$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft File: 9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft (raw, json) Hash identifier: g47fBJdN3GPICJ/zsheqpEkspNWmRSYv8Eo2x0u77mU= Subject key identifier: E3:E0:AE:17:96:B8:00:28:5F:88:FC:F5:1B:1E:4B:45:8B:70:2B:AC Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2 Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2 Certificate serial: 018F3A78382FEE706E2D9A7BE7E86B710B52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft Manifest number: 0ADD Signing time: Thu 02 May 2024 18:01:48 +0000 Manifest this update: Thu 02 May 2024 18:01:48 +0000 Manifest next update: Fri 03 May 2024 18:01:48 +0000 Files and hashes: 1: 8q20AD5cnij2ekbAcXZG5ZG1zqg.roa (hash: 6lhuyI+zMmF+Ttdu9Fh9dcEjzvizQqBB+EFyhF8GU40=) 2: 9HKAkHxpbhK8HArIODdxur5J3Bg.roa (hash: ADALvSypY+GZmzPJevp8Flm25zh/3vzBsbQXB7Ntd+k=) 3: 9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl (hash: qBJeMWhGl+wZWFvGLUmHQFwv2oMcZGhWGicm/Nfu0O8=) 4: EApr4Z72ZNv6-Qhja73XLbTrlmg.roa (hash: Ktrdf1s5QJZ6PhoDT+NTHjgsDHtuzmtrt0ZxRgkLLSM=) 5: EVxxCEUT9DFdamK3DIwi34a8EF4.roa (hash: voFhoPPvtRDksdJjnpaslImc5jzHcTfSW2R30IY93zw=) 6: FxUbtoBHHJFHh1rjxlWefJqQzd4.roa (hash: oou3zVQHUOxJX3ve8cBSBLzJOCd68/v5Grbr0NCv7dw=) 7: I-N2iK55Kn9pHBCT3L1O1spvf0M.roa (hash: e0Synhjx8gn7Ve0RDYzxPxFzhRt7AMPJklUkHqfMDSk=) 8: K7z1hwkkvZPwTW0CqefikmmBiqc.roa (hash: EK1uSxTp5YX9HrrLY6GLHquTFYQRG3W1Xk/7L8iQbX8=) 9: Lq5JfOnTNwtLm-UhVUQEMrDKpD8.roa (hash: 8MheRB0jEkHeEJgsfNhWTOuT/UHpk86BQkbwKDJ+WAc=) 10: WUNEHvr0ZgHtoqSJbuN62py92Io.roa (hash: lDW06UuCrPMY+xkAqwZXNOm1gvX0QoZBq3udHgV8zvs=) 11: hMQJ0REVAil8ByHZtiDGC_OTbvo.roa (hash: CElKgM0bSkCPlL8WeeZx+gO42wHgy0V05RvEs8vlGZQ=) 12: mWDqFYlmoZAmZXRbhVfwNhxS47I.roa (hash: Q1uwFjgzBTkta1b2TS6n8J4KpQh1oJLBJaObN2Yyc5k=) 13: vhhINde8pr6IniUZPu9g1A1HxLI.roa (hash: /EZkqQztrjHRonhFehIiiH7gCy2pH5kPTbr0oKdPMAc=) 14: zhA79qWaLxO5M4tdovQumClxjfQ.roa (hash: SYwyNn3jfCc+9/0abtGhFEOF5EF2ffK+syXBjLNXI48=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 03 May 2024 16:59:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:3a:78:38:2f:ee:70:6e:2d:9a:7b:e7:e8:6b:71:0b:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2 Validity Not Before: May 2 18:01:48 2024 GMT Not After : May 3 18:01:48 2024 GMT Subject: CN=e3e0ae1796b800285f88fcf51b1e4b458b702bac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a3:ab:2d:59:64:13:85:40:5d:dc:ea:ec:09: e2:87:60:88:c0:ed:be:c2:6b:47:07:b9:b3:b6:96: 0e:60:1c:f6:0d:d5:9e:46:65:a7:fd:00:ee:98:46: 35:f0:9c:04:79:86:0d:71:c6:f1:5f:10:d9:64:68: 1c:9d:54:5b:04:13:87:71:6a:eb:21:df:d4:a0:37: 05:37:1f:70:ea:1c:56:11:e5:54:7c:bd:b5:9b:c7: 36:33:57:38:88:35:bf:31:ca:23:09:3c:bf:fa:f1: 8e:19:be:43:84:39:dc:a4:0f:78:5c:9f:de:da:3f: cf:b3:f8:76:94:5b:f2:4f:61:59:a7:3a:db:d9:49: 30:29:3d:c4:2a:1b:a2:2d:48:43:14:61:5e:63:71: d8:fe:75:ef:45:2d:05:ec:5d:42:17:8d:73:48:a4: 1d:cb:18:e3:58:09:01:5f:93:a5:f8:ab:4b:8a:35: 57:7c:2c:a7:4d:8c:ae:5b:77:83:0c:af:79:c0:e6: 59:0a:10:50:ed:17:a8:f6:d1:80:94:2c:40:dd:8b: 5c:76:f6:d2:b3:f3:ab:c7:64:dd:83:26:71:90:69: b8:25:cf:49:58:a7:1a:5c:d9:49:99:0d:f7:2c:73: 0e:5a:96:08:f7:42:f2:4b:1a:03:0b:de:ad:15:f3: 6a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:E0:AE:17:96:B8:00:28:5F:88:FC:F5:1B:1E:4B:45:8B:70:2B:AC X509v3 Authority Key Identifier: keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:ce:38:04:66:05:02:a3:8b:ae:6b:af:aa:83:5b:8e:a7:c4: 16:f6:06:da:98:ba:71:e7:63:96:3d:4f:e7:ca:fb:6f:cb:1a: 11:3d:dd:bd:55:a7:b4:62:b1:85:f9:84:02:3a:e4:40:51:d1: 8d:2f:2b:d6:33:ba:8d:3c:36:e8:a1:46:d5:66:36:73:94:36: 60:fb:83:84:1d:07:77:e1:6b:4b:a5:44:04:f5:28:87:35:e3: d0:dc:f5:71:01:5d:e2:30:1d:1c:5a:bd:0e:48:af:d3:53:37: 00:25:7f:7f:fc:e5:b0:40:eb:cf:93:5e:58:af:63:c1:17:8a: 0b:2a:59:1b:ae:71:3b:a3:2f:f3:9c:ff:b6:e1:ad:c7:0f:bb: 74:91:42:76:8c:d7:17:6d:90:ca:0e:f2:80:e4:27:48:db:35: 6a:ad:e1:f5:77:7d:5d:27:0e:92:c2:40:22:11:f1:0a:2c:5d: 53:4a:d4:ce:3f:ba:98:ec:0e:0d:e6:2d:48:75:e8:1b:20:80: 35:f1:17:ad:bb:90:0d:fe:70:56:d0:41:76:4a:04:d0:c0:7e: a5:7d:e9:3d:a6:54:95:2f:72:d1:cc:03:1f:00:08:0a:69:5f: 71:9d:5f:3f:b4:73:bd:6c:10:0c:33:ec:7d:f8:0e:06:95:ee: 21:c2:b8:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY86eDgv7nBuLZp75+hrcQtSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZmIzMmQyMjY2YjFmOWJjZTU3Y2FjOThiYzAyNDdmMmM5 MTk3ZjIwHhcNMjQwNTAyMTgwMTQ4WhcNMjQwNTAzMTgwMTQ4WjAzMTEwLwYDVQQD EyhlM2UwYWUxNzk2YjgwMDI4NWY4OGZjZjUxYjFlNGI0NThiNzAyYmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6OrLVlkE4VAXdzq7Anih2CIwO2+ wmtHB7mztpYOYBz2DdWeRmWn/QDumEY18JwEeYYNccbxXxDZZGgcnVRbBBOHcWrr Id/UoDcFNx9w6hxWEeVUfL21m8c2M1c4iDW/McojCTy/+vGOGb5DhDncpA94XJ/e 2j/Ps/h2lFvyT2FZpzrb2UkwKT3EKhuiLUhDFGFeY3HY/nXvRS0F7F1CF41zSKQd yxjjWAkBX5Ol+KtLijVXfCynTYyuW3eDDK95wOZZChBQ7Reo9tGAlCxA3YtcdvbS s/Orx2TdgyZxkGm4Jc9JWKcaXNlJmQ33LHMOWpYI90LySxoDC96tFfNqhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOPgrheWuAAoX4j89RseS0WLcCusMB8GA1UdIwQY MBaAFPX7MtImax+bzlfKyYvAJH8skZfyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAt MmQxNDNkN2I4NTNjLzEvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAtMmQxNDNkN2I4NTNj LzEvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj844BGYF AqOLrmuvqoNbjqfEFvYG2pi6cedjlj1P58r7b8saET3dvVWntGKxhfmEAjrkQFHR jS8r1jO6jTw26KFG1WY2c5Q2YPuDhB0Hd+FrS6VEBPUohzXj0Nz1cQFd4jAdHFq9 Dkiv01M3ACV/f/zlsEDrz5NeWK9jwReKCypZG65xO6Mv85z/tuGtxw+7dJFCdozX F22Qyg7ygOQnSNs1aq3h9Xd9XScOksJAIhHxCixdU0rUzj+6mOwODeYtSHXoGyCA NfEXrbuQDf5wVtBBdkoE0MB+pX3pPaZUlS9y0cwDHwAICmlfcZ1fP7RzvWwQDDPs ffgOBpXuIcK4kg== -----END CERTIFICATE-----Generated at Thu May 2 21:22:04 2024 by rpki-client on console-fra.rpki-client.org