$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft File: 5884hLeAB6Jdvi4s7wzHO2mSH4g.mft (raw, json) Hash identifier: T8AR4LtinWzLzOnAZhHZWEd6e3Zd7vSYwc+P/4efOt4= Subject key identifier: E6:EE:D3:39:73:87:8E:99:26:D9:4C:16:47:4C:66:9C:4F:FD:51:3C Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88 Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88 Certificate serial: 018FA32E91469BFF53125D37D9696EFC28B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft Manifest number: 1111 Signing time: Thu 23 May 2024 02:01:28 +0000 Manifest this update: Thu 23 May 2024 02:01:28 +0000 Manifest next update: Fri 24 May 2024 02:01:28 +0000 Files and hashes: 1: 00YlR7dhjSObCX_SjSyqiwuvT0Y.roa (hash: iabl+A7L3DBj24Gdjv2HPVfmULWa1sNOii1rRBv8i7c=) 2: 11yGxPRxMoe2PZ0u90JslrilobE.roa (hash: 2lD0h0iLXb+hEtzEunJfsLcoy7BMyb04kVEBE5AIa2I=) 3: 1_S8E0TkmwPTj-CZLb6i1LQlqt8.roa (hash: gxGZo9I4msPca3/f/m0rffKypTqSgvbEmgrnfg1FA64=) 4: 5884hLeAB6Jdvi4s7wzHO2mSH4g.crl (hash: 6LKfe31RflUYrKtkh9ZIjFlVK1dX8GqrgBwgWwe1SMQ=) 5: AjVopUaFCJstvhxSA1qPxZax-2U.roa (hash: pTJU/NfRU63JIGJ6iKnPyLbRreZcnMbDFrN5+1HNj8o=) 6: Avsy0ZrbHLzm2gw37_jsLt-Gjf0.roa (hash: UCM8qQWE4PL/EzKxMG6LdpK6xxo7WgvlMG0/LbyIKkw=) 7: DTRMZKXlVGah7hSmdjEE4p3Gzck.roa (hash: hXRDnezP/GUBhcV0jckF5AvYdGG/iNSsPBZuG3zyBs0=) 8: GWb13RZyserln3FjkOGgxeYzlSs.roa (hash: vj3ee/HwHRDmFN5FxHmida0s3ceGyl3hEXJiC2LNavA=) 9: UNw6-Ry6fUnFRCjL67LfPvDO3DM.roa (hash: huIq/asK7IBYTdLn9C8rZgge3D0ioJceEiQR+LYOosQ=) 10: hmdNJ7PnSClrlZRfBTw5cwKYk6s.roa (hash: g5Swvwaesn/2OSE/yZMY3lqRGaIOG0ghqe/94Y5et7I=) 11: of-7W2HzHU7mu3WC9Navlp_Qztg.roa (hash: k9OhEotumH+M6TqTAd5I7SFCExIE244F3/CYxD/t77g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 23 May 2024 22:35:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:a3:2e:91:46:9b:ff:53:12:5d:37:d9:69:6e:fc:28:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88 Validity Not Before: May 23 02:01:28 2024 GMT Not After : May 24 02:01:28 2024 GMT Subject: CN=e6eed33973878e9926d94c16474c669c4ffd513c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a9:0d:2c:33:97:ef:f1:0e:9e:28:a5:c3:67: c7:5b:03:8b:1d:4b:ba:98:7d:76:a2:b8:0d:19:01: ac:72:ee:c3:62:83:57:70:a8:a2:18:27:98:99:91: 1f:d3:87:e7:32:aa:e3:f7:d5:21:89:56:ab:67:bb: 57:0f:10:5c:16:1a:db:f0:b4:83:c3:ba:3c:06:f1: 03:22:9f:9b:ab:c3:b8:de:72:7b:ec:7c:c1:2e:b9: 09:e8:62:9d:3f:79:5b:88:9c:46:b3:61:8a:2d:5b: 9b:d6:ac:d4:2f:d7:4f:d0:a1:e2:14:d0:71:0f:40: da:1c:eb:a6:1f:39:5b:f2:58:44:ac:f0:04:f4:1d: b2:f3:ee:59:39:14:c4:79:48:e5:02:05:73:5e:b5: 64:55:fa:29:51:d0:73:c3:fd:64:df:00:e9:5a:94: 38:92:0d:5e:29:e7:06:68:2a:7a:47:50:3f:62:48: 9d:c9:23:95:b1:55:d9:13:27:0a:91:21:38:d5:17: 10:b8:a3:61:01:9b:67:19:38:10:9e:82:d6:63:c5: b6:96:a6:d0:16:ec:c9:2c:56:d3:63:b8:33:f7:24: 1d:87:44:0e:12:7a:69:5a:90:a4:14:ba:75:9f:ff: 57:c8:18:42:c1:ac:77:31:35:52:15:5e:09:1a:21: ab:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:EE:D3:39:73:87:8E:99:26:D9:4C:16:47:4C:66:9C:4F:FD:51:3C X509v3 Authority Key Identifier: keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:de:30:9a:aa:00:a6:23:6d:bb:cb:a6:b6:1f:d9:34:01:23: 4d:85:78:da:bf:d9:4d:ce:d1:bc:81:b1:42:47:29:e3:1f:02: d8:bb:b4:6c:d2:87:8e:d6:1d:0e:de:13:a2:6b:e3:a5:7c:9b: 39:cd:90:64:49:7c:0e:b0:24:54:58:fa:35:55:c5:09:b0:94: a6:0f:96:64:11:f2:65:b4:8c:5f:bb:bb:ec:4c:f8:05:ff:c1: fb:e1:22:91:1f:28:1b:11:9b:ea:f5:ae:6c:fb:b3:89:7c:41: a3:35:e6:9e:c1:fc:21:75:9c:ff:9f:d3:f4:b3:b7:d5:3a:f9: 00:a3:0f:db:1d:3b:5f:b9:c5:13:84:92:35:f9:90:17:ac:9f: 04:d2:7a:50:84:cc:28:91:51:eb:52:7f:77:66:9b:06:d5:13: 34:53:c3:f7:00:74:87:42:cc:46:40:90:44:a6:a8:fe:cd:1d: 67:63:93:d7:e5:2a:5d:ba:5c:c2:0e:3c:eb:73:c2:bf:78:96: c2:3a:08:e3:7c:2a:c8:e2:56:db:09:5b:fd:29:56:46:64:ef: e8:4e:2e:6a:5b:c7:92:4b:c5:28:48:db:85:d8:6e:04:d4:3d: 34:46:8c:1b:75:f8:25:cb:eb:d9:82:e3:bb:c6:7c:ea:71:19: ed:35:03:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY+jLpFGm/9TEl032Wlu/Ci0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3Y2YzODg0Yjc4MDA3YTI1ZGJlMmUyY2VmMGNjNzNiNjk5 MjFmODgwHhcNMjQwNTIzMDIwMTI4WhcNMjQwNTI0MDIwMTI4WjAzMTEwLwYDVQQD EyhlNmVlZDMzOTczODc4ZTk5MjZkOTRjMTY0NzRjNjY5YzRmZmQ1MTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KkNLDOX7/EOniilw2fHWwOLHUu6 mH12orgNGQGscu7DYoNXcKiiGCeYmZEf04fnMqrj99UhiVarZ7tXDxBcFhrb8LSD w7o8BvEDIp+bq8O43nJ77HzBLrkJ6GKdP3lbiJxGs2GKLVub1qzUL9dP0KHiFNBx D0DaHOumHzlb8lhErPAE9B2y8+5ZORTEeUjlAgVzXrVkVfopUdBzw/1k3wDpWpQ4 kg1eKecGaCp6R1A/YkidySOVsVXZEycKkSE41RcQuKNhAZtnGTgQnoLWY8W2lqbQ FuzJLFbTY7gz9yQdh0QOEnppWpCkFLp1n/9XyBhCwax3MTVSFV4JGiGrGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFObu0zlzh46ZJtlMFkdMZpxP/VE8MB8GA1UdIwQY MBaAFOfPOIS3gAeiXb4uLO8Mxztpkh+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgt YTE4NGYzNTU2ZTQzLzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgtYTE4NGYzNTU2ZTQz LzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXN4wmqoA piNtu8umth/ZNAEjTYV42r/ZTc7RvIGxQkcp4x8C2Lu0bNKHjtYdDt4TomvjpXyb Oc2QZEl8DrAkVFj6NVXFCbCUpg+WZBHyZbSMX7u77Ez4Bf/B++EikR8oGxGb6vWu bPuziXxBozXmnsH8IXWc/5/T9LO31Tr5AKMP2x07X7nFE4SSNfmQF6yfBNJ6UITM KJFR61J/d2abBtUTNFPD9wB0h0LMRkCQRKao/s0dZ2OT1+UqXbpcwg4863PCv3iW wjoI43wqyOJW2wlb/SlWRmTv6E4ualvHkkvFKEjbhdhuBNQ9NEaMG3X4Jcvr2YLj u8Z86nEZ7TUD6Q== -----END CERTIFICATE-----Generated at Thu May 23 04:32:12 2024 by rpki-client on console-ams.rpki-client.org