$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft File: R3avt0-tW68KYYC0lRDYuEl9-NM.mft (raw, json) Hash identifier: LlPEIosABQpxzutJuW0DasmOfLcgv6ByS0JpG+WgYnI= Subject key identifier: D8:9A:AF:2E:18:22:6F:77:4F:EE:D7:9B:C0:F9:F1:18:3F:89:72:22 Authority key identifier: 47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3 Certificate issuer: /CN=4776afb74fad5baf0a6180b49510d8b8497df8d3 Certificate serial: 018F8635A535F55B48E3A3CB760730533FCC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft Manifest number: 1177 Signing time: Fri 17 May 2024 11:00:13 +0000 Manifest this update: Fri 17 May 2024 11:00:13 +0000 Manifest next update: Sat 18 May 2024 11:00:13 +0000 Files and hashes: 1: AgAUUr68A29sxAcuucu-QH395yc.roa (hash: xvjrIYn8OY2/7hrGdLU8S91rQrgcAqUlhnhRI/ftz+Y=) 2: LJyNvDe-Rh0YHzFAOFr2BZpPJDg.roa (hash: HW8iYVyxKglLKUh/ID3L4I7qltwwpGwyAA/Ylhox90o=) 3: OTqAO26bWOJs8Cg9Nu8zOxcD6jw.roa (hash: BxLpkZ5lsORgMm3qmZZ8xttlI+npxtF7o/xMQBCCGHA=) 4: R3avt0-tW68KYYC0lRDYuEl9-NM.crl (hash: +9DZJ9vRlZltik+3tDxVkBMUCWczGF68X2UPHFimowY=) 5: T94e7iGlcpj8tDyAqUkgSYaove4.roa (hash: MRmR+sD/m1bH6fQE7LpSZpKpuho/pq9kHyjaXG+5kq8=) 6: WIrmiJS3uGmM4Api4TMWWkb357U.roa (hash: XUBkW8GNpOjPnW7fbyVVSF4KCbyVMtnBBaClnPECCMY=) 7: bTWAGD69mx0_1ZE39R7YJzdlgpQ.roa (hash: d0UmavIMZwMye2b/lu+sbTW1E2OKVTTmL9PAHFZE90E=) 8: fFQZKLTDvq3iTMd0DkRXOlohoyQ.roa (hash: qh8+mAj+qSGUKH+wAP3tdReIHNbxOxRR7cAiiljJCLE=) 9: hPEtXs323fx0LX0Y9AdSvpcWiPg.roa (hash: fbLm/1wvMKupP5ReKGjKyucGKpeARahIGnbRrmU0Aa8=) 10: jOwAQd3-P7f9hyNnCgexev-EOsY.roa (hash: 8bQPUZ8jkFcsjhoiGzztCrXfsXYfaeENW+zad3lsEks=) 11: oFDRiCw38nEh76unqCzPWnrE9bA.roa (hash: 6IIQCPF1HY5MJ6sp5kCP4immAIpvSmtQPTj9lTqCM84=) 12: oOLMjRI7b1YSUgio02v27UwTDEc.roa (hash: YWdztiCM6CEDcHiVCQvvaCdEpxNxUu3xIkYxc/pV79A=) 13: vfYZzHur55SwofG7_Uj1prEqwoE.roa (hash: TTprKhgEMRpczDrOA2mAF1XPbyi+YSfqJgpGP6QgzKM=) 14: zC5cnzJZXWJ15DovFhNZnjAYlx8.roa (hash: PmHbi3CbXx+RGitt7dLTRvI+Gkto3U25bJJVc6K8JOk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 May 2024 11:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:86:35:a5:35:f5:5b:48:e3:a3:cb:76:07:30:53:3f:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4776afb74fad5baf0a6180b49510d8b8497df8d3 Validity Not Before: May 17 11:00:13 2024 GMT Not After : May 18 11:00:13 2024 GMT Subject: CN=d89aaf2e18226f774feed79bc0f9f1183f897222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:56:2a:de:fa:7d:05:3f:42:9e:1c:36:e5:48: 4b:0a:00:49:87:1f:00:f3:3a:88:2c:cc:16:00:f4: 59:96:94:31:fb:ca:1e:55:23:c3:18:bd:24:9f:f9: c3:1d:75:49:e2:5e:8f:9f:95:56:ab:68:1b:c1:c9: 8f:35:4f:14:86:1a:1a:9d:e8:e1:a1:4b:77:7f:cc: 60:6e:b2:65:7b:08:8d:c8:c1:7c:a0:62:30:0b:02: 48:fb:50:7b:a8:e6:ea:cc:54:10:bf:8b:97:38:d8: 8f:cf:6d:03:ea:07:fa:e2:bd:19:95:15:d1:0e:af: 54:ca:c9:93:aa:d0:09:93:d8:81:ef:a8:20:ae:94: cc:c3:f1:49:60:87:dd:e3:c8:8a:98:80:57:78:57: ab:10:46:64:83:e5:1e:1c:43:1d:dc:7a:3e:5d:94: 27:e6:b4:a6:02:40:58:ed:0a:cf:65:3b:ad:55:9c: 34:13:9b:36:df:f1:ce:d4:d9:70:63:97:65:6e:02: af:18:fe:06:92:06:ff:f0:dd:9e:54:2a:d9:17:ad: 02:82:93:f2:e7:bb:85:8b:1c:c6:11:b4:ca:48:16: a5:6e:a8:d2:89:28:6d:a5:69:87:e9:9e:58:60:ea: 6a:e8:9f:47:9d:c7:c3:b9:10:d2:e3:71:41:0d:33: 0d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:9A:AF:2E:18:22:6F:77:4F:EE:D7:9B:C0:F9:F1:18:3F:89:72:22 X509v3 Authority Key Identifier: keyid:47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:0a:2e:57:52:fc:37:b6:8c:d5:43:81:e6:c2:73:a4:57:65: 02:87:d3:1e:de:cf:8e:02:41:aa:52:d2:6c:d7:3a:30:8e:e2: a4:97:b8:e6:87:23:a5:f1:eb:5f:73:e6:42:8e:f1:f9:e4:99: 24:fc:99:2d:83:61:52:e1:7f:71:41:82:71:be:41:e0:53:3c: 9d:6b:78:0c:2a:90:7b:63:e9:6e:9f:82:ac:e1:61:8e:17:0e: d1:c2:c1:f7:56:a6:6b:e5:19:6c:35:54:88:95:37:76:b2:64: e8:e5:e3:13:3c:ff:2b:d9:93:a2:67:4a:1d:42:94:c3:af:1e: e9:d8:05:30:74:5f:d4:76:03:c2:82:06:d3:ab:14:6b:b7:46: 87:85:ee:fc:99:7f:8e:e8:57:40:90:dd:d0:39:45:a8:b9:f5: 57:47:eb:90:d2:d7:12:c7:1c:b4:46:0a:84:23:63:2c:f5:64: 32:ad:05:70:93:32:68:26:25:e9:d4:4e:aa:1d:d6:c6:e3:66: 76:b9:14:35:48:2f:81:dd:2a:11:5c:68:bd:3a:c2:84:46:70: 8f:2e:e1:94:19:11:14:e2:dc:eb:17:35:9a:e4:07:33:c6:93: e9:66:9c:a7:07:9a:44:d5:6e:30:1b:db:c2:77:09:a7:3f:33: b1:64:b7:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY+GNaU19VtI46PLdgcwUz/MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NzZhZmI3NGZhZDViYWYwYTYxODBiNDk1MTBkOGI4NDk3 ZGY4ZDMwHhcNMjQwNTE3MTEwMDEzWhcNMjQwNTE4MTEwMDEzWjAzMTEwLwYDVQQD EyhkODlhYWYyZTE4MjI2Zjc3NGZlZWQ3OWJjMGY5ZjExODNmODk3MjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFYq3vp9BT9Cnhw25UhLCgBJhx8A 8zqILMwWAPRZlpQx+8oeVSPDGL0kn/nDHXVJ4l6Pn5VWq2gbwcmPNU8Uhhoanejh oUt3f8xgbrJlewiNyMF8oGIwCwJI+1B7qObqzFQQv4uXONiPz20D6gf64r0ZlRXR Dq9UysmTqtAJk9iB76ggrpTMw/FJYIfd48iKmIBXeFerEEZkg+UeHEMd3Ho+XZQn 5rSmAkBY7QrPZTutVZw0E5s23/HO1NlwY5dlbgKvGP4Gkgb/8N2eVCrZF60CgpPy 57uFixzGEbTKSBalbqjSiShtpWmH6Z5YYOpq6J9HncfDuRDS43FBDTMNvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNiary4YIm93T+7Xm8D58Rg/iXIiMB8GA1UdIwQY MBaAFEd2r7dPrVuvCmGAtJUQ2LhJffjTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mNzFjYzItYjcxZC00NjY4LTg2NjEt MDUzOGU5NWYzZjEyLzEvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9mNzFjYzItYjcxZC00NjY4LTg2NjEtMDUzOGU5NWYzZjEy LzEvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEAouV1L8 N7aM1UOB5sJzpFdlAofTHt7PjgJBqlLSbNc6MI7ipJe45ocjpfHrX3PmQo7x+eSZ JPyZLYNhUuF/cUGCcb5B4FM8nWt4DCqQe2Ppbp+CrOFhjhcO0cLB91ama+UZbDVU iJU3drJk6OXjEzz/K9mTomdKHUKUw68e6dgFMHRf1HYDwoIG06sUa7dGh4Xu/Jl/ juhXQJDd0DlFqLn1V0frkNLXEscctEYKhCNjLPVkMq0FcJMyaCYl6dROqh3WxuNm drkUNUgvgd0qEVxovTrChEZwjy7hlBkRFOLc6xc1muQHM8aT6WacpweaRNVuMBvb wncJpz8zsWS3FQ== -----END CERTIFICATE-----Generated at Fri May 17 18:21:43 2024 by rpki-client on console-ams.rpki-client.org