$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft File: LRyqaTWPjJj3pxnyWX1drdvQAYw.mft (raw, json) Hash identifier: HzwiDNi7M/b40U+hGu92gjkvT0BZ/max8fyD1hDiqbc= Subject key identifier: 9A:C0:A7:DB:19:4D:7A:91:BB:FB:AF:00:A3:D0:3C:3E:B1:FB:98:1F Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Certificate serial: 018FB26A653E0731818992F678CFE378A81B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft Manifest number: 10DD Signing time: Sun 26 May 2024 01:01:08 +0000 Manifest this update: Sun 26 May 2024 01:01:08 +0000 Manifest next update: Mon 27 May 2024 01:01:08 +0000 Files and hashes: 1: 1-3MGbCH8ow8zqtYp4nULcx5PDwM.roa (hash: PGB/WVhSZYxlHG+xU4ItMtJ8Qehl1apV2tV04HXjy0E=) 2: 7Epwb0eksqzQI8okH1GMFfPmTaA.roa (hash: 4VBczVELhSrErQp+q7zJ5m6TyId49TqVoU37hq89zuw=) 3: A7xWbj9tfw1-IqbfhhM-F8_AsfE.roa (hash: SAAd3v0WxPGzVc8KTnqRHrBICtCukGZov+YlwzOD7As=) 4: FNGluFUdyMuD-OMIPb4Ao8KJ06o.roa (hash: i6yiWrQj78isOMLQ5FfxNbYE/+N01ZYjVvU/vvPVSqI=) 5: GVQ7yVEnB5zGtJssb6XNbidzcLk.roa (hash: zKpglyGxg8KYqMsj51OM9RX8UYUyTzhPMNyRGYkaHik=) 6: LRyqaTWPjJj3pxnyWX1drdvQAYw.crl (hash: BWrLOYUjJHt/8HiP93Ql0nvY1Ac+wn2Ply2GKWQIbyM=) 7: QffxSGuMBYwQmiKgj6g99LmcRIU.roa (hash: z6Z6A7V0ApHNBvPfjcAHZQHxoZQKlqeD4PWHMCdZrEM=) 8: X9y-Un66Bjpq4D1CPUXai9zIJFE.roa (hash: lJXVLbbSM9oPlfblnlydn+oMvh/AQivxOQR5C7WA9No=) 9: fk9it40M-2RQGR7NTq2hjOBLIqM.roa (hash: +iC8xTpeOe/OUqD72MK8NMkaK8V+82IrpBGyj/f2tms=) 10: i6bL7j7FlzJhnHPfe-kyD-jL2R4.roa (hash: xH1b4WrvHmxOgstvK52+lTPyjfiSFBqcl26M3kPtmbo=) 11: j-kIw3IJxNpJ0fZJE-UzaQZKclw.roa (hash: bK4o3Dkjphy9hpukx6XpmHk4HpotNu4a8DmYIVeYYNM=) 12: jEJbwEPDxpTq4bAG91eSnLi8Y00.roa (hash: gjo6tfRAgvLDyHob5OIVO4aFNhfm+IP43RpPCjs5bSg=) 13: l9rXlP79Lqf98c_kSuaTcQtvkMU.roa (hash: 4W25I6PGXTyTpC4WeSTZLYQg46htBAfk4OI/VN4l/SY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 26 May 2024 23:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:b2:6a:65:3e:07:31:81:89:92:f6:78:cf:e3:78:a8:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Validity Not Before: May 26 01:01:08 2024 GMT Not After : May 27 01:01:08 2024 GMT Subject: CN=9ac0a7db194d7a91bbfbaf00a3d03c3eb1fb981f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:9a:af:1e:18:b4:bf:6d:cc:25:55:cb:51:5f: a1:4d:b2:18:1c:11:ec:8b:a1:fb:25:99:36:2d:73: 21:77:57:e0:06:4a:aa:c8:94:08:bc:ea:e2:00:05: 64:47:96:d7:23:d2:0e:78:73:95:4e:fa:31:01:ef: 0b:41:49:22:f7:23:c1:54:16:00:44:1e:1b:e0:2b: 97:5e:d0:b7:f9:67:ff:7e:89:f6:8e:79:e2:a2:f5: 90:84:41:11:cb:7b:af:7b:60:eb:ac:95:6e:15:96: bf:df:25:f8:86:1b:3c:75:b5:d4:b0:7d:36:35:63: 72:d6:64:f2:02:7c:fb:d6:53:db:64:13:29:00:12: 5a:b5:e2:92:d9:01:59:ad:b8:22:9d:6f:1e:9b:ba: 5b:1e:e4:79:f1:87:92:f2:92:87:ac:e6:c6:f1:cd: 0d:94:03:e4:79:fa:e5:86:a6:9b:1b:25:f1:62:e1: 3b:1e:99:43:fb:06:1e:61:a5:8b:f5:1c:58:50:4c: 24:24:30:0b:8d:f1:4d:5e:9a:74:40:9d:16:7f:f2: b7:83:c8:3c:02:af:c7:ad:28:51:cf:65:e4:bb:95: 55:07:87:6a:49:03:0b:b5:5f:73:4d:db:41:b4:b1: e6:0e:4e:61:4f:57:b1:83:fe:96:4f:a2:b4:b2:75: dd:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:C0:A7:DB:19:4D:7A:91:BB:FB:AF:00:A3:D0:3C:3E:B1:FB:98:1F X509v3 Authority Key Identifier: keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:98:20:db:4f:49:c3:74:20:dd:13:11:19:b5:a0:0a:cc:bc: a8:63:f9:ca:24:7a:5c:b8:d5:1c:a7:f5:0b:a2:e7:6f:56:61: bc:48:01:d0:ed:c8:bf:5c:17:ee:ba:b7:ee:ff:e4:26:08:d2: b5:f3:f6:4b:43:1d:c3:35:be:a1:bd:30:d6:1e:60:97:ba:53: e4:a1:f5:a4:a2:de:54:df:12:6f:71:9e:0a:0b:bf:a5:93:58: e7:7b:94:1c:60:75:43:61:19:ef:d7:7b:84:82:1e:f8:c6:8b: 7a:f5:f5:b2:28:d2:37:2a:f6:59:a4:81:11:8f:5b:0b:71:35: 50:2a:b3:98:16:bf:04:d2:98:cf:97:36:0f:58:a9:5a:b3:07: 8c:67:7f:55:0e:7c:e8:7e:a3:22:3c:18:65:23:5e:70:38:ef: 8c:28:69:35:37:87:78:b7:9b:f3:c9:4f:9e:a9:cf:75:f1:42: 2a:57:89:06:c2:5d:88:27:0a:d1:0c:e6:7f:ee:9f:7d:c4:d3: 6d:80:fb:cb:c6:90:08:02:2d:a9:fe:a8:3d:12:62:08:42:b3: fe:e0:63:5d:cc:6f:54:3e:48:54:fe:fe:25:43:64:0d:0d:af: d7:ed:be:40:31:9e:83:7f:43:b8:8b:de:e3:7c:6d:77:a1:bf: 39:87:8b:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY+yamU+BzGBiZL2eM/jeKgbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMWNhYTY5MzU4ZjhjOThmN2E3MTlmMjU5N2Q1ZGFkZGJk MDAxOGMwHhcNMjQwNTI2MDEwMTA4WhcNMjQwNTI3MDEwMTA4WjAzMTEwLwYDVQQD Eyg5YWMwYTdkYjE5NGQ3YTkxYmJmYmFmMDBhM2QwM2MzZWIxZmI5ODFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8pqvHhi0v23MJVXLUV+hTbIYHBHs i6H7JZk2LXMhd1fgBkqqyJQIvOriAAVkR5bXI9IOeHOVTvoxAe8LQUki9yPBVBYA RB4b4CuXXtC3+Wf/fon2jnniovWQhEERy3uve2DrrJVuFZa/3yX4hhs8dbXUsH02 NWNy1mTyAnz71lPbZBMpABJateKS2QFZrbginW8em7pbHuR58YeS8pKHrObG8c0N lAPkefrlhqabGyXxYuE7HplD+wYeYaWL9RxYUEwkJDALjfFNXpp0QJ0Wf/K3g8g8 Aq/HrShRz2Xku5VVB4dqSQMLtV9zTdtBtLHmDk5hT1exg/6WT6K0snXdOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJrAp9sZTXqRu/uvAKPQPD6x+5gfMB8GA1UdIwQY MBaAFC0cqmk1j4yY96cZ8ll9Xa3b0AGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2Yjct MjliMDg1ZGQyM2FkLzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2YjctMjliMDg1ZGQyM2Fk LzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK5gg209J w3Qg3RMRGbWgCsy8qGP5yiR6XLjVHKf1C6Lnb1ZhvEgB0O3Iv1wX7rq37v/kJgjS tfP2S0MdwzW+ob0w1h5gl7pT5KH1pKLeVN8Sb3GeCgu/pZNY53uUHGB1Q2EZ79d7 hIIe+MaLevX1sijSNyr2WaSBEY9bC3E1UCqzmBa/BNKYz5c2D1ipWrMHjGd/VQ58 6H6jIjwYZSNecDjvjChpNTeHeLeb88lPnqnPdfFCKleJBsJdiCcK0Qzmf+6ffcTT bYD7y8aQCAItqf6oPRJiCEKz/uBjXcxvVD5IVP7+JUNkDQ2v1+2+QDGeg39DuIve 43xtd6G/OYeLgQ== -----END CERTIFICATE-----Generated at Sun May 26 09:07:22 2024 by rpki-client on console-fra.rpki-client.org