$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft File: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft (raw, json) Hash identifier: 3CnGywadAxRCzknVjmjyHAIKAZp3MJduIvsH+zD77Qk= Subject key identifier: A6:40:76:77:B2:EC:7F:7E:60:80:C2:2E:2D:09:E0:1E:26:9C:E5:C9 Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Certificate serial: 018FB61089226B7DAB8E512320E556EE2914 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft Manifest number: 11A4 Signing time: Sun 26 May 2024 18:01:27 +0000 Manifest this update: Sun 26 May 2024 18:01:27 +0000 Manifest next update: Mon 27 May 2024 18:01:27 +0000 Files and hashes: 1: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl (hash: 02O86x+2vA8eQ7B4UsA924OLxzIhqXIsRoNWUT8LcCI=) 2: IQ9mkXsk_VOOFgsv0t7hacRUbKA.roa (hash: qwhUX4sWkekXHdNCZorv7/myQdgQ4C6MzSsXdZ5LuRo=) 3: Ldc4o9L-5HMwL6CiKLTPZNj10t4.roa (hash: MnLWlh0g5BLxsxCKq3v+1BT4h2/+3tXxViOM9GFNaDw=) 4: MQLAZtM7yFr_hR7h_Q0sFiUjo0E.roa (hash: Q6UPvomfMUjtEY5D/bbb2IMqQQUf16FtPI8dYvm2RyQ=) 5: NbSFDcOllohrMed4Ihdzk29z_wM.roa (hash: pa6LnH7GySgonVWG9JZW4YXAkqAcW0/PuvgDcBRiQoM=) 6: OpmonBFO56vtMRogn9acRiXVcTE.roa (hash: Bhcs7RL3jgxTeM8ESoQ6WKXtdI+kNOY4w1sNhAloyuQ=) 7: XCzXDCVJyGO8GS9ksaDduV3e2IA.roa (hash: xK/EVG8zRWt9rCZhhtLmPA8PVNxGjkB5jq5kl0YkqQw=) 8: gOSAZ4GuL3kxY6b4ETjFf4zNDwI.roa (hash: Y5xnWnvt/tRPwQ7uSd+1G+UV3H6aVE3wx8GoCC0qfzk=) 9: h8hMAL0GKRBTFoJDQgo8opfSZho.roa (hash: Xo0IH7V4CFOHnmhD0d5fbw3JnkHbu9Xg8tKR9fdUJE0=) 10: m2BuVig8YErAqgiQAMfe8GMuqZI.roa (hash: xO6BT9PF2WDS0PfgRPTTstrY5haaaxQ5babve0ASmPk=) 11: oo-a44S7TIqo6a7u_RVh26TFcho.roa (hash: ukM9SAQsS8ui5EqZSKgfLauW+kG2GioEvBWuie00C3s=) 12: rpPObXxx5bOq5Po7WGWgReVRYQA.roa (hash: IOHAdL9+bZktE2RKxmSvBMUGEQSLCjb+fIQENbNsbqg=) 13: xSg6sEGfR8tuQEJRRGGzTPZVzZU.roa (hash: fAc3tWefhCki4sR/NboYpI4FTxnNgoyifZjPVqIlTQ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 May 2024 17:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:b6:10:89:22:6b:7d:ab:8e:51:23:20:e5:56:ee:29:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Validity Not Before: May 26 18:01:27 2024 GMT Not After : May 27 18:01:27 2024 GMT Subject: CN=a6407677b2ec7f7e6080c22e2d09e01e269ce5c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d6:b4:62:ed:d7:7b:6d:17:eb:a2:d9:58:02: e6:23:63:de:d5:3b:0c:97:24:8e:cf:ae:bb:7e:fd: a1:35:56:c3:5b:52:ec:10:28:aa:18:26:61:21:7d: 9f:b8:91:66:db:8d:99:62:c6:1a:0a:43:14:d1:49: c7:f7:b4:ac:46:41:2d:7c:78:f1:71:46:6a:a0:22: 36:0f:cd:5d:d9:75:f7:98:d5:1a:64:0a:15:64:fb: a2:bd:8c:0f:8b:9c:b6:a2:2d:15:e9:83:d6:c2:8f: 84:e8:d5:49:8c:e5:ac:df:eb:0e:87:99:c1:ec:89: 2c:e5:9a:82:2b:21:97:d9:25:17:6c:37:51:36:ce: 95:03:09:41:ba:e8:cc:2e:e1:12:9d:55:1f:0d:0f: 69:95:b7:c5:ac:09:e4:e5:8f:55:70:65:84:d2:31: 9c:38:2c:19:4e:69:65:c6:05:ff:13:5a:cc:ec:52: f4:77:ef:cf:1a:f4:f4:41:68:c4:05:c3:e2:13:b3: 45:56:c8:39:53:f3:06:21:d3:59:a8:29:ba:4b:04: 85:42:85:e1:00:39:c0:dd:fa:cb:94:7f:2f:44:e6: 17:c0:ec:f3:c2:f4:77:f5:67:aa:f5:45:8c:75:b2: 1b:9a:3d:c4:97:80:7a:93:4d:9b:49:68:a5:90:2f: e2:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:40:76:77:B2:EC:7F:7E:60:80:C2:2E:2D:09:E0:1E:26:9C:E5:C9 X509v3 Authority Key Identifier: keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:0d:05:b6:89:95:c0:93:78:38:0e:fa:e6:a6:a0:a7:cf:f5: df:ed:35:90:ef:49:46:d2:c0:ae:e7:e0:bb:27:5c:fd:c7:33: 06:f4:70:2f:80:9b:ae:78:ea:c0:33:52:ee:7f:cf:d1:62:a7: 45:c6:d5:4b:04:01:a7:fa:40:78:94:98:81:f0:b3:bc:fc:c0: 51:ad:84:92:31:21:b8:67:91:6f:a5:40:e3:57:93:67:aa:37: e0:d2:fe:dc:6d:72:c9:4a:e1:f3:8e:7c:69:f5:b0:6f:1e:7c: 09:05:81:2e:ab:45:3b:06:ba:66:f6:ef:54:4c:84:94:7a:95: bb:05:18:5b:6e:bc:43:65:eb:e8:29:39:6d:6f:6f:04:b1:6b: e4:7f:17:92:df:21:88:04:1b:35:d5:34:ba:24:2d:5e:f2:84: 59:f5:16:28:5a:37:fa:32:49:e2:b8:70:51:07:6c:68:39:ad: 6a:65:3a:01:28:0c:bf:1b:20:9c:9b:51:0d:87:b7:1c:89:18: d2:e0:77:24:54:2a:66:4f:cf:c2:32:a5:61:f4:d9:dd:d2:33: 6c:6c:81:f3:1c:e7:6d:e2:93:c8:fa:4d:f6:53:36:69:1e:58: ba:3d:7c:46:cc:c7:c1:69:4b:4a:c9:27:4d:a5:ba:9a:8b:f7: 78:c4:22:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY+2EIkia32rjlEjIOVW7ikUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNjgxMzhkNGVjMmVhNTFjYWNlZjA5ZmYxMDU4YTM3MGE1 YmUxOTAwHhcNMjQwNTI2MTgwMTI3WhcNMjQwNTI3MTgwMTI3WjAzMTEwLwYDVQQD EyhhNjQwNzY3N2IyZWM3ZjdlNjA4MGMyMmUyZDA5ZTAxZTI2OWNlNWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsta0Yu3Xe20X66LZWALmI2Pe1TsM lySOz667fv2hNVbDW1LsECiqGCZhIX2fuJFm242ZYsYaCkMU0UnH97SsRkEtfHjx cUZqoCI2D81d2XX3mNUaZAoVZPuivYwPi5y2oi0V6YPWwo+E6NVJjOWs3+sOh5nB 7Iks5ZqCKyGX2SUXbDdRNs6VAwlBuujMLuESnVUfDQ9plbfFrAnk5Y9VcGWE0jGc OCwZTmllxgX/E1rM7FL0d+/PGvT0QWjEBcPiE7NFVsg5U/MGIdNZqCm6SwSFQoXh ADnA3frLlH8vROYXwOzzwvR39Weq9UWMdbIbmj3El4B6k02bSWilkC/imwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKZAdney7H9+YIDCLi0J4B4mnOXJMB8GA1UdIwQY MBaAFB9oE41OwupRys7wn/EFijcKW+GQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgt NjA4NTY0ODM5ZmQwLzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgtNjA4NTY0ODM5ZmQw LzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqw0FtomV wJN4OA765qagp8/13+01kO9JRtLArufguydc/cczBvRwL4CbrnjqwDNS7n/P0WKn RcbVSwQBp/pAeJSYgfCzvPzAUa2EkjEhuGeRb6VA41eTZ6o34NL+3G1yyUrh8458 afWwbx58CQWBLqtFOwa6ZvbvVEyElHqVuwUYW268Q2Xr6Ck5bW9vBLFr5H8Xkt8h iAQbNdU0uiQtXvKEWfUWKFo3+jJJ4rhwUQdsaDmtamU6ASgMvxsgnJtRDYe3HIkY 0uB3JFQqZk/PwjKlYfTZ3dIzbGyB8xznbeKTyPpN9lM2aR5Yuj18RszHwWlLSskn TaW6mov3eMQiDA== -----END CERTIFICATE-----Generated at Sun May 26 21:19:52 2024 by rpki-client on console-ams.rpki-client.org