$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft File: zRCMIl8keM1CMBeYkNByhL4WNs0.mft (raw, json) Hash identifier: hQRsYibpnFFCRs3TlBf67wj9lsuAZeOwc54QmV9bbgM= Subject key identifier: 9E:55:2E:94:AF:74:D7:B1:B7:0C:D8:40:CD:69:67:8D:46:49:DB:D7 Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd Certificate serial: 018F9270A6EBF5BC7F76E1D2C01A65103822 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft Manifest number: 09BD Signing time: Sun 19 May 2024 20:00:07 +0000 Manifest this update: Sun 19 May 2024 20:00:07 +0000 Manifest next update: Mon 20 May 2024 20:00:07 +0000 Files and hashes: 1: 1-Oneo4YKSKiyfLUzw1OUaVhP718.roa (hash: 4YCJonCE3qUYzCVkGKmAW+rGKngBob51Xv8KjCNKqQw=) 2: J_T7zSn_2TEGNeAK-Jlqn_aOXXA.roa (hash: s4cN7/YJkEYdpkAgLoAvsaHUMa8Gnw2/qhoQFH15f94=) 3: KaU2Q31nlxA6cYScjLCdMIAlaNU.roa (hash: B1UpW/lGe46pq6HlkLMscSALi0xp7cvZ6R2fw3vIXKQ=) 4: PJ100iO3kB74HSUZcx5y_CmGnOs.roa (hash: /lBxXhWVgEjaltshxeZ4FTdroWln5mGt7mt4gH3CQqM=) 5: Qg7JfLKGIYAtfP1jlvLvMraaRPw.roa (hash: U09p3DSdMdgPc/18Nb1OpbczTCTawaQad4HpllEDB3M=) 6: WVfFYwhxQdPEBpnLL4OVzAW4mkk.roa (hash: 9iZavNTYfj4xHs3rWUe9mG5k/h4anS9fqfoTiD5IscI=) 7: XHMhPOvsML-LFbVSH-bDUsPFCWM.roa (hash: 3QEGg7asrWc8hqFvelT28ICq34X6EPdzXzo7fQtCn3M=) 8: aGLA8I06d3YrvKWL7uRSR-77xG4.roa (hash: Ff+snKBTYeaUtDAibzoJdqSfFJNk/kWT+FLx1MZTY4M=) 9: dH0Ha_BGyhNNJt-JUSQ0AvNPp_w.roa (hash: 6YYK31uL7GOBfjdiX9ixRCPof7+/ij1LxcVwcxASsyM=) 10: fDMD6FQr0xZLWH7J861_InkMwZY.roa (hash: ov5HzwQZqF5XAu1IHd+wHwrrTV0DHpB7avZVbnSizng=) 11: iLB9ybcRFPYh7-KiWvpXj0J_kt8.roa (hash: bdSwoyHCOcBjvMzjyD2eFaoWFYNitJbTHGTTR2BEuns=) 12: p0ddE7XpQY4jDS66wwKonDE-beo.roa (hash: /Dfaf8osEr43lFWXmL+pNULIw1BGAtNaV2sGeRyj/pA=) 13: zRCMIl8keM1CMBeYkNByhL4WNs0.crl (hash: NneJlUY4ceSXoi3vXonewa6yxlUnTpoGnRV2d8mnr7Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 May 2024 14:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:92:70:a6:eb:f5:bc:7f:76:e1:d2:c0:1a:65:10:38:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd Validity Not Before: May 19 20:00:07 2024 GMT Not After : May 20 20:00:07 2024 GMT Subject: CN=9e552e94af74d7b1b70cd840cd69678d4649dbd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:50:c8:bc:0f:9c:f9:97:d2:1e:cf:06:5c:40: 65:33:df:c3:ba:aa:52:8b:70:19:8c:b4:17:ed:5d: 0a:fc:36:82:24:a2:ad:d0:68:66:76:1f:e0:67:6d: 90:4a:60:ec:e3:c9:73:fa:84:e8:32:4a:b9:d6:d7: 05:5c:7e:6f:0f:57:38:61:77:b1:f4:4f:bc:56:8b: eb:83:81:11:82:c6:03:c7:6c:cc:49:d8:03:3a:e2: ff:66:22:0f:de:91:7b:a7:52:65:7b:fe:e7:ef:ba: 70:cb:a2:fc:59:44:de:57:e6:95:d8:57:61:70:c8: 32:ee:0e:46:e6:8b:fa:d6:5b:3e:13:7e:0c:af:0e: 78:32:40:23:7a:13:83:ff:82:aa:31:b2:aa:d1:af: 18:db:49:45:63:ca:f7:5b:b6:39:51:9c:57:b7:a4: 57:e3:93:7d:34:2d:18:0e:3d:e4:31:48:2a:74:ae: 8e:d2:36:48:da:57:50:e0:ec:9e:c5:38:fc:98:29: 83:4c:a1:3c:85:fb:e7:e5:50:ba:63:80:89:77:07: 0a:3c:61:db:62:a2:dc:43:00:59:dc:93:eb:e0:42: 27:70:98:2e:1f:8a:db:07:55:b7:8f:4e:7f:a2:da: e0:b5:76:78:f0:37:b5:6f:87:ad:b5:b3:b6:99:89: ce:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:55:2E:94:AF:74:D7:B1:B7:0C:D8:40:CD:69:67:8D:46:49:DB:D7 X509v3 Authority Key Identifier: keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:f9:8a:e6:ce:f7:74:8b:84:30:58:76:6a:5b:a6:26:9e:10: bc:76:a0:02:fe:a4:58:8c:aa:4b:5f:9a:9b:e2:4d:ff:e1:71: 1d:fe:ef:68:79:30:8e:b4:6f:73:e5:d2:b7:e1:50:b3:81:62: 82:0b:ca:4b:11:4a:14:78:69:29:24:13:f4:99:ca:9e:a4:c0: 76:75:f5:ad:3b:5b:4d:a3:88:24:39:1d:85:e0:4e:6b:43:ac: 77:cf:08:3b:eb:39:70:08:56:85:8d:fc:94:aa:b0:82:d3:71: 5a:d9:a6:3a:56:d7:09:fa:b6:f2:1e:63:63:85:7c:df:05:67: 76:82:bb:a6:2f:57:91:d6:61:76:f4:bc:a4:76:6d:60:63:09: 56:22:67:40:bd:17:21:8f:68:f8:00:12:b5:e4:f8:97:46:99: a6:85:e5:4f:a8:7c:f0:c3:b7:e7:ed:e2:fb:c7:a3:f4:0b:1f: f0:61:10:ab:1d:ea:f8:9b:c2:3a:77:6d:ed:dd:d7:7e:c1:6c: b6:9b:77:e7:b4:4b:e5:fb:74:60:24:a9:5f:58:7f:07:f4:f4: ec:28:61:f6:e4:6f:3f:c0:d4:41:47:b4:7d:10:73:82:3f:fe: 04:32:a0:3d:bd:b6:48:43:e9:ec:67:99:5f:d4:9b:7b:cf:87: 23:c9:fd:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY+ScKbr9bx/duHSwBplEDgiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMTA4YzIyNWYyNDc4Y2Q0MjMwMTc5ODkwZDA3Mjg0YmUx NjM2Y2QwHhcNMjQwNTE5MjAwMDA3WhcNMjQwNTIwMjAwMDA3WjAzMTEwLwYDVQQD Eyg5ZTU1MmU5NGFmNzRkN2IxYjcwY2Q4NDBjZDY5Njc4ZDQ2NDlkYmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFDIvA+c+ZfSHs8GXEBlM9/DuqpS i3AZjLQX7V0K/DaCJKKt0Ghmdh/gZ22QSmDs48lz+oToMkq51tcFXH5vD1c4YXex 9E+8Vovrg4ERgsYDx2zMSdgDOuL/ZiIP3pF7p1Jle/7n77pwy6L8WUTeV+aV2Fdh cMgy7g5G5ov61ls+E34Mrw54MkAjehOD/4KqMbKq0a8Y20lFY8r3W7Y5UZxXt6RX 45N9NC0YDj3kMUgqdK6O0jZI2ldQ4OyexTj8mCmDTKE8hfvn5VC6Y4CJdwcKPGHb YqLcQwBZ3JPr4EIncJguH4rbB1W3j05/otrgtXZ48De1b4ettbO2mYnOLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ5VLpSvdNextwzYQM1pZ41GSdvXMB8GA1UdIwQY MBaAFM0QjCJfJHjNQjAXmJDQcoS+FjbNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQt YWU1MDI3MzY4MWE3LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQtYWU1MDI3MzY4MWE3 LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL/mK5s73 dIuEMFh2alumJp4QvHagAv6kWIyqS1+am+JN/+FxHf7vaHkwjrRvc+XSt+FQs4Fi ggvKSxFKFHhpKSQT9JnKnqTAdnX1rTtbTaOIJDkdheBOa0Osd88IO+s5cAhWhY38 lKqwgtNxWtmmOlbXCfq28h5jY4V83wVndoK7pi9XkdZhdvS8pHZtYGMJViJnQL0X IY9o+AASteT4l0aZpoXlT6h88MO35+3i+8ej9Asf8GEQqx3q+JvCOndt7d3XfsFs tpt357RL5ft0YCSpX1h/B/T07Chh9uRvP8DUQUe0fRBzgj/+BDKgPb22SEPp7GeZ X9Sbe8+HI8n9PQ== -----END CERTIFICATE-----Generated at Sun May 19 22:14:44 2024 by rpki-client on console-fra.rpki-client.org