$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft File: Hq9cLl7cGXg00H80WWKwdFvuZtc.mft (raw, json) Hash identifier: lLSz23tWuiLM/HqmhkAFk7aYQ4gMTzwFB5VmIOod1hM= Subject key identifier: 57:C5:78:38:BB:AC:95:38:97:47:A6:A8:48:80:83:C5:5B:CB:45:02 Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7 Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7 Certificate serial: 018F40E76B76417292CA25369B5BBE95C824 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft Manifest number: 1180 Signing time: Sat 04 May 2024 00:00:59 +0000 Manifest this update: Sat 04 May 2024 00:00:59 +0000 Manifest next update: Sun 05 May 2024 00:00:59 +0000 Files and hashes: 1: 1jIHvXuKWH1LeGqeIEX8AO1UND8.roa (hash: HSAyNX8Ee+VfiYpgtkoVoc4F8FxOvBqf5Vql5u0vPdc=) 2: 2AjxqXdANhe0nrjnXx-bFUDf_zk.roa (hash: PZnuZtEOp/IwFZRIZNZyr4SdRwm9rv2fwjo1rVjHe0Y=) 3: 52OaR0m0IanaCeJC23OkHPr3WHQ.roa (hash: vum6Zw+p2PuAyoCFPK/P08naDdoSfZ646o+6LqyMFPI=) 4: 6lS6x4Bv4zk3kNuviP7JXaD8N-8.roa (hash: IE4Zw9aMH+DR6CKDo2WAUU3hejYi3taCq6Y9Yi7+MsQ=) 5: AxYmYew-8GkvvEdONlUZ2C5eznw.roa (hash: Rjyz9bZz9t/HLx+4uBG/Nu7v/cHXAAlnqPtbI9bPg2o=) 6: DSOSzAC0sVNLVr6SMLBToEwn1R4.roa (hash: SXnx9YXI7lOq1Pnyz2Ta2KwdHY5ZBVdyw3HwAyvb4dE=) 7: F-X7vILIbug4XS1gIVruc1T3jfQ.roa (hash: WTv+7FT5It0Cz+hQx94uD888+SHdOVv6RkRn0ZVDrGg=) 8: Hq9cLl7cGXg00H80WWKwdFvuZtc.crl (hash: L8yq3F9HmvUeajrLqF0J2uR5Sup0xjdOMcq95j6b264=) 9: UgXHmzPcvEI-vewGgOz-MM9fD_c.roa (hash: 4xC3GZ0CsKTFh1bxI3tx7v+DDAGWjsjRiUXiEM5yG/o=) 10: WQeBwosOSRn-LJVtQmY3LGYKkNQ.roa (hash: 9NG05NL2fM1WiqYYzsb6GD5g8H6uYdVSRzijEk52Q2k=) 11: ZrzYAmGs-VUvz7f1ocFvpe8gzpU.roa (hash: mUvy8LY4BDUu5sAXkySh9jjR1xl8x3UXWQZhQpCJIJs=) 12: grt2xaKyXtS6a-XIx5FIjDFxvZI.roa (hash: 5BJCJGca6wRnZ0Mvern3IPJ8eSo/5heC4or/5N8feD4=) 13: h81o7e7452I3p0eIwB0D9--i7k8.roa (hash: u0+QHKVrDwUZMdEcci0nRfEGM1/z0/iCj8yohL0NfHw=) 14: nfBxZzjhR0teH86punjBxOO3eSw.roa (hash: 3g3Aujecgqnx8q3IdVPVsuzp3b3y1+OMCH454RIpbhI=) 15: z80FgjYgFDVPOcE938goaNNpRwc.roa (hash: s6lt4elLYIBYduh/fs4MpMl5mEZxfa7OvdHtka/h7hI=) 16: zWPxYfvcYsg2QgXZyTOdzAr9xac.roa (hash: ySeBR3UPrhRxGvFrrMBam7pqlheWgq7Hwem/P5ANnPc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 04 May 2024 20:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:40:e7:6b:76:41:72:92:ca:25:36:9b:5b:be:95:c8:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7 Validity Not Before: May 4 00:00:59 2024 GMT Not After : May 5 00:00:59 2024 GMT Subject: CN=57c57838bbac95389747a6a8488083c55bcb4502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2b:31:59:b2:3a:e5:01:da:e4:2f:9f:d1:17: af:2f:66:cb:93:6b:1f:58:43:5e:d7:67:d3:14:b6: 24:57:20:dd:0a:74:80:c9:61:8c:33:c4:4b:50:92: 82:88:f2:d5:e0:ef:5f:06:56:bf:5c:91:0d:d7:2b: 1d:85:30:29:c9:e7:ab:8d:ea:d5:17:ec:8d:43:dd: d1:0c:24:17:dc:80:0c:cd:09:38:a4:49:0b:4c:86: 0c:7e:94:30:bd:bb:57:8d:cb:94:e2:7d:1c:e9:46: 6f:79:23:7e:fa:1d:ab:ef:dc:3e:82:2a:cd:8c:99: af:62:ae:c9:0e:0d:22:d5:39:59:f4:90:7d:97:15: 47:18:c9:93:9d:8e:59:da:6e:6c:fc:ad:41:39:d2: 17:dc:b1:8f:2d:90:ef:32:66:01:cc:93:6b:d9:50: d1:d1:40:5f:82:99:cc:53:36:e0:6d:30:6f:20:48: f3:47:1e:93:53:35:a4:1b:9c:26:49:9a:c8:3d:4c: 6e:80:ba:c0:57:48:00:a4:7e:a7:2b:b9:27:ab:27: 94:03:ad:a5:c4:e4:9b:79:82:be:57:f5:cf:02:4a: f8:49:a6:89:b6:99:5e:a9:0b:c5:d1:59:1e:98:85: 9d:ce:fd:d8:ba:7c:10:9b:2a:1c:81:2d:e5:08:53: da:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:C5:78:38:BB:AC:95:38:97:47:A6:A8:48:80:83:C5:5B:CB:45:02 X509v3 Authority Key Identifier: keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:85:60:e4:76:61:e9:e6:f8:cd:b9:8b:49:01:31:99:56:7c: 8b:82:93:22:46:38:f0:fd:75:45:29:a2:b7:01:c5:f1:1f:af: f2:36:ec:24:f9:b3:13:49:d2:4b:4b:12:11:db:bc:38:0b:ec: 96:32:4b:a3:53:31:ce:42:36:0e:20:7a:f1:f2:0d:ff:40:69: 36:02:eb:dc:7d:16:ac:e9:ea:78:a7:3a:94:32:d9:2a:c1:24: 0c:7d:f1:f2:64:74:18:72:c2:48:73:7b:96:a4:00:2d:f3:0d: af:c6:ab:a6:6f:e1:a7:3e:33:da:14:81:e0:49:27:9d:89:bf: 2a:f8:93:d6:fa:cb:5c:ab:ef:cd:2a:92:9a:b3:a7:c2:92:f6: 3b:ba:8a:00:4d:85:78:24:68:24:c3:46:8f:b9:ab:7c:cf:12: c6:29:e2:58:da:0e:90:aa:30:48:30:9d:89:d7:39:ff:ad:55: a6:f4:59:dd:6c:3e:92:d9:45:7a:94:f2:ee:f5:96:50:15:a8: cd:80:d1:cc:5a:6a:1f:9e:6e:9f:36:a3:f0:05:44:a6:7b:2b: 81:bc:ed:09:f9:8e:29:87:f2:56:41:57:2a:1b:11:ce:3a:f7: 3d:f3:66:47:37:13:05:3a:65:87:8e:a8:b1:b8:b9:a0:94:27: 30:92:61:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY9A52t2QXKSyiU2m1u+lcgkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlYWY1YzJlNWVkYzE5NzgzNGQwN2YzNDU5NjJiMDc0NWJl ZTY2ZDcwHhcNMjQwNTA0MDAwMDU5WhcNMjQwNTA1MDAwMDU5WjAzMTEwLwYDVQQD Eyg1N2M1NzgzOGJiYWM5NTM4OTc0N2E2YTg0ODgwODNjNTViY2I0NTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqisxWbI65QHa5C+f0RevL2bLk2sf WENe12fTFLYkVyDdCnSAyWGMM8RLUJKCiPLV4O9fBla/XJEN1ysdhTApyeerjerV F+yNQ93RDCQX3IAMzQk4pEkLTIYMfpQwvbtXjcuU4n0c6UZveSN++h2r79w+girN jJmvYq7JDg0i1TlZ9JB9lxVHGMmTnY5Z2m5s/K1BOdIX3LGPLZDvMmYBzJNr2VDR 0UBfgpnMUzbgbTBvIEjzRx6TUzWkG5wmSZrIPUxugLrAV0gApH6nK7knqyeUA62l xOSbeYK+V/XPAkr4SaaJtpleqQvF0VkemIWdzv3YunwQmyocgS3lCFPa7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFfFeDi7rJU4l0emqEiAg8Vby0UCMB8GA1UdIwQY MBaAFB6vXC5e3Bl4NNB/NFlisHRb7mbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8xY2ZiOTItOWMzMS00NjRmLTkzODIt NGEzNGMxYmJhYjJiLzEvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni8xY2ZiOTItOWMzMS00NjRmLTkzODItNGEzNGMxYmJhYjJi LzEvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjIVg5HZh 6eb4zbmLSQExmVZ8i4KTIkY48P11RSmitwHF8R+v8jbsJPmzE0nSS0sSEdu8OAvs ljJLo1MxzkI2DiB68fIN/0BpNgLr3H0WrOnqeKc6lDLZKsEkDH3x8mR0GHLCSHN7 lqQALfMNr8arpm/hpz4z2hSB4EknnYm/KviT1vrLXKvvzSqSmrOnwpL2O7qKAE2F eCRoJMNGj7mrfM8SxiniWNoOkKowSDCdidc5/61VpvRZ3Ww+ktlFepTy7vWWUBWo zYDRzFpqH55unzaj8AVEpnsrgbztCfmOKYfyVkFXKhsRzjr3PfNmRzcTBTplh46o sbi5oJQnMJJhzw== -----END CERTIFICATE-----Generated at Sat May 4 03:08:55 2024 by rpki-client on console-fra.rpki-client.org