$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft File: CIRls3stTp9BOjHce35suioz25Y.mft (raw, json) Hash identifier: 0n2a7yTEqc0GTb37NssW90v220ToxkYIge9gItIToYA= Subject key identifier: 1E:CC:FB:42:FB:09:82:AD:7C:7A:82:0B:EF:38:C2:EA:EE:8F:E4:87 Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Certificate serial: 018F923A338767C58CB76C18197A4B47DF24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft Manifest number: 0523 Signing time: Sun 19 May 2024 19:00:38 +0000 Manifest this update: Sun 19 May 2024 19:00:38 +0000 Manifest next update: Mon 20 May 2024 19:00:38 +0000 Files and hashes: 1: 1-nlkvRFb_0dY33_QQWe7MT55B_U.roa (hash: xM8t5GiicySe8TkQxN5K9fwDc3cDsUvknXQKAZ4xQ2o=) 2: 8dRFBxE7q7wYj5Gn_IZMeSxa7Q0.roa (hash: 0iyoldQs0UzbfYTDSjyE/7C446a3IWX9kaNVDAWoKp0=) 3: A-3Gf3UgxQIZ6Ky-Cazaqu17xIk.roa (hash: dgrM7o+8O9wsrCrNpqji+jQERTikBcq3GEqjrSbA/CI=) 4: CIRls3stTp9BOjHce35suioz25Y.crl (hash: XJuoKkh3lgE1BfWILsNvtSoyu8o6m2yfW7ZNFT6BQMU=) 5: EhgLyU8HvtDYz7dSasUYheXrZLM.roa (hash: M1xbdPb+iwx/tX5zOJU79vyx7DCdsgOEGBkZvr6JmwQ=) 6: HRNCM29Lfd6GUrjLWhfVEZK8Pk0.roa (hash: z48BydbyCcnp1XJbWLcmx5rliPkrqbTUFpr/Zni0HCc=) 7: IyOQ3_9kRcCaKPJsq4axOWy-HYs.roa (hash: S+LuIEKMRU2TRdcgebmfy4EZ9tZD9n61WhgTtODu9to=) 8: WfRMqwEzwStURAh01roSLkYv1U0.roa (hash: HNa0AY81x/+AccOuLe0azU0S7PEQCkT6eu3lt3/eu7c=) 9: axTIK1Cd6xNvIGQcZlJRMER2QFo.roa (hash: qVieod/xg66m+9lc+me65CfGEYNPFENdxnCjhg2A7bM=) 10: bPGVmwC5wVAJLJY_VqBl6LkbGl4.roa (hash: bQFYpZP0FaCpt2r9gHDSzWGF2kjGlh8i3ok1643W9vI=) 11: d1ogW3WxN0Vy_VZlHCgGlOrnezc.roa (hash: 6ruWmO6+DlJ4vUG/gcPWSMLemL9HmLjlRTKaI8x73SI=) 12: drL0dFt8ESK0rijIgcxamuW08M0.roa (hash: scNmkIiGui5gfwb9cU1BGgdxIhKnyOvTw0JqckMZuvQ=) 13: i8NbONvs5xhBWus_MB-NQZP3my8.roa (hash: EsQoRAscEkFhvzOIZAFyfg8yYTrMYfGLEKEj6fCJ+d0=) 14: i_Rznfzs9-GsDjO5dtgeBxIhJSU.roa (hash: 3xHSQoVMkR40bZSIZByp+NAJJPcNDRqbz8myR6qYVuQ=) 15: kCFK5KVTZ-oBpbpUm6gWRufqphY.roa (hash: auwcGtcgRGQzg15U/5lm2/LPsOIbOGKKP/uRfEXPYiA=) 16: kmOv4T4WeoK9PsD5P0rltL5I4bk.roa (hash: SX5q30B33T7jU2L/WOp9elLAJmE5jcE7bhg5rQB8LRg=) 17: liYYEUDeEK4mb8kNgSbWRHrhdC8.roa (hash: x+7bDIe8St1YG62wyUZpmycI67GTwgn7MhqsPRwNLlA=) 18: nCze57cjIRCMGshiGLAyEq3Ponw.roa (hash: LkCADmNPCgQVqXTv0TQ5t5d3IzyZ0ofPj+bUmbp5Pl8=) 19: pbRnEKy35OIur1byAlEZ7NczUH8.roa (hash: /kzRKlyUb2SUK4mIXbDuF8XZ3zCvXcX6tO5XLbCzoBw=) 20: q9XAMvZePT2XanZ5tFs3Z8C3BA0.roa (hash: JXjKyk067tuPpcj75S7FbQk7GIqT7ZRj0BuyYcKd28A=) 21: s-sL5wT32taHauUGptZDQ8bJgP4.roa (hash: 3roMJQDeGMcuay4MzIwtKwbCGU0o/jeBJESEuIo5kS8=) 22: xgAjK3UpVlbWMJ5lH01QCmJPhRY.roa (hash: sdbZUGo1C9uD51rJjlYvxRl1v4mVkvQW97kGxU3scoo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 May 2024 14:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:92:3a:33:87:67:c5:8c:b7:6c:18:19:7a:4b:47:df:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Validity Not Before: May 19 19:00:38 2024 GMT Not After : May 20 19:00:38 2024 GMT Subject: CN=1eccfb42fb0982ad7c7a820bef38c2eaee8fe487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:55:e9:79:62:c4:6f:1c:ec:12:54:f2:9a:28: 9a:8a:3b:77:1d:56:be:93:9f:37:43:bb:f8:e0:a5: e3:6c:85:12:01:5a:e2:22:30:1a:d0:0a:3a:42:80: b4:06:a7:0c:c9:29:a2:18:2a:72:60:7e:e8:f7:02: 50:df:7f:fc:5c:fe:2a:35:e2:2c:7b:9c:9a:41:43: 68:e8:c2:4a:88:9f:db:b6:b0:b6:9d:bc:36:9a:53: 47:f6:1d:bb:be:3d:63:97:bb:61:9e:3f:7d:b7:f3: ea:73:b6:60:e1:8e:b3:c3:17:a0:ea:2e:91:76:02: ee:7f:85:b7:43:1a:da:6c:d0:34:1d:fe:95:6c:35: fa:d1:f8:98:8e:e9:56:4f:a4:72:52:6a:15:4c:f6: 10:11:41:89:de:f6:6f:9c:d1:1b:63:d3:fd:ac:23: 4d:b1:57:58:2f:f1:aa:4e:a1:8c:e2:1b:58:40:03: ce:81:df:9c:84:77:be:ea:d8:1f:38:26:7c:9c:8e: 34:8d:25:5b:b6:81:df:fb:c6:41:7a:2a:c1:07:fd: 3e:f9:89:00:d2:ef:78:75:68:35:88:88:62:cd:18: d7:b8:c3:24:54:a2:c1:dd:20:12:67:07:54:5f:cd: 0d:cf:cd:67:1f:83:69:58:4c:e9:7b:4d:04:75:9b: e1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:CC:FB:42:FB:09:82:AD:7C:7A:82:0B:EF:38:C2:EA:EE:8F:E4:87 X509v3 Authority Key Identifier: keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:a6:10:7c:ba:6d:65:2f:16:93:76:79:4a:94:ef:78:12:8a: a0:6f:75:dc:18:e7:b6:e5:7a:97:c0:d1:07:94:02:e6:9b:e8: 4c:a7:ba:af:07:31:b4:74:b9:c3:22:fa:52:e1:a5:9f:33:50: 56:b1:0e:83:9d:5d:a9:e2:ae:31:43:dc:55:16:f0:e8:f7:13: 99:17:fb:79:fb:ed:17:59:54:09:44:e6:5d:13:de:19:e4:8d: d6:c9:32:a2:18:a7:0f:90:99:5a:2d:58:db:37:db:92:08:61: 10:54:09:1b:6c:b9:cc:0a:6b:1f:80:84:69:e7:ed:56:41:86: 33:d1:d9:97:c6:b8:6a:18:d6:fc:bc:8d:2e:fd:5c:13:94:c5: 21:d9:e3:71:63:f4:00:9b:73:83:8c:69:fc:e7:38:f4:6f:cf: 7e:55:ad:4a:22:32:14:88:b0:a6:29:91:ea:00:61:46:83:bc: d8:c7:79:8b:a4:08:2a:72:ac:9e:85:d4:fa:73:0e:8d:0a:c6: e0:2e:9e:a1:ce:c9:4b:50:40:04:7c:4f:98:8f:b2:ff:8d:a8: cc:85:fc:cc:2f:c0:bf:c9:b4:48:0c:cf:eb:a7:d6:bb:36:95: 03:bd:a3:f3:72:65:a1:38:c3:24:af:56:82:84:68:c7:8e:4c: 65:a8:6a:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY+SOjOHZ8WMt2wYGXpLR98kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ODQ2NWIzN2IyZDRlOWY0MTNhMzFkYzdiN2U2Y2JhMmEz M2RiOTYwHhcNMjQwNTE5MTkwMDM4WhcNMjQwNTIwMTkwMDM4WjAzMTEwLwYDVQQD EygxZWNjZmI0MmZiMDk4MmFkN2M3YTgyMGJlZjM4YzJlYWVlOGZlNDg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1XpeWLEbxzsElTymiiaijt3HVa+ k583Q7v44KXjbIUSAVriIjAa0Ao6QoC0BqcMySmiGCpyYH7o9wJQ33/8XP4qNeIs e5yaQUNo6MJKiJ/btrC2nbw2mlNH9h27vj1jl7thnj99t/Pqc7Zg4Y6zwxeg6i6R dgLuf4W3QxrabNA0Hf6VbDX60fiYjulWT6RyUmoVTPYQEUGJ3vZvnNEbY9P9rCNN sVdYL/GqTqGM4htYQAPOgd+chHe+6tgfOCZ8nI40jSVbtoHf+8ZBeirBB/0++YkA 0u94dWg1iIhizRjXuMMkVKLB3SASZwdUX80Nz81nH4NpWEzpe00EdZvhZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB7M+0L7CYKtfHqCC+84wuruj+SHMB8GA1UdIwQY MBaAFAiEZbN7LU6fQTox3Ht+bLoqM9uWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUt MmM3MDg2ZmRlZDkzLzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUtMmM3MDg2ZmRlZDkz LzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ6YQfLpt ZS8Wk3Z5SpTveBKKoG913BjntuV6l8DRB5QC5pvoTKe6rwcxtHS5wyL6UuGlnzNQ VrEOg51dqeKuMUPcVRbw6PcTmRf7efvtF1lUCUTmXRPeGeSN1skyohinD5CZWi1Y 2zfbkghhEFQJG2y5zAprH4CEaeftVkGGM9HZl8a4ahjW/LyNLv1cE5TFIdnjcWP0 AJtzg4xp/Oc49G/PflWtSiIyFIiwpimR6gBhRoO82Md5i6QIKnKsnoXU+nMOjQrG 4C6eoc7JS1BABHxPmI+y/42ozIX8zC/Av8m0SAzP66fWuzaVA72j83JloTjDJK9W goRox45MZahqjQ== -----END CERTIFICATE-----Generated at Sun May 19 21:08:41 2024 by rpki-client on console-ams.rpki-client.org