$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft File: 0he0cshBwdaFUKJPGTbSnMbCj2o.mft (raw, json) Hash identifier: V0iefjuIyxTJ6Y3dFFEk0+89xe9xmxYnlf8+zIYM6sI= Subject key identifier: 9A:24:A7:5B:4E:39:C5:B0:CE:85:B1:0F:8A:72:36:F7:28:BB:AD:7A Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Certificate serial: 018F41FA1B1AB61EB8890FF384719ED2735F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft Manifest number: 1188 Signing time: Sat 04 May 2024 05:01:00 +0000 Manifest this update: Sat 04 May 2024 05:01:00 +0000 Manifest next update: Sun 05 May 2024 05:01:00 +0000 Files and hashes: 1: 0he0cshBwdaFUKJPGTbSnMbCj2o.crl (hash: jRJb9gp+ey6nRuGhI0DRwjrnbY7dVo2xZjc6syS8Os8=) 2: 1-ru45WX50nqE1nkkiAh6wbMYSKE.roa (hash: 6VMyn58eJX/7qjDu0gid/FtESObauEZYtrO05J2qzTY=) 3: 409r4FTmvCNaaZy8TGynMtRlPvE.roa (hash: SqPUHo+iI/MiHCjEYNNax3VWc88UhmhyadijI80tOPQ=) 4: 6tVAZsKU-ZcZyojwDAf-C0Uh_ic.roa (hash: DiOW8C4iMymlPiD/gs3PtbZMbrQ/9JvXlZWhh69vvwM=) 5: 7Xbjk3gHmNSh4jMhe1E9Qftj2Rs.roa (hash: 6U+SMw5hvdHlN3FV3LdaJis1ZpkAIJeKzDcJ0HQBo6E=) 6: 80rCcXN6U3l6c3pqPcp-TsbQHx4.roa (hash: dLshUJ/c9gDz9OkUGfsARS5j/snimHxtTpVF2/QzS+4=) 7: 9FbYUtvhSiGnwkgWnPEe8LBbWTE.roa (hash: VH+23ZEyZD/zIeAjQCb1brr5cQuLUhCHdf4WE3EDIV0=) 8: 9NwP_dr0hugt83MSZ3uolV7CFyk.roa (hash: xgVNfXThnOGNymsgEuG6ysiwomnLdpjW8LFsdx+jygg=) 9: BGv1PWma16f4ctAQJCrVoQubGBo.roa (hash: pfWL3xKc+QttrMTYA6gs1NSPLhjXFXzGZMdIvCtI0fI=) 10: GRoTqbzlgb7LL4qGT9vOrU_aI7M.roa (hash: bQIg/nd1fvR/UyqcjO6aYkXwwfFBucsHdfsZFyoF3Os=) 11: Ikpj4jEaS2DoLgaAtEHrLHIjbjc.roa (hash: XySfojAZAgmgAuLkk/BdqsdZo0ICghtyJKx6Krx90k0=) 12: KTrwANLcxnWEYW-ek78rR33hKq0.roa (hash: xejdCVJtlTmimSbniNPlRdOgxzhnub1fRr8Dm4yqRvo=) 13: LryRYP8atopakjUQaEg0A6GB5Ms.roa (hash: kJP8bsJAiRVpoMcmpBnW6ixFOKslhQYtGMAiXHhbFrA=) 14: Mnd7bRBFbm95zrp-3u8GFynm7SM.roa (hash: 6rGg4MKfJedOrnocpFtDXqMuYVQBSiNHaCbLj6j4K6g=) 15: OfF7PvwCC27fW-6kfStrwwRrO7E.roa (hash: S4DRXm/lpOdZ+Tiabo7f1Eyfj8mMWn4Ersz+p+4G3hg=) 16: P4weekf1aKUcnkp8fHX-k_Gt_sI.roa (hash: fIq9ZB4SDhzeK0PefN08AJbeELON7JjrHLasilYncFM=) 17: PD79CufWsAn3sQd4KY0rWG8tuw0.roa (hash: ydtWXsgHsS3B+Dkrf9mRdY4++Zk+7SXieOvRV/PlsfI=) 18: QFDwHj-j-y33uDhFUsrE-1OKCE0.roa (hash: zupjnMRcjVnfmgFPyHKsQHldn/aPiQG7UKeQJHmAcy4=) 19: QgXQ0jofwuGVXnjhXJU7D3pw4a8.roa (hash: +QIoPxXL555k2fAxahFvxNlcyJubTz0+MIXCA/qjmZw=) 20: Sef28NKppSJav9L25T-eCc8LWHg.roa (hash: eVRNJvOmTnXMBrADlfqwv9vwpSUzjLsPa4lc8cWhfu0=) 21: VImUHTDDRHKWm4JlJloTojQOE9k.roa (hash: e/b/XPAmPyj+bqr/kvQosXTMROaPtpsPB/pPFqntsgQ=) 22: X-iCnqmNG6j885gxiyPbYDqPEtc.roa (hash: cB3ZnO+ne1w3OWuzgaqgeTrJOUkZQMqe2HjvqHud/S0=) 23: Z1ZQR08H4ewbrfjeHEbWgsc3lcE.roa (hash: KIzAnt9ls/xXzz8K38qYuJBdznqQEV++2uLw5j5JppQ=) 24: _BntLA1ByxKmEH1meyX9Ac_ENgo.roa (hash: TUPv5gmhwM2daPbnbN57P3T8IlhR7ks/v0VAHtkzI+0=) 25: aRUigTBCcOciLBvaclbhqlbdBd0.roa (hash: aNHnkD8pW4ioTdee/8mg7stpCc/b3/NwJs7b1+l6LBw=) 26: aYF30ZFrvtaKBZWNizoCpyO21v8.roa (hash: 7A8iDphnqdnGZ4tAakv6xwpniHRTTqZsTmwWqCPgjqc=) 27: efCOFmsfSLRoNKt0dEfRzs6eu6o.roa (hash: 1mPlWhqIukcjMep3y+IWnUquE2flzs5hd9dWYCBq5Gw=) 28: g0iVD3Ww-LEBDwBV90RqilfGtxI.roa (hash: yCSlQvrd3NZnYBQSzcMClUGczv5HojzT7L0Zq3fA7ho=) 29: iT5K7jrvKPIb3MIbXgkOBNs6J3g.roa (hash: JD5cuSLx2TQWAN/32n4QOen1lg/FPsM0kaCR7e8lgKc=) 30: qm6M43Bf3k_6oSMSeKVcRjDddHY.roa (hash: kyBJJpiiEML0MPFZQKFxW0Zd2rH4A3TKitJIZijmKyY=) 31: rLJBW-lVLAhd5TXpRwsmdfXF2_E.roa (hash: wnWD+7jtLO15EQ/RITt2PLn50YkBXJMnrr6YS0mhGXM=) 32: vBmn7Q6zDIT24NBHlo9tmyOCsvQ.roa (hash: wRrNquEmp7KhGIwCFzUX3NF5vcXtMANimJDhqf1rP48=) 33: yRzwejVSauh5J3SqcIAz9T7xhWA.roa (hash: Wrqqoq5cwG+rMNTMWPlnF9/upXXQ0FhuIDv968WoD9s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 05 May 2024 05:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:41:fa:1b:1a:b6:1e:b8:89:0f:f3:84:71:9e:d2:73:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Validity Not Before: May 4 05:01:00 2024 GMT Not After : May 5 05:01:00 2024 GMT Subject: CN=9a24a75b4e39c5b0ce85b10f8a7236f728bbad7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:c9:ff:66:26:06:8c:06:74:f0:08:33:0b:9b: f3:45:77:1d:76:61:dc:dc:05:82:de:4a:d3:5f:e4: 61:d2:1c:81:20:a5:a0:17:1e:cc:b4:6b:f9:a2:1f: 54:25:22:e5:f4:39:fb:74:32:17:c6:32:14:d1:a1: 38:d4:c4:28:57:bf:5a:45:db:c5:ff:6f:3b:32:d9: d7:22:f3:4a:87:fd:e2:3e:fb:84:9c:5e:78:41:23: 84:97:ec:87:d2:d0:78:af:f6:60:a3:cd:c4:e9:52: 6b:58:4f:0f:b3:3c:a3:e5:df:fc:66:2a:51:c7:8e: 31:ed:10:44:73:3e:e4:6f:7c:43:10:0f:5e:1f:43: c1:d7:18:b8:fb:e3:9c:06:b4:dd:12:2e:17:45:84: 18:40:c5:f3:b6:14:70:62:0a:fd:bb:fc:e7:14:b6: 3d:95:67:6b:76:35:59:1c:fe:2c:9c:74:a2:4e:07: 3e:b5:57:b4:3e:de:ce:9e:c8:32:03:0c:c3:2e:10: a5:11:a2:86:fb:2a:99:70:f8:67:48:bb:53:b7:2e: 59:d5:07:f6:3b:84:87:85:03:7c:74:30:c7:35:3f: 05:b5:b1:ec:f2:96:0d:f8:42:a3:67:5b:6a:ab:03: fb:d0:d6:a1:e7:e3:ba:9d:31:c2:7e:73:61:36:51: d1:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:24:A7:5B:4E:39:C5:B0:CE:85:B1:0F:8A:72:36:F7:28:BB:AD:7A X509v3 Authority Key Identifier: keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:c7:c4:24:03:9c:a3:8d:b0:94:e7:5c:da:1a:3a:bf:d1:4d: 7d:40:dc:46:99:c0:d7:40:37:7b:43:8e:bb:71:d6:7f:79:7e: d0:35:9f:c1:ef:1e:32:b3:c0:6a:b0:0b:d7:93:7f:e0:30:01: 43:2c:03:69:f1:33:97:bf:f4:81:c0:55:6a:b2:ed:3e:a6:84: a1:de:fd:61:fe:98:41:ac:f3:e9:f3:ac:c0:0c:65:c1:78:57: 9a:44:b9:42:45:a4:ed:81:89:57:2b:40:04:76:1e:61:da:b6: 6f:44:e5:d4:43:a6:d9:8a:f7:c0:84:b6:b6:85:3b:f9:db:24: da:1f:1c:ab:9e:ad:c9:09:65:83:99:fb:01:c8:92:44:9b:d8: 2a:eb:9d:98:33:a4:60:61:49:d0:f7:c1:2f:ab:0b:08:b8:49: 5a:0c:86:a6:fd:0d:9c:92:45:58:33:98:47:1a:38:a9:e2:97: 5c:55:30:b5:91:46:7a:c8:a2:92:0f:4a:a1:df:cd:b5:ec:08: bc:7d:3d:c1:cc:d4:9c:44:dd:9c:d9:d6:fb:fe:0b:72:ad:6b: d5:9b:16:39:86:b4:1a:18:ae:c6:b7:0c:da:d0:7f:86:35:b1: 01:d0:16:ea:c7:03:c4:9a:45:8b:a2:ad:4c:fe:73:e3:9c:eb: 4f:31:d7:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY9B+hsath64iQ/zhHGe0nNfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj MjhmNmEwHhcNMjQwNTA0MDUwMTAwWhcNMjQwNTA1MDUwMTAwWjAzMTEwLwYDVQQD Eyg5YTI0YTc1YjRlMzljNWIwY2U4NWIxMGY4YTcyMzZmNzI4YmJhZDdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA88n/ZiYGjAZ08AgzC5vzRXcddmHc 3AWC3krTX+Rh0hyBIKWgFx7MtGv5oh9UJSLl9Dn7dDIXxjIU0aE41MQoV79aRdvF /287MtnXIvNKh/3iPvuEnF54QSOEl+yH0tB4r/Zgo83E6VJrWE8Pszyj5d/8ZipR x44x7RBEcz7kb3xDEA9eH0PB1xi4++OcBrTdEi4XRYQYQMXzthRwYgr9u/znFLY9 lWdrdjVZHP4snHSiTgc+tVe0Pt7OnsgyAwzDLhClEaKG+yqZcPhnSLtTty5Z1Qf2 O4SHhQN8dDDHNT8FtbHs8pYN+EKjZ1tqqwP70Nah5+O6nTHCfnNhNlHRzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJokp1tOOcWwzoWxD4pyNvcou616MB8GA1UdIwQY MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt YjM4ZTI2NzdiM2RjLzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIsfEJAOc o42wlOdc2ho6v9FNfUDcRpnA10A3e0OOu3HWf3l+0DWfwe8eMrPAarAL15N/4DAB QywDafEzl7/0gcBVarLtPqaEod79Yf6YQazz6fOswAxlwXhXmkS5QkWk7YGJVytA BHYeYdq2b0Tl1EOm2Yr3wIS2toU7+dsk2h8cq56tyQllg5n7AciSRJvYKuudmDOk YGFJ0PfBL6sLCLhJWgyGpv0NnJJFWDOYRxo4qeKXXFUwtZFGesiikg9Kod/NtewI vH09wczUnETdnNnW+/4Lcq1r1ZsWOYa0GhiuxrcM2tB/hjWxAdAW6scDxJpFi6Kt TP5z45zrTzHXAw== -----END CERTIFICATE-----Generated at Sat May 4 08:58:10 2024 by rpki-client on console-ams.rpki-client.org