$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft File: up0w5gNb6Lg4YGHycUgccH4Ezis.mft (raw, json) Hash identifier: OOTwT2cJsXe89irgpTj0aNouc0LKSE1yAP55hB6c4/U= Subject key identifier: 6B:ED:58:5A:B1:45:EC:65:31:89:80:20:CD:CF:88:81:60:BF:CA:F2 Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b Certificate serial: 018F88244A08B54BC3053E6190C0238C6447 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft Manifest number: 1186 Signing time: Fri 17 May 2024 20:00:30 +0000 Manifest this update: Fri 17 May 2024 20:00:30 +0000 Manifest next update: Sat 18 May 2024 20:00:30 +0000 Files and hashes: 1: 3p97eb_nPKQl9h75_z6MeKVSS_4.roa (hash: 2fmYI0EbsOrzqb8wH8j7+Lg8HrIgluI9+lMApId/k8s=) 2: 77NO6tLNxkae4veGuwNzZGue28E.roa (hash: XywBxLSCNRuvCGQoMpHjh0m7Hml44UnaDQnBtQ5YIFQ=) 3: B_-7ho9QuVyLg_U_gPqfl4swqLI.roa (hash: oF/SVAgVz0ypcxed7zAvV4COoebiFc7NSDQbhLkK+dE=) 4: CMr7HCXowgMN2oafvNHg18V9rCA.roa (hash: dh5h5bOobWCbv/erFPmMLb9imN6QlShX80pvBM9XSqA=) 5: EKSHjsIN4Zne4gJT5_o_zMlnmu0.roa (hash: KFjZk5tIDRwiJFWxHdumzcBOJhVM7Y0ZQLmqGbNfBYM=) 6: EwMF18KczrR_QTpFk4HfQW7t5Xo.roa (hash: 2LkFQ+qfaqIkMJV7dD0N/27W8aZUtVqLrCIwoujFJXo=) 7: GtLY_pVhwlWDavIVEM6RpYEN4Xs.roa (hash: 0Dhnw+/t6GwxU7dK+dfW8qZLKBJfXJGn83iUQrNAFSA=) 8: Gx5MrDTFQnFJCEodloN8XhqEmCs.roa (hash: 4qtH+Wm1kxIi57fxB/08xFabLrSHLISL33Yz6Ie9MDI=) 9: MEFuouRdyYupys37C42vx4trO4Q.roa (hash: HFej5hL/DtUaosiZ3ff5LDeF0Rn58lz8+2N9WU82ryk=) 10: Oh03zzoh7tKCMDV6Qwsc0LRWOn0.roa (hash: v9IGKJqPGKg3RRDAeGgfqgetanLx8AEXETIe45kq0O8=) 11: SKEazOGjemu1hh5OYwsMHCwKrzA.roa (hash: aP8vHN4J83z89uZdd/4mFjI+k+MJSZJEYCP5LFdGl2c=) 12: TSFhW3P2sk4rq8BMclJGfwcfvpU.roa (hash: AtNeNLgwio5anQrCdGYK4mrOHeMW5e4pL5qWZP84knI=) 13: Ud5hZdkp6jln1CdMXX_bG2UcvCI.roa (hash: ZQHEw4Jqd7ul0veKX4uI9N1BqFb7Mb6yKzqiIIQYboE=) 14: VE6xRYrSD3hLT9D0Vf5a83jsC3g.roa (hash: X6m/d5We0AAD+aP6gC04dXS/GrqFjSDg6cCo4XtM88E=) 15: WD3Et402oafGKTaAVSrUUri55Ec.roa (hash: PHItFjB1LzCG4+U6Suflg3VH1azLkBujkxFuTopYFlQ=) 16: WNxsdPmHEOad17P3ScTB1Tz9uEQ.roa (hash: TckXPIvzhA0HXZ8ALeQ84JuiWM9IdgR9X/FlxaLjKxg=) 17: Z32CAJehgk7rySfiQJAurqsn3YA.roa (hash: NWLrVak/N1nDaRCBSrmr5W2qya1LT5YsaouMRSYw/Kw=) 18: Ziu5g0MY6oFcCgKA3tECb8AnA1Y.roa (hash: qycc6NY4iGabp0/FSRuUPiHeZXM6GBcIVWL32nPvFtE=) 19: a4atPBjnhCc2E-dzbt1gbriagzY.roa (hash: E8Uj4YMwXD5rhFxq6r3p2AuRXycaLLjoDHcCd49Gi34=) 20: b5q-f9b3DiX-MSurPvw9yfSHAKg.roa (hash: gnTJ4PhndQ/+9J8sfdVVMmcEfN79WyR6ewKak/OCohc=) 21: hB_bF40OQ1fP_dJH2lPdGvhynUA.roa (hash: uO5FaYJD3D1BELoM9lwklnA7+EozF2DRcG4Xt22yHkc=) 22: iNI2ujDjs0N9CZ-xmu7XALxNWfQ.roa (hash: yQiGRQ+Nu9qUMG/pK08kul6xp4GGqElCgVaHihMzmVs=) 23: su4cojcfmYwGObALQAkATJFzD7E.roa (hash: IQR2LiC9AIImTz098PmNSWxI3X1ySsp4SyNlm0G9GzQ=) 24: uNFnmjiLLIPmjwVmN5svj-8R8FI.roa (hash: u4otIOPtrkKYaKTQc+kmUvGx9PzRNPTbne2QoOIrFNk=) 25: up0w5gNb6Lg4YGHycUgccH4Ezis.crl (hash: 6YcrNHuV5O49IXnAJj7afH+eMEqM1oFE/8CfBGp0MMo=) 26: wQqKG7cVGs2CJDAxdiiBYl3tY70.roa (hash: 0Mmiq8tYwkVgvvfzlXAO3GS8f4dfqFX/hq90ajVnLvE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 May 2024 17:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:88:24:4a:08:b5:4b:c3:05:3e:61:90:c0:23:8c:64:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b Validity Not Before: May 17 20:00:30 2024 GMT Not After : May 18 20:00:30 2024 GMT Subject: CN=6bed585ab145ec6531898020cdcf888160bfcaf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:48:3e:a7:07:0b:14:05:d1:56:9f:3c:ea:ef: 35:00:42:bd:bc:6e:ab:18:48:18:cf:ce:3f:6a:e3: 26:e9:67:6f:5b:80:c1:1f:6a:24:78:c2:fc:22:23: eb:4e:8c:df:80:dc:35:ed:d1:f1:0b:1d:4c:3f:90: eb:34:4d:7a:ef:4e:21:c4:36:7b:60:f4:cf:15:4a: 43:1a:ce:6b:a6:21:e8:1f:65:1e:0b:40:3a:b4:ca: 74:be:16:0c:48:1b:bb:00:86:95:e3:a3:78:31:fc: e6:2d:ea:bf:98:14:2a:3d:f1:cd:df:29:13:4d:88: 08:62:4c:d8:e6:e6:5c:70:74:31:94:76:b4:eb:5b: be:10:45:dd:6c:2c:2d:b2:44:24:02:75:77:e6:f4: e8:dc:23:24:6d:23:65:be:ae:24:31:ba:ed:2f:db: 03:39:7e:86:a2:3c:e2:11:26:13:d4:6d:59:99:de: 9c:32:25:b7:be:bf:f4:9f:59:18:2d:cd:b2:fd:cb: 18:4a:df:7d:48:41:6f:c7:a2:af:e1:ff:23:0b:71: e7:69:e0:f3:6a:90:5a:09:5e:57:d9:dc:73:d0:ee: 99:55:18:c6:82:b1:e5:43:b4:fc:7b:35:6c:f5:46: fc:ac:80:ee:01:72:fc:dd:ef:fb:69:01:c2:f4:d5: d1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:ED:58:5A:B1:45:EC:65:31:89:80:20:CD:CF:88:81:60:BF:CA:F2 X509v3 Authority Key Identifier: keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:32:0c:00:1f:74:9b:ac:d5:99:36:08:1a:10:9e:7c:29:bc: 3c:d5:ac:8f:df:a8:8d:f4:0c:bd:4e:e5:b1:39:8f:27:98:b7: 43:a6:26:44:7b:0e:d2:4a:57:ad:49:8c:93:be:4e:1d:5c:a8: 3e:e7:82:68:7e:e9:c9:52:9b:78:d0:b1:73:16:4f:79:0a:9d: 32:f8:50:f6:f3:cb:23:a1:94:58:51:d8:49:e3:b1:c5:47:ea: 05:66:69:5e:bf:22:b7:89:8f:79:9b:cc:6a:c7:b9:14:2f:08: 3b:5b:a5:84:9a:e5:86:90:a2:4a:85:d0:15:b8:7b:13:d0:dd: 8a:da:16:da:3e:fe:e6:a8:ac:eb:22:89:d3:21:f6:be:18:00: 18:38:55:14:02:2f:ed:7c:eb:96:c6:35:77:0a:8d:00:e0:da: c3:e8:a8:86:a7:af:89:9e:e4:f3:5e:08:bf:bd:aa:85:15:a9: bd:ab:ea:23:0e:34:73:22:f9:5e:4f:60:4d:82:69:51:4b:1e: 88:67:dc:a3:71:88:d9:b1:74:ea:f1:16:99:92:c3:1f:56:91: 3b:76:1d:9f:3d:bb:ae:be:4f:d5:e0:f4:a1:4e:ca:9a:9a:c4: f0:76:43:d1:13:7b:01:12:bc:7d:8d:7e:cc:d4:c8:2d:9a:87: 4a:3d:a6:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY+IJEoItUvDBT5hkMAjjGRHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhOWQzMGU2MDM1YmU4YjgzODYwNjFmMjcxNDgxYzcwN2Uw NGNlMmIwHhcNMjQwNTE3MjAwMDMwWhcNMjQwNTE4MjAwMDMwWjAzMTEwLwYDVQQD Eyg2YmVkNTg1YWIxNDVlYzY1MzE4OTgwMjBjZGNmODg4MTYwYmZjYWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkg+pwcLFAXRVp886u81AEK9vG6r GEgYz84/auMm6WdvW4DBH2okeML8IiPrTozfgNw17dHxCx1MP5DrNE16704hxDZ7 YPTPFUpDGs5rpiHoH2UeC0A6tMp0vhYMSBu7AIaV46N4MfzmLeq/mBQqPfHN3ykT TYgIYkzY5uZccHQxlHa061u+EEXdbCwtskQkAnV35vTo3CMkbSNlvq4kMbrtL9sD OX6GojziESYT1G1Zmd6cMiW3vr/0n1kYLc2y/csYSt99SEFvx6Kv4f8jC3HnaeDz apBaCV5X2dxz0O6ZVRjGgrHlQ7T8ezVs9Ub8rIDuAXL83e/7aQHC9NXR5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGvtWFqxRexlMYmAIM3PiIFgv8ryMB8GA1UdIwQY MBaAFLqdMOYDW+i4OGBh8nFIHHB+BM4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgt NWQ1ODRmYmM1ZDI3LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgtNWQ1ODRmYmM1ZDI3 LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPDIMAB90 m6zVmTYIGhCefCm8PNWsj9+ojfQMvU7lsTmPJ5i3Q6YmRHsO0kpXrUmMk75OHVyo PueCaH7pyVKbeNCxcxZPeQqdMvhQ9vPLI6GUWFHYSeOxxUfqBWZpXr8it4mPeZvM ase5FC8IO1ulhJrlhpCiSoXQFbh7E9DditoW2j7+5qis6yKJ0yH2vhgAGDhVFAIv 7XzrlsY1dwqNAODaw+iohqeviZ7k814Iv72qhRWpvavqIw40cyL5Xk9gTYJpUUse iGfco3GI2bF06vEWmZLDH1aRO3Ydnz27rr5P1eD0oU7KmprE8HZD0RN7ARK8fY1+ zNTILZqHSj2mow== -----END CERTIFICATE-----Generated at Fri May 17 23:50:10 2024 by rpki-client on console-ams.rpki-client.org