$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft File: 4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft (raw, json) Hash identifier: /XuIMxG0HUdpEtgZ41mCJKH3XH1A/TwQ0fYrjrEjsME= Subject key identifier: 21:EF:9F:06:68:49:CC:EE:F7:1A:41:40:02:D3:EC:B8:3F:0B:F6:E9 Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Certificate serial: 018F3F66DF469CA00845AF6263DA3CA144DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft Manifest number: 0513 Signing time: Fri 03 May 2024 17:00:57 +0000 Manifest this update: Fri 03 May 2024 17:00:57 +0000 Manifest next update: Sat 04 May 2024 17:00:57 +0000 Files and hashes: 1: 3Hw8GzlixEbm36AiZslvs3-V0FY.roa (hash: adv13P7a7unuG4/Kw18uDjds8kwTZVlo1SAfLq0jdKE=) 2: 4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl (hash: vX5xiU7IyuwJrPQg3nQFy3VjgnDG9HtMHsR5A7RH8iI=) 3: 5FB4JEfOV7_i3vtvu0Ati8yMNUQ.roa (hash: NQER+xmkWhQ/YjWycDJDEXCW3dujHKE/dZPvZjR22jg=) 4: CwQ2348haaFbt9ejDUFqIBm1SoY.roa (hash: qygaWlvgcnfo9LlIwSPnSeIpMXS7CjGhE7dO94/uey0=) 5: E8Ju3Bb9u5EDfT3ykuLg7xl5-cM.roa (hash: terXpp2S/PD4sXwMF5WOv1e+vECb1xf7v2ojfEDNDqs=) 6: J3kChN_J8l1Ce9tk-6uATEN8EJQ.roa (hash: kjLHfWyEk3IxfOIu4AtIFFR4yMmJx8ZtwkoBHyuWeao=) 7: L_MxUIP4SOC80_y9ef_GVNlBxPQ.roa (hash: 1LbVxKodxolavBf+MlrU1TwikzE95EJkuLyIA4nxk80=) 8: M9F2wNFxZmzOcsrCwaGpd_Y061M.roa (hash: U2kpDJFhj7zOdCY6iBsapELm5ZTO+PHt2eQS0Ny9ibo=) 9: N83wZ4gvTRLqZ919ZT8lC-DJEUg.roa (hash: 2JfLaktDxXPWnfktNNy2X4Icg8EzRo9BZefQ+FN9wjM=) 10: PT0WSMlKrWiX120Y11XWHyK8PDI.roa (hash: 9EB9jIzK4cbDqhYEKC+JIbVUU1KmN44BbNBO0h4vbMk=) 11: RZDKMdZdmU7PvxH2kwUEyZxzQhE.roa (hash: lZREn4dGxUgJ4LVd9Lzls9a5dVT/MNSixQR0RXmIAHw=) 12: SswkbmEgewZ-vu6I9yZ8KG56V7o.roa (hash: tTUvLvUvDNSFJ7GjOtFTXzvEETLHvTJh61u4cWGE0ZM=) 13: ZpJ61Ns9HMluutfCslomJ9rVzMo.roa (hash: QHHo/R/+Z4NWE4Vu4+K3YBYzVQxKnUplyPV6aFogTqk=) 14: bnuBdy4HLQK0unTb6vVT5gk-FMg.roa (hash: VQgH7FJpBr9I3tEvm0JY6YexmdXwgz/kL+gtBhpijvo=) 15: f02ctHRUkDr8QhKCA8qwtI1vUpo.roa (hash: osr0juGnCXJEuU4/abn+fVCbko59zZaG/TOSIvycnjc=) 16: gJs7B-ORKs7us53LgEF4zQA0Dwg.roa (hash: byBjLaDdH0khPgFczHnouRVDtAcLCY1TPT3+kZdKYjw=) 17: iSaR6uk1jo_bPm7eT-AbrBVhj_Q.roa (hash: hGDBZoFar+qPz/Cl0NEs7cKspztA67aaWJaCWf/8S2Y=) 18: ljIelCLGJEM0Qy_tRuvwVpdKms8.roa (hash: 4MYW13G5DhZoMDjNiGwcVC9fjvVQkqi5EJWpn+Wg3hs=) 19: quLcMqv2fJluceTzJXZsSXmyILo.roa (hash: o+3wYkHAQbwy6/djem9k/zvZJuzbNqZbLkWzuQaSuws=) 20: r5zZtnZ_ftWIddB7Ar5MHQ87FYc.roa (hash: vubnVdLPa7nA1hzEdtq9sU+tV4ZHdMEozJo9KIWAvHc=) 21: uM65VVC0khdQD0rLWKgqoijrvys.roa (hash: bNJf4pjcGhh8yWyzhUs+C/peDE9l2gvDsEnRcnajn+g=) 22: zyGcR5iTwbs2wMrpWGH4k6BO_BA.roa (hash: SQx0f3gdJwWfUnlQqB4OtKXVMHHhDEOh3hUQYfJ8whc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 04 May 2024 11:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:3f:66:df:46:9c:a0:08:45:af:62:63:da:3c:a1:44:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Validity Not Before: May 3 17:00:57 2024 GMT Not After : May 4 17:00:57 2024 GMT Subject: CN=21ef9f066849cceef71a414002d3ecb83f0bf6e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:6c:10:84:e0:cc:1a:af:bc:a2:c5:68:40:7c: 24:f6:bd:80:d0:54:ac:39:cd:75:2c:32:cd:c7:41: 26:b1:ab:26:b2:e3:ae:1c:a0:e8:d6:51:c8:d7:e5: ca:81:7c:ad:63:28:46:7d:2b:22:e9:da:97:7b:01: bd:e6:15:76:51:fe:c8:79:30:d0:a9:6c:59:51:f2: ea:dc:97:0f:d5:5c:4d:74:a1:b0:00:24:e0:d8:1c: aa:89:bb:62:3c:38:c4:f1:21:77:50:43:e5:76:a0: 8c:d7:8e:3f:61:ab:7e:a5:16:d2:98:2d:41:a0:cb: c7:5f:39:e3:bc:7e:82:a5:65:77:33:e1:f8:61:10: 4d:fa:6a:bf:0d:24:c6:42:a1:ca:e1:97:2c:06:77: 35:89:66:40:c9:23:0d:e9:21:1c:1f:69:6c:a4:92: 42:1b:80:68:ac:3e:62:5c:dc:24:16:d2:b6:97:61: 96:15:10:83:95:96:d2:b9:c4:9e:9e:e6:f6:fe:2a: cc:41:f2:bb:f1:ba:96:e2:b2:09:23:36:39:33:08: 78:e1:d8:60:e2:3a:e9:20:31:4d:82:66:2e:ab:0d: 53:4c:e7:b6:5d:ea:e0:c3:6e:e1:fe:a0:fb:b3:2b: 26:b2:ac:b2:d2:fa:8d:f8:c1:16:bc:bc:1b:ca:ed: 02:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:EF:9F:06:68:49:CC:EE:F7:1A:41:40:02:D3:EC:B8:3F:0B:F6:E9 X509v3 Authority Key Identifier: keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:36:b9:f9:50:3b:36:4e:a1:d3:a2:5a:4a:8b:f9:10:23:ca: ad:93:70:8e:8a:55:de:df:9a:34:02:63:75:fe:d7:eb:64:3e: 35:aa:cc:88:89:c7:27:88:f0:ba:73:bd:89:e5:de:98:8f:af: de:ca:ec:b8:f1:12:c5:cb:82:eb:fa:f0:38:9c:b2:71:aa:2f: f2:50:0c:c5:5f:78:78:34:31:0c:87:1a:70:0b:2a:77:40:cb: 32:c5:ba:e3:5d:91:68:e8:c9:7b:09:a7:02:be:6a:9e:ee:db: fe:6f:9b:3b:44:89:14:40:10:e1:15:20:73:a4:6c:8c:f9:28: 16:47:72:38:ad:cc:de:61:77:ee:34:d0:d2:dd:9a:02:b9:51: cf:16:ba:a6:92:7d:75:22:84:c6:32:b3:47:4d:c2:69:78:19: d7:55:d2:4c:95:a8:d1:6f:9b:d9:4a:ef:ff:b6:ef:05:cc:94: fa:30:29:d6:81:1d:49:2e:96:07:5b:2a:14:9e:c2:8c:c5:05: 0f:be:1e:66:2b:fc:5c:0e:94:56:2d:64:d5:9e:fe:56:b7:7a: 64:ba:65:29:27:90:00:7d:4a:e3:9d:31:4d:f4:43:07:4c:35: 0f:06:2e:a3:9f:89:f3:3b:c0:4d:94:16:e9:f9:55:d4:0f:68: 7b:66:15:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY8/Zt9GnKAIRa9iY9o8oUTcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDViYjQwMTE4MGU1NWY1YzE2NWQ0NzkwOGRmZjRmZTI5 YTBkODYwHhcNMjQwNTAzMTcwMDU3WhcNMjQwNTA0MTcwMDU3WjAzMTEwLwYDVQQD EygyMWVmOWYwNjY4NDljY2VlZjcxYTQxNDAwMmQzZWNiODNmMGJmNmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA52wQhODMGq+8osVoQHwk9r2A0FSs Oc11LDLNx0EmsasmsuOuHKDo1lHI1+XKgXytYyhGfSsi6dqXewG95hV2Uf7IeTDQ qWxZUfLq3JcP1VxNdKGwACTg2ByqibtiPDjE8SF3UEPldqCM144/Yat+pRbSmC1B oMvHXznjvH6CpWV3M+H4YRBN+mq/DSTGQqHK4ZcsBnc1iWZAySMN6SEcH2lspJJC G4BorD5iXNwkFtK2l2GWFRCDlZbSucSenub2/irMQfK78bqW4rIJIzY5Mwh44dhg 4jrpIDFNgmYuqw1TTOe2Xergw27h/qD7sysmsqyy0vqN+MEWvLwbyu0CSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCHvnwZoSczu9xpBQALT7Lg/C/bpMB8GA1UdIwQY MBaAFOLVu0ARgOVfXBZdR5CN/0/img2GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEt NDIxZTZiYzdlMmU4LzEvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEtNDIxZTZiYzdlMmU4 LzEvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQTa5+VA7 Nk6h06JaSov5ECPKrZNwjopV3t+aNAJjdf7X62Q+NarMiInHJ4jwunO9ieXemI+v 3srsuPESxcuC6/rwOJyycaov8lAMxV94eDQxDIcacAsqd0DLMsW6412RaOjJewmn Ar5qnu7b/m+bO0SJFEAQ4RUgc6RsjPkoFkdyOK3M3mF37jTQ0t2aArlRzxa6ppJ9 dSKExjKzR03CaXgZ11XSTJWo0W+b2Urv/7bvBcyU+jAp1oEdSS6WB1sqFJ7CjMUF D74eZiv8XA6UVi1k1Z7+Vrd6ZLplKSeQAH1K450xTfRDB0w1DwYuo5+J8zvATZQW 6flV1A9oe2YV0w== -----END CERTIFICATE-----Generated at Fri May 3 18:19:42 2024 by rpki-client on console-ams.rpki-client.org