$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft File: O0duEuiYflswLNwkvdnbP-g8hEk.mft (raw, json) Hash identifier: C9VFLZzsHEszsVf8JYEQasH3UopkraiTVh37fqcxINY= Subject key identifier: DF:81:55:DF:81:57:79:D2:DF:60:19:85:A5:18:C0:1C:C9:2D:F5:24 Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Certificate serial: 018F6D52BE73F66D3423AF258216C60B619E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft Manifest number: 12F4 Signing time: Sun 12 May 2024 15:01:30 +0000 Manifest this update: Sun 12 May 2024 15:01:30 +0000 Manifest next update: Mon 13 May 2024 15:01:30 +0000 Files and hashes: 1: 2GAtFwuQkmS2DM9afEk4297ucbs.roa (hash: aEg5bqBtAAp7jR+/7Y68kRear5lX7mH6eDUoCjJGCIc=) 2: 3XGAXUKdw6KQNlQHmCjAQjhFpuE.roa (hash: fUnRJYM60g6PJtrxp49q//chlXDwdAfwaPVarO33TPk=) 3: 45FqnsRGFCKeUV-IDDyN96g3JIE.roa (hash: MOBbO7bnUVvRFqFxCLewbsVhy8cxJiyDLWKsQOMureI=) 4: 5uNbVEqGDo8KrnDsPMRJbD44mzI.roa (hash: D8piX2DXr2ICMkSWs6T0ABAZRq2otHAQ41IigeUxosc=) 5: 5x9V8R4p8pTMFbTsOR0_-xmy7wY.roa (hash: XT1cTwsH6BX+fcbAIlOj2MRkLG/Ws2dNjq6nGTrG+LE=) 6: 9961OFJ6t3GuvmiBEna6xfuJtVI.roa (hash: 4jgdwoVDMcM5qiXlw9krjtDGiXtFuphWwufGYExHYWM=) 7: AfPSc18Zc5_8zJ35KgVqcALr1dA.roa (hash: 1CUl9F4VwkfeknjsBkuKdXNnfplXgLo375ZobDA6VCs=) 8: Cf5Eh9qlIAAI5bKLEKUNgFw_GIs.roa (hash: I3gzsIijSdNlc3wk+8VGaFkk38hO0/g+rhjIqEk6ZYU=) 9: D1pEXhqX4mvNWJZ5Ssy-dBOE-Vw.roa (hash: /J9K8jdcIJD/LKbrpG0jWB2zG/XFsDifkAcU/q5yovQ=) 10: G4rTqfZNZKkaGBubcV6EG5BR33I.roa (hash: b8G73E3DGy04cqoIaZrn2r8qPuUcFw2Rs3xpnxg9G3M=) 11: HWTYRGhh-XGLZqUO1F-RszoKnGk.roa (hash: +hSceEQvRw7vhVnS0o9mJjykp4ixPvfxyGniW70coyQ=) 12: KgfsR_XFUJ-rCOtkwLfjQDiJjOI.roa (hash: hcuq6MHrkRs/rn1L1r4ylHQeITEuRlD7t0ipX9a07GQ=) 13: KhQAAMg_9UEroJuJU7LaGy4mhbU.roa (hash: +8VOjSCpIxMxMg3p2olEjOnr2HvyjqvzPaC/goYCV9U=) 14: KqqV_ftnr6XCliyXxFJx8JyjHHg.roa (hash: MJYE0McwYxAfUEQvEuohJtlq8ebWlVJScMunBLskvUM=) 15: O0duEuiYflswLNwkvdnbP-g8hEk.crl (hash: wsZxvJK/z4HnvBHJI+VZu7fQsUkKFh0qlCqNufTImqQ=) 16: OR_0122qqDUwywsNG35kBJ2noDg.roa (hash: 3uNaHig99b3BlJ8V7st6MnRnZoR9ZBteQ8kRgoROv4k=) 17: TGlURBdHgX4zIhBj-qO9s5lmaMU.roa (hash: WJ5kfCVYrOkiS4H7Y29mf3rzEzmncb7CJgFMT4oT0Bs=) 18: _gjk-MTbFVwi-qHIAPH7y12MVjk.roa (hash: ULmPhiE+tPaMBIbuPAlVPOvO7ukVNwf3w0SY4AkTkp8=) 19: fuWQpx7pIw0mdaw1aqchqtWQAtQ.roa (hash: oEGfWWEgsWLbjsa0QfCLnOl7/mpoVzLp66aQhR1XgFM=) 20: hs08Sp3xnNDZ3XAsQNyWIlLq4m0.roa (hash: oZN6r1XRbgFg4MIbXtenflK12nk57JNnUKe9VbuD6A8=) 21: jZgqpqem90tXAgZCRL3UhRFRbRw.roa (hash: e1boVwfKMTb5WtxTaA0WvQLcmDJFoXji2lWsbyXPOPU=) 22: lRY-1X-pAd95MZY29WbjkcrZc7g.roa (hash: cbXbwiFKKB5suHJpeEzZjTvKP/WtZPM8/NaEET85TOs=) 23: m1pcCxPeuokVfu50-gNRMQnn7wM.roa (hash: rfKyn1+B9zNlAhB8O0vVxilmEsqa9t+qioe6iOaHZOk=) 24: mQvSe6_vH0AH-NEDAoZCeaTih48.roa (hash: 0usbaNMaptNT3nDd78U4OjTaN0xqttEpQpmb2ML4kOk=) 25: o6rZZKPAi8kS3AZVflPSnLGegLE.roa (hash: Z7q63i91R0H0CqdXish4NaGKwjR0fCHFfdaemYUj+J4=) 26: p9G-O4Ee7z74-QvM0rjStpXq1X4.roa (hash: /C1aOmeGZahI+bd9lBDBLVviXtszVzBwWsKYLoRSL4E=) 27: qncNurvg3z56LUyM4pS7GrN7QPw.roa (hash: AuhiBfIH9MDskUT2sv1eQ8/0an9OP3+S9Cs7K98Jlkg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 13 May 2024 11:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:6d:52:be:73:f6:6d:34:23:af:25:82:16:c6:0b:61:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Validity Not Before: May 12 15:01:30 2024 GMT Not After : May 13 15:01:30 2024 GMT Subject: CN=df8155df815779d2df601985a518c01cc92df524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2c:a7:7f:9a:1b:d6:ea:06:5e:54:97:81:f7: 03:23:6a:88:64:82:a9:ca:02:49:d7:68:c8:76:7e: b0:d8:9c:0d:0f:3b:d8:d8:a6:89:58:6a:ea:82:07: b3:fa:60:24:76:a9:ee:6e:18:1f:74:c5:5c:ed:e3: 13:d7:22:94:2a:8a:f9:91:20:58:db:60:fb:6f:8e: 08:db:23:97:55:18:53:c5:01:a8:d9:49:a3:3f:7b: ef:4f:86:a0:09:7e:c7:de:8d:18:dc:31:2b:a6:80: c5:b2:1b:1f:d8:3a:92:6d:cd:ac:97:35:48:9a:d7: d2:c9:c4:9e:18:e8:83:12:fc:36:e6:b5:51:99:5f: 34:f2:a5:b9:9f:d6:c7:29:9b:c3:5a:f3:9d:a8:dc: a4:00:54:1b:54:80:2b:8b:10:9f:c8:ef:80:40:4e: 06:bb:17:1b:3f:af:ee:92:19:d1:fd:9c:b1:7c:36: 41:b7:01:a9:06:f1:42:4c:d6:3c:b4:a3:14:83:b9: e2:6d:4b:f6:1d:99:eb:44:e0:e3:cc:61:84:63:61: 62:a5:c4:09:4e:92:e0:4b:ed:50:80:4b:f6:84:51: 7e:e2:42:44:46:ac:58:5a:98:e4:46:2d:93:a1:3f: 55:e4:22:ca:97:ab:70:3e:c3:09:3c:51:7a:0f:9a: f0:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:81:55:DF:81:57:79:D2:DF:60:19:85:A5:18:C0:1C:C9:2D:F5:24 X509v3 Authority Key Identifier: keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:28:c9:fd:4c:46:5e:89:bc:b2:aa:9c:9d:b4:0b:b2:d5:9c: a2:b2:96:90:96:41:6e:b1:ba:f2:9b:86:a5:4b:86:70:7e:4b: 2d:34:61:27:38:1c:6a:ee:d6:be:1d:31:66:3c:b8:95:cf:bb: c9:9a:26:5d:aa:32:3c:26:5d:b5:51:67:6a:e8:71:d9:07:6d: 19:4f:2d:b7:86:de:8d:16:a1:76:b6:17:03:7c:10:74:b6:47: 6b:52:2d:80:f2:ee:68:04:91:ec:5e:95:b9:73:34:7b:e3:3d: f2:a2:3f:0d:f2:ca:6b:e3:68:4c:aa:2e:60:44:24:ee:e1:cd: 9b:7e:ce:f5:1d:4e:1d:5d:5f:8d:ae:84:79:70:49:dd:92:6d: bb:f1:3c:78:0e:0a:15:57:b2:f0:d7:f1:ea:55:35:d8:06:cb: aa:7e:dd:26:fd:7d:0f:a4:46:61:91:52:f4:40:66:00:dd:6b: fe:07:1e:40:19:a4:46:d2:d2:b1:9f:64:c5:a5:e9:48:55:10: 68:85:90:b1:ba:ab:e5:03:06:9e:86:e1:32:a0:f0:36:cd:13: f7:e2:90:9b:16:c1:6e:93:d8:62:7b:32:26:66:c6:e9:15:fd: 1a:83:b1:20:3b:f8:7f:a1:38:cc:3b:09:cb:94:b8:c3:92:2a: 88:ea:9a:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY9tUr5z9m00I68lghbGC2GeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz Yzg0NDkwHhcNMjQwNTEyMTUwMTMwWhcNMjQwNTEzMTUwMTMwWjAzMTEwLwYDVQQD EyhkZjgxNTVkZjgxNTc3OWQyZGY2MDE5ODVhNTE4YzAxY2M5MmRmNTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCynf5ob1uoGXlSXgfcDI2qIZIKp ygJJ12jIdn6w2JwNDzvY2KaJWGrqggez+mAkdqnubhgfdMVc7eMT1yKUKor5kSBY 22D7b44I2yOXVRhTxQGo2UmjP3vvT4agCX7H3o0Y3DErpoDFshsf2DqSbc2slzVI mtfSycSeGOiDEvw25rVRmV808qW5n9bHKZvDWvOdqNykAFQbVIArixCfyO+AQE4G uxcbP6/ukhnR/ZyxfDZBtwGpBvFCTNY8tKMUg7nibUv2HZnrRODjzGGEY2FipcQJ TpLgS+1QgEv2hFF+4kJERqxYWpjkRi2ToT9V5CLKl6twPsMJPFF6D5rwiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN+BVd+BV3nS32AZhaUYwBzJLfUkMB8GA1UdIwQY MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt NmNiZmYzYzRkYTAxLzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANyjJ/UxG Xom8sqqcnbQLstWcorKWkJZBbrG68puGpUuGcH5LLTRhJzgcau7Wvh0xZjy4lc+7 yZomXaoyPCZdtVFnauhx2QdtGU8tt4bejRahdrYXA3wQdLZHa1ItgPLuaASR7F6V uXM0e+M98qI/DfLKa+NoTKouYEQk7uHNm37O9R1OHV1fja6EeXBJ3ZJtu/E8eA4K FVey8Nfx6lU12AbLqn7dJv19D6RGYZFS9EBmAN1r/gceQBmkRtLSsZ9kxaXpSFUQ aIWQsbqr5QMGnobhMqDwNs0T9+KQmxbBbpPYYnsyJmbG6RX9GoOxIDv4f6E4zDsJ y5S4w5IqiOqaOQ== -----END CERTIFICATE-----Generated at Sun May 12 20:20:18 2024 by rpki-client on console-fra.rpki-client.org