$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.mft File: Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.mft (raw, json) Hash identifier: ZUf4EJtrLYc6GTPL8WNYtimcWSPosrCBP9s1Pw3huJ0= Subject key identifier: D9:05:6F:D3:CD:11:49:DA:92:CB:09:22:7F:71:DA:ED:A3:63:CB:2C Authority key identifier: 5B:2D:D9:FE:62:8B:6B:C1:01:41:DE:02:41:76:6A:1B:7A:63:19:3F Certificate issuer: /CN=5b2dd9fe628b6bc10141de0241766a1b7a63193f Certificate serial: 018F855C1E5C52792DB7519B7BCBB6A0368F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.mft Manifest number: 10BF Signing time: Fri 17 May 2024 07:02:37 +0000 Manifest this update: Fri 17 May 2024 07:02:37 +0000 Manifest next update: Sat 18 May 2024 07:02:37 +0000 Files and hashes: 1: 2elKa6i_RzTZnRpnaJ2TYLp-Onk.roa (hash: aXu/tbE7ariGqykoQU8l7ZDuI5iPdhk9F9mNAz8jC2c=) 2: 3BNCC6G8UKlPfD-EcgCOqjK8dfw.roa (hash: FnYucASH0faDas5zVmszZ9oYD2dtWt4x1IpKf5VnjYM=) 3: 3o8myZ_Y-fkyy2X8wzy1b01ZMug.roa (hash: bjkiR2W8stJRMyuDlbA8BBZDd9gMYSRmsHzyRF+xqms=) 4: 8UX-9eWqADWEjQTLgZmDGo0sfi4.roa (hash: wTS+NltJCmB9LrIbyD40fkMkIbpxp2uUCUOjxXpI9sY=) 5: DI44sVDvO7RuAU8dwuLDCHlnU-Y.roa (hash: PNwnNJOq5te0xdiJ9tiO5PK7hyVQ4Z2sa8Ycr/PBEYU=) 6: Jcoh4y6gYB3YE7Y0W-brVFJBSoU.roa (hash: fkWLTJqKlG+vf1YdQdMNhDbxH0Oij7cOWSvmHKJ9vj4=) 7: LCqjqzImYtF3LfKSarayZ28FQZw.roa (hash: aM7YmAujA6RDorSyjELX7/oGKDM41qLvTiUFQB10RRw=) 8: NkQHnXfBpUc3DMuW29R-qLBKwGQ.roa (hash: WukUTE+nKWHprtk5cf1YfbwbziTk9i1jdIuZyqBuYVI=) 9: UgdYxJZ4kSIL7GqlE3O86lqWSnY.roa (hash: AZ86jCS/H/Vk4Auz884p3PVaLkrZIsAj1dOzZhCAs6U=) 10: Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.crl (hash: lq7vdRkW9JvddF0ypQAWKw+MoAmFS1nI0T5m+CHWRl8=) 11: mOwLFZD8cQhJeAk93TUwR_fZSiM.roa (hash: UJFOgWKFnmWUoFEZnNWxjdqcF++8ojzKAPNNBvHmyB0=) 12: oGE-1j_0GnxqNwbw9oIc2C1iNnM.roa (hash: qHSS3V10m5YUcktzm6QW8yFah9NvI4XfA8vyqvEvzOU=) 13: sit7Wse_7Jmn-eEohy-uhj7dy44.roa (hash: 1wjcrLrH2/tVv/dJ/8OYNIJeJWY4rsYTa4S6L8U72t4=) 14: u9iaDA0fDpCE9DMMpsuC-iH2cUw.roa (hash: qIEFKKj+M9X3slA8bmPPO6aOw9fDtX/idz/geyVyrJg=) 15: uNEwSESXchQDBwMR2BT3BRCtkGM.roa (hash: 4V8uX59vr66ou0i42HfX9VvwrfhCnScGVEmBUYmHc9M=) 16: vYc2URA4GqV-dqL39TsmbzXnkuw.roa (hash: jg5YJLnqbhYiwle0h8wHZ7rG5yIPzNomTG3tGx4Euxg=) 17: yySu_F27fY9R333IwDkAdjdsJxE.roa (hash: HgN30qZE8bgClwiryRIWKau+8YL0IxPBp+aXjpONRLY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.crl rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.mft rsync://rpki.ripe.net/repository/DEFAULT/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 May 2024 07:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:85:5c:1e:5c:52:79:2d:b7:51:9b:7b:cb:b6:a0:36:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b2dd9fe628b6bc10141de0241766a1b7a63193f Validity Not Before: May 17 07:02:37 2024 GMT Not After : May 18 07:02:37 2024 GMT Subject: CN=d9056fd3cd1149da92cb09227f71daeda363cb2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:fe:91:61:49:71:42:f2:83:3a:be:2c:07:df: 25:31:23:78:34:06:b7:a3:3f:a8:7b:e1:80:2c:51: 44:76:b1:2c:1c:5c:6c:69:99:23:23:29:77:8f:ca: ff:fa:60:b6:3d:bd:f7:78:44:23:d2:3b:dd:59:ba: 85:5c:34:b5:3a:04:ef:e0:e0:9b:a8:5f:f7:95:9d: bd:06:c3:4f:d7:aa:48:bd:cb:54:23:52:73:9f:dc: 96:1c:69:e7:c2:2a:49:18:e0:8f:30:55:31:2c:2a: b9:dc:18:36:8c:9c:f0:61:94:20:f5:42:ed:16:5e: 0c:c8:ee:7d:52:03:2b:80:95:52:c2:93:b2:37:3e: 7c:c0:a7:de:00:62:0b:ed:4b:00:0f:ec:3a:c0:1b: a1:ab:ee:ee:e8:8a:bf:ec:95:f5:52:4c:e9:8f:50: a3:92:e3:d0:23:27:b6:bf:47:c0:23:6c:71:cf:be: 35:2f:4f:cd:e9:19:28:80:e9:4e:ff:c2:10:87:bb: 98:f5:61:36:82:0d:2d:b6:37:a5:47:43:8e:55:51: 74:59:da:3f:bc:a5:39:7c:89:27:dd:45:b9:db:66: cd:8a:2b:ef:04:e4:c4:cd:62:a4:ad:81:a4:2b:c7: 48:60:4c:77:a2:1e:ae:6f:16:97:ee:24:11:47:e4: 50:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:05:6F:D3:CD:11:49:DA:92:CB:09:22:7F:71:DA:ED:A3:63:CB:2C X509v3 Authority Key Identifier: keyid:5B:2D:D9:FE:62:8B:6B:C1:01:41:DE:02:41:76:6A:1B:7A:63:19:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:c3:bb:61:c0:c2:a2:b1:a9:e2:c1:14:ca:14:b2:57:f5:67: 56:f0:a1:18:27:7d:ae:6b:6a:ea:8e:04:16:6a:38:e9:2b:e3: 56:79:01:3e:af:64:29:37:3a:e0:8b:16:e4:d8:45:dd:68:45: eb:e4:f2:8a:d9:ea:5c:4b:01:be:47:08:8e:13:f3:40:b4:24: ba:5e:59:81:9c:31:67:a8:d1:fe:74:83:5e:a4:02:a2:11:4a: ae:4b:b8:4a:e1:bc:57:60:74:c6:7e:d6:72:5b:55:e3:36:14: 99:2a:cc:c5:9c:fc:6e:fb:b0:48:5f:42:12:b2:e4:62:2e:a1: 9a:7c:e8:a6:b9:6e:4c:f4:7c:5c:3b:e1:78:ce:f0:bd:af:ce: 86:55:fc:57:6c:a7:0f:ab:47:24:ca:03:07:10:00:c2:b8:0f: 91:d6:2d:aa:82:7e:65:ae:5c:bc:87:ba:94:0f:1d:70:38:73: 5f:a2:49:96:5a:10:d9:7c:f5:62:72:86:ab:71:f8:b1:36:f7: c1:d4:ce:82:d4:40:c9:c4:cf:e1:35:6b:f7:6f:3b:ef:9b:36: b7:03:58:b3:d2:34:3a:f6:8b:59:2b:6f:2c:07:51:d0:3c:90: 13:d9:58:0f:3a:39:0d:fd:55:d6:86:47:ec:1b:be:36:82:4d: e0:ed:6b:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY+FXB5cUnktt1Gbe8u2oDaPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViMmRkOWZlNjI4YjZiYzEwMTQxZGUwMjQxNzY2YTFiN2E2 MzE5M2YwHhcNMjQwNTE3MDcwMjM3WhcNMjQwNTE4MDcwMjM3WjAzMTEwLwYDVQQD EyhkOTA1NmZkM2NkMTE0OWRhOTJjYjA5MjI3ZjcxZGFlZGEzNjNjYjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmf6RYUlxQvKDOr4sB98lMSN4NAa3 oz+oe+GALFFEdrEsHFxsaZkjIyl3j8r/+mC2Pb33eEQj0jvdWbqFXDS1OgTv4OCb qF/3lZ29BsNP16pIvctUI1Jzn9yWHGnnwipJGOCPMFUxLCq53Bg2jJzwYZQg9ULt Fl4MyO59UgMrgJVSwpOyNz58wKfeAGIL7UsAD+w6wBuhq+7u6Iq/7JX1Ukzpj1Cj kuPQIye2v0fAI2xxz741L0/N6RkogOlO/8IQh7uY9WE2gg0ttjelR0OOVVF0Wdo/ vKU5fIkn3UW522bNiivvBOTEzWKkrYGkK8dIYEx3oh6ubxaX7iQRR+RQTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNkFb9PNEUnakssJIn9x2u2jY8ssMB8GA1UdIwQY MBaAFFst2f5ii2vBAUHeAkF2aht6Yxk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3kzWl9tS0xhOEVCUWQ0Q1FYWnFHM3BqR1Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi80ZGU4ODktZGM5ZC00MWU1LWIzYWEt MGQ3YjU1MWY4MjhjLzEvV3kzWl9tS0xhOEVCUWQ0Q1FYWnFHM3BqR1Q4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi80ZGU4ODktZGM5ZC00MWU1LWIzYWEtMGQ3YjU1MWY4Mjhj LzEvV3kzWl9tS0xhOEVCUWQ0Q1FYWnFHM3BqR1Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACsO7YcDC orGp4sEUyhSyV/VnVvChGCd9rmtq6o4EFmo46SvjVnkBPq9kKTc64IsW5NhF3WhF 6+TyitnqXEsBvkcIjhPzQLQkul5ZgZwxZ6jR/nSDXqQCohFKrku4SuG8V2B0xn7W cltV4zYUmSrMxZz8bvuwSF9CErLkYi6hmnzoprluTPR8XDvheM7wva/OhlX8V2yn D6tHJMoDBxAAwrgPkdYtqoJ+Za5cvIe6lA8dcDhzX6JJlloQ2Xz1YnKGq3H4sTb3 wdTOgtRAycTP4TVr928775s2twNYs9I0OvaLWStvLAdR0DyQE9lYDzo5Df1V1oZH 7Bu+NoJN4O1rRQ== -----END CERTIFICATE-----Generated at Fri May 17 11:13:10 2024 by rpki-client on console-fra.rpki-client.org