$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.mft File: 520NqzR6OOK4e1oiovfJ4hwYybw.mft (raw, json) Hash identifier: nDIyMlIGHj6n/uwegH1Fsy0FSCZqWQDGQ8jHpYWcvto= Subject key identifier: 4C:5F:B2:2B:F8:9E:2E:FF:A2:CE:85:F6:66:4E:A4:69:72:AB:62:15 Authority key identifier: E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC Certificate issuer: /CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc Certificate serial: 018F5549F4BA21C89F57D929378977A9A925 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.mft Manifest number: 0C45 Signing time: Tue 07 May 2024 23:01:00 +0000 Manifest this update: Tue 07 May 2024 23:01:00 +0000 Manifest next update: Wed 08 May 2024 23:01:00 +0000 Files and hashes: 1: 09AhODH8jdRGyrQvy4UzUTAdhIw.roa (hash: pTsVz8xf43TT4PCl1IIDfU5Yae9qyKpAV6qxYLjd6HA=) 2: 520NqzR6OOK4e1oiovfJ4hwYybw.crl (hash: w7x3pP1DJakAyUeyXIWTsYg+Wi4cdyFt6bfB9ElAXso=) 3: 5nKpvKctsxiZWaJlPM7CLuQemIg.roa (hash: WQOQ8q+7K9KBF6asc/rGQoUGKsRff8tH977Sl7YgfII=) 4: BVRo3vJKsZRaxHKuEm7aqHtYvE4.roa (hash: SeTBsOSLM/wME/YKjf+/lG5hfMmn5w0RZoI3nXJU1zY=) 5: BucJvvExLyIclKkhm71pHqGl8fo.roa (hash: FcMmyZtFKwbiwMwGeay8edxIZMvjn2FGK/NXxtZJqEQ=) 6: L-bgN2aTA_J-hJlHr46VZmzOoJ4.roa (hash: NLdhQ+92KzguBkjKtiN+iNJiKDMF8PKEq4PBSfRADIs=) 7: LBHoAiHbD38HDCErpLH5TnVUluA.roa (hash: UnaYP2+vFQcO0nSMwf8RU40rSlFVlzWo8dB0ZeYuT7c=) 8: NgRBstMdQgU-bowpiiu8v5AYiwU.roa (hash: 24cPOwKLhzzkJPZAKnl+fjMLcyRGsTJxePxh9brzai0=) 9: Okgcg3FzXqw8mvVPFTcrWGNl_LE.roa (hash: O2oOE7BAjMOfTVpOaZoJzsoOZnA/WbvHmBcQQjKCT0Q=) 10: Rh3NEvNzW9CoE-_tnSyBdAUl_kc.roa (hash: XkvbmH8qcwmcXE5ADM4Bs6r17wZTloWZsMlTTsCrjks=) 11: UeqWP9xa0Y4HrRCFRr_C16PN-Ck.roa (hash: iOlYd7tlDlIti73IokF16mS37kGo1nLViBSis48QGKg=) 12: YbdnsKKcLWXNt16ld8ZvdDfRwvI.roa (hash: xG7IHAySfija7pf7oM9P1hrZ7cvpaRte6EMf43t62U8=) 13: sjMiPPeZuRLGpZallpkYg0KgWXc.roa (hash: Q6IpKrXKXoxh/9VPIo2c9xukmJzWOxveP/WbeXAtafM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.mft rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 08 May 2024 23:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:55:49:f4:ba:21:c8:9f:57:d9:29:37:89:77:a9:a9:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc Validity Not Before: May 7 23:01:00 2024 GMT Not After : May 8 23:01:00 2024 GMT Subject: CN=4c5fb22bf89e2effa2ce85f6664ea46972ab6215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6e:92:47:43:ac:ea:53:42:57:db:42:fa:c9: 83:12:74:d0:5f:7b:87:5a:7b:c9:18:3c:81:1c:d8: a1:7a:dd:07:b3:b9:af:d8:9a:c0:f0:9d:5d:9d:e4: 55:b5:31:24:33:ea:b3:87:d9:f7:74:7e:e9:51:bb: 34:2a:ae:47:64:40:5f:ae:a5:c2:d8:73:c8:a5:47: 76:15:6f:4b:73:b8:95:09:e4:d8:05:c2:13:77:83: 86:3a:96:ef:e9:72:dc:d2:63:0f:1f:83:10:f6:76: 23:8f:b4:9c:c4:96:63:c0:1c:72:e9:29:5a:6b:16: 35:05:41:8a:9e:57:ee:e8:3a:d6:c9:81:3d:24:5f: 33:ba:9c:8b:42:84:6b:4d:8d:97:05:6b:45:9e:25: 90:65:4a:eb:e1:3a:16:57:00:28:0e:b2:9a:20:b6: 9d:d2:72:00:70:56:44:21:93:47:68:d4:cd:e6:b3: 9c:ed:06:51:cc:61:97:e3:e7:8d:e0:0f:8b:b8:e1: 21:bc:d8:47:70:e1:41:23:ce:09:5e:73:b2:6e:84: 90:9e:23:da:e4:87:87:83:23:2d:f0:f5:b4:5b:c2: e5:6c:3f:18:51:02:4b:e9:4e:f4:de:c1:89:ff:b2: a7:1c:8d:54:4c:78:a9:46:fa:05:e1:6a:6d:c8:c6: 96:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:5F:B2:2B:F8:9E:2E:FF:A2:CE:85:F6:66:4E:A4:69:72:AB:62:15 X509v3 Authority Key Identifier: keyid:E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:6d:a8:b0:c0:f2:2d:99:bd:4e:3a:90:70:b6:b2:3a:a4:f6: 68:c6:8f:cf:8c:52:ef:0d:2c:80:15:e9:58:cb:2f:75:96:46: c0:0a:e4:97:94:69:b3:84:25:fd:a7:48:30:dc:02:6c:41:88: 5c:fd:e3:02:7f:0e:53:e0:96:ea:e4:c4:5c:f3:1c:14:20:0f: af:bf:1a:d3:3a:e9:d4:39:f0:20:e8:c6:38:d6:41:52:74:2e: 7e:66:0f:cd:73:18:74:04:b2:7f:f4:44:82:f7:c5:2b:d9:c8: 8f:fe:a5:71:bd:38:18:97:75:45:3e:21:f0:07:c2:e9:6c:a2: 3d:c1:9f:c9:35:90:e6:92:af:de:88:54:87:ce:db:8e:58:14: 67:97:5b:72:49:02:e9:d3:96:19:70:b5:78:78:9f:23:87:9c: 23:bc:32:5d:46:be:bc:81:f3:d2:d1:a4:9b:c2:34:5f:40:3d: df:0f:1c:88:79:c8:63:fd:df:5f:dc:9b:a0:5c:29:e9:eb:0c: a1:c8:75:d7:10:74:46:2f:21:bc:b0:10:49:db:f6:8e:85:9a: a9:6c:4f:5d:98:5a:65:a5:19:c6:0b:80:3d:93:f9:d7:02:3d: e1:bf:58:2c:e4:3e:34:77:d6:a6:7f:11:3b:6b:98:93:67:2a: 14:32:5b:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY9VSfS6IcifV9kpN4l3qaklMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NmQwZGFiMzQ3YTM4ZTJiODdiNWEyMmEyZjdjOWUyMWMx OGM5YmMwHhcNMjQwNTA3MjMwMTAwWhcNMjQwNTA4MjMwMTAwWjAzMTEwLwYDVQQD Eyg0YzVmYjIyYmY4OWUyZWZmYTJjZTg1ZjY2NjRlYTQ2OTcyYWI2MjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvG6SR0Os6lNCV9tC+smDEnTQX3uH WnvJGDyBHNihet0Hs7mv2JrA8J1dneRVtTEkM+qzh9n3dH7pUbs0Kq5HZEBfrqXC 2HPIpUd2FW9Lc7iVCeTYBcITd4OGOpbv6XLc0mMPH4MQ9nYjj7ScxJZjwBxy6Sla axY1BUGKnlfu6DrWyYE9JF8zupyLQoRrTY2XBWtFniWQZUrr4ToWVwAoDrKaILad 0nIAcFZEIZNHaNTN5rOc7QZRzGGX4+eN4A+LuOEhvNhHcOFBI84JXnOyboSQniPa 5IeHgyMt8PW0W8LlbD8YUQJL6U703sGJ/7KnHI1UTHipRvoF4WptyMaWqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFExfsiv4ni7/os6F9mZOpGlyq2IVMB8GA1UdIwQY MBaAFOdtDas0ejjiuHtaIqL3yeIcGMm8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTIwTnF6UjZPT0s0ZTFvaW92Zko0aHdZeWJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zZGJiM2QtZjMyOC00YjI3LTk1ZDkt YmQzYmZjOTliZGE5LzEvNTIwTnF6UjZPT0s0ZTFvaW92Zko0aHdZeWJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8zZGJiM2QtZjMyOC00YjI3LTk1ZDktYmQzYmZjOTliZGE5 LzEvNTIwTnF6UjZPT0s0ZTFvaW92Zko0aHdZeWJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABG2osMDy LZm9TjqQcLayOqT2aMaPz4xS7w0sgBXpWMsvdZZGwArkl5Rps4Ql/adIMNwCbEGI XP3jAn8OU+CW6uTEXPMcFCAPr78a0zrp1DnwIOjGONZBUnQufmYPzXMYdASyf/RE gvfFK9nIj/6lcb04GJd1RT4h8AfC6WyiPcGfyTWQ5pKv3ohUh87bjlgUZ5dbckkC 6dOWGXC1eHifI4ecI7wyXUa+vIHz0tGkm8I0X0A93w8ciHnIY/3fX9yboFwp6esM och11xB0Ri8hvLAQSdv2joWaqWxPXZhaZaUZxguAPZP51wI94b9YLOQ+NHfWpn8R O2uYk2cqFDJbiw== -----END CERTIFICATE-----Generated at Wed May 8 02:26:24 2024 by rpki-client on console-ams.rpki-client.org