$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft File: Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft (raw, json) Hash identifier: FgmiQ/luYt0MHcRR7OeNmQjezaeJHX6xL2PrSWWUhkc= Subject key identifier: 06:C9:98:F5:CE:C4:D8:72:0A:F2:9C:1B:0C:19:61:33:01:73:3B:18 Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65 Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65 Certificate serial: 018F91CBEEB107717ED6E92C844A9036DD66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft Manifest number: 04B8 Signing time: Sun 19 May 2024 17:00:12 +0000 Manifest this update: Sun 19 May 2024 17:00:12 +0000 Manifest next update: Mon 20 May 2024 17:00:12 +0000 Files and hashes: 1: 4gxgACqclZuUFHbUdVD24UYxqxc.roa (hash: R8/eIA99SQCHlr6jRMCBdYs8Rpb0NXbbXc80B0uAXvo=) 2: 5NTDG_4DonHS7H3yvxy4PxjkwQ0.roa (hash: ZSFDJk1ZqWOAdRiURj7xQ+/OrW7kArTE55P4V3G1IuM=) 3: B5ka81XCk3sqeF-cSGSKJEUALjQ.roa (hash: T8X/Nj0s9TmzSqpU2PmPXcxoVu2LYyRgseF63QtrYVs=) 4: Gc4GFjRqJA13brQpyXI8Ft02P7I.roa (hash: U5SsZ3oURLkpSVdEKAm/d3hn7DJtIkISdceFjkeiKhs=) 5: I8G_eh-rVpx2oZHpNhQiXlPUS4I.roa (hash: iZLWupNZlFmxZVH6DAs8FckGutkB39c7rh7iVjxodnE=) 6: JoK8-2dNhHO8iSymI04tgCQAul8.roa (hash: i1BCI4iwpKSc5N25CyevS7ZjL/sorpZ/bXCKM6onpYk=) 7: JruvBhM4J4tY_yal2sOi9uiohWo.roa (hash: pkIbENcfT1xlfldgMckJ4v0WmR5fGNlbUQHT/vZ3hF0=) 8: KhAMfCR_qg_kB3qGegGpw1fiMvY.roa (hash: RF7nCIJh9Rzy3yaCAcVqyFzlLPp0ly9b5rdcO356Q5E=) 9: V_rux9A-K76_L-5JIgrFPqL8XhU.roa (hash: vvKWZ5yhRpw1/9gLRie+5q9Ug9kB9CxhwuZWKvYSL3s=) 10: Xy68efYT43YYyTG5n_ivqvrGZTg.roa (hash: Feqyk8g0EJPf9oZVmbGuss7ki+zO20zwdPj2Q1yNkuI=) 11: Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl (hash: jBPZpQoUATZHY79iPOUhnmswXMEjZRSWxqMnYenXbPU=) 12: fFkfeFBVgarLLt3vR_YqviEPlwE.roa (hash: SZXzpXI1TB0+1TxBE5BCrlP3VWQt2R0ldC8D3kqiVIc=) 13: mvYLp00a8AXi4GG7BuObnO2gRFo.roa (hash: Ng/CTbsUCxAk+VMRSU99baUVq8CzrRJjHp7atIsU7WA=) 14: omMqyJwb2TMKUg_d6AxeOiep24o.roa (hash: jqe4xwEnEXd+YYlvPtVux5Ur9EGE7a+JqP42x1J+kuM=) 15: vIxEo8ASP1DuGkv7LKCBVcKyIK0.roa (hash: FarHIP/UNrasIdkcg4CLzWDPqXnUpGSB5ZzmzeGiLOk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 May 2024 14:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:91:cb:ee:b1:07:71:7e:d6:e9:2c:84:4a:90:36:dd:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67499595a65aab0b53768def08091e31061e9e65 Validity Not Before: May 19 17:00:12 2024 GMT Not After : May 20 17:00:12 2024 GMT Subject: CN=06c998f5cec4d8720af29c1b0c19613301733b18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:81:91:1f:8b:e4:83:b8:69:58:ab:5b:44:8b: 7f:e4:b5:b3:f4:69:1f:8e:9e:61:ca:c3:e4:bc:d8: b8:a9:04:cc:f7:8d:eb:c1:13:15:00:3b:9f:e9:0a: 53:c6:fc:30:62:fd:bf:c8:39:45:5b:b0:7f:85:70: bf:a0:d9:14:35:75:f8:47:27:3e:3b:77:0d:95:d0: 33:39:16:76:98:d4:96:4a:2a:ea:e2:90:d5:f5:08: 1c:de:85:fe:ab:95:d3:81:3b:0d:21:5a:a6:3f:d1: e2:3b:33:15:04:f1:9d:04:9c:5d:ae:e8:1d:8b:93: 93:9c:fe:4f:88:d0:82:99:09:fb:d9:b5:f0:94:cd: 6f:d5:c4:e3:d7:6f:18:97:55:15:2a:88:98:e9:2e: b3:98:2c:7d:9a:36:c3:a7:ba:34:21:ba:96:6e:26: 81:09:38:3d:0e:c6:a2:41:47:83:09:51:af:eb:08: 56:36:2b:e7:7a:2b:dc:2b:68:a3:80:d0:ac:51:97: 27:5c:f2:4d:ab:8b:e3:52:6c:cf:3e:fe:ee:f6:36: 19:8e:80:ea:86:78:7b:a0:a7:ef:a9:93:a8:58:7a: 9d:59:3c:72:6a:90:4a:0d:da:60:76:28:24:59:6b: 82:2d:06:4f:a6:75:8e:57:3c:e1:2a:77:14:90:da: 0b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:C9:98:F5:CE:C4:D8:72:0A:F2:9C:1B:0C:19:61:33:01:73:3B:18 X509v3 Authority Key Identifier: keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:d5:ac:23:20:5d:f7:92:2e:b6:2c:08:57:4d:92:f8:1e:0f: 36:43:b7:a4:a7:ea:a4:ce:17:33:22:ec:57:21:4d:82:d7:fc: 1a:f8:41:ab:a8:b2:36:21:06:d8:cb:8b:9f:3b:5e:3c:98:46: eb:b9:dd:27:64:d6:4f:59:8a:ea:35:20:70:2d:b0:08:e9:ac: 2b:4c:f2:9f:91:fb:c9:2c:d1:a4:5f:53:73:22:50:9e:07:f0: 7c:8e:54:d5:ff:8c:31:fb:80:f0:d6:23:03:c3:4d:33:2a:f1: fe:d0:f3:97:5c:26:21:77:17:0f:a4:1f:37:27:8d:42:3b:cd: 69:41:18:0e:be:bb:f9:09:28:fa:5e:a7:99:34:67:48:b6:35: d9:dd:0e:3b:2a:48:fd:e9:6e:bb:1e:fe:76:32:9a:27:75:86: 9f:53:f6:52:54:78:c0:5f:29:b7:cd:d4:e8:ea:96:37:09:0c: 87:e2:f2:c0:5c:a5:28:13:81:a9:48:74:50:d7:8b:1a:89:5c: 6f:80:10:1d:6f:be:73:80:c0:71:de:0e:11:6d:39:a1:65:1a: 80:8a:41:68:76:b5:13:17:8b:b2:91:b3:11:a1:51:40:e3:92: ef:1f:7b:8a:8d:9c:45:7e:b7:2c:d8:eb:43:0d:0a:3e:df:1d: 4c:48:63:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY+Ry+6xB3F+1ukshEqQNt1mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NDk5NTk1YTY1YWFiMGI1Mzc2OGRlZjA4MDkxZTMxMDYx ZTllNjUwHhcNMjQwNTE5MTcwMDEyWhcNMjQwNTIwMTcwMDEyWjAzMTEwLwYDVQQD EygwNmM5OThmNWNlYzRkODcyMGFmMjljMWIwYzE5NjEzMzAxNzMzYjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoGRH4vkg7hpWKtbRIt/5LWz9Gkf jp5hysPkvNi4qQTM943rwRMVADuf6QpTxvwwYv2/yDlFW7B/hXC/oNkUNXX4Ryc+ O3cNldAzORZ2mNSWSirq4pDV9Qgc3oX+q5XTgTsNIVqmP9HiOzMVBPGdBJxdrugd i5OTnP5PiNCCmQn72bXwlM1v1cTj128Yl1UVKoiY6S6zmCx9mjbDp7o0IbqWbiaB CTg9DsaiQUeDCVGv6whWNivneivcK2ijgNCsUZcnXPJNq4vjUmzPPv7u9jYZjoDq hnh7oKfvqZOoWHqdWTxyapBKDdpgdigkWWuCLQZPpnWOVzzhKncUkNoLLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAbJmPXOxNhyCvKcGwwZYTMBczsYMB8GA1UdIwQY MBaAFGdJlZWmWqsLU3aN7wgJHjEGHp5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTct MzU1MDgwNDE2NTJkLzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTctMzU1MDgwNDE2NTJk LzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR9WsIyBd 95IutiwIV02S+B4PNkO3pKfqpM4XMyLsVyFNgtf8GvhBq6iyNiEG2MuLnztePJhG 67ndJ2TWT1mK6jUgcC2wCOmsK0zyn5H7ySzRpF9TcyJQngfwfI5U1f+MMfuA8NYj A8NNMyrx/tDzl1wmIXcXD6QfNyeNQjvNaUEYDr67+Qko+l6nmTRnSLY12d0OOypI /eluux7+djKaJ3WGn1P2UlR4wF8pt83U6OqWNwkMh+LywFylKBOBqUh0UNeLGolc b4AQHW++c4DAcd4OEW05oWUagIpBaHa1ExeLspGzEaFRQOOS7x97io2cRX63LNjr Qw0KPt8dTEhjrw== -----END CERTIFICATE-----Generated at Sun May 19 20:38:25 2024 by rpki-client on console-fra.rpki-client.org