$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft File: YzkukpMXrmveCKWjuYorcB3biTo.mft (raw, json) Hash identifier: QbCc0+JGV3/CKP9wCxC6bYI5y2xB9p1Cid6LWnrdynk= Subject key identifier: 4B:25:AA:51:A0:6E:0A:3B:5A:BC:65:B6:20:68:84:6C:B5:C3:CF:C4 Authority key identifier: 63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A Certificate issuer: /CN=63392e929317ae6bde08a5a3b98a2b701ddb893a Certificate serial: 0191FA1075222B3424B01ACC9AC60E9413BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft Manifest number: 0129 Signing time: Mon 16 Sep 2024 09:01:07 +0000 Manifest this update: Mon 16 Sep 2024 09:01:07 +0000 Manifest next update: Tue 17 Sep 2024 09:01:07 +0000 Files and hashes: 1: 03QhLq7AR1vJfWXoLAk5zAg4d5o.roa (hash: YacP2At/w8aPUc76cIgdXEWoL+Ikea+jVE2kC6DBYzA=) 2: 6jpH2KmKxuq3d_1EkMkP-EV3Zko.roa (hash: 979mEEIF1tLZhw707hThJyXLiJyvcSryUYj09453KMY=) 3: 9iVoeXhN_BMrMIN1U9yUycXAfnY.roa (hash: 1g99D16kb2Cpxnl63/sMHZzVUM3dLCNRtmOlrZ3wgao=) 4: 9kcAwYg_XDrQjevQTP1IsuqZ3Ek.roa (hash: 5Fk3T0sxDG5ySr7LAnSDqIzeCDtuSFmBOwslJVE9qDk=) 5: A-j7soD2bd-sjr_8wpMdJtS1SPs.roa (hash: OuUxgMyE74RLJ73xWa9AJ4hebrXuAHJ0IhzRj2AqR+I=) 6: PwJePG2n4mhivtwcVSIbUFF1Ejs.roa (hash: 2KV2/DIkXsqX8IXnRV4lriIxGq0qfQk2+YFskJXgijE=) 7: ToGHCxRVdFUWnpGdnrfbMKzlvxg.roa (hash: tGNnd8wkvpVJROheC5j7tf9Q1+mWYOeLk8U5qdNDhTU=) 8: VrugHnhXW4HLsQ7euHSkBP3N2lA.roa (hash: cNNkOHuTHA76ZnPJC/E6tzWZFdDsX3267DE/lXJO5NE=) 9: YzkukpMXrmveCKWjuYorcB3biTo.crl (hash: z6nb6zaT+tDiCteLXy7pTr8bBIHu3LGfGElJbD8gkBI=) 10: aUTRjtveeOsFflSgeuHxbafObEA.roa (hash: m4Te0cVguzYc4bJu4ReZgy87rkM5zsmrCr0A5wMN9dE=) 11: l3K5ttheWXnz394G86knwRnGcA8.roa (hash: Pjy8vInjkuhi5XOfxVSumcVQznVsw6wsAM89ftjvZqk=) 12: qTeVH7MLhXjWatozX_F3ELB6rcs.roa (hash: nQduAkNT1peXb3wjuVghqOv0N2rzp80dOC+PHOQc/Bg=) 13: woD2-S42iclmz88x2KRFRTbr39Q.roa (hash: Qglf/9UPzur0UuWdnM9HCm0j768aWSmizS5qrflI9Ro=) 14: xS_HcD_mfujR80it2n2oBr1mvns.roa (hash: JqSKaenbgHdSPaACW99k5BV91n4o/wm0wIfF/H1+8WQ=) 15: yANqt1vbJx4fO1o4DJviJBzVPOI.roa (hash: 2Xev9RCG8rjU8ys64o/4wJdh5oGGKC+HWWtM19qUAqM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 17 Sep 2024 09:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:91:fa:10:75:22:2b:34:24:b0:1a:cc:9a:c6:0e:94:13:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63392e929317ae6bde08a5a3b98a2b701ddb893a Validity Not Before: Sep 16 09:01:07 2024 GMT Not After : Sep 17 09:01:07 2024 GMT Subject: CN=4b25aa51a06e0a3b5abc65b62068846cb5c3cfc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6f:d9:64:3f:ee:8e:b1:cc:95:a8:1f:4e:06: a5:3e:d2:69:64:7b:16:92:76:8b:ad:d0:a0:ec:cc: 1c:bf:bd:ef:3e:9c:6c:93:9d:b6:4f:a3:0c:d6:67: a3:6e:a2:8c:a2:71:88:67:e4:89:b2:4f:04:62:f1: d2:bb:0b:39:a5:a3:71:88:b6:31:a3:25:05:67:c7: e5:a4:78:06:f7:0f:82:63:88:50:89:1a:c4:83:10: be:49:49:b3:ae:4c:a1:e4:f2:e1:cd:81:e7:0b:c3: 46:61:6a:b2:ca:52:85:31:4e:cc:97:7e:a0:1e:25: f5:91:31:43:92:b9:ba:f6:3c:e1:6b:44:de:36:38: fb:3d:e1:f4:e1:a2:b6:4b:0d:df:fa:bf:97:d6:9d: e0:75:48:81:ee:c1:cc:8e:32:bf:95:de:81:eb:64: 22:9c:12:10:40:f0:4b:34:ec:6b:6c:c0:0d:b0:2c: d9:e1:19:b8:5e:48:ee:fa:e0:cf:ee:82:0c:dd:8c: 18:66:25:7e:f0:fd:93:b9:fb:a1:5d:c3:78:0a:17: 6d:63:2f:6a:de:6f:e1:f7:2c:65:fd:a2:7d:2f:ea: 0b:86:0c:af:86:d2:ce:07:c0:c8:86:c9:7e:48:26: c5:3c:fd:c1:8a:9d:6e:a4:7e:6d:c0:40:52:62:21: db:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:25:AA:51:A0:6E:0A:3B:5A:BC:65:B6:20:68:84:6C:B5:C3:CF:C4 X509v3 Authority Key Identifier: keyid:63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:56:9f:9b:af:07:d0:26:19:e3:b1:f7:ff:7c:77:d6:a6:b7: 16:b0:8e:4a:15:60:3d:b2:2c:52:b9:c1:c6:fb:46:f4:77:14: 53:e7:da:3e:7f:a4:b8:9d:29:de:16:3f:6f:ab:41:1e:5d:07: b4:87:40:3f:41:71:5c:c7:8f:46:88:50:27:6c:68:a2:d5:ba: 0e:2f:7f:cd:f6:81:e5:85:0c:b6:cc:6b:bc:b2:62:4d:ce:09: f6:8e:ee:7e:a1:34:2e:79:9c:c8:87:da:c9:6c:84:54:2d:02: c5:27:8f:50:3e:ea:07:e8:89:5d:b3:65:ca:e8:f4:24:d8:91: 73:43:49:39:51:e1:69:69:3c:0b:2c:c1:48:cc:60:49:b6:5c: d2:0f:92:9a:d6:ea:8a:92:56:f2:d0:9a:00:3a:83:13:3c:ef: e3:52:47:cb:ae:57:91:4b:89:d8:25:82:1a:6a:ad:a3:48:4a: 44:e2:c5:00:5e:4a:c3:47:5e:74:e0:b2:92:34:d2:1d:14:ba: 96:eb:5f:e0:ea:9b:4b:f2:d4:44:02:81:26:18:b0:e0:c7:b1: 96:ed:70:c9:cb:0f:a2:c1:7a:87:d8:3e:6c:f9:6f:f4:9a:22: 46:42:08:fa:bc:7a:b6:96:72:ef:8b:ea:ba:18:b1:aa:c9:6c: 30:5f:14:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZH6EHUiKzQksBrMmsYOlBO/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMzkyZTkyOTMxN2FlNmJkZTA4YTVhM2I5OGEyYjcwMWRk Yjg5M2EwHhcNMjQwOTE2MDkwMTA3WhcNMjQwOTE3MDkwMTA3WjAzMTEwLwYDVQQD Eyg0YjI1YWE1MWEwNmUwYTNiNWFiYzY1YjYyMDY4ODQ2Y2I1YzNjZmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsG/ZZD/ujrHMlagfTgalPtJpZHsW knaLrdCg7Mwcv73vPpxsk522T6MM1mejbqKMonGIZ+SJsk8EYvHSuws5paNxiLYx oyUFZ8flpHgG9w+CY4hQiRrEgxC+SUmzrkyh5PLhzYHnC8NGYWqyylKFMU7Ml36g HiX1kTFDkrm69jzha0TeNjj7PeH04aK2Sw3f+r+X1p3gdUiB7sHMjjK/ld6B62Qi nBIQQPBLNOxrbMANsCzZ4Rm4Xkju+uDP7oIM3YwYZiV+8P2TufuhXcN4ChdtYy9q 3m/h9yxl/aJ9L+oLhgyvhtLOB8DIhsl+SCbFPP3Bip1upH5twEBSYiHblwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEslqlGgbgo7WrxltiBohGy1w8/EMB8GA1UdIwQY MBaAFGM5LpKTF65r3gilo7mKK3Ad24k6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mZTcwMmUtYzI2Yi00NDI5LTk5YzEt ODcyNTBmNWEwN2NjLzEvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9mZTcwMmUtYzI2Yi00NDI5LTk5YzEtODcyNTBmNWEwN2Nj LzEvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYFafm68H 0CYZ47H3/3x31qa3FrCOShVgPbIsUrnBxvtG9HcUU+faPn+kuJ0p3hY/b6tBHl0H tIdAP0FxXMePRohQJ2xootW6Di9/zfaB5YUMtsxrvLJiTc4J9o7ufqE0LnmcyIfa yWyEVC0CxSePUD7qB+iJXbNlyuj0JNiRc0NJOVHhaWk8CyzBSMxgSbZc0g+Smtbq ipJW8tCaADqDEzzv41JHy65XkUuJ2CWCGmqto0hKROLFAF5Kw0dedOCykjTSHRS6 lutf4OqbS/LURAKBJhiw4Mexlu1wycsPosF6h9g+bPlv9JoiRkII+rx6tpZy74vq uhixqslsMF8UNQ== -----END CERTIFICATE-----Generated at Mon Sep 16 16:16:03 2024 by rpki-client on console-fra.rpki-client.org