$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft File: DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft (raw, json) Hash identifier: 6eYSJk3oEgzv86h4giCh/UbmvlGFIhG6Mahe9p698Js= Subject key identifier: 92:3D:1B:F8:59:EC:8D:6E:BA:0E:6B:D1:9B:5B:25:C4:EB:6E:16:9A Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Certificate serial: 018F86A3F0B314C7BB6024442E55D68B7741 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft Manifest number: 1180 Signing time: Fri 17 May 2024 13:00:41 +0000 Manifest this update: Fri 17 May 2024 13:00:41 +0000 Manifest next update: Sat 18 May 2024 13:00:41 +0000 Files and hashes: 1: 20q5ylf1YJsm8RXiEl85HQxbM0g.roa (hash: PLHieY+cBGvE+qmRqwBONLcwgkYlaPVnIJ0MzjRIXVY=) 2: 2gUjlPsHqb_ncJcZ78sLRgGxgm0.roa (hash: 6pPasbljOid/unjMtz4muULDrAeLY88ZGgh5fs7tFUA=) 3: 3D7rJFyhnPBQv7KbLuLvgJxN48U.roa (hash: eFSTwFQuCpY+9JuTu481CDzZ+JcTAWphQkHvsTWt1qU=) 4: 3kJfKaEdoRO8F1BsxeAb1_F-eO4.roa (hash: nWHbcOJ7nJfQ34U+mLXxnYhPaiW6rMc/NRjtTtnEFys=) 5: A4ETMnVpd9FKMsWr1xoGVNiRnQ0.roa (hash: om1gO0GDBD6gvouVjflpQK4UVmpP3oimb5oVnEzGSHI=) 6: C6SZ6sx6DqKZyXUk0FyTcVkU28g.roa (hash: 29omU0S1FzDixXTVjlH5LMOkvtB6uWxUWAQvxa0RxFY=) 7: CicAHWRR5XOwNMJCvxwZATnlww8.roa (hash: HD4XTQ66LapfO87iOiV3HPYGdxRYCImk1DdsXwOnng0=) 8: DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl (hash: SPYS5K4z29VxMmQlcMsdhCLGHxaCB9WYLTtvVBjr9BE=) 9: DS3A8f598VOd6_-2g-KDEl73Fh4.roa (hash: eJzg7+d7/JBTEKtsOdD1OZfc+ifYUlRADs9hIT64vvA=) 10: FEmNV6RCXEyXSd2kVJ8L786goBY.roa (hash: bb6RMCGc4tJgnUSuQIuxYAR34DxEQ6c3anZt6NKD4o4=) 11: NWrwC-CLu-jxgbH3O_DuLYKhOF4.roa (hash: TJ7gN7ruytFjGwlTLNh7t1tWjn1CMeZhzRnEQtjhluU=) 12: NhO3_RjbYIpGKWdlFLCubHI1S1Q.roa (hash: Bx1MYNMWhkMUsNXeW8txyueZdiri180rcR0ME4YiE/o=) 13: OeKoXcd26vyCg9h0RkAhdzBSnoo.roa (hash: 1lzGTe/X4eOGN99jeD4ND4SYrGHbTm9yHFyQfmgf0fE=) 14: PG7Zf8aAWfqw9tKBN6g1hjNwDPQ.roa (hash: sPDzBzy3QYxqJx/oMxGQ1FFccqsNGIFk/vyJOo8gdvU=) 15: S2abFgVBaX0vxIMVaBvfqkautT8.roa (hash: ZIJ5a+Cyw/DlmQJsbFP/o6mLYtorGNIc27EwACJUnDI=) 16: U9dcbHPHf_3ASAJ7POK5fWlL5uw.roa (hash: 3eIXlWjf9tJGyYVtPsciWlDO1pjT8+VzuGXX6vdJE/Y=) 17: WymygCcy2Cth2XCvGhpRvzNvm8U.roa (hash: saRq3HRvr89AG4wdqhPbp/MCJcv27U/aycPomon4sMw=) 18: XgFgH_9RQY6v5e1k8toTXe3dGdA.roa (hash: mjUBb0W676jXnwpAo0EqjPP4mAvi+5/TfeXi0bh4ZJI=) 19: duyt9Q95uxdJTfQpIcIlJc-dN5k.roa (hash: aJN1l/17Ww/SdimLNISIp50voX+ETKkoGnJIVTr+Ej4=) 20: gKxNSLaRPEFnDExhi75buJWdrpU.roa (hash: SumVMzb4NtPBdfqqjxWXnD82kQ3CCubj9rTDNwTZufM=) 21: j2u66JaywmoFYWfPIADVdkPFJQ0.roa (hash: Em5MQjkqzDdxE+eTy+VgcmbQciK3FMpXD4JxzeW/9JQ=) 22: mSiIWURkQkpONEXeScvdUxN-Rrk.roa (hash: Dbf2NNHLkjwbVRVdC0AdCaSnEu/8byFPH6WOmdVAUAM=) 23: pCkXekt-IN15CD9_d0JUkoetpLY.roa (hash: Ic8KLXKTsRta59ty8Jlls4Nhokb7B889HKvIqQ+FqvM=) 24: rUzBuLfMTnGa0Sw4qWDG8MdNv8Y.roa (hash: xgXz1M4afQozNwIOLdafkUm7BvYEWhyCq4btNRWRY+M=) 25: so3611zKNeWDC7xRB_gxQRKcfE0.roa (hash: 1I8I3fP+BXgxqvv4+VEimTztqZSIqwxgXnPKlgwP0KE=) 26: tXzCu7HU1iQIa1IG46ejSsoHoTA.roa (hash: 1qFE0LUluZ0P/Oyt+0AJYBKNasL68koX7VEUM9iuHz8=) 27: uE7fBnbRHYfmBCkHPxXmbGGjA8o.roa (hash: qoYnsB8xu2nQbGo8D50i97IapNq2JumQn04kxc9+nE0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 May 2024 13:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:86:a3:f0:b3:14:c7:bb:60:24:44:2e:55:d6:8b:77:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Validity Not Before: May 17 13:00:41 2024 GMT Not After : May 18 13:00:41 2024 GMT Subject: CN=923d1bf859ec8d6eba0e6bd19b5b25c4eb6e169a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:df:04:85:18:2e:8e:35:b3:a0:c0:5a:ad:b6: 5d:1b:31:dc:a4:7a:18:4a:36:ae:56:38:e2:c9:9f: 6d:39:58:5d:0d:4e:3e:e2:bd:8d:39:d9:02:f5:60: 0b:49:eb:e5:81:4d:60:c3:50:a7:e3:90:5e:43:cb: 67:79:ff:5c:f0:31:0b:6e:c1:47:c9:96:75:52:08: 25:1a:cb:f8:2d:70:94:28:05:a2:3e:69:fc:9b:dc: dd:81:38:49:33:58:e4:c1:b3:bc:75:87:47:7b:36: 97:a6:56:5c:cc:95:35:40:ca:17:a9:90:e6:74:d8: 83:28:c5:b7:3b:f4:0d:7e:13:0c:bd:29:b1:13:fb: c2:d6:7c:e1:f6:79:d5:0a:1f:7c:0d:13:e7:72:ec: 18:74:aa:26:6d:9a:52:1d:e0:f4:f8:96:86:c7:05: 0d:0e:eb:f2:c2:c6:3e:1d:19:c2:9d:f0:eb:dd:f5: 18:cb:4e:e4:55:81:5b:68:01:05:d7:5f:a8:7f:a2: bf:63:46:0e:dd:fc:97:24:a9:5a:b3:62:d7:20:7b: f3:59:8e:49:7b:f1:a8:fe:45:78:fb:05:0e:0c:59: 22:e4:da:9d:78:9d:32:08:63:15:4f:ff:b8:b9:52: d4:c7:c1:7e:76:86:92:9b:40:ab:a7:55:2e:f6:7a: 9c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:3D:1B:F8:59:EC:8D:6E:BA:0E:6B:D1:9B:5B:25:C4:EB:6E:16:9A X509v3 Authority Key Identifier: keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:69:ba:73:77:03:79:9d:2c:e4:30:89:29:55:39:67:18:2d: 2a:b7:6e:67:5a:cb:58:1d:60:84:c4:61:ba:34:60:c2:00:6b: ab:5d:58:0f:a4:54:e5:b9:b8:12:c0:14:29:48:0d:cb:43:ad: 50:91:fa:4c:9d:ef:ac:3f:f0:7d:3f:24:e8:48:06:ad:4a:8a: f3:64:7d:24:16:ff:73:f3:ea:5d:10:e4:e0:77:91:f7:3c:6f: 37:75:22:c5:68:6f:3d:0b:35:6e:e9:cd:2a:48:9b:f9:19:83: 20:cb:c6:e2:3a:00:74:0a:45:f5:c3:cc:38:d7:17:16:8b:4f: 32:3f:c1:12:98:cb:3d:a8:f7:d5:68:6a:8b:95:49:60:ca:ba: 50:01:e5:01:8a:9c:7d:47:c4:98:f7:79:2f:92:e6:f3:e4:8a: 28:67:fd:14:41:99:68:81:db:a7:97:0e:db:d7:27:80:2b:ce: 6b:cd:66:7f:5e:9f:09:73:45:ae:50:da:67:00:a6:cc:62:ef: c5:f7:e8:16:62:b9:c6:ad:a6:4b:c4:f4:f6:37:e2:8a:31:9a: fb:fe:2e:20:10:c4:ea:06:fe:15:47:63:5c:c1:4b:02:22:da: 5b:0e:e2:0c:25:29:0f:70:8e:0b:93:15:a8:d1:af:66:6a:94: ba:95:3b:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY+Go/CzFMe7YCRELlXWi3dBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMjFiOTI1YjRjNGJjYzMwZjc3YzljNDFiYThkMDQwYWM5 NWRmYzYwHhcNMjQwNTE3MTMwMDQxWhcNMjQwNTE4MTMwMDQxWjAzMTEwLwYDVQQD Eyg5MjNkMWJmODU5ZWM4ZDZlYmEwZTZiZDE5YjViMjVjNGViNmUxNjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsd8EhRgujjWzoMBarbZdGzHcpHoY SjauVjjiyZ9tOVhdDU4+4r2NOdkC9WALSevlgU1gw1Cn45BeQ8tnef9c8DELbsFH yZZ1UgglGsv4LXCUKAWiPmn8m9zdgThJM1jkwbO8dYdHezaXplZczJU1QMoXqZDm dNiDKMW3O/QNfhMMvSmxE/vC1nzh9nnVCh98DRPncuwYdKombZpSHeD0+JaGxwUN DuvywsY+HRnCnfDr3fUYy07kVYFbaAEF11+of6K/Y0YO3fyXJKlas2LXIHvzWY5J e/Go/kV4+wUODFki5NqdeJ0yCGMVT/+4uVLUx8F+doaSm0Crp1Uu9nqcoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJI9G/hZ7I1uug5r0ZtbJcTrbhaaMB8GA1UdIwQY MBaAFAwhuSW0xLzDD3fJxBuo0ECsld/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2Ut YTM0NzU2NDE1OGY4LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2UtYTM0NzU2NDE1OGY4 LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF2m6c3cD eZ0s5DCJKVU5ZxgtKrduZ1rLWB1ghMRhujRgwgBrq11YD6RU5bm4EsAUKUgNy0Ot UJH6TJ3vrD/wfT8k6EgGrUqK82R9JBb/c/PqXRDk4HeR9zxvN3UixWhvPQs1bunN Kkib+RmDIMvG4joAdApF9cPMONcXFotPMj/BEpjLPaj31Whqi5VJYMq6UAHlAYqc fUfEmPd5L5Lm8+SKKGf9FEGZaIHbp5cO29cngCvOa81mf16fCXNFrlDaZwCmzGLv xffoFmK5xq2mS8T09jfiijGa+/4uIBDE6gb+FUdjXMFLAiLaWw7iDCUpD3COC5MV qNGvZmqUupU7gw== -----END CERTIFICATE-----Generated at Fri May 17 19:13:31 2024 by rpki-client on console-fra.rpki-client.org