$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.mft File: JgsrxFR3yB13TaoMKKtEt3S6CSA.mft (raw, json) Hash identifier: k5S9mPkliXLlm+s/jbibgVz7PnqhYYY++btxwSgQrog= Subject key identifier: AE:D5:67:B6:3D:5E:78:36:15:4D:09:77:78:46:91:AF:9B:48:93:9C Authority key identifier: 26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20 Certificate issuer: /CN=260b2bc45477c81d774daa0c28ab44b774ba0920 Certificate serial: 018F88C8CE78BF0E2AA0AFA73945BBBF5C1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.mft Manifest number: 08C6 Signing time: Fri 17 May 2024 23:00:12 +0000 Manifest this update: Fri 17 May 2024 23:00:12 +0000 Manifest next update: Sat 18 May 2024 23:00:12 +0000 Files and hashes: 1: 1-TB_j0XTMB9N0FM1hryU6gi8djE.roa (hash: etXaIZ9FD/XWnY80noz+FlqlWZ8JNfqiNNqrxt+DFe8=) 2: 2M70nxbLqnt65PB66pYaB-R_6pY.roa (hash: avqN05agZf1q8s+MNe8lVvICJ2NlsujNu30WMXU9n74=) 3: 8KK2bVrwOz5QjayjpcCPMbGvNXI.roa (hash: wS/OrOYhu0IdkxZfmrs17kPeAyZd4nz+gOLzfr45WaA=) 4: 8MdZ3sAQizXBtzdIZ44TY_M7ECM.roa (hash: L8gClQQ3tK0fOobtqx44/mw3G7bzAYgaU3UQZzgz3Zs=) 5: FQlIJ95hpqq7zfGsngorGkgZHVA.roa (hash: RSWatvpXyCfejKVGf19b7tPkPVbmKTtku0IsDVYjQHo=) 6: JgsrxFR3yB13TaoMKKtEt3S6CSA.crl (hash: MCHjprIjXaToO1NXP7JWzqYJl5C6XGWKk5/Cx2CRqtE=) 7: JxZYPr7lGUDd3vFvHu8r0x1Dg9c.roa (hash: hjO7lKqYTMfZ0IJOrjs96fVBK3999eAvC5ycKRIVY5w=) 8: KJLWF70kw3Cclh5hBW6nE8gfgEA.roa (hash: JyIAF129Q/gPnFWudrsbsGoR/x6fPAS5S8UlDRGoGkc=) 9: Mz_yYWbrzwN5viZ7assqsgezn64.roa (hash: oABY8Va7v1fXpeJtlylNsQHNNQrhMSh/OLXSi746x4o=) 10: UjZApb2beSzaBqVv59x2QzvDrC8.roa (hash: cnhd45Xj75u/s5T/ytEaE+x9sD1rT/HCGPPV3IvXIb8=) 11: ir_5RKa0uc4aYUual04MEfLT0_c.roa (hash: k8ZlKRN3SO6VfBS0hyskxsgtMQiANGH3scY14UqVLt8=) 12: sA4OyD7S4rElTK7wEZRQl52YCIY.roa (hash: C8U/Onx8ilxOoTJVkuISHrtfDDMmBg3ygteUtesUKJk=) 13: v-P00hCxPjeZLilp45ktkGiEltw.roa (hash: 1MHyuLKDFlE6DDyQ6vjv/5YQlLy9070QzzjnPYOKYQ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.mft rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 May 2024 17:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:88:c8:ce:78:bf:0e:2a:a0:af:a7:39:45:bb:bf:5c:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=260b2bc45477c81d774daa0c28ab44b774ba0920 Validity Not Before: May 17 23:00:12 2024 GMT Not After : May 18 23:00:12 2024 GMT Subject: CN=aed567b63d5e7836154d0977784691af9b48939c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:46:cd:14:1f:66:11:45:a8:82:c4:af:36:e8: 6b:af:2d:0e:6f:14:4d:ee:8b:c5:33:c5:64:ac:1e: 5e:8e:d3:af:b6:e2:17:ec:3a:81:46:c4:51:e5:f8: af:ba:e8:30:ec:99:ea:ff:c6:29:64:86:f0:84:e3: 47:15:c3:f1:d9:c1:a4:80:a3:67:ec:57:60:9d:3b: 48:d6:42:14:3c:ea:63:75:ce:82:99:b5:0d:02:b0: 24:7c:98:03:85:f3:e6:97:ae:96:6d:bd:84:84:fa: 7f:57:a1:ab:34:9e:4c:92:cf:44:23:eb:92:20:78: af:20:6b:0e:f8:db:9e:55:1d:81:0d:60:b6:0b:c0: 19:20:2e:c8:2d:ed:a9:c0:18:66:3e:1d:ca:36:97: 11:ca:3f:2e:f5:42:ef:3d:34:40:42:9b:4b:e0:37: a4:46:6f:73:1d:e3:6b:fd:6f:cd:b3:1e:1d:8e:6a: a6:29:b9:b1:27:9d:34:b9:2f:6f:9b:13:51:d8:73: 26:6b:04:8f:ba:b9:3d:b1:54:c2:15:d8:b3:6e:a7: 9d:28:04:62:35:1b:98:17:ed:5a:c0:52:54:53:ec: 70:b1:24:60:9e:5f:b0:aa:7d:b0:f1:3a:e2:ae:79: 5d:62:36:ba:87:d5:09:2b:6c:36:09:bb:1c:ce:01: 90:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:D5:67:B6:3D:5E:78:36:15:4D:09:77:78:46:91:AF:9B:48:93:9C X509v3 Authority Key Identifier: keyid:26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:2b:3f:e7:a9:16:42:d5:8f:85:72:bd:67:0f:9e:0c:18:b2: d5:3f:cd:12:b9:52:c4:88:5e:8c:f9:40:7d:d8:e3:61:c2:d6: c4:15:cd:2e:96:c5:d9:22:5d:1c:ce:b3:34:e5:e0:4e:21:63: 40:27:fe:de:30:18:8c:98:8e:0c:d6:d6:93:5a:f7:fa:55:e3: a8:f7:9d:51:6b:54:7b:f7:da:ea:1b:e8:73:41:be:3e:9a:ca: 96:4f:01:d5:76:98:cb:c3:c3:33:96:30:b9:22:f1:d1:a2:38: 72:f1:c8:c9:25:de:70:cb:e1:92:f8:f7:4e:6b:53:60:64:1d: 64:b5:df:4d:5e:e9:14:15:f9:5f:be:ae:a0:16:dc:cd:bd:b9: 42:47:f2:77:76:d9:eb:7c:d5:7d:5c:0e:5b:36:7b:87:c0:c3: 74:6d:7b:a2:71:74:7e:1a:99:67:6b:da:fd:a8:05:01:13:9f: 40:e9:25:3b:1e:10:98:95:ce:df:9f:b5:5f:ac:a7:5e:89:ff: ca:2c:41:1e:a8:e1:ab:19:4c:47:47:f1:b5:a6:1f:f2:f8:75: 66:be:bd:44:40:ea:85:89:0f:4d:1b:75:13:60:c4:aa:6a:0c: 16:04:c5:fd:1e:2a:e5:4a:59:6e:42:00:6d:ac:90:fc:f2:1f: ca:da:04:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY+IyM54vw4qoK+nOUW7v1wbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2MGIyYmM0NTQ3N2M4MWQ3NzRkYWEwYzI4YWI0NGI3NzRi YTA5MjAwHhcNMjQwNTE3MjMwMDEyWhcNMjQwNTE4MjMwMDEyWjAzMTEwLwYDVQQD EyhhZWQ1NjdiNjNkNWU3ODM2MTU0ZDA5Nzc3ODQ2OTFhZjliNDg5MzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukbNFB9mEUWogsSvNuhrry0ObxRN 7ovFM8VkrB5ejtOvtuIX7DqBRsRR5fivuugw7Jnq/8YpZIbwhONHFcPx2cGkgKNn 7FdgnTtI1kIUPOpjdc6CmbUNArAkfJgDhfPml66Wbb2EhPp/V6GrNJ5Mks9EI+uS IHivIGsO+NueVR2BDWC2C8AZIC7ILe2pwBhmPh3KNpcRyj8u9ULvPTRAQptL4Dek Rm9zHeNr/W/Nsx4djmqmKbmxJ500uS9vmxNR2HMmawSPurk9sVTCFdizbqedKARi NRuYF+1awFJUU+xwsSRgnl+wqn2w8TrirnldYja6h9UJK2w2CbsczgGQywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK7VZ7Y9Xng2FU0Jd3hGka+bSJOcMB8GA1UdIwQY MBaAFCYLK8RUd8gdd02qDCirRLd0ugkgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmdzcnhGUjN5QjEzVGFvTUtLdEV0M1M2Q1NBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83YjEyMDUtMzQ1MC00ZTkwLThiMTQt MTdlNjZjMWZkM2QxLzEvSmdzcnhGUjN5QjEzVGFvTUtLdEV0M1M2Q1NBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS83YjEyMDUtMzQ1MC00ZTkwLThiMTQtMTdlNjZjMWZkM2Qx LzEvSmdzcnhGUjN5QjEzVGFvTUtLdEV0M1M2Q1NBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHSs/56kW QtWPhXK9Zw+eDBiy1T/NErlSxIhejPlAfdjjYcLWxBXNLpbF2SJdHM6zNOXgTiFj QCf+3jAYjJiODNbWk1r3+lXjqPedUWtUe/fa6hvoc0G+PprKlk8B1XaYy8PDM5Yw uSLx0aI4cvHIySXecMvhkvj3TmtTYGQdZLXfTV7pFBX5X76uoBbczb25Qkfyd3bZ 63zVfVwOWzZ7h8DDdG17onF0fhqZZ2va/agFAROfQOklOx4QmJXO35+1X6ynXon/ yixBHqjhqxlMR0fxtaYf8vh1Zr69REDqhYkPTRt1E2DEqmoMFgTF/R4q5UpZbkIA bayQ/PIfytoEmw== -----END CERTIFICATE-----Generated at Fri May 17 23:51:04 2024 by rpki-client on console-ams.rpki-client.org