$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft File: 0he0cshBwdaFUKJPGTbSnMbCj2o.mft (raw, json) Hash identifier: oA35LoJymp+FxKivDzYfWpn3unIeV4P06m5/PQcsMm4= Subject key identifier: 9C:72:85:47:9D:4D:4B:F8:92:18:0B:F2:B8:82:E3:6F:FC:55:E4:2A Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Certificate serial: 018F45D6FD3D1183490C0AFF2D2CB6AE2350 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft Manifest number: 118A Signing time: Sat 04 May 2024 23:01:08 +0000 Manifest this update: Sat 04 May 2024 23:01:08 +0000 Manifest next update: Sun 05 May 2024 23:01:08 +0000 Files and hashes: 1: 0he0cshBwdaFUKJPGTbSnMbCj2o.crl (hash: ONgadMSxmy0mo+0R+c74a4dOG+/uLrv5UNnxPKYmxUw=) 2: 1-ru45WX50nqE1nkkiAh6wbMYSKE.roa (hash: 6VMyn58eJX/7qjDu0gid/FtESObauEZYtrO05J2qzTY=) 3: 409r4FTmvCNaaZy8TGynMtRlPvE.roa (hash: SqPUHo+iI/MiHCjEYNNax3VWc88UhmhyadijI80tOPQ=) 4: 6tVAZsKU-ZcZyojwDAf-C0Uh_ic.roa (hash: DiOW8C4iMymlPiD/gs3PtbZMbrQ/9JvXlZWhh69vvwM=) 5: 7Xbjk3gHmNSh4jMhe1E9Qftj2Rs.roa (hash: 6U+SMw5hvdHlN3FV3LdaJis1ZpkAIJeKzDcJ0HQBo6E=) 6: 80rCcXN6U3l6c3pqPcp-TsbQHx4.roa (hash: dLshUJ/c9gDz9OkUGfsARS5j/snimHxtTpVF2/QzS+4=) 7: 9FbYUtvhSiGnwkgWnPEe8LBbWTE.roa (hash: VH+23ZEyZD/zIeAjQCb1brr5cQuLUhCHdf4WE3EDIV0=) 8: 9NwP_dr0hugt83MSZ3uolV7CFyk.roa (hash: xgVNfXThnOGNymsgEuG6ysiwomnLdpjW8LFsdx+jygg=) 9: BGv1PWma16f4ctAQJCrVoQubGBo.roa (hash: pfWL3xKc+QttrMTYA6gs1NSPLhjXFXzGZMdIvCtI0fI=) 10: GRoTqbzlgb7LL4qGT9vOrU_aI7M.roa (hash: bQIg/nd1fvR/UyqcjO6aYkXwwfFBucsHdfsZFyoF3Os=) 11: Ikpj4jEaS2DoLgaAtEHrLHIjbjc.roa (hash: XySfojAZAgmgAuLkk/BdqsdZo0ICghtyJKx6Krx90k0=) 12: KTrwANLcxnWEYW-ek78rR33hKq0.roa (hash: xejdCVJtlTmimSbniNPlRdOgxzhnub1fRr8Dm4yqRvo=) 13: LryRYP8atopakjUQaEg0A6GB5Ms.roa (hash: kJP8bsJAiRVpoMcmpBnW6ixFOKslhQYtGMAiXHhbFrA=) 14: Mnd7bRBFbm95zrp-3u8GFynm7SM.roa (hash: 6rGg4MKfJedOrnocpFtDXqMuYVQBSiNHaCbLj6j4K6g=) 15: OfF7PvwCC27fW-6kfStrwwRrO7E.roa (hash: S4DRXm/lpOdZ+Tiabo7f1Eyfj8mMWn4Ersz+p+4G3hg=) 16: P4weekf1aKUcnkp8fHX-k_Gt_sI.roa (hash: fIq9ZB4SDhzeK0PefN08AJbeELON7JjrHLasilYncFM=) 17: PD79CufWsAn3sQd4KY0rWG8tuw0.roa (hash: ydtWXsgHsS3B+Dkrf9mRdY4++Zk+7SXieOvRV/PlsfI=) 18: QFDwHj-j-y33uDhFUsrE-1OKCE0.roa (hash: zupjnMRcjVnfmgFPyHKsQHldn/aPiQG7UKeQJHmAcy4=) 19: QgXQ0jofwuGVXnjhXJU7D3pw4a8.roa (hash: +QIoPxXL555k2fAxahFvxNlcyJubTz0+MIXCA/qjmZw=) 20: Sef28NKppSJav9L25T-eCc8LWHg.roa (hash: eVRNJvOmTnXMBrADlfqwv9vwpSUzjLsPa4lc8cWhfu0=) 21: VImUHTDDRHKWm4JlJloTojQOE9k.roa (hash: e/b/XPAmPyj+bqr/kvQosXTMROaPtpsPB/pPFqntsgQ=) 22: X-iCnqmNG6j885gxiyPbYDqPEtc.roa (hash: cB3ZnO+ne1w3OWuzgaqgeTrJOUkZQMqe2HjvqHud/S0=) 23: Z1ZQR08H4ewbrfjeHEbWgsc3lcE.roa (hash: KIzAnt9ls/xXzz8K38qYuJBdznqQEV++2uLw5j5JppQ=) 24: _BntLA1ByxKmEH1meyX9Ac_ENgo.roa (hash: TUPv5gmhwM2daPbnbN57P3T8IlhR7ks/v0VAHtkzI+0=) 25: aRUigTBCcOciLBvaclbhqlbdBd0.roa (hash: aNHnkD8pW4ioTdee/8mg7stpCc/b3/NwJs7b1+l6LBw=) 26: aYF30ZFrvtaKBZWNizoCpyO21v8.roa (hash: 7A8iDphnqdnGZ4tAakv6xwpniHRTTqZsTmwWqCPgjqc=) 27: efCOFmsfSLRoNKt0dEfRzs6eu6o.roa (hash: 1mPlWhqIukcjMep3y+IWnUquE2flzs5hd9dWYCBq5Gw=) 28: g0iVD3Ww-LEBDwBV90RqilfGtxI.roa (hash: yCSlQvrd3NZnYBQSzcMClUGczv5HojzT7L0Zq3fA7ho=) 29: iT5K7jrvKPIb3MIbXgkOBNs6J3g.roa (hash: JD5cuSLx2TQWAN/32n4QOen1lg/FPsM0kaCR7e8lgKc=) 30: qm6M43Bf3k_6oSMSeKVcRjDddHY.roa (hash: kyBJJpiiEML0MPFZQKFxW0Zd2rH4A3TKitJIZijmKyY=) 31: rLJBW-lVLAhd5TXpRwsmdfXF2_E.roa (hash: wnWD+7jtLO15EQ/RITt2PLn50YkBXJMnrr6YS0mhGXM=) 32: vBmn7Q6zDIT24NBHlo9tmyOCsvQ.roa (hash: wRrNquEmp7KhGIwCFzUX3NF5vcXtMANimJDhqf1rP48=) 33: yRzwejVSauh5J3SqcIAz9T7xhWA.roa (hash: Wrqqoq5cwG+rMNTMWPlnF9/upXXQ0FhuIDv968WoD9s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 05 May 2024 20:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:45:d6:fd:3d:11:83:49:0c:0a:ff:2d:2c:b6:ae:23:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Validity Not Before: May 4 23:01:08 2024 GMT Not After : May 5 23:01:08 2024 GMT Subject: CN=9c7285479d4d4bf892180bf2b882e36ffc55e42a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:24:2f:53:e3:dc:f4:b5:6f:93:15:bd:f2:91: 76:62:4e:cc:fc:e2:4d:1d:c6:89:57:0a:7d:db:1f: 39:61:76:69:7e:6c:3e:71:b9:0d:35:57:89:2d:39: 8e:6f:65:7f:c8:60:59:91:9b:e7:24:16:f5:8c:c3: 31:e6:bd:86:26:00:33:95:6f:d5:b3:91:7b:9c:c1: b4:be:84:12:f8:f6:e7:ee:88:f2:42:d1:6a:77:cb: ed:16:e8:bb:9a:93:67:c2:74:0f:f2:27:75:d4:87: 3f:5a:af:58:b8:68:7e:48:e8:0c:96:8e:9c:f3:a8: 34:7d:f7:8d:9a:50:7a:bc:cd:f2:bb:74:f0:dc:e0: 27:46:50:a8:3d:4e:c0:03:3a:46:97:0e:f0:20:23: 89:0e:05:e3:be:ed:d2:5f:84:87:12:ae:cd:43:89: cb:ac:5f:c6:a1:d5:21:cc:2a:96:cd:72:21:fc:01: 82:fc:c1:f9:61:bb:1b:2a:53:da:fd:b4:dd:f5:f3: 05:86:58:04:69:c3:8e:eb:9e:7e:dc:e8:eb:87:c7: 9c:0f:05:77:c0:9f:74:7d:d1:26:a7:e2:c3:c2:93: 2e:c3:8a:bc:8d:6e:a6:8a:d7:3a:04:82:fb:fc:08: 94:ff:2a:ce:e1:a4:08:68:27:2e:fd:0b:ef:00:da: d6:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:72:85:47:9D:4D:4B:F8:92:18:0B:F2:B8:82:E3:6F:FC:55:E4:2A X509v3 Authority Key Identifier: keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:6e:27:47:8e:18:b6:54:f4:6e:cb:68:53:b8:b5:0f:4a:39: 46:ac:5a:7d:6f:d8:63:c9:c6:b8:d4:11:d9:b6:9b:f1:00:04: 25:74:7e:95:c1:eb:94:01:40:2d:04:f4:28:d5:ea:16:ed:7b: 0c:c2:43:38:3c:8b:3c:02:d7:2d:29:40:55:dc:1f:dd:84:6a: 2b:85:4f:5a:e6:5d:9d:5e:45:be:56:89:48:e5:78:88:0f:00: c5:9d:d4:89:e3:01:6b:d6:fa:65:67:73:dd:7d:72:c2:88:09: 54:91:22:c6:d6:0e:e9:b6:69:08:e8:28:64:99:f8:09:12:ab: f8:2a:59:fb:2d:4c:d6:78:66:d8:55:0f:aa:84:08:2f:a9:21: a0:fc:58:3b:87:11:2a:5d:1e:73:6a:32:8c:1f:45:5b:89:aa: bd:b8:69:b0:25:ca:ca:48:51:f2:5e:11:d9:a1:58:5e:f4:82: 30:2d:4f:07:dc:93:cd:9d:5a:d1:06:2b:03:e4:29:a4:e3:60: ed:9b:1c:3f:8c:05:70:93:82:9c:58:e2:d4:36:98:02:b0:b4: 31:b8:d9:56:2a:88:29:65:02:52:9f:b7:a0:42:33:8c:0a:a0: df:e0:37:99:80:67:ab:70:3e:da:38:d9:92:16:53:65:90:6b: 07:79:d8:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY9F1v09EYNJDAr/LSy2riNQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj MjhmNmEwHhcNMjQwNTA0MjMwMTA4WhcNMjQwNTA1MjMwMTA4WjAzMTEwLwYDVQQD Eyg5YzcyODU0NzlkNGQ0YmY4OTIxODBiZjJiODgyZTM2ZmZjNTVlNDJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyQvU+Pc9LVvkxW98pF2Yk7M/OJN HcaJVwp92x85YXZpfmw+cbkNNVeJLTmOb2V/yGBZkZvnJBb1jMMx5r2GJgAzlW/V s5F7nMG0voQS+Pbn7ojyQtFqd8vtFui7mpNnwnQP8id11Ic/Wq9YuGh+SOgMlo6c 86g0ffeNmlB6vM3yu3Tw3OAnRlCoPU7AAzpGlw7wICOJDgXjvu3SX4SHEq7NQ4nL rF/GodUhzCqWzXIh/AGC/MH5YbsbKlPa/bTd9fMFhlgEacOO655+3Ojrh8ecDwV3 wJ90fdEmp+LDwpMuw4q8jW6mitc6BIL7/AiU/yrO4aQIaCcu/QvvANrWsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJxyhUedTUv4khgL8riC42/8VeQqMB8GA1UdIwQY MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt YjM4ZTI2NzdiM2RjLzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq24nR44Y tlT0bstoU7i1D0o5RqxafW/YY8nGuNQR2bab8QAEJXR+lcHrlAFALQT0KNXqFu17 DMJDODyLPALXLSlAVdwf3YRqK4VPWuZdnV5FvlaJSOV4iA8AxZ3UieMBa9b6ZWdz 3X1ywogJVJEixtYO6bZpCOgoZJn4CRKr+CpZ+y1M1nhm2FUPqoQIL6khoPxYO4cR Kl0ec2oyjB9FW4mqvbhpsCXKykhR8l4R2aFYXvSCMC1PB9yTzZ1a0QYrA+QppONg 7ZscP4wFcJOCnFji1DaYArC0MbjZViqIKWUCUp+3oEIzjAqg3+A3mYBnq3A+2jjZ khZTZZBrB3nYWA== -----END CERTIFICATE-----Generated at Sun May 5 00:16:29 2024 by rpki-client on console-ams.rpki-client.org