$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft File: xoxl5pm1dqsROnm-iCiUjx5swmA.mft (raw, json) Hash identifier: IZnzRyOYr+NwP9Sr8uemoxt+CDMpo2HXL12DrxsXeWs= Subject key identifier: 4B:B7:90:C9:33:B9:4B:79:95:3D:7C:AA:A9:21:E9:00:EF:C7:59:36 Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260 Certificate serial: 018F6185BB9E87FC03FB8ACB497247FC918F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft Manifest number: 1178 Signing time: Fri 10 May 2024 08:01:45 +0000 Manifest this update: Fri 10 May 2024 08:01:45 +0000 Manifest next update: Sat 11 May 2024 08:01:45 +0000 Files and hashes: 1: 1-YzGQDUvxh7320fZfsAaAfcPPFs.roa (hash: xJ3gK80IhO9C5l99Hz0opPfO7WR2SYxli/CL2umsAoU=) 2: 34eQ23MiCAS8KsXt30F4JzbKeBE.roa (hash: yKlnVtVREToSEv2vMoiK5D+Hw2/KViguqFyI6WUqzmc=) 3: 5QJ-JhweHEyc80E2iAEPQ5kQaPU.roa (hash: 5FyeDcmtJvPLYhzFStuUEcfCDIDKRlGrMN5mfn3Io5U=) 4: AzOc36HJ8MEB0iT3X-M5lG4o6TQ.roa (hash: xLke7gfQB182MSaM5qheQBtQH+6Di7aYb4SB9oKSHCk=) 5: FbtPaArs0J0OLUIWNbmV7VO1oTk.roa (hash: QkLktLRrv5unrfxbgv3RvfpzPLmg88aJt3lqlEYia5Q=) 6: IZVtY6tB0e7V1-ELC4rvwjAUgCc.roa (hash: HxmDxlGCmZprkf9K8Q2xGHCS1GJfOjeJyNTf2yxzx4Q=) 7: KUVb5-zjUHjPWn3HRsPGQdMgDxk.roa (hash: Rh04AgUGocyPUJDMakPxumny7WtHvDMR8278H5vYKWE=) 8: RShgZMaKc2yIEYvPrUWHigreccE.roa (hash: 7CfV4hVaSXZmpD3K+sb/XopeHwRcG2l9Z/Rv2+hddRE=) 9: iXfRtmudxAE1lJnnD7CamGaHwOQ.roa (hash: bs+Zo96eDGbGYk6314dX8Lc92xqIBTCAonrq4A7DJ8U=) 10: wc712w8oGSp9it2ejzQ6Ex7dXqk.roa (hash: +9LJFrVOw15QOfsJ/2cOJpGzFO3e/x6rxBPd1HVFwbU=) 11: xoxl5pm1dqsROnm-iCiUjx5swmA.crl (hash: cU42FarB5Mg1+GhnGAzxxgOG32SKs1vFhMmDGRIMX4g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 May 2024 05:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:61:85:bb:9e:87:fc:03:fb:8a:cb:49:72:47:fc:91:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260 Validity Not Before: May 10 08:01:45 2024 GMT Not After : May 11 08:01:45 2024 GMT Subject: CN=4bb790c933b94b79953d7caaa921e900efc75936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:94:a5:61:58:5b:23:71:cd:03:9c:0e:9c:61: 15:a5:19:ad:ec:eb:c7:a4:10:8b:4d:97:dc:8b:33: 21:51:02:13:34:54:b1:6e:fe:0e:f1:60:a8:04:a1: 9e:a5:3d:49:01:da:f9:f4:2d:6f:a5:cc:1b:a0:a3: 5e:98:10:a7:30:f3:a0:74:20:9d:80:ea:ca:89:45: 53:10:d9:f7:0b:26:81:9f:98:b1:72:51:c3:d3:35: 67:6b:32:06:78:78:5c:90:fb:f7:9a:a9:dd:f2:f3: e7:20:00:7c:59:75:a1:c0:c3:b5:ad:0e:4a:10:de: 0e:ba:76:ff:76:ad:4a:11:d0:d9:6b:18:43:7b:9c: 77:82:3e:0f:ac:95:77:2d:44:5f:d3:81:f7:0f:78: fa:27:62:7b:a3:e3:71:18:1b:5c:6f:ab:c8:6d:15: e7:5f:ea:16:bb:c3:e8:ef:43:26:21:2b:54:75:d0: 81:6c:46:2d:50:71:ae:48:60:67:d3:15:fe:dd:89: 09:38:7e:50:f9:bb:1c:b4:2c:f2:44:ae:d1:18:cf: db:23:35:22:7a:bd:77:8f:11:f2:20:2b:0d:82:80: 53:3a:4e:b6:d4:83:d5:ed:45:b1:4a:4a:c5:b0:5d: f9:ce:c1:52:ce:98:02:bf:3f:8c:0c:fb:35:80:66: 80:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:B7:90:C9:33:B9:4B:79:95:3D:7C:AA:A9:21:E9:00:EF:C7:59:36 X509v3 Authority Key Identifier: keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:40:d1:fb:06:4b:29:c0:20:7a:21:5c:5e:8b:9f:aa:e6:0e: 82:43:15:91:ff:92:e2:83:bf:1d:77:bd:b4:20:b4:c8:41:15: aa:b1:53:09:85:bd:0a:fc:61:4e:8f:28:48:f7:c2:96:ea:fe: 37:1b:44:27:cb:e0:48:5a:88:b1:9a:10:cb:20:12:09:43:07: 26:c3:6d:1a:b5:a6:01:23:b3:2e:a6:4b:c3:4c:d5:55:91:1a: 17:58:f1:70:8f:87:68:09:ec:8a:14:15:bf:d3:2d:55:06:3d: 1e:c8:77:8a:e7:4b:3e:d4:b8:f2:42:3b:9a:bc:59:84:71:7a: d8:36:23:b1:cf:0b:73:64:ed:72:83:76:be:50:2a:3d:65:2d: 31:77:b4:37:62:ce:1d:59:d1:ae:f0:38:f1:23:4a:c2:71:db: 3e:0f:a7:94:d3:db:ff:08:6a:89:07:2d:63:08:82:f8:cb:12: 8a:55:97:4e:58:7a:09:4d:28:2e:18:ca:3c:30:26:2d:10:4a: ec:8b:69:8f:3a:5d:41:33:01:e7:95:ec:91:8f:50:36:5f:e3: 36:99:dc:f4:35:a7:87:16:ec:8d:0a:dd:53:66:63:ad:f1:e8: 7b:3f:ad:c2:9d:8a:bc:8e:e2:3c:1a:b2:99:66:1b:c9:b2:31: 9a:15:d1:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY9hhbueh/wD+4rLSXJH/JGPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2OGM2NWU2OTliNTc2YWIxMTNhNzliZTg4Mjg5NDhmMWU2 Y2MyNjAwHhcNMjQwNTEwMDgwMTQ1WhcNMjQwNTExMDgwMTQ1WjAzMTEwLwYDVQQD Eyg0YmI3OTBjOTMzYjk0Yjc5OTUzZDdjYWFhOTIxZTkwMGVmYzc1OTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJSlYVhbI3HNA5wOnGEVpRmt7OvH pBCLTZfcizMhUQITNFSxbv4O8WCoBKGepT1JAdr59C1vpcwboKNemBCnMPOgdCCd gOrKiUVTENn3CyaBn5ixclHD0zVnazIGeHhckPv3mqnd8vPnIAB8WXWhwMO1rQ5K EN4Ounb/dq1KEdDZaxhDe5x3gj4PrJV3LURf04H3D3j6J2J7o+NxGBtcb6vIbRXn X+oWu8Po70MmIStUddCBbEYtUHGuSGBn0xX+3YkJOH5Q+bsctCzyRK7RGM/bIzUi er13jxHyICsNgoBTOk621IPV7UWxSkrFsF35zsFSzpgCvz+MDPs1gGaAvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEu3kMkzuUt5lT18qqkh6QDvx1k2MB8GA1UdIwQY MBaAFMaMZeaZtXarETp5vogolI8ebMJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYt NjA3ZDRmMzdmNTlmLzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYtNjA3ZDRmMzdmNTlm LzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtUDR+wZL KcAgeiFcXoufquYOgkMVkf+S4oO/HXe9tCC0yEEVqrFTCYW9CvxhTo8oSPfClur+ NxtEJ8vgSFqIsZoQyyASCUMHJsNtGrWmASOzLqZLw0zVVZEaF1jxcI+HaAnsihQV v9MtVQY9Hsh3iudLPtS48kI7mrxZhHF62DYjsc8Lc2TtcoN2vlAqPWUtMXe0N2LO HVnRrvA48SNKwnHbPg+nlNPb/whqiQctYwiC+MsSilWXTlh6CU0oLhjKPDAmLRBK 7ItpjzpdQTMB55XskY9QNl/jNpnc9DWnhxbsjQrdU2ZjrfHoez+twp2KvI7iPBqy mWYbybIxmhXR1w== -----END CERTIFICATE-----Generated at Fri May 10 11:56:15 2024 by rpki-client on console-ams.rpki-client.org