$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft File: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft (raw, json) Hash identifier: xOLIv0eh0qPPfLz573L0UEoo+k7GG57Sk7ka3MGgkq4= Subject key identifier: C5:7B:4D:05:57:81:1F:9C:38:6A:D9:7E:1C:04:7B:37:87:34:90:1E Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Certificate serial: 018F896D99A6D997BA4738336794BEBA5B6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft Manifest number: 038B Signing time: Sat 18 May 2024 02:00:12 +0000 Manifest this update: Sat 18 May 2024 02:00:12 +0000 Manifest next update: Sun 19 May 2024 02:00:12 +0000 Files and hashes: 1: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl (hash: JqxuY90Y2ur2s4SUGxiXgmAQWznDmqiahF8zTyTY8Js=) 2: 1AQWjSnm0WhJ6F0b5y-3-DLej7o.roa (hash: GLxy2r6SeeNieaOiiANfcBtZOgBNio3BYpARbVg+yhI=) 3: 4xpXR_Etd35vjdJ3Q8jnYYRjNUg.roa (hash: UkJKgfmJnEMd5ritlhT5EU8VRL4jVhV5OjU6kdyjBkA=) 4: BqcxuDuI2B6f7EEKvuso7Jsymjc.roa (hash: sLBjfBF0Pa5utb9h4prDObqYo1SOjAjHB/5ZGuPF+i8=) 5: DNfhm4AoJ40rzATCHrfWx5qbol0.roa (hash: l+6KwIgtURszIE9NQBLBTuBUzHWhnZpoziHxXdpJlmQ=) 6: EfSkaecWhU-Hgu4kIWCPtGdSJVE.roa (hash: u5+swR3QS49TVAA33jxv+/cMSra0OXIA/Mb7jN07Dx0=) 7: G63dqKGORJjOoCTaaVOPI0ic_XA.roa (hash: SZMVslfVEQU5kpNbf/3gShkRw7lPcQ+kER2H6T4b+G8=) 8: IewY5gt-BXk79aAr-j7G3kxl2JI.roa (hash: rWUhbjRAPxVD2ahfwoAxcbM8NB05VAmgDogIguhF62k=) 9: ToF5l8DCExkQcY0QHp9NExWH5RA.roa (hash: P5+ykW4ltz6S9olm6Oh/wv18eyEbePulWULbAVEpMOI=) 10: _JvR92s1AwoOGnI_1z7n_FXOqGQ.roa (hash: E9JeDAhQUemGUxkF3Js2xTdkvgfuGHoTWrhW/FclmfM=) 11: dFYPzOgdi-o0CqAiwUEDqujH8jM.roa (hash: wnjpZzhWqA5Sarwurpd6l20OKLL/O3LvkhvptyJeruY=) 12: hTPX0wueltyAuOUE-mUMlpUU5hs.roa (hash: 5veCrDVfQmcZpw+3H03nX6okbEW3rLXK5nAbfuV9Ijs=) 13: jzXTPTSD_K215cMwmji9Zln3piA.roa (hash: dwRwG+tHI3ydjTnXB6lcJhROeJNPUuHHKZQu6XT1Nu0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 19 May 2024 02:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:89:6d:99:a6:d9:97:ba:47:38:33:67:94:be:ba:5b:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Validity Not Before: May 18 02:00:12 2024 GMT Not After : May 19 02:00:12 2024 GMT Subject: CN=c57b4d0557811f9c386ad97e1c047b378734901e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:82:b9:b3:1e:b2:1d:11:2d:2c:6d:42:29:8c: 49:82:2a:21:53:6b:1e:43:6e:60:62:89:17:17:d9: da:63:c9:ee:de:0a:11:da:41:57:72:d1:0c:5e:41: 32:05:79:8e:1e:7a:a2:ae:22:8d:38:30:cf:9f:fd: b3:8e:70:45:a8:a3:04:3d:55:fe:5d:f6:bd:e3:0c: c0:ba:95:fd:59:fb:92:44:6c:d9:0c:12:e0:2b:2d: 32:fa:5c:b6:ab:19:f1:4f:90:54:8b:b7:61:09:8a: 5c:3a:ed:36:85:61:a9:97:64:02:c6:43:94:52:09: e8:af:a0:7c:d1:b6:a4:2f:7c:32:f7:4f:64:01:e3: 3e:a2:fe:44:2c:c4:5a:78:3d:55:af:0f:a9:f0:24: 9d:a6:83:ae:63:bd:35:7a:c8:bc:c6:20:50:ff:5d: 98:a5:c0:13:66:69:8c:d8:50:a6:0d:3c:95:2a:f2: 29:41:f2:61:ab:d5:8a:7a:b5:9c:39:b1:ef:a5:92: 39:d1:b4:17:b8:7d:e6:65:0c:93:26:87:cd:de:07: 42:73:f6:8a:15:f0:aa:d1:44:08:38:4a:6c:65:6d: ee:98:c3:72:cd:9d:32:a0:5e:6d:45:52:42:ea:9c: fb:1c:60:f3:85:ef:b9:97:bb:a6:e1:f6:7b:5d:cc: b4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:7B:4D:05:57:81:1F:9C:38:6A:D9:7E:1C:04:7B:37:87:34:90:1E X509v3 Authority Key Identifier: keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:16:aa:b9:1e:5a:ed:4e:56:d7:89:79:64:22:56:e7:30:ed: 30:c8:1a:33:9f:a1:c7:1f:8f:01:f9:3c:d5:0e:c8:8e:ef:87: 49:d7:ba:f2:4c:a8:60:79:4f:7a:11:e4:07:fb:39:d2:71:e0: 7d:40:af:92:9d:6a:c5:05:0d:7a:9f:e5:2b:dc:b8:20:48:96: f2:69:f6:42:8c:a9:28:9b:f3:fa:56:ba:dc:88:15:3a:11:97: b4:01:05:b8:b8:cb:a7:c9:b9:76:a3:5d:bb:fa:21:6e:99:0b: 1c:09:00:0f:c2:99:b0:8e:fc:6e:46:0e:1e:85:11:09:a6:11: d7:f9:b9:3d:34:88:66:49:97:f5:16:ff:41:e2:6e:47:c8:c3: 1f:72:9d:b5:62:33:43:89:46:f9:38:7a:71:0f:12:73:4e:d7: 33:a3:1d:46:f4:2e:a2:4b:2c:6f:aa:44:c3:1e:02:43:22:4f: 9e:33:2c:8f:7e:18:f4:76:fa:bb:e2:07:77:e6:e3:90:18:f9: 2e:a6:0f:dd:0a:5e:2b:ec:a0:82:d2:12:ea:fa:b8:01:fb:d6: a4:8b:a7:f9:93:a0:f8:48:a0:0e:64:f7:90:19:0e:95:56:85: 48:74:15:ab:08:e6:e2:27:84:38:6f:05:73:0b:36:24:9a:89: 3b:ee:56:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY+JbZmm2Ze6RzgzZ5S+ulttMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZTk3MDMzYTM2YWE5YmNjMGMyZjE2N2U2MjBkN2NhMTQ5 M2NiZWEwHhcNMjQwNTE4MDIwMDEyWhcNMjQwNTE5MDIwMDEyWjAzMTEwLwYDVQQD EyhjNTdiNGQwNTU3ODExZjljMzg2YWQ5N2UxYzA0N2IzNzg3MzQ5MDFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YK5sx6yHREtLG1CKYxJgiohU2se Q25gYokXF9naY8nu3goR2kFXctEMXkEyBXmOHnqiriKNODDPn/2zjnBFqKMEPVX+ Xfa94wzAupX9WfuSRGzZDBLgKy0y+ly2qxnxT5BUi7dhCYpcOu02hWGpl2QCxkOU Ugnor6B80bakL3wy909kAeM+ov5ELMRaeD1Vrw+p8CSdpoOuY701esi8xiBQ/12Y pcATZmmM2FCmDTyVKvIpQfJhq9WKerWcObHvpZI50bQXuH3mZQyTJofN3gdCc/aK FfCq0UQIOEpsZW3umMNyzZ0yoF5tRVJC6pz7HGDzhe+5l7um4fZ7Xcy0hQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMV7TQVXgR+cOGrZfhwEezeHNJAeMB8GA1UdIwQY MBaAFNPpcDOjaqm8wMLxZ+Yg18oUk8vqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMt ZGJmOWQ0MWYxNzk4LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMtZGJmOWQ0MWYxNzk4 LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnhaquR5a 7U5W14l5ZCJW5zDtMMgaM5+hxx+PAfk81Q7Iju+HSde68kyoYHlPehHkB/s50nHg fUCvkp1qxQUNep/lK9y4IEiW8mn2QoypKJvz+la63IgVOhGXtAEFuLjLp8m5dqNd u/ohbpkLHAkAD8KZsI78bkYOHoURCaYR1/m5PTSIZkmX9Rb/QeJuR8jDH3KdtWIz Q4lG+Th6cQ8Sc07XM6MdRvQuokssb6pEwx4CQyJPnjMsj34Y9Hb6u+IHd+bjkBj5 LqYP3QpeK+yggtIS6vq4AfvWpIun+ZOg+EigDmT3kBkOlVaFSHQVqwjm4ieEOG8F cws2JJqJO+5WBA== -----END CERTIFICATE-----Generated at Sat May 18 06:00:09 2024 by rpki-client on console-ams.rpki-client.org