$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft File: jRHLAV35uqthIo27zhfdTgDmPBM.mft (raw, json) Hash identifier: vSR4oINigg5FXRoVwP9yXButdwzprDtim0iSRxUdLbQ= Subject key identifier: 1E:44:41:02:08:E1:56:ED:A4:F1:D6:16:11:3F:B8:D3:A4:17:61:BD Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13 Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13 Certificate serial: 018F45A04B9525CD2E51A9B1A37DC6451DDD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft Manifest number: 10EB Signing time: Sat 04 May 2024 22:01:23 +0000 Manifest this update: Sat 04 May 2024 22:01:23 +0000 Manifest next update: Sun 05 May 2024 22:01:23 +0000 Files and hashes: 1: 0IdjxIZKElldlD9uE5zt8xEGGAQ.roa (hash: jTS9ynTSeFkFtRByVfBdBXdx+DWqRZyXv+t0z+sKNLE=) 2: 0SifAl25xuvaFBgVZeN_Pmex7n4.roa (hash: Wf5HEDjS/zLGEAfefwGRzORxY1QEtqTQSfiAp1h4ixA=) 3: 1-alPqIy6ujVZpPU7jbJYC_SPrvw.roa (hash: b6qe6diVUQFn2esS1ic+d6I3U9dCYKGl8FnuJOkTSN4=) 4: 7n7khlCd0Fe377a_7BFAy-ElhPg.roa (hash: pojtKwUIeC4IcA2byTJdImkBFiuADn2EJMeYIINz6OE=) 5: Kb01xUl-D7eTQRyGkZ9Y7KRRvs8.roa (hash: ISjRoCk2ryiUGo/hqd+FtSfOh7Res2T4MLhGh5SWVrs=) 6: Mj5w8Qrm0dOfDMPL23dbbjwkg3s.roa (hash: 6RyRT+sB4hA/IBzFFcwlm/DK96+dI8KR/y7F45BmMTk=) 7: NuLpBZ3Bkx8klzZL6ka5tqRUzJ0.roa (hash: ESGlR16pLhor8ph+Sgw0tgY+oVqNgmZUqfiiwzDIUlE=) 8: Pn9qOEhDW3KAoHx8T0KWgZdguEg.roa (hash: aCx9r9J3XEvl2d1wvjSiiy8XFnxaFC13n7/qfY1AK/Y=) 9: W86APHniX1uZcdWa2Pvs6Rj-Ebo.roa (hash: 6dTm+lZ7dsRDVqXDdD4O3h8NxwSEUt9qj9iVCx6qjXs=) 10: jRHLAV35uqthIo27zhfdTgDmPBM.crl (hash: rWqwOIWLQCx6PpCX9m8c4y+8fcfpiRLtXa4Jwb7xndo=) 11: pd5TnWPJMzOK0nqPGhUZJwspVxE.roa (hash: EY1cyRpugte6BacYRXyxnB66dMWIq5hbKee1pnSLh2c=) 12: rRlE-zjcBxlYsw7WsxHZi3Y6r7I.roa (hash: XSltUlgvHzB+Fn/wmBQDLqIP0wFAWbsINauooqCDU/c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 05 May 2024 20:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:45:a0:4b:95:25:cd:2e:51:a9:b1:a3:7d:c6:45:1d:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13 Validity Not Before: May 4 22:01:23 2024 GMT Not After : May 5 22:01:23 2024 GMT Subject: CN=1e44410208e156eda4f1d616113fb8d3a41761bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0c:a2:d5:02:18:e7:60:81:56:75:0b:7b:82: 42:4b:94:96:59:9c:8a:56:f4:e6:9b:c8:31:68:d0: 87:d3:68:2d:26:96:6c:cd:a0:0a:a8:45:40:ff:1c: ac:3b:0c:20:10:f0:b7:42:15:5f:1e:8a:86:7c:dc: 8f:55:8c:8a:14:11:7c:ca:db:bb:08:55:84:03:fe: 9b:48:60:ea:d4:c0:08:f9:a3:8a:76:85:00:fb:77: 6c:3d:ee:eb:b4:7f:0f:8a:54:72:ff:fc:07:5a:11: ed:76:60:2a:0c:d7:be:7b:bb:e6:e7:c5:46:4e:c2: 5a:f7:f8:c9:c3:0c:58:6d:e3:1b:d1:d4:57:46:73: 16:99:4f:e7:17:6f:cc:6e:76:25:63:33:c4:3a:ab: 48:d6:55:78:2d:ac:1e:81:1a:47:dd:29:9a:0c:8b: d1:08:0c:16:22:ea:73:69:21:13:f6:f7:92:14:3c: 92:23:e9:83:3a:e8:09:00:3f:f1:95:1c:42:28:b0: 35:6d:a6:19:20:dc:d0:aa:9a:eb:31:9b:a9:59:33: 32:76:49:e0:c8:ff:78:2b:77:6c:85:72:5c:41:1a: 22:9d:bf:d9:cf:c4:ef:36:1a:50:05:ea:03:6d:a8: 1c:ba:93:03:6e:f2:3d:aa:b6:ad:e8:3c:24:e4:c2: f4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:44:41:02:08:E1:56:ED:A4:F1:D6:16:11:3F:B8:D3:A4:17:61:BD X509v3 Authority Key Identifier: keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:f1:b4:96:bc:2d:93:fe:46:b7:33:a1:a0:9f:42:fe:ef:58: 66:de:f0:be:87:87:12:68:8a:98:c3:e9:8f:a0:f6:d7:cb:67: 4c:e1:e5:b1:56:13:28:ea:ed:d5:d1:a7:7a:9c:bd:e5:e9:f4: f4:ba:47:a6:6d:1b:3d:54:81:d2:c2:18:a4:d4:d1:d7:dc:17: c6:81:7c:56:86:07:e8:8a:0a:20:d3:cc:1d:ae:14:7a:fe:3d: 2c:21:7e:30:ba:d2:47:b4:69:9b:09:ac:70:bf:d6:54:12:3b: 2c:73:d3:df:09:f0:2a:6b:c3:eb:ec:0f:e1:6c:6e:ea:41:c2: 83:9d:db:9a:38:8a:b5:1d:ee:af:f3:62:95:7c:94:cc:9a:09: f1:39:11:0c:fd:21:af:21:4c:06:9f:02:32:7c:c7:0c:2f:fb: 3b:4a:ed:b5:74:e8:03:b5:c2:dc:76:af:37:31:26:6d:88:f9: 84:96:68:26:b3:3b:06:9d:b0:e7:a6:4d:66:2d:9f:25:41:4e: 05:b8:c3:e3:b1:3d:46:4f:a4:5a:bc:28:02:24:25:bd:de:58: 87:bf:d2:01:8f:b9:96:0e:18:1b:88:07:8b:4b:c7:73:c7:d8: 63:df:db:fd:c8:13:67:6a:af:d2:dc:1d:fe:54:a4:e6:57:02: 10:3a:3e:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY9FoEuVJc0uUamxo33GRR3dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMTFjYjAxNWRmOWJhYWI2MTIyOGRiYmNlMTdkZDRlMDBl NjNjMTMwHhcNMjQwNTA0MjIwMTIzWhcNMjQwNTA1MjIwMTIzWjAzMTEwLwYDVQQD EygxZTQ0NDEwMjA4ZTE1NmVkYTRmMWQ2MTYxMTNmYjhkM2E0MTc2MWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQyi1QIY52CBVnULe4JCS5SWWZyK VvTmm8gxaNCH02gtJpZszaAKqEVA/xysOwwgEPC3QhVfHoqGfNyPVYyKFBF8ytu7 CFWEA/6bSGDq1MAI+aOKdoUA+3dsPe7rtH8PilRy//wHWhHtdmAqDNe+e7vm58VG TsJa9/jJwwxYbeMb0dRXRnMWmU/nF2/MbnYlYzPEOqtI1lV4LawegRpH3SmaDIvR CAwWIupzaSET9veSFDySI+mDOugJAD/xlRxCKLA1baYZINzQqprrMZupWTMydkng yP94K3dshXJcQRoinb/Zz8TvNhpQBeoDbagcupMDbvI9qrat6Dwk5ML0dQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB5EQQII4VbtpPHWFhE/uNOkF2G9MB8GA1UdIwQY MBaAFI0RywFd+bqrYSKNu84X3U4A5jwTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEt YmE3NzFmZmQyNjljLzEvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEtYmE3NzFmZmQyNjlj LzEvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI/G0lrwt k/5GtzOhoJ9C/u9YZt7wvoeHEmiKmMPpj6D218tnTOHlsVYTKOrt1dGnepy95en0 9LpHpm0bPVSB0sIYpNTR19wXxoF8VoYH6IoKINPMHa4Uev49LCF+MLrSR7Rpmwms cL/WVBI7LHPT3wnwKmvD6+wP4Wxu6kHCg53bmjiKtR3ur/NilXyUzJoJ8TkRDP0h ryFMBp8CMnzHDC/7O0rttXToA7XC3HavNzEmbYj5hJZoJrM7Bp2w56ZNZi2fJUFO BbjD47E9Rk+kWrwoAiQlvd5Yh7/SAY+5lg4YG4gHi0vHc8fYY9/b/cgTZ2qv0twd /lSk5lcCEDo+NA== -----END CERTIFICATE-----Generated at Sun May 5 00:20:01 2024 by rpki-client on console-ams.rpki-client.org