$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft File: pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft (raw, json) Hash identifier: DXcfYfKGpuYC5/se2/9inMjaFNdtSAykrNks+R31jRk= Subject key identifier: 27:E6:BC:D8:42:C1:A3:74:B5:FB:F8:14:00:62:7D:EF:DA:4C:32:CE Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Certificate serial: 018FBAFF55A7C919463D448F4CE433F5AEFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft Manifest number: 0E68 Signing time: Mon 27 May 2024 17:00:46 +0000 Manifest this update: Mon 27 May 2024 17:00:46 +0000 Manifest next update: Tue 28 May 2024 17:00:46 +0000 Files and hashes: 1: 7c9G0GQJYG-3YOy2JdgPC5rbXOE.roa (hash: x1PB6tJTCd6Xpwia6jLWqx+tukloXQvhfkKqPZ6Cp0Y=) 2: 7qODuGSs4dmqZxJ-1yR3uLnt78I.roa (hash: u9dD83B9w4i3dzT6MQPlhoVscgdl/eJq2CSU2nReV/s=) 3: H7F_0BQY9F_vqEdMMlcW-DDy7VQ.roa (hash: unxO3BoaME5QVELFtPjBOedR7U60ugmeLRDAif8cQIw=) 4: JKBe194GtTE6-jtROjlvi6ISDwE.roa (hash: ECqICTzRBzYMc+lUuuWPVyHqU8Zqtygn4BtTESjsaLI=) 5: JhcnO_f3vyWsqORCbqRb3pMOP9o.roa (hash: QlJfGZeKFSMCeTj/+DzDXYivB2hKP7gLhvKjLsKYzVo=) 6: PYhvTWu2gLGxgQFdlL60IH92CE8.roa (hash: yV6fRqMha8M+YZ9PxKlydMdQ/YHg+s/tvkAKEMqbpOQ=) 7: UoM7GZS22qIm_xwu48_5lIS3d5E.roa (hash: B2YkWctj7HnoEfUInkkDB7kWzpC8mVEet27ugRM2Yjg=) 8: XLYAPTD2no7p509qKAMCL1mF5Kw.roa (hash: 6fVzPn2OvDKI7tMg9uZxaVzB70BMWrRH9hLnWPXyA9Y=) 9: fuUps2aRQkJHHd5iIfnTKFZGxHM.roa (hash: sJ25TtqdOaT/n5KyVJJPUK/zQ3AMSASckTZRULIgdlI=) 10: nlNRTOXpQFo_d8AnPPNfNphLBmQ.roa (hash: ryNBMff0UZy/g85NWb7cdBlRbr7UNf/fMA9h7ViPBk0=) 11: pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl (hash: bznd5euNIKs2ydkf+xymeN9s+oP20FmvaDkdBjabtrY=) 12: qsKIPbHveiCP8xnSrxIMqZdVk6Q.roa (hash: tErfnGfNrbtatT/OHnsoFUmZd85cqmf/258GdBmrxUk=) 13: wZF77SiErYymosNHzp8aF-JhSN0.roa (hash: KReCDeSN+XFI3gXfRjrK0vu1WQZqer0ApJzCHW9RNDg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 May 2024 14:15:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:ba:ff:55:a7:c9:19:46:3d:44:8f:4c:e4:33:f5:ae:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Validity Not Before: May 27 17:00:46 2024 GMT Not After : May 28 17:00:46 2024 GMT Subject: CN=27e6bcd842c1a374b5fbf81400627defda4c32ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:bd:56:12:6e:da:7d:6b:f3:fa:31:d3:9d:6c: 30:ea:d7:7f:dd:10:94:6f:94:64:6a:1b:67:1f:df: d7:92:92:17:43:8d:8d:ee:c2:60:6d:ea:5e:6c:6c: b7:4c:84:03:69:63:c6:d4:d8:4d:88:63:f8:4c:b9: cb:3c:04:41:8b:91:cc:8e:ac:5a:f4:4f:07:68:af: 3c:5e:e9:68:d6:2d:7c:92:8d:dc:88:2b:63:2c:18: ac:39:b3:17:ba:76:21:96:e5:f7:76:8a:e2:18:3b: 02:38:17:99:ca:ef:c0:99:71:b5:66:41:37:e1:d2: 83:52:b5:c9:64:0e:ae:32:8c:7a:df:b6:92:61:8f: 80:8f:94:94:7a:c4:6c:2d:64:fa:f6:a2:29:37:56: d0:da:36:22:33:15:39:fe:e2:50:e1:ab:fe:ce:fe: 41:ed:6c:59:df:6c:b5:21:7c:09:e9:81:58:4d:3a: ad:40:3b:4a:da:73:90:67:f8:5d:63:ec:18:ee:0d: 74:b8:16:6e:b7:9a:f2:bd:e5:da:6a:c6:82:2d:a1: 22:e1:8f:45:1c:63:2c:d6:32:00:d9:f2:ff:3a:3a: 25:97:4b:df:4c:82:2a:3f:e4:3a:6f:8e:cd:7d:75: ac:97:82:53:81:47:8e:70:84:e6:a0:c3:b5:44:9a: a8:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:E6:BC:D8:42:C1:A3:74:B5:FB:F8:14:00:62:7D:EF:DA:4C:32:CE X509v3 Authority Key Identifier: keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:43:28:34:c4:98:eb:4d:07:8a:21:f2:e2:fa:b0:16:31:10: 28:d6:19:ad:3c:ae:5e:3a:f5:97:ce:69:5a:6a:fa:d9:8c:4e: cb:0a:8f:63:66:f7:f2:f1:52:13:f6:cd:d6:51:73:3e:62:52: 42:00:dd:43:80:0d:53:24:89:8e:e5:35:41:5d:b4:25:fb:d0: c9:35:0d:32:13:4e:53:72:96:c5:bf:09:d6:ff:70:3f:f8:d3: 6b:04:1a:68:0b:c2:af:ec:52:70:59:6f:c4:c2:c1:7d:b9:06: bd:f8:0f:47:c5:e4:95:84:d7:3f:ea:42:92:8c:e8:fa:dd:12: 06:c1:92:f2:09:ca:27:28:49:76:6a:da:87:2f:f5:ce:8c:ce: 60:df:31:a6:c6:ab:ad:23:9b:f1:55:b1:54:ae:56:11:70:21: af:d4:7d:0a:cb:95:04:aa:b9:b7:8e:64:5e:16:cb:f6:13:16: 0b:73:b6:d0:3c:45:8e:57:1e:6e:14:b9:2d:58:10:74:55:ce: a7:55:52:e1:e2:99:ba:e9:24:d2:f6:3f:85:f1:eb:6d:06:53: 48:73:04:41:ac:92:e9:cc:24:9b:e4:99:8d:99:f5:26:bf:7f: 2b:b8:13:48:3b:bb:31:23:56:df:47:c6:c4:64:b0:76:2c:dc: 89:e5:a8:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY+6/1WnyRlGPUSPTOQz9a78MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0Y2U5NjQwYTNlZjJmZWExOTM3NGFkOGY5OWY0MjNkN2Fh N2M3NmIwHhcNMjQwNTI3MTcwMDQ2WhcNMjQwNTI4MTcwMDQ2WjAzMTEwLwYDVQQD EygyN2U2YmNkODQyYzFhMzc0YjVmYmY4MTQwMDYyN2RlZmRhNGMzMmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlr1WEm7afWvz+jHTnWww6td/3RCU b5RkahtnH9/XkpIXQ42N7sJgbepebGy3TIQDaWPG1NhNiGP4TLnLPARBi5HMjqxa 9E8HaK88Xulo1i18ko3ciCtjLBisObMXunYhluX3doriGDsCOBeZyu/AmXG1ZkE3 4dKDUrXJZA6uMox637aSYY+Aj5SUesRsLWT69qIpN1bQ2jYiMxU5/uJQ4av+zv5B 7WxZ32y1IXwJ6YFYTTqtQDtK2nOQZ/hdY+wY7g10uBZut5ryveXaasaCLaEi4Y9F HGMs1jIA2fL/Ojoll0vfTIIqP+Q6b47NfXWsl4JTgUeOcITmoMO1RJqouQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCfmvNhCwaN0tfv4FABife/aTDLOMB8GA1UdIwQY MBaAFKTOlkCj7y/qGTdK2PmfQj16p8drMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQt MjgzZmU1NGE2ZjJmLzEvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQtMjgzZmU1NGE2ZjJm LzEvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl0MoNMSY 600HiiHy4vqwFjEQKNYZrTyuXjr1l85pWmr62YxOywqPY2b38vFSE/bN1lFzPmJS QgDdQ4ANUySJjuU1QV20JfvQyTUNMhNOU3KWxb8J1v9wP/jTawQaaAvCr+xScFlv xMLBfbkGvfgPR8XklYTXP+pCkozo+t0SBsGS8gnKJyhJdmrahy/1zozOYN8xpsar rSOb8VWxVK5WEXAhr9R9CsuVBKq5t45kXhbL9hMWC3O20DxFjlcebhS5LVgQdFXO p1VS4eKZuukk0vY/hfHrbQZTSHMEQayS6cwkm+SZjZn1Jr9/K7gTSDu7MSNW30fG xGSwdizcieWoBQ== -----END CERTIFICATE-----Generated at Mon May 27 23:24:55 2024 by rpki-client on console-ams.rpki-client.org