$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft File: WK1g2lJnHpCDzzmGTsoqojJBvp4.mft (raw, json) Hash identifier: 3rNlNHB3d7UmR03DPe2vva0NrVSX/Hje0S1y/qrR4Gs= Subject key identifier: F1:5A:51:01:98:B4:1A:89:A0:A1:D8:65:42:4F:27:B0:E0:0C:9F:B9 Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e Certificate serial: 018F60E05DC2A4EC6FD2EF0F3993C9542E7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft Manifest number: 02E2 Signing time: Fri 10 May 2024 05:01:07 +0000 Manifest this update: Fri 10 May 2024 05:01:07 +0000 Manifest next update: Sat 11 May 2024 05:01:07 +0000 Files and hashes: 1: 6n05MDgd73W6UPogiL52fi_H2rQ.roa (hash: OCNicH/1HdV08KfjZGDs2MYKoLpajxRdUZ00juXJEBQ=) 2: C2ixSRiqvBnLxFND7Mlp5Hi7kVs.roa (hash: dHobWK9IdoDyXHUtBFS/XkC429cNCZ4od/e9wPK+EZ0=) 3: LFFlvPXw1rmFMx2FNEdYaXI36DA.roa (hash: l8w+Fg6XUn8+D9ub5RCs6MkoQrZhezm5qzBQVULYAKE=) 4: T7d09Hgo1skANZLIp1XFPZgt7yA.roa (hash: fhzC2tt/Ye1MqIhphOq75oRSndldEhM9lzb7Q5B+yGo=) 5: VFHX_FgpBZlEd-_NB_m3Fg7I2eY.roa (hash: KUBw6xDzuuzKzy3z+YX2qWhMedscY4OSENCxpS2t66Q=) 6: WK1g2lJnHpCDzzmGTsoqojJBvp4.crl (hash: U26B0kLkuee3CQD/8gF08DThuurlxgJ64xcitv/L+Vk=) 7: Xje0mnpEGl4E_JeCTPRQBZJSISc.roa (hash: wU8O4wDKLwyDYN3cfJhuy5ZG4dBbVpiefRBht6IiU6Q=) 8: _I1-i6IZGCeN7LPwKnpNfshmo80.roa (hash: lY6mi9OM1c+wvW1OBnAZR3N+HNzrJ463MUoh/E7WqpA=) 9: _Y-6NYDWXt3hu2Vbn9g95xYk-ms.roa (hash: xjMDvPclj28Z9mosZn4Y1MPuaz3JE423GzMAs/b/kBQ=) 10: bvgI8G9i3HXtVAwm5m1ymXkD_-M.roa (hash: ol0byAFCLIIxbuR74XY9oArvjUC5MFJefyeYIFMfAS0=) 11: flPRgr2FlEYPjuYGeZBp_RKrbJg.roa (hash: 2aLVVTXVBjJVt01gfSsfxhQ8R5jE9429y3f+CqeTtHQ=) 12: jn61MsjFKIftc3vWy9QKibOxY4c.roa (hash: KIV3qeMAFB3H2sdXT9N/LtygZZCKsaFQvTG7pREZ0lU=) 13: kWBE3nZDOot98goC9DEeIM-kP-k.roa (hash: W1WrNuMBEDkZguqeZh2WFv7MAmJ0WfLVkTzHSJVDaTk=) 14: kZrEx1_e9Xbg1mmYICMnjPVv9os.roa (hash: NOVBff+Y/2rB+jCO1yj4tprwZr9/pFViCLO1UVINS60=) 15: v0zpICY_uoCuRiUkbkV3gIcVsJc.roa (hash: Si17y5ue90xdRHIJlv/yhy0krenuqvWH0CAz2+KJOps=) 16: wf0Q1jwukhkR-489oaDeeCmfZpg.roa (hash: UBicaI6TwXQ8yZzlGyQ+CtkJGksvEmkZwFZ2eDYTAew=) 17: woU98QVxYC4qZhigJ6uOFI8PM-M.roa (hash: rftkeoz1M+cYvNG1KX6H5ZUirsVdQjIT8qHWn+AV+Ag=) 18: wyvTzYumi1EjPn3XZZMByhrPluc.roa (hash: cyJOXOIg2FZJxv1ZPglhDwRmXSGp5pDNEl//0HuSt8s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 May 2024 05:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:60:e0:5d:c2:a4:ec:6f:d2:ef:0f:39:93:c9:54:2e:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e Validity Not Before: May 10 05:01:07 2024 GMT Not After : May 11 05:01:07 2024 GMT Subject: CN=f15a510198b41a89a0a1d865424f27b0e00c9fb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:63:33:f9:e3:49:c1:50:ce:4c:ae:fe:e3:5f: a8:4c:53:31:8f:81:83:b9:db:48:c1:9b:5b:b1:fc: 94:51:5e:03:ca:51:a3:7c:af:1e:43:b0:a2:06:d2: 7f:18:db:2d:36:24:9c:29:e5:2a:38:c8:33:6e:28: d6:42:b5:5f:35:69:c0:ef:0f:94:aa:34:84:0a:d9: 9f:36:1d:2f:18:a2:d8:7f:1d:32:c2:27:8b:df:55: 61:b7:5e:67:81:71:ec:21:84:ca:69:84:00:a5:33: 4d:65:84:56:b9:b6:f4:0e:c2:f9:79:66:3a:6d:c4: b7:43:35:ba:8c:1d:24:3f:96:40:fd:0e:43:f0:f4: ea:64:b9:9d:90:5d:53:ec:ae:13:a8:90:a5:d2:8e: 52:5e:3b:8a:c8:45:e0:18:d2:f5:7e:73:c3:62:88: bf:14:db:ce:0e:82:5d:ec:fa:61:db:27:02:48:8b: 16:0f:0a:76:94:17:8c:f4:0f:93:f6:b4:2b:01:76: 30:e6:cc:b8:cc:b8:10:aa:64:01:d6:03:43:88:a4: 03:7f:b7:47:30:3e:4b:95:7b:20:c0:ff:6a:29:bd: 69:51:30:08:64:09:2c:82:6b:09:b3:92:ca:4c:5b: 2f:e6:fc:c3:0d:5b:62:6b:37:b4:ff:df:bf:77:eb: 04:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:5A:51:01:98:B4:1A:89:A0:A1:D8:65:42:4F:27:B0:E0:0C:9F:B9 X509v3 Authority Key Identifier: keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:16:22:19:ef:c6:62:a9:27:ec:f3:92:ab:cb:80:fb:71:58: 3d:02:cb:d8:2e:0a:bd:bb:4f:e1:b2:ff:53:be:33:98:20:04: 11:b0:33:c6:81:30:07:4a:fa:6e:b7:f1:51:65:66:da:3a:18: 25:e2:55:bc:7d:dd:c3:5a:c1:0d:ab:88:23:18:a6:32:2f:17: a7:c3:e4:87:bf:83:ee:29:13:bc:b9:de:0c:c0:1d:21:2d:7e: 63:18:53:64:f1:9e:5b:4d:10:44:e5:dd:ff:01:1f:c2:9b:99: 7d:25:fa:4a:1d:3c:1e:f2:d4:17:ab:23:27:d2:ee:07:11:47: eb:16:c1:32:fd:82:1a:27:f9:96:0e:6b:2e:d6:f7:54:4a:34: fa:8b:bc:94:d2:6a:29:3e:d7:c5:86:cd:12:48:77:83:ef:01: f0:c0:23:a0:3e:9a:0c:5f:fe:c8:0d:de:e1:53:19:8c:8c:c7: dd:19:a1:49:73:03:5b:2b:b4:bb:7e:62:1e:e0:49:f1:30:0d: b1:ec:8d:fe:44:b4:79:dd:ce:9b:85:75:28:2e:f5:59:d3:75: 8d:28:ce:a5:ac:9e:d6:c0:d4:3e:24:60:7b:8a:0a:f0:42:7c: a2:67:4c:aa:fb:30:c8:c2:5a:87:e9:ca:e7:a8:ce:58:db:83: 16:bc:31:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY9g4F3CpOxv0u8POZPJVC5+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YWQ2MGRhNTI2NzFlOTA4M2NmMzk4NjRlY2EyYWEyMzI0 MWJlOWUwHhcNMjQwNTEwMDUwMTA3WhcNMjQwNTExMDUwMTA3WjAzMTEwLwYDVQQD EyhmMTVhNTEwMTk4YjQxYTg5YTBhMWQ4NjU0MjRmMjdiMGUwMGM5ZmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2Mz+eNJwVDOTK7+41+oTFMxj4GD udtIwZtbsfyUUV4DylGjfK8eQ7CiBtJ/GNstNiScKeUqOMgzbijWQrVfNWnA7w+U qjSECtmfNh0vGKLYfx0ywieL31Vht15ngXHsIYTKaYQApTNNZYRWubb0DsL5eWY6 bcS3QzW6jB0kP5ZA/Q5D8PTqZLmdkF1T7K4TqJCl0o5SXjuKyEXgGNL1fnPDYoi/ FNvODoJd7Pph2ycCSIsWDwp2lBeM9A+T9rQrAXYw5sy4zLgQqmQB1gNDiKQDf7dH MD5LlXsgwP9qKb1pUTAIZAksgmsJs5LKTFsv5vzDDVtiaze0/9+/d+sEoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPFaUQGYtBqJoKHYZUJPJ7DgDJ+5MB8GA1UdIwQY MBaAFFitYNpSZx6Qg885hk7KKqIyQb6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDct MTFiM2NmM2ZkNGUxLzEvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDctMTFiM2NmM2ZkNGUx LzEvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsBYiGe/G Yqkn7POSq8uA+3FYPQLL2C4KvbtP4bL/U74zmCAEEbAzxoEwB0r6brfxUWVm2joY JeJVvH3dw1rBDauIIximMi8Xp8Pkh7+D7ikTvLneDMAdIS1+YxhTZPGeW00QROXd /wEfwpuZfSX6Sh08HvLUF6sjJ9LuBxFH6xbBMv2CGif5lg5rLtb3VEo0+ou8lNJq KT7XxYbNEkh3g+8B8MAjoD6aDF/+yA3e4VMZjIzH3RmhSXMDWyu0u35iHuBJ8TAN seyN/kS0ed3Om4V1KC71WdN1jSjOpaye1sDUPiRge4oK8EJ8omdMqvswyMJah+nK 56jOWNuDFrwxaw== -----END CERTIFICATE-----Generated at Fri May 10 15:10:19 2024 by rpki-client on console-ams.rpki-client.org