$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft File: 2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft (raw, json) Hash identifier: 37278/T+QXRw0/13R5KvQjkFVfUMxBDRCCqBqMPQPOI= Subject key identifier: 5D:E3:9B:AB:FC:3E:9A:30:4B:5A:6C:07:3B:41:58:77:AF:7D:A0:30 Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda Certificate serial: 018F6C407A2E804CEBD15A6433360D5B776A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft Manifest number: 0B6A Signing time: Sun 12 May 2024 10:01:55 +0000 Manifest this update: Sun 12 May 2024 10:01:55 +0000 Manifest next update: Mon 13 May 2024 10:01:55 +0000 Files and hashes: 1: 1-GxUqbxJa-z0EoNl4SUDUHAH5lk.roa (hash: sUym7PdUFQ+5SLh2CWzvhf4k7lucxzrVliTrUKr7fmU=) 2: 2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl (hash: 89GFqIjqj5hR3T5oo07R6/TFlxgknjzNmN9kS+nPT0E=) 3: BIfvHViqk5dU4XhdabHUKjLVbgc.roa (hash: ijoTbhbdDsNUuBacP84Udl/uDzBVMRmkKdwE6fAVec4=) 4: B_wBHSGPLoLfGktqGd_F_Z3HFYw.roa (hash: wATW6+f2BkusDAjigq8mB5qIZbzV90ZbpQxRlXA4G80=) 5: CsusnRnaw2LCtfoNmPUd1GKf7o8.roa (hash: i/eOjTcyd4KBBKwZVy8WRK0LfrKGbguFVP8NWLMlyJM=) 6: DUPFl5KOVoZ0Px1YTZjQhU3GS74.roa (hash: RdQAIUqTLZ56Z5/n3970qBezVFVmizondDtwNW6hgk0=) 7: KMDP10NxaT8o4lwcHnOHGen99vs.roa (hash: v3FvtwwIb1ZedqTC/nSXTymHOOf6l/r5ulGnI0RTWGE=) 8: KORxHWyQyPXJ2bzo8VZwhcrvq2I.roa (hash: 6QJVb6bycyUSibnB6y/9KE0u2mYGn8CS3q3rqMAIx/Y=) 9: LmShfnxJ3bFq-MOmey1Ri_DnuwI.roa (hash: PF3VuibycRIof6e2VR5nchHPh4s533jKGzhaJodZBYs=) 10: UX6UYtLtvP2a_x1SpMsTQiMIMIA.roa (hash: roEyQSyxDzr8797U3LPruiJxwCgY2dSV5wEWl/w1Njs=) 11: Xwy_yscJpEkFgTMOYEjNNfgBEsI.roa (hash: R9KueGsn1sIHIZgri6R9+yLygjYbotauj05eItndx3w=) 12: bTzZB5eJSEVND5o7cQHPU_gGats.roa (hash: k+V/QQHCTOpI+9n0bWspdVYQoayz60wp4d2SYRTLJqA=) 13: iOt6BQwqK2i69Atf249nd-HnNl0.roa (hash: Ah+0Ex+CooAP3F7OwR/0IilcZWjq/FmFha9C5zJyoiA=) 14: kwNGqJi16v15vEKhIVHS7T4BnSM.roa (hash: YuhN7wMChIhyi5JTmg/oRvYZa9RVGWcxEO6WM7P9mO4=) 15: ms1ekaWq311G3eHPqwSiswMc-WM.roa (hash: sstgo0zaP48B4EL93VWGQeEvWI0ca7JYtwRxFRs0nY8=) 16: t7Q9dh5QzcR71wi6jcb-CqF0ap8.roa (hash: pbtX+KFXwwmGzV1Nb7OCYe4DtNI6RDSYwdNIchNjruQ=) 17: xf-gLOtusEqH_qqJjMFFLL-oyC4.roa (hash: LI4Ov2vNuVtCOHJpAWhJdxgp6Z6raWfW7tf6j03KSWY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 13 May 2024 10:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:6c:40:7a:2e:80:4c:eb:d1:5a:64:33:36:0d:5b:77:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda Validity Not Before: May 12 10:01:55 2024 GMT Not After : May 13 10:01:55 2024 GMT Subject: CN=5de39babfc3e9a304b5a6c073b415877af7da030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:05:bd:b0:44:68:47:ee:61:bb:4b:1c:eb:49: b1:50:66:8e:7c:22:c4:f3:49:be:4e:43:32:40:c2: 2a:dd:91:e1:95:6c:89:35:d6:97:b4:39:2e:62:2d: c0:55:a0:53:0c:47:5b:5f:8a:94:fc:4e:01:5e:90: 90:6b:84:55:3d:8e:e2:e5:7b:13:ae:c0:ab:bb:7c: a9:c7:d8:d6:1e:78:70:e6:95:1a:4b:49:51:87:d6: 6c:72:26:2b:56:8a:98:2d:5e:5f:3c:d7:7b:dc:7c: b1:41:b2:12:4a:89:a0:bb:b0:12:02:f3:ed:be:82: 5f:74:5b:d1:76:e1:44:06:92:34:6b:69:d7:33:68: 03:d2:9c:fb:99:8d:5b:7c:f5:f7:07:82:03:7e:29: 60:e6:61:ab:36:ec:2f:ac:15:be:39:19:6e:02:31: 48:cb:81:d8:84:e0:10:2d:e7:b6:84:7b:02:00:ac: 7e:c4:7f:8c:b2:17:15:e2:fb:a0:52:b2:b0:12:e3: 72:d4:a9:8b:ff:68:12:74:ac:a0:f5:5c:00:9e:ea: 8b:3a:7b:7e:05:a1:b0:42:83:de:2c:77:78:8d:5a: bb:c6:6d:83:55:d9:f1:b6:a5:dd:9f:14:ed:fe:ad: ac:19:b5:e4:83:22:86:d9:17:c1:97:ca:1b:0d:8f: 0d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:E3:9B:AB:FC:3E:9A:30:4B:5A:6C:07:3B:41:58:77:AF:7D:A0:30 X509v3 Authority Key Identifier: keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:77:89:3c:ce:62:21:16:a7:97:ae:55:61:e3:f0:bf:24:64: 7d:44:e7:5e:70:c5:51:48:a7:ed:56:e4:b6:f9:04:18:b1:9c: 2f:f2:b8:5e:de:ff:43:99:56:98:5f:41:ae:ac:eb:ce:b1:32: 8e:2a:9d:c1:b5:8a:ce:29:2e:a0:0e:05:06:5b:45:f1:18:89: 90:1e:73:5f:47:03:57:a0:8a:cb:16:ea:6e:07:30:6e:11:f4: 9e:bc:9b:d8:4b:4d:96:c0:a4:16:7c:41:77:f8:f9:36:b2:de: 5f:7f:eb:e1:85:c9:72:0a:d7:e7:7b:ac:90:d0:29:65:dd:87: 55:e2:e9:af:4b:5b:73:3b:c0:e0:82:ac:f8:71:95:67:f5:4c: b7:88:1f:79:fc:2a:1b:58:c2:58:44:4e:04:c3:1b:1c:21:13: 56:cc:95:c5:b5:77:ca:5d:00:20:85:83:6c:75:f4:19:b2:fa: ec:76:c0:5b:5d:0a:15:ce:37:96:10:c3:d2:fe:88:b1:86:23: 9c:13:05:d0:98:82:ce:b5:f0:18:08:8d:fb:88:73:36:d3:20: b1:41:ce:29:66:22:7c:09:b0:69:82:1a:a9:ff:e9:d0:0d:6f: 12:17:27:e2:bf:06:06:cd:f6:d0:0b:92:4d:17:8a:2f:24:14: 74:b0:ed:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY9sQHougEzr0VpkMzYNW3dqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4YzYwYTBkMmQ3MGE5MzM3ZDBiZGE1NmQxYWQ1OTZhYzFm NjljZGEwHhcNMjQwNTEyMTAwMTU1WhcNMjQwNTEzMTAwMTU1WjAzMTEwLwYDVQQD Eyg1ZGUzOWJhYmZjM2U5YTMwNGI1YTZjMDczYjQxNTg3N2FmN2RhMDMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgW9sERoR+5hu0sc60mxUGaOfCLE 80m+TkMyQMIq3ZHhlWyJNdaXtDkuYi3AVaBTDEdbX4qU/E4BXpCQa4RVPY7i5XsT rsCru3ypx9jWHnhw5pUaS0lRh9ZsciYrVoqYLV5fPNd73HyxQbISSomgu7ASAvPt voJfdFvRduFEBpI0a2nXM2gD0pz7mY1bfPX3B4IDfilg5mGrNuwvrBW+ORluAjFI y4HYhOAQLee2hHsCAKx+xH+MshcV4vugUrKwEuNy1KmL/2gSdKyg9VwAnuqLOnt+ BaGwQoPeLHd4jVq7xm2DVdnxtqXdnxTt/q2sGbXkgyKG2RfBl8obDY8NpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF3jm6v8PpowS1psBztBWHevfaAwMB8GA1UdIwQY MBaAFNjGCg0tcKkzfQvaVtGtWWrB9pzaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUt ZGQyOTRjMzc4ZjZjLzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUtZGQyOTRjMzc4ZjZj LzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk3eJPM5i IRanl65VYePwvyRkfUTnXnDFUUin7VbktvkEGLGcL/K4Xt7/Q5lWmF9BrqzrzrEy jiqdwbWKzikuoA4FBltF8RiJkB5zX0cDV6CKyxbqbgcwbhH0nryb2EtNlsCkFnxB d/j5NrLeX3/r4YXJcgrX53uskNApZd2HVeLpr0tbczvA4IKs+HGVZ/VMt4gfefwq G1jCWEROBMMbHCETVsyVxbV3yl0AIIWDbHX0GbL67HbAW10KFc43lhDD0v6IsYYj nBMF0JiCzrXwGAiN+4hzNtMgsUHOKWYifAmwaYIaqf/p0A1vEhcn4r8GBs320AuS TReKLyQUdLDtZQ== -----END CERTIFICATE-----Generated at Sun May 12 15:17:08 2024 by rpki-client on console-fra.rpki-client.org