$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft File: v4QRNUXZAAdg9mBipCIZM6LpWdg.mft (raw, json) Hash identifier: vnzsWLOtSyNX+VwDaEaq4PJ9EqBD+Tk5++GHpn9lJ94= Subject key identifier: DC:B0:5D:23:E9:16:87:D7:BE:3E:AD:EA:EB:0B:97:0E:A4:43:39:03 Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8 Certificate serial: 018E885E7FB46941524477FBEF8D6B6BEFE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft Manifest number: 0D79 Signing time: Fri 29 Mar 2024 04:01:18 +0000 Manifest this update: Fri 29 Mar 2024 04:01:18 +0000 Manifest next update: Sat 30 Mar 2024 04:01:18 +0000 Files and hashes: 1: 6SvSTnNtVXqxwqH9Q-9WElcQXBM.roa (hash: IoH4N328Wt5CtmFC75f7PtO5zzPYyXdV/4yOy7p1BUM=) 2: 8oJG0SSq45n5dpkqTrbw7KNQhkE.roa (hash: wTHqyO8pOFrqX44+RpuUJXtGUNALLqYNsggzWCAVjhI=) 3: BWa41T1lqcy7cxRxyAxlMziFIQ0.roa (hash: azftsiZpu2Mvo1P8HxqYLA821FmAwo97GFXu5NX6Kak=) 4: D2c11eUFvnmdHe9Ou-jMF6wOZ6o.roa (hash: fM/jOXHWa0QnKQb+M+HqWEIbEBhXLdQSXhPJl9g9198=) 5: Dvs6PgRUOFtroIS1eZ8YjEOibd8.roa (hash: LHdCFAVe3kLC+a4WHiYkzrqm7/Qm6Ys5ZERdXVUBuxo=) 6: FssnxmWsoG9ql15ZwNGgk4nzZeE.roa (hash: RAyKk5OxdOmwYmemYVO5ZA7Mdjuvl2QyBJnE5a9CADk=) 7: JE0bPkwJ5vJ3ValcPLW4mI9sBDM.roa (hash: CodA+5TOpf1VlrrLMr8hHzq6KloRAiNwsT+mQ10Liw4=) 8: Lz_3txo62oEOC11Rh4vR0a3aQWQ.roa (hash: V1l/jO67isyjdEvuiUE9Hva4iLIO8hjYi6Kz+YFaE+A=) 9: Os5W01NBOZpXdNt7oCVCfUKFDno.roa (hash: ZKFXB3/Q2H/ISS1J0/LhTgYrpj4LjVAR8pAAdpP7MHw=) 10: PUuFE1rC8BfLjq3Js3zFgFUZpAI.roa (hash: viWhLObqvAvlBYUGfTcG9ZaxwfuA+gsRisb6+4IBKn4=) 11: R5OlN6sHOBiKPHTFYNER9UkfAzA.roa (hash: jUQPWCC4F2BU02s4ADBrj30iZ3zEh8NRrIsDTEWu4eM=) 12: SimeibHjeF3UW4gHBFLSr6G29cw.roa (hash: JSZhO21UIzWJy+D8wTshkBEHsRJ9CzsCE4zEasxUagQ=) 13: Ty2cxn2AaE_sooIu1RihlJYmQfc.roa (hash: 7QVGPLTV7OceeqBJFDC8ph5tP/HK1t2piz8mOW8/SPY=) 14: ZkSYiGdeDBg3ZpYueCLNQO8m9lc.roa (hash: P9qQE2mWmr2tCIvORTB5OhEsHTk4zoE/kGGBnFQDFHk=) 15: bGl_gyUdYgbAehDA5bwR3-IQ_-0.roa (hash: fkCx75ReE6XX+mPRssHRUqg/jo+Fe+kiIwsPWn9+IoE=) 16: hcRwKbU8dfPgthvqohIcqEIgg3s.roa (hash: 2GiEgmM4INtgNVntSq3oexPgkveZU/eI5oiyh7vf/jQ=) 17: hy4z2Uos8XuJxYGMigaW2Yb30MI.roa (hash: Hrg1ofojYBRoM76pKd5RKTX2fsvvQPI/ZaDfrOa1ojE=) 18: lIccS9k73j0f0Le_eHcLCzO0wek.roa (hash: Xlkmn0iuFMASSScE/1zdXXgpClQ2UQSNPZ20hxOX3Fs=) 19: oCy3W4-zG_ZoCfrebaDIXEGLsvQ.roa (hash: diT4gC1XP/YkJkVByNKqWo+9ZIFkewSmzKfrsR2DEWQ=) 20: osAskbvjAc3q7pIFIuTMN5t1kgE.roa (hash: TofNtkYjwKc281rCTm348ME5GCfGL8fX9+fQ1y7cIvQ=) 21: ub-EImg7sZxEH_F7QHqbWGO6CUY.roa (hash: lJ+1drlb14VNBDHNtv9sTy7b/P/VIX5UpmkbW/P26H8=) 22: v4QRNUXZAAdg9mBipCIZM6LpWdg.crl (hash: nPSOjpOT/VnIUbdWWE5doTLTzpiZFPSJHF4c8odRUgE=) 23: w21Q9_ZXM-H6VGNSoQCtMro9Pg8.roa (hash: xYXhsNq3riprb5mbg1v1yBZMTZTnZ5UhU58ySv4QWYM=) 24: zpf__rS82IMXee9KofOf228bbSo.roa (hash: 2Ls5HAGz5B2I2C/n6Jr0Ut/cTpBuICjp2BTOkQy5Pcc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 30 Mar 2024 04:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8e:88:5e:7f:b4:69:41:52:44:77:fb:ef:8d:6b:6b:ef:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8 Validity Not Before: Mar 29 04:01:18 2024 GMT Not After : Mar 30 04:01:18 2024 GMT Subject: CN=dcb05d23e91687d7be3eadeaeb0b970ea4433903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:18:1e:fc:96:59:14:e8:9b:71:c8:22:eb:f4: b3:0b:b5:f4:a4:a5:5d:41:8b:10:a8:0b:57:53:4e: 30:3a:e5:af:8b:bd:c3:28:99:2e:53:da:2d:e3:b5: d8:7d:c5:e4:60:ab:d1:c3:af:b9:aa:28:92:49:6c: 25:4d:aa:67:65:12:81:35:ca:26:ca:ef:d0:91:f6: 1d:11:39:c5:51:93:b1:e2:e1:3f:10:29:fc:09:ec: a3:a8:c8:81:34:97:14:36:3e:3a:1c:68:6d:b1:75: 16:82:1f:74:91:ec:3c:d1:22:4e:9f:42:1b:97:bc: 19:d8:7b:47:4a:29:e8:ef:43:8e:16:2b:19:9d:22: 95:94:6d:42:2f:cc:b8:c8:60:9c:be:a8:dc:1d:d6: b4:df:f8:a9:e5:e9:92:af:6b:5a:78:3c:8f:b7:72: 23:9b:49:dc:0e:7b:07:99:79:05:9e:75:ee:49:b7: a7:5f:ff:af:77:9d:c4:3e:14:3b:8b:e9:93:c5:fa: 55:fa:d4:a4:91:2c:46:83:4c:b5:8a:be:b7:be:18: 15:1f:47:18:71:22:56:83:48:4d:ea:5d:88:08:c3: b3:a5:98:c8:8d:51:e0:cb:92:43:68:da:ad:89:fb: 42:0c:98:f9:47:36:82:ab:1e:5b:d2:8c:4b:3b:cf: 50:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:B0:5D:23:E9:16:87:D7:BE:3E:AD:EA:EB:0B:97:0E:A4:43:39:03 X509v3 Authority Key Identifier: keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:5c:c7:b9:8b:2d:c1:29:a3:fa:bf:64:1f:54:e4:9f:be:3f: 52:18:29:58:39:86:3d:33:3f:1b:0f:14:35:31:69:3d:4a:3b: b4:ab:ff:32:7e:32:b8:85:75:bc:22:ac:d6:5e:7d:92:92:55: eb:05:70:9c:42:b8:a8:72:d0:20:e7:f1:de:92:be:f7:39:31: 13:d6:37:51:f2:99:60:3b:ec:18:a0:47:a3:cb:7c:e5:9c:82: 98:e6:b6:5b:ea:05:98:42:79:9f:9a:7e:72:0e:69:3e:37:e1: 9b:2a:88:45:e4:12:52:bb:f8:a1:df:3d:75:28:e7:da:16:ac: 58:6a:a3:c7:4e:6f:0c:c4:86:82:ef:38:cb:3f:3f:64:7e:34: ea:d0:57:ba:c1:21:f5:24:70:7d:29:47:b0:a0:f9:e3:94:72: 0f:72:73:63:69:ba:4f:c9:50:f2:96:bc:8c:2d:62:dd:7d:c4: 92:bc:2b:13:e1:0c:10:7d:38:55:35:fa:d7:1c:e1:38:ad:2a: ba:d4:74:9b:4b:03:44:17:de:89:b3:99:38:05:74:c6:93:8e: c4:f0:25:c8:36:24:ac:b4:ba:d8:b8:31:27:24:b8:b5:36:2e: f2:3a:6d:85:3e:3c:36:50:01:f0:d6:61:58:10:5c:79:6a:9e: 10:0d:7e:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY6IXn+0aUFSRHf7741ra+/iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl OTU5ZDgwHhcNMjQwMzI5MDQwMTE4WhcNMjQwMzMwMDQwMTE4WjAzMTEwLwYDVQQD EyhkY2IwNWQyM2U5MTY4N2Q3YmUzZWFkZWFlYjBiOTcwZWE0NDMzOTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBge/JZZFOibccgi6/SzC7X0pKVd QYsQqAtXU04wOuWvi73DKJkuU9ot47XYfcXkYKvRw6+5qiiSSWwlTapnZRKBNcom yu/QkfYdETnFUZOx4uE/ECn8CeyjqMiBNJcUNj46HGhtsXUWgh90kew80SJOn0Ib l7wZ2HtHSino70OOFisZnSKVlG1CL8y4yGCcvqjcHda03/ip5emSr2taeDyPt3Ij m0ncDnsHmXkFnnXuSbenX/+vd53EPhQ7i+mTxfpV+tSkkSxGg0y1ir63vhgVH0cY cSJWg0hN6l2ICMOzpZjIjVHgy5JDaNqtiftCDJj5RzaCqx5b0oxLO89QqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNywXSPpFofXvj6t6usLlw6kQzkDMB8GA1UdIwQY MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt NGJkNjNhZGM3MzU0LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0 LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAFzHuYst wSmj+r9kH1Tkn74/UhgpWDmGPTM/Gw8UNTFpPUo7tKv/Mn4yuIV1vCKs1l59kpJV 6wVwnEK4qHLQIOfx3pK+9zkxE9Y3UfKZYDvsGKBHo8t85ZyCmOa2W+oFmEJ5n5p+ cg5pPjfhmyqIReQSUrv4od89dSjn2hasWGqjx05vDMSGgu84yz8/ZH406tBXusEh 9SRwfSlHsKD545RyD3JzY2m6T8lQ8pa8jC1i3X3EkrwrE+EMEH04VTX61xzhOK0q utR0m0sDRBfeibOZOAV0xpOOxPAlyDYkrLS62LgxJyS4tTYu8jpthT48NlAB8NZh WBBceWqeEA1+iA== -----END CERTIFICATE-----Generated at Fri Mar 29 09:08:03 2024 by rpki-client on console-fra.rpki-client.org