$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft File: sa8S9cp1ySKkql2stJwEqTI39O0.mft (raw, json) Hash identifier: 25Cuj1dNLNNVQw+2fS5SEK0xqAAxBwLzBRWfgwHupx8= Subject key identifier: 8D:5D:8E:38:EE:F4:DC:AD:A4:08:09:36:DB:D1:D8:D1:58:B1:17:31 Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Certificate serial: 01901D465451ADE9177D399238DAC402E0C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft Manifest number: 0DC5 Signing time: Sat 15 Jun 2024 19:01:06 +0000 Manifest this update: Sat 15 Jun 2024 19:01:06 +0000 Manifest next update: Sun 16 Jun 2024 19:01:06 +0000 Files and hashes: 1: 02hc6JgWitJscQKFhogl4dZ92hc.roa (hash: pzOSGio3pWFX43S1mVvEXTZ8dGupKg0aN02/TVWGRTg=) 2: CO_0VE__NsDRRWgM22BpYj_P-2w.roa (hash: 9L7dPXppBRKZPIfj81oZDhRpj2/gGSzU+lLa3XMak6w=) 3: MaJbxX7lvgTSe8VYrkuHEDEjJ1c.roa (hash: nMkrejMTQudZWMPjWuiNB0rg0Bbk9m7eiUt5bCoHuXs=) 4: Q4aKzuKQcgX50MlBztxa6HU46jA.roa (hash: cbl/cso0tWlmSWlEs785PG36HyXKWDL4j4gIFNwLAGU=) 5: SEIOQ4mdZb_iSheEz1F1Bg-CtNU.roa (hash: 7Ej2rU0OZFZbGapajcLDwx0yeguHS93IaKcHLxYpbQw=) 6: _oUr7Rhxmgrw_t3mq_4wlq2-Ibo.roa (hash: nZbQ0HhgfysXLW0z9jWk6JcbyV2Nx7drLm7xDQQ8XOo=) 7: bhoYkN3pKblGPjYnNMM28QUpz4E.roa (hash: E28KJizivFfnHroqCGrPqW9LQVkUzuh2UOiIY+1nRsA=) 8: dL0XWuMWe_2-McofnGQYe3IpEEY.roa (hash: qG37sZz9RReQrTdvUDPZTM4LSjg11839PWfzjmfw/Cg=) 9: ddaqNnwzkA1UVhffHrdWE-QahMA.roa (hash: q8d1zIYgc9JeMgQqho+q2BFsy8ShX6RWpD5+PpGwVqA=) 10: heoykRXl7IUhde8E857nSji3u8Y.roa (hash: K3rCW5Dcu1FrDJY1HYWZW2W6XyZvEgLsxN88xAmRMuI=) 11: sa8S9cp1ySKkql2stJwEqTI39O0.crl (hash: joylZvGu3SsFjT3YKR8uPX0Qe4uj4HD3KfnlMioe4ow=) 12: tLAu2MNg_WCsJYkDt3cdfv_RIOY.roa (hash: GpIhjEUiDfDzAVFGrf7Oe+IL3e9PH3VSKFtDiC6V3ow=) 13: xfxwGRtmBoGNmwOOyh5eFNYPfXY.roa (hash: AyiP/FF2qci3BxbNXp3IVhC0+1I+8uj6Wg87qOzx0Zo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 16 Jun 2024 14:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:90:1d:46:54:51:ad:e9:17:7d:39:92:38:da:c4:02:e0:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Validity Not Before: Jun 15 19:01:06 2024 GMT Not After : Jun 16 19:01:06 2024 GMT Subject: CN=8d5d8e38eef4dcada4080936dbd1d8d158b11731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3e:50:16:f3:ad:29:32:eb:03:bc:bf:02:dc: d9:4e:53:0b:ca:fa:a5:6c:bd:b0:f5:07:8f:10:37: 04:80:32:8b:f0:4a:8a:d4:05:cc:96:19:08:da:18: 6d:5c:4e:df:41:49:b7:34:54:99:5d:3e:0f:97:f2: 43:81:49:1f:9f:0b:e1:7b:dc:27:d4:9e:ab:f1:bb: 8d:06:76:79:bf:aa:62:10:b4:2a:a4:53:e5:79:a3: 9e:cf:5f:eb:c9:89:27:3a:c4:a2:11:eb:be:f5:61: 83:12:c4:c8:f4:24:a3:3a:9a:5e:c8:e6:dd:d8:53: ff:8e:a7:7c:4d:c0:ee:c2:d4:78:a7:23:8d:0e:cf: 15:78:a2:f3:78:41:eb:1b:ac:3e:ea:8c:e4:09:6d: eb:c5:9d:73:18:c3:43:c8:d0:14:93:37:40:ed:9b: 66:62:ed:22:a0:85:58:80:68:e6:13:e6:b7:db:82: 69:12:89:6d:fe:67:b6:46:e7:e4:80:ff:13:25:b5: 01:b8:6a:09:1e:11:8b:63:c6:92:3a:a0:f6:cc:33: fc:ec:70:2f:69:6d:90:1f:23:25:3e:8d:f5:8e:4c: fd:f5:c4:37:61:d9:0c:77:a6:a3:de:b4:18:1f:e1: 95:de:d8:1b:13:62:1c:e6:b1:ad:c3:fe:5b:90:4e: 61:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:5D:8E:38:EE:F4:DC:AD:A4:08:09:36:DB:D1:D8:D1:58:B1:17:31 X509v3 Authority Key Identifier: keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:8e:69:58:4f:02:ed:16:7c:9f:a1:5a:98:e4:fa:31:b0:ed: 62:ba:96:8e:e7:3c:69:5a:a5:4e:95:ee:5f:23:2c:7c:bc:4f: aa:e8:e6:19:19:cf:cc:95:4a:4e:3b:1e:38:ac:66:74:a6:92: d7:7b:c1:6d:35:c5:de:6c:aa:0b:6b:cb:64:66:00:21:1a:85: 46:6a:64:bd:1f:fd:35:d6:8b:45:f5:32:21:27:9a:11:c0:a8: ce:20:f8:bd:eb:53:72:45:da:c4:5e:09:72:0d:5a:88:ad:76: b8:cc:7a:51:18:98:f1:4f:03:56:f1:f8:d4:89:09:02:ae:ac: 9f:56:d3:8b:5a:e5:db:df:7b:f9:66:66:6b:96:ff:c0:31:c6: 6a:12:b0:70:b8:88:bd:a3:df:15:8c:7d:ca:f7:9a:92:a6:d4: 4b:98:ec:b3:67:2e:a6:fd:91:19:da:b9:59:6f:b1:d0:4b:c9: fd:e5:d5:0e:30:af:04:80:be:ed:43:d9:4f:a0:77:e8:dd:9b: 40:06:16:68:f6:f5:6c:89:25:9a:ad:14:41:18:8d:b0:81:e8: 64:9c:11:67:f9:47:f2:37:7b:a6:f5:5c:92:b4:0e:e0:9a:e8: 15:ae:f6:b0:7e:d7:36:76:49:25:bf:24:0d:7e:01:64:63:10: cb:77:41:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZAdRlRRrekXfTmSONrEAuDGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYWYxMmY1Y2E3NWM5MjJhNGFhNWRhY2I0OWMwNGE5MzIz N2Y0ZWQwHhcNMjQwNjE1MTkwMTA2WhcNMjQwNjE2MTkwMTA2WjAzMTEwLwYDVQQD Eyg4ZDVkOGUzOGVlZjRkY2FkYTQwODA5MzZkYmQxZDhkMTU4YjExNzMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnj5QFvOtKTLrA7y/AtzZTlMLyvql bL2w9QePEDcEgDKL8EqK1AXMlhkI2hhtXE7fQUm3NFSZXT4Pl/JDgUkfnwvhe9wn 1J6r8buNBnZ5v6piELQqpFPleaOez1/ryYknOsSiEeu+9WGDEsTI9CSjOppeyObd 2FP/jqd8TcDuwtR4pyONDs8VeKLzeEHrG6w+6ozkCW3rxZ1zGMNDyNAUkzdA7Ztm Yu0ioIVYgGjmE+a324JpEolt/me2RufkgP8TJbUBuGoJHhGLY8aSOqD2zDP87HAv aW2QHyMlPo31jkz99cQ3YdkMd6aj3rQYH+GV3tgbE2Ic5rGtw/5bkE5hrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI1djjju9NytpAgJNtvR2NFYsRcxMB8GA1UdIwQY MBaAFLGvEvXKdckipKpdrLScBKkyN/TtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUt NTc2MGVmYmNjNjU0LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUtNTc2MGVmYmNjNjU0 LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcI5pWE8C 7RZ8n6FamOT6MbDtYrqWjuc8aVqlTpXuXyMsfLxPqujmGRnPzJVKTjseOKxmdKaS 13vBbTXF3myqC2vLZGYAIRqFRmpkvR/9NdaLRfUyISeaEcCoziD4vetTckXaxF4J cg1aiK12uMx6URiY8U8DVvH41IkJAq6sn1bTi1rl2997+WZma5b/wDHGahKwcLiI vaPfFYx9yveakqbUS5jss2cupv2RGdq5WW+x0EvJ/eXVDjCvBIC+7UPZT6B36N2b QAYWaPb1bIklmq0UQRiNsIHoZJwRZ/lH8jd7pvVckrQO4JroFa72sH7XNnZJJb8k DX4BZGMQy3dBfw== -----END CERTIFICATE-----Generated at Sat Jun 15 22:02:51 2024 by rpki-client on console-ams.rpki-client.org