$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft File: T4rqLwJfSVvqzufOWoggUZ3aE3A.mft (raw, json) Hash identifier: knz23isPNsv3QbEVcUrTVFLSHU+pDNwohDqV746lhN8= Subject key identifier: 11:C5:5F:A7:FA:2E:CA:1E:D6:32:B6:E2:BD:1F:5D:6D:BA:9B:AD:C3 Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70 Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370 Certificate serial: 018F3AE5FC07CADC8F378F6DCA72D359D6BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft Manifest number: 11D1 Signing time: Thu 02 May 2024 20:01:41 +0000 Manifest this update: Thu 02 May 2024 20:01:41 +0000 Manifest next update: Fri 03 May 2024 20:01:41 +0000 Files and hashes: 1: 1-Wj-c2fk6a_PHfmE31oYqYACQF4.roa (hash: 8ztTCKf892fJnT5NzW6Wg4KwIlc0KfHX28o50eiltW0=) 2: 3pv4v0EivgJCPPwiUT87dq6XFRg.roa (hash: D35pDE53Ob/gQu9zE84eAGS1n7605IGgIJM3PoKqOzA=) 3: 7Vfxpn9iDVfG-mwX3qw_dwC835A.roa (hash: qqGR59e1qckyJOuES2qTJd7EimXTXVArgFpocONBdIQ=) 4: D3VDNmjubCiirs5JnIsG9mNpt8o.roa (hash: z34nW/HbOfKWXr4wpgHGwHb8QffxiIEwHDwRf3/LaCU=) 5: DWhrt5wNMdvhNSmiTuZNuD9EnpA.roa (hash: Q9ebwyqTGCIsS5odSYAfxWZkb5RZ5cJuUflL15pBYXg=) 6: Fe0DBcbD6oEMRtgnXKsc_5ctawg.roa (hash: zDnbuGMA3HviYHZ7z91OiWcdNIacQbGwc/xdkSFCyc8=) 7: L7i9jquUVEN12XY-7DmAhnrvaCU.roa (hash: AzWUqaeQ23SOdwPtbdpmRs+1Krdd11heZcjcVWPjF6Q=) 8: LqK1hy0qc_0a7RdUmMuy3h0D2h0.roa (hash: 5bgevxAtbP2sl0HegN8DVkEc/kW904guySF8sY1KggA=) 9: MHwVK56c0CU6HbQZz96CaNPChQ0.roa (hash: /RWJfaAYqa3k3xtZBm0aYD2Q+T0lq6V0SMY2xxBCEnQ=) 10: PAnavck1V1XT3gbP0JlIa7TnTTs.roa (hash: IYXooDwfdwYBZcofuB8IfGJ4sAQdNsiXpYiX86SOiaI=) 11: R0yFLoljqCNP6eCrRDT9niVYkIo.roa (hash: U5C4t5GWshWWoXrVC83DMPGGQtiPpYgS2B8nfqVdj1o=) 12: RBgWN6Hz4ttmvAEQ619x8_gAEz0.roa (hash: DaB1G6GrRweuQ1cZhrb/fTIepB/vLz52z9STRisouh0=) 13: T4rqLwJfSVvqzufOWoggUZ3aE3A.crl (hash: z4iG3Zt911MxDqDHx1G3twYbIKaQLqB1myHY7fG/jTM=) 14: WzyjL-kMZdLbi4r-jANeOelPuIk.roa (hash: 4SUoX059iGdN5QAqXGL6HKRANGXVj9wXjXMmVn8Nglc=) 15: fDgow4igK-0xM73aMw708ZJ6Ljs.roa (hash: wpDZV1g0+YNpQ+LRCIjzQhfzLEI8QSGizNDplk+q3SY=) 16: fphXZ4IYZTC4sEIvWJTPb2slX9c.roa (hash: HzuyxQ6nxxLvxdKkwq86iUV47uYXbQ8whH/TgFwCAmU=) 17: gHj_xRUxCGNYHIUpSht9PO7y8pU.roa (hash: MksQKi9hK2I2dlsx2UXVFTVEKMd4uGgVHY8H+K4d1lQ=) 18: gjBrkXqt-M5MYdvgtJBLaFWZbaA.roa (hash: vNfnHgOaZKGux0a94suXIC6Y3FMoSETfiplXI7zoHLg=) 19: i5_J_yc9fEWDJB0m6eVn9dM_Dyw.roa (hash: +aufc/VtxP0DH56cISq2IPlVl1PcsBiFP3UrLERS7FQ=) 20: kDXH_gu6uRQjpd89xDlemGDwnBQ.roa (hash: VG62IGiI1VQ/kPZqAFFTObfyyVRkATPG1me6ut3utLE=) 21: ksRq-P4M9p9IPLct8N0acQ6aq1A.roa (hash: xaJIHD5zvMEPrcUgSJiP2FkpV8MBMDsu/w5rOSKghLs=) 22: uXcD_7LQqYQ9YxOP1HpjvLSK0QU.roa (hash: /B7bhyRsaABX8zFXoOrwmePknLsYPYAv2hkhr/lAHtk=) 23: upU9Y6W2IvUme8lAoL3CSpCONn4.roa (hash: oIqHmR1WdHiRLrN1GJPEVcpea/tnY7CRNwVVlUUTdCU=) 24: vtIo4CLbl3ph6096UtzMxK6Ew10.roa (hash: j9xVxWNIN7GFOpSPXCH7DliIQ/9SMF5pabHmJ1fx6cc=) 25: yq3W77T7FujqQPsr_bZ1ygDQmqo.roa (hash: SjF+TWns6kc0xhxYhk6vSOOPMc6YWpXENRTHT9hQ/NQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 03 May 2024 16:59:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:3a:e5:fc:07:ca:dc:8f:37:8f:6d:ca:72:d3:59:d6:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370 Validity Not Before: May 2 20:01:41 2024 GMT Not After : May 3 20:01:41 2024 GMT Subject: CN=11c55fa7fa2eca1ed632b6e2bd1f5d6dba9badc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b7:55:21:c2:5d:66:d0:7e:3a:b7:81:d7:cc: 8c:fa:0f:a2:26:d3:aa:19:e6:32:20:1e:f6:b7:e1: e9:62:b8:d7:6f:45:a2:3f:63:0f:80:98:bf:eb:89: bc:9a:7d:3c:17:64:d5:4c:6e:42:6f:62:4a:6c:e2: d2:8c:7f:90:25:13:49:32:35:af:30:10:29:2e:a3: 93:0b:e7:b5:0c:34:fe:7a:1b:e2:41:2c:47:ee:8c: b6:cb:8b:2d:da:19:ca:56:6a:90:82:e9:55:c5:d6: 96:0c:47:c3:09:99:12:3d:fb:65:3e:de:47:5d:b9: e1:60:72:5e:af:e7:c3:55:5c:7e:2a:ec:6e:4f:a1: 4d:30:c1:d8:3a:a4:88:9a:10:5d:40:46:06:54:0e: 36:93:30:7b:fc:01:06:0b:5a:69:f4:59:e1:7e:d1: 22:b0:d8:ea:52:64:55:24:7a:3b:86:2b:73:85:d7: 61:9b:e0:bc:65:b2:dd:8e:62:9c:a8:36:41:11:cb: 5f:d6:86:ce:85:a0:3c:14:d5:31:47:90:a0:c3:4e: 95:51:40:a0:29:15:c5:6c:21:52:86:7f:b9:8c:51: fb:37:c6:dd:59:d6:2a:c0:19:84:59:b1:fb:7d:ba: 49:81:46:7b:e8:e9:2b:28:23:fd:30:d3:6d:1c:ff: a1:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:C5:5F:A7:FA:2E:CA:1E:D6:32:B6:E2:BD:1F:5D:6D:BA:9B:AD:C3 X509v3 Authority Key Identifier: keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:57:ec:07:4b:8a:5a:20:72:54:c8:59:48:2f:fd:58:95:3a: fc:b4:c7:a9:7e:9c:08:aa:d5:59:41:f2:33:34:92:44:67:d0: 55:3b:e4:6d:7a:17:83:eb:e1:c5:74:4d:44:93:d1:17:b3:c1: f4:00:95:05:aa:37:32:ac:96:c5:75:9a:ea:36:8c:ae:30:47: a2:66:91:43:3c:33:01:25:7f:a1:1f:f2:40:92:c9:49:7c:fb: c7:cb:5e:ca:2e:41:c8:1f:ae:32:ae:70:f1:ce:83:de:ed:32: 55:9e:c1:dc:ca:ed:23:95:d4:99:d1:dc:61:cd:7d:74:49:a8: 1f:08:19:b4:a2:9d:73:ba:93:39:7d:6a:58:00:4b:ff:d3:46: 24:45:5e:75:2f:93:ac:fd:95:8e:6b:94:ca:45:6f:95:1b:c8: c9:f3:c0:79:3d:15:e5:f1:aa:fc:c0:41:58:06:62:91:b1:b0: d6:0f:7e:fe:96:70:66:46:3b:91:e6:8d:62:5e:69:11:55:b6: d3:ff:e8:44:ee:60:05:80:e5:91:49:cf:d3:9e:4e:bc:83:96: 58:04:d7:37:3a:b8:a3:c6:f2:a2:c7:7c:12:e4:59:fb:55:5b: ee:92:23:b3:98:61:28:77:80:0e:f8:d9:45:e0:41:ba:78:45: da:85:6f:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY865fwHytyPN49tynLTWda6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmOGFlYTJmMDI1ZjQ5NWJlYWNlZTdjZTVhODgyMDUxOWRk YTEzNzAwHhcNMjQwNTAyMjAwMTQxWhcNMjQwNTAzMjAwMTQxWjAzMTEwLwYDVQQD EygxMWM1NWZhN2ZhMmVjYTFlZDYzMmI2ZTJiZDFmNWQ2ZGJhOWJhZGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubdVIcJdZtB+OreB18yM+g+iJtOq GeYyIB72t+HpYrjXb0WiP2MPgJi/64m8mn08F2TVTG5Cb2JKbOLSjH+QJRNJMjWv MBApLqOTC+e1DDT+ehviQSxH7oy2y4st2hnKVmqQgulVxdaWDEfDCZkSPftlPt5H XbnhYHJer+fDVVx+KuxuT6FNMMHYOqSImhBdQEYGVA42kzB7/AEGC1pp9FnhftEi sNjqUmRVJHo7hitzhddhm+C8ZbLdjmKcqDZBEctf1obOhaA8FNUxR5Cgw06VUUCg KRXFbCFShn+5jFH7N8bdWdYqwBmEWbH7fbpJgUZ76OkrKCP9MNNtHP+hiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBHFX6f6Lsoe1jK24r0fXW26m63DMB8GA1UdIwQY MBaAFE+K6i8CX0lb6s7nzlqIIFGd2hNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUt NjA4MDk1MmYwZTA0LzEvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUtNjA4MDk1MmYwZTA0 LzEvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMVfsB0uK WiByVMhZSC/9WJU6/LTHqX6cCKrVWUHyMzSSRGfQVTvkbXoXg+vhxXRNRJPRF7PB 9ACVBao3MqyWxXWa6jaMrjBHomaRQzwzASV/oR/yQJLJSXz7x8teyi5ByB+uMq5w 8c6D3u0yVZ7B3MrtI5XUmdHcYc19dEmoHwgZtKKdc7qTOX1qWABL/9NGJEVedS+T rP2VjmuUykVvlRvIyfPAeT0V5fGq/MBBWAZikbGw1g9+/pZwZkY7keaNYl5pEVW2 0//oRO5gBYDlkUnP055OvIOWWATXNzq4o8byosd8EuRZ+1Vb7pIjs5hhKHeADvjZ ReBBunhF2oVvmA== -----END CERTIFICATE-----Generated at Thu May 2 21:29:51 2024 by rpki-client on console-fra.rpki-client.org