$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft File: 9NCKHhy8kJJU6ea5yTn9haJoseE.mft (raw, json) Hash identifier: IPVwKOrM/1XLT/8J3UJu1JUh5bkfa6jj+FzNRRQc72g= Subject key identifier: 84:8A:73:3D:5A:0A:1C:C9:CC:CE:66:96:3F:C7:D5:4B:51:8C:9C:6C Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Certificate serial: 018F3A408EDAA8364C41C98CAAEC74EA08A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft Manifest number: 0E42 Signing time: Thu 02 May 2024 17:01:00 +0000 Manifest this update: Thu 02 May 2024 17:01:00 +0000 Manifest next update: Fri 03 May 2024 17:01:00 +0000 Files and hashes: 1: 1-HLnow8YPnb7n8q2iYEVeuNCVME.roa (hash: a0B+Ie02ue49b8pFY8vAsXh6IdGKnr2GGKUwRP2XgK0=) 2: 69onZAEwiiF_OhPu7q014cJh1DY.roa (hash: /MH3LcrQblGYm058p1YviX3ZzzvrFVMpFqQOdRekD8Y=) 3: 6TzWnsJp-Qc1yM3COpWH0bBBvGc.roa (hash: pFQ7lHuL0oUe9o+p59D0gUmks0k6NODjDAlTckSZGNI=) 4: 7aHzCYVq1XaxoMD2lkt2U7D0Qds.roa (hash: 5tV5B06PvDwyxxb2UC9TLNS9YcyfIK+t48AMeH+23Xo=) 5: 9NCKHhy8kJJU6ea5yTn9haJoseE.crl (hash: 8bWEn7LCnK7JR9r72ytYfSayRjTFxOP67nCN5aLQKag=) 6: AkFPzXPm7StT5Wvua-moqJZfNOA.roa (hash: QNA+TXq7EjVQN0U+vEdFtoV68DWcn47AdCdGUcogbGg=) 7: VqJkehjnYcv_lokftA4tJKWoiXA.roa (hash: lky9HyKVKEXWWJwR0E6FmyQDeSddeQ9oRq2/85cLKO0=) 8: egrXnCZznlXwJughdiEQDM2cFc0.roa (hash: IIQsIQIMXT60bw7unkgXDKkkFQDCtWRp6RFWlJEgsXI=) 9: nQAJ5_gG2ZnxATScR019iU0nMAg.roa (hash: IU+QRAXwv0LsY36Gk1Kv4OdajUAJlJLnpSE2V1Px7+U=) 10: petAj8PCZfaB-YpzcaE9AYiq5B8.roa (hash: mOALGmbP7UHDk9R1IJQYSUM1QtF3L1UYKctxOF4kKSU=) 11: wgsHRxg0TvaXYLyXJEpgUDoHkK8.roa (hash: zGY8sgGyqNuHM+Y8TKsJqs+yAkfthIWgi6VbMoZwC5c=) 12: wlkr4xZ2U4Hv5fyUslILAPrjwbU.roa (hash: 9KI0k0gAowP2Fbrp2FHXBNEODJTaUpDc8LLg/0BtJcQ=) 13: x4JssPS1Vv0_F4C9HGGD5KkxgOY.roa (hash: a0eU8Gvnf13n93mQil8HRMU+mT/EILLUEul9u9Kc2Mk=) 14: zbmP3kvVa0m65poGL2dw5DpPgcU.roa (hash: GTwY24T5THZrk4g/vPYalzL3LCatHL8UbyBEpGP8P2Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 03 May 2024 17:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:3a:40:8e:da:a8:36:4c:41:c9:8c:aa:ec:74:ea:08:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Validity Not Before: May 2 17:01:00 2024 GMT Not After : May 3 17:01:00 2024 GMT Subject: CN=848a733d5a0a1cc9ccce66963fc7d54b518c9c6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a9:6f:11:9f:e3:e9:15:62:04:99:ea:0e:59: 97:0d:cb:42:6a:8b:8e:0d:b7:f8:d4:e7:dd:5b:20: ab:40:ac:e9:40:5c:f8:77:8a:97:22:ed:d6:61:04: ae:c5:9b:81:de:8e:c1:82:b9:84:1b:6f:c0:92:d7: 76:da:1c:10:7a:1f:76:ea:56:e6:e5:48:05:f2:a4: f8:de:b2:67:e5:b7:d9:f7:89:52:1b:19:04:55:7e: 13:0b:91:34:2d:83:42:f1:87:04:ba:94:4c:da:03: e6:39:79:f9:16:cb:fb:67:e5:ba:be:8b:e6:1f:8a: 3a:b0:be:dd:c0:b0:b6:54:d9:a3:76:56:59:38:3c: 52:03:43:25:52:ee:a1:1c:f4:50:2a:ae:df:00:c8: f6:c4:b7:f4:50:29:bd:67:bd:ff:87:07:67:c5:e8: 8c:f8:31:5c:d6:59:2b:10:36:70:f5:f5:46:4d:7a: 61:bf:ec:9b:91:92:91:59:89:87:b8:ca:2c:20:d2: 97:14:50:1b:9b:88:04:a4:2a:75:80:78:e6:38:ee: 10:f6:cc:76:64:ec:6c:16:b5:96:29:57:61:a3:5e: 3e:a9:7d:74:80:ae:fa:34:24:07:b9:24:53:bb:3a: a7:cf:97:4e:58:bb:98:18:cf:42:ab:32:49:16:b8: c0:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:8A:73:3D:5A:0A:1C:C9:CC:CE:66:96:3F:C7:D5:4B:51:8C:9C:6C X509v3 Authority Key Identifier: keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:d7:f4:9c:0c:39:af:b0:5a:e3:b4:dc:b2:99:be:32:f3:ec: 78:94:10:1d:90:07:3d:21:ca:5e:59:eb:6e:94:af:42:2d:7f: b1:c3:1d:f1:21:8a:6a:a1:51:2f:ba:ce:db:87:3e:18:b7:a8: 4e:01:d5:30:91:7b:2f:1b:26:40:b5:20:b9:4e:8e:6b:41:13: 98:ca:84:f9:14:25:e4:74:fa:10:b5:57:3e:01:f3:9e:80:5b: 37:e1:f1:ed:83:80:5c:32:4a:63:5b:c2:bd:2c:5f:fb:e7:a5: 10:63:e4:53:70:f5:23:5c:50:c0:09:52:7d:32:ae:f5:9c:b0: 51:47:f3:73:16:f6:01:ab:eb:9d:81:6b:56:7e:95:e7:51:68: 65:6c:fb:31:a9:96:a5:b8:57:8e:39:6f:e2:bf:f1:bd:f2:c6: 90:23:d1:0b:fb:8a:9f:45:f9:71:df:41:77:99:97:68:0d:aa: e3:3c:8e:e9:8e:ef:af:1f:19:35:0d:ea:a1:ec:da:b7:ee:86: 53:54:a5:4d:1c:7d:a0:c5:c6:29:5e:51:51:55:68:1d:d5:a2: 39:36:6a:cc:ad:f5:43:4c:67:82:d7:e0:26:77:5e:bf:3d:37: 00:f8:0b:3a:ef:ac:16:bc:48:c5:79:3c:88:c6:aa:44:32:5a: 52:9a:57:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY86QI7aqDZMQcmMqux06gijMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZDA4YTFlMWNiYzkwOTI1NGU5ZTZiOWM5MzlmZDg1YTI2 OGIxZTEwHhcNMjQwNTAyMTcwMTAwWhcNMjQwNTAzMTcwMTAwWjAzMTEwLwYDVQQD Eyg4NDhhNzMzZDVhMGExY2M5Y2NjZTY2OTYzZmM3ZDU0YjUxOGM5YzZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqlvEZ/j6RViBJnqDlmXDctCaouO Dbf41OfdWyCrQKzpQFz4d4qXIu3WYQSuxZuB3o7BgrmEG2/Aktd22hwQeh926lbm 5UgF8qT43rJn5bfZ94lSGxkEVX4TC5E0LYNC8YcEupRM2gPmOXn5Fsv7Z+W6vovm H4o6sL7dwLC2VNmjdlZZODxSA0MlUu6hHPRQKq7fAMj2xLf0UCm9Z73/hwdnxeiM +DFc1lkrEDZw9fVGTXphv+ybkZKRWYmHuMosINKXFFAbm4gEpCp1gHjmOO4Q9sx2 ZOxsFrWWKVdho14+qX10gK76NCQHuSRTuzqnz5dOWLuYGM9CqzJJFrjAAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFISKcz1aChzJzM5mlj/H1UtRjJxsMB8GA1UdIwQY MBaAFPTQih4cvJCSVOnmuck5/YWiaLHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2Ut ZGNlOTQ3ZTI5NGI2LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2UtZGNlOTQ3ZTI5NGI2 LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApNf0nAw5 r7Ba47Tcspm+MvPseJQQHZAHPSHKXlnrbpSvQi1/scMd8SGKaqFRL7rO24c+GLeo TgHVMJF7LxsmQLUguU6Oa0ETmMqE+RQl5HT6ELVXPgHznoBbN+Hx7YOAXDJKY1vC vSxf++elEGPkU3D1I1xQwAlSfTKu9ZywUUfzcxb2AavrnYFrVn6V51FoZWz7MamW pbhXjjlv4r/xvfLGkCPRC/uKn0X5cd9Bd5mXaA2q4zyO6Y7vrx8ZNQ3qoezat+6G U1SlTRx9oMXGKV5RUVVoHdWiOTZqzK31Q0xngtfgJndevz03APgLOu+sFrxIxXk8 iMaqRDJaUppX5g== -----END CERTIFICATE-----Generated at Fri May 3 02:03:24 2024 by rpki-client on console-fra.rpki-client.org