$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.mft File: zNdhWb_Z4zdSPukw898RHWuucwY.mft (raw, json) Hash identifier: xUFLiyvVOEjtpJfh/PhaEF3IY/wPi1bClFivhRGETzk= Subject key identifier: BF:6E:7F:B4:4E:C2:DE:EF:6D:76:E3:E9:7F:AC:9D:85:77:34:31:F7 Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06 Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306 Certificate serial: 018F6899F318D7B5F74564F337A10B8F98EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.mft Manifest number: 1128 Signing time: Sat 11 May 2024 17:01:10 +0000 Manifest this update: Sat 11 May 2024 17:01:10 +0000 Manifest next update: Sun 12 May 2024 17:01:10 +0000 Files and hashes: 1: 5LOjIq-3yd7hw4pT3lo56aj_ga8.roa (hash: Y/WZghkZ/7xQ5qFzFAFEWHEqRXKLclQ8G7V6awR4F0w=) 2: 6jiIsQZvMwZeCTocqGzoFi-Q05M.roa (hash: vNmY2xNN1MlTCkx4qqRxXBrGH8sASyFCxPYouD7KAqs=) 3: 6pNCmUqQHPzTyXVbEnjIQQZfUvY.roa (hash: p645s9VERW1Ef0opHp6vl7h5I41i7L3NWWr3wTxcUVk=) 4: 9rNpUbLwKA3gYn0hqgoutw3fV-Q.roa (hash: TVUr3ENRWy3Rj1ZGSC9LwooUXRSPARD9upMwIkPr6j8=) 5: AiYDAuHWWTbYGdA9r5q3PIbIRL4.roa (hash: 7S953/WdZ9j9UM9PASqBEgriBcpm4uT5STbABwaS3+c=) 6: KTjrig58iCiDtCXLyYl4meXMdCM.roa (hash: BdXNjrhrST6rMpLc+0llzb1KPIvY+J2WR1/ZtLpfNGk=) 7: Qd_B5EHX12KFdpT6SPCDchylQE8.roa (hash: +ccD5p6/2wvJzVqs43c+TQiWwS5USs33/h3rJMRwqr8=) 8: U0FQgrVnP50XmOXLYcQm46KtpM0.roa (hash: XXW9ntvwFXoEBbWYdUYEL33ubcoxwCDsWgnzE/wZmb4=) 9: YtZsgEdY6FChVZRVChbos9M0M0A.roa (hash: VF+P/RnqGVvfb6m5T1SH78Y1omoNr4I/TXpZBN2ccoI=) 10: Z-S-K2tkLQH88XimL8U9JLX7zVQ.roa (hash: p2scXI7JgF9jrJ1YD7+kgEcAU4CT8qylmFuzEng/+UI=) 11: Zg9y5VE1ip1W_zr3sJGo7UKwSBA.roa (hash: 3lblbwQKf5+qO1hOF2taPaUqeneGedzIAZ0mvWfe3Kc=) 12: _vBxre45pVTpkbWV06I321guIPI.roa (hash: A1nSt1/4K3o3CvtNDdcZb3lXzzt5C3KdjR9KkaLf3Zg=) 13: boFPMYXgCDAkmz6kJBD8McMUm5c.roa (hash: nwNl+8VSInfmDNadnUNpXvz29gZpqiOuI3WmejBrWnk=) 14: cr_1DRKVT-LLYaA6GelGxbLuCTg.roa (hash: MiGxhxRR1TCmVQ+iN8kWCERB4ybg9ZzuxMx4qxHXctI=) 15: d6ByhanaxQlbQW2apBiZT2sfMnw.roa (hash: js7Aw1ZoOAfaeV/ZACQ4ZQ4ADwN/dO0WjKflH1hqz4k=) 16: fi5aq6IMrHYx0xvqOLsMO1cD1Go.roa (hash: z8lVeFgUlbbAao68sltw9h1KUSjuNb0TJ1VMUv8/qC4=) 17: gRRPYZNWsMXqeCU8fBRvp4oe-Jc.roa (hash: 7pY/JOOJZP8+1wHek41ng6Llrha7MWbEio8G7QOzNUg=) 18: hcjkkYdDMvDTB6awXKaDITEAwpo.roa (hash: KEMvpzPBZgpdi1pREzI+OtXwdb2E3WocfCFjJRmZEqE=) 19: njVN5zyy-e7-zkeIDLdDxPJFHyE.roa (hash: bJtSMwqBmK8wKLU7SX73PY2FCnbv13ySsR61Dg73HJU=) 20: ppFFSdvlJSrA1YPhZ0g6f2cv0K8.roa (hash: EUA2qNT42UtK7xh1mGKDYMthctX+asIlFomL7NYSF6s=) 21: t5BMQR_Bs0AEYmrbpL7lxFUYnMY.roa (hash: Piypz/OE+SCfk2VY2P3nPOEtASav54KuLE68ilZgsFU=) 22: zNdhWb_Z4zdSPukw898RHWuucwY.crl (hash: hFS0NyIxAPZr9/N8LXBDBcyA8cdqqNOdxGEnZDkgxkA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.mft rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 12 May 2024 17:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:68:99:f3:18:d7:b5:f7:45:64:f3:37:a1:0b:8f:98:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306 Validity Not Before: May 11 17:01:10 2024 GMT Not After : May 12 17:01:10 2024 GMT Subject: CN=bf6e7fb44ec2deef6d76e3e97fac9d85773431f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:29:4e:e4:1a:f7:f5:25:19:f0:af:9a:86:db: ba:cf:91:e2:99:dd:74:8c:40:33:76:74:1c:88:3c: ef:84:42:d1:53:52:3b:61:7d:55:fd:6a:9a:bb:9f: f3:a7:9a:35:95:4f:89:36:2b:d3:a2:d0:34:ce:b2: d5:75:e3:36:2e:5b:b9:88:11:74:58:c6:b7:0b:30: b9:a1:22:69:76:e3:42:48:fc:c2:2a:a9:fe:ae:d6: 59:2a:79:83:b2:a7:35:c5:34:16:fd:dd:b9:b5:1b: 0d:2e:0c:b9:4f:b5:a4:b7:21:c7:0d:1d:d6:5e:f3: 67:e9:57:39:db:e3:df:5a:a8:dc:f6:20:8c:85:f3: f6:3a:58:a7:01:b1:a9:3b:25:d5:81:68:42:e9:51: 4c:1c:22:ec:41:77:6f:bb:97:7e:bd:3c:cf:62:e5: 47:5a:36:53:9c:58:f3:30:d1:de:5a:c6:08:cc:a7: 19:46:ca:2d:ae:a2:c9:b0:d7:1a:0e:47:5c:4d:ac: 82:c1:9c:d0:21:29:a7:47:6d:71:2c:1d:c9:23:1d: 5a:86:8a:81:5f:37:82:dc:dc:da:75:65:02:c1:b7: 15:db:52:21:7b:1c:52:d8:32:3a:da:84:32:6e:37: 59:cc:da:3f:9a:de:a9:40:62:b5:2d:b6:34:b1:53: 90:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:6E:7F:B4:4E:C2:DE:EF:6D:76:E3:E9:7F:AC:9D:85:77:34:31:F7 X509v3 Authority Key Identifier: keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:9b:2e:0d:0d:f4:ef:ed:de:2d:b4:f3:9c:c9:c6:d8:3b:db: f3:67:03:38:ec:62:d3:ce:71:f4:01:51:5f:fa:e1:23:1b:b8: b4:aa:c7:d2:a1:44:59:df:bb:ec:1e:fb:be:75:3e:3c:6c:43: 90:a8:d0:c5:7f:3a:1e:d7:1e:d1:0f:66:d4:b4:ce:f4:ae:96: 5a:56:63:44:d5:97:f1:47:36:df:f2:00:58:4a:eb:62:7b:13: 2c:ae:07:35:5a:ef:e1:ac:05:90:35:34:27:1a:74:f4:59:85: 31:7a:b0:5f:6b:f5:0c:1b:b4:74:06:19:fe:d3:28:e7:46:ab: ec:9c:14:eb:94:8e:08:be:09:3f:1e:32:f2:e3:59:1a:3b:ff: 9f:e0:a1:dc:84:7c:54:58:93:ea:66:26:e2:ee:37:7c:72:91: c7:55:39:93:e0:d5:fb:d2:87:50:16:fc:3e:6f:44:20:49:11: 6d:d1:f0:e4:8c:d3:6c:88:58:37:fd:7c:86:ac:59:90:1c:90: 42:63:75:07:7d:c3:4f:a0:35:96:1a:4c:af:4d:c9:93:1b:d6: 82:4a:52:a9:4b:31:7c:a9:a5:a7:5d:85:26:09:ff:3d:80:e8: c5:19:b9:f2:90:19:3c:2c:04:e7:b1:04:ea:19:55:38:63:9f: e5:95:f2:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY9omfMY17X3RWTzN6ELj5jvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjZDc2MTU5YmZkOWUzMzc1MjNlZTkzMGYzZGYxMTFkNmJh ZTczMDYwHhcNMjQwNTExMTcwMTEwWhcNMjQwNTEyMTcwMTEwWjAzMTEwLwYDVQQD EyhiZjZlN2ZiNDRlYzJkZWVmNmQ3NmUzZTk3ZmFjOWQ4NTc3MzQzMWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ilO5Br39SUZ8K+ahtu6z5Himd10 jEAzdnQciDzvhELRU1I7YX1V/Wqau5/zp5o1lU+JNivTotA0zrLVdeM2Llu5iBF0 WMa3CzC5oSJpduNCSPzCKqn+rtZZKnmDsqc1xTQW/d25tRsNLgy5T7WktyHHDR3W XvNn6Vc52+PfWqjc9iCMhfP2OlinAbGpOyXVgWhC6VFMHCLsQXdvu5d+vTzPYuVH WjZTnFjzMNHeWsYIzKcZRsotrqLJsNcaDkdcTayCwZzQISmnR21xLB3JIx1ahoqB XzeC3NzadWUCwbcV21IhexxS2DI62oQybjdZzNo/mt6pQGK1LbY0sVOQuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL9uf7ROwt7vbXbj6X+snYV3NDH3MB8GA1UdIwQY MBaAFMzXYVm/2eM3Uj7pMPPfER1rrnMGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek5kaFdiX1o0emRTUHVrdzg5OFJIV3V1Y3dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9mNmFkYTEtN2U4YS00YjNlLWI3ZTgt Zjg1ODlmNjgyNjkxLzEvek5kaFdiX1o0emRTUHVrdzg5OFJIV3V1Y3dZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC9mNmFkYTEtN2U4YS00YjNlLWI3ZTgtZjg1ODlmNjgyNjkx LzEvek5kaFdiX1o0emRTUHVrdzg5OFJIV3V1Y3dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYpsuDQ30 7+3eLbTznMnG2Dvb82cDOOxi085x9AFRX/rhIxu4tKrH0qFEWd+77B77vnU+PGxD kKjQxX86Htce0Q9m1LTO9K6WWlZjRNWX8Uc23/IAWErrYnsTLK4HNVrv4awFkDU0 Jxp09FmFMXqwX2v1DBu0dAYZ/tMo50ar7JwU65SOCL4JPx4y8uNZGjv/n+Ch3IR8 VFiT6mYm4u43fHKRx1U5k+DV+9KHUBb8Pm9EIEkRbdHw5IzTbIhYN/18hqxZkByQ QmN1B33DT6A1lhpMr03JkxvWgkpSqUsxfKmlp12FJgn/PYDoxRm58pAZPCwE57EE 6hlVOGOf5ZXyNg== -----END CERTIFICATE-----Generated at Sat May 11 19:47:50 2024 by rpki-client on console-ams.rpki-client.org