$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft File: YFgeZz2A90dJNrITN-r8wb3Dhek.mft (raw, json) Hash identifier: rd4xodXf+L4QJ5h05iW11ffbNc52wwVMKo9kOP6KOX0= Subject key identifier: D8:F9:D4:C7:EE:CC:AC:61:C2:55:22:1E:B6:B7:15:AB:E2:16:02:9E Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9 Certificate serial: 018E84C065EC2F6791334F4F113D296A366A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft Manifest number: 0ADE Signing time: Thu 28 Mar 2024 11:09:45 +0000 Manifest this update: Thu 28 Mar 2024 11:09:45 +0000 Manifest next update: Fri 29 Mar 2024 11:09:45 +0000 Files and hashes: 1: 4hvKKQwWQhwSBMCcdI9MVzO9dhY.roa (hash: Ucqi9q0b6PX/FE1OxZlfC8z3gcxMlfzZKbAOwzbqiE4=) 2: 6DLO8aK6bBqc2T9_A7FLWsfWxQk.roa (hash: r5M3fJhXehDfUWAUqFjFwsUjGBvZ2kqNK1dq5fGu5Eg=) 3: 7oB6DOUA9G1FvkyITzxv4cX5OMo.roa (hash: xvzqPLQfjJ5axjpWFOk7rZmuP+2V/0+uAMhF/k5BYNw=) 4: 8ewO0kF6IroMWUBBfgE2L_ThOtU.roa (hash: DHZBkahLIu3ewR/elK0J5xiW6qQYR65gwPc6punju18=) 5: 8otsMGth1S4N0YfEZbZIJpfcM7s.roa (hash: +pU6cLRZeIDg/L1LlosDn2+HeBH3DMp0dQz/xJBYcdo=) 6: 9aOxL-nh4UUt-_IMi9OOHGvoDSM.roa (hash: J1J5UkOnr2+zzFl2RgQKc7WxOvurg01xoH8hgRVMBD4=) 7: AOf0MZWHENn-rznfYFf9XXx0HhU.roa (hash: OczPz4CedC4XjQ4jLfKS5ZFZy5hnfB0PcWugRR364es=) 8: BKYmTQt6JPsriSrM_LzpUWiAQII.roa (hash: FqMX6+T1yHUwH0tGC8ptBfWjsyNAjYhGliBl9EIbBVg=) 9: FF4YZklL_bkcAkxf0IWaB2CN7Jg.roa (hash: Uf5oZUWiJ4OrU5GuVq5M7O6tjO0+iJsfcrUk4y2FatE=) 10: G9u2KF59Ez3Tk-6MAgZdfyvVHL4.roa (hash: 27ThFvHk5JZTfqzk05BswlgrcgDHlW8rQUsGE2mFT14=) 11: HCUsN8ijvRpE6W0SYz1D3kKTkmE.roa (hash: Ob0Pz6utJjglaoB0GTLYLY+/Hgba1RWM9ZjIw/P4KpQ=) 12: Hlm6U1wNwdfo26HUBqKingFGX0k.roa (hash: TD++n1jEZMgsext6CN078hB/SThP47hOj7rXsluhdE0=) 13: JXa0g7O6BApZkhscDuspJws4Jec.roa (hash: 3V7idOUHrJhUDVnGhJ7PBf/Fz4e/zzGKWCoRv6NVvCM=) 14: L7ncx2xbnhhEO42YI_9gv9N512k.roa (hash: ZXEMLj4Pw4/VwpUjD4pBBWvbHtyy7sfzKojg16HSQwA=) 15: MghAPluvx32zcSIwpyI4QqfxfzY.roa (hash: YcXJNQSyqVmykVkvTqltoOTqXMuNd7RcdFc0ZJm5t7Y=) 16: N8ulU-vFTgu3VsvgelydQBAMiQ4.roa (hash: lfRJniN1LNPAMoObejC1geAvhZI8YKAgbklp6Mfau24=) 17: S_pAP66H1f439oE-22hyFtyvyBw.roa (hash: BPplwmPUIv/iVqsyqzNV1l9Cwc9jUY8/GYTaIXqTIx4=) 18: Uujg1vWtTBGDxRtQ_w_FZAdYVvw.roa (hash: bSaEVpBrBTluPKrKtZFObM4ahdqClvbYJomIJxU1WuI=) 19: VO8aSMMyE1Idk1H3CaNaJldXInk.roa (hash: a/yC2ZWIDpsLnaqyGX27KmyFjwGhs1Y/l9dc8cJpoB4=) 20: W4yN-Xn8pK2K1ug4K5VjhV16A8c.roa (hash: X4Fpotf0gARGCyRdRvKext+2wVDPfUFQVStA3vZqGwQ=) 21: WlexZI9HfgbsdmMCeQPpTefTMao.roa (hash: c0DjiwxT0XmzycOy0gdf2/nxp28/74OpC67WqR9X6fM=) 22: YFgeZz2A90dJNrITN-r8wb3Dhek.crl (hash: aK94RUqC0BIrgCdVIk2Zn3ZO9vDc9wAoPhMffWtjrbc=) 23: _kfD9qLa6o_YJ1S0qFCLjn03DnU.roa (hash: LopMBWxG0MhDF1XJbA+b9B7YQhsls7AiNx5KscCAr6I=) 24: c93aNeFuIBq67DLTDtzGrbYVmws.roa (hash: sOrFOFGdSscumi0ANhVQjRfll3emtq1pkCkfbQrvgCA=) 25: cTOJoqWQjbgHxSpvdHijc4xJ8zc.roa (hash: 1EgrFN8dUQVFTMKsU9p6PxbkQDG13zr+W0pek+5VtsI=) 26: cZUD51CHqsQn1UPp84zHrugIJWw.roa (hash: 7KPwaObmJO7IoeNMJpn2AxqB+8q0pzt5J4OjPKhxazQ=) 27: ccgXeOEWSJRFv5lfvWnlj7VgbyE.roa (hash: 4kw1OcmXWV15WCSnoHMRDTNfP5eKgwTiqMN6Gg4M5wY=) 28: ez5wDyYGi9w0DRw-3WQkXYbBQx4.roa (hash: p8EoqwloZwEOjer6ahz9NEOm4eLiOy7gFcAa3kP3QbA=) 29: gKXToOCXWGhDYi3ZHv8ThkFEZ2Q.roa (hash: Vj4UEf6oL2ec4eCk5J0yzfYd0dusFxPLMFxF7Ovyi+I=) 30: i8Mwi0GK1eRkxR3JO_mEXIip19w.roa (hash: jIgFHPikOCv4OzsrWTEdZ5MA9K+zVQSu5RFE24idWLs=) 31: l6LoUqLoqriKRFQXErP2Qc1uVzw.roa (hash: 7N76w9pifDbPMTKiXVMiFfk4w9FJFbEfnQdYHSw00Ek=) 32: n35rgtMJSLTvy0_x6zm60m0eeW0.roa (hash: lYkmfD2zjlIGyFWxLRGAJcsbSY3tllDj9JCJIPVG1TY=) 33: nbtlFmVz8ck6IaseaLKx4hSFELk.roa (hash: JN9FepzBXbTvAQlT6m849/appCf+1DShX5CyOz4oBZw=) 34: suULw5bwoi-k02zh8ipaPiSNB2Y.roa (hash: 7a10ZEUJB1C5S6ro0yndQLrDuBFgl2x3L6inipA4WSQ=) 35: uZnv2LnHOamJti_NgFYnoYRaF6c.roa (hash: VyRVbVsG809hIE3ZF3Mv/bAol4jy6sYVk94pLGjD3vA=) 36: xJ_tafogDHqHn5lhuFnJSLFmhFQ.roa (hash: 313JR6HKaqGfGycK3Og3ltlYxw5auPIqKS4jsqVgjvk=) 37: xsApzOxLukUzdkXA9S1sXl93VDE.roa (hash: ncTBqBOt1YM0Jy29350mzqf/AxTM4V/6AUZVqREJ+Xk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 29 Mar 2024 11:09:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8e:84:c0:65:ec:2f:67:91:33:4f:4f:11:3d:29:6a:36:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9 Validity Not Before: Mar 28 11:09:45 2024 GMT Not After : Mar 29 11:09:45 2024 GMT Subject: CN=d8f9d4c7eeccac61c255221eb6b715abe216029e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f2:01:e2:0d:7c:99:56:5b:7b:f4:43:bb:04: e8:fc:6c:cc:2f:6e:e4:44:ec:f4:42:fe:2b:e2:9e: 42:19:53:dd:35:d1:c4:65:6d:b4:bf:b1:73:b6:b2: c1:02:0c:23:eb:ef:d0:64:5c:1a:28:65:c6:01:f1: 1e:16:da:82:ac:3a:c5:4b:a6:c5:af:a9:b2:5a:d0: 7f:7c:f0:01:12:01:60:de:ee:69:ff:14:fb:11:be: 4e:44:87:b2:1e:9c:c4:78:44:2d:10:15:0b:04:96: 76:fb:50:db:9b:c9:4a:52:be:37:7a:69:24:d7:cf: 5a:f8:64:cc:ec:cc:8c:db:28:49:a2:65:be:d2:2e: fd:14:37:ff:cf:2d:02:e7:af:1f:6d:39:4b:c3:c1: 1c:1c:f9:34:aa:86:9f:d5:a1:b9:e9:6f:49:c6:c8: 9e:e4:14:d3:13:a5:9c:82:22:a6:0e:eb:3e:98:24: 39:01:f5:d8:c3:1f:60:a6:e8:df:cd:42:16:94:6f: 10:ac:11:7c:42:6a:51:df:d6:28:cc:62:f8:88:5f: 40:6c:7e:fc:d1:56:0e:d6:22:a9:49:70:f5:87:45: 56:fa:48:e5:b6:d8:3b:aa:a8:1c:35:12:6e:60:a7: 6d:f3:1d:32:1c:08:3f:e7:95:3f:3a:fc:af:09:83: 23:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:F9:D4:C7:EE:CC:AC:61:C2:55:22:1E:B6:B7:15:AB:E2:16:02:9E X509v3 Authority Key Identifier: keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:3b:04:37:20:7c:92:16:92:1c:cb:8d:17:88:3c:d2:41:57: d0:a2:0d:54:c7:b0:dc:1e:73:e0:d7:2f:7f:e9:c9:03:3d:c8: 56:30:84:69:e2:4a:56:83:10:f9:34:f9:cf:54:b6:d3:d3:71: 64:53:b3:b2:1d:3d:b4:d5:6f:52:7f:2f:de:a8:b4:c6:8f:75: b4:a3:a7:50:4c:79:8c:08:f8:98:d2:fb:1f:2f:de:5c:cc:25: 0f:aa:54:43:50:cd:d3:ab:c3:43:1f:1e:73:f7:88:06:4c:8f: 7e:14:59:b8:79:0b:05:91:fa:99:6f:fe:e1:08:d0:6c:bd:8f: 54:f5:2c:55:7c:f9:68:69:bb:7a:30:40:68:c6:bd:b8:8b:65: ed:c2:03:04:54:3f:c9:3b:c9:5e:f9:79:a4:c3:88:dd:01:ed: 5e:ec:e5:ec:75:20:c1:67:f9:ff:bc:8d:10:d7:9d:06:b9:8a: 35:58:de:1a:e9:b7:2c:7d:d9:5d:c7:ed:ce:ab:7c:19:72:f4: 55:21:c4:9e:d8:a5:15:3d:f4:02:7a:8e:cc:4f:f6:3f:68:92: bb:05:4d:a8:23:74:c4:a8:ef:95:27:05:d8:e0:27:53:94:48: 9f:57:46:3d:0d:75:4d:26:a0:b7:c6:f9:b1:13:5c:01:74:b0: 05:00:b3:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY6EwGXsL2eRM09PET0pajZqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj Mzg1ZTkwHhcNMjQwMzI4MTEwOTQ1WhcNMjQwMzI5MTEwOTQ1WjAzMTEwLwYDVQQD EyhkOGY5ZDRjN2VlY2NhYzYxYzI1NTIyMWViNmI3MTVhYmUyMTYwMjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPIB4g18mVZbe/RDuwTo/GzML27k ROz0Qv4r4p5CGVPdNdHEZW20v7FztrLBAgwj6+/QZFwaKGXGAfEeFtqCrDrFS6bF r6myWtB/fPABEgFg3u5p/xT7Eb5ORIeyHpzEeEQtEBULBJZ2+1Dbm8lKUr43emkk 189a+GTM7MyM2yhJomW+0i79FDf/zy0C568fbTlLw8EcHPk0qoaf1aG56W9Jxsie 5BTTE6WcgiKmDus+mCQ5AfXYwx9gpujfzUIWlG8QrBF8QmpR39YozGL4iF9AbH78 0VYO1iKpSXD1h0VW+kjlttg7qqgcNRJuYKdt8x0yHAg/55U/OvyvCYMjCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNj51MfuzKxhwlUiHra3FaviFgKeMB8GA1UdIwQY MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt ZmIwNzk1NWYzYWFhLzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADjsENyB8 khaSHMuNF4g80kFX0KINVMew3B5z4Ncvf+nJAz3IVjCEaeJKVoMQ+TT5z1S209Nx ZFOzsh09tNVvUn8v3qi0xo91tKOnUEx5jAj4mNL7Hy/eXMwlD6pUQ1DN06vDQx8e c/eIBkyPfhRZuHkLBZH6mW/+4QjQbL2PVPUsVXz5aGm7ejBAaMa9uItl7cIDBFQ/ yTvJXvl5pMOI3QHtXuzl7HUgwWf5/7yNENedBrmKNVjeGum3LH3ZXcftzqt8GXL0 VSHEntilFT30AnqOzE/2P2iSuwVNqCN0xKjvlScF2OAnU5RIn1dGPQ11TSagt8b5 sRNcAXSwBQCzjw== -----END CERTIFICATE-----Generated at Thu Mar 28 14:01:25 2024 by rpki-client on console-ams.rpki-client.org