$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft File: HHsGv0EwDcTTDz0OGAybldK83f8.mft (raw, json) Hash identifier: P3Tk+3VXQGPLaXdp8nZJaKPy2tyaXiSHah33klrHhIU= Subject key identifier: 0F:03:00:28:E1:2F:D3:17:D1:DD:03:BB:12:11:B0:A1:F0:2C:47:82 Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff Certificate serial: 01906A17CA65458DCC839F43622ABE12F4F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft Manifest number: 1203 Signing time: Sun 30 Jun 2024 17:01:02 +0000 Manifest this update: Sun 30 Jun 2024 17:01:02 +0000 Manifest next update: Mon 01 Jul 2024 17:01:02 +0000 Files and hashes: 1: 1-b-Tcu2PjVVK8y4R_aTOTKlPzxo.roa (hash: G/2rUxEzdsJc4jVtvWHdk9qkXPIYNbwnv6+ZftnaxbA=) 2: 1OAKPKQg7A5j9SLpV35q8GXMe0Q.roa (hash: MpMJWbiTZVhrYIMpBjHqjRWAazAWHmLjLtMYOZmExx0=) 3: 1yH7Ri3PAEdOTvpMbxGqgm3XcPw.roa (hash: N4Fk2uedh3yWq8eEuuTWLNj1h83UDcBzGe/NOOKMnL4=) 4: DkeMSDy2StvHvHCuZ0eCxEyQsmQ.roa (hash: Q0RASJQAH4WwtR6VVujgb5tKRjAR2MY8kJtJq9ucX6w=) 5: HHsGv0EwDcTTDz0OGAybldK83f8.crl (hash: WDo+YmBSr9aA39ADkoVR3peqTQIOSbJRfxL+Rc4NAoQ=) 6: IZio9bKtV-LU1a4jXwkqJXIljxM.roa (hash: hZfMD0SgRoaf5GqZH0e/TBuZ9VabgXVJLSXlG2W8P1o=) 7: Jq660ngDLggUUvB8ohuZ2BMc6sg.roa (hash: F6vG/ZpngaYrWvQ7ojEoITl4HoLgKLDJTEBEJgtzxCw=) 8: Ld7u8M7K1JHKvU1Te8Ao7cpbHmI.roa (hash: z63VkWBaqFmJH/Ruc2bOiYZcUoRlEiTo+TlYwfZ1K3k=) 9: RSwe2oDbr81qoGmVZt4-N8vb1xc.roa (hash: WmPP5R3fjITVCmTu5yZR6FSNfBRbYCmSBvhqXb4ohn4=) 10: TMTcLQdB7mCzTNWXExbWvazU3BM.roa (hash: sYG3N4VUlPCa4xWByxTCyLchuz6zCZgtIvw79UjNCuo=) 11: YEeN4_hUhKfLX2iLvk6IjGBNox4.roa (hash: FYXhVYSuTQdo2tcw8lqUazd1KBhjD36CBy5TJkxcnow=) 12: gg1HMbG0dzq2upoM0flINgeVXVI.roa (hash: t65SibLdwnynhiukMJpvPzwWSzxYSoj24RsRfXxuqtE=) 13: sNb2DnkLfIkOejZFYEtp5Hg7ocM.roa (hash: Jv0W3rCNR0ukFAjKiJnp0UIUqEaTXUjC//XmAgJXv3w=) 14: yeIaftnaTOBQUkZM5lFc_CgiM1g.roa (hash: lPk4X0SMS0P68LkZZvS77gglxheFpiFWHBiWFlDlBfY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 01 Jul 2024 14:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:90:6a:17:ca:65:45:8d:cc:83:9f:43:62:2a:be:12:f4:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff Validity Not Before: Jun 30 17:01:02 2024 GMT Not After : Jul 1 17:01:02 2024 GMT Subject: CN=0f030028e12fd317d1dd03bb1211b0a1f02c4782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f1:85:fa:3d:3a:f9:7d:b6:2d:75:16:02:4a: a6:4e:de:53:2e:33:d2:d1:0b:06:9b:ae:4f:f3:4d: 53:62:4d:0e:49:56:16:36:09:ef:7e:f8:a1:6c:ae: 9c:04:89:f2:21:82:f7:f2:6e:5f:fd:d0:da:ed:7a: 1f:c7:e2:a4:54:bb:d8:35:7e:59:1e:da:37:04:d9: 74:3a:79:67:73:35:f5:b1:84:4b:22:e1:80:1f:4a: a3:cb:91:80:5a:66:64:dc:9b:41:1c:cc:3b:1c:f1: 66:4c:e9:b3:4c:a9:74:9d:3b:cb:46:b0:04:00:f0: ba:ea:33:ca:f1:00:15:a6:bf:f9:78:7c:4b:54:9e: 0f:37:1f:74:0b:f0:ef:b0:fa:19:d8:13:c1:d0:b5: b7:59:b3:29:92:92:6b:43:b8:31:05:19:4e:ff:9c: 48:ec:82:54:c4:f7:c0:f3:71:87:57:21:c4:16:4b: 9b:53:7d:98:be:46:d3:9d:0b:53:67:cd:90:bb:d7: d3:c8:58:5c:b1:db:2e:02:24:bd:23:a1:77:4d:7f: f8:2a:c4:ec:95:88:19:a4:48:d8:4d:de:ef:9c:d5: a7:e6:15:18:c9:5d:4f:c7:b1:d5:5e:8e:d0:62:8d: e9:7f:a4:f0:9a:b4:c7:43:fe:53:a7:5b:d8:5c:e2: f2:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:03:00:28:E1:2F:D3:17:D1:DD:03:BB:12:11:B0:A1:F0:2C:47:82 X509v3 Authority Key Identifier: keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:79:a7:c4:24:79:32:9b:32:b3:58:d1:94:ec:61:e4:a2:76: d0:af:b1:64:45:f6:40:af:d0:22:97:80:f8:b6:e6:bb:9c:9f: a1:e7:45:48:c0:2d:d4:08:86:e7:69:26:c2:0c:a2:70:96:dd: bf:b7:93:f3:e0:6e:a5:ce:3d:21:93:26:b8:33:ed:0d:5a:77: 2c:51:e7:84:44:eb:34:9e:fc:d5:49:45:f8:8a:98:76:04:08: ff:4c:af:fb:2a:50:80:62:4b:63:1b:c7:6d:9a:64:67:a0:68: aa:8d:34:14:7d:10:4c:86:61:90:d1:e4:27:7b:a3:1d:cf:c6: 6e:ce:4a:e4:ee:04:5d:4e:6f:6c:cf:85:b5:84:36:cf:88:03: c2:21:39:80:40:3c:7e:60:4c:4f:d3:7f:7f:01:9d:ab:97:12: 34:78:25:99:57:7f:b3:21:a1:e7:29:82:2f:7d:33:66:40:d0: 7d:a0:d0:b6:5c:d0:6b:d0:e8:76:1e:94:0b:f1:5a:32:c6:1f: 8e:45:d7:39:1b:5a:10:ef:5d:13:8e:f1:a4:81:57:95:dc:31: 86:a1:13:c9:db:33:69:1c:31:bf:ff:15:29:0a:43:55:dc:7a: 1e:b8:6a:f4:ca:d9:98:e1:22:d7:4d:76:88:ce:b6:ec:c1:f7: 23:b3:8a:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZBqF8plRY3Mg59DYiq+EvTyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2IwNmJmNDEzMDBkYzRkMzBmM2QwZTE4MGM5Yjk1ZDJi Y2RkZmYwHhcNMjQwNjMwMTcwMTAyWhcNMjQwNzAxMTcwMTAyWjAzMTEwLwYDVQQD EygwZjAzMDAyOGUxMmZkMzE3ZDFkZDAzYmIxMjExYjBhMWYwMmM0NzgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vGF+j06+X22LXUWAkqmTt5TLjPS 0QsGm65P801TYk0OSVYWNgnvfvihbK6cBInyIYL38m5f/dDa7Xofx+KkVLvYNX5Z Hto3BNl0OnlnczX1sYRLIuGAH0qjy5GAWmZk3JtBHMw7HPFmTOmzTKl0nTvLRrAE APC66jPK8QAVpr/5eHxLVJ4PNx90C/DvsPoZ2BPB0LW3WbMpkpJrQ7gxBRlO/5xI 7IJUxPfA83GHVyHEFkubU32YvkbTnQtTZ82Qu9fTyFhcsdsuAiS9I6F3TX/4KsTs lYgZpEjYTd7vnNWn5hUYyV1Px7HVXo7QYo3pf6TwmrTHQ/5Tp1vYXOLydQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA8DACjhL9MX0d0DuxIRsKHwLEeCMB8GA1UdIwQY MBaAFBx7Br9BMA3E0w89DhgMm5XSvN3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAt MjRmZGRjNmQxNDdiLzEvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83MDJiMjgtZTE1OC00MGMwLTgzMzAtMjRmZGRjNmQxNDdi LzEvSEhzR3YwRXdEY1RURHowT0dBeWJsZEs4M2Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVHmnxCR5 Mpsys1jRlOxh5KJ20K+xZEX2QK/QIpeA+Lbmu5yfoedFSMAt1AiG52kmwgyicJbd v7eT8+Bupc49IZMmuDPtDVp3LFHnhETrNJ781UlF+IqYdgQI/0yv+ypQgGJLYxvH bZpkZ6Boqo00FH0QTIZhkNHkJ3ujHc/Gbs5K5O4EXU5vbM+FtYQ2z4gDwiE5gEA8 fmBMT9N/fwGdq5cSNHglmVd/syGh5ymCL30zZkDQfaDQtlzQa9Dodh6UC/FaMsYf jkXXORtaEO9dE47xpIFXldwxhqETydszaRwxv/8VKQpDVdx6Hrhq9MrZmOEi1012 iM627MH3I7OKrA== -----END CERTIFICATE-----Generated at Sun Jun 30 20:29:24 2024 by rpki-client on console-ams.rpki-client.org