$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft File: 8EpYBH83u8BXlEu_jK2HQoeVkto.mft (raw, json) Hash identifier: i4PjxtOnkp6DKI28QaPMHBGTf0nrk7PE+5nWSKiuBo4= Subject key identifier: 35:42:F3:AC:37:15:CC:27:52:C9:EE:03:98:88:99:43:26:B8:DC:C8 Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da Certificate serial: 0191FB116D1A2AB5047D962941936549572F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft Manifest number: A3 Signing time: Mon 16 Sep 2024 13:41:48 +0000 Manifest this update: Mon 16 Sep 2024 13:41:48 +0000 Manifest next update: Tue 17 Sep 2024 13:41:48 +0000 Files and hashes: 1: 0HuPQoQJtD4_eJkRPoOjTJmAFu8.roa (hash: LxyK41q1CvN7wgv66Lr4B7qVHDVYhBKIC+8jJpr2fgQ=) 2: 1-zlbnUfr294YBn_4UwpfGiFvTlM.roa (hash: P7OyfKs7769+cy9SHBiPzjQTe3Ve+cbVqoLmkrVC7Q8=) 3: 3LOfZkYlebTZe7OVa0XjaAXOyO8.roa (hash: bCbq7SlR6v6nZ/rZ3QoujlY+V1PPwJsykKaeM+Sh6Ek=) 4: 8EpYBH83u8BXlEu_jK2HQoeVkto.crl (hash: U/RTz0S0OiEJ6wFF+FX2a0Cy14epHpT+bAKuMRvUhIo=) 5: JKhgHIpoeEgxYA01i-D9U7Id_lg.roa (hash: BYFL4N2kM6pQ3NbeQd5vxKL86dtKhoN8U7X6KQzRBfo=) 6: LpYM6ue0_PvHan5preBu7hrZkM4.roa (hash: Hk7zmL8hpOjkWCXC2BvMz4g2NTXXBx4AT1V6hXdrgbU=) 7: ODBhxY63jXTqeI3s_qJcxSyc6jQ.roa (hash: fhBI5SmDxXcGqbnUUcuvis0BGQrU/PSvmV0Ewz2OyW0=) 8: TkToD_H1ekCM_j4lHtsMx3f6OD4.roa (hash: eDy7irDxRyzxUDEY9PbBrujENzF7ppTGScjUhZVdnUE=) 9: WQTK7ODDgsSFiU4F18PENMrI_iU.roa (hash: HC/TLCKmCaGgXE8sGyV5q+erT36y4bhTSh10AX8jx+w=) 10: dilIZ_m0N0KpwP4nQhCx-qQboOo.roa (hash: ue4P2X3Td8gQCVKtmnlfgVYfIncUdITv4atoQl1cj38=) 11: gNXDjGJgnElzGJw3o-3Ql5EZL4o.roa (hash: TJgckhJBBRpGYhyFD0yw9m34NxU8anFsSaa5uVJg8R8=) 12: qcEG_FCNVRYz8PCZN0muoopYL2A.roa (hash: NaDwp3PfG423/klCaud5IdcuiRlirFjWcBvoR9XTy6k=) 13: qiVeRvbfdTNhBfxX7-inCepafPM.roa (hash: z2rjhvN3bUbiIctiiUmazITJ9NsxgM9NYzXT3dQKm6I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 17 Sep 2024 13:41:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:91:fb:11:6d:1a:2a:b5:04:7d:96:29:41:93:65:49:57:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da Validity Not Before: Sep 16 13:41:48 2024 GMT Not After : Sep 17 13:41:48 2024 GMT Subject: CN=3542f3ac3715cc2752c9ee039888994326b8dcc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b0:a3:f9:be:f9:df:ca:68:a4:c4:3b:98:7d: 16:6c:d5:27:27:60:70:51:7e:ae:ed:24:1e:52:7b: 96:ea:f0:22:97:26:3b:7b:e3:e4:05:f4:13:f0:3c: 14:59:00:d2:54:d0:a6:38:97:6d:d3:d1:eb:bf:e8: ee:da:5d:31:a0:71:98:ad:c1:e4:f6:63:ce:de:96: 73:5d:9b:f3:18:82:a5:47:20:8d:5c:88:6c:7b:ca: 3d:cb:ce:3f:d9:ba:a7:92:03:5c:13:62:5a:39:33: b1:7d:cf:3a:bc:87:7e:ef:98:97:3b:14:da:46:6f: 70:56:6d:d9:ca:0a:97:44:f5:73:50:ef:6a:3f:ec: 86:c8:eb:36:d2:ba:80:5d:7a:9f:ec:f2:40:07:1b: 3e:09:e0:1b:d2:04:5d:6e:3a:c8:b9:01:1f:16:5e: cc:a9:12:96:49:72:d7:91:71:ec:93:ff:dd:45:43: ac:31:88:a9:36:b0:2f:d7:26:06:73:20:4f:fc:64: 1d:44:ce:54:c4:fe:1d:c7:c1:2c:b9:76:2d:46:bb: 37:0e:b4:98:f6:1f:ab:25:25:b0:67:20:3c:6a:1a: a5:6d:94:e7:df:ad:86:d2:13:04:de:63:6e:51:b8: e9:9d:de:54:e2:03:78:41:7e:fd:2e:f2:bd:01:c9: 05:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:42:F3:AC:37:15:CC:27:52:C9:EE:03:98:88:99:43:26:B8:DC:C8 X509v3 Authority Key Identifier: keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:d3:89:7b:f8:d1:18:48:89:0d:24:71:5d:5c:e9:7f:53:0a: e0:1d:d6:d4:f8:44:e6:da:83:0f:76:43:8f:7c:99:ac:c7:4a: 67:41:36:69:2c:6a:dd:3c:ca:49:df:42:70:f5:ff:3e:85:bd: af:d9:9b:6b:d6:6a:ec:ed:a6:92:bd:bb:7d:69:7d:89:a7:7c: cf:17:11:98:f3:b9:1e:5e:b8:74:1a:63:84:49:29:31:4f:e1: cc:d5:4e:10:44:e9:c0:c7:36:5e:69:30:33:36:1b:50:5a:88: 6d:9a:82:32:0c:fa:07:33:79:b0:ed:15:e9:61:2d:10:69:d9: 73:82:7b:0f:2a:f1:19:92:aa:9c:ea:e2:df:5c:d2:a0:35:d3: f8:1c:a9:f4:61:f1:f9:92:5e:5a:83:2e:9e:3a:a7:ac:df:ce: 90:d6:c8:ca:35:ce:19:85:08:6e:bd:e1:c0:f1:fc:5a:87:f5: 33:2f:dd:26:2a:3a:e5:00:5b:f6:95:f5:24:1a:0c:fa:ff:c0: 69:32:73:a2:19:54:aa:86:a0:c9:a4:68:92:2b:71:9e:e4:24: 08:4b:07:85:6e:92:91:7d:75:51:6d:af:9a:a1:39:af:34:50: af:c1:8d:dc:bb:e7:6a:84:1c:5c:28:a7:8b:e2:cf:38:ea:cc: d0:1e:f3:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZH7EW0aKrUEfZYpQZNlSVcvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5 NTkyZGEwHhcNMjQwOTE2MTM0MTQ4WhcNMjQwOTE3MTM0MTQ4WjAzMTEwLwYDVQQD EygzNTQyZjNhYzM3MTVjYzI3NTJjOWVlMDM5ODg4OTk0MzI2YjhkY2M4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7Cj+b7538popMQ7mH0WbNUnJ2Bw UX6u7SQeUnuW6vAilyY7e+PkBfQT8DwUWQDSVNCmOJdt09Hrv+ju2l0xoHGYrcHk 9mPO3pZzXZvzGIKlRyCNXIhse8o9y84/2bqnkgNcE2JaOTOxfc86vId+75iXOxTa Rm9wVm3ZygqXRPVzUO9qP+yGyOs20rqAXXqf7PJABxs+CeAb0gRdbjrIuQEfFl7M qRKWSXLXkXHsk//dRUOsMYipNrAv1yYGcyBP/GQdRM5UxP4dx8EsuXYtRrs3DrSY 9h+rJSWwZyA8ahqlbZTn362G0hME3mNuUbjpnd5U4gN4QX79LvK9AckFEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDVC86w3FcwnUsnuA5iImUMmuNzIMB8GA1UdIwQY MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt ZjVmYjcxYjlhNTFmLzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJNOJe/jR GEiJDSRxXVzpf1MK4B3W1PhE5tqDD3ZDj3yZrMdKZ0E2aSxq3TzKSd9CcPX/PoW9 r9mba9Zq7O2mkr27fWl9iad8zxcRmPO5Hl64dBpjhEkpMU/hzNVOEETpwMc2Xmkw MzYbUFqIbZqCMgz6BzN5sO0V6WEtEGnZc4J7DyrxGZKqnOri31zSoDXT+Byp9GHx +ZJeWoMunjqnrN/OkNbIyjXOGYUIbr3hwPH8Wof1My/dJio65QBb9pX1JBoM+v/A aTJzohlUqoagyaRokitxnuQkCEsHhW6SkX11UW2vmqE5rzRQr8GN3LvnaoQcXCin i+LPOOrM0B7zIQ== -----END CERTIFICATE-----Generated at Mon Sep 16 18:19:00 2024 by rpki-client on console-ams.rpki-client.org