$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft File: OroRckcuqAJl0SmCln3gqLC8WQE.mft (raw, json) Hash identifier: j/TRV6eYNcWf37Bjm1cV7x9AAtZeR2lAauoUd6SyLCg= Subject key identifier: 61:2F:FF:A6:F2:8F:DB:5A:9E:A0:C2:A4:AC:BD:EB:FF:C8:E6:10:F8 Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01 Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901 Certificate serial: 018F7D32C325A9355166F8BC6EB0C6AE207E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft Manifest number: 1189 Signing time: Wed 15 May 2024 17:00:29 +0000 Manifest this update: Wed 15 May 2024 17:00:29 +0000 Manifest next update: Thu 16 May 2024 17:00:29 +0000 Files and hashes: 1: 0YIlzBLxLzuWctKtQaMF4nWjTpY.roa (hash: 6E/fnASnVJZjbuBYAjpofGoRfn+J4kYI+z3Tjo4lAts=) 2: 1-QU7AV0CgBj1dc2osLeL-ouNDrc.roa (hash: Sg7e/ubr8nCFeItpVGZAyAtGQD166Nvt0dR9TLD0wkc=) 3: 35YZcZk99vxvog8PaxU4xFJPS3g.roa (hash: xIeC6MpUmkcNSsmecsrVwCJEf0lexOdkdyUQ9xpSfuQ=) 4: 3mrARwRgtgA0CnXy6mUsH_i8uQg.roa (hash: 9izCk+yrQNd6ROGo1OWva7bv4AcFrWKps6fbNx4cViY=) 5: 47IDj-Ak1jrVSqUp12LdxdbpsXI.roa (hash: QNKYfZboyMSnpOub7YmKDwiRMC1qgA41ElzReZYlJRg=) 6: 4iJxnOYx2qt_JBhlDOd7SF9UZOk.roa (hash: d+KJW4I7XjvV7fxsPdgNcdPCnWxuMQHba3FC2Z0XK7g=) 7: 7KQCvCvT9ytYVLRU_ccxo51yQOg.roa (hash: k0NZu4y/42Zc9MXpBjUA4yLVvl1s5IWHm8Pf1Qy5WV8=) 8: 7Pa6P8FjpahPpb2cPy-ypm1Hqnc.roa (hash: PHOGgePgriiWQBL94ybDAWQ84/Gx++68mEpmBOHlp1A=) 9: 7p7Vx5UoYlLfiealFarpl-DKDks.roa (hash: Fm+4I0yFE70zzKalywB4y++3eM1JxooH6BL8ghrlnCk=) 10: Hzk73X6G0_DQKFVHj4Vx6vgPwvQ.roa (hash: TZmixzeXJ2TTTL2pTW3iT9Ib+xbOFI1xM+KZD5i/2rE=) 11: OroRckcuqAJl0SmCln3gqLC8WQE.crl (hash: YEkdtVB3SOBA3QEusU78DfLu5qreP3ydrAHN0qLqRCM=) 12: XHOttDDchq7OiOnHo7-HIRVEOT0.roa (hash: f0bmJO7jCa6VyMQPPkc0PM12ZRTR3cxB0xD48ofJ2gU=) 13: bdBnTyP7DEBM8jlRm9rM-pJ3450.roa (hash: 5aneQjIo/JGxf9xrBQT1io1df6YFUhbG76y+kPMe4SE=) 14: dmllw1MdBefh4ekUgIGGogcCO6g.roa (hash: ukmAKo6TIW0bIfc2lp8GHjOFrMUmQ2TZMECEOxXMlgY=) 15: eOCd4d0GN10PplBByRhiSL6wLeU.roa (hash: y1qgpZlVQW6R9jQCW48We5N1DH4i4GhZ8Q05ygc6ajs=) 16: iQdsJ0iD54bbhPhNXpU4JB6UwRw.roa (hash: wue5X/Y6Cqzf2UI/m7t0ygFpnpreQ6af9lqLsbGN9zY=) 17: ijw1esTWmd-cotzflzR8JY8cdoM.roa (hash: vlDaP/R6XP6k/cz9iEZNGlNrLFf0c5wL83pQobKozrg=) 18: muTCzs37DEQzfy57qvjif-vVaWM.roa (hash: 41wYA1Basi7tz7pBPBqmbkHHZiNlToqTDaQPZJkK4t4=) 19: nK-a1rUBHOjD2-u6za1yiniNaSc.roa (hash: Rq1/IXwyeHSmK9Yc5SB6KeFtrbwIXWYLvzkKihEJjkE=) 20: pBhv9P68i-8YzlNPdovuXbN9lYo.roa (hash: +Qod0Y0FAvigFElY7sHUgjZc6918YdsWDv/Jcr7RR/o=) 21: q9fcq4y-HVIoae_QByCLdJQtAUI.roa (hash: jZtMi+PoMkhOfpmGDjJ9unfpo95EVjUm0pmmbq6gM3M=) 22: umNvYEQbaUDtq9l2ZMsYBqNpxIE.roa (hash: j1QwrIY8JljutUECQb/nCWRHGTMzRjAi15To5Xu5xVE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 16 May 2024 14:51:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:7d:32:c3:25:a9:35:51:66:f8:bc:6e:b0:c6:ae:20:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901 Validity Not Before: May 15 17:00:29 2024 GMT Not After : May 16 17:00:29 2024 GMT Subject: CN=612fffa6f28fdb5a9ea0c2a4acbdebffc8e610f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b3:cf:be:69:b7:6c:f4:cf:f1:de:9d:1c:8a: 34:39:4e:8a:a1:36:7c:91:06:11:a0:86:2f:2d:4a: be:c6:70:b1:bd:17:82:d0:79:79:f8:92:21:17:65: 6b:1d:90:97:91:da:4f:3f:36:04:11:2c:28:ae:4b: 18:f7:ee:87:8d:0c:59:22:11:cb:52:16:3d:b2:60: a6:56:5f:b5:1a:42:ee:56:06:9c:4c:96:23:cb:58: 08:e1:52:05:5b:d5:b7:41:4e:52:b6:9b:e0:84:f3: 29:f4:90:09:fd:6d:a5:12:49:b6:a3:3b:2b:97:e6: 92:ac:f6:12:d2:02:cf:21:38:03:86:cf:9b:c0:b7: 20:4a:01:bf:98:8b:78:82:99:5c:14:9f:54:83:a3: d8:18:06:c9:bf:46:71:02:f3:6d:85:e7:e8:1d:28: 43:eb:00:fa:1f:30:a9:12:e0:4c:88:e9:1e:79:06: dd:14:39:c3:0e:72:1c:5d:fb:0d:a9:05:35:29:99: fa:fb:5c:ff:a3:6d:ad:ca:07:02:96:cd:43:85:1e: 1e:89:60:19:4c:41:fa:9b:0a:99:9d:07:2a:1c:b6: aa:0c:ed:e9:67:6d:53:39:0d:64:45:c2:92:9a:f5: e5:8f:f9:d2:1b:a6:db:59:9f:c1:0c:3c:74:74:ac: 89:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:2F:FF:A6:F2:8F:DB:5A:9E:A0:C2:A4:AC:BD:EB:FF:C8:E6:10:F8 X509v3 Authority Key Identifier: keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:3e:74:d2:fa:5f:34:a0:ee:41:e0:e8:81:bc:2f:a5:81:e8: 38:56:e1:ee:d5:4e:65:9f:b8:50:34:c0:ce:5e:85:36:ba:b4: 7a:b5:cd:e0:dc:21:73:ee:5f:cf:7a:c1:15:db:eb:21:50:f5: ce:f2:03:4a:21:68:76:09:12:29:fc:63:fc:4b:85:78:57:9c: ce:83:bf:f3:ac:f3:2c:59:ef:97:f1:7d:53:03:2f:c7:54:49: cc:79:f7:ca:24:30:cb:75:fa:aa:33:87:4a:d7:9a:dc:45:62: 98:34:aa:c6:39:64:a7:43:19:80:30:1e:2e:e9:f9:50:a1:42: 29:c8:07:0d:e6:18:f9:01:da:e1:e8:a5:c8:7c:63:c1:13:35: 63:3f:05:15:6f:d9:52:11:24:4d:36:bc:f5:66:09:ba:d7:60: b1:db:71:5d:60:b8:08:fd:f7:b3:15:58:a5:bb:d1:06:68:8a: 3f:f0:a8:3d:02:b8:4a:f8:8c:d0:99:20:61:e4:de:7d:ce:ca: 4b:1a:a7:cb:25:fb:28:c6:f1:46:e4:8f:78:71:3c:f0:87:82: fb:4a:d3:8a:7f:a9:cb:8c:3d:ac:67:58:56:b5:6c:bb:98:34: 50:ae:39:65:73:40:ac:fc:5d:bc:3d:67:d8:28:4c:76:f2:2a: 46:d1:da:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY99MsMlqTVRZvi8brDGriB+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhYmExMTcyNDcyZWE4MDI2NWQxMjk4Mjk2N2RlMGE4YjBi YzU5MDEwHhcNMjQwNTE1MTcwMDI5WhcNMjQwNTE2MTcwMDI5WjAzMTEwLwYDVQQD Eyg2MTJmZmZhNmYyOGZkYjVhOWVhMGMyYTRhY2JkZWJmZmM4ZTYxMGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLPPvmm3bPTP8d6dHIo0OU6KoTZ8 kQYRoIYvLUq+xnCxvReC0Hl5+JIhF2VrHZCXkdpPPzYEESworksY9+6HjQxZIhHL UhY9smCmVl+1GkLuVgacTJYjy1gI4VIFW9W3QU5StpvghPMp9JAJ/W2lEkm2ozsr l+aSrPYS0gLPITgDhs+bwLcgSgG/mIt4gplcFJ9Ug6PYGAbJv0ZxAvNthefoHShD 6wD6HzCpEuBMiOkeeQbdFDnDDnIcXfsNqQU1KZn6+1z/o22tygcCls1DhR4eiWAZ TEH6mwqZnQcqHLaqDO3pZ21TOQ1kRcKSmvXlj/nSG6bbWZ/BDDx0dKyJDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGEv/6byj9tanqDCpKy96//I5hD4MB8GA1UdIwQY MBaAFDq6EXJHLqgCZdEpgpZ94KiwvFkBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgt NGRkMDQzNDZhYmMzLzEvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgtNGRkMDQzNDZhYmMz LzEvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABD500vpf NKDuQeDogbwvpYHoOFbh7tVOZZ+4UDTAzl6FNrq0erXN4Nwhc+5fz3rBFdvrIVD1 zvIDSiFodgkSKfxj/EuFeFeczoO/86zzLFnvl/F9UwMvx1RJzHn3yiQwy3X6qjOH Stea3EVimDSqxjlkp0MZgDAeLun5UKFCKcgHDeYY+QHa4eilyHxjwRM1Yz8FFW/Z UhEkTTa89WYJutdgsdtxXWC4CP33sxVYpbvRBmiKP/CoPQK4SviM0JkgYeTefc7K SxqnyyX7KMbxRuSPeHE88IeC+0rTin+py4w9rGdYVrVsu5g0UK45ZXNArPxdvD1n 2ChMdvIqRtHazQ== -----END CERTIFICATE-----Generated at Wed May 15 18:25:07 2024 by rpki-client on console-ams.rpki-client.org