$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft File: hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft (raw, json) Hash identifier: wKxAQjyj29w6DQmdvZeXNu5H94G9Y2du3r6OY1Uk05w= Subject key identifier: 3D:6D:05:A5:66:9A:51:12:59:2C:7A:87:05:35:45:CF:85:8D:F0:5E Authority key identifier: 85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC Certificate issuer: /CN=8533ef46116fd9d21bfb533e44bde517890c24dc Certificate serial: 018F6CE467194962F7F94608804310D151C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft Manifest number: 0F29 Signing time: Sun 12 May 2024 13:00:58 +0000 Manifest this update: Sun 12 May 2024 13:00:58 +0000 Manifest next update: Mon 13 May 2024 13:00:58 +0000 Files and hashes: 1: 4Mt58Xq4qYulMxngf2Cbba1xle0.roa (hash: clyMZnG6HcPZlEr496HgttwR9wR8IxzDiMa4yR/OEyY=) 2: DJBN3BLlvNM7Bt2epMDGMpyF4vI.roa (hash: kUudPzQ0LE1yyGEVIuzF5qd67JnaLYx+kdElqCvtlWU=) 3: Epf6wARWQ9ZLvYJ1ZELE3KraEwI.roa (hash: b9HpcfCWpDPkPycAk/wdOcXKXR6Tzczg+Nafv7LlJpY=) 4: HLmW5v4h3vgk-OjCvbw20Sq1Jyk.roa (hash: /ZuuEJWeOgHM1FRsa5kRsH1kNlEakNsle77vgsfcKvo=) 5: KApj5gc18BmuCrJNK0dYYI1j3zM.roa (hash: iHx/Rs+l0xh0ZcxEOkrqkHr9Rz7eNB9RV5RGJEfya0g=) 6: cne6Tiuegg21jELm7CXKBc_NeIs.roa (hash: whB4R7sT7MpYlSpIKL1GureVbW0TS4IrCy50UABdCJE=) 7: eT4IkVwy3yFDym2XS0_v5TPjZsA.roa (hash: Jkm3QZaIE52Mhg4+O1Hp3CYaONVFzqPonNUVCAJ/rK0=) 8: fUGWYm8pleQaDVpR7AYySJX4B-4.roa (hash: iBpWW8xQFwTc1AXjXKxFIEWI5L4mDOiArYB1zPaTahQ=) 9: hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl (hash: JxIiC2ioKSij6dTErmNicmYVsqOLka/bhRZN3uCA3MI=) 10: q-1CGXCjNgF_zVPCrcV95wdn27U.roa (hash: 7/JtQdIBudRL+Q4ggE1jjYxnGHIiqz48gC6xlapyn7U=) 11: qENt31C6sYEBe37Kcj9ZTDXVT2g.roa (hash: oBob7biI5f9KIj4TqcLhqhRGUotrMnriO87CVDu3pjY=) 12: t40IvNPN6mJJp6QnqnktRm4wjQg.roa (hash: smWA2utvT5IfmsgjF3NcjGw2apxwiK57oxZ/baQFXIU=) 13: vBYhdNRSgNfg5JSifzUOLHQQTOc.roa (hash: nYgbiJTCs1MOp/zFKOyWVi5A+20SmEq3aSSbeG4DvAk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 13 May 2024 11:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:6c:e4:67:19:49:62:f7:f9:46:08:80:43:10:d1:51:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8533ef46116fd9d21bfb533e44bde517890c24dc Validity Not Before: May 12 13:00:58 2024 GMT Not After : May 13 13:00:58 2024 GMT Subject: CN=3d6d05a5669a5112592c7a87053545cf858df05e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2a:c5:67:cf:c4:26:e0:6b:8f:99:c1:ff:4f: bc:e1:dd:31:37:2c:69:c6:d2:be:54:df:df:91:26: 2b:d8:f8:cd:3e:35:07:77:93:04:95:ce:3a:4c:cb: 42:7f:eb:86:20:e7:a0:f3:1b:1c:67:1b:81:7f:83: 02:9d:40:b8:a0:b0:00:b1:ef:81:fc:bc:e4:71:67: 90:d8:01:1d:7a:ea:32:31:87:a0:ff:65:a2:01:99: 03:c7:4d:bd:db:22:7d:8e:79:c2:00:8b:1a:2b:b8: 82:48:d7:fc:b4:73:f4:8b:62:8d:01:a6:d1:ff:51: e0:be:db:57:2f:94:61:eb:00:eb:d6:b5:79:a0:0e: ab:40:86:ba:13:d3:c8:8c:87:1e:b2:cb:b4:7f:48: 4f:42:49:1c:05:fa:74:59:ce:2a:39:ea:11:7d:56: 44:7f:51:77:5b:2a:69:84:da:7c:04:4d:0f:c0:09: 17:3a:c0:97:7e:32:a2:29:e6:bd:88:85:bc:41:65: e0:09:b3:57:11:64:28:42:09:88:e6:02:b8:a3:75: 91:96:d0:88:af:fe:3a:58:60:e1:9e:6e:2b:92:22: 4f:ae:67:f4:89:fc:2c:d4:e1:97:de:e4:d6:50:74: c1:21:aa:1b:73:e0:f2:16:c7:16:b4:2a:9f:69:22: 05:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:6D:05:A5:66:9A:51:12:59:2C:7A:87:05:35:45:CF:85:8D:F0:5E X509v3 Authority Key Identifier: keyid:85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:7b:18:cc:e4:c9:9e:18:18:4e:87:01:81:d0:57:8d:0a:52: 99:58:5b:b0:cc:18:89:35:cd:43:7f:85:f0:84:aa:bf:7d:f2: 86:28:88:26:5c:3e:5f:63:6e:a7:b9:fe:dd:64:ad:ca:25:37: 9a:11:6e:92:af:82:82:c7:db:b0:cd:5f:fe:6d:d9:4f:1e:8f: 30:9e:65:ea:a7:e4:7e:68:20:ce:76:1d:3e:86:7f:13:5d:89: 1e:9c:28:a7:12:53:a1:47:7a:74:ed:31:13:5f:0f:5f:cf:c8: 70:af:23:65:00:a6:d7:75:4d:11:38:05:8d:ad:ad:32:66:aa: 4e:87:22:74:cc:3c:38:9c:5c:71:02:6c:c7:a6:2c:37:0f:56: 69:7b:48:dc:ff:ae:62:50:0c:8e:de:bb:c7:c9:b1:20:d8:a8: 19:b7:c6:64:3f:18:b0:60:af:d1:da:72:ef:0c:7f:cb:57:5b: 6e:62:fa:09:f4:71:80:e6:28:3c:eb:db:2b:e6:4a:57:39:9f: f0:26:df:1e:b1:a5:01:81:0c:1b:67:87:87:58:ed:e9:a4:16: 84:3e:e8:a9:9a:4b:59:c7:20:73:9c:06:69:aa:99:ae:a1:82: d0:b3:37:fa:53:90:ad:68:f5:7d:f2:9f:b6:51:83:ad:3e:1b: 47:d5:ee:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY9s5GcZSWL3+UYIgEMQ0VHJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1MzNlZjQ2MTE2ZmQ5ZDIxYmZiNTMzZTQ0YmRlNTE3ODkw YzI0ZGMwHhcNMjQwNTEyMTMwMDU4WhcNMjQwNTEzMTMwMDU4WjAzMTEwLwYDVQQD EygzZDZkMDVhNTY2OWE1MTEyNTkyYzdhODcwNTM1NDVjZjg1OGRmMDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySrFZ8/EJuBrj5nB/0+84d0xNyxp xtK+VN/fkSYr2PjNPjUHd5MElc46TMtCf+uGIOeg8xscZxuBf4MCnUC4oLAAse+B /LzkcWeQ2AEdeuoyMYeg/2WiAZkDx0292yJ9jnnCAIsaK7iCSNf8tHP0i2KNAabR /1HgvttXL5Rh6wDr1rV5oA6rQIa6E9PIjIcessu0f0hPQkkcBfp0Wc4qOeoRfVZE f1F3WypphNp8BE0PwAkXOsCXfjKiKea9iIW8QWXgCbNXEWQoQgmI5gK4o3WRltCI r/46WGDhnm4rkiJPrmf0ifws1OGX3uTWUHTBIaobc+DyFscWtCqfaSIFbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD1tBaVmmlESWSx6hwU1Rc+FjfBeMB8GA1UdIwQY MBaAFIUz70YRb9nSG/tTPkS95ReJDCTcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9lMDQ3MmEtM2FkZi00M2NkLWJmMzAt NzM5MjNkYWVmMTE0LzEvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9lMDQ3MmEtM2FkZi00M2NkLWJmMzAtNzM5MjNkYWVmMTE0 LzEvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEHsYzOTJ nhgYTocBgdBXjQpSmVhbsMwYiTXNQ3+F8ISqv33yhiiIJlw+X2Nup7n+3WStyiU3 mhFukq+CgsfbsM1f/m3ZTx6PMJ5l6qfkfmggznYdPoZ/E12JHpwopxJToUd6dO0x E18PX8/IcK8jZQCm13VNETgFja2tMmaqTocidMw8OJxccQJsx6YsNw9WaXtI3P+u YlAMjt67x8mxINioGbfGZD8YsGCv0dpy7wx/y1dbbmL6CfRxgOYoPOvbK+ZKVzmf 8CbfHrGlAYEMG2eHh1jt6aQWhD7oqZpLWccgc5wGaaqZrqGC0LM3+lOQrWj1ffKf tlGDrT4bR9XuPQ== -----END CERTIFICATE-----Generated at Sun May 12 15:07:00 2024 by rpki-client on console-fra.rpki-client.org