$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft File: jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft (raw, json) Hash identifier: H6kjGSRYJr2QjbnnVw1X5yO3VyDci3TaPKqUF3ObQ4M= Subject key identifier: B4:F6:A4:CD:CC:65:57:DF:3A:45:FD:6E:AA:DF:40:76:1E:E8:80:38 Authority key identifier: 8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24 Certificate issuer: /CN=8e626c909eb4951154bcee8221e43951b4257624 Certificate serial: 018F0F8D122772A011C41AC7001E06B46FFF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft Manifest number: 0A19 Signing time: Wed 24 Apr 2024 10:00:54 +0000 Manifest this update: Wed 24 Apr 2024 10:00:54 +0000 Manifest next update: Thu 25 Apr 2024 10:00:54 +0000 Files and hashes: 1: 1PRrpX8RkutnnpW8uNhu_jjX6zo.roa (hash: iiOrHUUEtwZnYNoXjzgplWDB+wOVBWHPcSJOzF/HI9k=) 2: Gz2EorJhD7TLoKMiuWRd9DiqM8U.roa (hash: Iys+JzE3oUxBBZ+9afUHK6atj09OkbajWUa/BiAD94U=) 3: PViq3eM65gFPgPgLRne53b4zVJs.roa (hash: IGq/P/Rc8mAbbdchFiBVHprnFb8jzsuQDOQB9iYqqq0=) 4: RKSmI2hjHkWeHzEasF5cmK3fQg8.roa (hash: VPCpAno6Jmm/pkx/r02iRxewjiPTWTho2yfymA6yFVc=) 5: VSYhSp2Vn0teoWEaNvW1XD7_w84.roa (hash: jy0sUuCUdV+SNwxdjLKLr8zB2TWUh+l6+a+4avTtYGw=) 6: bBlxMTmA0lJ_wYdHAAvQyb-dMQE.roa (hash: BTcGSqAB3Qxi25lGNc5+HYwf56aJucXERa2THZHrTCs=) 7: bLUGgRHy3vOeEs1yok4D496cZ8U.roa (hash: QSZ3C/763ClyivIGBJDUDqZ6Lf8rwOZe2zHtLi4VZl8=) 8: daQhZDt0YumeomgQv-M7O1I7j80.roa (hash: mfb3uLnKv766hR/3YokgzDoyhByPsIaOyGVr+0wvu6Q=) 9: f5oKRqvfjI1F9JNDgV6KrrJ67ZM.roa (hash: wUmAayZIGVwl57Ap6/KqdoGifu8lZcLaYVdKdjSl9W8=) 10: j_o-E9QGhHJC4LLcHCB150xCKkc.roa (hash: qQoSVz9S9lFQuR+eBIAGtJ1UyrJ83gYtZJpy8p6hft8=) 11: jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl (hash: KWU4uOfglReDST9YZfgKhdAxVcQ082xTkxXTWaADCgs=) 12: lReJHlbhxatC7rA5pnMo6pC3_Uk.roa (hash: X2La2BINqECQmKaVWcU9REWRoiDWbAmnxNuaR6XxDG4=) 13: mLQy0Fz-_lZmyCyuGn2N8OyJnV0.roa (hash: AxhO1Pfbyv98DjnKavMLfLHH4Hz0EemNifv54n7VqMc=) 14: u4riyzJYopto-vKczpX9n3DSfIk.roa (hash: U3Yt8FIxSxxpz0k/3I9I+MvibSvj5D10rh0DPizPRsQ=) 15: yS82FHljHupn90jf1DH9rINy3pw.roa (hash: sbkvF1YOtm7msW4tzsFPaCzj5lpAhoQWqDa9OeNxJxA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Apr 2024 10:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:0f:8d:12:27:72:a0:11:c4:1a:c7:00:1e:06:b4:6f:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e626c909eb4951154bcee8221e43951b4257624 Validity Not Before: Apr 24 10:00:54 2024 GMT Not After : Apr 25 10:00:54 2024 GMT Subject: CN=b4f6a4cdcc6557df3a45fd6eaadf40761ee88038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:70:74:b6:d8:a2:f2:27:a5:32:6b:3a:b8:30: 68:fa:2f:ca:96:ea:e0:a5:5b:e8:ce:4b:73:cc:2e: b3:c5:e0:13:73:59:06:53:2c:76:5a:10:34:28:23: bd:81:28:7c:1f:36:5d:1e:33:69:ed:aa:e0:5f:d8: 79:91:ee:e5:a7:b9:d1:8c:56:2c:02:80:7c:cb:c0: 27:cb:5d:e9:ef:08:f7:66:4c:00:71:e9:9e:88:5d: 49:97:45:46:57:1a:09:29:8a:44:25:63:4b:d4:8f: 03:68:6a:a5:87:50:13:a6:03:1c:68:20:a4:b3:99: 16:f6:25:91:f4:ae:bd:61:af:1a:03:9d:c8:fd:33: ef:85:3a:f1:c7:45:46:e7:33:fd:8d:7d:17:5b:09: dc:d2:57:d7:f4:0b:62:3a:ae:c7:27:44:7c:70:20: 18:52:7b:48:96:8f:57:6e:79:8a:12:87:55:c5:8b: 19:5a:7e:29:69:80:73:ea:61:55:58:96:f8:a8:02: b8:48:1f:20:ce:05:84:6f:45:d4:11:33:45:b1:12: 02:94:10:50:15:f7:af:fc:dc:f4:3c:02:bf:47:69: 87:a1:d4:1d:48:f4:f1:23:f3:94:ff:00:49:6d:a0: 8f:5b:a9:cc:aa:70:5c:cc:a4:6d:e0:51:8e:5b:c1: 56:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:F6:A4:CD:CC:65:57:DF:3A:45:FD:6E:AA:DF:40:76:1E:E8:80:38 X509v3 Authority Key Identifier: keyid:8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:74:a8:95:71:9b:41:5a:4b:32:fc:c3:4d:aa:ff:a6:cf:54: 5a:e4:f3:8a:ce:5e:8b:27:98:62:15:90:23:bb:9e:08:24:99: ef:9e:5e:df:d8:97:34:ea:64:fd:e4:72:22:41:9c:0d:84:40: 3e:b0:a3:bf:80:70:fa:1e:e0:53:2d:93:54:f1:dd:bd:4c:dc: 3f:96:2e:44:39:19:6a:73:28:cd:23:ac:52:f4:fd:29:6c:53: 7d:fc:e3:b0:f4:fd:14:7e:41:31:4d:40:43:52:88:86:bd:35: 70:15:a5:e6:56:27:42:c5:ab:09:ac:43:b0:22:96:61:b8:7f: a0:89:19:2c:ca:03:21:4d:ed:e3:f2:af:29:7d:53:26:e8:66: bd:81:fb:d1:36:2f:e1:6e:42:35:8c:5f:e0:61:63:34:a1:bf: 73:a0:7b:f3:99:7e:93:3d:a8:11:e5:6f:b2:cb:c7:1f:0a:3b: 80:0f:b5:cd:b7:fd:84:b7:24:69:f0:21:5b:7f:cf:8c:52:1f: e4:ff:59:7f:7e:9f:20:bc:a4:f0:c9:21:fd:9f:03:50:61:9f: 39:3a:a8:42:68:bd:09:6d:1d:f5:7e:cc:5e:ee:2f:a8:2d:fe: 07:ef:fd:66:8b:9c:ef:e6:60:12:d8:ce:f1:f7:5c:95:de:d3: 9e:3b:ec:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY8PjRIncqARxBrHAB4GtG//MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNjI2YzkwOWViNDk1MTE1NGJjZWU4MjIxZTQzOTUxYjQy NTc2MjQwHhcNMjQwNDI0MTAwMDU0WhcNMjQwNDI1MTAwMDU0WjAzMTEwLwYDVQQD EyhiNGY2YTRjZGNjNjU1N2RmM2E0NWZkNmVhYWRmNDA3NjFlZTg4MDM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnB0ttii8ielMms6uDBo+i/Klurg pVvozktzzC6zxeATc1kGUyx2WhA0KCO9gSh8HzZdHjNp7argX9h5ke7lp7nRjFYs AoB8y8Any13p7wj3ZkwAcemeiF1Jl0VGVxoJKYpEJWNL1I8DaGqlh1ATpgMcaCCk s5kW9iWR9K69Ya8aA53I/TPvhTrxx0VG5zP9jX0XWwnc0lfX9AtiOq7HJ0R8cCAY UntIlo9XbnmKEodVxYsZWn4paYBz6mFVWJb4qAK4SB8gzgWEb0XUETNFsRIClBBQ Ffev/Nz0PAK/R2mHodQdSPTxI/OU/wBJbaCPW6nMqnBczKRt4FGOW8FWOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLT2pM3MZVffOkX9bqrfQHYe6IA4MB8GA1UdIwQY MBaAFI5ibJCetJURVLzugiHkOVG0JXYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam1Kc2tKNjBsUkZVdk82Q0llUTVVYlFsZGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9mZTQyNjYtN2Y1NC00ZmIzLWI4MTAt ZTk3ZDFkMDIyMGFmLzEvam1Kc2tKNjBsUkZVdk82Q0llUTVVYlFsZGlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9mZTQyNjYtN2Y1NC00ZmIzLWI4MTAtZTk3ZDFkMDIyMGFm LzEvam1Kc2tKNjBsUkZVdk82Q0llUTVVYlFsZGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo3SolXGb QVpLMvzDTar/ps9UWuTzis5eiyeYYhWQI7ueCCSZ755e39iXNOpk/eRyIkGcDYRA PrCjv4Bw+h7gUy2TVPHdvUzcP5YuRDkZanMozSOsUvT9KWxTffzjsPT9FH5BMU1A Q1KIhr01cBWl5lYnQsWrCaxDsCKWYbh/oIkZLMoDIU3t4/KvKX1TJuhmvYH70TYv 4W5CNYxf4GFjNKG/c6B785l+kz2oEeVvssvHHwo7gA+1zbf9hLckafAhW3/PjFIf 5P9Zf36fILyk8Mkh/Z8DUGGfOTqoQmi9CW0d9X7MXu4vqC3+B+/9Zouc7+ZgEtjO 8fdcld7TnjvsAA== -----END CERTIFICATE-----Generated at Wed Apr 24 14:38:30 2024 by rpki-client on console-fra.rpki-client.org