$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft File: 8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft (raw, json) Hash identifier: 0UYol9a2LkyNPi2mE4qnW1zov7VllalOnAlO/Ucc0gg= Subject key identifier: AC:9C:A7:8F:D8:4B:C9:E8:DD:3F:AD:47:D3:87:D1:A7:FC:9C:71:D4 Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d Certificate serial: 018FB75984973E839CACA2DBB6596EDF9FD5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft Manifest number: 11CB Signing time: Mon 27 May 2024 00:00:48 +0000 Manifest this update: Mon 27 May 2024 00:00:48 +0000 Manifest next update: Tue 28 May 2024 00:00:48 +0000 Files and hashes: 1: 1X2qtgxnmmOfdn-qloP6eXdmqdg.roa (hash: Se98ewyQgmmMVNeTg11bzZRjAgOJuLxjRH67MAtTkMQ=) 2: 4YZ678VGCn5TLitDTnpaLf_QcWo.roa (hash: GllIYoM7z8h0P+oGARdumljTcTkRMxsSck2jM3LoHA8=) 3: 4uEOUhhiRQCIdO48q3JUxHAMSc4.roa (hash: ExqhK0JCQtDvYdcp0o7N7bHCo196yGJ5+FLN868iaZU=) 4: 6ogwrwNJrkqjuIafO-iZiuxQKy4.roa (hash: jRbXd3hhqanERuhyFJeD8fOlmmmCJzJvo9if3qfkJEQ=) 5: 7DQjy6GjO_v-dxxYWRKiJnuE2J4.roa (hash: Dq5wE9pkxcXfYvzUSrs7uSHYcV8TPmnLrlj21DGnPk0=) 6: 7NduY5UhmzX6DjNOXjTLJIO3wvU.roa (hash: Nu1xlptRF2TG7a8GwcSPEipHpD258KaGn514XwICPf0=) 7: 7XoDnpfHTvHQ84QzS4cQOXeZwt0.roa (hash: Xqa90QF4NZlpvriIMtb97TTxuisTq6/WBVIgKSbnO3M=) 8: 8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl (hash: fGSog3Wo1/EgBeiW6BrZNuIzc3j3SJqqKA7UDE9WuPI=) 9: AP-09ETJefsH8Ta9QqPWYUU5PmU.roa (hash: aZO43Pn5PHTgAZzx/QahgkHeQnWRzCcr0di09ZAyuyk=) 10: BaG2dMQPfw6EjBzDZBg3knR7AKI.roa (hash: QVNCLzcs2Dqg4/X7CGsrmr49DtVyNBviWJ28rjZVNXU=) 11: C6xsqHbaUkG8ngU6XgnUl1UYUcw.roa (hash: UDhndT/4JA4c7NIOWmeMr89MD9Pic9VRxKBwjH88QEw=) 12: EKFwAmc-wvXZDYtsNft7ssGS1ck.roa (hash: VSLqavS0gfUQEgJo3uBiNSNzuKDZR57MCxbmi34EjrE=) 13: FSOFwv9IB_KiB3Dn7DNS796lMZY.roa (hash: iN4GifpjJb9kJuiExdST/NDBe02bICVeW0pEkfDcs6A=) 14: JbuY4dQyCthIuyah31HgOSY_3z0.roa (hash: MeX6gf8ICBq2AkvK274Ef+JayPCIx3fciKDpF3IQ/G0=) 15: Zxc2kLjmT4u2aAcACmgXdo-KdH4.roa (hash: HrOWP7S7cZmmWSnJu3McwbePUfvwl8eCy4U7D5jJDHg=) 16: _-MRcctfyARGBxH1LYN5u2KhV9k.roa (hash: +8c4ryp0aBgzYoY4z2q6/gdn7vE0SvjuZ3RmbBPqW/8=) 17: aay2zQj--0XzW5DouAaQJTuRwkI.roa (hash: n/FtB8f5aBMT29aXOqKLC1m3b2ouuAS5PbGq0CbOL2I=) 18: bo20zRcNK4gDpQFqmq493cs7Iws.roa (hash: BMW/aozE9QHU8Sli24iHI58RaAOI11qJFq4gtCIiqAE=) 19: iGLxRsu32lM53Rg3l29j48GyRxw.roa (hash: mZVjk2wGTYW5EOLeB6dfIwHx5Tkai9iNA9sWg4KyozU=) 20: kVHznud5bQMID86lyqTTjYSIYWw.roa (hash: tgCOqjjCAD1wCYOkFnwEhKI2RRvfyx9WY4KoB7eHE/g=) 21: mGrQxZz2w6XrpnOO9skASmwoRP4.roa (hash: ZffqA6bhiqs5voqqwTgwYLNPHyRdJSvPaSDKjUwq8vs=) 22: pmsv-rMV2DGwQu_vRfVouwc6fjo.roa (hash: CEdic76nmuR8YEeVXSjwzunjNGfLWm4CFGnQJYq52/8=) 23: smdHFipgeUTxTAMR6DVQPDadoos.roa (hash: IwZTaeZnbz3E1pzkMvJw9+Z98y7rgNwmvByTLlUEUXs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 May 2024 00:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:b7:59:84:97:3e:83:9c:ac:a2:db:b6:59:6e:df:9f:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d Validity Not Before: May 27 00:00:48 2024 GMT Not After : May 28 00:00:48 2024 GMT Subject: CN=ac9ca78fd84bc9e8dd3fad47d387d1a7fc9c71d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:39:13:3f:70:ce:be:91:d8:e4:25:cc:79:86: f7:3d:ad:33:4c:1e:b2:f7:b8:50:88:16:10:eb:5d: e4:0c:64:82:16:70:3b:e0:9b:d6:d7:ff:65:6b:13: 3d:d4:27:78:51:ee:da:3a:4d:7b:31:8d:6d:2b:f5: 9c:11:61:25:07:7f:a8:bc:bd:f2:15:b2:f4:df:47: ab:ae:28:43:74:01:45:32:a4:5f:89:a7:f7:73:70: 3b:ae:dd:ea:56:98:7d:18:9e:db:38:fe:8e:ed:c4: 95:3c:20:55:5e:5b:63:8a:57:ff:16:ba:1d:33:f9: 80:24:c1:bf:ad:eb:7e:8e:5f:24:9e:91:45:d3:79: d1:ea:48:da:32:f8:4a:4e:60:60:38:3f:d6:68:8a: e6:c3:9f:3d:16:ba:79:b2:4d:92:69:6f:9b:bb:c1: cf:eb:3b:18:01:e2:3d:05:f7:89:35:71:0d:e9:e0: 57:3f:af:b8:c3:df:22:cf:43:f9:a9:bc:80:45:92: af:18:43:12:be:7c:a2:d2:6a:12:fa:84:4d:be:1b: b8:ac:f3:08:55:20:46:7b:a1:74:4d:2d:7d:02:32: 9a:d3:3d:39:e0:20:5b:27:98:5d:60:6f:4b:d6:ed: 56:fa:ba:dd:da:e8:87:9f:84:26:a4:eb:55:56:60: 83:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:9C:A7:8F:D8:4B:C9:E8:DD:3F:AD:47:D3:87:D1:A7:FC:9C:71:D4 X509v3 Authority Key Identifier: keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:62:bb:d1:94:f0:9e:e4:e7:73:ff:63:85:87:58:10:ac:0e: d6:dc:50:75:dd:43:b2:65:a3:2b:b5:11:18:35:3b:73:35:87: 38:26:78:65:31:24:82:9c:a2:e5:2d:86:b7:62:c6:96:3d:d2: 04:1d:9a:81:b9:bd:9c:df:35:9b:64:a2:b2:33:3f:6e:90:ce: be:6a:99:b3:58:d3:a4:49:42:e9:4f:7e:b1:3a:18:af:ba:20: d4:cd:92:80:91:23:00:66:8d:69:d7:cc:72:0f:46:9f:18:a9: 15:01:66:02:b6:81:d1:75:6f:6b:0b:ac:9d:df:7f:bb:ed:f3: 7d:03:e6:27:15:3c:59:27:66:d6:fc:9f:69:8b:9a:fc:23:66: c2:a1:ed:60:36:db:b6:b7:9d:5d:98:a3:e9:cd:95:9f:0a:bb: 81:2e:6b:04:2e:bf:cd:e8:db:28:ae:75:db:29:5b:f1:70:73: 1d:58:fe:67:8c:9a:f7:a8:67:c8:34:16:9c:18:84:51:ad:0d: 3c:5f:0f:fd:bd:b9:04:1b:7e:d0:60:a1:f1:68:0a:b1:e8:ab: b6:8e:10:05:46:04:80:e9:3a:06:0a:c3:69:7d:c1:41:d1:e5: 70:49:b9:fa:25:f0:b7:e2:ac:89:da:82:fd:9f:38:f6:10:26: 21:b1:c3:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY+3WYSXPoOcrKLbtllu35/VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZGQ4MWE4MzNkOWIwNDNjN2ZmZDYzNWE1OTg3ZjUzNjk3 MTE4MGQwHhcNMjQwNTI3MDAwMDQ4WhcNMjQwNTI4MDAwMDQ4WjAzMTEwLwYDVQQD EyhhYzljYTc4ZmQ4NGJjOWU4ZGQzZmFkNDdkMzg3ZDFhN2ZjOWM3MWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzkTP3DOvpHY5CXMeYb3Pa0zTB6y 97hQiBYQ613kDGSCFnA74JvW1/9laxM91Cd4Ue7aOk17MY1tK/WcEWElB3+ovL3y FbL030errihDdAFFMqRfiaf3c3A7rt3qVph9GJ7bOP6O7cSVPCBVXltjilf/Frod M/mAJMG/ret+jl8knpFF03nR6kjaMvhKTmBgOD/WaIrmw589Frp5sk2SaW+bu8HP 6zsYAeI9BfeJNXEN6eBXP6+4w98iz0P5qbyARZKvGEMSvnyi0moS+oRNvhu4rPMI VSBGe6F0TS19AjKa0z054CBbJ5hdYG9L1u1W+rrd2uiHn4QmpOtVVmCDowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKycp4/YS8no3T+tR9OH0af8nHHUMB8GA1UdIwQY MBaAFPDdgagz2bBDx//WNaWYf1NpcRgNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUt MDQ2ODA0MjQ4NmRjLzEvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUtMDQ2ODA0MjQ4NmRj LzEvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjmK70ZTw nuTnc/9jhYdYEKwO1txQdd1DsmWjK7URGDU7czWHOCZ4ZTEkgpyi5S2Gt2LGlj3S BB2agbm9nN81m2SisjM/bpDOvmqZs1jTpElC6U9+sToYr7og1M2SgJEjAGaNadfM cg9GnxipFQFmAraB0XVvawusnd9/u+3zfQPmJxU8WSdm1vyfaYua/CNmwqHtYDbb tredXZij6c2Vnwq7gS5rBC6/zejbKK512ylb8XBzHVj+Z4ya96hnyDQWnBiEUa0N PF8P/b25BBt+0GCh8WgKseirto4QBUYEgOk6BgrDaX3BQdHlcEm5+iXwt+KsidqC /Z849hAmIbHDAQ== -----END CERTIFICATE-----Generated at Mon May 27 08:47:34 2024 by rpki-client on console-ams.rpki-client.org