$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/7z5xuWmS2j2RyI3XTvQfm5W5SFs.mft File: 7z5xuWmS2j2RyI3XTvQfm5W5SFs.mft (raw, json) Hash identifier: 6g922WNN/h3i41DTNQkfDI/B6oojKRpoXJWFg1jwzCo= Subject key identifier: B2:46:B3:1D:9B:65:77:9C:94:29:4D:B3:A9:5B:20:05:25:EB:F5:B6 Authority key identifier: EF:3E:71:B9:69:92:DA:3D:91:C8:8D:D7:4E:F4:1F:9B:95:B9:48:5B Certificate issuer: /CN=ef3e71b96992da3d91c88dd74ef41f9b95b9485b Certificate serial: 018F51A4A3993CE31D4D99E8B678606934DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7z5xuWmS2j2RyI3XTvQfm5W5SFs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/7z5xuWmS2j2RyI3XTvQfm5W5SFs.mft Manifest number: 0427 Signing time: Tue 07 May 2024 06:01:35 +0000 Manifest this update: Tue 07 May 2024 06:01:35 +0000 Manifest next update: Wed 08 May 2024 06:01:35 +0000 Files and hashes: 1: 7z5xuWmS2j2RyI3XTvQfm5W5SFs.crl (hash: SuYiYZ5rj64tGK6AVoYiuMoJNByFr3mRf1xmBPEPvOw=) 2: B222TXoLR44j3Cryk6TI_gUMOtY.roa (hash: LcruqmMh4SUo4pQZSRt/PKJoh3q1uxHsoQxfVJOrS8A=) 3: DkTQgGku3eibDN_9nsW6d4P2wmc.roa (hash: VrTm/PxCASRgBIogtHy8uYBihY+kVdmGReGg0Z/94Ss=) 4: FbYxfY8iQ_Eqh0BaXohX9ucRgJc.roa (hash: s+/HwBQ+DfJx0sZSDXNdKaTTZN5wUXkWlQruG4ShePA=) 5: HUZ1Rxgak4zqOL57NxPtlHsXOys.roa (hash: hWHEr9kq3o34FQsOVgtX93VbCQrL7mOek5IDcVXD5EM=) 6: Mwo4_iNwaab4yIkqCp7QX9lO6Dw.roa (hash: MF55q7N/kiR7GWvraIgfdsFW/aiTTP874a+fT33yg4A=) 7: OxogmYXvSNnmWM5YD1Zto52n55o.roa (hash: YMK+notRhKC9uI2opqK5onyFP5bQ++q5XGZ8a7uj5Yw=) 8: V7HXQqWFA7ELCCjcF8F-ETJ-Qhs.roa (hash: hlNE8zoK4zsFybcm9Af6CTkqk3XISsAW/+adBm++sgA=) 9: VIH4VAl3xzBjKLR2OTc3HqGypjo.roa (hash: IbXGilXZdBRoESDEIL8EBQnYFA0J+4eAmmjnCrVHFfs=) 10: XY4wLAl0VlNWCyWnMdB-bJghatY.roa (hash: H6myDcAyI2n4SuSsbFdQL4R5Qw5wOr4KH4gMspkrKJg=) 11: Y2lyuNqV2IT1_67hf8txy-S9VyU.roa (hash: DwMzazsiKYvskcCu+zoMwxZyCErDKkg/fzXnGiAR8MU=) 12: atcxNQOmRrWRBt1fCUGsMMQJ73Y.roa (hash: Rmvuh+O5rrdCfEUzfeTIw/nAFYNg7OcWElkpW61ch0I=) 13: gecQoULyqJIkK-a11R8vhPRS8gE.roa (hash: 629vDUd4lmQnhQ8F4IsdcWyFGC6sfO5oyHZqBQIFVoE=) 14: j5nLOE8KyUujUsIkU1jo1-fekFg.roa (hash: 4GpHRzg33ns9EB9uawXmKj1NWsSk1F2vn7VnZwRK1Sk=) 15: wyHY7EVURTLBfZQxdQsbkp-4nvg.roa (hash: qFKlBbMNgM7Eg3ULutLE9175zanUtRyD0hxwK1Ye1nU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/7z5xuWmS2j2RyI3XTvQfm5W5SFs.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/7z5xuWmS2j2RyI3XTvQfm5W5SFs.mft rsync://rpki.ripe.net/repository/DEFAULT/7z5xuWmS2j2RyI3XTvQfm5W5SFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 08 May 2024 05:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:51:a4:a3:99:3c:e3:1d:4d:99:e8:b6:78:60:69:34:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef3e71b96992da3d91c88dd74ef41f9b95b9485b Validity Not Before: May 7 06:01:35 2024 GMT Not After : May 8 06:01:35 2024 GMT Subject: CN=b246b31d9b65779c94294db3a95b200525ebf5b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ed:45:00:3f:ea:e7:7e:07:ee:73:76:3c:b1: 01:97:27:93:ae:ad:bc:5f:16:8e:2c:52:eb:12:0d: 49:4a:34:b1:51:1b:28:fb:a2:6d:e0:ea:be:fb:97: 15:c8:51:ae:03:63:b5:5d:da:e7:53:4f:44:03:ee: 6f:94:8e:2e:37:3e:27:4f:40:1c:72:43:da:7d:cd: dd:45:ed:cf:ff:4d:b6:4b:da:63:c3:96:80:ed:26: 75:02:5b:1c:43:ff:43:c0:c2:83:22:4b:ec:95:9c: 3e:67:9b:10:aa:53:07:f5:9e:f2:74:a5:41:bb:c1: d9:d0:cc:f3:78:f9:d5:61:2a:aa:20:1c:6c:0c:54: a3:d0:cf:e4:37:47:90:49:3c:23:87:d5:6b:b1:79: c0:86:a7:5a:33:20:c6:92:ec:58:ad:a4:93:9f:a4: 62:5b:ce:87:ce:5d:27:94:30:9c:62:2d:d8:25:a2: cf:0b:1c:95:71:ed:b0:e1:49:96:cf:87:1b:4b:e1: 14:9f:31:86:fb:b9:95:0b:4f:d2:b3:d7:ff:90:2e: e9:a2:ef:7f:29:4f:c5:d2:00:fd:5c:61:a9:a3:fb: 87:bf:38:45:e4:f5:7d:1d:2a:a2:18:f2:d6:94:c7: d1:34:94:31:5a:75:79:bf:b7:79:61:f9:b0:7b:08: e0:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:46:B3:1D:9B:65:77:9C:94:29:4D:B3:A9:5B:20:05:25:EB:F5:B6 X509v3 Authority Key Identifier: keyid:EF:3E:71:B9:69:92:DA:3D:91:C8:8D:D7:4E:F4:1F:9B:95:B9:48:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7z5xuWmS2j2RyI3XTvQfm5W5SFs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/7z5xuWmS2j2RyI3XTvQfm5W5SFs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/7z5xuWmS2j2RyI3XTvQfm5W5SFs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:03:af:67:02:cf:35:3d:23:09:a6:61:ba:eb:35:c8:69:fc: 76:b8:76:e0:5f:1d:3c:fd:f1:0d:04:8f:e6:60:81:02:16:f4: 64:cd:9b:bc:c2:e2:35:71:7c:f1:c2:bc:3b:11:5b:fe:0f:e7: e4:c8:6f:9d:dd:06:1e:78:5c:ba:98:b7:51:aa:d1:f6:07:77: 4a:7f:54:09:b1:d2:ec:fb:3e:e8:24:0a:cf:73:a7:30:e0:bd: 65:92:b2:3a:fb:67:bc:56:8d:61:23:1a:92:6f:36:0e:93:5d: 60:b3:90:32:9c:18:81:88:05:7d:b6:aa:23:d2:ce:a1:3e:8f: 04:16:2a:ab:47:f7:b7:b8:c3:69:50:c3:14:08:ba:00:01:5c: 55:b4:8b:7c:c2:ba:3a:97:ef:2e:d6:5c:49:ab:37:91:59:fc: e1:7c:8d:f0:2b:95:99:8e:d1:38:78:96:93:59:5c:8f:b3:b2: 15:37:69:11:d4:04:09:20:5c:9c:88:a4:76:05:03:46:fe:17: 0d:13:a2:cb:1e:a6:33:94:90:3f:a5:15:be:d2:28:e6:fc:09: 66:b1:e4:43:de:05:ee:aa:ca:17:dc:14:92:4f:d2:ab:b6:8b: 41:98:c3:0c:22:fb:57:6f:ea:73:93:54:eb:2c:4e:8a:c8:0a: 0f:01:dd:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY9RpKOZPOMdTZnotnhgaTTdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmM2U3MWI5Njk5MmRhM2Q5MWM4OGRkNzRlZjQxZjliOTVi OTQ4NWIwHhcNMjQwNTA3MDYwMTM1WhcNMjQwNTA4MDYwMTM1WjAzMTEwLwYDVQQD EyhiMjQ2YjMxZDliNjU3NzljOTQyOTRkYjNhOTViMjAwNTI1ZWJmNWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnu1FAD/q534H7nN2PLEBlyeTrq28 XxaOLFLrEg1JSjSxURso+6Jt4Oq++5cVyFGuA2O1XdrnU09EA+5vlI4uNz4nT0Ac ckPafc3dRe3P/022S9pjw5aA7SZ1AlscQ/9DwMKDIkvslZw+Z5sQqlMH9Z7ydKVB u8HZ0MzzePnVYSqqIBxsDFSj0M/kN0eQSTwjh9VrsXnAhqdaMyDGkuxYraSTn6Ri W86Hzl0nlDCcYi3YJaLPCxyVce2w4UmWz4cbS+EUnzGG+7mVC0/Ss9f/kC7pou9/ KU/F0gD9XGGpo/uHvzhF5PV9HSqiGPLWlMfRNJQxWnV5v7d5YfmwewjguQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLJGsx2bZXeclClNs6lbIAUl6/W2MB8GA1UdIwQY MBaAFO8+cblpkto9kciN1070H5uVuUhbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3o1eHVXbVMyajJSeUkzWFR2UWZtNVc1U0ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9hZDRlNTctZDkwMS00NDg1LTk4ZDIt OTE5NmNlNDQ2NTI3LzEvN3o1eHVXbVMyajJSeUkzWFR2UWZtNVc1U0ZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9hZDRlNTctZDkwMS00NDg1LTk4ZDItOTE5NmNlNDQ2NTI3 LzEvN3o1eHVXbVMyajJSeUkzWFR2UWZtNVc1U0ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsAOvZwLP NT0jCaZhuus1yGn8drh24F8dPP3xDQSP5mCBAhb0ZM2bvMLiNXF88cK8OxFb/g/n 5Mhvnd0GHnhcupi3UarR9gd3Sn9UCbHS7Ps+6CQKz3OnMOC9ZZKyOvtnvFaNYSMa km82DpNdYLOQMpwYgYgFfbaqI9LOoT6PBBYqq0f3t7jDaVDDFAi6AAFcVbSLfMK6 OpfvLtZcSas3kVn84XyN8CuVmY7ROHiWk1lcj7OyFTdpEdQECSBcnIikdgUDRv4X DROiyx6mM5SQP6UVvtIo5vwJZrHkQ94F7qrKF9wUkk/Sq7aLQZjDDCL7V2/qc5NU 6yxOisgKDwHdHQ== -----END CERTIFICATE-----Generated at Tue May 7 09:36:06 2024 by rpki-client on console-ams.rpki-client.org