:4e: d0:10:9c:7c:ac:64:ef:22:14:51:01:3c:c0:28:3b: 12:5e:89:62:78:7b:80:37:ab:f8:f1:14:d8:07:98: a6:16:0a:a0:43:e7:40:b1:e0:70:b9:cd:ce:5a:74: 32:26:0c:16:25:3a:71:28:c1:88:9d:ae:6e:77:f4: 36:80:c4:a4:9a:15:2d:2b:d6:ec:ac:2f:33:b2:84: 19:76:38:8f:c0:56:40:61:43:13:70:f6:6f:65:16: 4d:98:35:72:f1:d1:ce:7f:74:b7:06:a6:4a:31:3e: 50:3b:41:87:5e:e5:b9:9c:5a:c6:6e:0d:be:98:d4: 00:65:35:1e:41:52:5e:5a:69:55:5f:2c:e6:a3:07: 14:de:3b:e6:63:64:53:6d:f6:07:16:c1:bf:06:7e: d7:2b:0b:c2:b7:06:97:08:f4:78:82:ad:67:14:91: 3e:64:09:a0:04:72:f2:71:9a:3b:23:62:4a:d9:9c: 2f:c9:5c:92:e7:9d:ff:ff:da:9d:27:da:2e:70:7e: 9c:9c:e0:d4:eb:bf:53:8a:d1:3f:f0:89:a4:1f:cf: 07:d7:f4:6b:db:e0:3a:95:04:67:5e:3b:b7:19:64: 60:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:17:F9:8F:E7:90:AA:5D:BC:26:A5:C8:4B:34:0F:1E:9B:ED:62:19 X509v3 Authority Key Identifier: keyid:B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:06:6d:2e:35:1a:ee:72:4d:35:11:08:86:82:64:ee:6a:e9: ec:08:6b:8e:55:0e:50:4c:c0:f0:6f:47:f6:c5:16:89:af:f3: 72:7e:4a:c7:e7:7c:1f:b4:b2:cb:43:4d:f1:15:55:02:3d:0b: f0:d5:0f:98:36:25:cf:87:37:3e:05:e2:8b:76:cf:f8:2e:5c: fe:7c:4f:1e:6f:5c:ae:ea:cb:c9:44:0d:c2:77:92:7d:e6:75: 56:5a:7b:73:5d:d9:9d:23:1c:60:b0:15:6b:3d:4b:4d:8b:ab: 03:57:49:4c:92:85:1e:f7:79:ab:0d:43:98:a6:19:b4:f0:4c: 7b:47:17:95:e1:1a:1d:03:c5:b5:35:e9:3e:0a:88:5a:b1:22: 3e:2b:73:8c:3b:ce:4d:30:7f:b2:e6:57:ef:57:51:af:8d:93: 2c:73:5a:6c:56:ab:af:aa:7f:30:58:28:ce:22:ea:b5:b2:62: fb:ed:df:ee:0a:8e:15:66:0c:83:19:da:c6:70:ce:80:2f:e7: 0a:74:b1:47:b5:aa:19:49:ba:12:d2:8e:6f:d0:bb:0d:e7:93: 89:96:e5:84:c0:b0:05:07:c2:49:7f:e2:45:7a:bf:29:e3:76: 28:6b:59:ef:e1:70:fb:7f:8c:4c:3b:b7:1e:ba:50:07:25:f0: 88:86:87:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZS7luPNdCSim+L/2uYQFnbDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyNzI2MWQ3MTUzNDhiZmQ3M2NlOWRiYjcyNDg4NjU2OTkz YmEyZjEwHhcNMjUwMTMxMDkwMDE1WhcNMjUwMjAxMDkwMDE1WjAzMTEwLwYDVQQD Eyg1YTE3Zjk4ZmU3OTBhYTVkYmMyNmE1Yzg0YjM0MGYxZTliZWQ2MjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7jvoAnfh5uGFgKuxImLIUliD+0f NKIa5F1FYU7QEJx8rGTvIhRRATzAKDsSXolieHuAN6v48RTYB5imFgqgQ+dAseBw uc3OWnQyJgwWJTpxKMGIna5ud/Q2gMSkmhUtK9bsrC8zsoQZdjiPwFZAYUMTcPZv ZRZNmDVy8dHOf3S3BqZKMT5QO0GHXuW5nFrGbg2+mNQAZTUeQVJeWmlVXyzmowcU 3jvmY2RTbfYHFsG/Bn7XKwvCtwaXCPR4gq1nFJE+ZAmgBHLycZo7I2JK2ZwvyVyS 553//9qdJ9oucH6cnODU679TitE/8ImkH88H1/Rr2+A6lQRnXju3GWRgUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFoX+Y/nkKpdvCalyEs0Dx6b7WIZMB8GA1UdIwQY MBaAFLJyYdcVNIv9c86du3JIhlaZO6LxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hYmE1MDItZDE5MS00ZmQ3LWE3Y2Yt NTA0ZjI3NjY3NjBmLzEvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9hYmE1MDItZDE5MS00ZmQ3LWE3Y2YtNTA0ZjI3NjY3NjBm LzEvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHwZtLjUa 7nJNNREIhoJk7mrp7AhrjlUOUEzA8G9H9sUWia/zcn5Kx+d8H7Syy0NN8RVVAj0L 8NUPmDYlz4c3PgXii3bP+C5c/nxPHm9crurLyUQNwneSfeZ1Vlp7c13ZnSMcYLAV az1LTYurA1dJTJKFHvd5qw1DmKYZtPBMe0cXleEaHQPFtTXpPgqIWrEiPitzjDvO TTB/suZX71dRr42TLHNabFarr6p/MFgoziLqtbJi++3f7gqOFWYMgxnaxnDOgC/n CnSxR7WqGUm6EtKOb9C7DeeTiZblhMCwBQfCSX/iRXq/KeN2KGtZ7+Fw+3+MTDu3 HrpQByXwiIaHgg== -----END CERTIFICATE-----Generated at Fri Jan 31 15:45:02 2025 by rpki-client on console-fra.rpki-client.org