$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft File: nLJc5VDk2b2gW9XUXItro3Qwu7o.mft (raw, json) Hash identifier: A664Ujf2UqTCgzLBkOc3bMV37qtdOe31I7p5kGQXcl0= Subject key identifier: 23:BF:94:B6:68:28:58:F5:E8:EE:B9:B1:CC:F7:5D:B4:A3:58:5A:BB Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA Certificate issuer: /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Certificate serial: 018F7165A0033B4EF18565DD6BE3127E3914 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft Manifest number: 0B34 Signing time: Mon 13 May 2024 10:00:36 +0000 Manifest this update: Mon 13 May 2024 10:00:36 +0000 Manifest next update: Tue 14 May 2024 10:00:36 +0000 Files and hashes: 1: 9wkeXjc_OkwzJNASBRs-P6qPMkQ.roa (hash: fmpvo542/M0fE7tnMFQKjET5nsM4x733l8Ua871QisI=) 2: CY1SOGqLnQage4AlLMPTzgQnO4k.roa (hash: 6xvIHW5mYPUy03jlj98uHtau4xCKFvHp4s2k+EbcKTs=) 3: CyV98N9EMWyxflKPXQFcgiSjPHY.roa (hash: Rihov2ja8UcIkzpFTuydvoEHWoaig8C8yBkMG/T6o0o=) 4: D3WzhW5e32dB73n1YltMIVN53XA.roa (hash: u53XDFNLJuSm8BYKMNAiXEFkzp9jSaLpIdYX3GZzy7g=) 5: RAVrWVAnw_qOVwAr74kc0s3Uwrc.roa (hash: qm7+Q8wcuXXmvW0nficrN6uQmd8Pj+Ua8GzPSq8HHIw=) 6: WJM4RDhXiCc1nntAouYLafv_YQk.roa (hash: Akke2MjvyfjKCYXC3eGQlXVkBi87hkU5BLy+Q7H/lZE=) 7: _VK5tMevNeVMTNtA9Jp3T4k9fDE.roa (hash: KViF5UWnXkTYU8A/QxCHXudv/utp3QfrAq4xM/0+2cs=) 8: fcaVSI1wF_tLH1V0FR6P-7LNXrg.roa (hash: Y/g2OWpAp9n9/o6kWMFL9m5UuVK3CKkRDiLfriiw7hc=) 9: hSpsCQgWfnrnKce5PgyNioLCJZ4.roa (hash: /XAgBxMuNxMw+M3WuW7BiIVnZtBgfUBjsoeAR0f0deE=) 10: nLJc5VDk2b2gW9XUXItro3Qwu7o.crl (hash: pcvyNhTj0+BPBF/gfpQ7cimlIUlW0gqc+GywQVAG/+A=) 11: xMvcm_KV6q0WJkvp0p4gD5RNtig.roa (hash: MOFzlknqO7qCpoU+Pp5PBhNUvTsjYxK2qCRh4fdjI0Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 14 May 2024 05:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:71:65:a0:03:3b:4e:f1:85:65:dd:6b:e3:12:7e:39:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Validity Not Before: May 13 10:00:36 2024 GMT Not After : May 14 10:00:36 2024 GMT Subject: CN=23bf94b6682858f5e8eeb9b1ccf75db4a3585abb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:b5:8c:6a:da:96:fd:c8:28:56:ea:c8:2a:40: ef:c8:3d:a1:74:41:f9:02:1c:54:9c:9f:cc:39:4c: 17:98:76:95:2c:e3:0e:8f:2d:d7:21:c6:4a:08:dd: 31:7f:f9:13:d3:33:77:36:75:d8:66:37:52:90:2b: a7:85:35:2c:27:0d:0f:0c:de:c1:1e:18:ba:4d:ed: ff:af:23:29:81:d2:31:96:00:40:aa:13:c0:58:86: 16:a5:ff:59:14:20:a1:32:0f:69:33:b9:26:ea:d0: 80:bd:19:88:f2:f1:8c:e0:27:67:aa:3f:da:34:97: 1d:46:64:c9:cb:dd:e9:eb:d7:63:d1:11:5c:f5:f9: c8:bb:aa:0b:25:51:1c:d6:6b:63:8e:c9:f9:80:95: 31:fd:47:2f:8c:35:38:c9:2c:da:22:ec:b2:6c:ed: a2:4c:e4:4f:90:74:6f:80:09:49:a6:d8:ff:08:10: 78:5c:1b:45:88:1b:a4:5f:5b:55:bb:e2:21:46:33: 60:30:01:e3:8b:b9:d9:31:d6:2c:6b:53:0f:a2:f9: d2:22:d8:b1:a4:11:aa:28:bd:ef:79:7b:a4:ce:9a: 97:b6:54:39:3b:79:7b:7e:25:61:33:53:31:03:fd: 2d:3e:25:00:26:0a:36:a4:a5:62:bf:09:76:1a:4a: ab:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:BF:94:B6:68:28:58:F5:E8:EE:B9:B1:CC:F7:5D:B4:A3:58:5A:BB X509v3 Authority Key Identifier: keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:d3:b2:be:37:f2:5a:3c:22:b0:e1:45:2d:1e:67:b3:04:e7: 0d:b9:e7:e0:40:73:d6:dd:cb:5c:2e:69:2b:4d:ab:3f:10:12: c1:1e:0c:74:ac:ac:0a:33:33:c1:7b:ef:a8:56:f1:8f:be:9b: 8d:4c:f0:81:ae:01:59:04:b7:6b:1d:50:8f:b3:8d:3f:7d:12: 19:5a:c6:8d:8e:0d:c1:e7:75:01:42:02:f9:da:b8:dd:41:7b: 26:39:4c:3f:08:90:82:17:ea:35:e8:c8:5f:64:1f:ac:8f:47: 58:7d:df:14:f8:ed:60:69:64:9a:ff:5c:98:4c:d7:f5:04:09: 72:0b:14:34:0a:3e:bb:6d:78:57:15:54:a9:f9:e8:39:55:7b: d5:4e:0a:d6:a1:84:c2:7b:58:64:8a:27:81:4f:9c:c3:ed:69: 12:bd:e1:c0:1d:3e:9a:9a:cb:7c:1f:e1:1b:b9:24:6c:ea:90: 99:b2:0a:8a:ea:e3:43:d5:ca:5a:44:3c:6d:20:b1:51:68:64: 3c:d9:10:a4:f3:bb:93:e0:74:96:26:f3:9d:05:1a:c4:a4:c5: fa:45:cc:d6:be:fb:7b:84:81:7a:e6:bc:9a:c1:92:b6:36:ec: 55:72:f6:6f:a3:36:35:ac:bf:7c:e8:18:71:61:60:6c:5b:18: bc:2f:79:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY9xZaADO07xhWXda+MSfjkUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYjI1Y2U1NTBlNGQ5YmRhMDViZDVkNDVjOGI2YmEzNzQz MGJiYmEwHhcNMjQwNTEzMTAwMDM2WhcNMjQwNTE0MTAwMDM2WjAzMTEwLwYDVQQD EygyM2JmOTRiNjY4Mjg1OGY1ZThlZWI5YjFjY2Y3NWRiNGEzNTg1YWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6LWMatqW/cgoVurIKkDvyD2hdEH5 AhxUnJ/MOUwXmHaVLOMOjy3XIcZKCN0xf/kT0zN3NnXYZjdSkCunhTUsJw0PDN7B Hhi6Te3/ryMpgdIxlgBAqhPAWIYWpf9ZFCChMg9pM7km6tCAvRmI8vGM4Cdnqj/a NJcdRmTJy93p69dj0RFc9fnIu6oLJVEc1mtjjsn5gJUx/UcvjDU4ySzaIuyybO2i TORPkHRvgAlJptj/CBB4XBtFiBukX1tVu+IhRjNgMAHji7nZMdYsa1MPovnSItix pBGqKL3veXukzpqXtlQ5O3l7fiVhM1MxA/0tPiUAJgo2pKVivwl2Gkqr8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCO/lLZoKFj16O65scz3XbSjWFq7MB8GA1UdIwQY MBaAFJyyXOVQ5Nm9oFvV1FyLa6N0MLu6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYt YmU0NWYwZDJhYmJiLzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYtYmU0NWYwZDJhYmJi LzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWNOyvjfy WjwisOFFLR5nswTnDbnn4EBz1t3LXC5pK02rPxASwR4MdKysCjMzwXvvqFbxj76b jUzwga4BWQS3ax1Qj7ONP30SGVrGjY4Nwed1AUIC+dq43UF7JjlMPwiQghfqNejI X2QfrI9HWH3fFPjtYGlkmv9cmEzX9QQJcgsUNAo+u214VxVUqfnoOVV71U4K1qGE wntYZIongU+cw+1pEr3hwB0+mprLfB/hG7kkbOqQmbIKiurjQ9XKWkQ8bSCxUWhk PNkQpPO7k+B0libznQUaxKTF+kXM1r77e4SBeua8msGStjbsVXL2b6M2Nay/fOgY cWFgbFsYvC95gA== -----END CERTIFICATE-----Generated at Mon May 13 12:25:22 2024 by rpki-client on console-ams.rpki-client.org