$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft File: r16T-QI1TOSAS0ywSc9osg92rrI.mft (raw, json) Hash identifier: 06KHyasumtU9qQhK9z4S8jlHzKWhIcZBpTQ8TPV8eiM= Subject key identifier: 9D:F6:CB:2A:D8:91:C2:07:B1:49:D8:F6:25:9F:78:B3:D8:14:94:38 Authority key identifier: AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2 Certificate issuer: /CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2 Certificate serial: 01906372730EF390279674DB3C002F4C0AD0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft Manifest number: 0E79 Signing time: Sat 29 Jun 2024 10:02:43 +0000 Manifest this update: Sat 29 Jun 2024 10:02:43 +0000 Manifest next update: Sun 30 Jun 2024 10:02:43 +0000 Files and hashes: 1: 1_AkT0bvVx9UiB4y3dlKK090pOs.roa (hash: /daT1S++9NKgfPddHHsT9eRe5VcAYewZrFL9QaJfUK8=) 2: 1hB8-5SbBQp9uBMjkAko4UTFi2I.roa (hash: ySNhSFK285jz5BuwzJBv3vYAkMABZ7Ua2Muah/SQ+F4=) 3: 6jWomrJ49DEFmWyqqSdMFgALuuE.roa (hash: fCibN18cnCR1G+0w5qFDsXYL0B69kGwIzyRHcg+Vuzk=) 4: 9ajk4C0pzz7yg9W0Aq8P1ySxK8g.roa (hash: yrHMfMl0cV9//UA5WgUOsmD+HjwatvUMH3SNL5LUKiY=) 5: HrZRkIw9Cw56hUTKFYybs9RW430.roa (hash: iC7tcdnPk6bzATuw3NTk04gIAAY3kcEtt/NkTmoc89g=) 6: P_PSQT1ij1L8WEHykThVUOhnI9Y.roa (hash: RHXufzIIIbDV6+9nQ1JY8xrZwFYV2+CJDZs7Y/cHcUM=) 7: WGuCa9f-OjB8H_HZWE-pFXYqhUM.roa (hash: 4APQzssQdjq6Aixe35wXExouwvhkjWPtXb/dN+Rq4kE=) 8: ZN_ALgSg4qp73tZq3AThdrV1Gac.roa (hash: 1hWkRXVIAugEIgAL163hs40yfJzxwEA1auDe/ULuwF0=) 9: ZW72xB-w1tVcBy76S89IZpycl2k.roa (hash: bhjjT7T2SeifLeUDfroIKPOsVwXyhFWWxrl1zPVndR4=) 10: aOQKyFiKJ0TSz0BAtgFhQMfqzE0.roa (hash: v/aGXNBxLJCibQvgVcVkN7DxkAUlN9cI50+V/ryNWEU=) 11: d8MkI-JgmqlNjYBrJTKxabyb7cE.roa (hash: NDfx6cpmrnph4JTxGCavkW5ySGaUR1hhff4UkN+/xR8=) 12: evvEv3Mx0hzGYC0q_FD_47GWTKY.roa (hash: 9SOP/tWDP3qEJ/fMNKMu5H5HBnUEGmkzFCny6T6WPeA=) 13: hrrDqXEePBsnhqpzPraI0DtJqC0.roa (hash: UeV3Er2CPUGu1ZKOf24Z7WPEv761KUbseJcvx3PMf6I=) 14: r16T-QI1TOSAS0ywSc9osg92rrI.crl (hash: U01lmWOdEk5D/PyiIVct2puWraIGcbTUBYGuqaytWBQ=) 15: zBfwc67C2gcCEJfkCXZ9GVpkpsU.roa (hash: Z/GWZy0VgB6+jNeO62y33o7X5zFIj6J4Q4p2bJ7HUNQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 30 Jun 2024 10:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:90:63:72:73:0e:f3:90:27:96:74:db:3c:00:2f:4c:0a:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2 Validity Not Before: Jun 29 10:02:43 2024 GMT Not After : Jun 30 10:02:43 2024 GMT Subject: CN=9df6cb2ad891c207b149d8f6259f78b3d8149438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:18:d1:64:74:88:3b:48:01:db:8e:c2:e5:df: 0d:db:a5:02:93:33:23:29:ee:55:e8:27:80:2f:f1: 24:2c:bc:ab:24:31:2a:59:c2:2f:53:f0:b0:5b:87: 5d:5a:84:e8:aa:6e:da:72:19:ef:c3:76:87:01:7d: 03:d7:c1:75:75:e3:5a:6f:ec:58:1a:d6:8a:e6:fd: 6d:04:06:63:03:21:85:f6:49:2e:70:ed:10:6d:3e: e9:4c:d4:f0:39:75:9b:c7:5d:f1:ba:a1:e1:be:7e: 76:c2:cb:ab:fd:9e:33:dd:17:03:7f:fd:fc:b8:69: 82:0e:c9:56:41:f1:17:7c:e3:b6:86:1b:67:87:81: 7f:3a:72:ef:a5:33:57:70:d7:63:fa:be:6b:a0:4c: 5b:62:92:07:12:5f:62:62:52:8a:66:e3:f3:64:d3: 1e:fd:66:5f:22:00:b6:e7:9c:b4:fe:2e:ba:86:08: 01:72:08:ac:0c:62:46:d7:7e:84:ec:a6:b6:03:7f: 7b:82:1a:e4:59:13:83:27:cd:92:e5:55:46:cf:ee: d9:19:fd:d6:73:f3:ec:e0:44:eb:b5:15:15:b2:46: 6a:d7:90:34:8d:e9:4f:94:86:3b:e2:bf:d3:4b:65: 37:b4:38:5d:b8:8e:c5:1b:d7:8d:65:91:61:8f:da: ed:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:F6:CB:2A:D8:91:C2:07:B1:49:D8:F6:25:9F:78:B3:D8:14:94:38 X509v3 Authority Key Identifier: keyid:AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:0d:44:30:dd:11:7f:a2:24:57:10:20:2a:3c:09:fd:1c:72: 27:bb:90:6a:40:83:f6:08:61:46:21:ac:16:40:c5:34:65:e1: 16:a2:09:e3:6a:f1:05:66:a6:a2:d9:d4:1a:af:e6:e8:59:08: 41:d8:75:01:7f:1b:ff:c7:b7:2c:3d:7a:f2:b2:6a:59:77:bf: 5c:8d:a1:fd:1b:31:2c:9e:3d:76:83:6c:3f:5a:c0:47:d1:69: 78:52:71:9f:9b:49:78:34:0c:46:53:3e:d6:a9:4a:79:c5:65: 96:f6:d6:12:db:f7:43:dc:d6:43:66:d5:d4:bb:e9:a6:83:b5: 3e:8e:26:8f:7f:b5:f1:71:8c:a0:b0:e6:42:8c:03:cc:40:3f: 1b:08:32:d0:43:cd:05:78:6e:df:bc:7e:94:6f:a0:42:89:87: ab:f6:4d:bf:48:76:ba:69:06:0d:aa:72:8a:75:80:26:c3:ae: ca:d9:23:56:25:d6:e7:22:02:8b:cc:63:23:59:6f:24:96:a2: 39:91:6b:1f:05:5f:f7:8d:18:b1:95:21:a8:95:7d:46:13:db: 49:80:7f:17:e8:cd:77:87:53:87:cd:e8:35:48:ce:9f:71:cd: f2:27:61:8d:1d:58:64:f3:58:a6:76:e5:91:26:a8:3f:3f:6c: 2b:38:e8:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZBjcnMO85AnlnTbPAAvTArQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNWU5M2Y5MDIzNTRjZTQ4MDRiNGNiMDQ5Y2Y2OGIyMGY3 NmFlYjIwHhcNMjQwNjI5MTAwMjQzWhcNMjQwNjMwMTAwMjQzWjAzMTEwLwYDVQQD Eyg5ZGY2Y2IyYWQ4OTFjMjA3YjE0OWQ4ZjYyNTlmNzhiM2Q4MTQ5NDM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRjRZHSIO0gB247C5d8N26UCkzMj Ke5V6CeAL/EkLLyrJDEqWcIvU/CwW4ddWoToqm7achnvw3aHAX0D18F1deNab+xY GtaK5v1tBAZjAyGF9kkucO0QbT7pTNTwOXWbx13xuqHhvn52wsur/Z4z3RcDf/38 uGmCDslWQfEXfOO2hhtnh4F/OnLvpTNXcNdj+r5roExbYpIHEl9iYlKKZuPzZNMe /WZfIgC255y0/i66hggBcgisDGJG136E7Ka2A397ghrkWRODJ82S5VVGz+7ZGf3W c/Ps4ETrtRUVskZq15A0jelPlIY74r/TS2U3tDhduI7FG9eNZZFhj9rtKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ32yyrYkcIHsUnY9iWfeLPYFJQ4MB8GA1UdIwQY MBaAFK9ek/kCNUzkgEtMsEnPaLIPdq6yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWIt N2UwNWFkMDE5MGNlLzEvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWItN2UwNWFkMDE5MGNl LzEvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYg1EMN0R f6IkVxAgKjwJ/RxyJ7uQakCD9ghhRiGsFkDFNGXhFqIJ42rxBWamotnUGq/m6FkI Qdh1AX8b/8e3LD168rJqWXe/XI2h/RsxLJ49doNsP1rAR9FpeFJxn5tJeDQMRlM+ 1qlKecVllvbWEtv3Q9zWQ2bV1LvppoO1Po4mj3+18XGMoLDmQowDzEA/Gwgy0EPN BXhu37x+lG+gQomHq/ZNv0h2umkGDapyinWAJsOuytkjViXW5yICi8xjI1lvJJai OZFrHwVf940YsZUhqJV9RhPbSYB/F+jNd4dTh83oNUjOn3HN8idhjR1YZPNYpnbl kSaoPz9sKzjosA== -----END CERTIFICATE-----Generated at Sat Jun 29 13:05:50 2024 by rpki-client on console-fra.rpki-client.org