$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft File: nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft (raw, json) Hash identifier: hG0InxgHLPnwe26ffhZpX0ApZeyw3gIvyLL6ZTsL/5M= Subject key identifier: A4:F7:36:CD:68:79:A5:92:C4:47:69:97:9E:7A:32:4F:C8:8D:74:D1 Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10 Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10 Certificate serial: 01870F71F34E88F4491A2B939A161D170B43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft Manifest Number: 0CFE Signing time: Thu 23 Mar 2023 17:08:58 +0000 Manifest this update: Thu 23 Mar 2023 17:08:58 +0000 Manifest next update: Fri 24 Mar 2023 17:08:58 +0000 Files and hashes: 1: 6gdMVm6nKpxBMSDWjO455IheEKY.roa (hash: +3Qpu9kVAdeKOaHvOjTrZt3Iy/4iDT606XZIH1S9qwg=) 2: 8FdcntVK-lY4TVHluPbe04b3LcQ.roa (hash: BVgqd2qEbrHPz9vhdLG+c+NS8dotFeVPyBjmhOWvIvo=) 3: CzwNYCTiHejRgzWPzemun_WQCPQ.roa (hash: jG2jj24SZmD43+M5qgMT+S5oXdUWKAjqbCL8+zr3rF8=) 4: R__jretAeHOb0zX_9zp1bk5LMOI.roa (hash: eheEUXFZIjL7W+5gpnMHecfIoRhGarWgI2QsnUaiClY=) 5: TUHhsMfj4Tn18UbN_000T1SUEFw.roa (hash: tdtds4lUDFz4PdMT1aSkcNjgcBewrAnykc5kRtvHpOI=) 6: Tkr5n9I_s6e7pAFYhFbQwwZakmU.roa (hash: z7ddTtKgqTUs5JsogWGefN4cUGdVZQoWUeehlrfqd6k=) 7: WripeqKyGiH2NUyrOLx07415Chg.roa (hash: NEES185iEAoZktL6VEEuNrhW+MT6Ii+pno/mXrWxc98=) 8: _KQzCUqdBCVDYEHoQJYt_PinFE8.roa (hash: 28+7fM9489nkjpLgPnqGi7UGXxO1deceeGA9ANEhg14=) 9: fV6rAJEZH4norhYF6aVS1yOvA1o.roa (hash: einjpRbWTp8lF1fPEcpoCG0OW+3oUeDiGQ7+XApZU/8=) 10: hEmEilZzgEMzRfi3yFMMzWgdm2o.roa (hash: PxGXDc8CWEG27jjIsCx60PhIsICttlMUoG1Z6NHesVs=) 11: iqxXAV3pAuM8RNUU8LBA_LC-AnM.roa (hash: M1h1YKahM1ijytTvZtmS59EYIwW1SopE4MZh4Dxgc2Q=) 12: nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl (hash: ts09SrM/YQXGITRoLgCA8+KrPY7QfftxRyffGK3Qa4I=) 13: qoq8Z8QVwaUt6AJyDmRFG2fU6d0.roa (hash: 096l88SynORoHZv7H36R2IfdBYcu44xu5UYqwm9MDEs=) 14: s1mjWqBZcnh7LY3WjaN_rKOKvN8.roa (hash: o0BJJrBA8nNxXRKzyl9eOgfh1Ka1AclUYqHbauIYMjI=) 15: uhIW2hlVnjB0td4eZqsUkt9uI-M.roa (hash: r7VT9ZqYdLR+EtCzoFb/8iRNSdluZgdLZugKCrZ071s=) 16: web8HLlznbHvYarax2GLifPRM30.roa (hash: bgqcyZxW0ZfW7pCUuwnPOF94uxC0yVwuVAA6Nk0Qo/Q=) 17: xmxcEnBgyoBRsyBv40jPQOpS9oM.roa (hash: Czlaj0klpOLvOuXxM4Et6bedChkdE5mkmmHtNrv9VMk=) 18: yRbrKt_1P02AofhwgliuxgZfYzg.roa (hash: p+jgNwV3+WVyBEMpNS9BzmIqXWsAnXvggtDUveDpt+I=) 19: z44Zs83gR3x6u8l-f7jMDh9V3hU.roa (hash: 3UwWx12WPe2walr7EWb2wZKLqkW9Q/t60mGx+OvZJBE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Mar 2023 11:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:87:0f:71:f3:4e:88:f4:49:1a:2b:93:9a:16:1d:17:0b:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10 Validity Not Before: Mar 23 17:08:58 2023 GMT Not After : Mar 24 17:08:58 2023 GMT Subject: CN=a4f736cd6879a592c44769979e7a324fc88d74d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:dc:54:c4:a6:a4:82:dd:0c:b7:82:d9:5f:99: a7:14:1f:12:75:38:cf:da:32:37:95:0e:66:4c:26: fb:0f:f9:a5:91:ae:62:2b:fd:18:5c:8e:f0:60:bd: f8:b7:f0:9b:59:f8:3b:c8:4c:d1:55:6f:bb:6f:e0: d7:58:b6:e9:7a:2d:1c:04:0f:44:f4:22:97:75:11: 0e:e9:43:94:74:92:43:1b:53:af:41:62:29:a4:fe: f4:ba:42:b3:b3:8b:b5:70:5c:68:0a:4a:5c:69:48: 88:9c:88:1e:e3:53:7d:0d:4f:6a:4a:af:1f:13:83: fa:1b:a3:a4:e6:3e:cd:fd:26:15:b1:4e:ae:84:cb: 2a:2d:1a:6b:a1:7a:5c:74:81:6b:52:f3:f8:c4:49: c4:e5:59:6e:71:b9:17:e5:00:30:88:09:5b:1d:18: e7:c9:04:e5:3b:d6:00:04:0c:4a:11:31:05:21:22: 3d:e0:4d:f2:3b:bb:f9:da:1f:b7:3a:c8:4f:80:e2: a5:47:0e:d7:44:ea:5b:e4:66:b4:a2:37:5f:08:89: 33:84:61:59:d5:17:ab:21:4a:57:21:a1:d8:c3:e6: 40:83:10:a3:31:82:00:30:78:84:b1:38:61:de:fd: 4a:82:d2:92:50:dc:30:77:5d:af:51:64:5b:79:2b: 0c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:F7:36:CD:68:79:A5:92:C4:47:69:97:9E:7A:32:4F:C8:8D:74:D1 X509v3 Authority Key Identifier: keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:3d:10:26:2d:60:3a:b0:f5:f8:f7:3c:e4:fb:ea:65:ed:00: 92:87:85:c5:3e:d0:78:d6:e3:86:a7:a2:d3:93:9b:b5:1f:43: 56:8a:2d:48:6e:a3:fe:a3:20:a5:20:0b:c3:7b:9e:0f:90:cf: 22:9f:aa:da:2f:cb:36:24:4e:40:cc:6a:3c:19:02:e6:7d:9b: 75:69:c0:bb:ce:30:fc:91:fd:48:40:a4:65:94:51:c4:08:00: b9:7b:63:ad:da:a7:33:9f:08:89:13:73:4f:99:49:21:45:ba: b3:db:b1:5a:9e:0b:3b:a8:6a:be:b0:f3:34:25:79:a9:43:8a: fd:b4:99:61:9e:e8:dc:72:b6:51:00:b0:51:94:06:9b:15:4f: 07:2a:32:22:9b:f5:28:13:ca:43:e2:b5:93:4c:b0:d9:5d:82: 6b:d4:89:e5:6c:0f:77:7e:db:2e:4b:c3:5a:ab:47:5c:f7:1a: 7d:40:53:5f:1e:95:6a:85:df:eb:b5:ee:1b:a0:82:9e:a8:ad: 9e:64:3a:75:d1:9d:8d:7b:a4:4e:06:c1:63:9d:85:fe:80:b0: bb:d0:57:e4:df:1a:7f:be:03:4e:d0:e6:0e:ee:9d:64:b4:5d: 96:5d:3d:2c:04:c6:91:4f:70:07:6a:58:6d:e1:35:da:2b:e8: 06:29:c5:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAYcPcfNOiPRJGiuTmhYdFwtDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMDc0MzQ5NmM3ZmYzZWZmYjg3MDYwMTEzOWNhZDlkMmYy NzFlMTAwHhcNMjMwMzIzMTcwODU4WhcNMjMwMzI0MTcwODU4WjAzMTEwLwYDVQQD EyhhNGY3MzZjZDY4NzlhNTkyYzQ0NzY5OTc5ZTdhMzI0ZmM4OGQ3NGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtxUxKakgt0Mt4LZX5mnFB8SdTjP 2jI3lQ5mTCb7D/mlka5iK/0YXI7wYL34t/CbWfg7yEzRVW+7b+DXWLbpei0cBA9E 9CKXdREO6UOUdJJDG1OvQWIppP70ukKzs4u1cFxoCkpcaUiInIge41N9DU9qSq8f E4P6G6Ok5j7N/SYVsU6uhMsqLRproXpcdIFrUvP4xEnE5VlucbkX5QAwiAlbHRjn yQTlO9YABAxKETEFISI94E3yO7v52h+3OshPgOKlRw7XROpb5Ga0ojdfCIkzhGFZ 1RerIUpXIaHYw+ZAgxCjMYIAMHiEsThh3v1KgtKSUNwwd12vUWRbeSsMHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKT3Ns1oeaWSxEdpl556Mk/IjXTRMB8GA1UdIwQY MBaAFJ8HQ0lsf/Pv+4cGAROcrZ0vJx4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2Mt NjM0MTEzNjdkOTBhLzEvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2MtNjM0MTEzNjdkOTBh LzEvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALT0QJi1g OrD1+Pc85PvqZe0AkoeFxT7QeNbjhqei05ObtR9DVootSG6j/qMgpSALw3ueD5DP Ip+q2i/LNiROQMxqPBkC5n2bdWnAu84w/JH9SECkZZRRxAgAuXtjrdqnM58IiRNz T5lJIUW6s9uxWp4LO6hqvrDzNCV5qUOK/bSZYZ7o3HK2UQCwUZQGmxVPByoyIpv1 KBPKQ+K1k0yw2V2Ca9SJ5WwPd37bLkvDWqtHXPcafUBTXx6VaoXf67XuG6CCnqit nmQ6ddGdjXukTgbBY52F/oCwu9BX5N8af74DTtDmDu6dZLRdll09LATGkU9wB2pY beE12ivoBinFcw== -----END CERTIFICATE-----Generated at Thu Mar 23 17:46:57 2023 by rpki-client on console-ams.rpki-client.org