$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.mft File: KQn__NgaZryYtinUwFeSR2RfD-Q.mft (raw, json) Hash identifier: nk6crvuQt8AMnZTGys8T7QzXwIzRzOLjFa7fTEQLWss= Subject key identifier: FC:0C:E7:3E:27:FE:A6:CB:51:CA:B9:79:16:61:63:78:8B:C5:0E:34 Authority key identifier: 29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4 Certificate issuer: /CN=2909fffcd81a66bc98b629d4c0579247645f0fe4 Certificate serial: 018F8D81F711EC81B2FB517A90A111C88236 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.mft Manifest number: 119A Signing time: Sat 18 May 2024 21:00:55 +0000 Manifest this update: Sat 18 May 2024 21:00:55 +0000 Manifest next update: Sun 19 May 2024 21:00:55 +0000 Files and hashes: 1: 3JXJlol2hWtZ67A4NiHo5T5scZk.roa (hash: IwJOyfnUZBTcel/a7NCndXyWpC0YPxZDaX21GFcW0t0=) 2: 7nyqPtYoHXMWuhuH0xJUbFGWGgg.roa (hash: 2CiqNvbHTLLRuoEDyU+kgv+cV9Gy71Fh4kEypMiMI+4=) 3: Aal5fDlv8KTqjduL-1trsHe7lCc.roa (hash: zj/AVp1HZvxzwBQuPni9XQZCW87AasIvY9xqo7RidLM=) 4: ElBNamiGixpZz_l00IXECfbKodM.roa (hash: com0NIM9WeL2GEvN2OJSaX4gbjScrQvUpEBULhGotIo=) 5: IBHQ4Pr--NRO7Obhaw8nPwKad0s.roa (hash: sEqiSbSvymv+lWzERVPv6znMds/WSiWiTb9t5iQBxRI=) 6: JMo5lfYTKWZT9Ef1GDZ0beZKyfc.roa (hash: GecDWZwMVJdaoaQeFoK33CJgNff3vDXN7JIe3Dd2dCA=) 7: KQn__NgaZryYtinUwFeSR2RfD-Q.crl (hash: tTUiLOoDnFJHX5wuYT45sd9SF+v2MdDHx7u+8mWS3js=) 8: ORhBz4KRm2gloGHlSyClusZu9tI.roa (hash: JbsoogMNWD/lhbP+4vVwr6exl7qtpby38NnKeDDSUtY=) 9: UTfh3_UjTF5ctqAyjqs4yhkbbVQ.roa (hash: kuhxEaOpC3nBc8FZRnqwbfZbV6GKfFQbDZwzIi4thek=) 10: XzeVIkdyFRWV394J-hMQjZh94l0.roa (hash: kYLAX9K3pbg27Ls9WY0wh7zdYDg51WKsiYamqaX0uFU=) 11: ajWayDIMdZp3qMNs9TNTxPIxFZM.roa (hash: hfJ9wYadBznnrEW9ldNwsFJgWMukbwbfJNuyikUPd5o=) 12: atKomxObHgDEn_ABNq_b4RxNA4M.roa (hash: IId8thkQdFwpEyh6aN4A63s37FPeua1dAlD0VZu6Ig8=) 13: cbqAwGpb0dMFO3g8OTMtkER8uAg.roa (hash: WL465HSaRKRVcqbOC0CTY5BoenUjgFlxnqa1FgmiIdo=) 14: gLqFduyaM-ujPpXoI1wH6cKvKUE.roa (hash: DsCFKo7jLl0JmgBenbA9gcyN8ILsdJkxPnaG/CFbJ14=) 15: gOJj2smQhFOlOiLQZeStq8ANlSo.roa (hash: agLe2wQtDjR1OU0uD3p4d//Z48g4lLvgLqvTJGfM7WA=) 16: kXjEx0YPTAnwXO5zHZtjT8lRViI.roa (hash: 3Tq9HbAl4l4n2bfADTN2bAH7nkhVQqAm4rq7DKvnyi4=) 17: yL9s5mwShdQIVybYAiDh3Mh8ej8.roa (hash: 2nH3ZZWHimz560g4h9zsP1cJYnyzOnQAKqZjg6rUaaY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 19 May 2024 20:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:8d:81:f7:11:ec:81:b2:fb:51:7a:90:a1:11:c8:82:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2909fffcd81a66bc98b629d4c0579247645f0fe4 Validity Not Before: May 18 21:00:55 2024 GMT Not After : May 19 21:00:55 2024 GMT Subject: CN=fc0ce73e27fea6cb51cab979166163788bc50e34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e6:ce:d8:cf:8a:b2:41:50:b4:18:57:d3:e0: 53:81:5c:a8:71:de:d8:e7:7a:44:6b:b9:df:e7:7f: 2a:68:9e:28:59:23:2e:29:a2:e8:b4:9f:f6:31:e8: 36:81:27:15:28:19:93:f1:52:b6:ea:c3:1c:50:2e: 88:30:ea:74:12:c2:ea:8f:cc:c1:09:1a:e4:87:d0: f3:7c:d3:81:4a:96:18:f8:36:75:f2:a6:68:aa:53: 9e:30:0b:33:f1:8a:b1:89:6b:2c:01:81:c5:8a:e5: 07:03:83:a2:95:a7:33:f4:95:7a:68:24:79:9e:b0: c8:1a:a6:ae:cb:d7:8b:61:6a:8b:13:b8:70:f1:97: f6:b1:cd:8d:fb:1c:54:22:6f:a1:bb:fe:f9:ae:7a: 59:21:de:c9:1b:f7:7b:80:05:31:05:1a:7d:ef:8a: 0a:0c:40:60:c3:e3:ba:83:dd:13:69:1c:e4:d5:33: eb:ca:df:06:71:fd:2b:9d:19:cb:ac:ae:ed:e2:b6: 80:e4:e0:c1:b0:87:3b:a5:f3:e7:cf:6e:1c:91:d5: f9:33:9d:53:5e:fc:5d:09:97:d5:bd:a4:19:ad:56: 1e:69:e1:ca:b4:cf:0b:0f:33:9c:08:12:14:1c:f8: 81:ae:a0:6d:ee:4f:a9:c8:66:24:dc:b5:43:09:f1: df:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:0C:E7:3E:27:FE:A6:CB:51:CA:B9:79:16:61:63:78:8B:C5:0E:34 X509v3 Authority Key Identifier: keyid:29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:b5:1c:8b:4f:bd:4d:fc:e5:05:14:6b:65:57:b0:e0:7a:d6: 44:6b:48:9a:90:ca:46:fb:c5:cd:7a:64:3c:10:64:b3:c7:84: f2:ec:34:4f:19:98:de:b1:d2:45:84:4a:0a:45:77:96:f3:bc: 13:24:29:9e:b9:cb:ea:bb:c2:65:b4:2c:bf:56:46:5b:01:ae: 42:db:c7:74:0f:f1:3a:21:4f:d7:8e:17:93:eb:97:96:44:64: 42:be:81:b8:4f:d9:21:16:b6:d5:31:2d:21:d7:4f:12:bc:57: 80:82:c7:6f:07:8e:88:e5:b0:3e:72:7d:88:c3:d7:26:c2:c7: a4:b6:bc:d9:0f:1a:95:e6:f7:35:49:1d:b9:d8:c0:72:a7:03: 47:44:b4:38:d8:59:21:01:ef:62:58:c1:7f:d0:ee:7e:26:2c: c2:08:46:2c:e7:a5:ef:e0:98:24:a8:2e:a2:c6:ba:e8:58:05: 95:6a:90:5e:fc:d0:39:1f:b8:ca:df:fa:b9:3d:1a:e3:cf:0d: 16:37:73:2d:a3:38:fe:d1:da:92:f9:c9:eb:65:28:8c:af:1a: f1:c3:4e:cb:11:8e:3b:b2:23:00:5f:32:6b:d1:13:e1:fd:f2: 0b:74:a6:90:93:70:a8:30:fa:b8:db:ce:d0:f7:03:ad:a6:d9: d0:14:17:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY+NgfcR7IGy+1F6kKERyII2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MDlmZmZjZDgxYTY2YmM5OGI2MjlkNGMwNTc5MjQ3NjQ1 ZjBmZTQwHhcNMjQwNTE4MjEwMDU1WhcNMjQwNTE5MjEwMDU1WjAzMTEwLwYDVQQD EyhmYzBjZTczZTI3ZmVhNmNiNTFjYWI5NzkxNjYxNjM3ODhiYzUwZTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+bO2M+KskFQtBhX0+BTgVyocd7Y 53pEa7nf538qaJ4oWSMuKaLotJ/2Meg2gScVKBmT8VK26sMcUC6IMOp0EsLqj8zB CRrkh9DzfNOBSpYY+DZ18qZoqlOeMAsz8YqxiWssAYHFiuUHA4Oilacz9JV6aCR5 nrDIGqauy9eLYWqLE7hw8Zf2sc2N+xxUIm+hu/75rnpZId7JG/d7gAUxBRp974oK DEBgw+O6g90TaRzk1TPryt8Gcf0rnRnLrK7t4raA5ODBsIc7pfPnz24ckdX5M51T XvxdCZfVvaQZrVYeaeHKtM8LDzOcCBIUHPiBrqBt7k+pyGYk3LVDCfHfFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPwM5z4n/qbLUcq5eRZhY3iLxQ40MB8GA1UdIwQY MBaAFCkJ//zYGma8mLYp1MBXkkdkXw/kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1FuX19OZ2FacnlZdGluVXdGZVNSMlJmRC1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9kZTMwNDEtOTUzNi00OTJlLWE5Y2Qt ZjJhZTdiYzdlY2M1LzEvS1FuX19OZ2FacnlZdGluVXdGZVNSMlJmRC1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9kZTMwNDEtOTUzNi00OTJlLWE5Y2QtZjJhZTdiYzdlY2M1 LzEvS1FuX19OZ2FacnlZdGluVXdGZVNSMlJmRC1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPbUci0+9 TfzlBRRrZVew4HrWRGtImpDKRvvFzXpkPBBks8eE8uw0TxmY3rHSRYRKCkV3lvO8 EyQpnrnL6rvCZbQsv1ZGWwGuQtvHdA/xOiFP144Xk+uXlkRkQr6BuE/ZIRa21TEt IddPErxXgILHbweOiOWwPnJ9iMPXJsLHpLa82Q8aleb3NUkdudjAcqcDR0S0ONhZ IQHvYljBf9DufiYswghGLOel7+CYJKguosa66FgFlWqQXvzQOR+4yt/6uT0a488N FjdzLaM4/tHakvnJ62UojK8a8cNOyxGOO7IjAF8ya9ET4f3yC3SmkJNwqDD6uNvO 0PcDrabZ0BQX0g== -----END CERTIFICATE-----Generated at Sat May 18 22:23:34 2024 by rpki-client on console-fra.rpki-client.org