$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft File: O0duEuiYflswLNwkvdnbP-g8hEk.mft (raw, json) Hash identifier: m/9qoR1guKl41b9lgaG4RihimsQ8EZf2oPvt4C6okxo= Subject key identifier: F5:0D:57:F8:DD:08:7F:EE:90:E8:8B:88:83:BD:DB:08:F0:1A:55:BC Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Certificate serial: 018EF339CAE3A5806DB5A9DF1FBCABF06B50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft Manifest number: 12AD Signing time: Thu 18 Apr 2024 22:00:34 +0000 Manifest this update: Thu 18 Apr 2024 22:00:34 +0000 Manifest next update: Fri 19 Apr 2024 22:00:34 +0000 Files and hashes: 1: 3XGAXUKdw6KQNlQHmCjAQjhFpuE.roa (hash: fUnRJYM60g6PJtrxp49q//chlXDwdAfwaPVarO33TPk=) 2: 45FqnsRGFCKeUV-IDDyN96g3JIE.roa (hash: MOBbO7bnUVvRFqFxCLewbsVhy8cxJiyDLWKsQOMureI=) 3: 5uNbVEqGDo8KrnDsPMRJbD44mzI.roa (hash: D8piX2DXr2ICMkSWs6T0ABAZRq2otHAQ41IigeUxosc=) 4: 5x9V8R4p8pTMFbTsOR0_-xmy7wY.roa (hash: XT1cTwsH6BX+fcbAIlOj2MRkLG/Ws2dNjq6nGTrG+LE=) 5: 9961OFJ6t3GuvmiBEna6xfuJtVI.roa (hash: 4jgdwoVDMcM5qiXlw9krjtDGiXtFuphWwufGYExHYWM=) 6: AfPSc18Zc5_8zJ35KgVqcALr1dA.roa (hash: 1CUl9F4VwkfeknjsBkuKdXNnfplXgLo375ZobDA6VCs=) 7: Cf5Eh9qlIAAI5bKLEKUNgFw_GIs.roa (hash: I3gzsIijSdNlc3wk+8VGaFkk38hO0/g+rhjIqEk6ZYU=) 8: D1pEXhqX4mvNWJZ5Ssy-dBOE-Vw.roa (hash: /J9K8jdcIJD/LKbrpG0jWB2zG/XFsDifkAcU/q5yovQ=) 9: G4rTqfZNZKkaGBubcV6EG5BR33I.roa (hash: b8G73E3DGy04cqoIaZrn2r8qPuUcFw2Rs3xpnxg9G3M=) 10: HWTYRGhh-XGLZqUO1F-RszoKnGk.roa (hash: +hSceEQvRw7vhVnS0o9mJjykp4ixPvfxyGniW70coyQ=) 11: KgfsR_XFUJ-rCOtkwLfjQDiJjOI.roa (hash: hcuq6MHrkRs/rn1L1r4ylHQeITEuRlD7t0ipX9a07GQ=) 12: KhQAAMg_9UEroJuJU7LaGy4mhbU.roa (hash: +8VOjSCpIxMxMg3p2olEjOnr2HvyjqvzPaC/goYCV9U=) 13: KqqV_ftnr6XCliyXxFJx8JyjHHg.roa (hash: MJYE0McwYxAfUEQvEuohJtlq8ebWlVJScMunBLskvUM=) 14: MCx7haMdX4k58jvcrSdUVanJ4rI.roa (hash: rc9alp0Qlg497mCedmIhrN4PyA9QbFBdKIn7ocdNCsE=) 15: O0duEuiYflswLNwkvdnbP-g8hEk.crl (hash: HmdyTaTcWOXs2zoLp4fFwsOS/kua5lIFL2Dd0q5mYeg=) 16: OR_0122qqDUwywsNG35kBJ2noDg.roa (hash: 3uNaHig99b3BlJ8V7st6MnRnZoR9ZBteQ8kRgoROv4k=) 17: Ox6CWcoe9DkgcSiTJtzTO_OMXdk.roa (hash: fRxjJPcDokdHO3v9j7fiLQkWG685woUloWsyL+QXht4=) 18: TGlURBdHgX4zIhBj-qO9s5lmaMU.roa (hash: WJ5kfCVYrOkiS4H7Y29mf3rzEzmncb7CJgFMT4oT0Bs=) 19: _gjk-MTbFVwi-qHIAPH7y12MVjk.roa (hash: ULmPhiE+tPaMBIbuPAlVPOvO7ukVNwf3w0SY4AkTkp8=) 20: fuWQpx7pIw0mdaw1aqchqtWQAtQ.roa (hash: oEGfWWEgsWLbjsa0QfCLnOl7/mpoVzLp66aQhR1XgFM=) 21: hs08Sp3xnNDZ3XAsQNyWIlLq4m0.roa (hash: oZN6r1XRbgFg4MIbXtenflK12nk57JNnUKe9VbuD6A8=) 22: m1pcCxPeuokVfu50-gNRMQnn7wM.roa (hash: rfKyn1+B9zNlAhB8O0vVxilmEsqa9t+qioe6iOaHZOk=) 23: mQvSe6_vH0AH-NEDAoZCeaTih48.roa (hash: 0usbaNMaptNT3nDd78U4OjTaN0xqttEpQpmb2ML4kOk=) 24: o6rZZKPAi8kS3AZVflPSnLGegLE.roa (hash: Z7q63i91R0H0CqdXish4NaGKwjR0fCHFfdaemYUj+J4=) 25: p9G-O4Ee7z74-QvM0rjStpXq1X4.roa (hash: /C1aOmeGZahI+bd9lBDBLVviXtszVzBwWsKYLoRSL4E=) 26: qncNurvg3z56LUyM4pS7GrN7QPw.roa (hash: AuhiBfIH9MDskUT2sv1eQ8/0an9OP3+S9Cs7K98Jlkg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Apr 2024 22:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8e:f3:39:ca:e3:a5:80:6d:b5:a9:df:1f:bc:ab:f0:6b:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449 Validity Not Before: Apr 18 22:00:34 2024 GMT Not After : Apr 19 22:00:34 2024 GMT Subject: CN=f50d57f8dd087fee90e88b8883bddb08f01a55bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:59:31:64:62:85:3c:fc:72:b5:3e:a3:c5:92: 23:a9:08:ff:bb:93:34:09:f1:a2:de:ed:75:56:49: 09:11:dd:8e:12:34:e3:0c:5e:89:74:a0:5d:1c:c1: 2f:c7:a1:6c:61:71:c0:d4:e3:0d:f8:2a:3f:e7:92: 24:8e:fa:65:16:3a:65:15:2d:bd:8c:33:85:48:94: 46:83:ca:86:f7:d6:52:b9:34:3a:e1:eb:59:bb:dd: db:04:d5:c9:6f:7e:f8:11:51:79:60:95:bc:82:83: e8:51:91:32:2c:49:c3:10:ac:83:95:18:eb:7d:47: c4:4b:dd:7f:f4:58:c9:9d:db:2d:14:5a:db:bb:5b: 58:d3:7e:df:d4:fd:33:ff:35:09:a0:63:58:da:59: 51:89:6b:db:48:bf:11:c3:c9:2a:ab:ff:7b:e4:df: 4f:7e:69:0c:88:aa:08:f4:13:09:c5:c0:20:28:7b: 99:11:7f:98:5c:f0:42:20:fe:f9:b9:82:db:ef:89: a4:bb:4d:c9:7c:54:d7:f9:b1:c9:b6:7c:3a:92:9e: f5:0b:84:09:f1:51:d0:af:8a:12:30:5c:f7:36:7e: 31:ee:21:2e:2b:ce:12:9d:9b:b9:a9:6b:31:ff:60: 78:36:4d:79:ae:f1:77:5d:8a:3b:01:e9:ab:f5:49: 7c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:0D:57:F8:DD:08:7F:EE:90:E8:8B:88:83:BD:DB:08:F0:1A:55:BC X509v3 Authority Key Identifier: keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:bb:32:c9:80:bc:b0:ff:8c:ce:96:90:e2:8c:be:e7:d2:27: 10:86:4a:17:ab:2d:4f:a4:9c:4e:ce:1b:4e:6b:d5:06:7c:b0: 86:89:6d:20:7a:66:ff:ab:c3:93:a8:2b:ff:a4:45:31:16:71: f1:8a:66:d2:1a:63:f2:58:a3:90:90:9f:15:d9:3d:09:80:ab: c7:63:99:05:f5:c9:57:e1:1e:8f:59:25:59:36:c6:aa:32:b8: 1b:21:d9:66:ea:1b:f8:f8:ba:55:be:9d:e0:ed:3d:1d:63:df: 01:17:ef:6c:33:3e:32:0b:df:9e:a5:63:e8:4e:7b:1f:28:88: f4:63:98:8f:81:c4:11:45:e0:f6:a9:50:26:32:1c:46:32:b0: 05:19:fd:b5:74:88:55:fe:2b:cd:07:02:e5:bc:57:5d:05:e3: 4d:cd:9c:96:19:44:1d:25:19:22:95:83:c8:3c:b7:c4:cc:bc: f1:ef:6c:58:92:36:a1:d9:74:0a:60:1e:b7:f0:85:14:38:2f: 51:46:21:29:30:f7:de:7b:10:7b:04:70:9f:b4:1d:17:46:1f: fa:4b:a1:96:c4:6f:33:9f:a6:55:ac:88:04:c1:08:a5:dc:b8: 91:ac:09:b4:65:f2:cc:c7:e5:b1:51:73:1d:a4:ee:ef:08:e9: 61:12:d7:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY7zOcrjpYBttanfH7yr8GtQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz Yzg0NDkwHhcNMjQwNDE4MjIwMDM0WhcNMjQwNDE5MjIwMDM0WjAzMTEwLwYDVQQD EyhmNTBkNTdmOGRkMDg3ZmVlOTBlODhiODg4M2JkZGIwOGYwMWE1NWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA41kxZGKFPPxytT6jxZIjqQj/u5M0 CfGi3u11VkkJEd2OEjTjDF6JdKBdHMEvx6FsYXHA1OMN+Co/55IkjvplFjplFS29 jDOFSJRGg8qG99ZSuTQ64etZu93bBNXJb374EVF5YJW8goPoUZEyLEnDEKyDlRjr fUfES91/9FjJndstFFrbu1tY037f1P0z/zUJoGNY2llRiWvbSL8Rw8kqq/975N9P fmkMiKoI9BMJxcAgKHuZEX+YXPBCIP75uYLb74mku03JfFTX+bHJtnw6kp71C4QJ 8VHQr4oSMFz3Nn4x7iEuK84SnZu5qWsx/2B4Nk15rvF3XYo7Aemr9Ul8GwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPUNV/jdCH/ukOiLiIO92wjwGlW8MB8GA1UdIwQY MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt NmNiZmYzYzRkYTAxLzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQrsyyYC8 sP+MzpaQ4oy+59InEIZKF6stT6ScTs4bTmvVBnywholtIHpm/6vDk6gr/6RFMRZx 8Ypm0hpj8lijkJCfFdk9CYCrx2OZBfXJV+Eej1klWTbGqjK4GyHZZuob+Pi6Vb6d 4O09HWPfARfvbDM+MgvfnqVj6E57HyiI9GOYj4HEEUXg9qlQJjIcRjKwBRn9tXSI Vf4rzQcC5bxXXQXjTc2clhlEHSUZIpWDyDy3xMy88e9sWJI2odl0CmAet/CFFDgv UUYhKTD33nsQewRwn7QdF0Yf+kuhlsRvM5+mVayIBMEIpdy4kawJtGXyzMflsVFz HaTu7wjpYRLXrA== -----END CERTIFICATE-----Generated at Fri Apr 19 03:50:01 2024 by rpki-client on console-ams.rpki-client.org