$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft File: lgYvXdsY-W14SSs1ONd0XMRxSiY.mft (raw, json) Hash identifier: IZMEkMgeZOimllwx12ABHL7IdBiRy9rzW0sm+hxKUa0= Subject key identifier: C1:84:20:7C:5C:92:A4:6A:D2:CE:36:EC:0A:2F:3A:EB:E3:3E:B4:E5 Authority key identifier: 96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26 Certificate issuer: /CN=96062f5ddb18f96d78492b3538d7745cc4714a26 Certificate serial: 01905210BAABC54F9B6F91A7E62BE07E166E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft Manifest number: 04B4 Signing time: Wed 26 Jun 2024 01:02:26 +0000 Manifest this update: Wed 26 Jun 2024 01:02:26 +0000 Manifest next update: Thu 27 Jun 2024 01:02:26 +0000 Files and hashes: 1: 3oPPC7GhgZE-YYKiteCljoiwKBU.roa (hash: htcMSXNQ+BDnI3lz4G4yDNlK4PqXpM47uEcpJA67HnA=) 2: 93uXQCB9GY47D5FoOPdSV-uZSbc.roa (hash: Pj2Y94o0Ccg/8UNlZjXD+5kAhd74RydDmI2E1AHXXCM=) 3: FPC0NbYar0iFtRZtSTZcMBSQDnk.roa (hash: 5dYW8mAhGkw+vxDhz4yMs13ukDs/Kk4YSVMDR93v9a8=) 4: SRQlJnqs_NWkVL5AV8EjEe8F_bs.roa (hash: nf8gZNNxLEFH7IILBZCwRL47ri37i0cYwvQCunSkjQA=) 5: XIB3xR7_mkWl5MP9D9lYrT44G60.roa (hash: xdDaeDJMkhasEA/4MGQFrGgkpY8bX0zp7M5LGGK/uD0=) 6: YAmy0iqh1Ek1zMHipotgF_eX_5c.roa (hash: MffuGg8Ug5wBarMpA0XZVpCMLkICZSpVd4IIW9uem/g=) 7: ZW0HJEzkgHdPvVafP8hTXXITydk.roa (hash: TS57gHooW6S6nlk6HVEY8Yc747W78NYKRdB3ataxVGE=) 8: biPdCcOup6pAhgvAz8-wcX0kbg8.roa (hash: Hb02crWFbm9DylMXW4slMkyjyuhsGVV73vpg5wQs0uA=) 9: d7nb-1rZ7xNcBy0oAHS-qWytKL0.roa (hash: BR/AjK9jKcVmzNRGlw12YSQWdBb+iPk03QBRoCX4CKM=) 10: gePIK2-VbGIo26x6domZFEVnF2w.roa (hash: UBhLzus5EcSud+9dBZHiyhW/YXKebv6Qx4xzFh52UQY=) 11: jQgukn3jPpSpiRT4tYqVdmwIr-k.roa (hash: GNlhjHLO2AoQlRJXxBPZLIrDdnEYNuGxkK+GgriS2lY=) 12: lgYvXdsY-W14SSs1ONd0XMRxSiY.crl (hash: EPP8R0avWcjFN3LrDbiQWUiUQgNDOPo4CVuz+BX3zJg=) 13: pLWlUaYmWn78k2AVGWqTVrrmC3s.roa (hash: j3F9yFNGX+0czZiLr8uqRivrZWTa8bzOwoUQCFVqN4E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Jun 2024 23:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:90:52:10:ba:ab:c5:4f:9b:6f:91:a7:e6:2b:e0:7e:16:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96062f5ddb18f96d78492b3538d7745cc4714a26 Validity Not Before: Jun 26 01:02:26 2024 GMT Not After : Jun 27 01:02:26 2024 GMT Subject: CN=c184207c5c92a46ad2ce36ec0a2f3aebe33eb4e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d4:1c:dd:87:87:bc:71:a8:d0:30:01:f1:f7: 7c:33:47:1f:00:1c:b2:95:79:1f:29:cb:a2:5c:b0: 2a:04:00:fa:13:65:48:4f:85:db:09:90:99:89:69: 74:8e:9e:87:96:5d:da:2a:06:7e:86:10:2f:83:33: e1:af:6b:8f:05:44:c2:75:d2:9c:84:ec:76:93:64: 9c:08:3d:27:1c:5a:5e:44:9e:df:24:54:fa:ce:8f: b8:04:ba:e8:3e:ae:4f:a2:0a:bf:c8:03:2f:79:8f: 15:79:a7:c6:ff:f8:53:72:5e:d1:d1:d9:60:ee:24: 8b:6e:31:83:b3:9d:5d:3f:9a:58:d1:c6:78:91:19: 4b:8c:af:e0:61:1c:92:46:83:1e:3c:55:dd:93:6c: 37:f5:95:70:fb:88:88:4b:a9:91:35:b0:ec:92:af: 63:a0:c3:19:05:9e:76:03:01:32:7c:e4:e0:72:6c: 0a:34:d4:b6:78:ca:90:09:c5:b6:42:3d:62:46:f7: c1:fc:6a:4a:99:a3:98:70:36:fb:3c:9f:d2:17:e8: 42:0f:01:d5:9b:3e:91:d1:bc:d3:61:9c:dc:c9:f2: f4:03:66:21:1e:c1:c7:57:dd:83:93:d2:27:27:7f: 24:8f:94:57:1f:aa:c8:a6:8a:81:38:a2:75:e9:5a: 02:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:84:20:7C:5C:92:A4:6A:D2:CE:36:EC:0A:2F:3A:EB:E3:3E:B4:E5 X509v3 Authority Key Identifier: keyid:96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:35:b6:9b:9b:1a:7f:81:5c:d2:8a:17:fc:07:a4:16:95:8d: 22:3a:80:1c:c6:a5:1d:db:72:8b:79:41:3f:47:e8:56:a7:23: 2f:6a:0f:05:28:22:68:8b:d5:c2:26:5f:6a:6e:df:c7:6f:ee: 18:c3:c5:33:a9:63:f1:9b:1a:e2:14:65:50:c4:76:0e:4f:92: d4:a5:d7:ca:4c:95:54:f4:b3:0e:b3:f0:ea:37:a6:4b:15:a6: 22:7a:9c:d7:fa:2d:14:7c:68:28:1a:b1:61:23:f2:2b:5f:31: 62:52:5f:e4:03:6e:ae:b0:46:de:8c:6b:02:ca:c3:71:1e:b8: db:57:5b:b1:32:16:e8:36:47:de:e1:c9:e4:24:aa:fc:5d:32: ed:c1:d4:03:59:d7:75:cc:40:e0:af:0b:5a:c0:87:03:5a:54: e2:66:db:00:4a:28:70:a3:b4:9c:81:72:a8:63:ce:51:6d:36: 45:43:94:9a:27:6a:2d:a0:b9:d7:04:d3:c7:6e:c6:c1:05:62: 63:e6:4d:9f:94:57:0c:83:a9:d1:30:19:f3:1f:b2:76:4b:8a: d5:4d:4b:59:44:2f:a8:de:0c:6f:80:83:7d:be:d8:7f:b6:7c: e3:83:6a:61:1a:54:bb:47:ba:4d:e4:47:2b:b4:d5:47:89:0d: 14:24:42:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZBSELqrxU+bb5Gn5ivgfhZuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MDYyZjVkZGIxOGY5NmQ3ODQ5MmIzNTM4ZDc3NDVjYzQ3 MTRhMjYwHhcNMjQwNjI2MDEwMjI2WhcNMjQwNjI3MDEwMjI2WjAzMTEwLwYDVQQD EyhjMTg0MjA3YzVjOTJhNDZhZDJjZTM2ZWMwYTJmM2FlYmUzM2ViNGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9Qc3YeHvHGo0DAB8fd8M0cfAByy lXkfKcuiXLAqBAD6E2VIT4XbCZCZiWl0jp6Hll3aKgZ+hhAvgzPhr2uPBUTCddKc hOx2k2ScCD0nHFpeRJ7fJFT6zo+4BLroPq5Pogq/yAMveY8VeafG//hTcl7R0dlg 7iSLbjGDs51dP5pY0cZ4kRlLjK/gYRySRoMePFXdk2w39ZVw+4iIS6mRNbDskq9j oMMZBZ52AwEyfOTgcmwKNNS2eMqQCcW2Qj1iRvfB/GpKmaOYcDb7PJ/SF+hCDwHV mz6R0bzTYZzcyfL0A2YhHsHHV92Dk9InJ38kj5RXH6rIpoqBOKJ16VoCOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMGEIHxckqRq0s427AovOuvjPrTlMB8GA1UdIwQY MBaAFJYGL13bGPlteEkrNTjXdFzEcUomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGdZdlhkc1ktVzE0U1NzMU9OZDBYTVJ4U2lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9lMDU5NzUtZGE4ZS00NjBiLTllYmIt M2ZjYjVmM2YzYzU5LzEvbGdZdlhkc1ktVzE0U1NzMU9OZDBYTVJ4U2lZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9lMDU5NzUtZGE4ZS00NjBiLTllYmItM2ZjYjVmM2YzYzU5 LzEvbGdZdlhkc1ktVzE0U1NzMU9OZDBYTVJ4U2lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADDW2m5sa f4Fc0ooX/AekFpWNIjqAHMalHdtyi3lBP0foVqcjL2oPBSgiaIvVwiZfam7fx2/u GMPFM6lj8Zsa4hRlUMR2Dk+S1KXXykyVVPSzDrPw6jemSxWmInqc1/otFHxoKBqx YSPyK18xYlJf5ANurrBG3oxrAsrDcR6421dbsTIW6DZH3uHJ5CSq/F0y7cHUA1nX dcxA4K8LWsCHA1pU4mbbAEoocKO0nIFyqGPOUW02RUOUmidqLaC51wTTx27GwQVi Y+ZNn5RXDIOp0TAZ8x+ydkuK1U1LWUQvqN4Mb4CDfb7Yf7Z844NqYRpUu0e6TeRH K7TVR4kNFCRCJw== -----END CERTIFICATE-----Generated at Wed Jun 26 03:29:41 2024 by rpki-client on console-fra.rpki-client.org