$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft File: P-3YXB7Mtf9LqTARenMpCZwP8us.mft (raw, json) Hash identifier: 4wrkVjOUwcBpU7vJmsXREV83SehkLZlRs1HOIYuCVOE= Subject key identifier: 72:1D:82:9F:CA:57:95:D5:AF:B7:47:DC:FD:9F:50:82:B3:33:A1:71 Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb Certificate serial: 018F87ED00F3976E0C8C3D5A6A21B4F7F54E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft Manifest number: 119A Signing time: Fri 17 May 2024 19:00:06 +0000 Manifest this update: Fri 17 May 2024 19:00:06 +0000 Manifest next update: Sat 18 May 2024 19:00:06 +0000 Files and hashes: 1: 5oXEjXSZXk8gGoeKSpnatlzSkU8.roa (hash: c/0vVch+MHtmDQjhHSs8QLQwqQdJpq4N5Py2CuvTAbM=) 2: 7qkOSuFRUcyYKEw9eeQoyGsSKdM.roa (hash: GifETILrK9NkOBL6RKHtfkhY3OcuMcPjgbMzkC/+3Dw=) 3: CshPQv3WitwH-Tw1DnNWXIT-fyE.roa (hash: xOxFUSmIw+yw97rCwcMw24fBJYrzbSHSkY5uHpKAF3c=) 4: Do0JSgiNCqriv80PIhtwMnexSNc.roa (hash: RwQMBdH7IsYN85P3xCXPyoXK0UkudDgkL+/EfmT5Xt0=) 5: F8-dcpSK7eR4Q3eZ7DjNFD0hoS0.roa (hash: aW17bahgYC+0ydR+RijGPQpiczt7k6CQ3JXOlK3xxV8=) 6: GC88wOt3zbSCv-O1LEEiKvY4VYQ.roa (hash: Ow4rCOKajpb9hC8TUxfEtv1qSD5PGaWoIV8rQDWnVbw=) 7: Ho4RsPdmq-d5M8eMON9sQR773X4.roa (hash: W1DnIo59YpKainHdHycNWVLli+AuD9xIu789tN7sh4Y=) 8: P-3YXB7Mtf9LqTARenMpCZwP8us.crl (hash: 1w8bzpFOWUHuM0g4TQ9pNu6UBNmrDlQGOz1p8HFzQYs=) 9: QGhG6RxqyM5xS4zSfkTkhEc08iw.roa (hash: Zbfe3Kbv20fwsPXZZlxeo8S7ShO9tsbTG5lOXXoVCSo=) 10: Zj3A_BUC9CB-xht_VIoh4BFeujU.roa (hash: 84EcRw3+/2FQqsIJ6jbo026iVQpvo8WsxjruxFl/+tk=) 11: dweZDde6L7j7XqNwC6AvRhFjEoE.roa (hash: XTRBzypaFb9R+2c/aGlzC5NMNHfSP/mHa6mwYkAPRXQ=) 12: j9BS6TSn4ZaJS5O8vf-fysuvRRA.roa (hash: 3J/2SiG4+3YACKui0i9D7UUY3r2Hw70t5cZiJ+7M354=) 13: wqewg384Z7m-JVIE3YMl8cIamNA.roa (hash: PIpH9+1LpTUbjGq1ZThGMmzcm6E//TN9Xsch42+tecA=) 14: xPLfJ4gjT8OyBMojHvTlELKhJA8.roa (hash: 0jKpvn3Dbt9TYMQmP+5IuTLQXAuccdXgm7oNE5ZTYaQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 May 2024 17:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:87:ed:00:f3:97:6e:0c:8c:3d:5a:6a:21:b4:f7:f5:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb Validity Not Before: May 17 19:00:06 2024 GMT Not After : May 18 19:00:06 2024 GMT Subject: CN=721d829fca5795d5afb747dcfd9f5082b333a171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:61:96:88:67:fe:27:96:dd:4b:ea:7e:c7:85: 87:8a:67:54:78:e6:f3:e3:84:11:2f:f9:cb:2d:03: ea:22:ea:51:7f:8d:ae:7e:eb:47:29:e4:2e:dc:69: d5:d7:cf:e3:60:a5:8b:96:48:aa:fa:01:ae:d5:3d: 34:75:8c:e8:31:87:6e:d9:d0:bc:3e:0d:f3:69:78: 9c:ba:d7:e2:44:c8:5b:16:ab:94:56:f9:6a:45:f6: b2:c5:12:69:0d:76:b7:76:d5:12:3a:d3:2e:b4:86: 00:a7:e8:9e:5e:29:83:26:46:73:64:18:2e:70:ba: 50:ff:6d:97:82:ce:4d:04:89:a0:19:87:ef:c9:c5: 34:3f:35:c2:01:11:47:96:66:f3:cd:00:ef:ff:1f: 81:f4:22:59:16:ec:c9:c8:87:60:b9:8c:a3:87:d9: 4c:7c:37:d8:ac:12:85:f0:1e:65:ab:91:cd:44:46: c5:24:0c:51:d0:9d:87:d6:a7:a2:d6:bb:d0:79:97: df:3c:4e:27:cb:4d:81:e8:ac:e1:c6:e3:b8:39:4f: d6:9a:2f:24:94:a5:80:f2:2c:b6:eb:eb:27:ac:22: b3:76:48:bf:ac:7f:d5:90:69:12:cd:34:f0:56:5e: 63:5a:5f:da:38:56:c6:e2:0b:9f:ca:b9:5c:45:0b: 6d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:1D:82:9F:CA:57:95:D5:AF:B7:47:DC:FD:9F:50:82:B3:33:A1:71 X509v3 Authority Key Identifier: keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:eb:4e:30:f4:9b:b5:c6:ec:49:5b:45:19:45:18:1b:33:d7: 9e:6a:ff:77:ac:15:91:be:82:01:06:06:7c:66:aa:0c:fa:d2: 6f:c3:5e:35:7d:a0:93:94:43:ee:f8:7b:bb:61:12:5a:62:57: 0c:f8:9e:78:8d:c6:3a:af:73:3c:59:89:1e:b7:34:f4:5c:eb: a7:d9:34:72:c7:86:df:29:a0:44:de:b3:45:e9:4e:4e:21:23: 40:2b:d6:d0:b3:88:6e:6f:36:7f:24:23:e6:38:b2:5b:93:59: 46:2f:7a:90:a0:85:6c:a7:6b:73:9d:09:f5:0a:25:2f:e4:bf: cb:14:eb:20:35:02:05:80:a6:4f:bc:42:64:ad:f2:2c:37:5d: 4f:bb:66:44:0d:7b:21:a4:9b:a2:c9:4d:82:e9:71:30:af:6b: 4f:8f:23:11:5c:c7:b7:91:64:24:da:91:fb:15:71:36:2a:ed: 11:80:cd:97:02:ee:60:6e:f8:16:7e:d7:da:7f:93:77:f1:0d: 5f:68:c4:0b:c0:58:80:00:75:ee:2f:86:5a:11:0c:de:bc:21: a6:d8:af:9f:85:78:56:b6:9b:c8:8a:e5:97:89:d4:8e:0a:f1: bb:17:c9:41:53:c0:f0:bf:8f:f7:27:4b:ef:55:69:e7:56:ee: 2f:b4:9b:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY+H7QDzl24MjD1aaiG09/VOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw ZmYyZWIwHhcNMjQwNTE3MTkwMDA2WhcNMjQwNTE4MTkwMDA2WjAzMTEwLwYDVQQD Eyg3MjFkODI5ZmNhNTc5NWQ1YWZiNzQ3ZGNmZDlmNTA4MmIzMzNhMTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2GWiGf+J5bdS+p+x4WHimdUeObz 44QRL/nLLQPqIupRf42ufutHKeQu3GnV18/jYKWLlkiq+gGu1T00dYzoMYdu2dC8 Pg3zaXicutfiRMhbFquUVvlqRfayxRJpDXa3dtUSOtMutIYAp+ieXimDJkZzZBgu cLpQ/22Xgs5NBImgGYfvycU0PzXCARFHlmbzzQDv/x+B9CJZFuzJyIdguYyjh9lM fDfYrBKF8B5lq5HNREbFJAxR0J2H1qei1rvQeZffPE4ny02B6KzhxuO4OU/Wmi8k lKWA8iy26+snrCKzdki/rH/VkGkSzTTwVl5jWl/aOFbG4gufyrlcRQttTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHIdgp/KV5XVr7dH3P2fUIKzM6FxMB8GA1UdIwQY MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt ZTJiNTI3NzI4ZTk2LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2 LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASOtOMPSb tcbsSVtFGUUYGzPXnmr/d6wVkb6CAQYGfGaqDPrSb8NeNX2gk5RD7vh7u2ESWmJX DPieeI3GOq9zPFmJHrc09Fzrp9k0cseG3ymgRN6zRelOTiEjQCvW0LOIbm82fyQj 5jiyW5NZRi96kKCFbKdrc50J9QolL+S/yxTrIDUCBYCmT7xCZK3yLDddT7tmRA17 IaSboslNgulxMK9rT48jEVzHt5FkJNqR+xVxNirtEYDNlwLuYG74Fn7X2n+Td/EN X2jEC8BYgAB17i+GWhEM3rwhptivn4V4VrabyIrll4nUjgrxuxfJQVPA8L+P9ydL 71Vp51buL7Sb9w== -----END CERTIFICATE-----Generated at Fri May 17 23:49:44 2024 by rpki-client on console-ams.rpki-client.org