$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft File: M8NCwGqsw1nTlDn_WN76jqGHV0g.mft (raw, json) Hash identifier: T3qW2Eba7a+WenV+JHfF6uxdrS5kTdl7HB9FbL1RVVY= Subject key identifier: BF:40:06:38:C2:FC:8C:88:C4:45:1A:CE:F6:DA:F6:55:84:97:55:D3 Authority key identifier: 33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48 Certificate issuer: /CN=33c342c06aacc359d39439ff58defa8ea1875748 Certificate serial: 019044F855738A298EBB19F0276794A90E88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft Manifest number: 11DA Signing time: Sun 23 Jun 2024 12:00:43 +0000 Manifest this update: Sun 23 Jun 2024 12:00:43 +0000 Manifest next update: Mon 24 Jun 2024 12:00:43 +0000 Files and hashes: 1: 09s7ZwJwpj5rvThPKXL3hP5XaxI.roa (hash: lKDt+IHzhSA3jfZezco0bUwDn1E85xnTnc5GRe4DmHM=) 2: 6UFqDbZBvJBdAevSDBxf3RvSgAs.roa (hash: yTm6J5QNT1UUqIejG0gvemAIm4uue0Fi+ZB4nROObOQ=) 3: AFhVw7L2cmfyKUGDwOCmO7Yo1gY.roa (hash: iXRx1HHxSJILYVnLoIi9U9OHCxx0SDrAT43Hzdppprg=) 4: M8NCwGqsw1nTlDn_WN76jqGHV0g.crl (hash: tI8nPHxE2zdIPAyMJUhYpPpyJ48sbmSc3mLmoJS+OnA=) 5: ND-2T-TXVgO1iidRxUqpbiZ62f8.roa (hash: QKJfEvAusxYEqCt0nLS1vzk10Jd8GtUZ8EFTkQjxvAA=) 6: TEk_FA6o2pbt1p51ZxzSAe76zMo.roa (hash: 08xiBx17omWGybU4wMg/hoTFzhhTfqGKrTFbCpJLz9s=) 7: UCRT57JB4nrX1LHH-8XpTtRVxrA.roa (hash: 8bXJ7RUXGrq8CNpxtblHoqn66vlfLoL6jSuWnPchWCw=) 8: V1aAdMTQ-SApwo5HduseKDzrH9Y.roa (hash: +b8q42nBVNpwIeVCkZirAbwNa6bBuKoMbFw9l+V5Gz8=) 9: VhC1WinLvrdcU3ng-7Bl7zWD9f0.roa (hash: jQOqgvg0Mjk9TNcQzTUNUpGwQEHskTA+8BGF0gwKb3Q=) 10: ZTlGc_8YpPcmvwCJzSww-IaSn7Y.roa (hash: xzl5G9nqCp+ywJUIEt9XmQIAgxL67eQHDgLkpZzj54o=) 11: btdRWIVdlGF-hdEWxEiYsMh-6C0.roa (hash: TmaLTHpuWUdlDyovlqD8W4V3YnyhHPoqylFAmqqkhTU=) 12: chKAQjKLdtlq9kL4h4y1g19hli8.roa (hash: JFsKC8DTcP+1OSi0Nk84Jd7DSTYq+TGa+xIJCw3f8wY=) 13: eighutQF57gl_oHvgyGcBuhwOcY.roa (hash: M/EtpyLKEBlv1ftVFUelzx/zoZNX7Ysh7PkvU8iFiC4=) 14: kEphm1CWxvsMAb2r_lfEth-S7v8.roa (hash: iJOt3NMhCw15oHIv/DO45Qd234s64oO128kwjcXoK2w=) 15: p2FJTbKZxxBxtXrNJ4Di1VjkFCI.roa (hash: m12vKxRxkrdXLcaY3MlwEqwI5o2+I9pDov63ovpkHWw=) 16: rW3tRzfjRvW0Wx6a2_gYjIr6eG0.roa (hash: sq3RUE+b5o/bjHOXJt3/yOnMlXN5bcVAcd3sdI+ExC0=) 17: yQh1oq1Ogt2ePutTcx_6C-oKrwA.roa (hash: /bFMmEnYpF9xQ06uk/KHCywfKCr0GtELxkI5iuEJa9s=) 18: zJ4YK-UkCeu2RS-DGgJ0EfSTrZ4.roa (hash: d1u31mPkuhzWWQo5z3lq2TH+KdbFR5TtfL682Hmkjz0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 24 Jun 2024 12:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:90:44:f8:55:73:8a:29:8e:bb:19:f0:27:67:94:a9:0e:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33c342c06aacc359d39439ff58defa8ea1875748 Validity Not Before: Jun 23 12:00:43 2024 GMT Not After : Jun 24 12:00:43 2024 GMT Subject: CN=bf400638c2fc8c88c4451acef6daf655849755d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:36:00:f3:cb:e5:21:74:66:02:6f:94:f2:00: da:ab:1a:ff:2b:d9:db:07:a6:18:63:ea:fd:28:11: 76:f3:e3:54:74:4d:93:cc:a9:54:f7:97:a3:71:43: 1a:24:af:72:64:cd:25:d7:ec:c2:21:4e:ee:6d:e8: 08:9d:52:3a:95:c5:64:49:aa:bb:e3:49:41:1e:bd: 32:1a:ce:96:29:e8:cd:b8:f6:8b:c1:55:60:6c:25: 42:6a:81:e9:36:c5:06:83:ae:8d:b6:3d:eb:77:c9: 73:12:12:cc:12:3b:56:61:4b:aa:c3:1c:a7:c9:3e: b6:e0:6a:8b:e0:c8:9d:53:e6:67:16:05:49:7c:2c: 0e:ed:08:b7:d8:d0:fb:eb:84:61:84:30:08:ee:00: c4:ec:1a:9d:27:cb:c5:69:81:8d:13:0f:35:09:6b: 0b:c0:1d:86:b8:24:6c:4b:c0:7d:ad:71:a4:16:64: c3:82:87:c1:dc:00:51:79:36:1f:8e:fb:1f:05:31: c5:a4:35:21:57:00:02:85:a8:05:80:20:a1:e4:25: 75:0b:a8:7f:c4:0a:2f:d0:00:6b:4d:21:c3:c7:75: e6:bd:fe:48:c2:d5:d7:80:81:94:bb:71:0d:de:21: b5:9b:7b:72:bc:27:a5:09:00:8e:0a:ee:87:1b:02: bc:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:40:06:38:C2:FC:8C:88:C4:45:1A:CE:F6:DA:F6:55:84:97:55:D3 X509v3 Authority Key Identifier: keyid:33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:cd:56:47:db:9d:c4:0f:ed:e7:20:81:ec:62:47:c5:92:e9: f3:32:c3:52:de:87:e4:86:34:aa:b7:3d:f5:e1:82:5b:29:c6: ca:82:36:01:9c:67:d7:72:3d:b9:4b:25:04:50:42:55:21:ec: ea:65:c3:3a:b4:4b:03:9c:2a:ae:be:4d:24:f5:3d:8f:94:87: 7e:fb:b6:6e:9e:63:15:7c:6e:00:84:14:f5:18:71:98:91:21: 19:40:c6:20:25:df:02:b0:6c:e9:04:66:b3:22:e7:2b:25:98: d3:25:1a:0f:33:7c:84:c6:18:bd:2e:37:9f:ee:39:3d:d4:e5: cf:5f:27:49:d7:dd:2e:fd:e0:01:33:7b:cc:92:69:84:31:b3: d1:d5:24:29:92:f1:12:36:52:13:c2:3d:f2:f7:55:f9:0b:02: d5:c1:e4:69:f6:17:01:69:df:eb:d3:6a:7d:af:b9:64:3e:0b: 8f:12:d1:f8:72:03:a1:ba:22:7e:2d:a9:b1:53:51:d5:63:94: a3:53:bb:5a:8a:68:84:dd:6c:78:7a:e4:9b:75:4c:59:47:f6: 30:8c:db:4e:9c:cd:eb:96:09:fd:51:31:04:9e:ac:af:b2:09: a7:07:89:35:2d:7f:d1:27:46:cd:60:65:a2:b8:77:18:2f:bd: 8e:57:9c:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZBE+FVziimOuxnwJ2eUqQ6IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzYzM0MmMwNmFhY2MzNTlkMzk0MzlmZjU4ZGVmYThlYTE4 NzU3NDgwHhcNMjQwNjIzMTIwMDQzWhcNMjQwNjI0MTIwMDQzWjAzMTEwLwYDVQQD EyhiZjQwMDYzOGMyZmM4Yzg4YzQ0NTFhY2VmNmRhZjY1NTg0OTc1NWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujYA88vlIXRmAm+U8gDaqxr/K9nb B6YYY+r9KBF28+NUdE2TzKlU95ejcUMaJK9yZM0l1+zCIU7ubegInVI6lcVkSaq7 40lBHr0yGs6WKejNuPaLwVVgbCVCaoHpNsUGg66Ntj3rd8lzEhLMEjtWYUuqwxyn yT624GqL4MidU+ZnFgVJfCwO7Qi32ND764RhhDAI7gDE7BqdJ8vFaYGNEw81CWsL wB2GuCRsS8B9rXGkFmTDgofB3ABReTYfjvsfBTHFpDUhVwAChagFgCCh5CV1C6h/ xAov0ABrTSHDx3Xmvf5IwtXXgIGUu3EN3iG1m3tyvCelCQCOCu6HGwK8iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL9ABjjC/IyIxEUazvba9lWEl1XTMB8GA1UdIwQY MBaAFDPDQsBqrMNZ05Q5/1je+o6hh1dIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9jNTVmZGYtYTY4YS00YWEwLWI4YzUt N2YyMzMzNjA0OTk3LzEvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9jNTVmZGYtYTY4YS00YWEwLWI4YzUtN2YyMzMzNjA0OTk3 LzEvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdM1WR9ud xA/t5yCB7GJHxZLp8zLDUt6H5IY0qrc99eGCWynGyoI2AZxn13I9uUslBFBCVSHs 6mXDOrRLA5wqrr5NJPU9j5SHfvu2bp5jFXxuAIQU9RhxmJEhGUDGICXfArBs6QRm syLnKyWY0yUaDzN8hMYYvS43n+45PdTlz18nSdfdLv3gATN7zJJphDGz0dUkKZLx EjZSE8I98vdV+QsC1cHkafYXAWnf69Nqfa+5ZD4LjxLR+HIDoboifi2psVNR1WOU o1O7WopohN1seHrkm3VMWUf2MIzbTpzN65YJ/VExBJ6sr7IJpweJNS1/0SdGzWBl orh3GC+9jlecCA== -----END CERTIFICATE-----Generated at Sun Jun 23 18:57:28 2024 by rpki-client on console-ams.rpki-client.org