$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft File: cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft (raw, json) Hash identifier: KRCUmApg/x8T9zdMr/hG/BhwEaLylloK/fj8IPiqBMY= Subject key identifier: 97:95:5C:A9:EC:40:3A:D1:BF:52:33:AB:A4:C0:4B:A8:4F:8B:23:D5 Authority key identifier: 72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA Certificate issuer: /CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea Certificate serial: 019040E490E7E954086C594B2B060FAEC79B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft Manifest number: 11DD Signing time: Sat 22 Jun 2024 17:00:39 +0000 Manifest this update: Sat 22 Jun 2024 17:00:39 +0000 Manifest next update: Sun 23 Jun 2024 17:00:39 +0000 Files and hashes: 1: 1-14pjlOSMBI4tpfAmFvs81RoOOg.roa (hash: TWarz7B73WqcBvIaq1I404XPgnwfd2rTFA2q5w6ttQU=) 2: 7_o-Ps49AFxd19e4Tb0RK-D9FpI.roa (hash: azFI7yHe77ylqrtMPWLCPYgb2dyEuPVl8U9Uz66ZVtM=) 3: 96m76A1_RL0BHG7hT6iiSV27lNA.roa (hash: 5rw2kI0f8MPXCS7g1A9vmZ0CSX4aKDAhvrIbv8I2loI=) 4: 9Eq955-NETqLd0ESzaaEHSY9EAE.roa (hash: UbL+xeWrQF6ihNLH0GAN5oALAZPJPoBhxV9UxRSbNX0=) 5: 9K3pwy3cmW50uYEUGLyxI49Fq30.roa (hash: Jou0pXDiaekjQh4aamugTMK29O9svAZjD4ibu3k6aUk=) 6: EooE3hyotGon_M0Vs68JbeZMpRc.roa (hash: gLD14QGLCQT/iDwTzk/eQZyyyKgtVZy9H+9DVvfoRsQ=) 7: Kr6j2sg340Kd_qvkpM1D3NjKYmE.roa (hash: DjAp6/yHjMTL7BRZnKL579NxRFUfnaY1pgWa6HqtUus=) 8: M2krjNDysXiJ9Kes_fGHgQSAM8o.roa (hash: ofsenekqw5pWlj6OquITw6/3qxK73grtzB8WwDLVoO0=) 9: MrByW1rYsqxgK2Qy8-jt7p4865k.roa (hash: /VHWBlDjRmReXpZ3Pm93E6GxWy/T1ppHgSMmEE67LzU=) 10: TZnx089qlfWGV9Mqedc8xl-cgqo.roa (hash: nyR2kXo2NivVX1L0dq/C2rEQ+DYKLDBjSmpXVRm2fso=) 11: VgfEZYNGg6P0Tzs6a9g1BZRGOlM.roa (hash: PTUtnVF2bf6ScVYMju/XbvaD1r9XirTNcvy+oAK4Ldg=) 12: _c66_n3KZ7jZRl_C2RRIyQOI1Kg.roa (hash: bNlEqz/5ZZJqPS5KxieXLp7nlinKJuDhlihfKGCpbsg=) 13: c0qhsqxIIVXMC2JfMCsS6U5GtlY.roa (hash: noIMiSXhmuWCNw2x3e1Va4TM7PiX5JAVWJbvg3cY0Mo=) 14: cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl (hash: 96dBNZ2WE76uD1BoZGTghJsLkLZzeJxX5rCxSHRRjJs=) 15: g_Qw6EiBfGr5yvEpsRkQz6HQHJo.roa (hash: aV8BRhSR2TimtIbBfqqYgkjBsVqfUU4zlHd2P13en7U=) 16: pq6liQynwslUvBHrJ3LFKPcvG2A.roa (hash: sMuJtb6N8AEvoyKhaMe4yE153kLX0jhrdHivMrBcDpo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Jun 2024 17:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:90:40:e4:90:e7:e9:54:08:6c:59:4b:2b:06:0f:ae:c7:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea Validity Not Before: Jun 22 17:00:39 2024 GMT Not After : Jun 23 17:00:39 2024 GMT Subject: CN=97955ca9ec403ad1bf5233aba4c04ba84f8b23d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:97:27:d9:ec:8e:0a:f5:3e:79:a5:a4:3b:f3: ba:b3:a0:88:04:bf:19:25:ea:3b:f9:2d:5c:42:a9: 3e:e4:ba:00:6f:94:e4:ec:66:df:b3:c0:52:42:d9: e9:b5:82:97:40:b3:0d:cb:f4:70:53:cc:b3:7b:7f: c7:f3:b6:2f:bd:a8:69:73:5f:4b:75:d1:53:3e:85: 13:cf:bb:ff:9f:a6:39:e1:1b:44:96:bb:6c:0f:2f: 8b:fe:da:12:0a:8f:c8:b3:b9:f3:62:29:10:9f:67: 6a:5b:84:d7:94:f7:bb:6e:1d:b7:14:f0:c1:ad:6a: 48:42:2e:c6:a2:18:e1:01:75:87:ed:1d:6d:9f:c5: 43:01:ea:f3:bc:4d:36:e9:be:96:55:1c:05:8a:c9: 98:64:96:e7:c1:ee:ca:e9:5e:e1:ba:19:18:cb:30: fc:5d:b4:f1:75:73:92:ea:c6:b5:13:30:65:15:43: 12:93:fb:d7:fc:54:9a:92:66:72:a0:3f:49:1b:16: 3c:04:0e:77:61:72:2e:46:c2:f4:97:89:10:60:65: 92:f9:36:71:01:6d:3c:6f:04:d7:1b:39:dd:99:35: d2:fd:fb:3d:be:dc:67:96:6c:6f:84:58:93:3b:ab: c2:66:21:fb:4f:a0:4b:54:02:d4:d8:ea:45:16:ef: 88:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:95:5C:A9:EC:40:3A:D1:BF:52:33:AB:A4:C0:4B:A8:4F:8B:23:D5 X509v3 Authority Key Identifier: keyid:72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:8a:d0:29:e0:1c:71:a7:23:89:18:33:9a:aa:1a:51:b2:27: c7:4c:56:5e:73:25:f2:d5:95:4b:e2:9a:49:05:98:86:db:cf: 92:d3:cd:48:3a:3d:1a:68:f9:63:a5:dc:aa:46:e1:c9:69:97: 85:e9:31:3a:5e:a4:d3:2f:45:99:98:ab:0d:e0:94:a0:6c:5c: e8:01:1e:4e:c5:d6:17:c3:f0:3c:20:53:a3:f6:b2:a6:e0:ce: 86:68:8a:ce:30:21:28:54:5d:8c:62:62:82:77:83:18:b7:db: 97:8a:7d:35:b9:d3:6d:ab:75:e3:a4:d8:5e:5f:38:2c:ea:1c: 4e:96:20:9e:0b:fb:f4:20:75:3b:d8:04:0a:46:f3:7b:11:72: 93:24:1a:16:76:80:eb:a1:64:a2:c1:b5:0b:aa:c0:92:18:4a: 18:e2:f1:ce:85:6d:06:e1:8e:f6:f7:19:dd:df:56:a3:8c:61: b3:b1:d1:1d:cd:fb:79:3d:56:14:f8:7f:38:e0:bc:8a:81:25: bc:d2:26:13:a8:4e:15:f8:da:f1:f9:82:4d:43:20:b0:d6:7a: 43:06:26:55:97:75:70:46:ab:16:67:c9:e5:b9:95:99:f8:87: 23:5f:a5:fb:10:00:49:36:bf:58:a4:b6:6a:ea:0c:38:a6:f0: f5:31:d6:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZBA5JDn6VQIbFlLKwYPrsebMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZWQyZmJiNzIxM2ZiZjMyYWQ0YzA4N2Y4YjBiMjJjZWNl ZjRmZWEwHhcNMjQwNjIyMTcwMDM5WhcNMjQwNjIzMTcwMDM5WjAzMTEwLwYDVQQD Eyg5Nzk1NWNhOWVjNDAzYWQxYmY1MjMzYWJhNGMwNGJhODRmOGIyM2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Jcn2eyOCvU+eaWkO/O6s6CIBL8Z Jeo7+S1cQqk+5LoAb5Tk7Gbfs8BSQtnptYKXQLMNy/RwU8yze3/H87Yvvahpc19L ddFTPoUTz7v/n6Y54RtElrtsDy+L/toSCo/Is7nzYikQn2dqW4TXlPe7bh23FPDB rWpIQi7GohjhAXWH7R1tn8VDAerzvE026b6WVRwFismYZJbnwe7K6V7huhkYyzD8 XbTxdXOS6sa1EzBlFUMSk/vX/FSakmZyoD9JGxY8BA53YXIuRsL0l4kQYGWS+TZx AW08bwTXGzndmTXS/fs9vtxnlmxvhFiTO6vCZiH7T6BLVALU2OpFFu+IpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJeVXKnsQDrRv1Izq6TAS6hPiyPVMB8GA1UdIwQY MBaAFHLtL7tyE/vzKtTAh/iwsizs70/qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9lNWE4OTItMjNmNS00OWZhLWI2YTkt YTY1MjMzYjNlOTc1LzEvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9lNWE4OTItMjNmNS00OWZhLWI2YTktYTY1MjMzYjNlOTc1 LzEvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMYrQKeAc cacjiRgzmqoaUbInx0xWXnMl8tWVS+KaSQWYhtvPktPNSDo9Gmj5Y6XcqkbhyWmX hekxOl6k0y9FmZirDeCUoGxc6AEeTsXWF8PwPCBTo/aypuDOhmiKzjAhKFRdjGJi gneDGLfbl4p9NbnTbat146TYXl84LOocTpYgngv79CB1O9gECkbzexFykyQaFnaA 66FkosG1C6rAkhhKGOLxzoVtBuGO9vcZ3d9Wo4xhs7HRHc37eT1WFPh/OOC8ioEl vNImE6hOFfja8fmCTUMgsNZ6QwYmVZd1cEarFmfJ5bmVmfiHI1+l+xAASTa/WKS2 auoMOKbw9THWUw== -----END CERTIFICATE-----Generated at Sun Jun 23 01:23:18 2024 by rpki-client on console-ams.rpki-client.org