$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft File: 1gR16-fwfXQVPLHMozjBbYAfRfc.mft (raw, json) Hash identifier: bzBNFRbwXiLA/fIGwssodYRG3aoZaUXT3zcovYAt0xk= Subject key identifier: 3D:61:3E:5C:F9:E9:55:BD:52:1C:F5:30:5E:3B:D7:9E:39:A0:EB:D5 Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Certificate serial: 018F5E84047EE7115B052D09F00C5F01BD72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft Manifest number: 11CC Signing time: Thu 09 May 2024 18:01:00 +0000 Manifest this update: Thu 09 May 2024 18:01:00 +0000 Manifest next update: Fri 10 May 2024 18:01:00 +0000 Files and hashes: 1: 1gR16-fwfXQVPLHMozjBbYAfRfc.crl (hash: EU+rIYwwexYLXg/nbtkKAtl63zAT8lQKCSHKJLaMww8=) 2: 48uPEurPgSALH0LbZUPOR68wy_U.roa (hash: J/fW5io5h7uYUjmVy7Q6nf8eAXy2MA1smGgNjABO2VU=) 3: 9hrEP9ohLwAQ8nwdpkvSXD9ijNs.roa (hash: 6AuuMrDn4OcwDCpaicyWZxHKI/HtMqJb32itQAFF7rQ=) 4: B0GnjcxlBc4li-pG6Y4EB6IAtuM.roa (hash: aO3K2ljlPTe+vGDEfzt84wGSQDcGUbJln83528yJXlw=) 5: HJifVw97a3n8s8VkYVZmiMosUf4.roa (hash: 3Z3uKB/n7J4n6bx18YauprN4Tm8IH7x76UxmbvrnCXg=) 6: YCmoAV6Mjdj8mUQPtUb9Hf5AdoE.roa (hash: cVZ5QG/U9fqxrEU7TsSFdxlb0qAYa7jlZpm5ph7eOys=) 7: ZWXRdsaXrREmROIKyClX9_e5QJ4.roa (hash: Upd8mc3L9xNVJYLWcP/eji2N/Y38AZTlP0rYXbzzZUA=) 8: eWOJ7eiefIdR2HPIYDl-NschQDI.roa (hash: 7YufwDUMbTeC+at1f7nds1kvVzcDyWYD2xVvq15LO3s=) 9: gbH6HcKKBlmZtU4rXumDA2xre6I.roa (hash: mTwiNx0B1ajMybwPn5EhsJaS+TdNmLuKPGPut0aYFjs=) 10: i7LSLsEWF3AxMCtaWE4iCk1ojAE.roa (hash: YN+WQnQfME3bso5X2k7eh7+1n97CGEBy/iC4GEoUlzE=) 11: pW7KIsBt7f2hEqOzfFiEgWKE5o4.roa (hash: 59Eb3QpvZQ9ZgzAavZpX85dCTyqfsHFsFyV3MyL78tQ=) 12: tTn2a4EfOB87DVoiwyGdRQGEb68.roa (hash: jSYbgESY4rL5W0g341w3kcz3TE03xi/L2Nbvqw7bC5I=) 13: yrGjfsVMGNjzRPTuNdJujG_pwDw.roa (hash: 73P8+/SsLTg9YAISn9L9FSbDLn7SRpl3TN2zEmeKSGQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 10 May 2024 18:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:5e:84:04:7e:e7:11:5b:05:2d:09:f0:0c:5f:01:bd:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Validity Not Before: May 9 18:01:00 2024 GMT Not After : May 10 18:01:00 2024 GMT Subject: CN=3d613e5cf9e955bd521cf5305e3bd79e39a0ebd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ee:c9:81:f1:0a:35:05:c7:89:8d:60:23:e6: 17:53:4b:53:90:7d:49:54:8f:7f:6e:f9:53:b4:9c: 5f:ff:e8:65:09:41:2d:3f:10:ad:03:46:0c:60:0e: 9f:9b:af:95:e8:81:4e:e1:15:58:91:8a:4e:53:99: fe:30:03:2a:bf:37:6c:2d:b3:62:35:aa:10:c0:86: 3b:ff:69:30:14:b8:f8:cc:29:d3:76:4c:8a:17:9e: 2d:f6:ad:53:4b:a8:90:80:32:5a:11:96:47:23:39: e4:03:f2:a4:9a:c7:95:f0:68:c3:5d:1d:9a:49:da: 35:c1:73:b8:90:a4:ed:d3:c3:d1:07:b8:42:e3:76: f9:a4:85:4f:1a:2a:bf:bf:65:3c:a0:5d:94:5c:ce: 7b:51:61:7b:87:5c:6a:0b:9d:9e:7d:63:aa:db:99: 3e:7b:2a:36:00:6d:29:47:6d:2b:32:00:25:b0:80: 3d:62:83:05:9e:5a:92:0c:b2:ad:c2:08:05:c2:a6: d2:14:a4:2c:26:0c:92:b2:72:78:c5:8d:c6:38:cd: 52:b9:59:e7:ef:de:41:e5:03:4f:b4:1a:b2:ce:e0: 11:65:71:fd:02:5a:66:55:8c:f8:6b:2b:e5:16:66: ab:55:9f:47:51:49:03:c2:7a:46:a0:1c:1a:78:7d: f4:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:61:3E:5C:F9:E9:55:BD:52:1C:F5:30:5E:3B:D7:9E:39:A0:EB:D5 X509v3 Authority Key Identifier: keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:e4:90:69:d5:1b:7b:75:81:3a:cb:3b:20:3a:96:f8:dd:e2: af:a5:d6:fa:27:f3:e8:b2:ec:4c:a0:18:b6:4c:f0:61:54:1f: 2a:5e:c8:e8:5f:99:e8:a5:cf:53:96:40:47:9b:44:7b:32:21: 13:1f:2c:d1:6e:f2:e7:e1:da:6e:16:f1:05:22:d7:99:03:e3: a6:9e:fd:3e:6c:46:7d:5c:8f:95:e6:e0:bf:f1:32:38:a1:24: bc:3d:85:b6:51:0e:b5:c9:40:f3:7a:93:d5:bb:1f:a5:0a:36: 75:a0:79:f9:08:4e:8f:7a:e2:9d:4c:e7:26:e8:e5:10:cb:ae: 70:1b:9c:b5:30:1d:59:b6:ee:cf:ec:0c:9b:ff:de:8f:10:84: cc:3f:f6:2e:64:38:0d:b9:09:8e:d5:31:ad:a6:80:c1:19:49: ab:8e:79:52:be:21:e2:82:48:dc:a5:7d:bf:b1:e9:64:8f:f2: 05:7c:76:b6:a9:82:cf:66:bb:22:c3:d7:29:6e:e5:75:3a:a3: c2:7e:a3:06:b3:ad:3e:46:57:2d:26:92:a8:4e:be:07:15:7e: c0:31:ed:d1:f9:f6:54:5c:e3:ea:6d:9a:26:00:20:3d:dc:24: 07:29:f7:17:0c:c8:f3:5b:13:9c:53:ec:e1:fd:87:00:95:61: 96:f8:3c:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY9ehAR+5xFbBS0J8AxfAb1yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MDQ3NWViZTdmMDdkNzQxNTNjYjFjY2EzMzhjMTZkODAx ZjQ1ZjcwHhcNMjQwNTA5MTgwMTAwWhcNMjQwNTEwMTgwMTAwWjAzMTEwLwYDVQQD EygzZDYxM2U1Y2Y5ZTk1NWJkNTIxY2Y1MzA1ZTNiZDc5ZTM5YTBlYmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6O7JgfEKNQXHiY1gI+YXU0tTkH1J VI9/bvlTtJxf/+hlCUEtPxCtA0YMYA6fm6+V6IFO4RVYkYpOU5n+MAMqvzdsLbNi NaoQwIY7/2kwFLj4zCnTdkyKF54t9q1TS6iQgDJaEZZHIznkA/KkmseV8GjDXR2a Sdo1wXO4kKTt08PRB7hC43b5pIVPGiq/v2U8oF2UXM57UWF7h1xqC52efWOq25k+ eyo2AG0pR20rMgAlsIA9YoMFnlqSDLKtwggFwqbSFKQsJgySsnJ4xY3GOM1SuVnn 795B5QNPtBqyzuARZXH9AlpmVYz4ayvlFmarVZ9HUUkDwnpGoBwaeH303QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD1hPlz56VW9Uhz1MF471545oOvVMB8GA1UdIwQY MBaAFNYEdevn8H10FTyxzKM4wW2AH0X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2Mt NDk2ZjhlYmIyZDYxLzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2MtNDk2ZjhlYmIyZDYx LzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp+SQadUb e3WBOss7IDqW+N3ir6XW+ifz6LLsTKAYtkzwYVQfKl7I6F+Z6KXPU5ZAR5tEezIh Ex8s0W7y5+HabhbxBSLXmQPjpp79PmxGfVyPlebgv/EyOKEkvD2FtlEOtclA83qT 1bsfpQo2daB5+QhOj3rinUznJujlEMuucBuctTAdWbbuz+wMm//ejxCEzD/2LmQ4 DbkJjtUxraaAwRlJq455Ur4h4oJI3KV9v7HpZI/yBXx2tqmCz2a7IsPXKW7ldTqj wn6jBrOtPkZXLSaSqE6+BxV+wDHt0fn2VFzj6m2aJgAgPdwkByn3FwzI81sTnFPs 4f2HAJVhlvg8Qg== -----END CERTIFICATE-----Generated at Fri May 10 00:49:27 2024 by rpki-client on console-ams.rpki-client.org