$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft File: OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft (raw, json) Hash identifier: Dsnn5hMkUnMFEs3vZbgRJnR6d7tUN84cOCnxDLJZC1Q= Subject key identifier: 05:18:95:C1:13:AA:EC:E2:4D:30:9C:59:3E:28:C3:13:F8:F7:39:A2 Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8 Certificate issuer: /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8 Certificate serial: 0190720833F3737D6F2429441FC44E932886 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft Manifest number: 11FE Signing time: Tue 02 Jul 2024 06:00:58 +0000 Manifest this update: Tue 02 Jul 2024 06:00:58 +0000 Manifest next update: Wed 03 Jul 2024 06:00:58 +0000 Files and hashes: 1: 1--swjx5Yf6b6P4Bjt6ly0vvj4Y8.roa (hash: JKS28+2pUQyhZVYlVTh2cbf3l8eO45WDYz9m8IKdlk4=) 2: 3T-ZRU0AMikMWEVGsjSjDEd8xGU.roa (hash: xMjx0hRaBMuwme96cyhUCpcow4ecea4GuK4h/BZBnNc=) 3: 6RiT-IOUHLvlxX8lQIrtqygf9-o.roa (hash: Rz+VWSaZIJhFkFkGkGbFJ8RGW9NJHR3VniybXQwJqdc=) 4: Fo1e7Vz2i_vB7MwT4G1DyduBxFg.roa (hash: Y+YYCTa/FuNm15qHMpcHf3haMADvy/vXftlayHGdCrE=) 5: JMyc902U4qAH4W8GY_seA4V06YA.roa (hash: CInztdSEWa/kQQjBmI41PEJmgZEl/9daZDOnb6LHhE0=) 6: KeNp0x5bXjZbAP7qVQM_ScG34Xo.roa (hash: WK3P4S1K/jCTzo8aqbx15dQahXpuIuzg5ZUxUlTLMMA=) 7: Mi13p50Q15wKRoOpSTa41ffmJPQ.roa (hash: ppnQjiDFYPTPEoA4IY/TsMqsXGs6rtl0thWlCh9He0Y=) 8: OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl (hash: baM6ZsGwTjIvsuSqE6Nc13XzdN+ZiVrixTVioufjuPw=) 9: SSQ7UzKhE9LD-py3Zo5vc0ROqOU.roa (hash: wuxmB9cG4DaxuP+si45/XMRBmaqUkbeHov1K/g4AanU=) 10: WImvYwLdfJvu9q5O0TdgiIN2PIg.roa (hash: EZjzXb6omdrVH75iH1DsYiFyXP1diE9h0yr+QLYvMa8=) 11: XQOjAQpyqyb6puk1dS3QCgIuHvA.roa (hash: qcxPXUXCqSKwrWFDgbdAXxRmTz7IWfeyy1JGuY5RB1I=) 12: lR4IJzpInny5h17UDb47FFwgiMg.roa (hash: BwXCSe+91hoqn4tj4B/7jSZ5HrN9Kj5L0yo3/Re+ASI=) 13: oJR3nyG8g0dr0ZNqVbdQY-nYE78.roa (hash: +IH4Xeuqbug8hEgld8K3Iz2Kyyey74uVx37uQysFgS0=) 14: pUJ4zs0rfGxu5OusAIqcGPtIqZA.roa (hash: Cwg1IW1tbB4qkED3bxxq9hb38aWVxZLLIQPxswq9GsI=) 15: tebT8pC3OiZgoeIMo7Xn4SfeOBs.roa (hash: lTDDcTNQY2TU1DOmOTiQ67bzgj+R+ebLQyiEEvXsfho=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 03 Jul 2024 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:90:72:08:33:f3:73:7d:6f:24:29:44:1f:c4:4e:93:28:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8 Validity Not Before: Jul 2 06:00:58 2024 GMT Not After : Jul 3 06:00:58 2024 GMT Subject: CN=051895c113aaece24d309c593e28c313f8f739a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:90:5a:c6:5b:d3:0a:1b:77:00:03:4c:9c:41: e4:80:3a:0c:c1:7c:26:08:f5:83:78:cf:54:06:ec: de:7e:b7:a3:54:66:2a:4c:a2:5b:95:c5:85:f7:b2: d5:03:e9:49:84:ab:13:03:10:5d:88:f2:19:67:15: f9:46:39:ee:ef:61:a1:98:86:28:82:5d:71:7f:3e: 5f:12:4d:98:6a:ac:b9:74:cd:ce:b9:9b:5e:6f:2c: cd:d3:fb:84:28:6c:be:51:8d:14:17:3a:91:51:7e: 35:1e:5e:6d:fe:56:8c:dc:95:94:96:35:86:03:a0: 06:8d:3a:90:92:31:71:d4:18:9e:ff:59:01:52:40: d1:71:53:a8:b0:15:84:4d:0f:ad:91:ce:66:3d:36: 94:2c:84:03:fa:cf:c6:a5:ed:db:1d:95:24:85:32: 80:60:bc:d3:c0:35:be:f9:0e:6a:24:f1:c3:bc:d6: bf:a3:45:7a:2e:15:ff:3a:28:80:18:71:0e:64:8e: ea:a0:68:6f:e5:a9:fe:1b:f5:3c:35:38:c3:0d:d2: a1:70:2d:74:11:3f:a5:20:8a:db:74:36:d8:26:61: 76:f7:68:a1:e9:9b:df:d4:ef:38:e1:f8:c7:8c:26: b6:e2:58:32:ea:8b:2e:b6:35:2e:e8:67:5c:75:8e: a3:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:18:95:C1:13:AA:EC:E2:4D:30:9C:59:3E:28:C3:13:F8:F7:39:A2 X509v3 Authority Key Identifier: keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:a3:70:d5:72:fc:68:ef:10:99:35:dc:28:1c:7c:86:00:18: a2:1b:58:09:38:3a:8a:e2:b6:ed:52:ab:dc:ad:bd:d4:18:d0: 10:c8:cd:e3:10:8f:5a:73:d3:2b:87:73:29:3e:a0:f5:08:6d: d6:d9:08:56:30:d2:99:11:66:72:f1:c7:e3:45:ad:4c:e3:8f: cc:b7:cc:80:bc:af:de:10:e9:ce:0e:42:7a:8f:c7:d0:0e:1d: 83:42:ca:95:10:8e:25:47:43:c8:9d:7a:47:4d:dd:28:72:f0: ae:5c:65:e3:1e:7f:58:7f:c4:83:36:0f:b6:2a:d6:5c:b6:26: ee:28:06:da:e4:63:c6:4e:62:87:86:ed:af:15:42:d3:b0:24: 36:b5:da:80:54:93:05:2f:7d:ec:39:de:2e:88:d2:35:fe:8f: de:51:23:9e:4c:3b:52:88:ec:a2:53:67:1d:91:f4:c2:66:15: 16:0e:4f:70:31:83:bd:5a:71:d7:16:f3:66:92:58:98:00:62: 89:63:0a:3c:eb:c8:d8:f1:6b:b0:13:37:db:3a:69:99:4e:c6: 44:c4:3c:dd:6b:eb:eb:b5:56:6b:a8:5f:8b:33:0b:88:0f:1c: d5:80:5d:7b:53:65:94:5e:1c:4e:6c:82:fa:03:9d:05:06:8e: f7:82:25:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZByCDPzc31vJClEH8ROkyiGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4N2Q2ZGY3ZWI3NTQyZTAzMzNhZWVkZDE0YWRmZjhmNTFm OGNiZDgwHhcNMjQwNzAyMDYwMDU4WhcNMjQwNzAzMDYwMDU4WjAzMTEwLwYDVQQD EygwNTE4OTVjMTEzYWFlY2UyNGQzMDljNTkzZTI4YzMxM2Y4ZjczOWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZBaxlvTCht3AANMnEHkgDoMwXwm CPWDeM9UBuzefrejVGYqTKJblcWF97LVA+lJhKsTAxBdiPIZZxX5Rjnu72GhmIYo gl1xfz5fEk2Yaqy5dM3OuZtebyzN0/uEKGy+UY0UFzqRUX41Hl5t/laM3JWUljWG A6AGjTqQkjFx1Bie/1kBUkDRcVOosBWETQ+tkc5mPTaULIQD+s/Gpe3bHZUkhTKA YLzTwDW++Q5qJPHDvNa/o0V6LhX/OiiAGHEOZI7qoGhv5an+G/U8NTjDDdKhcC10 ET+lIIrbdDbYJmF292ih6Zvf1O844fjHjCa24lgy6osutjUu6GdcdY6jBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAUYlcETquziTTCcWT4owxP49zmiMB8GA1UdIwQY MBaAFDh9bffrdULgMzru3RSt/49R+MvYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2Mt NjA5YTQ4YjJiMTRkLzEvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2MtNjA5YTQ4YjJiMTRk LzEvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg6Nw1XL8 aO8QmTXcKBx8hgAYohtYCTg6iuK27VKr3K291BjQEMjN4xCPWnPTK4dzKT6g9Qht 1tkIVjDSmRFmcvHH40WtTOOPzLfMgLyv3hDpzg5Ceo/H0A4dg0LKlRCOJUdDyJ16 R03dKHLwrlxl4x5/WH/EgzYPtirWXLYm7igG2uRjxk5ih4btrxVC07AkNrXagFST BS997DneLojSNf6P3lEjnkw7UojsolNnHZH0wmYVFg5PcDGDvVpx1xbzZpJYmABi iWMKPOvI2PFrsBM32zppmU7GRMQ83Wvr67VWa6hfizMLiA8c1YBde1NllF4cTmyC +gOdBQaO94IlaA== -----END CERTIFICATE-----Generated at Tue Jul 2 10:48:08 2024 by rpki-client on console-ams.rpki-client.org