$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft File: w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft (raw, json) Hash identifier: KD/XznE51BScCyFeZVlkAxaHpkcIQKLaoirn52UEh6Q= Subject key identifier: 8C:7A:DA:89:9A:37:2D:9C:95:B5:8B:D0:A9:CF:66:BA:17:46:F8:75 Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8 Certificate serial: 018F87ED2E86E06777354C2EC3D1DE588500 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft Manifest number: 1230 Signing time: Fri 17 May 2024 19:00:19 +0000 Manifest this update: Fri 17 May 2024 19:00:19 +0000 Manifest next update: Sat 18 May 2024 19:00:19 +0000 Files and hashes: 1: 1-6HZ9_UqoNNZFbRX6p6m5oYvnU4.roa (hash: wIYE+ej2RFWhSCAZtcxGa+qziZdl+yMJxQsZYDwy/ow=) 2: 1A_CNDKkOY0RMS1kH2ButpwVX1Y.roa (hash: R9YA5hXZbCePKt+329DkXB2EUstc8APP51/dm/d3nco=) 3: 2a3twREcks1YQDeme3pvy4rRPeA.roa (hash: vudp8XRDwapSTyaa5Ut2zIKo7JvGHO+stXs2iwE1xaM=) 4: 4hDgo6kDNRIyWFeOEB2sjTEQKI8.roa (hash: scNBKD4VEKwDgsFlo1uNv8nJiadRsCrSjG+3XW7K0rs=) 5: 80xPPiCn62YIsvEAwvsRRSKdt80.roa (hash: H5kGV/FcVfW52Zij9PwE70joDby6deJpbZ1Pbq50RqQ=) 6: 8P0sJB8lRwDDKBR6yg-lVw95lYM.roa (hash: oqMtGfHJ+Hob8WigMSwM1LuGI/1wX5r9AUUf3FYgx3I=) 7: AdmM0H_ucz2GFbG4RWUZDqCMNNw.roa (hash: eUM3yGYH590NsHCLDLaIYq5tCXV1150M2ebK5rOWOns=) 8: JjAUcnBMd0ib0UQ5I4oogwQtx7w.roa (hash: lxBEuFWLbQYQ3t9d7v8eMSuKUbxaTSgTOzDALD7e/uA=) 9: Nu1HoUMRCcMn7TPU9UUoyKKHpJ4.roa (hash: C41toSzu+9CQ768DMLOqSDzuq2ocjEwFmRhoW1ax+ec=) 10: QTMKhuAfe1j8TX5-DihF-bSjerI.roa (hash: BAuenAMjemAsjUG1mHG5DwAuwsCfPbe9HSI3km7+vVE=) 11: VRXiXiYtAPE0zGRFo8nt9pMbA0w.roa (hash: D3D4yid0farfknwb9h4wVXewK+JNERr+VZpcRUYNJ1w=) 12: X-W8Mcz2rItIgyfKQVbVLvp3zm4.roa (hash: 5Lfv4S3GofhPRjaLiljoPC2i2l1IvIzdCWBu8gOy6U0=) 13: XZDez72x6s9qDh-nDhsoedpfEG0.roa (hash: R7qEfKPnnyJDNifiCBRrSy+smcco9Ct5qQbtrn9tx1o=) 14: YA2hGrZNONCOfiA-puiIkfmOTqg.roa (hash: 2y+I3MkQ5xggfvOHyZz+G32aatNWskcbPYUibK/oOxQ=) 15: brfYNJdE16_z-8RDT0Rf6-5B47E.roa (hash: dEq3OUSYoJBCB4Ps0z3wHFEyt77hK9XtjM6xchrBhiQ=) 16: dXvmc-teTc7YeVDb0PvGdCsv_SE.roa (hash: g/GVQMiBz43mjbKTfgg58lVzeDj37tFO8ysXygayUNE=) 17: dp8QQ9wpWN8xWxWpQJyZnIEppR4.roa (hash: Oy/u4Yf50cPtfFhyR1T/+FEJXbJeUFeIBMz7un2NP5M=) 18: eL6ZTat30v8Vz-Bzn_liddilaag.roa (hash: 7sMYL1bJG7KszEcclyMY4BeV0TlFvDbCiTw+gdq58p8=) 19: j4jXtYC4tD9Ko15sjrzLzdk4mEI.roa (hash: CmDV7ALNGavbSgunYLlU14YNxttrZ9vfzbbaf1PmhqQ=) 20: ns-MPMktXv7HCweaWkQcw-f7pNk.roa (hash: ZZP8A4kBMkD7tvsaATF77wEKZyNQHtzyAX2MDz/r/vk=) 21: pymiyXLERZ3rhE_K8lt829hpdwA.roa (hash: r7583XuVcGpH+1Gy1ZUKq1txm317tJ1Ks5KrRC74ALY=) 22: q-wZr0dH6FKOwwQIDYtIS-oqvHg.roa (hash: ZjFbfR2g9U6Skzi5fZ101rBn94vDJWdwUKSufJcNG1A=) 23: s8l-xCVqBQ55i2YlDfcji4PeYnU.roa (hash: TGNAsu4QO936uPgka5FNivJqKGiyAsK3lx4vCqnY99c=) 24: tvsibIsFIr3uRyURAQgbSEtProQ.roa (hash: lrFF0t/O0T3rq/cTpkoDGNUqcf2E6Onqf+XEJZ3p3ds=) 25: w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl (hash: TxC2GxsT1YuCZTkaF2Fm4sUfD2GgnSTOpzI/6DHgAFU=) 26: wrn2RehNrkqV_6maxDvT4oitxrg.roa (hash: FcciB3hwnEV5sgk86xY1cSknroBRuhpKf1kUmtTWnBo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 May 2024 17:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:87:ed:2e:86:e0:67:77:35:4c:2e:c3:d1:de:58:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8 Validity Not Before: May 17 19:00:19 2024 GMT Not After : May 18 19:00:19 2024 GMT Subject: CN=8c7ada899a372d9c95b58bd0a9cf66ba1746f875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:dd:fa:df:30:22:d7:8e:3a:09:36:6f:48:51: 9d:a1:7b:92:86:5d:71:1d:c5:e6:8f:aa:94:f2:ed: e5:37:2c:8b:ad:ea:45:8d:19:e5:59:e5:e4:55:a0: ca:d2:9d:a5:ec:0f:47:fc:03:78:ec:3f:5e:a4:33: ea:01:76:f3:4c:4e:11:64:1a:46:61:4c:ea:90:87: 75:e6:b3:09:ce:b2:69:64:cb:03:89:aa:df:cf:48: 92:45:97:1c:bb:df:5a:41:35:dc:22:f7:c9:ac:27: fe:1a:f1:ed:9a:08:33:f4:2d:85:dd:49:49:c4:1b: 4d:13:34:8c:dc:ff:f2:54:a1:7e:03:dd:c1:dd:e2: df:e6:1f:65:50:a0:dd:b7:4d:1a:15:61:35:f2:54: e8:fa:a4:00:d9:8c:b5:a1:97:92:d9:8d:a8:b4:a0: 89:a3:f0:03:93:e6:aa:9e:22:b3:cf:6a:9f:b6:85: fb:72:e9:39:56:a5:3c:d0:f2:f8:73:77:e6:93:19: 7a:b9:11:16:d5:94:1d:34:46:80:20:78:9e:0a:37: 0a:ac:18:2b:1f:a8:11:f9:5b:89:51:f4:a6:fc:9c: 2c:4a:33:f6:9d:cb:7a:2a:ef:02:cb:9b:12:64:06: 27:c1:ef:aa:09:5e:1f:9d:86:09:f6:51:0c:fe:ff: 8b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:7A:DA:89:9A:37:2D:9C:95:B5:8B:D0:A9:CF:66:BA:17:46:F8:75 X509v3 Authority Key Identifier: keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:8d:58:70:4a:f4:ce:62:49:24:4e:4e:ba:bc:a7:82:f1:49: 6c:f1:0e:77:3a:74:e1:dd:61:d4:f0:66:3a:00:02:b6:66:b6: 04:80:71:60:d1:00:30:de:35:4c:d5:20:ca:6a:6c:3e:3c:ec: 14:c8:7f:ff:ff:9e:c1:94:14:e7:d9:65:74:c5:bb:11:07:0e: a8:f9:f5:6c:70:69:04:ac:c1:0e:cf:a2:6f:ac:69:01:99:11: dd:2e:ac:3e:96:db:e3:fa:3e:87:58:d9:8a:61:35:db:ca:4d: 07:ea:fb:dd:9a:66:fd:69:91:85:9e:20:7c:47:28:02:78:2b: f8:ca:4f:d0:54:f6:db:29:3f:35:60:5a:15:5d:ea:7d:a7:18: 2d:c0:b8:6f:b7:02:f5:66:25:4f:7c:a8:33:bb:f1:df:e2:2e: b8:6a:ac:0d:74:d6:ad:7b:82:b1:b9:0e:17:15:0b:96:c7:2f: 19:db:a3:d1:13:98:ef:17:45:d6:a1:49:0d:c8:19:7c:c5:82: 69:17:a5:ad:46:ca:c2:50:ef:88:d5:29:2c:3b:03:d9:e6:4f: 21:78:40:77:8d:85:23:6f:cd:b7:0a:b8:97:95:38:d2:a4:63: 55:39:ae:20:c3:2c:1c:bf:2b:f7:45:78:58:09:12:95:f8:34: 93:a2:fc:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY+H7S6G4Gd3NUwuw9HeWIUAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl OGRhZjgwHhcNMjQwNTE3MTkwMDE5WhcNMjQwNTE4MTkwMDE5WjAzMTEwLwYDVQQD Eyg4YzdhZGE4OTlhMzcyZDljOTViNThiZDBhOWNmNjZiYTE3NDZmODc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnN363zAi1446CTZvSFGdoXuShl1x HcXmj6qU8u3lNyyLrepFjRnlWeXkVaDK0p2l7A9H/AN47D9epDPqAXbzTE4RZBpG YUzqkId15rMJzrJpZMsDiarfz0iSRZccu99aQTXcIvfJrCf+GvHtmggz9C2F3UlJ xBtNEzSM3P/yVKF+A93B3eLf5h9lUKDdt00aFWE18lTo+qQA2Yy1oZeS2Y2otKCJ o/ADk+aqniKzz2qftoX7cuk5VqU80PL4c3fmkxl6uREW1ZQdNEaAIHieCjcKrBgr H6gR+VuJUfSm/JwsSjP2nct6Ku8Cy5sSZAYnwe+qCV4fnYYJ9lEM/v+LlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIx62omaNy2clbWL0KnPZroXRvh1MB8GA1UdIwQY MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt MGNiYTMzZWZjNWJiLzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnI1YcEr0 zmJJJE5OuryngvFJbPEOdzp04d1h1PBmOgACtma2BIBxYNEAMN41TNUgympsPjzs FMh///+ewZQU59lldMW7EQcOqPn1bHBpBKzBDs+ib6xpAZkR3S6sPpbb4/o+h1jZ imE128pNB+r73Zpm/WmRhZ4gfEcoAngr+MpP0FT22yk/NWBaFV3qfacYLcC4b7cC 9WYlT3yoM7vx3+IuuGqsDXTWrXuCsbkOFxULlscvGduj0ROY7xdF1qFJDcgZfMWC aRelrUbKwlDviNUpLDsD2eZPIXhAd42FI2/Ntwq4l5U40qRjVTmuIMMsHL8r90V4 WAkSlfg0k6L8ng== -----END CERTIFICATE-----Generated at Fri May 17 23:43:55 2024 by rpki-client on console-ams.rpki-client.org