$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft File: 7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft (raw, json) Hash identifier: HmEkzNWrEAayEndEuOvzj7p2B5IiOCrV/nMC6PfHeYA= Subject key identifier: E2:01:54:7E:17:F8:A2:23:23:EF:57:60:83:F4:00:D9:CD:04:84:27 Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20 Certificate issuer: /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20 Certificate serial: 018FA064751BD9ACA54C5E5E1D61229AC842 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft Manifest number: 11A3 Signing time: Wed 22 May 2024 13:01:29 +0000 Manifest this update: Wed 22 May 2024 13:01:29 +0000 Manifest next update: Thu 23 May 2024 13:01:29 +0000 Files and hashes: 1: 7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl (hash: g3uLxlxcpZzAZeZu9LgBsPT/fRMxsb6wgTJesOtWyK8=) 2: 8c1eVYczzD-nnpIBFqAiiUiKQqY.roa (hash: cL42ZHFCNA8Vu6aBb4ckAmDacEQfBd9NiOQUeLKDXbE=) 3: AGo2zLKUxVW3IltbubJeN3Z8uDU.roa (hash: akapysW5QFW8EU/uMe1zCUma8SVGNqYsHbCa7rlxLsY=) 4: Fy0_hFiIZytB8xCPxEtWRkkTNRk.roa (hash: xAK8tz6Kc3A47MeH2eyt7VqHGHj7ufmuE6EAZWB07oc=) 5: GEthS81Dl3KiMgAyT0y0RVXOQCA.roa (hash: mmII5oXUWCMxrq9i4WIp5PAVBsrpa+8XgGGaajVW714=) 6: GIL1gcl0sSHqHY8XRGqFIveSXcs.roa (hash: 4E3tIs9etwgCI3f6a7acJoQvxEMMWI3GY7BXTR5THNg=) 7: Gkf8LJfUAIwty7LiSIOUV2S44h4.roa (hash: owfKuYWIIoqv4eOcR+1F837CvEtQL194axh+/jIF9QA=) 8: HZb4Wjv5U66SZicuD_pearnvsDM.roa (hash: T4nHIs/FJHVgZEBaUCGVrP1XJDwmapLQj0OByRq1v1E=) 9: LK7-5t1sWdOUZnQ_T4Sey86CR2I.roa (hash: 3LKXZZyLnKszoy1UCYNVmICVUbBBPobCz/rC+ckBN9c=) 10: LL7ibCevj1Uc9dyjXVlqucHC7yw.roa (hash: 6MMlhArGYFl8Fw0VNeE2xw+SZ67xiWVMf//eojedOFw=) 11: T5Gf4YLLZsXZitPAS4ADk3CDtyE.roa (hash: iA9QTUdSHoDVOC3GMPtEAQMJJi7R/16K7Hwdn3T5mbM=) 12: Zouv1hLQdDMasxP0oUDJ7U6hCoM.roa (hash: A07pntAkAtGcNlmErF6oFdLrg8LX3MQGvHJ2nrcJGiU=) 13: gxVpS4G-NHutMliKOB8Zdtp3-oE.roa (hash: C1U/3HbYQpWGg+j4rDvWFhezG+3nXYNHZ2w9OAmSEAw=) 14: qZhU4u_Zy3-GIFZqf2GA5b3zN5U.roa (hash: 3F/0U35s0SLoHV6aopuB7MWidV4ogt8Qpl0lcuoWcuU=) 15: rTIV-9QIVtUcwALSt8aooQQdy8c.roa (hash: JD5B5ZYwCWHbqGM/57QlyU1Z5R0nMEklTDhejC9ss88=) 16: tFircwNyBtq6WrCGFuYs7WuevGg.roa (hash: DZiasd6myKMTFl9daNNFAbTp1NlU0koSzXdCNVlijgA=) 17: uB7bKvT--Ew59H3DvlryuSHjbAY.roa (hash: zFieA3+KLvC5j8zdj1TQVcLn1w3vR5vs1k2M3BdKo8Y=) 18: v4gzHC-WFnf5oJQpD_g5y8gi5gE.roa (hash: W5/trwRP8exPS73zInEGf4UNDCxa95GtwRftQMKywCE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 23 May 2024 13:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:a0:64:75:1b:d9:ac:a5:4c:5e:5e:1d:61:22:9a:c8:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20 Validity Not Before: May 22 13:01:29 2024 GMT Not After : May 23 13:01:29 2024 GMT Subject: CN=e201547e17f8a22323ef576083f400d9cd048427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:31:26:00:4b:dc:5d:51:24:6e:05:2a:3a:54: af:cd:47:9c:79:2b:0c:94:91:54:7c:4a:80:be:3f: 53:37:b1:cf:b6:b3:71:1c:d8:87:c5:09:81:f0:41: 32:ee:b1:17:e3:22:df:5b:ff:55:e1:85:41:6a:ff: d4:24:e3:5b:2b:71:80:9e:db:26:1e:5b:b0:09:ae: c8:84:60:3e:4b:6d:6c:6c:93:83:05:12:54:2c:73: f3:ef:00:11:48:f8:d1:ec:35:4f:61:75:f6:60:e6: 1d:c8:88:f5:8e:01:12:d3:01:32:b5:82:85:e7:3f: 47:93:9c:1e:7f:70:13:ac:fe:bf:c0:07:27:e8:e7: 4e:48:24:04:5d:55:1b:af:b7:c4:98:8f:8f:1a:70: c9:da:3d:ba:e7:89:59:5e:c7:ea:16:eb:ec:b7:04: 42:26:23:32:ea:3d:c4:ec:95:ca:4f:54:c2:f1:38: e8:e9:88:3e:c1:d6:1f:87:4c:9a:b5:4d:15:95:0a: a4:5b:8a:5a:da:16:5e:68:a6:0a:34:12:d3:be:82: 7a:0f:16:52:fa:5f:5c:c4:d4:ea:ca:68:df:4f:d8: d3:4b:4f:c9:86:31:4f:63:f1:ac:50:e2:b7:78:8c: 1d:76:a5:e0:c8:c5:14:ff:c7:20:71:d1:e2:b4:a1: 23:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:01:54:7E:17:F8:A2:23:23:EF:57:60:83:F4:00:D9:CD:04:84:27 X509v3 Authority Key Identifier: keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:c1:83:52:7d:02:ae:86:59:a0:9d:56:e7:69:81:cd:ed:c4: 4c:c0:ef:38:d6:1f:d1:28:71:09:1e:f2:48:3b:12:a6:94:87: 93:cc:45:07:e1:94:46:58:e7:37:ed:20:8e:9c:24:be:7f:5b: 0c:55:6a:78:b0:0a:75:c5:0e:56:74:2d:38:52:57:64:cd:69: 0d:8b:50:87:26:0d:11:5e:02:3f:45:e9:9d:8c:c7:0c:48:a2: 06:a5:51:87:4d:f7:73:1e:e5:8a:77:b3:47:cb:70:04:5a:ee: 99:1a:9c:ce:14:9c:a8:39:13:20:75:eb:92:a5:4b:f0:fb:41: 42:a3:06:b7:09:0e:66:62:79:63:c3:ae:7a:99:0e:bb:90:e5: 99:e8:d3:1c:2e:8c:7f:c8:d3:e5:b5:60:6b:a8:bd:9a:06:04: 1c:5b:5c:b6:26:9b:25:38:e3:44:80:79:af:52:68:64:43:e3: e0:e3:31:0f:7d:06:0a:ee:4b:fd:45:32:78:0a:8f:37:10:05: 80:3a:2d:df:7b:04:4d:50:f9:ae:96:c8:8e:41:bf:b2:e2:fb: 5f:a4:75:96:d3:64:a0:35:c0:7f:61:4c:77:d2:2d:93:5e:de: 25:a8:30:bf:63:70:0d:1f:6d:bf:aa:df:6c:34:7e:e3:0e:be: df:d8:ee:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY+gZHUb2aylTF5eHWEimshCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNmI0MjAyMTg4NmQ4ZWVkYmFlOTBkOWU2YWIxZGU1MzNj NTBkMjAwHhcNMjQwNTIyMTMwMTI5WhcNMjQwNTIzMTMwMTI5WjAzMTEwLwYDVQQD EyhlMjAxNTQ3ZTE3ZjhhMjIzMjNlZjU3NjA4M2Y0MDBkOWNkMDQ4NDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzEmAEvcXVEkbgUqOlSvzUeceSsM lJFUfEqAvj9TN7HPtrNxHNiHxQmB8EEy7rEX4yLfW/9V4YVBav/UJONbK3GAntsm HluwCa7IhGA+S21sbJODBRJULHPz7wARSPjR7DVPYXX2YOYdyIj1jgES0wEytYKF 5z9Hk5wef3ATrP6/wAcn6OdOSCQEXVUbr7fEmI+PGnDJ2j2654lZXsfqFuvstwRC JiMy6j3E7JXKT1TC8Tjo6Yg+wdYfh0yatU0VlQqkW4pa2hZeaKYKNBLTvoJ6DxZS +l9cxNTqymjfT9jTS0/JhjFPY/GsUOK3eIwddqXgyMUU/8cgcdHitKEj1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOIBVH4X+KIjI+9XYIP0ANnNBIQnMB8GA1UdIwQY MBaAFOxrQgIYhtju266Q2earHeUzxQ0gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yNmMzZTEtNjQ4Ni00ZTA5LTk5YTQt YTY4NzNiMzc0ZTI2LzEvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yNmMzZTEtNjQ4Ni00ZTA5LTk5YTQtYTY4NzNiMzc0ZTI2 LzEvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD8GDUn0C roZZoJ1W52mBze3ETMDvONYf0ShxCR7ySDsSppSHk8xFB+GURljnN+0gjpwkvn9b DFVqeLAKdcUOVnQtOFJXZM1pDYtQhyYNEV4CP0XpnYzHDEiiBqVRh033cx7linez R8twBFrumRqczhScqDkTIHXrkqVL8PtBQqMGtwkOZmJ5Y8OuepkOu5DlmejTHC6M f8jT5bVga6i9mgYEHFtctiabJTjjRIB5r1JoZEPj4OMxD30GCu5L/UUyeAqPNxAF gDot33sETVD5rpbIjkG/suL7X6R1ltNkoDXAf2FMd9Itk17eJagwv2NwDR9tv6rf bDR+4w6+39ju9Q== -----END CERTIFICATE-----Generated at Wed May 22 20:40:43 2024 by rpki-client on console-ams.rpki-client.org