$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft File: VXsKwQuGQqJ909dO1ste4EXme5c.mft (raw, json) Hash identifier: IQl3E12YBig3+R8yj0ip1T1u8N/19N/pCP6XbqP6Rnw= Subject key identifier: 43:B0:B3:A4:3D:FB:8A:4F:36:A9:A8:9B:7D:50:EC:B4:44:31:BB:EE Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97 Certificate issuer: /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97 Certificate serial: 018F87ED53AEAB144404CAB15C46F6C40402 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft Manifest number: 05CB Signing time: Fri 17 May 2024 19:00:28 +0000 Manifest this update: Fri 17 May 2024 19:00:28 +0000 Manifest next update: Sat 18 May 2024 19:00:28 +0000 Files and hashes: 1: 1-emwUgut-7PQxovaRCbud_T4y2M.roa (hash: sICXDgGM/U3UcKLcfnI44zZ23Nv4v+yEVe7yBH1HZ3I=) 2: 8IuHfo6E4cUTGshNOClhHiJp1mc.roa (hash: 0QqNKDmAWWhyG+T2k2hVqnE/bjRv0Atu7GHaE14p2U0=) 3: 9O7pgTAAYGBvXE-dc9Xvy4bho3c.roa (hash: ucObeVeLvD0eo3HQCNWe3AzytyWoQDXoM4Zn0TXDQI8=) 4: AA76tAX11u6Tvej1TTsjMVmYjXA.roa (hash: O0FK00lUKts0QfDT9deeGxe+OudU5RHCjpSHoUxUxq8=) 5: FPEUJ4Xp10_2M2pN38tI-Gm6p4U.roa (hash: 6g98dSodFnb2M9rRdyhQ+HwfjRvC0dwrS/bv95B/354=) 6: L7FFdoaCel3lnz7OVmdEcreqAqo.roa (hash: ObHXuST+excf8VAEkygq15/6fxqeavbqPqP57FSMoK0=) 7: PPQPE4n9TDt84uapgqytLIKSRLA.roa (hash: GmDINEYBe0/qDumSVx25E8hSj54H1k1VQX/9D3vzaxU=) 8: VXsKwQuGQqJ909dO1ste4EXme5c.crl (hash: kjNLYFTVnJ/bLZS1b4b6JngnKFbUKppqHnQDr6ND4lw=) 9: VkZPKedOtHrcuDVy4ZrwyR6nd_Q.roa (hash: kLbxP6hPt6Ul0FDFpRfptZ74kIilMnW/RZspyBrT85c=) 10: kb-ItpMgjVYudNdKRc7g-s2a9yg.roa (hash: f2c7ckXZKOxpUVC6Jsl8fwD9beeB0PtfMBM4YN1W4Os=) 11: mN-mW5yVO6_amtq-y_qPGwUPjU8.roa (hash: pPiL7gl3EsOrCU1vrIyBa02OQRzE3zu7EeYxqmAoRZ4=) 12: oVycwtHHW5dobDhspj5JtdhcUWY.roa (hash: iuPIHTwyaebzzLyzDCoiKStsls0/u04kzANYEx1uqQk=) 13: q7k-W6x6dOnCdVXA78sps5viTqQ.roa (hash: pt0WQRgxp+dj8oX3L0U4VxN/ESekK9fwVuCf3jIDtvg=) 14: rYCUqNavSCplGVZUIEeSN5JOv4w.roa (hash: TCfG91WtHnb2hVtEjD8MgtDBWOWxWV9/hL6i76tVj8g=) 15: toLfcjUXr5Fv7m8I3ZqcEfTJ5N8.roa (hash: nm/X65Fir2zuukKfLOrebn/74+TfFPwFPOEvgfpsfFc=) 16: wdtE_3D6FbAFHOP--1DXG-ZWJC8.roa (hash: J1WwYWMorgPFnCHZe01D/31oPYzRXvtwLXf7IpXryQ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 May 2024 16:46:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:87:ed:53:ae:ab:14:44:04:ca:b1:5c:46:f6:c4:04:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97 Validity Not Before: May 17 19:00:28 2024 GMT Not After : May 18 19:00:28 2024 GMT Subject: CN=43b0b3a43dfb8a4f36a9a89b7d50ecb44431bbee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d5:65:46:d4:81:67:ba:c0:26:8e:4c:61:ed: a5:08:14:f1:e1:3b:e2:b9:61:05:87:f9:3b:a4:2b: 92:5b:da:e0:ae:a0:8a:e6:3d:50:87:cc:f4:26:2a: 12:da:17:e3:55:73:d1:a0:11:55:a2:20:14:ec:f2: 20:30:e4:74:2e:29:32:80:96:cd:2f:c2:cd:a6:07: 06:ba:2b:28:61:7e:db:6a:24:e0:21:fe:01:a1:66: 87:d7:37:5e:40:75:5a:a1:76:47:15:70:82:1e:d3: e1:96:61:9a:72:73:0b:27:41:b4:53:c0:89:df:89: 3a:cf:a8:63:44:97:f9:14:4f:00:39:66:26:5b:74: e1:05:c7:e7:f0:68:d7:8f:15:1a:a3:e1:e6:16:38: e4:88:b0:82:20:35:de:8c:b4:e0:bc:f4:f3:63:3b: d5:84:73:05:9c:7d:d4:58:3a:93:2e:54:4f:d1:59: 8d:0e:c0:0b:13:78:04:3e:5b:cc:37:5c:90:7a:a4: 8d:1b:bf:d8:ce:c3:36:d5:5c:d6:5e:07:53:09:60: f1:58:ff:13:cc:8d:ff:f7:90:aa:4b:ba:ed:e8:37: 44:00:42:ce:96:23:98:b4:7d:e1:bb:a6:8b:87:2e: 70:5b:54:09:04:51:0d:ad:0e:31:58:ad:d7:68:9a: cf:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:B0:B3:A4:3D:FB:8A:4F:36:A9:A8:9B:7D:50:EC:B4:44:31:BB:EE X509v3 Authority Key Identifier: keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:da:ae:e8:ec:2f:2d:51:a0:d6:45:20:52:bd:a1:e2:91:7f: 5c:1e:6a:d9:4a:01:c8:2f:7b:42:a3:fb:45:1e:74:ea:ec:a0: 65:84:e4:00:fe:75:91:18:24:78:31:76:c7:6f:25:73:b9:5c: 54:4b:38:a2:f8:b3:d6:5b:45:00:fc:00:95:1e:7a:26:19:a5: ab:26:48:07:f5:b2:68:df:86:c2:42:06:37:2b:2a:63:ec:4f: b5:f6:34:2d:3b:ec:9e:de:ed:43:b3:45:83:2d:ce:6e:e9:fd: e3:76:22:26:49:85:5c:0d:26:f4:8e:df:22:5b:ea:88:5a:0a: 3a:8c:a1:7f:59:d8:68:4e:e5:a8:1e:d4:83:11:76:2f:d3:e2: ae:27:64:b8:e8:e9:93:96:11:ce:a1:85:2f:9f:b9:2c:3e:9a: aa:91:ee:41:1e:0d:48:0b:98:1e:22:54:8f:10:b9:cf:53:72: 47:e2:d2:cf:e4:42:9d:26:cc:40:d8:f7:5d:12:63:cf:9c:df: 87:a4:bd:eb:10:eb:59:83:ed:ef:a8:28:09:0d:ff:eb:e9:b6: 0d:29:ee:ab:6c:da:e0:2d:5a:57:ad:58:2e:56:79:62:bf:49: de:2d:f3:cb:ae:4e:fe:72:ec:12:f4:e1:cc:16:70:41:cb:a5: a1:f5:8b:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY+H7VOuqxREBMqxXEb2xAQCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1N2IwYWMxMGI4NjQyYTI3ZGQzZDc0ZWQ2Y2I1ZWUwNDVl NjdiOTcwHhcNMjQwNTE3MTkwMDI4WhcNMjQwNTE4MTkwMDI4WjAzMTEwLwYDVQQD Eyg0M2IwYjNhNDNkZmI4YTRmMzZhOWE4OWI3ZDUwZWNiNDQ0MzFiYmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNVlRtSBZ7rAJo5MYe2lCBTx4Tvi uWEFh/k7pCuSW9rgrqCK5j1Qh8z0JioS2hfjVXPRoBFVoiAU7PIgMOR0LikygJbN L8LNpgcGuisoYX7baiTgIf4BoWaH1zdeQHVaoXZHFXCCHtPhlmGacnMLJ0G0U8CJ 34k6z6hjRJf5FE8AOWYmW3ThBcfn8GjXjxUao+HmFjjkiLCCIDXejLTgvPTzYzvV hHMFnH3UWDqTLlRP0VmNDsALE3gEPlvMN1yQeqSNG7/YzsM21VzWXgdTCWDxWP8T zI3/95CqS7rt6DdEAELOliOYtH3hu6aLhy5wW1QJBFENrQ4xWK3XaJrP+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEOws6Q9+4pPNqmom31Q7LREMbvuMB8GA1UdIwQY MBaAFFV7CsELhkKifdPXTtbLXuBF5nuXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81ZTVjMzAtOGFhNC00N2U4LWJkOGYt ZmJlMWEwZDBhYTk4LzEvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi81ZTVjMzAtOGFhNC00N2U4LWJkOGYtZmJlMWEwZDBhYTk4 LzEvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYNqu6Owv LVGg1kUgUr2h4pF/XB5q2UoByC97QqP7RR506uygZYTkAP51kRgkeDF2x28lc7lc VEs4oviz1ltFAPwAlR56JhmlqyZIB/WyaN+GwkIGNysqY+xPtfY0LTvsnt7tQ7NF gy3Obun943YiJkmFXA0m9I7fIlvqiFoKOoyhf1nYaE7lqB7UgxF2L9PiridkuOjp k5YRzqGFL5+5LD6aqpHuQR4NSAuYHiJUjxC5z1NyR+LSz+RCnSbMQNj3XRJjz5zf h6S96xDrWYPt76goCQ3/6+m2DSnuq2za4C1aV61YLlZ5Yr9J3i3zy65O/nLsEvTh zBZwQculofWL2g== -----END CERTIFICATE-----Generated at Fri May 17 20:15:34 2024 by rpki-client on console-fra.rpki-client.org