$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft File: s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft (raw, json) Hash identifier: 9ijIdmBSFRd6Zt3oATAjpX/fyiDY5/1VjuValxzV6Bc= Subject key identifier: FC:3D:88:C9:A6:85:5F:D5:45:7D:B9:1D:25:26:BE:E9:D3:47:A1:5B Authority key identifier: B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2 Certificate issuer: /CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2 Certificate serial: 019040E49915F302843F996B8E5F201798C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft Manifest number: 11E9 Signing time: Sat 22 Jun 2024 17:00:41 +0000 Manifest this update: Sat 22 Jun 2024 17:00:41 +0000 Manifest next update: Sun 23 Jun 2024 17:00:41 +0000 Files and hashes: 1: 1MxAxNJkLUVLRJIjhfKn_NtpnRc.roa (hash: nEbeoF/yoY3jvmxeIbw39Q0G57SQQ7egaIsnOj5XR8w=) 2: 3R-lm5lhuiPbeCwLqsFM9qeTCTM.roa (hash: E1LyXkRAmF3nDR8bBXxYJB7oiojghx6Yhx/2QRC8pXU=) 3: BoR2VIryTsHHcWj-FDFDFmt5Nzo.roa (hash: OQITac9AherGb72sUGcK8Cs2Z8KQFS7mmKbQfWEJd04=) 4: P6E1it89HIgLIF9ONw1xVf0429g.roa (hash: nXKlmpX9NKxytZ2cvGpKOkD9F1vseXV8FabZWpNkMRg=) 5: PbkJxqA5PmNFabqTw1fKGFVkjV0.roa (hash: mDjtZOTD8H5hXGsyS+GZVD0fycZ0nmfA1pzJGIv3NDE=) 6: PhsDfVgJ05TgrB6k6mu5W8_N2sE.roa (hash: u+zxxe+PxRzw33Mn85UddaUXLK2cPj4E/cvYptSUOBk=) 7: QdHm7On3zoGKrTv3CU4gY5CT5VU.roa (hash: InPHpksy4nUT4Nu+mpJO4rs7QCEoVmiu6cReok/9aNc=) 8: TR7Lfe9EIldCywvzm10EkRJwmBg.roa (hash: vx+d21f2ENm4TogU8IhlCECITu67YSg5fHdHLXGFAo4=) 9: UoA72pGEBpbhKyRmV5SX18ctcVs.roa (hash: m9zr0+RVKcPRIg+rWIHpkfFG95gevfP36Ptu3FNSTnM=) 10: V6cR19X84nxLG7BpHxSvQUosV98.roa (hash: 9EcE69J6jodQ2yyXbKBeUrLPhsNHz/c19W39iLokXJI=) 11: d7E4iyie1l75_Naeqjb8ufmcPc0.roa (hash: ubzg9pOBWpUGlN5MjZvWpnhkC0mO3ymuJ5OSt+ll3/o=) 12: jDMNkLbwU_r5bJFRwIsnJdTDAEg.roa (hash: vB6tP6FoX9/9v0Lwpiz67K6uHA0agYCMcD88mPQcMmA=) 13: mlPY7JS-letkF0iIiKCI6QtG_0Q.roa (hash: 3p/5VBIGN+vR53WtRYMk0Ni+YzJ6xx2dmKEitWK1Nfk=) 14: s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl (hash: lENahvD5Fp13Wl7cCFuw9Tjp6czKxX6Zx87Yd7sS39k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Jun 2024 17:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:90:40:e4:99:15:f3:02:84:3f:99:6b:8e:5f:20:17:98:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2 Validity Not Before: Jun 22 17:00:41 2024 GMT Not After : Jun 23 17:00:41 2024 GMT Subject: CN=fc3d88c9a6855fd5457db91d2526bee9d347a15b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:84:d9:ee:2e:e7:9d:fc:2c:cb:74:a0:ec:ca: 97:12:e2:06:49:06:6b:5f:8f:9b:e5:a7:de:22:91: 1d:5e:0d:4a:b3:6c:29:9f:2f:7a:9b:ae:1b:8b:69: 42:fc:54:0d:37:b0:42:d4:9e:19:04:35:e6:51:82: 2e:33:35:f6:50:11:8a:a0:d5:e9:68:33:d1:f3:06: d6:b2:7e:61:c4:98:3b:9d:f5:d3:13:ac:a7:0f:69: 78:61:5f:7e:cf:42:00:01:56:6a:1a:b8:1a:f3:1c: 68:1b:c0:34:9b:67:27:f1:d1:71:68:75:36:97:d7: 41:61:69:54:d2:0f:8e:74:c0:7c:b3:66:50:59:db: 03:6f:7e:51:93:31:a3:47:36:80:ad:0c:d7:0b:2b: a3:36:cf:73:85:36:10:eb:41:ad:2c:91:7f:9a:34: 74:84:91:6a:39:22:f8:01:fe:36:98:aa:26:90:51: a0:6b:45:41:0e:9e:a9:52:6c:9f:e9:46:08:01:5f: 0a:da:96:1c:ed:ab:34:84:05:3e:d4:6d:b3:3c:0f: 4d:9b:88:7e:f2:3a:da:c6:dc:64:97:75:3b:ca:55: 29:76:33:62:4c:83:b4:75:d2:42:80:3f:97:12:ae: ef:e0:06:0f:85:be:97:6c:88:0d:7a:91:98:36:ff: cd:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:3D:88:C9:A6:85:5F:D5:45:7D:B9:1D:25:26:BE:E9:D3:47:A1:5B X509v3 Authority Key Identifier: keyid:B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:88:5b:55:c3:10:55:c2:f2:1b:6e:ab:d3:ba:18:6f:0c:ff: 64:4c:b8:73:6d:a3:62:b0:8c:7e:5a:49:de:c6:14:84:83:e3: d2:7a:e3:7c:50:96:46:47:ba:c4:c5:71:c4:b4:f8:75:88:d0: 6e:e6:1b:70:83:8e:11:f8:9c:12:f7:4e:71:ae:ac:67:f9:31: b4:26:a0:e9:ca:2a:91:ef:be:35:6d:1f:f6:ad:f0:2f:54:e7: 2e:0b:cf:a3:98:30:08:29:18:68:cd:de:98:10:d8:ff:2e:f6: 54:85:80:28:41:97:b9:f0:98:8b:7e:d4:2e:9b:20:8a:ce:21: 6d:bb:ec:52:5b:2a:7f:4e:5c:39:ce:5f:d9:8c:54:bb:0a:21: 6e:70:68:e9:ea:a5:36:ec:bb:cd:bd:86:71:73:02:84:5d:df: 8e:2a:b1:fa:68:6c:ec:a1:ab:22:38:47:b9:01:c0:ff:c5:9b: 28:64:d4:55:03:a4:2e:f3:39:c1:8f:2a:32:b0:53:df:81:78: 09:a0:04:ad:0b:03:6c:1d:b6:b2:d0:78:02:20:a4:95:58:9e: 7d:ac:e6:11:79:00:de:6e:fc:ad:17:09:80:0d:1d:14:1a:68: 5a:35:a5:2b:76:fe:d6:d2:5f:7b:97:19:fa:b2:18:f5:e5:55: e5:a7:e2:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZBA5JkV8wKEP5lrjl8gF5jDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYTVkOTk4NjNkYjJlNDliNDRmNmMzMjRlYjA0Mzg4ZmM3 NTE1ZDIwHhcNMjQwNjIyMTcwMDQxWhcNMjQwNjIzMTcwMDQxWjAzMTEwLwYDVQQD EyhmYzNkODhjOWE2ODU1ZmQ1NDU3ZGI5MWQyNTI2YmVlOWQzNDdhMTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooTZ7i7nnfwsy3Sg7MqXEuIGSQZr X4+b5afeIpEdXg1Ks2wpny96m64bi2lC/FQNN7BC1J4ZBDXmUYIuMzX2UBGKoNXp aDPR8wbWsn5hxJg7nfXTE6ynD2l4YV9+z0IAAVZqGrga8xxoG8A0m2cn8dFxaHU2 l9dBYWlU0g+OdMB8s2ZQWdsDb35RkzGjRzaArQzXCyujNs9zhTYQ60GtLJF/mjR0 hJFqOSL4Af42mKomkFGga0VBDp6pUmyf6UYIAV8K2pYc7as0hAU+1G2zPA9Nm4h+ 8jraxtxkl3U7ylUpdjNiTIO0ddJCgD+XEq7v4AYPhb6XbIgNepGYNv/NOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPw9iMmmhV/VRX25HSUmvunTR6FbMB8GA1UdIwQY MBaAFLOl2Zhj2y5JtE9sMk6wQ4j8dRXSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczZYWm1HUGJMa20wVDJ3eVRyQkRpUHgxRmRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8yOWU5YmMtYjE5MC00MDllLTg2YjAt ZWVjNWQ1MGVmYTk0LzEvczZYWm1HUGJMa20wVDJ3eVRyQkRpUHgxRmRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8yOWU5YmMtYjE5MC00MDllLTg2YjAtZWVjNWQ1MGVmYTk0 LzEvczZYWm1HUGJMa20wVDJ3eVRyQkRpUHgxRmRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhIhbVcMQ VcLyG26r07oYbwz/ZEy4c22jYrCMflpJ3sYUhIPj0nrjfFCWRke6xMVxxLT4dYjQ buYbcIOOEficEvdOca6sZ/kxtCag6coqke++NW0f9q3wL1TnLgvPo5gwCCkYaM3e mBDY/y72VIWAKEGXufCYi37ULpsgis4hbbvsUlsqf05cOc5f2YxUuwohbnBo6eql Nuy7zb2GcXMChF3fjiqx+mhs7KGrIjhHuQHA/8WbKGTUVQOkLvM5wY8qMrBT34F4 CaAErQsDbB22stB4AiCklViefazmEXkA3m78rRcJgA0dFBpoWjWlK3b+1tJfe5cZ +rIY9eVV5afiPQ== -----END CERTIFICATE-----Generated at Sun Jun 23 01:17:16 2024 by rpki-client on console-ams.rpki-client.org