$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft File: jzgYVUpRgI7vuCnsdGWjIi8nASM.mft (raw, json) Hash identifier: KZ7FldKbyYINLXcBOFD8Tq0Sncji5W8guqj0/MTPnR8= Subject key identifier: F1:FB:F6:65:0E:8E:8C:BE:CF:34:77:88:B2:38:B6:A6:94:21:2D:5B Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23 Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123 Certificate serial: 018F8892012FAEB8B52BE20D017838B0A684 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft Manifest number: 11A2 Signing time: Fri 17 May 2024 22:00:20 +0000 Manifest this update: Fri 17 May 2024 22:00:20 +0000 Manifest next update: Sat 18 May 2024 22:00:20 +0000 Files and hashes: 1: 0oRCZzlNIZV896yY3LghsghJfmI.roa (hash: zDbkjL/iXnyj8icji8uyJ0BGr/1vOUhWzdrTP0zFdhY=) 2: 2CA5-PHK6jnOrtDHSwaMrNi0Uwc.roa (hash: DdZ/XdOse5A2HHwE7cFr/Iia2GWI8P/y0efESY9qsQI=) 3: 2uE0i0gsYkcUjpe1IWcrvSb05rQ.roa (hash: ow/ZRhEErojxT8m4riywZNyxpObTHUo0iSJ1t79E3c0=) 4: 7y6h15TQCVxlEH4JV1IOzUbhvb0.roa (hash: 4vvm8JztqyzEz9c+pSRbcBTELxC78B+kH/Hb5jrYMjM=) 5: DcJ7YTFaCkfyk5IVHXQmbZ6g8Ck.roa (hash: MUqohQHc4SDXsbTIz2Ao9A6SAhrPCR/WOw8FmgoOVe8=) 6: IybHU6Pl_9YNg5jp9zbwWTg2qDw.roa (hash: XHsVhsr67U8Z+ikZKmise7OfFx0DUwhYTzhjSrJD9S0=) 7: JoGtyxA_J6l14gsAHfY38HzQemU.roa (hash: m9H986BH5wsvZs6hvCIdD4LldKOqCqUK6xndEnHpcsA=) 8: PPzH0O6Hmha59-lMmEmQUrt80p8.roa (hash: BFqWJPuqi3Ee440qz7PsnxKPPdjKCAdOUl04OF2d0tw=) 9: RbidflpIM5MKtdOdC6r2WvBYK7I.roa (hash: Ty9WluS4pd1/kO3u3vGVkcpARCYhAmoI22SY+r6yKnY=) 10: RsV9Lmn9X03tMTdOJayM7n8GOIU.roa (hash: f0BBAwxYMbpGjfOAZX61Ihc95Lu3ra5BRRNFjyDWnC0=) 11: YrQ8FPtm2EVg0VJlCLOYkJt53Bo.roa (hash: /q3OIUfb/DtpaEWsmAw4dc7g05s7hPIrxPQFlPnk2EU=) 12: aLEHn32TmYszWXJazZ_6MRcCz-8.roa (hash: ChJxcQmgDO4CzI4a3mA4VU7WlmyBjbpQKc/2Nub1B8M=) 13: dalkQoR5yWN0bj6Rv4PS5E6TTuU.roa (hash: lc3j/nGT+80agSUi8VPGfdjqrhxAZtHrC8wAloMiTmI=) 14: jVPWl31BH0Qbvk8GZCmJu1S-SCg.roa (hash: GjR7bKQdVfdJfimgP8NB+w5wS+aOcaTF1LTIm0aW9x4=) 15: jzgYVUpRgI7vuCnsdGWjIi8nASM.crl (hash: ZBZ9iV0D/Ytnak9rAfw0pxjkLpGX/ydETyN9aVaiJ84=) 16: sRjYoziAYc0BikPSpm8h9jBGuAo.roa (hash: WzpXcMPsDEKDqcOh18X8WDKLcZwejFe1kyNYalb3BIY=) 17: w8V-PUXayXn4_kI4QHAr91FE0xk.roa (hash: eGOoJbk7JEHHJyJTyq5Yr1uWNbk7xlMkIMVScgDY3Fg=) 18: zBQfx1voeK8wa2S8JIcl66dlKV4.roa (hash: xfE55xnfNDrhMBTFsDtbvUaso8pg9+6MM9RdCl5bvOI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 May 2024 17:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:88:92:01:2f:ae:b8:b5:2b:e2:0d:01:78:38:b0:a6:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123 Validity Not Before: May 17 22:00:20 2024 GMT Not After : May 18 22:00:20 2024 GMT Subject: CN=f1fbf6650e8e8cbecf347788b238b6a694212d5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:36:e6:43:6f:72:39:9b:05:98:4d:8b:10:fc: a9:04:04:cd:d6:15:4c:ff:a9:12:ee:b3:b6:80:81: d0:c0:a3:f0:28:74:62:35:80:7e:a4:a7:4c:f5:d1: 14:d7:b9:b9:d4:d3:30:99:b1:0c:f1:89:22:18:0d: 3f:77:60:1b:8a:60:e0:ef:7f:9a:36:76:36:dc:ca: 11:cf:f9:e6:78:94:5d:73:f1:41:46:e9:08:9c:dd: 32:23:4d:ea:87:93:be:8f:ae:a3:7d:25:85:00:84: ca:03:44:14:df:a3:ea:7d:2f:90:fa:d6:0d:64:0a: 87:55:7f:a7:0c:22:a4:4f:e1:1b:b8:2e:66:8f:e6: ec:ef:62:a8:82:d0:35:38:68:a7:92:c6:c5:27:21: c5:c5:81:f5:0c:cf:bc:34:8b:eb:db:90:c7:4d:4f: 1f:0d:73:19:86:c6:82:87:b4:9a:59:81:ba:b8:05: 44:57:ff:24:66:cf:a7:78:18:ec:d5:cb:2b:b6:42: f3:77:c2:e0:56:58:ad:02:fa:01:49:e2:e5:72:87: f8:b1:4b:fa:42:e9:65:51:56:97:a4:bc:43:37:81: ac:ef:44:a0:26:96:92:be:20:53:33:52:0f:2f:70: 29:4e:5e:15:87:e3:3d:75:e7:22:7e:d3:03:49:d8: 33:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:FB:F6:65:0E:8E:8C:BE:CF:34:77:88:B2:38:B6:A6:94:21:2D:5B X509v3 Authority Key Identifier: keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:4c:74:1e:cc:09:ee:15:bf:b6:5f:8f:04:b3:14:77:37:db: 62:1d:a4:76:a6:e6:cb:51:2c:c2:78:48:d6:41:47:ba:24:1e: d3:cb:c1:3e:43:5b:2c:9b:74:c2:29:b5:e0:63:8b:5b:39:9e: f5:03:91:0e:1d:c5:57:bc:9e:fa:51:d7:24:d2:5c:79:0c:e9: 12:69:05:74:ad:fd:88:b7:3a:a1:ce:f1:09:9e:6f:5c:10:47: 9a:c2:34:f4:0b:f3:d6:d3:c9:5d:d8:36:29:e0:72:06:01:c9: 15:76:e0:d1:1a:f4:d9:f5:61:b1:85:9e:45:15:63:0d:dc:8d: c2:0e:4e:e2:7e:fc:fa:74:e9:d0:76:6f:82:15:f1:62:43:88: 45:c7:de:bb:9c:60:a6:0f:1c:b5:ae:49:c5:e2:50:d0:ca:c5: 17:24:ec:a4:41:25:36:fa:e8:74:d5:6e:9d:b7:0a:c6:82:17: 57:98:5e:c2:6c:e8:24:fa:39:79:80:ab:da:e4:6e:a4:b1:bc: 2a:31:a3:45:fb:f7:05:9d:01:89:e9:34:eb:1b:96:4c:ef:a4: 15:73:b9:46:0f:5f:df:e7:ce:d5:19:55:c9:cb:f4:11:9c:5b: ad:a5:ac:aa:15:c3:70:c3:b5:47:f4:c6:12:01:11:5e:0b:c8: d8:e1:0b:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY+IkgEvrri1K+INAXg4sKaEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMzgxODU1NGE1MTgwOGVlZmI4MjllYzc0NjVhMzIyMmYy NzAxMjMwHhcNMjQwNTE3MjIwMDIwWhcNMjQwNTE4MjIwMDIwWjAzMTEwLwYDVQQD EyhmMWZiZjY2NTBlOGU4Y2JlY2YzNDc3ODhiMjM4YjZhNjk0MjEyZDViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDbmQ29yOZsFmE2LEPypBATN1hVM /6kS7rO2gIHQwKPwKHRiNYB+pKdM9dEU17m51NMwmbEM8YkiGA0/d2AbimDg73+a NnY23MoRz/nmeJRdc/FBRukInN0yI03qh5O+j66jfSWFAITKA0QU36PqfS+Q+tYN ZAqHVX+nDCKkT+EbuC5mj+bs72KogtA1OGinksbFJyHFxYH1DM+8NIvr25DHTU8f DXMZhsaCh7SaWYG6uAVEV/8kZs+neBjs1csrtkLzd8LgVlitAvoBSeLlcof4sUv6 QullUVaXpLxDN4Gs70SgJpaSviBTM1IPL3ApTl4Vh+M9deciftMDSdgzywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPH79mUOjoy+zzR3iLI4tqaUIS1bMB8GA1UdIwQY MBaAFI84GFVKUYCO77gp7HRloyIvJwEjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgt YmZiNGJhMzBlNDVhLzEvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgtYmZiNGJhMzBlNDVh LzEvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD0x0HswJ 7hW/tl+PBLMUdzfbYh2kdqbmy1EswnhI1kFHuiQe08vBPkNbLJt0wim14GOLWzme 9QORDh3FV7ye+lHXJNJceQzpEmkFdK39iLc6oc7xCZ5vXBBHmsI09Avz1tPJXdg2 KeByBgHJFXbg0Rr02fVhsYWeRRVjDdyNwg5O4n78+nTp0HZvghXxYkOIRcfeu5xg pg8cta5JxeJQ0MrFFyTspEElNvrodNVunbcKxoIXV5hewmzoJPo5eYCr2uRupLG8 KjGjRfv3BZ0Biek06xuWTO+kFXO5Rg9f3+fO1RlVycv0EZxbraWsqhXDcMO1R/TG EgERXgvI2OEL0w== -----END CERTIFICATE-----Generated at Fri May 17 23:53:02 2024 by rpki-client on console-ams.rpki-client.org