$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft File: pa6KPYvaq_R2X9p51V7KjGnIvyw.mft (raw, json) Hash identifier: PSHnhz/MkmYcHM1qztcfT6CGJf8C5bXxLZW0acj5u+U= Subject key identifier: 3E:EB:E6:3E:DE:BD:1A:C3:B9:9A:90:7C:21:06:2E:77:F7:C8:50:18 Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Certificate serial: 018F8B273A1B24A797E9F1D62D5C995205E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft Manifest number: 09FC Signing time: Sat 18 May 2024 10:02:34 +0000 Manifest this update: Sat 18 May 2024 10:02:34 +0000 Manifest next update: Sun 19 May 2024 10:02:34 +0000 Files and hashes: 1: 1Bhh_0LvvO5XtrJAq8MQfJiqTDM.roa (hash: IvsAX7uE3njlEYkmfBlJm5GMCF4cYfvG8vJUyM3KcdI=) 2: 1QwLR1UctK3PB4J_sy5g4kgL3WQ.roa (hash: duwpz/NwxPr47Bu2I8mL85e5TLeFWtBs3LSRmBnblAQ=) 3: 2k3i8jWfTXZXNgMWu3nuNPvd_DI.roa (hash: fyKcM+5nuBSVLcaJ/t52vneKvt9SUHgPFsRkU4aC5mQ=) 4: 43DuKtgbG447gxcZF5p5U1kh87I.roa (hash: bR6TXVkCgdJnLrIjSeIx3oDz4U12ORRIGTNa6twixqk=) 5: 5wZJoOy7YYBi3Ons32VrrsgBC1o.roa (hash: L8O1qZs43Bi1YrA3kS6CUj0lgOxEqmgDQXxBspSPBaQ=) 6: 9T1jIIJIKCIkFmLdLRq47zJ0TW0.roa (hash: tMowNqQI/cgY3mPoq6c5EsUp9DbAQ2Gc+l2RC88bGiA=) 7: 9XZSOg59x2YlO1Qoo4LM2XPwatk.roa (hash: RVaWGJ+NeF95vme/uAKTYpjQ3cX+WEewzhSbsSxQkc8=) 8: 9hsuTTCytTvhgJTlP9qEu95OSEk.roa (hash: qOwnzocB1gJ0wvS93u2XnFn39UbkfSDDOQb5klTmQTw=) 9: A7nrWQx5l76hJYU3Mqg8uzxvrBY.roa (hash: 0C0d3q5iZiuNTFqDyJ9GIjvIBGyB1Y9G7UcPjVAgRIM=) 10: ANuF8UOOa2Xdpm6EPQNA4x1Ki-w.roa (hash: 6qCxrz0Zxj0X2qozcjzE21Eiawy9WR7HiBReGhK8Dno=) 11: C3zigT_QMOrsopIvhHKQqigFAd4.roa (hash: 7seTOjGVO187r7acC6pSfLV8quCGOJKpIoAlbkBgZic=) 12: DEKUyDFlv0e8yKx6Qf9prP7A4Fg.roa (hash: 9fuWkGHBrBEgAx43BDlPVkE8N+SB95+bzFmo3laQDWw=) 13: DF3Mg7HM-0pHzTN8RaccpSl5hX0.roa (hash: 4CdEXNGY0jFqVEKHE8aE71PoIGd7ZlSxptGmYGAw3WI=) 14: GISu4fRZKOLy4tFKTMKVFG4TOyI.roa (hash: sz88mQx8NVCCzg7a7pz+GRwSKaacrhindJm4PDl1yRY=) 15: I5XtFOyOe8l0lKD9QWOo5Mg5Ndg.roa (hash: 4s/BkTFGgc6nuat5MSSYT60lAROdjXvAq9XNiMV+bKM=) 16: IO11ovBvsYG8rkjkoGlvg5bIm4w.roa (hash: ThtrSQFwZkvl17XYPA0H5CiuGQ3DXC07ahkJaDccAmg=) 17: Kmgzx9jzRiHTO2O--3H2038SMFw.roa (hash: EQUWihtNFACS6jEL5GjRplvCUv6xQs2Cs7CiQ//ZT9w=) 18: Kp0fRX3pae5ujJv3WdnlqBOjWQw.roa (hash: smvu2VQrAK9kUKobOTALLC4g3t5HTk5hN9xg2k2Dvhk=) 19: MhoPM4rMUDF9s0zNhqGQ7alN2DQ.roa (hash: SwZBsPGydWGuTc5HVtp2AaSgGg6x46IJe/sFCtQXIKU=) 20: OLPHWH8xNUldynoLiZYUzSB7f_M.roa (hash: AUBvVmojfXte1D9rADDATmsU9oNw3wWNTeTnhvO1r+s=) 21: P6f9sdz98JuNzadRf06PelZEYZ0.roa (hash: BAeDaPR/U/MalZUcYI2NRlO+jQ2xRgw7CvGICc1jCJs=) 22: QhiyUwjtkgLslJbuRq72D6KCG4M.roa (hash: 9wwcXyFdrALwOL0kKzvyy+UJ9nw49+cR/FSLV1UPHxw=) 23: Qht0VRSW38Aodi5PZPbESpBt4Rw.roa (hash: Nmu01cczIUu5syE7pyunrnROAhRU1V8eCrcggH97hy8=) 24: SJIex7rH4LdrtKCOkDabzrxasUE.roa (hash: RfT4jFm03PxWsRyGJM/EYoqgJMkqtXy06vj6rtNaVkE=) 25: Ta1ZYJzIQb0ONVqdSJaLoel0AWA.roa (hash: cebFZ3w2EmCb1g/ckuoEHZ1lxyQdiWYDM6ZSHDjWJwA=) 26: VRdy28fn3CXd6piPe7d0UocJvmM.roa (hash: leFskh9Rye+JHyXfrc2EyZVZbJ738c8gKQjMbfyOclw=) 27: ViSw_vQvQ83vtBWzg_qgvy5A3-U.roa (hash: sQdwQyHmUC7WQt1DmmsVtlQVWUUiiJTJJ0u9gKq1w5I=) 28: aM2C0Kqk3xmcTW55fypLtVCBw44.roa (hash: VDe5nx8egYUvxQ88SUWfuoEj75f98dL5OJcKK70r9/c=) 29: akrKiN6z3-AQfaIxIZZeqWb37V4.roa (hash: qRS1cPo/dPPie2cX5uEiIqbBC1M0WPHnxd3hVXUg6do=) 30: iu1fWH66SZ9O5DDDaM-2MDOaLIA.roa (hash: sV3LB/LLztAnzBUKJ+GuA5d1avYjjSDLs3qTXjAWTY8=) 31: pa6KPYvaq_R2X9p51V7KjGnIvyw.crl (hash: S69NlBxgqhuC/WAGmEzd+UcJ6Lf5gwqvLn9v0xvK7IU=) 32: sm69a1of4VH3HCsy-0sqDuhwIzU.roa (hash: 8727WV78dITMcNzq5RQ1LLEdVexkVkIeWpytRyS2zbQ=) 33: wg5GSd9-4eXD4qa6Tevh9Sf3120.roa (hash: lOWgnNb1GjigXPSpujjlZB4eZj9RrVG+FxMIGkr5cs8=) 34: wm8krqNL_HZSm8TEkZb1L2G0hTQ.roa (hash: MLpn4NR+obvpCFF8y28IbPWab+tdWOjBcwqbcQGurZ8=) 35: z3Q0oq3UWIqyfju6c0Dd-yu1gKk.roa (hash: d+AAUiPogRE9gXwOadifw5sWxUfwx9B97i6xeiwcXz4=) 36: z7RmVNBbCREUcp6M3H2zEBG4MtY.roa (hash: UKLD0ookdT771LXoeqD+iQ7cPBMEcvfL246UcYrkjt4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 19 May 2024 10:02:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:8b:27:3a:1b:24:a7:97:e9:f1:d6:2d:5c:99:52:05:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Validity Not Before: May 18 10:02:34 2024 GMT Not After : May 19 10:02:34 2024 GMT Subject: CN=3eebe63edebd1ac3b99a907c21062e77f7c85018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:53:64:3e:1e:e2:e0:d2:04:5b:54:0a:63:1e: e6:77:19:d7:17:26:41:bb:cc:4d:b9:ac:25:c7:10: 0a:34:cc:5c:ad:97:c4:a3:23:4b:22:81:ad:85:5d: db:41:ff:3a:f5:ee:fe:d0:04:15:40:e4:46:c0:41: 31:5d:c4:a0:a4:e4:c5:21:bf:02:1d:bc:b6:3c:56: f8:21:24:34:0d:32:34:cd:38:96:b3:7b:4a:51:1d: b7:38:09:92:00:d1:c7:1e:9b:d8:08:be:3b:b0:17: b6:a9:c5:00:2c:20:0e:93:ed:10:29:68:6c:c3:f2: 00:c6:f5:46:61:8d:1d:89:52:ab:96:52:dc:38:4e: 95:e2:59:de:bf:66:a7:f9:9a:2f:24:c3:e8:98:a1: 08:29:d8:b4:2a:1e:83:94:cb:03:5b:4d:f4:67:6e: b2:8d:d6:c9:33:5e:05:71:68:59:37:c9:bf:2d:57: 9e:80:ed:ee:33:dc:93:0e:ba:0d:c5:09:30:b8:16: 57:70:c1:66:ff:9e:97:23:d2:c4:a7:c3:b6:f6:88: 8c:fa:8c:9e:cf:75:f2:a9:61:15:a9:ad:f6:fb:0e: 1f:87:3b:54:0a:3f:a3:8e:ec:4c:65:db:bc:f9:8f: 13:cd:3b:4c:32:a0:fa:8d:1e:b7:9c:2b:a9:74:2d: e3:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:EB:E6:3E:DE:BD:1A:C3:B9:9A:90:7C:21:06:2E:77:F7:C8:50:18 X509v3 Authority Key Identifier: keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:12:ac:1f:be:2d:70:22:5b:89:cf:94:79:00:2a:fc:94:ec: 5c:43:80:46:a3:f4:4e:5c:52:a1:b7:04:f4:46:66:b3:9f:ea: ea:79:c1:a7:7f:dd:b0:4b:02:e9:0c:f2:4d:bc:f3:86:96:68: 30:ab:85:23:3e:88:bf:b8:02:00:25:5c:b1:9c:66:d4:d7:f8: f0:49:d4:f5:d1:fc:51:be:c3:ce:b6:6f:18:b4:4a:b8:96:c5: f6:a1:3c:21:b4:5a:5e:2c:3f:bc:f8:23:a9:b0:96:33:04:55: 81:02:2e:96:26:4b:0b:b1:e5:2b:f1:00:cc:e0:ae:4a:df:31: 15:4b:31:2b:b6:27:8d:7c:74:6b:bb:aa:2f:bc:5d:a9:88:06: 8f:6c:7f:95:47:7c:d3:59:ba:52:8d:90:64:d6:1c:dd:24:a6: 10:50:18:f1:e0:18:5a:8d:c6:dd:4e:73:69:a6:40:6f:08:02: 50:b0:05:71:2c:00:53:d9:30:f5:de:75:be:4b:5a:93:69:5d: 47:0e:30:d8:01:d2:30:60:a2:d4:f7:71:72:73:00:56:06:e6: f2:c2:3e:12:c8:45:b4:6f:78:40:b8:46:bf:23:f4:86:a0:d3: 51:f7:30:80:c3:da:43:fd:31:83:25:a0:0c:11:c9:39:66:30: eb:81:49:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY+LJzobJKeX6fHWLVyZUgXmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YWU4YTNkOGJkYWFiZjQ3NjVmZGE3OWQ1NWVjYThjNjlj OGJmMmMwHhcNMjQwNTE4MTAwMjM0WhcNMjQwNTE5MTAwMjM0WjAzMTEwLwYDVQQD EygzZWViZTYzZWRlYmQxYWMzYjk5YTkwN2MyMTA2MmU3N2Y3Yzg1MDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlNkPh7i4NIEW1QKYx7mdxnXFyZB u8xNuawlxxAKNMxcrZfEoyNLIoGthV3bQf869e7+0AQVQORGwEExXcSgpOTFIb8C Hby2PFb4ISQ0DTI0zTiWs3tKUR23OAmSANHHHpvYCL47sBe2qcUALCAOk+0QKWhs w/IAxvVGYY0diVKrllLcOE6V4lnev2an+ZovJMPomKEIKdi0Kh6DlMsDW030Z26y jdbJM14FcWhZN8m/LVeegO3uM9yTDroNxQkwuBZXcMFm/56XI9LEp8O29oiM+oye z3XyqWEVqa32+w4fhztUCj+jjuxMZdu8+Y8TzTtMMqD6jR63nCupdC3j2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD7r5j7evRrDuZqQfCEGLnf3yFAYMB8GA1UdIwQY MBaAFKWuij2L2qv0dl/aedVeyoxpyL8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEt NDE2Zjg1ZWUyMzdiLzEvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEtNDE2Zjg1ZWUyMzdi LzEvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARBKsH74t cCJbic+UeQAq/JTsXEOARqP0TlxSobcE9EZms5/q6nnBp3/dsEsC6QzyTbzzhpZo MKuFIz6Iv7gCACVcsZxm1Nf48EnU9dH8Ub7DzrZvGLRKuJbF9qE8IbRaXiw/vPgj qbCWMwRVgQIuliZLC7HlK/EAzOCuSt8xFUsxK7YnjXx0a7uqL7xdqYgGj2x/lUd8 01m6Uo2QZNYc3SSmEFAY8eAYWo3G3U5zaaZAbwgCULAFcSwAU9kw9d51vktak2ld Rw4w2AHSMGCi1PdxcnMAVgbm8sI+EshFtG94QLhGvyP0hqDTUfcwgMPaQ/0xgyWg DBHJOWYw64FJqQ== -----END CERTIFICATE-----Generated at Sat May 18 14:01:24 2024 by rpki-client on console-ams.rpki-client.org