$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft File: LvlXq6LvADUoUOICRkxx0zyoFEg.mft (raw, json) Hash identifier: DERfxHvvHM2yDQxAEysFMHgAyBG+Y/luI7wMZFTZ/WI= Subject key identifier: 32:8E:C4:C8:01:C9:09:CC:04:E9:4E:24:FE:DB:B9:9E:2E:8D:82:91 Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 Certificate issuer: /CN=2ef957aba2ef00352850e202464c71d33ca81448 Certificate serial: 01901DEAFD6CDAFE87F31111DC07A77D3941 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft Manifest number: 11CA Signing time: Sat 15 Jun 2024 22:00:57 +0000 Manifest this update: Sat 15 Jun 2024 22:00:57 +0000 Manifest next update: Sun 16 Jun 2024 22:00:57 +0000 Files and hashes: 1: 0vhbry9267z1bycFaeKiv2Y1xGk.roa (hash: 5eGxNGd4irinhUhREjnfSFwjMcYS8D+uMIZwb4U9zIo=) 2: 6TTJDyk0yAI7WETTwx9sGBhLjJA.roa (hash: jiRKVOMndM2wTqXsoHDqYGD+7PUkhfYD6jKsfp16GkI=) 3: 8AaWk5yqsCIShWFkavPhwhRcONk.roa (hash: mB+cemiNG5c4Su6pjDOpNZTpQnZab/t4R57EQPBNDzk=) 4: 8eeGcQT2zLMy7wVgUfYeqFP6ZKE.roa (hash: sLnBV1fQE5NbMtiVErtpDBryEwynDQfUbla2rHDC2g0=) 5: FVfeZmdBS01uRUol0vp78tTUSz0.roa (hash: 4aEgoAhQ3ch2tDNNzscmboR2LUYOG3WYhnAv1DkW2zA=) 6: IgvI_ChQQHgTIF1A_X5HJrbT4Rk.roa (hash: UJy9Tc1sFKroJXb5Cv/nKlNwwuyKlYbQjCZqQPteFeQ=) 7: JHuhKatMJbEWDjhPdzJcsyiWUUw.roa (hash: 6ngNDiFFa331NSPXYPWaY2H+X27VH69OEQm3fSh9SaE=) 8: L8DObnrkTpmOHWA7_OFC0zfG2Oc.roa (hash: rHrF5qnGm7rN7/qNwXeMYbmaflNMMX4VmfDwfOlCcJE=) 9: LvlXq6LvADUoUOICRkxx0zyoFEg.crl (hash: 2UMDOQXTVYrFqIeoAbkV2KcHiL+YHLTVdTFI0KIiy7I=) 10: QCM7JT0BWjHmwYtSa8iC_Ma237I.roa (hash: /4cnJ6DhHbj/hpYY6g8AghFlJRfDhNPOZKPXU9dae44=) 11: UkTa21LQcdSQ4tU7mxD3lUi-UcE.roa (hash: angsn8IJ43mtO/ZzeIKHZobgiyUH0cGGqtBtiKab9Uo=) 12: a6EHlC0C-wLEmcYYvLbPUGzvYQk.roa (hash: GL/Y88IENoJ3kGFgyZEDBdqHxptupdxagbUJ3tdIWaI=) 13: cgIQiY9NdqbWObd8wZZffUaBL7k.roa (hash: /tVs8zgiwYWLvnt0Fj6NWbCxyqlcF3crmr8qUi81occ=) 14: k1IGWaEG30ks5Zuvl7_wMyNdmkQ.roa (hash: Pb8c5XwnDD9amytTtjJU/ifT6X7680m6pWwEl/ZT0Pg=) 15: sxbatb0Udc9WRm0mnACV_mLx3Lc.roa (hash: HyzVOeGuHQw3Vkj7x1JIMToCoEmSdYxPtNAtUjcb7D0=) 16: vpGrjFL9r64RUYjfkCUUeeqJa2Q.roa (hash: 1pjMJ3hrfqX2cagkiCQl4f5PntKz20Xmrd9SmPJFpX8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 16 Jun 2024 22:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:90:1d:ea:fd:6c:da:fe:87:f3:11:11:dc:07:a7:7d:39:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448 Validity Not Before: Jun 15 22:00:57 2024 GMT Not After : Jun 16 22:00:57 2024 GMT Subject: CN=328ec4c801c909cc04e94e24fedbb99e2e8d8291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5e:a5:42:f0:fc:d1:b6:86:1c:76:d9:6e:48: 04:15:ea:88:a6:fa:f0:d2:91:75:e6:88:42:25:b2: 4e:e0:21:c1:eb:27:8f:82:7e:01:9c:5c:e8:17:67: 70:d0:13:63:ad:d4:39:b5:a4:83:08:c4:45:a6:15: 9a:f3:80:49:65:be:6a:18:29:d9:99:9c:d6:79:5b: 5c:c3:db:b7:35:8b:b7:c2:38:95:56:8f:a4:08:d3: 26:b2:d6:93:03:7d:e5:d6:3d:e2:a1:5a:7f:c0:70: 77:7e:7b:e3:c3:19:de:82:d9:33:de:92:82:a7:13: 27:8d:ff:64:c4:ed:a7:14:2d:57:bd:8f:28:43:1e: fb:44:f6:04:4e:eb:93:2d:cc:d7:1f:96:da:58:51: a0:20:92:17:c4:b4:f4:01:9f:2d:66:b1:a0:2e:d1: f9:21:e5:94:10:63:1a:8f:65:74:51:b0:65:b2:2c: dc:75:57:ba:91:6f:36:cf:78:f2:e9:48:b3:ad:4e: aa:8f:bb:6e:67:7d:6b:58:31:bd:1f:37:06:db:37: 32:f1:51:fa:54:f0:f2:c3:cc:46:8d:af:1a:0b:de: a3:07:7b:45:f3:14:6e:f4:c5:26:cc:cd:89:c8:b2: db:43:7f:44:1f:96:d2:3c:58:a1:28:24:39:36:05: 00:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:8E:C4:C8:01:C9:09:CC:04:E9:4E:24:FE:DB:B9:9E:2E:8D:82:91 X509v3 Authority Key Identifier: keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:cb:12:b3:fc:2a:4a:d2:63:17:84:e1:35:e1:ad:e7:21:2e: f2:38:fa:3b:6d:e8:9d:86:52:e6:97:64:d6:f0:fe:8c:9f:c4: 7d:4e:53:80:85:03:5c:91:c5:07:b6:94:ba:8f:d2:6f:20:38: c3:4c:17:9d:37:64:b5:6e:76:d0:85:6b:9a:16:d7:35:17:f7: 84:cb:83:7d:18:6f:71:08:63:c4:08:89:12:9e:26:58:be:4d: e7:ef:34:30:53:63:d8:7c:c6:c5:45:6f:d0:0a:5f:75:d4:c5: 37:ea:55:ca:0a:ee:95:fe:70:66:0f:71:d3:e0:a7:d7:ac:1e: ad:81:0a:6c:dc:4c:0b:5c:11:7b:11:e9:50:0d:42:27:bd:4d: 61:41:9d:60:a9:90:e8:a2:21:b0:63:3c:82:37:ff:b1:3d:53: a3:84:a4:de:c9:e2:19:47:f5:0f:cf:ea:84:a0:6a:91:a3:f2: ce:38:a4:4d:be:bf:a6:be:3c:e6:7c:51:e1:0e:99:f6:3f:d5: 57:99:c4:c2:0e:33:ea:d4:6d:78:24:aa:54:8a:82:50:41:bc: 8d:e8:d5:cf:9e:75:cb:0d:38:ec:3b:20:db:e3:13:d4:cc:b6: df:42:b3:df:76:8e:a6:ce:42:4a:0f:57:6f:91:3e:2b:79:e5: 8f:fe:51:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZAd6v1s2v6H8xER3AenfTlBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZjk1N2FiYTJlZjAwMzUyODUwZTIwMjQ2NGM3MWQzM2Nh ODE0NDgwHhcNMjQwNjE1MjIwMDU3WhcNMjQwNjE2MjIwMDU3WjAzMTEwLwYDVQQD EygzMjhlYzRjODAxYzkwOWNjMDRlOTRlMjRmZWRiYjk5ZTJlOGQ4MjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw16lQvD80baGHHbZbkgEFeqIpvrw 0pF15ohCJbJO4CHB6yePgn4BnFzoF2dw0BNjrdQ5taSDCMRFphWa84BJZb5qGCnZ mZzWeVtcw9u3NYu3wjiVVo+kCNMmstaTA33l1j3ioVp/wHB3fnvjwxnegtkz3pKC pxMnjf9kxO2nFC1XvY8oQx77RPYETuuTLczXH5baWFGgIJIXxLT0AZ8tZrGgLtH5 IeWUEGMaj2V0UbBlsizcdVe6kW82z3jy6UizrU6qj7tuZ31rWDG9HzcG2zcy8VH6 VPDyw8xGja8aC96jB3tF8xRu9MUmzM2JyLLbQ39EH5bSPFihKCQ5NgUAawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDKOxMgByQnMBOlOJP7buZ4ujYKRMB8GA1UdIwQY MBaAFC75V6ui7wA1KFDiAkZMcdM8qBRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYt MDRhMjdjNGQ1NDUzLzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYtMDRhMjdjNGQ1NDUz LzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATcsSs/wq StJjF4ThNeGt5yEu8jj6O23onYZS5pdk1vD+jJ/EfU5TgIUDXJHFB7aUuo/SbyA4 w0wXnTdktW520IVrmhbXNRf3hMuDfRhvcQhjxAiJEp4mWL5N5+80MFNj2HzGxUVv 0ApfddTFN+pVygrulf5wZg9x0+Cn16werYEKbNxMC1wRexHpUA1CJ71NYUGdYKmQ 6KIhsGM8gjf/sT1To4Sk3sniGUf1D8/qhKBqkaPyzjikTb6/pr485nxR4Q6Z9j/V V5nEwg4z6tRteCSqVIqCUEG8jejVz551yw047Dsg2+MT1My230Kz33aOps5CSg9X b5E+K3nlj/5RlA== -----END CERTIFICATE-----Generated at Sun Jun 16 03:42:44 2024 by rpki-client on console-fra.rpki-client.org