$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft File: nFQvXfPBrLhX_VDusBbu0HOF_4w.mft (raw, json) Hash identifier: CIRohFSEnUM2d2TzSWpHoUxf67oi31T1rF/v4rfP3E4= Subject key identifier: FF:8D:65:B3:66:C1:2D:7D:62:7D:B7:54:13:EF:57:11:D3:CE:6E:59 Authority key identifier: 9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C Certificate issuer: /CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c Certificate serial: 01901E21BBFBF2DB6FB6DD617D8169261F17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft Manifest number: 05D7 Signing time: Sat 15 Jun 2024 23:00:45 +0000 Manifest this update: Sat 15 Jun 2024 23:00:45 +0000 Manifest next update: Sun 16 Jun 2024 23:00:45 +0000 Files and hashes: 1: 4BwCUuKMNHA8_c11opY1y5DHRms.roa (hash: ORxZ2V8wJnqnpNLrKaXtL4EZ44tJFOaDGenY+FNx7SA=) 2: 4VC1NHlhgHd5DpZ2mSCEN3qz_1M.roa (hash: odXzX8/rxsLm7SAqPx9ucfP+pMsvnN8sWTNTjlCoS+o=) 3: 9FM8Dxsu-DAs5PrINAaJpT3aHoU.roa (hash: EyDSZdPRe/uzwW1Ie5PyH1NdsnHRJJ/Mc7yBre9PDOc=) 4: DuzRugEDu3E00qO1Eu_kNtxi2sc.roa (hash: uBAiNyJXAYX3E4e0e51jDT7WX2rc5PVnjZu8i4ddhmY=) 5: PfGqNJR3Ud1M4uoZ-gbjCTC5TK4.roa (hash: 7MyJpqcLGsgvpRCFSwkFxQnVe/GCql+YMbdaUPvZxGk=) 6: TQ9IKdKglp7c6npPHqXVI3mwNUw.roa (hash: ExBw/OPrqngAXptHcokOTqQG2hMWHuh/c3vbL8cp5Sw=) 7: VyhrDVR9Mg0l1Sz6pfUFF04fyHc.roa (hash: LJreRFoW5ALThA3JrUkFpTZ1084ijqen8wivpdNCFU8=) 8: Wdr_SkFuLN4GBL4ee-gy-Y4jZVc.roa (hash: w/wPinp8Kvv7g5wlrw0ISmup7PyxK6QypVHK8dQ3JcU=) 9: bwLcB4QMwEb0Ra37b6n8hFIn1Ss.roa (hash: kKDz11tcuGZCiEbaZCx8KbnMj/9yntCddovOspalB8w=) 10: e-jj--13dQl2SKWjp6jMvg6moxc.roa (hash: 7T2+zdjkNcdArb+A3nugWQyraqdC/hbwLAqhkCLtG6M=) 11: fPMOD50p7f8VOuNLZG-FDXHThec.roa (hash: 8z3cuA7EtBLaTAhgxoKw2t2+AAHUPP6yvVAECUTimeE=) 12: jrvYIgePqRYuppLQY17_MEDgICQ.roa (hash: 4adPV6KNbAgofQQpNqb8oI5UkSieXcON5O56zj+hbjY=) 13: lvMeUxwjBWNwdWb6qADIHGHulGM.roa (hash: +bJT2RUUm/RKHucZk1Lk/oUQu6PlCQCIBC36z8qezgs=) 14: nFQvXfPBrLhX_VDusBbu0HOF_4w.crl (hash: Obs/elCa66FpWB4u6Q5+AgMo+zEk+E/6Oc22ax1hTIg=) 15: niSmBpfdzlepBpmmctXjBmJnGKA.roa (hash: cLCqb0+4/FgUSLPIL/nnP+rtn+oP+AY9TZDYKDHOxuE=) 16: nlRNapCXU-uiiGyi5VN4b74s2Bc.roa (hash: 4JCXFlthYhp5yFOvcYg+IIjx+EX5pryW30R4qEzjdmU=) 17: yxWxoZ9MX8ZoUyhLS8fsmCsStv0.roa (hash: bD98P+c7QHCtWnLECPPs5qhRhAWvpIV1VQNdW0PTazA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 16 Jun 2024 23:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:90:1e:21:bb:fb:f2:db:6f:b6:dd:61:7d:81:69:26:1f:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c Validity Not Before: Jun 15 23:00:45 2024 GMT Not After : Jun 16 23:00:45 2024 GMT Subject: CN=ff8d65b366c12d7d627db75413ef5711d3ce6e59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:79:5a:47:fc:f2:70:f3:cb:e7:5a:3f:24:6f: 82:5c:0b:2d:28:23:c1:6a:95:43:6d:45:68:8c:d2: b2:2a:ac:ee:04:f0:36:b6:bf:b7:a2:99:c5:b3:85: 6f:87:59:86:64:7e:f9:67:d1:18:41:6c:e0:17:eb: d5:ec:9d:7c:58:3e:1e:e0:c0:d5:ef:95:7e:b9:6f: e8:88:6a:42:3b:d7:e8:73:b7:4f:dd:94:fb:30:14: 4c:94:0b:45:2e:26:b2:77:1d:c2:04:fb:a8:25:7d: 7d:df:a3:cb:c8:19:cf:ab:00:5b:7f:b9:34:aa:7c: bc:a1:d3:41:a1:6e:64:c2:fb:c6:dc:03:ab:d5:b6: 06:6b:70:67:9c:09:7e:aa:fc:ce:43:0c:74:25:8f: 43:66:f4:6a:09:28:a4:c6:db:89:20:07:66:60:1f: 57:1b:79:8c:48:49:ac:09:0f:bb:2e:6d:8f:2b:b9: 15:d6:b1:58:1b:ac:66:71:ea:9c:f9:24:5f:29:2b: 6d:e1:db:6c:fa:74:41:74:06:30:ff:e1:38:1d:38: 05:f4:63:29:1d:dc:3d:a0:52:bb:9d:d1:fb:e1:ee: 99:b9:e1:08:4d:9f:c2:9c:d2:0b:44:39:09:6d:f6: 9f:0d:70:cf:cd:a5:f1:b5:bc:70:05:70:f1:71:9b: f4:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:8D:65:B3:66:C1:2D:7D:62:7D:B7:54:13:EF:57:11:D3:CE:6E:59 X509v3 Authority Key Identifier: keyid:9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:1e:79:ca:bd:8b:96:4c:53:69:af:54:74:14:d7:85:dc:70: af:ee:b1:04:c7:6a:dc:94:59:4f:e1:44:4c:a8:42:b6:6e:2c: 71:61:a1:6f:32:00:1b:24:15:7e:65:00:db:cf:24:38:71:c5: ad:85:65:b3:e3:fa:6c:54:78:a4:e3:21:38:15:6f:2a:0d:1b: 19:dd:6b:27:2d:00:9a:ab:e3:1c:b0:41:54:c1:04:6d:a6:19: 20:ae:5f:c5:e9:fe:e0:44:70:bc:b8:89:c9:20:70:23:9d:c5: 9c:53:7d:9d:4e:cd:89:d4:b0:f5:a7:df:07:6b:31:bd:a5:be: 8a:85:4b:4d:67:fb:df:69:d9:05:04:7b:f9:55:1e:9c:15:b7: e3:0e:28:d1:76:c6:cd:9f:a4:2b:17:22:de:95:57:4b:1b:83: b2:e0:68:d1:41:bf:fc:51:eb:30:ec:24:b2:6e:02:a0:37:99: 36:a2:a4:1f:c8:bc:76:db:6b:6c:ab:2e:19:75:a3:5f:f1:7d: 37:fb:61:a1:0d:2f:87:ff:e1:e7:98:93:7d:f6:51:67:e5:b5: 45:35:e7:d7:ef:29:3a:e9:5e:68:3f:8f:cf:ce:99:9b:de:b4: 57:e7:a1:36:4e:5d:25:11:28:95:9b:ef:b0:94:7f:40:b8:d4: 48:06:8b:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZAeIbv78ttvtt1hfYFpJh8XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNTQyZjVkZjNjMWFjYjg1N2ZkNTBlZWIwMTZlZWQwNzM4 NWZmOGMwHhcNMjQwNjE1MjMwMDQ1WhcNMjQwNjE2MjMwMDQ1WjAzMTEwLwYDVQQD EyhmZjhkNjViMzY2YzEyZDdkNjI3ZGI3NTQxM2VmNTcxMWQzY2U2ZTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXlaR/zycPPL51o/JG+CXAstKCPB apVDbUVojNKyKqzuBPA2tr+3opnFs4Vvh1mGZH75Z9EYQWzgF+vV7J18WD4e4MDV 75V+uW/oiGpCO9foc7dP3ZT7MBRMlAtFLiaydx3CBPuoJX1936PLyBnPqwBbf7k0 qny8odNBoW5kwvvG3AOr1bYGa3BnnAl+qvzOQwx0JY9DZvRqCSikxtuJIAdmYB9X G3mMSEmsCQ+7Lm2PK7kV1rFYG6xmceqc+SRfKStt4dts+nRBdAYw/+E4HTgF9GMp Hdw9oFK7ndH74e6ZueEITZ/CnNILRDkJbfafDXDPzaXxtbxwBXDxcZv0FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP+NZbNmwS19Yn23VBPvVxHTzm5ZMB8GA1UdIwQY MBaAFJxUL13zway4V/1Q7rAW7tBzhf+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mYjc5MWItODAxMy00NThhLTlhMWUt MjVkYmY0MzgwNGM1LzEvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9mYjc5MWItODAxMy00NThhLTlhMWUtMjVkYmY0MzgwNGM1 LzEvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIx55yr2L lkxTaa9UdBTXhdxwr+6xBMdq3JRZT+FETKhCtm4scWGhbzIAGyQVfmUA288kOHHF rYVls+P6bFR4pOMhOBVvKg0bGd1rJy0AmqvjHLBBVMEEbaYZIK5fxen+4ERwvLiJ ySBwI53FnFN9nU7NidSw9affB2sxvaW+ioVLTWf732nZBQR7+VUenBW34w4o0XbG zZ+kKxci3pVXSxuDsuBo0UG//FHrMOwksm4CoDeZNqKkH8i8dttrbKsuGXWjX/F9 N/thoQ0vh//h55iTffZRZ+W1RTXn1+8pOuleaD+Pz86Zm960V+ehNk5dJREolZvv sJR/QLjUSAaLoQ== -----END CERTIFICATE-----Generated at Sun Jun 16 03:14:15 2024 by rpki-client on console-fra.rpki-client.org