$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft File: h3itgWjgnPktTgSYJX-OnOq_BpI.mft (raw, json) Hash identifier: SAUxZqjHmJF+EngdDGAj9yDL8DSMUbfRzjykChwgwfQ= Subject key identifier: B2:F1:E1:6B:E7:74:47:FF:5C:8C:91:C0:AF:D3:3F:2E:9E:E0:93:C0 Authority key identifier: 87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92 Certificate issuer: /CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692 Certificate serial: 019040E481F4B8890319FC78C128FD533339 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft Manifest number: 11EF Signing time: Sat 22 Jun 2024 17:00:35 +0000 Manifest this update: Sat 22 Jun 2024 17:00:35 +0000 Manifest next update: Sun 23 Jun 2024 17:00:35 +0000 Files and hashes: 1: 1-hG2Dbs_La9AbTTHq3kZfe9Gl7w.roa (hash: 4o3QNBS//3lvkUWsgaSw+ESbi5PjtVTItmQqpM/97DQ=) 2: H-X09CodXgkj0TJFcQva6NLMu3w.roa (hash: xnVRTNWBIAP7eAQuSjN4KhfPwh88JPGs2UAcJg0YNBQ=) 3: J4OQN9BVxaeUa4-6eMVeNlamq7k.roa (hash: kWe92Mr1sUdUbWpcDvSxO89tmxwGmkn/lJyjMIadTCU=) 4: P43WRaMgov-fVBLRXaSQ5RDsUAs.roa (hash: dFM1i343LUBQniwioeTaAK7pHA5Xof7xGBElaEQXDhw=) 5: PdTq_d240Q4b9VyA91GZrXLlEcs.roa (hash: 68SijHWZs8juRq8uxp9wk3VCWe/NX12WeC2JWmndbB8=) 6: VJexUrP8FbwmSUAAdgR4SU6dJFY.roa (hash: lojiSc2AvnfcAjBPHikspAEM4H6TszWVLCvTC+n5zxg=) 7: bM_2w6t4ocKL1Seh6Kkmyv76huY.roa (hash: UhMOxCNIOGsgmP4jZgL8u/YHQUobEthyadpcfOHEcA4=) 8: bY2LMCOGZPnhCGdghvzJ2JPXiDM.roa (hash: HDSMIj/hqKdprhwmTYnJDQfTTm+f7WIFEpYQMO9RzVQ=) 9: dWCd9xZ4pgYHb0QxytLkjaNqXB4.roa (hash: RjB7M3Ovr5U2anyjdnuMqDmg6+o3qc+5fweD4mo/MiI=) 10: h3itgWjgnPktTgSYJX-OnOq_BpI.crl (hash: ZHVaFgBpI8fGroyGikFPZ0tkut0QLRAMPJnmwXQYpJs=) 11: leMwNsa5zZpIondmUiWJbd9kobU.roa (hash: SM0Ei2Vh6GLxOLCe0TF7D7/4ICthojIJ+P88z5EJY8M=) 12: qo8hH3umFsFsrmcWHf9AXJqYEd0.roa (hash: FkLjOpjqay7QlxDFP+5MXgv4ECaV9kzUHCNWISKGRqQ=) 13: vumaaIkLpD_hKs7gO3jbXzh184Q.roa (hash: f22WdKb6kLT5dEsMB2rR5HyqD5caXcZzhRLHPhR4Mu8=) 14: zGZOqe9cw3qHmOid4N0z-nqdKsQ.roa (hash: rbe1Go0pIWF+3r4+XRxs+jyz9Yy0G75YzXYIf4PeUMw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Jun 2024 17:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:90:40:e4:81:f4:b8:89:03:19:fc:78:c1:28:fd:53:33:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692 Validity Not Before: Jun 22 17:00:35 2024 GMT Not After : Jun 23 17:00:35 2024 GMT Subject: CN=b2f1e16be77447ff5c8c91c0afd33f2e9ee093c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c5:e2:bc:7b:31:00:62:04:13:39:a5:83:8d: a6:f1:92:a0:8d:7d:54:ff:e1:88:39:92:9d:78:bf: a5:61:bc:9f:2f:15:66:05:8a:7e:0a:75:7b:a0:1e: 87:14:34:78:53:48:a2:07:81:d7:ff:d5:d5:47:f4: 5b:26:a2:92:ff:31:37:67:f6:6b:f3:93:f6:12:b5: ca:46:36:a3:1a:f1:cc:d8:79:05:0a:2a:d4:01:7c: 01:fd:5f:ac:1c:73:bb:57:41:26:2a:6d:e7:a6:e7: c9:9e:3c:d5:1b:0f:7a:b5:8a:5c:80:74:40:60:77: 48:ac:1a:0e:ca:1e:f7:24:f9:aa:3b:93:59:51:10: 19:22:06:2a:b8:c7:2a:df:73:ac:60:3a:6d:45:cf: 0a:61:54:42:3e:02:c7:2a:a9:1f:2f:43:da:c6:da: f7:82:ea:97:52:96:9b:4a:1d:d0:cc:99:f0:9b:a5: ee:c6:ec:66:4f:84:7d:9e:1c:79:9d:a7:57:0c:40: c1:a6:3d:37:24:69:d2:3d:63:8d:3c:99:c2:d4:64: 0c:7b:88:4b:22:6f:53:eb:80:f5:7a:aa:55:8d:fb: 32:66:45:cc:4e:a8:e7:42:f5:b2:a5:ab:ea:10:91: dd:32:14:9c:69:15:3c:89:c6:bb:1f:93:88:41:79: 3f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:F1:E1:6B:E7:74:47:FF:5C:8C:91:C0:AF:D3:3F:2E:9E:E0:93:C0 X509v3 Authority Key Identifier: keyid:87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:ab:99:ca:f7:9f:72:b5:60:84:a7:72:29:30:f4:b9:1e:be: 21:8a:85:ad:2d:4d:22:49:05:fe:5f:cc:f1:e3:50:46:c2:71: 9e:ef:14:7a:77:61:b1:f4:c7:62:2d:cd:53:7f:96:71:93:f3: 12:99:93:52:fc:b7:c7:2f:85:ae:0a:65:28:ba:3a:bc:15:48: e2:fb:2b:6f:eb:03:dc:f0:f3:dd:75:bd:2c:6f:b1:a8:8a:8d: 54:cf:7d:85:17:92:42:bc:cb:73:aa:3f:75:4d:97:e1:30:41: cb:e5:23:e3:70:fe:f1:1d:71:50:cb:24:9f:35:21:50:42:e9: 5a:c5:d0:83:17:ab:84:ab:66:aa:46:a3:96:26:19:d8:da:1e: ee:e7:fd:36:7e:e8:2d:36:77:9d:ac:e4:20:49:66:2d:c1:96: 7c:4c:e0:38:19:c1:91:8e:48:30:d9:ee:cf:37:6d:69:d9:d4: a8:67:6c:95:ec:4f:c2:05:07:ca:ea:3e:2a:56:78:aa:95:2d: e0:98:72:53:fa:5e:02:dd:58:c1:58:07:cc:6e:f9:9e:23:94: 18:9d:0c:ca:a2:31:89:d0:ef:e7:3f:a3:04:13:7e:30:a8:49: 8c:0b:bd:58:a7:e8:b1:72:3f:70:43:b3:51:ef:ca:92:38:24: d0:72:31:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZBA5IH0uIkDGfx4wSj9UzM5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NzhhZDgxNjhlMDljZjkyZDRlMDQ5ODI1N2Y4ZTljZWFi ZjA2OTIwHhcNMjQwNjIyMTcwMDM1WhcNMjQwNjIzMTcwMDM1WjAzMTEwLwYDVQQD EyhiMmYxZTE2YmU3NzQ0N2ZmNWM4YzkxYzBhZmQzM2YyZTllZTA5M2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMXivHsxAGIEEzmlg42m8ZKgjX1U /+GIOZKdeL+lYbyfLxVmBYp+CnV7oB6HFDR4U0iiB4HX/9XVR/RbJqKS/zE3Z/Zr 85P2ErXKRjajGvHM2HkFCirUAXwB/V+sHHO7V0EmKm3npufJnjzVGw96tYpcgHRA YHdIrBoOyh73JPmqO5NZURAZIgYquMcq33OsYDptRc8KYVRCPgLHKqkfL0Paxtr3 guqXUpabSh3QzJnwm6XuxuxmT4R9nhx5nadXDEDBpj03JGnSPWONPJnC1GQMe4hL Im9T64D1eqpVjfsyZkXMTqjnQvWypavqEJHdMhScaRU8ica7H5OIQXk/UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLLx4WvndEf/XIyRwK/TPy6e4JPAMB8GA1UdIwQY MBaAFId4rYFo4Jz5LU4EmCV/jpzqvwaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mMDdmOGQtOWRmMC00OWM2LWIyZjAt YWE5ZDY5MTgxMWU3LzEvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9mMDdmOGQtOWRmMC00OWM2LWIyZjAtYWE5ZDY5MTgxMWU3 LzEvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOquZyvef crVghKdyKTD0uR6+IYqFrS1NIkkF/l/M8eNQRsJxnu8UendhsfTHYi3NU3+WcZPz EpmTUvy3xy+FrgplKLo6vBVI4vsrb+sD3PDz3XW9LG+xqIqNVM99hReSQrzLc6o/ dU2X4TBBy+Uj43D+8R1xUMsknzUhUELpWsXQgxerhKtmqkajliYZ2Noe7uf9Nn7o LTZ3nazkIElmLcGWfEzgOBnBkY5IMNnuzzdtadnUqGdslexPwgUHyuo+KlZ4qpUt 4JhyU/peAt1YwVgHzG75niOUGJ0MyqIxidDv5z+jBBN+MKhJjAu9WKfosXI/cEOz Ue/Kkjgk0HIxmw== -----END CERTIFICATE-----Generated at Sun Jun 23 01:46:44 2024 by rpki-client on console-ams.rpki-client.org