$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.mft File: XaQypOw7CsTKTk7OwOn01GtJevA.mft (raw, json) Hash identifier: zd/8ai+eLV+XYMXzDWJ0ouTHshFKQGgxf3r4F0kN/DE= Subject key identifier: 60:5D:DB:6A:DA:9F:B2:A3:4F:C9:43:F6:F4:08:0F:6F:A8:64:BB:1A Authority key identifier: 5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0 Certificate issuer: /CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0 Certificate serial: 018F8748B42BC83CFCC76309E3381F427C8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.mft Manifest number: 118C Signing time: Fri 17 May 2024 16:00:39 +0000 Manifest this update: Fri 17 May 2024 16:00:39 +0000 Manifest next update: Sat 18 May 2024 16:00:39 +0000 Files and hashes: 1: 1-YogfmKwQf9EC6HAxHp7tGdiSfA.roa (hash: WamJOgH5ha0T3xvIYHAVd5Z7Mqz1LNgGq/WmPK/1P8g=) 2: 2gfaX-TtZ8RBLV6HMB0j2mDpOPs.roa (hash: eJBEGg56iKPR1WkuHk5oV/dOGDuwQUiZ9yNlN1nM39c=) 3: BOH31QgH3qz2UFIeftjo-6C5Fek.roa (hash: DS5e1ucfdroctk1wEW6B2xFbJ77YyFWDhka5JBYIy2E=) 4: Gq3ZT6bIXdmXcg8c_usJWTADloA.roa (hash: pcjrr2V82T01v9BGN/y/LxJTVfRLhs8qJBHiJqKopKk=) 5: I8sPKRir594lHFeezsaA0WXHd5o.roa (hash: sSiNLodTC/iM3vF3WfZVDjNyACSwr/BSs7i/qiZ/fBM=) 6: JvkKpyhbpGA8UL__3C4XQpWDpAo.roa (hash: DDJVwpDP7p53haa7DBiVldpZA5dYPtkPXnHXowU+vQ4=) 7: OY9tCxWaVrnLcCfXnydN5f_oxmk.roa (hash: n4l7HxWW6k0P3NoGI+OeQZzd7J0Pk3ApBYPbQU3iubI=) 8: P5rGqzmh21na75yPc6OiqdpXpMU.roa (hash: QAj4jlbXmOzOdVejiLbgooiBYvjgHoWNV4qu3UwsxJk=) 9: XaQypOw7CsTKTk7OwOn01GtJevA.crl (hash: QYOqIKC83NBTRa7Y7UUQoyuk1UoXjFdSbJkeAkIpimI=) 10: ciVxkeVphk7IAvdQ29VnTVmXsBE.roa (hash: oDRh7BWSl9XnB6+05kPBLgyHYFESy3NeTW1/pyHj7m8=) 11: fRsZG0PHZPuhU-6QpDbPAODKMT0.roa (hash: G8+L84DOntGe2pEq0wBTX0ojVKNJaA3Aoeev75Mv1UU=) 12: gdysErM6mUKPV5y0qXDfJYaKs7c.roa (hash: gQXQtxTOiQ3WanX94sA65rTDhydiozAnSrZL/WLCFZ4=) 13: m2E145NPKbRX_VOp8ovV-3hxCb4.roa (hash: DL9/79yMxtcLVnGtVsBdvZ+mMwpJd/l7irsQkxQyzso=) 14: pzTBBG0uTyp8enLIHyx6mvEmH-Q.roa (hash: Z6l5bXBZ6z6xWhBEw8PIduXyxAWND5UIcg3CmXiIMQU=) 15: wPtdxRNZPDzyaKQ1i0f8x95GnC4.roa (hash: WKa+LyaNO21/Pg9zKtPnbQvHksKHLc6fPRTutTGAa/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.crl rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.mft rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 May 2024 16:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:87:48:b4:2b:c8:3c:fc:c7:63:09:e3:38:1f:42:7c:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0 Validity Not Before: May 17 16:00:39 2024 GMT Not After : May 18 16:00:39 2024 GMT Subject: CN=605ddb6ada9fb2a34fc943f6f4080f6fa864bb1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c5:26:39:fd:92:d2:2c:d3:c9:fa:41:e6:41: a2:08:db:ff:0f:c2:94:e3:f5:34:17:33:f0:3d:27: a2:7b:11:4d:1e:7b:2b:44:23:f3:e3:cf:ef:61:fe: b2:ce:55:3d:17:00:d5:6b:5f:c3:89:9f:64:05:ce: 56:5c:b0:00:06:46:97:f8:0a:a8:0d:63:b4:0d:7d: 1a:f4:b2:4e:ee:e8:6e:70:19:57:2b:b2:e0:9d:8c: 2b:b6:bc:4a:1e:c7:f4:e4:ab:18:49:66:12:04:e9: b7:22:f6:09:46:f0:da:f7:7d:35:02:c4:30:1a:7d: 74:87:1b:27:fe:fb:86:f0:26:13:0b:9b:04:31:68: 41:53:03:12:7e:82:d0:e3:3d:2f:87:16:d4:b8:08: 02:b7:37:9b:b1:b2:67:35:37:02:aa:de:a5:47:8d: 0a:27:bd:4e:bf:e0:fd:4c:70:86:f9:ff:f0:c8:4f: cc:50:1e:32:8a:48:35:41:50:4b:bf:e2:6f:ac:66: f1:5d:04:99:ff:b6:d6:90:29:e7:c4:90:b3:37:5e: 75:f8:cb:25:f6:69:d6:54:ac:79:68:21:ec:19:63: 97:34:ae:0a:35:2c:44:2d:23:e8:32:d1:3a:1d:38: d2:8a:87:18:60:31:60:d1:3b:8f:06:e5:87:f0:8b: f6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:5D:DB:6A:DA:9F:B2:A3:4F:C9:43:F6:F4:08:0F:6F:A8:64:BB:1A X509v3 Authority Key Identifier: keyid:5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:3c:30:af:6e:f0:0d:7d:c5:b0:fe:09:30:fa:f3:29:7a:14: a2:6b:e1:92:6f:7e:cb:b5:ee:4c:eb:42:4e:78:1b:0c:b1:dd: 39:b2:6c:07:de:45:98:0c:e6:b8:dd:28:f6:31:b7:be:f7:5e: 4d:65:3c:3b:92:62:21:5a:74:25:95:46:40:4e:79:db:9c:02: 43:97:01:31:bd:ea:96:e1:83:82:58:c7:a1:ee:21:4b:bd:21: f9:14:0f:47:b1:42:7d:47:91:95:48:96:4a:75:ca:7d:b5:0f: 86:86:e9:e5:88:bb:7a:70:af:25:47:0a:54:3a:c5:f1:ed:db: a5:1f:2f:6d:a1:27:f9:f9:44:fa:a7:93:cd:f8:e8:63:8b:c9: 04:e7:14:45:50:f7:2f:43:a6:35:94:e4:8d:da:a9:83:6e:09: bd:00:c6:21:97:15:d8:b8:60:ce:be:77:5a:6d:47:37:87:fd: 70:48:f3:1e:e2:30:4b:09:11:c8:a5:7b:e6:83:6b:08:24:98: 71:0b:39:1a:d2:4e:7d:d5:4d:21:ee:11:ee:90:d7:64:ab:10: 27:57:ed:7a:a2:7f:d1:dc:ae:11:22:91:be:58:11:dc:83:85: 56:15:7c:3c:02:8b:00:f5:f9:cf:77:f6:24:01:19:fc:41:60: c5:e2:c2:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY+HSLQryDz8x2MJ4zgfQnyKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkYTQzMmE0ZWMzYjBhYzRjYTRlNGVjZWMwZTlmNGQ0NmI0 OTdhZjAwHhcNMjQwNTE3MTYwMDM5WhcNMjQwNTE4MTYwMDM5WjAzMTEwLwYDVQQD Eyg2MDVkZGI2YWRhOWZiMmEzNGZjOTQzZjZmNDA4MGY2ZmE4NjRiYjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncUmOf2S0izTyfpB5kGiCNv/D8KU 4/U0FzPwPSeiexFNHnsrRCPz48/vYf6yzlU9FwDVa1/DiZ9kBc5WXLAABkaX+Aqo DWO0DX0a9LJO7uhucBlXK7LgnYwrtrxKHsf05KsYSWYSBOm3IvYJRvDa9301AsQw Gn10hxsn/vuG8CYTC5sEMWhBUwMSfoLQ4z0vhxbUuAgCtzebsbJnNTcCqt6lR40K J71Ov+D9THCG+f/wyE/MUB4yikg1QVBLv+JvrGbxXQSZ/7bWkCnnxJCzN151+Msl 9mnWVKx5aCHsGWOXNK4KNSxELSPoMtE6HTjSiocYYDFg0TuPBuWH8Iv2oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGBd22ran7KjT8lD9vQID2+oZLsaMB8GA1UdIwQY MBaAFF2kMqTsOwrEyk5OzsDp9NRrSXrwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGFReXBPdzdDc1RLVGs3T3dPbjAxR3RKZXZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85ZTg0N2YtNDE0Ni00NTY2LThjM2Ut MWJhNTQzZWVhZWQ3LzEvWGFReXBPdzdDc1RLVGs3T3dPbjAxR3RKZXZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85ZTg0N2YtNDE0Ni00NTY2LThjM2UtMWJhNTQzZWVhZWQ3 LzEvWGFReXBPdzdDc1RLVGs3T3dPbjAxR3RKZXZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARDwwr27w DX3FsP4JMPrzKXoUomvhkm9+y7XuTOtCTngbDLHdObJsB95FmAzmuN0o9jG3vvde TWU8O5JiIVp0JZVGQE5525wCQ5cBMb3qluGDgljHoe4hS70h+RQPR7FCfUeRlUiW SnXKfbUPhobp5Yi7enCvJUcKVDrF8e3bpR8vbaEn+flE+qeTzfjoY4vJBOcURVD3 L0OmNZTkjdqpg24JvQDGIZcV2Lhgzr53Wm1HN4f9cEjzHuIwSwkRyKV75oNrCCSY cQs5GtJOfdVNIe4R7pDXZKsQJ1fteqJ/0dyuESKRvlgR3IOFVhV8PAKLAPX5z3f2 JAEZ/EFgxeLCSw== -----END CERTIFICATE-----Generated at Fri May 17 17:51:41 2024 by rpki-client on console-ams.rpki-client.org