$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft File: 1DdYFDRN8L9tAXczrNxIjwAmMbI.mft (raw, json) Hash identifier: qsYBt3GlSez0WICHPS4UhxQ65VR5zQ64g8oDH+Xm3kg= Subject key identifier: 5C:25:0B:A8:CB:0B:23:47:E2:A0:4B:63:9A:6D:85:DF:6E:B1:4D:FE Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2 Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2 Certificate serial: 018F3BC115352757ADA9F761DF595FDED31D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft Manifest number: 1160 Signing time: Fri 03 May 2024 00:01:00 +0000 Manifest this update: Fri 03 May 2024 00:01:00 +0000 Manifest next update: Sat 04 May 2024 00:01:00 +0000 Files and hashes: 1: 1DdYFDRN8L9tAXczrNxIjwAmMbI.crl (hash: kNcebO8IDnT7K5RM9pvWNqB10ZZHsjqqGGZ3mKJDTqU=) 2: Gwbru8yU9kzziokWhCCzl1GBn9A.roa (hash: /3Jqu0WxT4zHo+cqR5LmzhezLAHHhShpOHSHkqJ56YY=) 3: JrCcSTYjyu9WLrYS9xffg01Zsto.roa (hash: 0m8/QsQ05rnt5T/MUKl1+eJTAhBgQuZh2WLJm0cpPXg=) 4: M3Vx5hZFVMOqsZbqB64n3zKM1l4.roa (hash: Je9mxIbUjpzdpZtZnYCm0gdkd6XaDPU0fCJCGiI1CuY=) 5: PyAskcsDyuA7YkdbsUCAPinY9wE.roa (hash: HflhVaMVMY39XmudaVsCNRbMqk74yX2bCdkOC3G3QTg=) 6: SoIXdO-AHnQF2G4umvA5it7CbD0.roa (hash: i9EtEeswbfMv0SeOOi9U5QB+dsjgFMINx+xOYYVZmY8=) 7: TJAXeF4w7zY7ZuQD6XWOgWmNqVM.roa (hash: GGmkbtKkpANuKCucnbld/R71j/LUkoU1WGz0TGj6Fw8=) 8: UZREhjZ1Cer6EzgTd-99-HqH1Lw.roa (hash: 9/QQVQLX/bHlr4B0l/OF+uZ41qW5wQBKalgO0kEj/SE=) 9: V4J1HjrcRj4a0k1BgJdSSQQACVo.roa (hash: w3yGuLQ0nxO8cXiFWWLqO/hLtI8RkptARQZwGRlgBQI=) 10: XlBJazSkMouXx8MtFWER-ctPR18.roa (hash: MEWW0YtEjEnIFpjCiHkqOOzROj/0DUhvbU/Ear2Ej0U=) 11: XwRj9Wx-qcqFTfZXJpcfHb3fVT0.roa (hash: IFQKAOBkC9Hb+q27xTGrg1VN6Bx2tGMvBWLizShhT5w=) 12: p-sjF_U5fyzSO6BhBVt5-CKaEhk.roa (hash: ZMlBYD6M1c5XUrL86yxMPFsKD/bdL3s03dkH5EGRru8=) 13: vXqIsfWMBiel8TtAmnhCfzxhwpQ.roa (hash: y28dNNQrcncc6Rn7d3UOQVe75e0YhQscaQyK32eeP2k=) 14: wqiNo3UmtCW1e_e9iCA8kGVCQ3Q.roa (hash: BtRvxJdAgL9lCR/HV6RuahxN9+3tduBkl+QMZd+SuxM=) 15: xz2PE_KAkZBHdGq2aHQ54qK4XX4.roa (hash: OiICJFOLJQmkpzPyBOTS9vTkIrulMZG1nNqy3+RnTYc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 04 May 2024 00:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:3b:c1:15:35:27:57:ad:a9:f7:61:df:59:5f:de:d3:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2 Validity Not Before: May 3 00:01:00 2024 GMT Not After : May 4 00:01:00 2024 GMT Subject: CN=5c250ba8cb0b2347e2a04b639a6d85df6eb14dfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9b:9d:be:70:14:da:28:0f:b7:11:13:4c:f0: 4d:10:c6:b8:92:c0:42:bb:a0:bd:e4:85:fc:65:0c: cf:42:fc:4b:be:13:ff:4f:b7:46:d4:d0:28:6f:e6: 17:29:e8:6b:84:81:47:69:1e:d0:d7:b2:7d:b4:73: 1c:31:15:71:c6:8f:61:55:39:93:13:05:69:69:d1: 7b:72:e4:26:03:74:41:70:7c:4b:85:f0:dd:b9:90: 11:2b:bb:1c:c1:63:56:70:6d:9a:5c:3f:3c:11:35: 32:9b:98:dc:5f:32:1e:8d:d9:ee:42:6b:d4:9e:0c: bb:67:7e:fb:e3:c1:f4:5a:e0:a0:f1:d9:be:e0:c7: 66:d7:31:a5:b0:c7:df:5b:96:25:7e:9a:9c:c5:02: f0:21:7e:1f:3f:b1:8f:3a:b3:94:34:62:21:79:62: 75:c0:d7:2e:19:e8:98:7f:2e:e3:6a:3b:e3:d1:c7: d9:a9:c3:7c:3a:d4:8d:36:9e:c6:be:ee:be:6c:ab: 04:3f:e8:81:ad:1d:f5:3f:cc:90:fc:0f:23:d0:9a: 64:25:ff:0b:5c:30:d6:b8:ef:e2:88:98:41:b3:4a: e2:5c:c3:51:e6:d4:a6:8c:e3:6c:cd:55:4c:6f:30: df:7a:6d:c9:0d:f6:a6:ff:0f:d1:af:22:61:86:48: aa:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:25:0B:A8:CB:0B:23:47:E2:A0:4B:63:9A:6D:85:DF:6E:B1:4D:FE X509v3 Authority Key Identifier: keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:46:24:f7:5c:8a:25:c4:ff:d3:f2:47:01:c1:b2:88:e7:56: 15:92:8c:66:5a:cf:5f:4f:78:f1:33:fc:6b:af:f9:f7:1e:41: f7:56:62:2e:f4:17:c5:10:81:ed:2d:a1:84:30:b5:f2:ff:41: 10:74:29:a7:4a:22:f5:0d:f4:a6:1e:cf:b2:a5:a6:74:ec:50: 8e:57:96:f1:0c:99:88:71:7d:f1:f3:3f:9d:b7:3d:3f:20:dd: c3:71:d1:aa:9b:12:6a:0b:83:93:d3:01:7d:55:ef:e4:f8:af: 9e:ba:42:5e:6c:1a:fc:0c:38:8d:36:af:ff:93:50:eb:42:e9: 45:d1:ec:40:8b:e6:16:b0:26:4e:71:c2:97:c9:91:09:07:e0: 72:4e:23:c5:c6:33:a7:ad:7e:c9:42:77:c6:50:7a:ed:2b:1f: 58:38:0b:8a:20:31:4a:bb:4c:a4:83:1c:36:f8:a0:70:ac:fc: 85:de:40:2f:c3:39:35:44:b9:c8:a0:b3:a0:3c:1c:88:8e:13: e1:a4:ca:80:c8:bd:5b:dd:bc:ae:02:68:30:7e:cb:3e:fa:63: 02:3a:31:ee:c4:8b:02:42:3c:79:24:41:12:fa:b1:1e:9e:35: 05:2b:92:01:d2:00:7a:10:53:e2:fd:71:ce:cc:d0:bc:2d:57: 8f:f0:a0:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY87wRU1J1etqfdh31lf3tMdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Mzc1ODE0MzQ0ZGYwYmY2ZDAxNzczM2FjZGM0ODhmMDAy NjMxYjIwHhcNMjQwNTAzMDAwMTAwWhcNMjQwNTA0MDAwMTAwWjAzMTEwLwYDVQQD Eyg1YzI1MGJhOGNiMGIyMzQ3ZTJhMDRiNjM5YTZkODVkZjZlYjE0ZGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZudvnAU2igPtxETTPBNEMa4ksBC u6C95IX8ZQzPQvxLvhP/T7dG1NAob+YXKehrhIFHaR7Q17J9tHMcMRVxxo9hVTmT EwVpadF7cuQmA3RBcHxLhfDduZARK7scwWNWcG2aXD88ETUym5jcXzIejdnuQmvU ngy7Z37748H0WuCg8dm+4Mdm1zGlsMffW5YlfpqcxQLwIX4fP7GPOrOUNGIheWJ1 wNcuGeiYfy7jajvj0cfZqcN8OtSNNp7Gvu6+bKsEP+iBrR31P8yQ/A8j0JpkJf8L XDDWuO/iiJhBs0riXMNR5tSmjONszVVMbzDfem3JDfam/w/RryJhhkiqNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFwlC6jLCyNH4qBLY5pthd9usU3+MB8GA1UdIwQY MBaAFNQ3WBQ0TfC/bQF3M6zcSI8AJjGyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMURkWUZEUk44TDl0QVhjenJOeElqd0FtTWJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9iMjRiMmQtMzUyMy00MjJlLTliY2Yt MzY3MWQ2N2ViOWY4LzEvMURkWUZEUk44TDl0QVhjenJOeElqd0FtTWJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9iMjRiMmQtMzUyMy00MjJlLTliY2YtMzY3MWQ2N2ViOWY4 LzEvMURkWUZEUk44TDl0QVhjenJOeElqd0FtTWJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbUYk91yK JcT/0/JHAcGyiOdWFZKMZlrPX0948TP8a6/59x5B91ZiLvQXxRCB7S2hhDC18v9B EHQpp0oi9Q30ph7PsqWmdOxQjleW8QyZiHF98fM/nbc9PyDdw3HRqpsSaguDk9MB fVXv5PivnrpCXmwa/Aw4jTav/5NQ60LpRdHsQIvmFrAmTnHCl8mRCQfgck4jxcYz p61+yUJ3xlB67SsfWDgLiiAxSrtMpIMcNvigcKz8hd5AL8M5NUS5yKCzoDwciI4T 4aTKgMi9W928rgJoMH7LPvpjAjox7sSLAkI8eSRBEvqxHp41BSuSAdIAehBT4v1x zszQvC1Xj/CgYA== -----END CERTIFICATE-----Generated at Fri May 3 09:56:02 2024 by rpki-client on console-fra.rpki-client.org