$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft File: DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft (raw, json) Hash identifier: nm9ttk2/EvMlS6VsnK6flvdKQ4QKkDvI4Yez5MUXZM0= Subject key identifier: 4A:EF:74:D1:F4:37:CF:DF:AF:F1:B2:D2:C4:7E:83:2E:61:29:7A:4A Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 Certificate issuer: /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Certificate serial: 018F90824E413CAD58A3273EA10EB4E9C6C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft Manifest number: 0B45 Signing time: Sun 19 May 2024 11:00:09 +0000 Manifest this update: Sun 19 May 2024 11:00:09 +0000 Manifest next update: Mon 20 May 2024 11:00:09 +0000 Files and hashes: 1: 0AOj-EjsyvEXu1WvL2PT1O97D8Q.roa (hash: wENEWKHy8Bc1NXEJIiWw5rzRYbw2yYc96D9nrQHNHXc=) 2: 1aGY_pLegLq_PpVOIxMUzW61L_Y.roa (hash: AnVrlIkHv8z1gKd/1/MOiDEHuk1viVh9XlnvHYccoPA=) 3: CkCnri3lSaXXbadmcG-6wRv2-PE.roa (hash: 7JGNKfdPWixf3M5Eqp3bIEevZSNbKaqlgUUW3mjVW/E=) 4: DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl (hash: ZLmkaeNXUjB88L5vm5xSLVP0IWg5U5HZcGR2i/3L/Pk=) 5: MEIlS7IwiLZFZAjDbUEW9wVxJWQ.roa (hash: kPmoUN/wsSxhThYCYRNvT0+6Lnaebye7g5WdMN4Zri0=) 6: OC4Uwb6Q5kJno2ZoIyHvySKw6nE.roa (hash: Fhzek0bV1WEoR+uZe5kkOvhCOnecsM7zDF1ScprjRNs=) 7: QVlAR2tdgoy_yJa7PElguHJ6cXg.roa (hash: 0zLRVeqNGgmTE3LbohQH2ivPkajASvcKXUKDVSU2Gso=) 8: UPuF44uwp8xzxjpGUnJekTkVfG8.roa (hash: KESiHCr36biLbzgi+T0mJUhNFyZ2s4cVoe9zn31UZvs=) 9: VF6Jziy3wdWbFQzMRY0s9ZfwNSc.roa (hash: b/GzxNuKl49U972kD2+4KcSATymA7bCHOsT4EmYgaz0=) 10: Wx0n_P_6F5MSg1KVySM5tJqWkSg.roa (hash: sbGIguG5dPvziuiTSZQdtg7/KXVpeak3iQuqTG+/62w=) 11: aYp75pnYs8GSvqvM3CZHh1nGddM.roa (hash: uOlsQay3tEzmki5yU4i5hLL3iIw/bMtz3EL9DjNQ5Gk=) 12: hnvpUHX0WPufsHJX4IVh7FOCWaI.roa (hash: QdlBY0zLv5+Q1rrZVDEqQo8xNagHRpl1vDKuGGJEIcI=) 13: nK_B3-FLV0bP6Y2hENMckP7xj_k.roa (hash: OPJNeVIECo28SF1LJdHL7pOK5lICwA3/BF27LCREoJo=) 14: owdXDgHvzbTGZf7-w4Y-S8EQpRA.roa (hash: EKcXn0ky9u/CKOOBXQhQkSWA/pE8pwQBWZxwn1DpxEM=) 15: shW2GRmq7hMCAnltrGT4bLUdG5s.roa (hash: /ZmsVWib7zEtDIkO18PQG8C0v7cm8FxZcl6weu+9PqI=) 16: yyPioYPL202O23xyB-0T1_JS4dQ.roa (hash: 2kwxqqGezXrPpfgYIo9wQ4mMsT6KHpVXboYluUw8b4o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 May 2024 05:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:90:82:4e:41:3c:ad:58:a3:27:3e:a1:0e:b4:e9:c6:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Validity Not Before: May 19 11:00:09 2024 GMT Not After : May 20 11:00:09 2024 GMT Subject: CN=4aef74d1f437cfdfaff1b2d2c47e832e61297a4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a5:15:6c:3f:16:cc:f0:d2:09:a1:cc:ff:7a: 46:60:4f:74:ee:d5:ae:e9:f0:2a:3e:e7:b0:ad:70: 4e:46:94:3b:19:55:b9:34:3f:42:f4:29:70:6c:db: a3:60:36:eb:10:06:ac:66:3d:39:18:bb:6b:ef:85: c9:36:ff:42:19:2e:68:23:ae:5c:7d:8b:6f:8f:ed: 3d:bc:11:3a:c3:fa:99:d8:dc:dc:45:4d:ba:cd:e3: 6d:db:6a:a3:8f:38:f4:ab:ae:9b:48:6d:5d:bb:ad: 5a:5f:25:17:a5:3c:5e:bc:b4:a7:06:f0:7b:12:d5: 1b:c7:f0:b6:c1:78:e2:de:cf:19:76:2d:c3:79:10: 31:bc:ab:3b:f3:6a:d0:8f:f0:37:20:41:ec:b8:54: 1f:8c:86:6f:a1:96:49:57:8b:2c:c5:17:31:d9:ec: 97:c8:25:b8:8e:3d:1b:e3:58:df:6b:67:94:89:44: 37:83:39:c4:e9:41:1a:9a:15:41:e6:b8:1e:33:6d: 5c:87:5b:18:e7:03:b9:1f:f0:27:5c:ad:15:aa:c7: 60:08:7e:5c:76:7e:71:e0:aa:81:32:bc:a5:37:f1: b2:17:e6:77:16:b5:cc:c1:97:fb:c5:5b:92:2f:28: 2c:11:ba:c7:82:23:9c:17:48:a2:38:82:dc:3d:db: 49:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:EF:74:D1:F4:37:CF:DF:AF:F1:B2:D2:C4:7E:83:2E:61:29:7A:4A X509v3 Authority Key Identifier: keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:f6:f1:b1:c2:88:27:02:63:b0:06:1d:2d:82:98:cf:0c:c9: 9c:06:ea:af:25:72:f3:a5:04:d6:10:16:67:76:cf:b5:0d:fb: d5:72:16:8b:6b:d1:1a:8d:e4:a9:1e:be:9c:b1:cc:66:07:d7: 26:6b:30:d4:65:76:eb:9a:da:4f:e3:49:10:8e:65:e8:ad:05: a7:88:a2:01:31:bb:e3:b7:3e:92:9c:e4:11:a1:04:34:61:0d: ce:2a:8e:04:9f:c3:f4:f4:c8:89:f0:c5:84:a8:61:6f:78:cc: 36:0e:26:63:e6:58:1a:24:be:8d:f4:df:2e:f1:b0:0e:8b:b5: fb:8f:84:66:25:f1:b6:0d:54:33:24:1b:1a:77:81:34:d7:25: e3:98:d6:62:06:d3:2e:56:1c:60:c5:fe:39:cf:b1:75:66:8e: 35:5e:19:42:33:14:59:00:77:85:f9:06:9d:b2:83:a8:5f:c4: 76:45:92:c2:21:a4:f2:cd:a6:64:67:3a:c5:c5:0a:dd:d6:1d: e8:31:c4:78:97:09:1a:9a:33:84:03:d2:d6:1e:87:1a:f9:f5: 59:e3:e5:60:8c:c6:95:6c:0a:6e:eb:5e:ca:df:66:50:28:32: de:a7:2d:4f:cf:59:f7:70:16:9a:01:4a:8a:56:ff:60:4b:f2: 3a:e7:16:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY+Qgk5BPK1Yoyc+oQ606cbCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkYjY3YzVjN2ZhN2ZlMjQ5MmVlYzM3Y2Y0Mjc2NDJiNzFk NDI1YjAwHhcNMjQwNTE5MTEwMDA5WhcNMjQwNTIwMTEwMDA5WjAzMTEwLwYDVQQD Eyg0YWVmNzRkMWY0MzdjZmRmYWZmMWIyZDJjNDdlODMyZTYxMjk3YTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKUVbD8WzPDSCaHM/3pGYE907tWu 6fAqPuewrXBORpQ7GVW5ND9C9ClwbNujYDbrEAasZj05GLtr74XJNv9CGS5oI65c fYtvj+09vBE6w/qZ2NzcRU26zeNt22qjjzj0q66bSG1du61aXyUXpTxevLSnBvB7 EtUbx/C2wXji3s8Zdi3DeRAxvKs782rQj/A3IEHsuFQfjIZvoZZJV4ssxRcx2eyX yCW4jj0b41jfa2eUiUQ3gznE6UEamhVB5rgeM21ch1sY5wO5H/AnXK0VqsdgCH5c dn5x4KqBMrylN/GyF+Z3FrXMwZf7xVuSLygsEbrHgiOcF0iiOILcPdtJLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFErvdNH0N8/fr/Gy0sR+gy5hKXpKMB8GA1UdIwQY MBaAFA22fFx/p/4kku7DfPQnZCtx1CWwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjkt YjAzZGY5OTZlNDgxLzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjktYjAzZGY5OTZlNDgx LzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABPbxscKI JwJjsAYdLYKYzwzJnAbqryVy86UE1hAWZ3bPtQ371XIWi2vRGo3kqR6+nLHMZgfX Jmsw1GV265raT+NJEI5l6K0Fp4iiATG747c+kpzkEaEENGENziqOBJ/D9PTIifDF hKhhb3jMNg4mY+ZYGiS+jfTfLvGwDou1+4+EZiXxtg1UMyQbGneBNNcl45jWYgbT LlYcYMX+Oc+xdWaONV4ZQjMUWQB3hfkGnbKDqF/EdkWSwiGk8s2mZGc6xcUK3dYd 6DHEeJcJGpozhAPS1h6HGvn1WePlYIzGlWwKbuteyt9mUCgy3qctT89Z93AWmgFK ilb/YEvyOucW4w== -----END CERTIFICATE-----Generated at Sun May 19 15:33:34 2024 by rpki-client on console-ams.rpki-client.org