$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft File: jrRB2tu-y2ll1OofBGzFyOKIF_w.mft (raw, json) Hash identifier: IqSiL0JMXhkloMktr0qNm6U2BsrOMxTyeWiEGt2d9Tk= Subject key identifier: C0:9B:FF:6B:15:7A:43:E2:33:56:D3:20:75:AC:F9:17:0F:51:31:BD Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc Certificate serial: 018F866CD621984CE6596CD7146F278EED85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft Manifest number: 04FD Signing time: Fri 17 May 2024 12:00:30 +0000 Manifest this update: Fri 17 May 2024 12:00:30 +0000 Manifest next update: Sat 18 May 2024 12:00:30 +0000 Files and hashes: 1: 9BVUzVKeQNAp63jDMkiHu2BVxMg.roa (hash: eHWRRMsYYLALnTTySDUJRwfkBMxKWjgGSFkp0/tX61M=) 2: Ki4vmGGDJBTLNSESN27_eCnZfFQ.roa (hash: HofpBTpCm12WS7vBsd79ffI5ZZXN0m56KKh2uGxYQ0w=) 3: M1Vmg_uiUOvIlpWf8HioaAuB8Uo.roa (hash: 7PSZQcfdCXwU9oXf8s6bj9S3wnAWbhZ1R9mu/yRhy/A=) 4: TwTox001PaLbRpuAluslkdNgx7M.roa (hash: aR9/Wce6ZSeXmnMmrpVex311OcxIlWOe1mi/K1tV914=) 5: jrRB2tu-y2ll1OofBGzFyOKIF_w.crl (hash: NhRcDwhazDASBxbUoFA17QrNDG/whGyf9X+PF1v3P4A=) 6: juae4r4xSVHK5HC9HCKETU4BkV0.roa (hash: B5uRNip7AKhn5MBOLWaXtw8Bq1yHZSaGeYGjN9sBRSM=) 7: nMa6bFZciSvcblXzWPXrSujXIak.roa (hash: e2DRpqzJDQ1qqEfNsUg9XX5GEO1J11Wl6D8NnSzD0Lo=) 8: oGf46cYsKwR0TwWfVZ74Y-LZ5uE.roa (hash: /reH46sjvBwfeHUJ1aF9ZtUgfb3pZNjc+9tgAFh2yMU=) 9: pp6_9S1p8Me-kts257xDYuqtXTc.roa (hash: QSaDAdGsG1mk7iJiGJWKZtQuneSxcLrv+IGP+JNH2Oo=) 10: rl0Fb9XvvdnNHyHGX0YHbM6_Sx4.roa (hash: pwDvGNgIKAEy/IYwBQgVUXmGCvz+ShqzHTyDdSjTdCc=) 11: x9bv_HV21Eo7tr2lOUKa7Cgz_mU.roa (hash: Tx5Idy8JR7RzONVgV+tJZkhpLs6ZUbRonlRZbbB8+mU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 May 2024 12:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:86:6c:d6:21:98:4c:e6:59:6c:d7:14:6f:27:8e:ed:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc Validity Not Before: May 17 12:00:30 2024 GMT Not After : May 18 12:00:30 2024 GMT Subject: CN=c09bff6b157a43e23356d32075acf9170f5131bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:79:71:22:08:93:c8:c2:0c:63:ee:cb:7a:dc: d6:47:2f:2a:1a:c2:88:46:1f:0f:41:6f:9a:0b:33: 21:f2:a7:aa:a8:f1:f9:d4:2f:7d:6f:b5:b6:ad:2e: 07:12:95:16:d9:2d:e2:ec:39:fc:53:76:eb:d7:6f: d4:69:b2:56:a4:7e:8c:72:94:2e:91:a0:49:2f:34: 01:62:58:4f:43:8c:c4:fc:f0:80:17:0d:7d:fb:df: eb:31:e2:01:56:20:41:f0:88:15:23:49:3b:4b:ed: dc:fa:6c:ee:40:a7:04:5f:82:99:52:e2:eb:94:12: 77:76:9e:25:00:de:87:25:2d:21:5c:8b:3d:01:06: 68:16:2d:8a:02:6c:48:d6:9a:e7:22:17:07:3b:04: 0b:9c:00:cf:81:06:d5:15:6b:b4:e6:00:5f:3b:40: 24:0a:f4:ad:05:8e:3b:5f:62:bc:0c:26:8e:51:22: 27:c1:f9:46:59:d4:e7:83:be:00:94:54:84:93:f8: b0:f9:be:66:96:73:e3:6d:fd:9d:09:f6:4c:6e:2b: 0c:78:ae:dd:bb:01:bc:3d:69:d2:b7:9e:cd:72:3b: 70:6b:fc:65:89:96:ff:cc:e1:06:4e:df:7e:2f:10: f8:f6:41:5a:3e:2d:03:fe:fe:0d:bd:ff:b8:a2:21: 44:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:9B:FF:6B:15:7A:43:E2:33:56:D3:20:75:AC:F9:17:0F:51:31:BD X509v3 Authority Key Identifier: keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:9e:a3:29:f7:ac:e4:9d:b1:71:b8:40:b4:37:48:ef:70:e0: 27:b3:76:5c:22:f2:e2:17:11:4d:d6:13:a4:15:f1:e8:c5:44: 7b:ed:90:dd:cd:76:fb:fd:91:49:11:7f:f9:b0:48:07:25:fa: 4f:28:55:22:9e:a8:37:5f:8d:35:fa:f1:79:7e:25:dc:bb:5a: 7c:78:e4:fa:b8:fd:7d:f6:93:6a:0e:ff:e6:82:7f:db:95:56: 7c:04:61:52:2d:f9:0d:76:a9:b4:8c:a0:b1:d7:3f:6b:72:b0: fe:e5:3c:0f:b4:a5:8c:db:ef:7e:e7:eb:83:25:a2:ab:5e:22: 5c:70:aa:a0:ce:a1:b4:48:10:73:d6:ac:e1:67:91:86:f2:b9: b4:c7:b1:c9:ae:5b:c3:7c:25:d5:5f:27:9d:81:88:fe:02:b0: d9:10:02:d7:71:95:7f:c4:6b:e7:14:55:c2:b1:3a:cd:3f:2c: 47:ac:a6:ff:0b:87:4f:e0:b6:f1:93:d9:79:e2:8d:8c:9b:95: 25:1c:4f:a8:be:cf:5f:4c:2e:ae:59:47:c7:02:9c:0e:c9:a4: 19:c5:58:bc:3c:98:db:b3:43:f0:df:7f:90:4e:3e:d3:97:d9: 3e:00:af:29:f5:d2:00:aa:d4:cf:de:59:75:af:ae:6c:85:a7: 34:07:05:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY+GbNYhmEzmWWzXFG8nju2FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlYjQ0MWRhZGJiZWNiNjk2NWQ0ZWExZjA0NmNjNWM4ZTI4 ODE3ZmMwHhcNMjQwNTE3MTIwMDMwWhcNMjQwNTE4MTIwMDMwWjAzMTEwLwYDVQQD EyhjMDliZmY2YjE1N2E0M2UyMzM1NmQzMjA3NWFjZjkxNzBmNTEzMWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXlxIgiTyMIMY+7LetzWRy8qGsKI Rh8PQW+aCzMh8qeqqPH51C99b7W2rS4HEpUW2S3i7Dn8U3br12/UabJWpH6McpQu kaBJLzQBYlhPQ4zE/PCAFw19+9/rMeIBViBB8IgVI0k7S+3c+mzuQKcEX4KZUuLr lBJ3dp4lAN6HJS0hXIs9AQZoFi2KAmxI1prnIhcHOwQLnADPgQbVFWu05gBfO0Ak CvStBY47X2K8DCaOUSInwflGWdTng74AlFSEk/iw+b5mlnPjbf2dCfZMbisMeK7d uwG8PWnSt57Ncjtwa/xliZb/zOEGTt9+LxD49kFaPi0D/v4Nvf+4oiFEWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMCb/2sVekPiM1bTIHWs+RcPUTG9MB8GA1UdIwQY MBaAFI60QdrbvstpZdTqHwRsxcjiiBf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmIt NDZiOTQ5MDkyY2JlLzEvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmItNDZiOTQ5MDkyY2Jl LzEvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcJ6jKfes 5J2xcbhAtDdI73DgJ7N2XCLy4hcRTdYTpBXx6MVEe+2Q3c12+/2RSRF/+bBIByX6 TyhVIp6oN1+NNfrxeX4l3LtafHjk+rj9ffaTag7/5oJ/25VWfARhUi35DXaptIyg sdc/a3Kw/uU8D7SljNvvfufrgyWiq14iXHCqoM6htEgQc9as4WeRhvK5tMexya5b w3wl1V8nnYGI/gKw2RAC13GVf8Rr5xRVwrE6zT8sR6ym/wuHT+C28ZPZeeKNjJuV JRxPqL7PX0wurllHxwKcDsmkGcVYvDyY27ND8N9/kE4+05fZPgCvKfXSAKrUz95Z da+ubIWnNAcFUQ== -----END CERTIFICATE-----Generated at Fri May 17 18:39:11 2024 by rpki-client on console-fra.rpki-client.org