$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft File: j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft (raw, json) Hash identifier: EfXlRIiCMWtboKPokhELDg4gP4766Qpl/EFDOqv2VP4= Subject key identifier: 3C:D7:C3:3F:BA:79:F1:9F:D9:80:1D:91:3E:84:49:EA:2A:20:28:A9 Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e Certificate serial: 018FB7FE5E1F6D5B3F648BC028E1F38297DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft Manifest number: 0D15 Signing time: Mon 27 May 2024 03:00:51 +0000 Manifest this update: Mon 27 May 2024 03:00:51 +0000 Manifest next update: Tue 28 May 2024 03:00:51 +0000 Files and hashes: 1: 1-vIii3jAJIDZG2-jCM96LAXAqqA.roa (hash: rMde5jdYT4tZw/3L5jq+5s+4J2tkn9Crnmi5p4kKYDY=) 2: 3XZ4vQmmWDsiBHdfPDUWDY6jlfU.roa (hash: Jr8jQtbMv+cjaUftHkFQsZkWWfTIrWxZLBFFBF13/WE=) 3: 3mERRw7E5XUgIBH_5pcwphPvXvk.roa (hash: r2r5lkOmQe2LFCismkyuTDNf9ACLsbZo52n6p6bb6Ho=) 4: 7R56_1SMoDLDij3kiNZrmfbQydU.roa (hash: 9tDCQRGfj/ixWua0clGoXTxSGSck22qxVLGw0KSNpkQ=) 5: G-tJbQNhYWi2bxA3l-1ypOyN93U.roa (hash: mk2EDR8kJOQ2u8TvlylIA/NlXKa28TNZvc6ll9JkDF8=) 6: _9Ca-4A_FKGdBTstsPnJdb4wD6s.roa (hash: nxUPJN6G3qyO9bhrzgu4OuPnGyTw6aqQCJ2+v4MntLU=) 7: d4g2CMfOesXTJ0JvWmzOGDh8mdc.roa (hash: Nxu3IGAHcFFubg7sVCJfgI7hmeWFCqQy9MAlrxL8bvM=) 8: dCrh_dPltT4bIq_iR7Oi9-T8VyE.roa (hash: VCVEZSuPwgdkGTUbQ03XEBWB8NevbIv3zBH00VcKa+Y=) 9: dTniicGpoRuThTZ6OxASv_yioIA.roa (hash: jmndkyBYe7wZ4qXr7bsaADZGa/wXnjj+CRpq+6Ozl+w=) 10: hRYV0IPTQbNWD03hYfgdgWeIlTg.roa (hash: cJBTfGQaT4WYtQ4nC184al31pcjRU+v5UJMXU8e0leQ=) 11: j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl (hash: V65v0WKpc006Sgmg6nqAfW50sOWBGv2cXhT7oC/lXdQ=) 12: laN9fAI54uKEgXiclySC4U5bPJE.roa (hash: 6C0fwRXHJnOf0i/lYAsmr5HzbBYLJWo8IfBTrCPj7BA=) 13: py7CaC981pUoomvLlluEXO_Xk1M.roa (hash: +QLUFNXRP2Ovm+NQaSnHacUtIA/gxgY+3GggSsOhw5Q=) 14: qGPZvfRNnWmr00eepmaYJPMjmDU.roa (hash: Xdg6V4RatXkBGaTy6MJnwG883/Tq5Hs2kfUyBiAMmiY=) 15: zd4oqZevcPI8RGzQuGHNrPLplmQ.roa (hash: PhzaY2rpouGuwAydj2VvJjEzg8U6QoNbRR9fK1kvn90=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 May 2024 02:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:b7:fe:5e:1f:6d:5b:3f:64:8b:c0:28:e1:f3:82:97:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e Validity Not Before: May 27 03:00:51 2024 GMT Not After : May 28 03:00:51 2024 GMT Subject: CN=3cd7c33fba79f19fd9801d913e8449ea2a2028a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:07:0b:80:b5:7a:94:15:fa:d3:55:7f:7e:c7: 30:54:39:48:27:50:1f:e5:ee:e1:d7:c3:81:1c:53: 9d:e5:e9:77:48:e0:1f:a0:46:aa:06:84:53:06:c4: 70:a9:5d:87:c4:5e:41:d6:32:3a:14:fc:f4:b2:b9: f0:1b:50:d0:68:6d:f2:b6:91:c2:9a:a3:24:ee:56: aa:05:37:d8:02:69:d8:99:31:2e:d7:04:71:17:01: e8:17:c8:f5:fb:4b:8d:c1:69:c5:b7:60:a5:01:c9: 40:ef:99:da:37:df:f4:de:d0:3a:93:f9:31:8c:03: c6:85:77:b5:b9:15:8b:2e:aa:5b:f3:bd:f7:4f:84: ee:d9:24:7c:2a:72:b5:c7:e0:6c:8d:0b:96:3e:b5: b4:e7:07:6f:7c:2a:9e:d1:69:19:b8:04:cc:40:c0: fd:9b:db:28:11:59:83:cb:da:d3:67:57:d4:ef:05: e6:94:2c:a2:42:fa:cf:5f:2e:48:a3:2b:51:cb:9a: be:34:58:ea:f8:5a:91:ca:78:81:1d:8d:e0:fd:a7: cb:91:38:69:b5:50:a3:90:80:0e:8d:9b:1c:58:a1: f3:ed:de:52:52:37:e8:86:e2:98:4c:f6:47:2f:08: d8:18:1f:2d:90:a1:a5:bc:78:0f:1f:e9:9d:f0:e5: 6f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D7:C3:3F:BA:79:F1:9F:D9:80:1D:91:3E:84:49:EA:2A:20:28:A9 X509v3 Authority Key Identifier: keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:8d:5d:8a:55:06:c3:50:e7:90:0e:70:15:8c:0b:fa:cc:ea: 1d:fd:b4:ae:3c:a2:a2:3d:81:73:43:95:46:90:79:34:ae:6f: c5:dc:25:11:04:91:f2:82:19:fb:c7:dc:70:9d:cf:cc:f5:b3: af:1c:e2:c5:95:4f:13:e1:67:8e:fe:f2:a7:8d:8a:a1:96:81: 55:6f:80:85:dd:d7:5e:01:20:f1:4b:ce:d5:b2:b6:3c:91:7a: 04:07:e4:ca:d5:ce:65:78:59:9e:9e:d1:9f:38:38:0e:98:64: 9b:bb:c1:14:12:10:c1:ce:24:93:e9:b1:71:44:e6:1f:e3:e0: 82:9d:ee:a1:26:05:3c:49:da:49:21:5f:5c:dc:90:53:9e:0c: fb:35:4c:5d:91:e8:72:c4:15:98:ff:b4:35:b4:80:3a:47:9b: 43:fe:ac:ca:8c:dd:0f:86:46:ab:fa:81:6a:09:f4:e4:1a:ca: 81:e3:60:7a:3d:ca:68:2f:bc:3b:c6:a0:94:e9:ed:86:d2:72: 9f:98:7e:b9:cb:0e:b7:c5:58:dc:ff:4c:2c:8e:a7:03:1f:e3: 09:a1:02:1e:b4:6c:f0:9f:8d:65:e8:73:67:88:28:8f:45:06: a9:90:bd:45:79:c1:06:ff:63:fb:3d:f9:2a:a1:8a:d2:c6:d8: ff:b4:56:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY+3/l4fbVs/ZIvAKOHzgpfcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmYzY5NjQ2NDU3YThiZjhlZjk1NjliOWI0MjdlOWYyYzQ2 MmU1NmUwHhcNMjQwNTI3MDMwMDUxWhcNMjQwNTI4MDMwMDUxWjAzMTEwLwYDVQQD EygzY2Q3YzMzZmJhNzlmMTlmZDk4MDFkOTEzZTg0NDllYTJhMjAyOGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQcLgLV6lBX601V/fscwVDlIJ1Af 5e7h18OBHFOd5el3SOAfoEaqBoRTBsRwqV2HxF5B1jI6FPz0srnwG1DQaG3ytpHC mqMk7laqBTfYAmnYmTEu1wRxFwHoF8j1+0uNwWnFt2ClAclA75naN9/03tA6k/kx jAPGhXe1uRWLLqpb8733T4Tu2SR8KnK1x+BsjQuWPrW05wdvfCqe0WkZuATMQMD9 m9soEVmDy9rTZ1fU7wXmlCyiQvrPXy5IoytRy5q+NFjq+FqRyniBHY3g/afLkThp tVCjkIAOjZscWKHz7d5SUjfohuKYTPZHLwjYGB8tkKGlvHgPH+md8OVv4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDzXwz+6efGf2YAdkT6ESeoqICipMB8GA1UdIwQY MBaAFI/GlkZFeov475VpubQn6fLEYuVuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny85ZmFiNWMtZTEzOC00ZWY2LTg3OTkt YjBiMzVhMzRlMzg4LzEvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny85ZmFiNWMtZTEzOC00ZWY2LTg3OTktYjBiMzVhMzRlMzg4 LzEvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYI1dilUG w1DnkA5wFYwL+szqHf20rjyioj2Bc0OVRpB5NK5vxdwlEQSR8oIZ+8fccJ3PzPWz rxzixZVPE+Fnjv7yp42KoZaBVW+Ahd3XXgEg8UvO1bK2PJF6BAfkytXOZXhZnp7R nzg4Dphkm7vBFBIQwc4kk+mxcUTmH+Pggp3uoSYFPEnaSSFfXNyQU54M+zVMXZHo csQVmP+0NbSAOkebQ/6syozdD4ZGq/qBagn05BrKgeNgej3KaC+8O8aglOnthtJy n5h+ucsOt8VY3P9MLI6nAx/jCaECHrRs8J+NZehzZ4goj0UGqZC9RXnBBv9j+z35 KqGK0sbY/7RW0Q== -----END CERTIFICATE-----Generated at Mon May 27 04:58:46 2024 by rpki-client on console-fra.rpki-client.org