$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft File: 4sK4NPvJGvDsax00_WQFTSJpof0.mft (raw, json) Hash identifier: KmFdSu9kpAvn0yK+czoS03kgKQImY60hlMYjmN6YnKY= Subject key identifier: 9E:6A:5B:65:E1:8E:D5:19:B1:01:62:BA:C3:B0:1A:6C:62:19:23:B6 Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd Certificate serial: 018F4E35A19413E8FE3224031FAFB02D5565 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft Manifest number: 0948 Signing time: Mon 06 May 2024 14:01:28 +0000 Manifest this update: Mon 06 May 2024 14:01:28 +0000 Manifest next update: Tue 07 May 2024 14:01:28 +0000 Files and hashes: 1: 2CbgenPAyht217Ui4afxF_SwM8s.roa (hash: AhljtxIqIsmnrmOO26jlNU4taxnGtvfmx5v6QEgKSLs=) 2: 4sK4NPvJGvDsax00_WQFTSJpof0.crl (hash: gSHaJr76H7i13fbHGWboA3e2BRCIVIlefAnvDr+Xtag=) 3: 4zI7dDK3rm3W-R55D-PK1iR7bXE.roa (hash: 2zuM78wwPM132vlOwIbTdPoiR13t6HfrLViS6IOZa2M=) 4: 77JUDhH8EUkY6HFWuvF4p4cE7eQ.roa (hash: 7GBXpTdSDDFcGYnfJvpghA/DWXSdlJyjsm9sNU9GD20=) 5: 90v0nQ7L-k1A_w98RHS4hv5mJoE.roa (hash: Hiv14erj7b8LFY4jjmzRPQjqHcx1ga6R5Sk/lpO9/9k=) 6: B1Zt58VKuLyfFdABRPJuGZ_jB48.roa (hash: PyHeJ5FG7zsioyJqlN9YKxtPgOzyJKVLxNtekwjHca0=) 7: C4MW5yzzQptlkxxEMmuWXdshUho.roa (hash: Awwl9nf0G3rtcFCYN/hjgJd7/BRCHpf8p7lewgXiaPU=) 8: CBeTSzD-ZGKawQFk_aQ2xOm9v8A.roa (hash: a6xiF6y37M2vqFhADADxBhQckdQWcdyChJa9tAu80w0=) 9: EpFbf1kRyHYGQtA9csoIbUdImOI.roa (hash: rRBk6rtDnOQ0IXuOkOGWUpeK+fD7i8/ke3punad7AOc=) 10: FG9OY5v9Y1IP-c1jIjwcuhI1grg.roa (hash: NvwPRAq5zC24tyTsVeMQBuEldKKppAT8v25VKInZiLQ=) 11: I2Zp3O9GuDESzIwxuBXNNbCUHWA.roa (hash: i4xbPROXGr1QwiuclNofMJ1nTFliZgNrRGwoO4JJ3bc=) 12: JY3hfx3uYUv1djoeyNtgDrFNC7M.roa (hash: LXSs2r7Fvg+vwLwTsPEEVBqnIAMOo+mitynaziNmHSI=) 13: LGsOjs3yWE-FDla1bdWsVzurcs0.roa (hash: 59ZskWSWomtq3lh+aLLNSVyS21P9fo8oOf/9J38okSI=) 14: NSsE053xCucfXB8V94HiBFPQwAU.roa (hash: rqvV8paoypRg7IbdfLuRRJyCzsZUpHS4EX6hYaD2vNg=) 15: Q4mADwVo1b5mdZB1zJ6Ch4-F3TM.roa (hash: 4yaI+JDllp3/4UCDHquNH3ZAK3hEI5fOLBzHF/lT568=) 16: QIRJHo2ndsf7zMpZPv9Uc6FS-R0.roa (hash: roBAczBPI1k7l1+MBUUz8IhGGTITI5y/Ju+TQSpXPxI=) 17: SLZ7-qihqL4z_SmgYOCziC5P8Do.roa (hash: 9XVJTFiMgeCDFK4SOrE9WEjUnjqbiXfJ8PTpCBfb8xg=) 18: UGPbah7Ip6qmGYI4eSxLSRz5Bz0.roa (hash: gRYRd941eJkSZsjLA6+8Qb9UDtKsckujbrFdTUZIeg8=) 19: VbB6IQc5Gp1Diz8AeLhWSAL_-G4.roa (hash: 0YEgmd1TeejrgUVz2J51SMN5zpkE4It/qHYb8UKkwLo=) 20: WkVDmgwVU1-N4A81_j0ACrVzO54.roa (hash: JYg6O430YjatSgllfgnM1tG/RZBv5K+v1ivPzRnXMC8=) 21: WkWmbvD5DEGbmuNrOwspSsGHL1o.roa (hash: r+LZX22QV4pgM1K+3iVTmmGJsYaqfqDvNl48S29PWQ4=) 22: YvO-0OLN1uDK5t-OIFEnDqGspuU.roa (hash: lgP24ptYbIcti4fK9nNdGyjivRsPV9l+lx47sI4WIjI=) 23: eFfRN4l9gOo7MbGQkTS4K3pZuSA.roa (hash: XZMnTMSULrW/9I6r1Jm/VOLX3yaybq6tigRDzhRskrM=) 24: hc6tQW5glga8K1PZo0tjz2zwBF8.roa (hash: CYS0AtwmX2wi+FVuw/zjCX9Ow8ZJcsdvZ2qudCG+RG4=) 25: hwyE9cy7FqEc8VS1Rvv-XAyDvkg.roa (hash: c0PzPVLA479ekHYGUakjUxIAUuAP8mNUWUlWRIksplA=) 26: iznsD8RBPhq-9hPNM4qZM_aDnzY.roa (hash: 7i03RU985Yty25evXCX9O60uGQ6mKCAZPjff88feFrM=) 27: k84M63oTMcwqEhwbcdgM_dM2tpY.roa (hash: /kgnBUjpaWt6OyaytWLzaLXSze5fAoWOZrcHZNONDo0=) 28: le8GCJRrdqHNCNAoW_re0x8Rrw4.roa (hash: U6ASm6Q2t/cWZLCxnIMcVeb4S15eRCPeDhlGqAOWMLk=) 29: nQxTSf3M9BpGJ3aOa440JySTOVk.roa (hash: HfpgeUYSrhVLwnnrtKDut+UOcBjV+uRKkS3Y6x6K6Xc=) 30: nUe7ir7j2OZjQpgmC72h9ZS4qHE.roa (hash: eHreNn2l+ib+ipIPYrvV/Lt7VMr2WwW5e2gLlA5rzZ8=) 31: w3U4RGD-RR7pfqM-x5GLo3NEI6k.roa (hash: 4w41hRAcla/qvSZOMsfe9VIf0Pp8cdA1Zp6+AEIFBkw=) 32: xgLQQo0PkwidZXDS8lVtdfsCVps.roa (hash: P29mkBM83FbxRTNqjXyshz6hM3VFVvfzu3aQrsQ0ARA=) 33: xmEhM5C7hFuqdb2pOA8MbISINgk.roa (hash: v1ZF0PRMFjK5ktaggR5rDepHA55+YKF2Dz7f/5bWbaw=) 34: yurkFy014D6W7ziEq0QdZLSv9Rg.roa (hash: DDqQ3LFI+1A0OW1QmMMIUroJuO4qF3YrI4Oa6yJ8n0s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 07 May 2024 11:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:4e:35:a1:94:13:e8:fe:32:24:03:1f:af:b0:2d:55:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd Validity Not Before: May 6 14:01:28 2024 GMT Not After : May 7 14:01:28 2024 GMT Subject: CN=9e6a5b65e18ed519b10162bac3b01a6c621923b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:1e:51:e3:09:73:e3:27:9b:b2:a6:a1:5c:a0: 29:d6:4c:45:30:b7:03:b1:ce:44:55:25:76:93:ca: 71:d4:10:7b:2c:80:09:a9:ce:3a:37:b6:f5:d8:5e: 96:aa:1b:21:65:aa:ba:fb:19:f0:7e:95:f8:20:d4: b0:fc:24:62:a5:b9:54:82:d2:28:00:1a:7b:39:2b: af:9f:a5:ff:0b:3a:9d:01:c1:35:b2:96:74:06:19: 24:45:ca:ff:c8:c3:a7:d5:43:a0:ad:b2:2c:6c:84: b6:d0:69:85:d8:7a:d2:7b:67:79:70:4e:28:42:23: 6f:84:aa:27:95:e3:f9:d0:f8:44:78:b8:a2:0d:eb: 7d:09:3f:3f:98:29:c6:4d:31:01:d7:3f:6e:16:a8: 0c:a9:c3:ef:78:d0:c0:87:73:c8:d4:5c:4b:c2:e9: 7d:c9:f2:3b:d6:0b:fc:ad:b3:df:8d:c0:27:61:76: 0e:62:52:da:9c:c7:fd:26:97:1f:d0:e5:79:03:0c: 84:b7:3d:a0:f1:3a:fa:3d:c6:63:35:df:db:03:60: b3:af:8d:6d:51:c2:c6:13:be:00:bb:2c:f2:34:1e: a2:c8:c2:8b:01:6e:42:9a:b6:e9:ba:5d:54:11:f6: 21:27:e4:d8:dd:80:22:0e:57:36:8a:11:e9:6f:f8: 1f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:6A:5B:65:E1:8E:D5:19:B1:01:62:BA:C3:B0:1A:6C:62:19:23:B6 X509v3 Authority Key Identifier: keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:29:bf:ab:7f:07:a0:4d:d5:1d:e0:12:20:ae:92:3a:80:31: 89:a1:16:7a:3b:45:52:ca:09:f3:68:85:9e:9d:6e:8f:ef:88: 78:ee:48:51:99:96:c0:44:a4:ca:5c:c8:a2:37:3f:43:01:4f: 2b:c2:10:5e:48:8f:53:d9:5b:80:63:3f:f2:6a:4a:7a:88:31: 87:d5:1f:2e:13:90:73:8d:77:c4:ec:d7:c1:6d:6a:db:0a:93: c8:d0:a8:30:a9:ab:1f:31:2d:1e:94:32:34:3e:d1:a3:f8:7d: f6:0e:a6:65:43:44:41:cf:f6:5c:bb:b6:df:03:b8:9f:8c:d5: 9f:21:17:6d:15:c5:45:e9:28:8b:fd:4f:54:68:e4:ae:96:14: 70:ca:d9:02:4d:32:6f:ef:07:d8:42:26:27:dd:9b:69:a7:eb: 35:73:a0:ee:91:a3:8b:26:20:c4:ff:c5:b3:b7:af:10:08:16: 7a:12:4b:3c:fd:6f:4f:1d:ed:bf:6f:75:d9:02:5e:bc:7f:17: bb:55:27:4d:a2:c1:7d:21:b1:fd:f3:5b:5c:a4:83:65:4e:06: 70:76:eb:16:15:ba:fb:09:f1:7c:6d:b0:a9:15:f0:19:ab:c7: 65:9f:c2:d4:a2:4b:c4:f3:5d:41:ed:ed:23:55:f3:df:f6:b7: 3b:73:40:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY9ONaGUE+j+MiQDH6+wLVVlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYzJiODM0ZmJjOTFhZjBlYzZiMWQzNGZkNjQwNTRkMjI2 OWExZmQwHhcNMjQwNTA2MTQwMTI4WhcNMjQwNTA3MTQwMTI4WjAzMTEwLwYDVQQD Eyg5ZTZhNWI2NWUxOGVkNTE5YjEwMTYyYmFjM2IwMWE2YzYyMTkyM2I2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6x5R4wlz4yebsqahXKAp1kxFMLcD sc5EVSV2k8px1BB7LIAJqc46N7b12F6WqhshZaq6+xnwfpX4INSw/CRipblUgtIo ABp7OSuvn6X/CzqdAcE1spZ0BhkkRcr/yMOn1UOgrbIsbIS20GmF2HrSe2d5cE4o QiNvhKonleP50PhEeLiiDet9CT8/mCnGTTEB1z9uFqgMqcPveNDAh3PI1FxLwul9 yfI71gv8rbPfjcAnYXYOYlLanMf9Jpcf0OV5AwyEtz2g8Tr6PcZjNd/bA2Czr41t UcLGE74AuyzyNB6iyMKLAW5Cmrbpul1UEfYhJ+TY3YAiDlc2ihHpb/gfvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ5qW2XhjtUZsQFiusOwGmxiGSO2MB8GA1UdIwQY MBaAFOLCuDT7yRrw7GsdNP1kBU0iaaH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2Et OTk0ODA2ZjA4MWYwLzEvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2EtOTk0ODA2ZjA4MWYw LzEvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaCm/q38H oE3VHeASIK6SOoAxiaEWejtFUsoJ82iFnp1uj++IeO5IUZmWwESkylzIojc/QwFP K8IQXkiPU9lbgGM/8mpKeogxh9UfLhOQc413xOzXwW1q2wqTyNCoMKmrHzEtHpQy ND7Ro/h99g6mZUNEQc/2XLu23wO4n4zVnyEXbRXFRekoi/1PVGjkrpYUcMrZAk0y b+8H2EImJ92baafrNXOg7pGjiyYgxP/Fs7evEAgWehJLPP1vTx3tv2912QJevH8X u1UnTaLBfSGx/fNbXKSDZU4GcHbrFhW6+wnxfG2wqRXwGavHZZ/C1KJLxPNdQe3t I1Xz3/a3O3NA+A== -----END CERTIFICATE-----Generated at Mon May 6 17:56:33 2024 by rpki-client on console-fra.rpki-client.org