$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft File: 7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft (raw, json) Hash identifier: BGbUBTw1wZZTuOojFQz38fQifW4T02e6lRao6+xc0TU= Subject key identifier: D3:58:4E:E2:8C:44:26:92:5E:66:EE:D1:11:A0:34:32:A5:FD:41:07 Authority key identifier: ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C Certificate issuer: /CN=ed6da9e41686d21c12799c8e84b274aa8241508c Certificate serial: 018F23B88222961F7DFEDFD460B45F948ECE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft Manifest number: 1153 Signing time: Sun 28 Apr 2024 08:00:45 +0000 Manifest this update: Sun 28 Apr 2024 08:00:45 +0000 Manifest next update: Mon 29 Apr 2024 08:00:45 +0000 Files and hashes: 1: 1-UifhaRVgUhTAluPYSd1ZV-JELU.roa (hash: ekyFxa4Oa9SMyomWCkXMPDSqCJUlTiO9S47HVlax5kQ=) 2: 3cz6P760pBFdi7ZQJ2WSO-PiQ40.roa (hash: k3rdywD0ImOdPlVTj0zcpCECcVTQFML9mEjgGMGXris=) 3: 3rGM2CDQ1sMNAfoEnzqNQMFul40.roa (hash: i21zKr3iZsSQAhhAkE+IReH/XpdxWUZ1kjhBTXdy9Uk=) 4: 7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl (hash: KwgElq64JMKkx8fVchfwcn/l4o4gjWQIzWAoDxlv2dw=) 5: FxtmQsRHdazXcugQ69ekB4q6Bdw.roa (hash: 90HyHq1bA9Iu1U71oRnDfM++3CcS9lnpBT4OEkzWdeg=) 6: QyGZMCcdic5ez0YxRCsG3QWaHCs.roa (hash: OrCoGPhUORL5PdctT+lDJ5QdGlGYv2PPXocefLsSeHw=) 7: edFtX7hSS2bORCT2pxwDXn_nNGY.roa (hash: V2zemCSlLMhLeXP3poi1BJARqBVyr+5YSm7xcfWFp94=) 8: l8yMPs3NGnxY6EQJGUdh1qoXO64.roa (hash: vqmUCco/JpoWA6egaO5n5DJGEfVu95iOAsrTAQdkfsI=) 9: lgPRQxzyLIwmsDZTSPARrthKRQ4.roa (hash: C3nlt4HMKw3X2vK16j9CEvRaLAcce+gj33XvPxTWrEY=) 10: qI4Kq1aO50ZazGMOae1JgXpFUTw.roa (hash: u8vWdWhM48oyfdbcHVvawTGl8rojr+00F9WF0dOmQXI=) 11: redkD6oNHgrDvm9ZitceoPE3zag.roa (hash: ApL/PkJCJTI7HN13KKuBYvNQphSzISdO5sbloqMP6Wc=) 12: ug3T1sdxCn7AGiHH6O1DmQqLWUI.roa (hash: oigviVUgzzlWadFUZtWWEdhj4HCE4Sf33xWgNig07bg=) 13: x3RHIPw7p7eomHky_OgVyy80DtQ.roa (hash: +9UzGBfhu6AE9c4W0IcdyN9ao9EdVIXgabTanbeJWeE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Apr 2024 05:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:23:b8:82:22:96:1f:7d:fe:df:d4:60:b4:5f:94:8e:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed6da9e41686d21c12799c8e84b274aa8241508c Validity Not Before: Apr 28 08:00:45 2024 GMT Not After : Apr 29 08:00:45 2024 GMT Subject: CN=d3584ee28c4426925e66eed111a03432a5fd4107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b2:9b:b6:4f:cf:7e:a0:08:2e:46:16:da:aa: 8d:75:28:c3:79:4e:ce:30:17:78:0c:c7:d7:58:ba: 89:05:e4:57:dd:1b:48:8d:95:ea:c1:cc:3a:80:6c: 0b:3c:19:8b:9f:ea:40:7c:43:fd:d4:ab:9d:b8:d7: 12:72:23:0d:90:cd:83:89:f5:45:01:11:b3:e8:fe: 2e:ac:20:8a:cd:ce:a3:d4:1b:3e:92:3f:bd:3f:ab: 41:34:66:9e:36:f4:5c:66:55:aa:ed:03:eb:9e:6a: f6:b8:2d:e6:43:83:7d:7a:39:b2:0b:17:cf:b9:ca: 1c:6f:8a:4c:74:07:b6:cc:77:ae:db:2f:c7:e0:37: 41:8d:4b:0e:64:66:93:4a:00:19:e9:63:52:00:35: 14:aa:ec:77:ae:e0:0c:2c:ac:17:d4:a0:b8:20:72: 4c:e3:cc:d6:b8:fc:d1:f7:ae:31:f5:8c:f0:24:d7: 4f:80:f5:fc:c1:5b:81:9c:26:ce:c9:9a:7a:b8:6f: 86:e5:2c:4e:ee:5f:ce:17:44:a8:f8:65:43:52:3e: f2:c0:dc:9c:97:9a:3e:cc:6d:d2:d9:38:ee:8e:7b: b4:49:71:b2:93:20:80:5c:9d:15:a0:52:8a:3e:ae: 48:11:85:9c:a4:c0:6b:ea:07:3a:6e:34:3c:21:da: b1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:58:4E:E2:8C:44:26:92:5E:66:EE:D1:11:A0:34:32:A5:FD:41:07 X509v3 Authority Key Identifier: keyid:ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:d5:51:7a:94:c7:91:a6:cc:db:bd:09:b2:bd:d8:fd:03:aa: 6a:dc:ef:67:f8:12:bc:b1:ea:1b:62:c6:bf:d0:66:18:f2:db: 00:a9:fe:81:c0:3e:35:20:8a:24:55:fa:97:59:e7:5f:26:1b: 38:01:c3:e0:f4:23:1d:2e:1a:f0:55:8c:9c:5c:ec:7d:a9:b9: 73:de:db:bc:b8:16:7e:0d:2b:30:4c:19:2f:e4:76:24:e2:e7: 53:31:2d:01:90:e4:28:e8:65:49:fe:6d:fc:4c:b0:a1:0c:13: 26:0b:41:e2:c3:94:c1:b7:5b:b6:11:d9:69:bc:26:9b:42:a1: ef:19:7c:b3:ed:dc:d2:df:f0:11:60:e4:5d:3a:91:f6:5f:59: 3d:61:a7:53:d6:f5:ba:69:e9:12:6b:b2:95:31:5d:ca:8b:72: 89:a7:8a:55:c6:f3:84:b3:63:49:e4:3d:2d:b0:90:a5:9b:6c: 81:98:f2:22:30:2d:3e:19:2c:33:1d:08:84:91:55:26:30:4b: f0:ea:8b:ac:2c:f7:12:5e:b4:1e:d8:ce:68:a2:2d:78:9d:24: cf:d9:22:f8:d7:42:d1:b9:67:2c:ce:a4:fe:7a:3f:3d:87:70: e6:07:f0:60:e7:53:44:d1:97:b0:be:97:9f:79:71:28:25:61: 4e:35:8a:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY8juIIilh99/t/UYLRflI7OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNmRhOWU0MTY4NmQyMWMxMjc5OWM4ZTg0YjI3NGFhODI0 MTUwOGMwHhcNMjQwNDI4MDgwMDQ1WhcNMjQwNDI5MDgwMDQ1WjAzMTEwLwYDVQQD EyhkMzU4NGVlMjhjNDQyNjkyNWU2NmVlZDExMWEwMzQzMmE1ZmQ0MTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrKbtk/PfqAILkYW2qqNdSjDeU7O MBd4DMfXWLqJBeRX3RtIjZXqwcw6gGwLPBmLn+pAfEP91KuduNcSciMNkM2DifVF ARGz6P4urCCKzc6j1Bs+kj+9P6tBNGaeNvRcZlWq7QPrnmr2uC3mQ4N9ejmyCxfP ucocb4pMdAe2zHeu2y/H4DdBjUsOZGaTSgAZ6WNSADUUqux3ruAMLKwX1KC4IHJM 48zWuPzR964x9YzwJNdPgPX8wVuBnCbOyZp6uG+G5SxO7l/OF0So+GVDUj7ywNyc l5o+zG3S2Tjujnu0SXGykyCAXJ0VoFKKPq5IEYWcpMBr6gc6bjQ8IdqxYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNNYTuKMRCaSXmbu0RGgNDKl/UEHMB8GA1UdIwQY MBaAFO1tqeQWhtIcEnmcjoSydKqCQVCMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1cycDVCYUcwaHdTZVp5T2hMSjBxb0pCVUl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9hYzAxN2MtZmYyOS00M2NmLWEzZDYt MjlmMWJlYjJmMjgyLzEvN1cycDVCYUcwaHdTZVp5T2hMSjBxb0pCVUl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9hYzAxN2MtZmYyOS00M2NmLWEzZDYtMjlmMWJlYjJmMjgy LzEvN1cycDVCYUcwaHdTZVp5T2hMSjBxb0pCVUl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjdVRepTH kabM270Jsr3Y/QOqatzvZ/gSvLHqG2LGv9BmGPLbAKn+gcA+NSCKJFX6l1nnXyYb OAHD4PQjHS4a8FWMnFzsfam5c97bvLgWfg0rMEwZL+R2JOLnUzEtAZDkKOhlSf5t /EywoQwTJgtB4sOUwbdbthHZabwmm0Kh7xl8s+3c0t/wEWDkXTqR9l9ZPWGnU9b1 umnpEmuylTFdyotyiaeKVcbzhLNjSeQ9LbCQpZtsgZjyIjAtPhksMx0IhJFVJjBL 8OqLrCz3El60HtjOaKIteJ0kz9ki+NdC0blnLM6k/no/PYdw5gfwYOdTRNGXsL6X n3lxKCVhTjWKNg== -----END CERTIFICATE-----Generated at Sun Apr 28 14:59:24 2024 by rpki-client on console-ams.rpki-client.org