$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/DYcUK9wrPw0ISKDYALaTCxq7NLw.mft File: DYcUK9wrPw0ISKDYALaTCxq7NLw.mft (raw, json) Hash identifier: ptfV0CMd6ANz0wWncJ+UGwOzYD3CHQ9TdJJOqRCVs+Q= Subject key identifier: D7:58:CE:34:B0:9F:C7:92:42:5D:DD:46:0F:1B:7F:46:3C:34:42:71 Authority key identifier: 0D:87:14:2B:DC:2B:3F:0D:08:48:A0:D8:00:B6:93:0B:1A:BB:34:BC Certificate issuer: /CN=0d87142bdc2b3f0d0848a0d800b6930b1abb34bc Certificate serial: 018F47FCEA14A50DE856BA59A05A6A5A9076 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYcUK9wrPw0ISKDYALaTCxq7NLw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/DYcUK9wrPw0ISKDYALaTCxq7NLw.mft Manifest number: 0F5A Signing time: Sun 05 May 2024 09:01:48 +0000 Manifest this update: Sun 05 May 2024 09:01:48 +0000 Manifest next update: Mon 06 May 2024 09:01:48 +0000 Files and hashes: 1: 4OIH-Un4yy4-pSE4nKbPDHGPbFk.roa (hash: y2kF5QVQDo4B+KA5N0Dskl5cwATEuYWUah4UN3OB11c=) 2: 508ro2dqgD4UO-hE_fC3fApIhQo.roa (hash: 3x2fBzArS6aiK+wpj8TjI4+AZV7aIHMvxwasZM04Yd0=) 3: 5wOPTST3NLbHllN1P7Knj0R04sI.roa (hash: OMJlpVtc4d/wtbKew6CSZzD4lZcaLM84sgd6XbZDd9g=) 4: DYcUK9wrPw0ISKDYALaTCxq7NLw.crl (hash: CDUTX2qGBCLZj4d9Q/TB4HyUBHW2QV08yVrf0JPdA98=) 5: G0TH3lCQFru_QjladmhvhozyRbs.roa (hash: x5sECp0W//9pkozJAL/FVsg/fRPmnmoYOdSpb7eCgXQ=) 6: Ml4sQKTmSpS4eSt99aWN2P6Yb5k.roa (hash: J/tnVFJhggLagTowBPCIDcidDOt5xRUa54rWu3p0RLA=) 7: PUNiVgLPYhqs94F8IRCAJgl7j40.roa (hash: kb+h76iaXKsN43BZIN7e0s/Hc5JlhyjB4g2twrGBYPY=) 8: R0SxZzCKG1-pX1we86098LgpkvI.roa (hash: WAapHnCKFuVM9mgvthpV+H31epV6KytQ7huCEAdw81w=) 9: RAfFQe5FrVG7RfVqJKNSvbChLok.roa (hash: RnsyI8AXTLA067ijv8NQjSrCgBkkxLG61YvYj4Q32ks=) 10: RziS74kv7uHp10fdkcU9eFNo_hY.roa (hash: WwqsUYvlQ69ekycXDe7ghd4BQ333M+urxU8PwrkpKu4=) 11: _4OJEmy-_xr_kOyO6EpYKRvyk_M.roa (hash: M6KX3NAag16FtxfM/8U8uJKiWDb1qs68R8f4zbgn6y8=) 12: gEBD1SrlixKLUIhv281F9gdrYRU.roa (hash: zq165Ib3ZWzi609hfGZ6pOD80SzZXLMH5NgYIdn8C9M=) 13: hVSpcz72F_3hGT_ih8BBg9MjSz8.roa (hash: /aC7JTzrFSFyjshV3SREAKDrKAlAXukiZvxSVLATCaM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/DYcUK9wrPw0ISKDYALaTCxq7NLw.crl rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/DYcUK9wrPw0ISKDYALaTCxq7NLw.mft rsync://rpki.ripe.net/repository/DEFAULT/DYcUK9wrPw0ISKDYALaTCxq7NLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 06 May 2024 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:47:fc:ea:14:a5:0d:e8:56:ba:59:a0:5a:6a:5a:90:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d87142bdc2b3f0d0848a0d800b6930b1abb34bc Validity Not Before: May 5 09:01:48 2024 GMT Not After : May 6 09:01:48 2024 GMT Subject: CN=d758ce34b09fc792425ddd460f1b7f463c344271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:5a:89:7e:7f:f5:1a:f1:11:54:98:a4:56:6b: 17:34:5d:66:19:20:17:ee:cf:6c:d6:ab:8a:9a:2a: 2a:89:29:f4:ca:38:a3:e9:38:4d:cc:91:a9:9e:b3: 6f:ad:8b:db:89:85:3b:c0:c7:15:05:ad:4e:77:b5: ee:f6:db:83:48:68:dd:a2:ff:31:a2:0d:65:ba:37: 7b:1c:91:5e:71:44:3b:4e:a6:6e:6b:f9:cf:77:5f: 5a:0b:f1:12:73:ba:99:0d:aa:f4:06:50:b1:d5:6a: 7a:1c:19:dd:a2:c7:bc:b4:ff:77:77:f2:f7:9a:b2: f3:46:08:c1:8c:7b:27:3a:ab:f7:bf:6d:6f:66:ab: 51:d0:6c:f9:4e:48:d3:c0:ee:28:14:07:21:9d:cd: a4:8f:20:62:71:00:82:0d:62:61:cd:53:6d:53:e5: 83:80:12:ef:1e:14:69:93:31:42:d2:39:09:9d:eb: de:ef:00:ff:be:4d:76:ca:0b:a1:ae:ff:34:09:79: e5:b1:12:b4:00:bc:08:46:19:5a:e8:d7:1a:2e:1a: 10:7b:0b:a5:52:cd:11:b7:67:12:04:e4:54:a1:49: 29:f8:e1:aa:dc:00:3f:63:b5:b6:2e:8a:e6:44:3f: a2:73:00:6d:97:f5:9e:84:84:53:e4:23:53:8e:38: 65:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:58:CE:34:B0:9F:C7:92:42:5D:DD:46:0F:1B:7F:46:3C:34:42:71 X509v3 Authority Key Identifier: keyid:0D:87:14:2B:DC:2B:3F:0D:08:48:A0:D8:00:B6:93:0B:1A:BB:34:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYcUK9wrPw0ISKDYALaTCxq7NLw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/DYcUK9wrPw0ISKDYALaTCxq7NLw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/DYcUK9wrPw0ISKDYALaTCxq7NLw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:42:e6:5b:18:53:c4:b8:fe:69:ae:da:c8:06:4f:bf:38:19: df:02:ea:f3:1c:62:ae:ee:f2:0b:cf:bb:e8:25:6f:ed:59:8d: 90:44:9c:00:89:77:0e:e4:a1:e4:71:33:03:69:fe:01:99:37: b0:38:a6:a5:27:7b:ec:4d:aa:3c:1e:74:4b:26:8e:bf:65:b6: 87:1f:07:a0:b5:5c:56:e8:25:b2:39:6f:34:c0:92:38:f5:cf: 9b:c4:46:d5:47:4b:6f:a9:43:8c:e7:8b:0c:70:cf:cc:e2:2f: 25:cb:b1:b1:57:86:5d:8c:28:c5:f3:db:fd:a4:f1:90:e9:fa: ab:d5:86:08:a3:70:4c:9b:d2:1d:37:2b:a7:11:8a:25:76:c7: 42:52:98:4a:2e:41:f8:e0:98:b2:f1:19:9c:bc:f4:b9:47:af: 4e:33:d8:c1:34:bf:a1:04:6e:06:c2:d6:ac:88:21:e1:5d:9c: 26:f1:7d:64:5e:92:fd:ea:9a:81:44:31:8c:b4:aa:57:18:05: e2:64:c9:28:35:72:a7:f4:a8:93:46:79:c5:8c:3a:fb:ad:57: a9:a7:e2:e7:08:20:37:c5:2e:95:9c:71:88:fa:1b:b8:23:9f: ef:c6:df:71:62:b0:2b:49:df:8e:3f:9c:c9:80:bf:ea:6e:74: ba:5e:db:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY9H/OoUpQ3oVrpZoFpqWpB2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkODcxNDJiZGMyYjNmMGQwODQ4YTBkODAwYjY5MzBiMWFi YjM0YmMwHhcNMjQwNTA1MDkwMTQ4WhcNMjQwNTA2MDkwMTQ4WjAzMTEwLwYDVQQD EyhkNzU4Y2UzNGIwOWZjNzkyNDI1ZGRkNDYwZjFiN2Y0NjNjMzQ0MjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7VqJfn/1GvERVJikVmsXNF1mGSAX 7s9s1quKmioqiSn0yjij6ThNzJGpnrNvrYvbiYU7wMcVBa1Od7Xu9tuDSGjdov8x og1lujd7HJFecUQ7TqZua/nPd19aC/ESc7qZDar0BlCx1Wp6HBndose8tP93d/L3 mrLzRgjBjHsnOqv3v21vZqtR0Gz5TkjTwO4oFAchnc2kjyBicQCCDWJhzVNtU+WD gBLvHhRpkzFC0jkJneve7wD/vk12yguhrv80CXnlsRK0ALwIRhla6NcaLhoQewul Us0Rt2cSBORUoUkp+OGq3AA/Y7W2LormRD+icwBtl/WehIRT5CNTjjhlDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNdYzjSwn8eSQl3dRg8bf0Y8NEJxMB8GA1UdIwQY MBaAFA2HFCvcKz8NCEig2AC2kwsauzS8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFljVUs5d3JQdzBJU0tEWUFMYVRDeHE3Tkx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC84ZjhjYzAtZjY5My00MjFjLWJjNTQt YTMxNzA4ZDQwMzkxLzEvRFljVUs5d3JQdzBJU0tEWUFMYVRDeHE3Tkx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC84ZjhjYzAtZjY5My00MjFjLWJjNTQtYTMxNzA4ZDQwMzkx LzEvRFljVUs5d3JQdzBJU0tEWUFMYVRDeHE3Tkx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKkLmWxhT xLj+aa7ayAZPvzgZ3wLq8xxiru7yC8+76CVv7VmNkEScAIl3DuSh5HEzA2n+AZk3 sDimpSd77E2qPB50SyaOv2W2hx8HoLVcVuglsjlvNMCSOPXPm8RG1UdLb6lDjOeL DHDPzOIvJcuxsVeGXYwoxfPb/aTxkOn6q9WGCKNwTJvSHTcrpxGKJXbHQlKYSi5B +OCYsvEZnLz0uUevTjPYwTS/oQRuBsLWrIgh4V2cJvF9ZF6S/eqagUQxjLSqVxgF 4mTJKDVyp/Sok0Z5xYw6+61Xqafi5wggN8UulZxxiPobuCOf78bfcWKwK0nfjj+c yYC/6m50ul7bbQ== -----END CERTIFICATE-----Generated at Sun May 5 10:31:11 2024 by rpki-client on console-fra.rpki-client.org