$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft File: O0duEuiYflswLNwkvdnbP-g8hEk.mft (raw, json) Hash identifier: lsm084zzGfPHRnJ3cPTbULTItui97GdksFRbcXc7Er8= Subject key identifier: B4:3D:ED:A2:1E:64:A5:C4:1A:69:7A:66:45:09:DB:4B:14:8C:BB:03 Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Certificate serial: 01870F9A5D65D6694497B984DAE568C78158 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft Manifest Number: 0E03 Signing time: Thu 23 Mar 2023 17:53:07 +0000 Manifest this update: Thu 23 Mar 2023 17:53:07 +0000 Manifest next update: Fri 24 Mar 2023 17:53:07 +0000 Files and hashes: 1: 10C1I6l9wurl-GLReDw09baDpHU.roa (hash: higCUroeXAMdRZmT/AL3TEtUpxRHWOJIXJxzAD58Oqw=) 2: 1fHPNEVl1qFYXPvdhTo7sHmF3-4.roa (hash: /Tq8VC7KOaYvVErOE+Ou6pbBoiERZFKrDJG7PoPopkc=) 3: 2P3mOSB-Ok_EHw2Abr2MnPuQXzw.roa (hash: aD85mxreopdS1T909BR1gXdTkYUgcda9xNPPdr0nvNc=) 4: 2uUAQi5DbClgKBOLQOiUaYyyBB8.roa (hash: T/jvpUFcIxhsIwfCZXfL9xDDa6aVGlNZqSK7VQbIWUI=) 5: 8t1gYM0bMjfgMZdgMhytco0x-QY.roa (hash: zoIceZ1cvNzBVoSxc+T99ytKv2KQBsKNhS6PJTiyOI4=) 6: 9Wp4YSS0L_EvpF39EYHW22869JE.roa (hash: xKUyY7Lqv5xec93iWCgoOl48D/Ff0ryrD9xGQbz6UDk=) 7: IUuc5QBO44fP0lxUzfSJEuZxEcg.roa (hash: HfNfJFZEVdQaGdMHGCa37OpV0Xf55SmvPXooLwlr8R8=) 8: O0duEuiYflswLNwkvdnbP-g8hEk.crl (hash: CJPAHi1AeGmXyyje4F5cedTtyQHRxyVfhlCPUZnh0RM=) 9: Oq547RGxi4dzf06Bn_oTQz0O7FU.roa (hash: CL9uomnx5CxnidhGwvfLGawcII74PaVKxkXKyDO2efU=) 10: PPRnhtS9tpZypcnBfLlicE3Mkl4.roa (hash: oUzS8wI+RudIZ/6OcG6h32ri5zyulJNzgc4LBvPwdfA=) 11: PkrRZcEHdU6Rxni8j-zT2N-I51M.roa (hash: ABuA+6uKFn0UJjONqFt9j+M6Gdv9vRhgETmO5Fc34lI=) 12: QAl4nOphMSGctEtcWGfFRMnjR7w.roa (hash: Qj5hjDFoh9724x7fIOoGAGV0/J5Rl6SlulyYrCHFhko=) 13: UjSAm7rS5wHyr6ZYK18hw_yK5gg.roa (hash: pxCNGkW6SMr4VuQ9UQMMxnIGA8g4gIyopdkxKl2UFw0=) 14: YnVmTx67eCs6PihD7qJ6Yq65y68.roa (hash: kOf6W+10fEYCZJijT91+cCbKbTdFcp4RDIrwVGCPtEA=) 15: ZEABX7CNg0rRg7fquoJa582aFjc.roa (hash: aW/H5e/6ZMtiNUbzexOO8asl+uKdt0Kr2zVeWttHibo=) 16: cyZvtfIR_etHHSpnNeUgVSEshkg.roa (hash: ysfX6ie2AGYnTYIeWil7kiWEe90H/Lu54EODjVC4XDo=) 17: d9hdQ_MKRtY5xHbnzOCrfo-sORU.roa (hash: QA3P6Sb47j4G0z3TTHwE4abhtVeSs8WXVbgoTBbsJN4=) 18: dk2BhYqBUZWRhOkR0HHgqMy3ruA.roa (hash: YypNC44q6DPTPGWQ5TgaBqhHs8Q5PdLY5Xd+Olm5YlQ=) 19: hsvgLhwEvwspWeScTzNRLrDM2Po.roa (hash: maIKlT2by7il6SaN4i9R2zGlS9G1akCkq50pppVVN+4=) 20: iTkZ3AR4FjFEJ7-SFTVNvJ5D1Xc.roa (hash: qre8QRfALO8BOrQB0Wr4Pe9xGNgduspzc02cbez8hrA=) 21: lJYQIuFF_dtaweVFFHYkgSE2d-o.roa (hash: Me1tCOKdUoauIIIpdjh9leWLWUOW0INAD2eZT4Q0QcQ=) 22: lgHCAtLFjeoZQxu3cQi388dTRBk.roa (hash: wwCHm41NJuohsIhhQA/KTeUN4wp+GhVdPjNkhB8gWQc=) 23: nbuKKWB1qaN9ZpePm5xdU5hcUwo.roa (hash: DOXTtuYSa9WfoOXfZBly0f/wFQkoSzmcRIlYpVb3NsE=) 24: qfcgyh32ZR3_zU4bn16PCmovfVs.roa (hash: LPf0yciSFSn1DUVd7KjACMUpuA0WNMuH6OPjZlT45FE=) 25: w2DAPHKVpFaZ9RZIv19FsXJ0-VE.roa (hash: 2bGHR0a5H2bfhVCoF5utx9TOOrW3XUtWRI1LqeXLrRw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Mar 2023 11:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:87:0f:9a:5d:65:d6:69:44:97:b9:84:da:e5:68:c7:81:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Validity Not Before: Mar 23 17:53:07 2023 GMT Not After : Mar 24 17:53:07 2023 GMT Subject: CN=b43deda21e64a5c41a697a664509db4b148cbb03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b4:d4:43:a3:c2:fb:af:a3:70:d9:d2:02:00: 92:62:a5:23:6a:a5:4e:5b:bc:30:8c:bf:41:cf:eb: a7:cf:26:38:08:6e:fb:66:ed:42:c2:56:7e:b3:e5: d9:80:4f:bc:3a:49:3c:c7:9b:76:83:a6:ed:fa:a9: 2a:55:ae:65:f0:1f:7a:8d:01:cc:05:5d:df:1a:14: ce:21:e2:f3:a4:c4:2c:87:93:87:57:1c:47:42:2f: e7:50:c6:5d:aa:c2:e0:13:8c:84:26:6f:12:38:e4: 3c:fd:a5:0a:cc:30:bf:31:a4:75:09:04:05:89:1b: 3a:22:87:dc:e3:e8:0c:c7:42:82:45:20:87:c7:65: f5:17:f5:8f:f3:f0:ef:55:1f:11:af:7b:8a:ae:d7: 61:13:5e:91:74:24:d9:c9:fd:23:23:a6:97:00:8b: e1:98:27:ba:f8:13:84:d4:b7:a8:61:27:31:0a:8d: 88:8f:25:95:e0:c9:ff:58:0e:0b:48:52:79:ac:b0: a8:ab:bf:58:81:7e:44:1a:55:1a:79:65:05:74:8c: 16:e5:be:3e:76:16:1f:86:0a:24:1b:71:0b:8f:85: d2:2a:fc:3b:84:ce:4e:88:33:6b:cf:f1:1e:22:91: 74:2d:c2:e6:68:5a:0a:44:df:e8:4c:9e:3f:f8:0f: 24:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:3D:ED:A2:1E:64:A5:C4:1A:69:7A:66:45:09:DB:4B:14:8C:BB:03 X509v3 Authority Key Identifier: keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:cf:9a:14:49:9a:2e:49:8b:ac:87:74:b2:9a:31:42:9c:aa: 0b:3a:6f:0b:10:a6:50:d6:58:27:ed:b9:e1:4b:5c:5a:25:11: 71:00:2f:5d:72:ce:bc:cc:80:6a:49:eb:d3:8d:c6:a4:7c:2b: 7d:b1:38:17:92:c0:52:10:af:a1:ab:38:a4:ab:1f:9b:f5:1d: e2:40:28:b2:63:d6:6a:42:7e:73:a0:78:96:7a:84:ad:ad:7d: 16:7d:bd:d3:8b:ac:51:df:97:68:32:ea:6a:a6:b8:6a:5c:06: 3a:59:3a:8a:e7:bd:45:cf:fc:b4:52:c6:2f:9f:8d:d6:72:e2: 1e:61:00:3d:ea:97:c1:5d:3b:0e:fb:28:5c:3f:fa:ae:af:1e: e0:fa:ae:e3:65:21:21:e4:a8:30:7c:85:b7:ff:06:f4:ec:30: 78:ed:0c:79:d7:aa:f3:4b:a5:09:3f:7f:16:f4:b8:a3:ff:d2: 43:37:1f:5b:f8:87:20:95:9d:d2:0e:29:f7:85:85:72:7e:67: 2b:e6:6f:34:8e:bd:6e:91:34:15:6b:58:c3:c0:c1:b3:4b:5a: 2f:bc:5a:e3:06:70:c9:61:b6:dd:1f:34:35:ca:10:ee:07:89: d3:cd:f6:bf:37:aa:a8:e3:e2:37:73:4d:bd:d5:ee:d2:9e:14: 9d:61:c1:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAYcPml1l1mlEl7mE2uVox4FYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz Yzg0NDkwHhcNMjMwMzIzMTc1MzA3WhcNMjMwMzI0MTc1MzA3WjAzMTEwLwYDVQQD EyhiNDNkZWRhMjFlNjRhNWM0MWE2OTdhNjY0NTA5ZGI0YjE0OGNiYjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbTUQ6PC+6+jcNnSAgCSYqUjaqVO W7wwjL9Bz+unzyY4CG77Zu1CwlZ+s+XZgE+8Okk8x5t2g6bt+qkqVa5l8B96jQHM BV3fGhTOIeLzpMQsh5OHVxxHQi/nUMZdqsLgE4yEJm8SOOQ8/aUKzDC/MaR1CQQF iRs6Iofc4+gMx0KCRSCHx2X1F/WP8/DvVR8Rr3uKrtdhE16RdCTZyf0jI6aXAIvh mCe6+BOE1LeoYScxCo2IjyWV4Mn/WA4LSFJ5rLCoq79YgX5EGlUaeWUFdIwW5b4+ dhYfhgokG3ELj4XSKvw7hM5OiDNrz/EeIpF0LcLmaFoKRN/oTJ4/+A8kCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLQ97aIeZKXEGml6ZkUJ20sUjLsDMB8GA1UdIwQY MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt NmNiZmYzYzRkYTAxLzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAms+aFEma LkmLrId0spoxQpyqCzpvCxCmUNZYJ+254UtcWiURcQAvXXLOvMyAaknr043GpHwr fbE4F5LAUhCvoas4pKsfm/Ud4kAosmPWakJ+c6B4lnqEra19Fn2904usUd+XaDLq aqa4alwGOlk6iue9Rc/8tFLGL5+N1nLiHmEAPeqXwV07DvsoXD/6rq8e4Pqu42Uh IeSoMHyFt/8G9OwweO0Medeq80ulCT9/FvS4o//SQzcfW/iHIJWd0g4p94WFcn5n K+ZvNI69bpE0FWtYw8DBs0taL7xa4wZwyWG23R80NcoQ7geJ0832vzeqqOPiN3NN vdXu0p4UnWHBsg== -----END CERTIFICATE-----Generated at Thu Mar 23 18:18:41 2023 by rpki-client on console-fra.rpki-client.org