$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft File: V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft (raw, json) Hash identifier: DkY4Aja7jN9+3h7xNn9j1VV2lRUHKkXC5x+fB1cb+Zo= Subject key identifier: 73:37:2C:95:60:92:92:26:A4:06:DF:8E:BB:3D:6F:AC:43:49:59:B6 Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839 Certificate serial: 018F8D1423988CE97426420DC93C3570B2C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft Manifest number: 0128 Signing time: Sat 18 May 2024 19:00:58 +0000 Manifest this update: Sat 18 May 2024 19:00:58 +0000 Manifest next update: Sun 19 May 2024 19:00:58 +0000 Files and hashes: 1: 1-JicHkla4fAqiiOwE3dWyC4Z3lk.roa (hash: KuHOhNHAr3dRLTs0tW3Ngx4aFNx/GlS23fHqNdyazuA=) 2: 4MGeNRsXSLXRH6z-35FzP1kY7Cw.roa (hash: uSe0/RG9A96YBgpx4b32gN1IK3jY8sJavFup0Ysa0QI=) 3: 9ZgLqRnMDYlRNRYAo4O5xCT6df4.roa (hash: FuFTK4+mL2YK8YzzewZOwsyiu565j2syY2Vd4IjzhT4=) 4: IMig3FVephyRMZLB3jOvSsoGRUo.roa (hash: hjPKSMHrPsMdbWHbUjZ8dlnNGoHyLSelGmWZJNi3mUM=) 5: Q6ceFPvCj5xDRGEv4zJTTylwLhc.roa (hash: /p6IJaozloNZP2YBP7B1KSmwJR3RoJJR7OSkj5Cu+9Y=) 6: TN33zl_9MCFTSIYGFyxnpxzp5Bo.roa (hash: nkM2kif1SGgvHNfgUgjjrwGBBe3B6bpjCCIKFIHQXPE=) 7: V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl (hash: oxjADhMqxiEzYjxsDVMvLbGvfOT8xbjSrHA+WkCSjHA=) 8: X37TwGH5fbJzQzBKuCmw6OeyX7c.roa (hash: s8v8/RjTjw0yGf+sAryIWemgypZC/5M4WFBAg17az2o=) 9: Z3PKI6uowBd9a8R3TsVc8TvnToQ.roa (hash: frZJ5IL/Q/Mi93pMmupOWdGQA4dsQQQWBC9wvWqavVs=) 10: ekMl0J6199YGwLhPM4Fh6M94isM.roa (hash: XXfvcnef83fgsedI0rc6iiPnU3sJlatjLbFEqpCzx/o=) 11: i-6Ljh-c4sY5QpI0UzDTC9K1eb8.roa (hash: IVldRN4j5DpV003wSOplJYa8hZ/+tEqs2yZF3HfsbNI=) 12: kblCjQryeNb9MdaQH4TDBolxEWM.roa (hash: BK/kDJMb1idXXISwvfJYKyohL88vbHB2H8g3d0FLwJY=) 13: mP6V_NJQIvFz__0HJiXIbC5O9cc.roa (hash: yAyd0ZZ6mcdLOMPkYoGKgAiTNnVldd+ZNoRJp6W5r6w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 19 May 2024 19:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:8d:14:23:98:8c:e9:74:26:42:0d:c9:3c:35:70:b2:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839 Validity Not Before: May 18 19:00:58 2024 GMT Not After : May 19 19:00:58 2024 GMT Subject: CN=73372c9560929226a406df8ebb3d6fac434959b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:26:a3:99:5e:c5:53:46:2e:67:4a:a4:e9:ea: 10:a6:29:be:77:e9:d3:84:48:97:8c:43:c1:dd:ed: c4:d8:5a:61:82:16:94:46:e0:fe:84:0a:8f:91:81: d4:82:8d:eb:dd:1c:8d:54:35:90:98:02:ca:4e:8c: 33:6c:01:e4:3f:ca:c9:4d:9a:32:7a:77:a5:7a:e9: c5:ca:ff:72:9b:5e:b0:5b:e5:5a:62:cc:17:43:99: 1a:3c:2d:e9:52:32:6b:63:df:f7:97:90:a5:a1:39: 05:dd:64:0f:cc:3b:20:19:9d:44:17:32:1c:71:c1: 08:49:e0:dd:47:e7:ee:19:da:fc:c4:3c:8c:32:34: ee:54:90:3d:4d:0e:55:90:3a:bf:34:35:a2:bf:d9: da:d8:36:6a:9f:dd:c4:97:50:6c:4a:3a:35:54:02: fa:45:74:2d:a1:91:a4:38:53:cf:58:bc:4a:26:1e: ac:a6:e4:d2:7b:67:70:57:46:4e:1b:a1:d0:88:eb: 22:0f:14:b0:69:ef:25:63:4b:da:63:be:c3:45:ed: a5:23:5d:37:53:27:a4:59:e1:9f:12:c7:be:ef:e8: 3b:5a:4f:2a:21:01:2f:16:af:13:ea:a6:fd:44:6b: 56:f0:a0:20:7d:a0:0e:bb:11:4d:1c:ef:e7:dd:e6: 7e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:37:2C:95:60:92:92:26:A4:06:DF:8E:BB:3D:6F:AC:43:49:59:B6 X509v3 Authority Key Identifier: keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:fc:ac:86:d2:45:9a:0d:45:f5:0e:fb:52:35:79:31:42:6c: 72:ca:b7:91:c5:71:84:8c:be:9a:62:93:4f:b7:1b:3f:78:85: e0:5a:73:61:34:4e:4d:81:a4:8b:14:7e:f6:58:e9:b9:0a:c5: 2a:0c:4a:49:f9:cb:25:7c:5f:26:3c:67:55:4f:f9:b8:f9:05: b3:9b:0d:f8:31:9e:43:1a:97:6e:0d:25:97:d8:59:0f:58:94: 1e:58:fd:2c:6e:d6:92:e8:e4:fe:a2:7e:90:ae:5c:98:b9:5a: cc:fa:ef:e9:46:68:f5:68:49:14:2b:57:ba:e9:ca:13:3b:25: 39:f6:7c:75:b6:03:e2:1e:79:23:91:1b:08:7f:eb:8e:12:7c: e0:a7:67:84:75:35:58:d1:96:8a:f1:32:22:7c:d7:4a:2d:24: 43:e2:fa:49:80:bc:c4:bc:f4:7c:d3:15:59:ce:6b:76:0c:b9: ad:1d:48:51:88:5c:10:85:b7:3d:0d:30:f1:b6:e6:5d:2d:94: 24:bf:ce:49:35:44:64:e0:8f:b0:12:fe:44:f5:34:99:32:b3: c4:9b:eb:3b:4d:ac:a1:2a:0b:f2:cf:5f:9f:e4:bc:70:84:1c: c1:46:8a:40:ce:3e:00:53:e2:e1:4e:fa:26:61:f7:0e:da:9d: 60:d3:43:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY+NFCOYjOl0JkINyTw1cLLIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3YzY3MGM4ZGIzMmRkNzQ4ZGY3OTdjNWM5MzAxM2Q4Yzkx ZmE4MzkwHhcNMjQwNTE4MTkwMDU4WhcNMjQwNTE5MTkwMDU4WjAzMTEwLwYDVQQD Eyg3MzM3MmM5NTYwOTI5MjI2YTQwNmRmOGViYjNkNmZhYzQzNDk1OWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiajmV7FU0YuZ0qk6eoQpim+d+nT hEiXjEPB3e3E2FphghaURuD+hAqPkYHUgo3r3RyNVDWQmALKTowzbAHkP8rJTZoy eneleunFyv9ym16wW+VaYswXQ5kaPC3pUjJrY9/3l5CloTkF3WQPzDsgGZ1EFzIc ccEISeDdR+fuGdr8xDyMMjTuVJA9TQ5VkDq/NDWiv9na2DZqn93El1BsSjo1VAL6 RXQtoZGkOFPPWLxKJh6spuTSe2dwV0ZOG6HQiOsiDxSwae8lY0vaY77DRe2lI103 UyekWeGfEse+7+g7Wk8qIQEvFq8T6qb9RGtW8KAgfaAOuxFNHO/n3eZ+iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHM3LJVgkpImpAbfjrs9b6xDSVm2MB8GA1UdIwQY MBaAFFfGcMjbMt10jfeXxckwE9jJH6g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQt MzA0OTVmNDAzNzg0LzEvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQtMzA0OTVmNDAzNzg0 LzEvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtfyshtJF mg1F9Q77UjV5MUJscsq3kcVxhIy+mmKTT7cbP3iF4FpzYTROTYGkixR+9ljpuQrF KgxKSfnLJXxfJjxnVU/5uPkFs5sN+DGeQxqXbg0ll9hZD1iUHlj9LG7Wkujk/qJ+ kK5cmLlazPrv6UZo9WhJFCtXuunKEzslOfZ8dbYD4h55I5EbCH/rjhJ84KdnhHU1 WNGWivEyInzXSi0kQ+L6SYC8xLz0fNMVWc5rdgy5rR1IUYhcEIW3PQ0w8bbmXS2U JL/OSTVEZOCPsBL+RPU0mTKzxJvrO02soSoL8s9fn+S8cIQcwUaKQM4+AFPi4U76 JmH3DtqdYNNDlw== -----END CERTIFICATE-----Generated at Sat May 18 23:28:56 2024 by rpki-client on console-ams.rpki-client.org