$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft File: g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft (raw, json) Hash identifier: YupiG9PmqTtpT4kxsj9w/BaYVj1KdXx9G7TzE/EC7LQ= Subject key identifier: 8C:A1:1D:F9:A2:51:15:38:69:82:EF:24:1D:D9:E3:F9:4B:37:BE:08 Authority key identifier: 83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F Certificate issuer: /CN=835bc9bb547e27788d221bc8bbd5fb02e024480f Certificate serial: 018879E70F89BFC321F5AE44FB5483630DFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft Manifest number: 0DC6 Signing time: Fri 02 Jun 2023 02:19:25 +0000 Manifest this update: Fri 02 Jun 2023 02:19:25 +0000 Manifest next update: Sat 03 Jun 2023 02:19:25 +0000 Files and hashes: 1: 33dmwr1ttbTbKvlEqVX0knDXXYk.roa (hash: MNJ07DPJ8OQITuH0EEOvw7kJfiUob0YVybxymEQJ3K4=) 2: 8nrlSopMrcpJxsiKdgub8wf8SSg.roa (hash: UCLBVBqYo3epaMmxlVEH3ypHefXxAV1jSE6h4yOTQDg=) 3: BCQOQgHgiNsooakJDyud8e9U0U0.roa (hash: wYAUxn9sSRjgJkvltHXyZ0ly0u6L4tRR/ehzPE5MuBE=) 4: I4-6ykdMVyDdOr67d-lX27yjYqg.roa (hash: kmJeYHX/axnRiphM59fhHrbd31zJZvuLveIEBIbkN38=) 5: JvQwvOCFvOFuJbaSoa9e732V_DY.roa (hash: Jv38pPOK2Pdq/wQD5RRNrmfV5qlth34vJqJDS6TwR5E=) 6: L4XOHsuM96mQQjMfd8cXJ20FFf4.roa (hash: AtDchSk9MfrKrwYdq+zCGe9W480by080y9iRNXWxY64=) 7: Yg8uX37GIGYuronzdcRzAeaFT3k.roa (hash: +/CUci3O9sWudM3kFpy6WL4VMbodh7t6SqnzUWlwcJ4=) 8: Z1VwGVBkeDR1lFZlxMim8ZXFABU.roa (hash: 2vXxbqCFDXqB7omIIAS5bPZjRLe13ThvylJHOPY3VL8=) 9: a5shIi5JL7OaWszR711RAwvYjuE.roa (hash: B/qJSiXDjd9M4suwFJp3zhu5CMDbM2BahKEKHnZpnC0=) 10: ae9tTQc6nxONkmsyue_oJv1AS2s.roa (hash: nDHBYknOAgw1c0nUol6FJS7wN1kHjkq/i3nAhPhQcpY=) 11: g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl (hash: FSpmZ1yGvit+onz/ZpK5ZqZ4xGXzH/CCPHJJWQw9ssY=) 12: iW3GZB5GZ0y-XLS3DIkTQFOFyXE.roa (hash: loUc3Eiuc9Ye2RpMtxeXJLz5oxiMOM3xWeF51S2+1us=) 13: m8vCXjWK40FjM11GfMCC6BkQH90.roa (hash: L78hByDsIIlZgZ51/tHreBVZl9AreiVV8IrcLctucN0=) 14: nEOeVRWaa_KMUgG97qojIVLdoPE.roa (hash: SbA00SPkyohbVUsXUdVn6zZDuIWLZj1PofXoVWkWExw=) 15: ncmaQ5Sr4TRY9gCEFrRQnu00Zdg.roa (hash: wbIo3sIGVZa3fsGuOvtx3M/S4wf5qx7X6EVb3bEj10Q=) 16: o48qnrvP4BS1v5AzDpx4O6XeNnI.roa (hash: 2ji6WO1fqjaIjbq0ooMHMk8sB1NIMy9mfSbyovhBSH0=) 17: zhDaa5V6JFtbwumVjeqHtrCQalE.roa (hash: bXZcGCAHxTBt+dQ9IrVRhL2l+DLQpryxO2UhnBg+bIw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jun 2023 22:41:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:88:79:e7:0f:89:bf:c3:21:f5:ae:44:fb:54:83:63:0d:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=835bc9bb547e27788d221bc8bbd5fb02e024480f Validity Not Before: Jun 2 02:19:25 2023 GMT Not After : Jun 3 02:19:25 2023 GMT Subject: CN=8ca11df9a25115386982ef241dd9e3f94b37be08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:71:51:04:ae:25:23:94:f0:b3:c4:af:9c:7f: 7d:28:4c:e7:77:ee:64:62:99:ad:c9:be:f9:ae:d1: 9d:48:50:af:4a:ba:3a:3a:7c:0c:0c:9c:43:df:77: 94:71:cf:1b:0f:d2:1f:a2:63:ac:48:b8:aa:e7:cd: 77:d2:95:2d:f5:30:6f:02:6f:aa:42:89:98:80:2c: 84:5d:b2:60:17:90:42:12:04:f7:d1:1f:d7:62:5e: 4b:af:5b:59:e0:34:4a:c1:37:61:c9:56:d1:03:f0: f8:da:39:3a:43:6a:2f:aa:ff:94:f5:3f:9c:7c:02: b9:91:e3:ce:91:65:2b:2a:2a:54:74:95:ba:f6:6e: 25:17:92:70:8d:77:26:cc:38:69:25:99:c2:0a:21: 45:35:ef:86:df:62:76:89:f9:76:cc:c6:54:db:64: cb:fa:e2:26:9b:7a:6c:e4:96:67:77:55:88:c6:f1: 1d:61:df:ec:f8:d0:0f:18:d3:59:3d:4d:e9:73:a7: a2:c1:fa:23:83:e9:4a:a4:57:d1:64:c5:da:18:da: 5a:a6:cf:23:8e:cc:62:e5:20:aa:a4:0d:19:63:a5: c4:41:55:46:8d:73:2d:2b:da:e7:bb:a6:cf:b1:f8: a4:52:af:f8:3b:65:9b:cc:a2:41:c4:3e:be:93:5e: 5c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:A1:1D:F9:A2:51:15:38:69:82:EF:24:1D:D9:E3:F9:4B:37:BE:08 X509v3 Authority Key Identifier: keyid:83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:01:16:01:cf:6d:ae:13:72:ca:d8:bb:e1:c1:25:fc:66:46: 28:3b:4a:d3:cf:3b:38:53:26:b7:58:d2:37:ab:93:63:76:d7: a4:ea:1d:a6:c4:74:c9:b2:73:4f:56:f1:94:20:ce:b0:95:76: 0a:5f:34:e6:d0:d0:66:57:5a:b7:98:0e:42:de:d5:6f:78:b0: 91:d2:a2:9a:e7:88:b2:c9:6e:d0:9f:f6:5a:87:82:32:62:c3: be:3b:6a:79:de:b0:63:78:51:e9:cc:83:b9:2f:07:b1:bb:e2: 93:41:bc:fa:fc:07:6c:fd:4d:07:41:63:39:05:fd:a1:9d:9e: 3d:15:03:79:80:0a:a0:bc:2c:d8:ba:ca:ce:c2:b7:f1:56:d4: a3:07:55:c0:ca:23:6e:eb:5f:e3:d1:ed:cc:35:79:75:6d:b2: b5:c2:29:55:85:6d:c4:b9:6e:ff:c9:ae:81:66:4f:89:1d:73: d0:14:e4:be:e9:87:5b:df:7a:fc:6f:fc:be:c9:86:bc:69:62: 98:33:da:13:17:d7:4c:a3:b7:13:89:af:79:6c:9a:ae:ec:a7: ef:5b:9a:a5:8b:fd:6b:05:73:b9:2b:90:13:c8:14:f1:02:92: f5:af:bb:24:c2:8b:96:f4:99:0b:a3:b2:29:65:a3:97:69:31: 13:a7:64:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAYh55w+Jv8Mh9a5E+1SDYw3+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzNWJjOWJiNTQ3ZTI3Nzg4ZDIyMWJjOGJiZDVmYjAyZTAy NDQ4MGYwHhcNMjMwNjAyMDIxOTI1WhcNMjMwNjAzMDIxOTI1WjAzMTEwLwYDVQQD Eyg4Y2ExMWRmOWEyNTExNTM4Njk4MmVmMjQxZGQ5ZTNmOTRiMzdiZTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXFRBK4lI5Tws8SvnH99KEznd+5k Ypmtyb75rtGdSFCvSro6OnwMDJxD33eUcc8bD9IfomOsSLiq58130pUt9TBvAm+q QomYgCyEXbJgF5BCEgT30R/XYl5Lr1tZ4DRKwTdhyVbRA/D42jk6Q2ovqv+U9T+c fAK5kePOkWUrKipUdJW69m4lF5JwjXcmzDhpJZnCCiFFNe+G32J2ifl2zMZU22TL +uImm3ps5JZnd1WIxvEdYd/s+NAPGNNZPU3pc6eiwfojg+lKpFfRZMXaGNpaps8j jsxi5SCqpA0ZY6XEQVVGjXMtK9rnu6bPsfikUq/4O2WbzKJBxD6+k15cHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIyhHfmiURU4aYLvJB3Z4/lLN74IMB8GA1UdIwQY MBaAFINbybtUfid4jSIbyLvV+wLgJEgPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzF2SnUxUi1KM2lOSWh2SXU5WDdBdUFrU0E4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC85NjJmYjEtM2RmMC00ZWMyLWI1MGEt YjM2YTI0ZDM5NDI3LzEvZzF2SnUxUi1KM2lOSWh2SXU5WDdBdUFrU0E4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC85NjJmYjEtM2RmMC00ZWMyLWI1MGEtYjM2YTI0ZDM5NDI3 LzEvZzF2SnUxUi1KM2lOSWh2SXU5WDdBdUFrU0E4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATQEWAc9t rhNyyti74cEl/GZGKDtK0887OFMmt1jSN6uTY3bXpOodpsR0ybJzT1bxlCDOsJV2 Cl805tDQZldat5gOQt7Vb3iwkdKimueIsslu0J/2WoeCMmLDvjtqed6wY3hR6cyD uS8Hsbvik0G8+vwHbP1NB0FjOQX9oZ2ePRUDeYAKoLws2LrKzsK38VbUowdVwMoj butf49HtzDV5dW2ytcIpVYVtxLlu/8mugWZPiR1z0BTkvumHW996/G/8vsmGvGli mDPaExfXTKO3E4mveWyaruyn71uapYv9awVzuSuQE8gU8QKS9a+7JMKLlvSZC6Oy KWWjl2kxE6dkIA== -----END CERTIFICATE-----Generated at Fri Jun 2 02:43:23 2023 by rpki-client on console-fra.rpki-client.org