$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/O37JQjv5DIHSLZSEHBA1elQmA3k.mft File: O37JQjv5DIHSLZSEHBA1elQmA3k.mft (raw, json) Hash identifier: HvIVwyDLpJlUaw4l4DFSOQmSDppL09J0OywD3wVpOqo= Subject key identifier: 38:A5:AD:D2:6D:C7:D4:5F:D5:45:01:FE:3A:B3:9B:C8:FD:3B:D4:89 Authority key identifier: 3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79 Certificate issuer: /CN=3b7ec9423bf90c81d22d94841c10357a54260379 Certificate serial: 018F844776E25387F4659123E2351F803119 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/O37JQjv5DIHSLZSEHBA1elQmA3k.mft Manifest number: 11B8 Signing time: Fri 17 May 2024 02:00:27 +0000 Manifest this update: Fri 17 May 2024 02:00:27 +0000 Manifest next update: Sat 18 May 2024 02:00:27 +0000 Files and hashes: 1: 8vDELfKPcvzvV3RNJWMSHDMVxSU.roa (hash: sRHvCOhQKEWWdeJEjT/wzddRUrkbbjBWUo+xrYJeHEA=) 2: KU64UFfMvr7hELtznW1kd3Jgx0g.roa (hash: IreqOrqzILh2oR2ldJiQhRHfJ01koP4D4FLp7x9G4/4=) 3: LQCCtVc6ZxcR2ZmmWPNDc4pIa_Y.roa (hash: c0fge8C7CIKoSd4Qv86++FBUG992VBIIU7eCsCNcDhg=) 4: NanHEWkVUEVIFMXgkf7VjzJv3EI.roa (hash: BpNAL/7v/9r0wilOFqCRlV3KJaojWEMjlLM2Wri0rMI=) 5: O37JQjv5DIHSLZSEHBA1elQmA3k.crl (hash: uS/0MOQR5HAiZRLjNSv6A3HD8dkyfuFC2Znd8e0aTWE=) 6: WPscA-L06bAA9F5ooBe7Pf2sOZE.roa (hash: NNFx9yaQDJ0RagbXJX6TLI9ki3s7UWcjfjrthKBCj+k=) 7: bRXAhBvcPUvJCX7qdUqTFZFHFj8.roa (hash: VmGWtFULEN8fSC5hsMHlw3+Up5FvQ1DatG9ZPrcOhCs=) 8: ikjOg3DuV3dG0XMGGKFbvmv93U0.roa (hash: 0zoiK/IqK/ToLPo7OA7ij/m06EFT/E55yXhhbtK4O4w=) 9: jaDaGycFgZ1pZNnwn6ei8LOm3DQ.roa (hash: fzKmWx5CbS4BzYCpG5vV5O44t9nhGCLZgJyKnLKcw2E=) 10: oP490aCHyPb1ky13XTWCEqlywec.roa (hash: MVQEEHGjTpLySUvylzsYOV2e6bAi7DuNaJRzh58XHpc=) 11: p06i0La7cqcu57vOBbdjswK08Rk.roa (hash: ihemQCValfrhIjCTAHxxeLK0FMyQ77/Y6cQwrdSowx4=) 12: pcxM9ngALshNICd8yYlBeG930vM.roa (hash: kZJWMJBNT5Am972w+GACObZdvdg7Kbw5bRphm+R5UVY=) 13: rLJvZxJ0aSyYN6-Q5Bw4kmxWFHU.roa (hash: U2r+gCiYsLemL0/mWy+RfQ59RnUuIGLS/QczZmHDy38=) 14: uDF7cF0FKP8Pq_OVmSawioGZVSM.roa (hash: oo6Q1df3OkUdxk2nXw6XvwREhhLeWN/c8RFmvIUKpLI=) 15: yMT7x9AsANmP0xlV_lSouz93PLI.roa (hash: csQViFaKwWAFWqdPWAfxCWFUj6PmwmMXl4V2W8j8YRg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/O37JQjv5DIHSLZSEHBA1elQmA3k.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/O37JQjv5DIHSLZSEHBA1elQmA3k.mft rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 May 2024 02:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:84:47:76:e2:53:87:f4:65:91:23:e2:35:1f:80:31:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b7ec9423bf90c81d22d94841c10357a54260379 Validity Not Before: May 17 02:00:27 2024 GMT Not After : May 18 02:00:27 2024 GMT Subject: CN=38a5add26dc7d45fd54501fe3ab39bc8fd3bd489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:2f:d9:ce:46:8a:3c:ce:a6:45:f0:cd:4c:b4: 41:52:61:23:f0:45:d9:bf:13:d7:a4:01:9b:c9:f8: ea:c0:24:e2:99:ee:ea:1f:7f:84:54:76:23:36:77: 4e:70:b1:2a:73:93:d4:71:3e:78:94:d0:02:24:a1: f6:af:c1:29:03:49:6f:0b:3f:dc:f8:63:df:61:dc: f0:fe:26:ec:35:fd:57:58:b8:50:58:21:83:01:63: 2e:3a:61:a8:80:6b:19:20:d6:d7:1e:4d:a0:a8:2d: f5:b1:9f:db:cd:fb:60:5f:9e:82:8d:dc:67:5a:38: d2:59:3c:66:28:4f:a1:27:2e:c7:6b:e3:c2:d3:81: 5b:a3:40:aa:8a:d7:96:b4:cc:1c:39:4b:43:ce:a7: 61:8a:a7:41:6d:81:15:ab:56:71:a5:e4:1a:c8:69: be:51:2c:7f:8f:6f:f1:84:0f:09:f4:ab:f5:0d:3f: bb:c6:55:58:89:bb:64:77:a5:25:19:d0:47:cf:d7: 70:0a:51:a7:19:ce:14:44:85:c0:52:4f:35:8d:3a: 59:7f:e0:19:95:4c:0d:4a:62:1e:e1:d0:14:bd:7d: ae:17:d2:2d:ca:d6:79:6f:26:df:75:1a:8d:44:6f: b3:ad:b8:2c:e3:87:b2:10:62:69:1e:13:6a:8b:b4: 1b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:A5:AD:D2:6D:C7:D4:5F:D5:45:01:FE:3A:B3:9B:C8:FD:3B:D4:89 X509v3 Authority Key Identifier: keyid:3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/O37JQjv5DIHSLZSEHBA1elQmA3k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/O37JQjv5DIHSLZSEHBA1elQmA3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:15:f2:62:ed:e5:47:c4:c8:7b:19:af:96:e2:2b:d5:e8:c8: 0c:6c:31:97:23:6c:27:e3:4b:04:1b:57:af:24:4b:07:07:7d: b6:8e:fd:94:45:55:7c:78:a6:06:e3:c1:4d:97:c6:48:71:3d: 13:c4:64:ab:e1:44:d2:b7:30:30:20:bd:10:b3:c0:ce:6b:2f: 76:77:ba:26:5d:d8:27:52:dd:7d:d3:a3:83:22:64:b8:20:de: 02:da:84:f5:90:da:a5:50:68:f7:49:87:6a:3a:f1:42:33:3f: 7d:4a:8b:54:4f:d0:74:89:b7:3b:0b:00:c4:a3:18:0b:59:07: f9:69:78:45:92:2f:15:2c:31:1f:82:57:32:3a:99:87:b7:b7: 6c:09:7e:6a:a4:fd:1c:e8:a7:c1:73:d2:5b:3e:48:7b:ec:85: cd:52:44:87:25:5d:37:94:1f:23:d6:14:c3:2e:3e:db:35:d1: 17:63:7c:86:85:da:33:61:39:f9:52:13:ec:90:0d:e2:24:66: eb:4f:d1:5d:93:17:6e:a1:6a:5b:ac:80:91:1d:d3:2c:03:48: e4:fe:4a:2b:3d:f5:c5:84:ea:f6:3e:f3:85:a1:d6:8a:f9:ed: 63:60:be:81:6a:0a:39:31:54:3e:26:55:51:59:3c:84:01:ac: fb:e7:59:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY+ER3biU4f0ZZEj4jUfgDEZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiN2VjOTQyM2JmOTBjODFkMjJkOTQ4NDFjMTAzNTdhNTQy NjAzNzkwHhcNMjQwNTE3MDIwMDI3WhcNMjQwNTE4MDIwMDI3WjAzMTEwLwYDVQQD EygzOGE1YWRkMjZkYzdkNDVmZDU0NTAxZmUzYWIzOWJjOGZkM2JkNDg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAji/ZzkaKPM6mRfDNTLRBUmEj8EXZ vxPXpAGbyfjqwCTime7qH3+EVHYjNndOcLEqc5PUcT54lNACJKH2r8EpA0lvCz/c +GPfYdzw/ibsNf1XWLhQWCGDAWMuOmGogGsZINbXHk2gqC31sZ/bzftgX56Cjdxn WjjSWTxmKE+hJy7Ha+PC04Fbo0CqiteWtMwcOUtDzqdhiqdBbYEVq1ZxpeQayGm+ USx/j2/xhA8J9Kv1DT+7xlVYibtkd6UlGdBHz9dwClGnGc4URIXAUk81jTpZf+AZ lUwNSmIe4dAUvX2uF9ItytZ5bybfdRqNRG+zrbgs44eyEGJpHhNqi7Qb9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDilrdJtx9Rf1UUB/jqzm8j9O9SJMB8GA1UdIwQY MBaAFDt+yUI7+QyB0i2UhBwQNXpUJgN5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzM3SlFqdjVESUhTTFpTRUhCQTFlbFFtQTNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy84ZWE0N2YtZWZmMy00NjI3LTk0ZWQt MWQxMGYzYzcwYmI0LzEvTzM3SlFqdjVESUhTTFpTRUhCQTFlbFFtQTNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy84ZWE0N2YtZWZmMy00NjI3LTk0ZWQtMWQxMGYzYzcwYmI0 LzEvTzM3SlFqdjVESUhTTFpTRUhCQTFlbFFtQTNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARRXyYu3l R8TIexmvluIr1ejIDGwxlyNsJ+NLBBtXryRLBwd9to79lEVVfHimBuPBTZfGSHE9 E8Rkq+FE0rcwMCC9ELPAzmsvdne6Jl3YJ1LdfdOjgyJkuCDeAtqE9ZDapVBo90mH ajrxQjM/fUqLVE/QdIm3OwsAxKMYC1kH+Wl4RZIvFSwxH4JXMjqZh7e3bAl+aqT9 HOinwXPSWz5Ie+yFzVJEhyVdN5QfI9YUwy4+2zXRF2N8hoXaM2E5+VIT7JAN4iRm 60/RXZMXbqFqW6yAkR3TLANI5P5KKz31xYTq9j7zhaHWivntY2C+gWoKOTFUPiZV UVk8hAGs++dZiw== -----END CERTIFICATE-----Generated at Fri May 17 10:00:19 2024 by rpki-client on console-ams.rpki-client.org