$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft File: q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft (raw, json) Hash identifier: mZMloNJ/WrgHy+Pr8qF4HUDuNQSXfl4xLUojm79Sw1s= Subject key identifier: F7:38:1A:59:EF:28:E6:18:1C:3F:BD:0C:74:8D:A4:F1:AB:06:24:2D Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40 Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140 Certificate serial: 018F87B6A17AC4DC4834C98874D39A42C748 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft Manifest number: 11A0 Signing time: Fri 17 May 2024 18:00:43 +0000 Manifest this update: Fri 17 May 2024 18:00:43 +0000 Manifest next update: Sat 18 May 2024 18:00:43 +0000 Files and hashes: 1: 4WTR_sKm65nSX28ISX3qws06mP4.roa (hash: 8GNE7+y30MD5aM1Ec+H20qCtBOsHTruL2533Ue/4QEc=) 2: 5pK3xn3RCSbk28U7jV8jcGcESU4.roa (hash: h44wKcfskSFru8PL9R92s4SZAdR+vmjR3VnoWV+IDTQ=) 3: 6jSVWjzpYwtKwT5RER4P6GfXqIA.roa (hash: EDAw318H8efckzY5u3R17wkx92dNwwNk7XRygZcsJZg=) 4: CahWVKP_0bIEKAfTmMtB4qo7BDc.roa (hash: iNIpk6kDPIYfwV0h3DMiLTGPePxwscztM50ez7AXK2M=) 5: HYtlY-2j_vSeX_uq2SGHzBognak.roa (hash: 2HncDdj5ZCAS6DrPCX1fVuqXTSr2hGtL+sP3suTpTwg=) 6: ItAidq3sGRivBWnzKcWHv-cD7G8.roa (hash: 72z2D8OfvpJHzui7MX33dOz/z4gXRUgII6B4X4MWPeY=) 7: M0tZkzEB-l6x3EnB5p7mc2j91X8.roa (hash: SNi1TbU6dM9XMLc93mDEYrtbjMTIMhyhyeG5hAbx344=) 8: RSB-EpGcYmQqvCP-_BMVPLhK9Ks.roa (hash: MzdnDNmX9sqic4qV75otVvW5P1tM1d7/bzN2H6IaQR4=) 9: SdaG1RUEHlXcZNj5OsLUlcmslQM.roa (hash: fAyJgcwRz9/whIxsTCHa+XB94tUVRGhIK4b3BVgxI68=) 10: TDxmdUodxC01LUCz-tTkywx87Sg.roa (hash: CQGzfI1i1yJkz1Smpy/O7ZObykHZ/tzRPlR5Rg93DD8=) 11: XNlhcLkLDurD8O7vESTK-nzs2Yw.roa (hash: iOznDb8OFv5UyI15UM2/OaQUDebPbBS2HTjA6EN6A/Q=) 12: Ywh2-3KIoOsu5EdBQ5QNJs0HDqw.roa (hash: yY7zjKPTo3zmJ1WuCe9EEHgZ0/LrVMCUBOoAIdt35aM=) 13: ZIn96X5OvK-g4P0h-1dlUB5coaw.roa (hash: rI5UuZ0o2bUkkTyQ9sMOnKVDt6bMLQvz0fya4XOB7zA=) 14: ePe7G_jdSjKbB1Uz720fv_BYuMQ.roa (hash: WfA2uaIcb68XATM/Q/1gprXXV45s5CHzeZMPsBePt9I=) 15: nnfKzFjuayeWVX0R4afQKe02SNI.roa (hash: pz2QXz+J7Zh87iJT3LJvKHTJAF1aP919m7VYj0ndx2U=) 16: q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl (hash: 4DrohV28X4hhpFk6d3Y7C7J+Ff+M0r/AEjI3sqwHXKg=) 17: vAW17GDaUkTUMZuOdGo8sHl_ETY.roa (hash: GrIhvYqH2pNqXS9qR0GcsVok7mJKdJvSyFUUcQBmyPc=) 18: vogq3NHUqKHUvj-hdw2XqWWT_uE.roa (hash: LqlqEik9pTeEz+KOg2q6xCeUZGhz+jlMBxP0LfH9dj4=) 19: zhwqWaOe_xsyv2EvMb848WZXIos.roa (hash: 3QRSYPX4Owb4GOR/4NIUBkUeugP7SpSKH0ov8V2bEe8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 May 2024 17:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:87:b6:a1:7a:c4:dc:48:34:c9:88:74:d3:9a:42:c7:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140 Validity Not Before: May 17 18:00:43 2024 GMT Not After : May 18 18:00:43 2024 GMT Subject: CN=f7381a59ef28e6181c3fbd0c748da4f1ab06242d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d5:b5:fc:35:c6:ef:25:f3:96:76:5e:35:1c: a6:d6:eb:8f:69:a1:b0:14:a2:dd:f9:86:77:fc:2c: 7d:00:ce:19:4c:24:c8:25:1f:79:ca:ac:b4:a1:1d: 99:4b:fd:4b:31:8c:bb:59:ad:53:9b:52:85:bb:1d: 80:08:ef:47:37:79:4b:a7:d4:b4:1e:aa:2e:55:4a: ae:f6:da:30:32:45:60:fe:1d:9c:16:52:ce:cb:c4: 17:19:a1:6d:35:28:64:44:62:cb:64:a5:76:e6:ba: 68:e8:bc:bf:78:a4:4e:a8:60:82:54:62:33:33:38: e6:d1:a7:33:cf:f6:f1:89:f2:cb:39:7b:d6:ba:ef: 65:6e:b7:0c:17:af:9b:59:6f:4d:04:a2:66:f6:92: db:48:75:54:a4:11:23:f5:0c:91:bb:d2:bd:92:3c: 6c:86:5d:62:eb:a8:91:40:e8:9e:bb:a4:46:4f:0f: 29:36:35:a1:f5:55:65:62:8e:19:75:72:36:4e:a0: 76:5a:00:f1:6c:74:e6:8a:a8:05:97:b7:39:59:e9: 76:82:b2:84:4b:83:0b:70:10:26:72:b5:d2:de:d1: 3a:f5:8a:8f:14:07:c3:89:0d:fb:46:62:c7:b8:7a: 67:2a:81:6a:4e:42:85:33:c2:dd:11:f1:b5:5f:00: 9c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:38:1A:59:EF:28:E6:18:1C:3F:BD:0C:74:8D:A4:F1:AB:06:24:2D X509v3 Authority Key Identifier: keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:74:2c:2f:48:45:91:4f:b3:6d:44:c2:2e:26:e0:29:d0:e4: 97:8c:57:94:ff:71:2c:21:dc:7d:5c:9c:95:3e:24:8c:e1:95: c8:36:8c:93:29:a6:d8:5a:a1:8f:c7:e4:2e:58:c0:e5:97:1f: b3:81:1c:f1:27:e6:77:02:6c:a9:16:a5:f1:e7:8d:6e:90:85: 18:c4:ae:be:a3:cf:ff:9f:3c:03:2d:91:11:1b:52:78:f7:70: 70:40:9c:7a:0d:58:79:92:d9:a8:66:9f:cd:8c:15:be:0c:76: ef:be:34:9b:f3:79:51:e3:6a:92:c9:9c:28:eb:df:4e:97:5c: 9b:54:fe:fb:89:a4:76:3b:e3:97:a2:32:3b:b6:f1:73:fc:44: 56:f7:67:44:10:19:55:9e:cb:a8:82:30:7e:ad:8a:64:ff:3d: 22:b8:76:aa:a8:ed:6c:c4:cc:2f:a7:6c:92:67:03:9c:50:17: 93:2e:02:f1:ab:63:fb:ca:a2:c5:51:66:04:20:f7:00:4b:a7: 89:6f:d8:9a:b7:89:d7:db:d1:79:34:c5:6b:2a:cf:4b:53:60: c2:3a:2a:6f:b7:9e:e9:c6:9d:60:3f:12:76:9e:4a:d4:ca:f8: 9b:11:e8:58:dc:61:f9:84:e7:1e:f6:bf:ff:5f:a6:0d:38:97: 47:f7:e6:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY+HtqF6xNxINMmIdNOaQsdIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiYzhkYmU1MjA4M2FkMzM1YzlmMWZkZTYwMTZlYzhiNDky OTMxNDAwHhcNMjQwNTE3MTgwMDQzWhcNMjQwNTE4MTgwMDQzWjAzMTEwLwYDVQQD EyhmNzM4MWE1OWVmMjhlNjE4MWMzZmJkMGM3NDhkYTRmMWFiMDYyNDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdW1/DXG7yXzlnZeNRym1uuPaaGw FKLd+YZ3/Cx9AM4ZTCTIJR95yqy0oR2ZS/1LMYy7Wa1Tm1KFux2ACO9HN3lLp9S0 HqouVUqu9towMkVg/h2cFlLOy8QXGaFtNShkRGLLZKV25rpo6Ly/eKROqGCCVGIz Mzjm0aczz/bxifLLOXvWuu9lbrcMF6+bWW9NBKJm9pLbSHVUpBEj9QyRu9K9kjxs hl1i66iRQOieu6RGTw8pNjWh9VVlYo4ZdXI2TqB2WgDxbHTmiqgFl7c5Wel2grKE S4MLcBAmcrXS3tE69YqPFAfDiQ37RmLHuHpnKoFqTkKFM8LdEfG1XwCcmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPc4GlnvKOYYHD+9DHSNpPGrBiQtMB8GA1UdIwQY MBaAFKvI2+Ugg60zXJ8f3mAW7ItJKTFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jZTZjY2ItMjVjZi00OTE3LWIzY2Qt MzA1NmFmOWEzMzVlLzEvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9jZTZjY2ItMjVjZi00OTE3LWIzY2QtMzA1NmFmOWEzMzVl LzEvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApHQsL0hF kU+zbUTCLibgKdDkl4xXlP9xLCHcfVyclT4kjOGVyDaMkymm2Fqhj8fkLljA5Zcf s4Ec8SfmdwJsqRal8eeNbpCFGMSuvqPP/588Ay2RERtSePdwcECceg1YeZLZqGaf zYwVvgx27740m/N5UeNqksmcKOvfTpdcm1T++4mkdjvjl6IyO7bxc/xEVvdnRBAZ VZ7LqIIwfq2KZP89Irh2qqjtbMTML6dskmcDnFAXky4C8atj+8qixVFmBCD3AEun iW/YmreJ19vReTTFayrPS1Ngwjoqb7ee6cadYD8Sdp5K1Mr4mxHoWNxh+YTnHva/ /1+mDTiXR/fmeA== -----END CERTIFICATE-----Generated at Sat May 18 00:04:14 2024 by rpki-client on console-ams.rpki-client.org