$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft File: z86tOQYl7boUCBCN9XzqRxYNcOU.mft (raw, json) Hash identifier: KnJ1Gx1Sm605YbAJaEZPFygrUt7yXDLlwoqb9Nw6m9Q= Subject key identifier: DC:05:92:AD:11:56:2D:AE:A0:4A:A6:DC:D2:75:1F:F3:49:DB:CE:BA Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5 Certificate serial: 018FBEA559D31E47FD9FCB6EFAF6D89FE440 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft Manifest number: 0427 Signing time: Tue 28 May 2024 10:00:57 +0000 Manifest this update: Tue 28 May 2024 10:00:57 +0000 Manifest next update: Wed 29 May 2024 10:00:57 +0000 Files and hashes: 1: 0QDRaJbpTIb-C4KaPbRku14K_T0.roa (hash: f1UMut3ZjkM7CLPyqsOW1jU1P7SrXCbM0X2h5tOnpp0=) 2: 1-LBNqjog0v6Alu1GMG3uORBB3zI.roa (hash: 2pp3ZBRMZEcQ5kTpxlm0GVRnNi2kdcv9gEebXtv6OD4=) 3: 2ybCPXsz02iEbie_biw6dAHZuKE.roa (hash: UuKVTCIRtGKxCZ2kXT+HWRul+W9O3/LBFD6UDhYITW4=) 4: 337VcgnK0NQHbdDdCyOVwIBrYss.roa (hash: kCl8fC0YITxAMBEyUobjioALCGJewx23T4Vnxj1xkUQ=) 5: 4G3d8roaupAClgqlaGXfHk-fNlA.roa (hash: X0dYR9bwXIvGPEqMIIMIU+Ev2QthBam6AI2fNe9oNN0=) 6: 76vZSYfE3virRiHCto6oGP6c8HA.roa (hash: JCPCSIw45EDyYpGbE7udaXa7sK6Ig1lYWjznp/ygfJk=) 7: 8mapcWNXwgPO8hoJZzDASndPq-Q.roa (hash: YYEFhsMS7jgq8RuMd4W+WbyogZE2vv4GKBF6C5HB3LI=) 8: A6MPHW-ry3IMd8vrIoLbU-EA5CU.roa (hash: jjmjrEztQ8EexAKYkMRDSFsqiMlwhssDjvTnC0ha+gE=) 9: Aeg4t5zAcG8xwJ8QPYSwmh7CdVE.roa (hash: o0mir75yWWb6Nwwebvcm5Cwnf9rtl/49JZhmAxJ/Z3c=) 10: CVs8OwBEt5LSTy02Gmm2nEQoc6Y.roa (hash: r0KDtpYvp6ZkplvxOP+6momfyMxg4NZqR2oxwkwrG/Y=) 11: Egt-d83CcFNcDr33icWcGimJX1Q.roa (hash: Q+Q3GmXisv6JU9gym07auBKGQk4oHQXielXhxEAhxqw=) 12: FIF6mjIjRWT5SS7m8A6SC0XW270.roa (hash: le9oplmZoqUEh6w8LPvC5vUImP/20WTi6YYgZ3H7Gho=) 13: Jwm1aDJVaDqgmIXNd8NeSkpbNWc.roa (hash: ZedZaWM1LKV5JBtsZOKql3EHlZQrOK/Q4X+Eb+7I+lw=) 14: L0-_xPYGlr9KTSwbZTPNBF_wVYc.roa (hash: 0X86YtAntoTcB7M8XWOZMUlDB7JM72+321gbc2EcByw=) 15: L8tZWjNWSaekHdWevyC5u7iiRhg.roa (hash: DDADheuyCv7Y8aoIkSHBJ1cn3r/VmkmC6hn4sBqnHu8=) 16: MSN2byCvEk1gJiD9IO7TJlMJiTQ.roa (hash: xd2I/eTuZZSqMt5E6+0c5FYEF65aI0PBcz8PNBdaL04=) 17: MXOdUCvuEFwbSMJQSk-lj8STNRE.roa (hash: lXJiZ3GXchvXtSuYcs9f6PKRrt4YOHod1oxYbRGsZj8=) 18: TVyy6AvkP1QocIxunIZuIJu3SBw.roa (hash: p/OTNsY6xvfY9O24/vQyrEVykKSgyiWBC/sHU25jmnQ=) 19: ZxwjsK6DMOiEUDkdxJxVe0oANFo.roa (hash: m0+M1+t7SWvKPI6JN4oO7w9hzdBhMySBJEOQOhg+hOQ=) 20: dOxXJVjRxZouiKvEZLmfiZWLwFs.roa (hash: NeYBSDSUF6CDppwLjJvE4k6uCtG+7GJuYWaWRKYAQk0=) 21: er3hE85P8bfzLY4Ef-Hp7-NmwHY.roa (hash: ljz3Xk6z9N+bt7FCTpg9hub7GM6qpYMEzA1t8etifVY=) 22: fH9dkv_8XfMck0mXlU1Ttl3pG0M.roa (hash: jgh8i3yx0l5ylsJWKXPIRJm4Dj+NYdJ4euoBrH+i+r4=) 23: gvl9fg_U0pmX_206r8A3MmL05iU.roa (hash: CgSTcSdF+G+//XTg1rAcWuMSW5u5QOQd5nZA8UWj+KY=) 24: iGm6g0FhbaTJLjMqsEcHi_-AC3A.roa (hash: H6y5B9C04jNiEBwcveU89BwC3L1yOHX6d/bagQquc+M=) 25: jKPaexmHabMQSLl0cGG0C8eJ0Q4.roa (hash: o+f1CbdYxRKZnsuNYCbieCKkd/ZH+4XomMWytifbOMU=) 26: lQ4QGTDKxDhFilCcpVqZ8t0M3h0.roa (hash: k2vVC0i9xdkqlqs6Q/7Jwpayd3NGZzmiXw1tQ7GYqb4=) 27: lQxYrNc3yphH6LhsnKfvf4qPTi8.roa (hash: la+OeyAVV7cirGYHqRiznLqPkVW2keF2e1f7O4yIdHI=) 28: mzlGpu-B3kYJQTzNayXsqkvCQ-k.roa (hash: zfMspkTE+VlOimak/4R2OJ53SaxQnUPfWspwpPsQt4o=) 29: pS_3BUOTHnNq05Iba5SHtLggfIU.roa (hash: R3EzVAdovHBOmd50YLuaH+y9wnYZaOMYtpkiwo21HBg=) 30: usXd_oSAX0PM-sst0J_qLa0j9-0.roa (hash: PNkZXvOoRyxuhmU8tVGIQQNJE4V8eMblQ35Aswa6dyg=) 31: uyAectNt_m2j8Nejsu-QcNBI7mM.roa (hash: rHyOilKPbuSneFevSnRSEWQ4qZZFUa7oU80/fphs/zs=) 32: xpX8dvOlx6TrAn24HEPdTFcbhFk.roa (hash: Jeh6/qRHNi9UFob06X0yUKDh0yUK3pX/MeFuNRO3V3Q=) 33: y9lBd5XAXJx5eKtvnJmKmn7wGMQ.roa (hash: z6ah7mFjT6AkKtXO+CMd0pNNCRGSk3SQIZW347vwp80=) 34: z86tOQYl7boUCBCN9XzqRxYNcOU.crl (hash: fHwCxA1Q5Dc6fhvy20FtGA60B6gwO9zIiEAx1wIi1Os=) 35: zg9RgRgR2uchLp5vM8dtLpIQ6hY.roa (hash: 36MD+3OkJS44QftA2+0CP+wF0wpv1ycdUH2U6p4DwbY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 May 2024 10:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:be:a5:59:d3:1e:47:fd:9f:cb:6e:fa:f6:d8:9f:e4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcead390625edba1408108df57cea47160d70e5 Validity Not Before: May 28 10:00:57 2024 GMT Not After : May 29 10:00:57 2024 GMT Subject: CN=dc0592ad11562daea04aa6dcd2751ff349dbceba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:14:48:48:e0:74:20:da:f5:94:78:ce:ec:b8: 31:dc:af:0e:2e:ab:43:81:2f:08:df:f9:04:8b:f9: c3:0b:ec:bc:ed:87:e6:48:e9:67:44:b5:24:8b:f4: 4b:af:14:a0:9f:99:97:51:6e:eb:2b:18:e2:6d:c5: 4d:54:db:88:b0:19:aa:19:42:07:b4:98:94:cf:4a: d1:6a:5c:d5:4d:22:b3:e1:9e:85:29:a2:b4:21:fe: 65:24:ca:5b:57:fd:cb:fd:09:54:2e:e6:bc:38:1c: 08:0a:62:13:94:0e:b1:92:98:15:40:44:7f:1e:3f: 78:71:83:6c:fc:72:8c:68:a5:41:38:03:17:23:63: 89:91:ed:b6:1b:dd:50:56:05:15:8e:c6:ee:8c:a5: 41:fa:ba:79:fc:97:ff:a9:de:61:60:e5:eb:0a:c9: 06:ea:86:65:49:94:84:c3:71:9f:fc:42:a2:19:dc: a6:f2:51:2a:50:46:50:87:7a:d6:f8:5d:94:a2:db: a2:ed:ff:de:3b:23:8c:23:5a:43:66:4d:c9:06:16: 0f:43:ad:27:28:b3:2c:df:37:17:1c:c6:0f:75:3b: 04:09:0b:7d:b4:b3:89:64:b2:1b:bc:b0:08:bf:50: 2a:23:d2:93:a7:b4:40:52:c5:29:43:e6:1b:3e:d4: cf:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:05:92:AD:11:56:2D:AE:A0:4A:A6:DC:D2:75:1F:F3:49:DB:CE:BA X509v3 Authority Key Identifier: keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:dd:f9:a8:cc:19:8f:ce:0d:d3:25:0d:db:9d:81:3a:0b:ff: 20:e6:5d:0e:c5:e4:1f:e1:37:3d:11:3e:a3:8e:41:e1:84:0e: 7c:ef:fa:d1:ba:c1:79:27:24:a9:ea:08:28:ce:f9:dd:5d:75: 10:d1:9d:34:64:7d:54:75:56:47:d2:40:90:79:13:d5:be:d2: f6:74:78:eb:85:65:e0:c7:c3:f2:0f:42:f7:55:a5:f6:09:40: 94:03:3d:49:eb:fa:e8:5f:b0:4e:b2:72:9e:fe:79:29:7c:68: 28:85:5b:94:19:1c:5c:ab:d9:d9:d3:ac:58:a5:04:d9:cf:0e: 1a:ce:05:5f:53:88:c9:86:3a:61:87:ab:87:fd:7f:38:d6:76: 6d:6c:bb:1c:fd:3a:ed:06:9a:e9:89:3a:c7:4f:34:73:53:71: 14:28:34:a0:68:41:22:99:3c:fb:35:34:1d:3a:da:23:b6:ac: 3d:93:47:c5:dd:64:eb:bc:c9:34:bc:97:80:75:e4:ca:64:d9: 02:d8:a4:2b:fb:90:e5:0c:05:26:bf:4c:51:d1:39:3d:0d:42: 9d:67:3d:7c:21:bb:1a:1e:a9:e6:00:d7:75:62:bb:e1:85:da: b5:ed:b4:d6:e1:53:ee:1c:86:b0:ba:60:51:b0:91:fc:f1:63: 38:c4:58:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY++pVnTHkf9n8tu+vbYn+RAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw ZDcwZTUwHhcNMjQwNTI4MTAwMDU3WhcNMjQwNTI5MTAwMDU3WjAzMTEwLwYDVQQD EyhkYzA1OTJhZDExNTYyZGFlYTA0YWE2ZGNkMjc1MWZmMzQ5ZGJjZWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhRISOB0INr1lHjO7Lgx3K8OLqtD gS8I3/kEi/nDC+y87YfmSOlnRLUki/RLrxSgn5mXUW7rKxjibcVNVNuIsBmqGUIH tJiUz0rRalzVTSKz4Z6FKaK0If5lJMpbV/3L/QlULua8OBwICmITlA6xkpgVQER/ Hj94cYNs/HKMaKVBOAMXI2OJke22G91QVgUVjsbujKVB+rp5/Jf/qd5hYOXrCskG 6oZlSZSEw3Gf/EKiGdym8lEqUEZQh3rW+F2Uotui7f/eOyOMI1pDZk3JBhYPQ60n KLMs3zcXHMYPdTsECQt9tLOJZLIbvLAIv1AqI9KTp7RAUsUpQ+YbPtTPZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNwFkq0RVi2uoEqm3NJ1H/NJ2866MB8GA1UdIwQY MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt ZjViNmE3MThmNGI1LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1 LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqN35qMwZ j84N0yUN252BOgv/IOZdDsXkH+E3PRE+o45B4YQOfO/60brBeSckqeoIKM753V11 ENGdNGR9VHVWR9JAkHkT1b7S9nR464Vl4MfD8g9C91Wl9glAlAM9Sev66F+wTrJy nv55KXxoKIVblBkcXKvZ2dOsWKUE2c8OGs4FX1OIyYY6YYerh/1/ONZ2bWy7HP06 7Qaa6Yk6x080c1NxFCg0oGhBIpk8+zU0HTraI7asPZNHxd1k67zJNLyXgHXkymTZ AtikK/uQ5QwFJr9MUdE5PQ1CnWc9fCG7Gh6p5gDXdWK74YXate201uFT7hyGsLpg UbCR/PFjOMRYLg== -----END CERTIFICATE-----Generated at Tue May 28 17:34:33 2024 by rpki-client on console-ams.rpki-client.org