$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft File: 9RNpzL-GsehOGutG5tM20591Kuc.mft (raw, json) Hash identifier: Bwfrf2Aof4t71vz9mqSY/Jb3Hj9NpFbdILXjLvHtzzo= Subject key identifier: A8:17:4E:F9:4E:06:28:89:A5:E0:BB:A2:52:8F:84:5A:EC:58:67:29 Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7 Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7 Certificate serial: 01906114146B708B43B81FAFCB5B7E9E34A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft Manifest number: 1209 Signing time: Fri 28 Jun 2024 23:00:24 +0000 Manifest this update: Fri 28 Jun 2024 23:00:24 +0000 Manifest next update: Sat 29 Jun 2024 23:00:24 +0000 Files and hashes: 1: 6hHT6xA63sYoiSJoEkctm0RU4Rk.roa (hash: vPhR2au3XkuFO4Ewk65Av3iQ/bDI67WueO4XPALuyGw=) 2: 9RNpzL-GsehOGutG5tM20591Kuc.crl (hash: 9jV2+z9lPcbv82GtI5XPvwENoQ378hFhm2SoCOYIAyY=) 3: FmEVIiQoojTAF9EIlaemyIUwHPc.roa (hash: z5m3BzPI7I9kDPltkGt3pOT25b6WohaIz+IkZyO815U=) 4: GLhZ6NglMLKV8Vb1uQ2DHXlxVRM.roa (hash: UoIipK/Vl5/w7W4kji9CNMt02vJLXpeYJxow61duv04=) 5: PQcYOcgDXmYOmGuMrmeHEJVZQlU.roa (hash: V82IU6W+yln5rn3Y7qK+xpraNcBr5hqFrnq9lcocg10=) 6: VXZRyc4NkTlQ59tVDUbmN9uewes.roa (hash: C0EWbtfYJzMawxiDtGMQBDGClxlOkcg5WnHQC03TFwg=) 7: WlmDyOoDh1Q3LH4W_6JuiuRSm-Q.roa (hash: J4VKduIU1BCoF2J33ci08A7VldBfLyGGY5kmIaN4/Uk=) 8: dZEStgzfbiMQEeXZVf02POx1HqI.roa (hash: Pd/nOKPJeETbcKvNVg1KmppA1Nbt6TJqWH9KbLZGOfk=) 9: duhHz9Rgkl7YKY-gPEp6byVw4GY.roa (hash: MZe8raxEstgLGos+foBdNyQ44X2wRRNUrWN9pP1/YOI=) 10: f0MhiJq0tWVRNE4P9AykxzWjENY.roa (hash: YFTBrUuFEAPBazzD4yNseBHgf/rzsircPbPo5lnzCJI=) 11: toqeTCSSbmNMuvO5dQMo_7uvUB0.roa (hash: X0/SSRvnmpuX5Jj+CYSZDK57zz5JbnlRnsfG9vAoblk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 29 Jun 2024 17:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:90:61:14:14:6b:70:8b:43:b8:1f:af:cb:5b:7e:9e:34:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7 Validity Not Before: Jun 28 23:00:24 2024 GMT Not After : Jun 29 23:00:24 2024 GMT Subject: CN=a8174ef94e062889a5e0bba2528f845aec586729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:39:25:94:09:05:fd:dd:d2:fd:6f:b5:55:6d: 11:bb:67:05:5d:d9:c0:98:cb:98:6a:03:b5:96:3b: 31:b9:bd:a9:6e:ca:5f:1a:8b:44:c2:4c:1b:a0:36: c3:54:41:98:15:74:21:99:72:15:b7:c7:37:54:64: 34:9f:1b:3e:b1:cb:e4:71:f6:eb:f8:64:4e:58:c8: bb:19:0b:07:d5:5e:ae:26:d7:25:86:48:dc:13:93: b4:0d:aa:03:47:71:8f:07:65:17:21:ca:b0:02:f7: ff:3e:aa:53:3e:6d:1b:83:ed:23:f6:ce:23:7b:4f: f3:60:ac:00:3f:d0:cd:09:56:c6:02:5e:30:be:f0: 0f:53:89:28:ce:0c:47:08:49:b8:01:26:99:f6:01: 0f:c5:d3:4d:38:18:c0:1d:96:12:78:7a:7d:21:3e: 0a:b7:da:07:ee:d4:6b:35:ab:73:00:61:1e:f5:5f: 7a:6d:90:74:63:c3:45:ff:bf:55:4d:16:18:c3:d1: 70:dc:0c:77:cc:99:df:70:f7:e5:00:3e:cf:f2:0d: 8a:8a:c9:6d:69:b5:6b:64:40:da:70:9d:1b:7f:d6: 78:77:9a:90:26:99:98:1b:d7:40:a5:8a:8b:2d:1c: f3:23:d0:3f:2a:6b:f2:99:99:29:93:10:b3:9d:b9: 17:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:17:4E:F9:4E:06:28:89:A5:E0:BB:A2:52:8F:84:5A:EC:58:67:29 X509v3 Authority Key Identifier: keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:c5:20:0a:dc:66:68:42:9d:48:3b:fd:b4:22:2d:e7:fe:e7: f1:49:5d:2c:ed:57:c2:93:70:7f:1a:37:55:7e:91:9c:80:c5: e3:ec:60:38:c3:c7:b3:72:02:0f:38:bc:93:f8:94:a4:ad:84: 26:44:60:4d:4d:a3:ca:fa:d8:fe:87:ee:01:77:28:27:df:28: b4:fa:5d:76:cd:df:be:8d:8d:fa:9b:17:f4:77:08:ff:83:1c: c3:fd:b5:ca:39:2f:23:7d:58:01:50:ca:08:7d:c2:ac:17:fc: b3:6a:2e:2a:a5:58:95:c7:c5:29:fb:e8:31:5c:06:ee:20:93: 20:6c:5a:f6:2e:0d:9c:09:6e:42:00:aa:31:25:25:07:cc:2a: 73:0f:c0:b0:b4:ef:09:dd:19:34:61:ee:64:26:29:94:7a:15: d1:7f:c8:24:42:7f:f0:f1:82:43:c4:4b:e0:fb:b2:09:de:12: ae:f0:b9:c4:d1:20:fa:11:62:4b:49:1e:12:b3:06:a9:0c:bc: 6c:05:a6:45:0f:33:ee:7c:08:e5:02:bb:11:11:fe:0b:a6:1c: ba:6c:0a:2f:35:ba:f6:2c:a0:49:95:a8:c7:f5:b0:ab:b0:16: b8:f2:f5:9c:89:ae:d7:bf:28:df:09:ef:40:6c:8a:61:5b:7f: 5f:45:23:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZBhFBRrcItDuB+vy1t+njShMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1MTM2OWNjYmY4NmIxZTg0ZTFhZWI0NmU2ZDMzNmQzOWY3 NTJhZTcwHhcNMjQwNjI4MjMwMDI0WhcNMjQwNjI5MjMwMDI0WjAzMTEwLwYDVQQD EyhhODE3NGVmOTRlMDYyODg5YTVlMGJiYTI1MjhmODQ1YWVjNTg2NzI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDkllAkF/d3S/W+1VW0Ru2cFXdnA mMuYagO1ljsxub2pbspfGotEwkwboDbDVEGYFXQhmXIVt8c3VGQ0nxs+scvkcfbr +GROWMi7GQsH1V6uJtclhkjcE5O0DaoDR3GPB2UXIcqwAvf/PqpTPm0bg+0j9s4j e0/zYKwAP9DNCVbGAl4wvvAPU4kozgxHCEm4ASaZ9gEPxdNNOBjAHZYSeHp9IT4K t9oH7tRrNatzAGEe9V96bZB0Y8NF/79VTRYYw9Fw3Ax3zJnfcPflAD7P8g2Kislt abVrZEDacJ0bf9Z4d5qQJpmYG9dApYqLLRzzI9A/KmvymZkpkxCznbkXVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKgXTvlOBiiJpeC7olKPhFrsWGcpMB8GA1UdIwQY MBaAFPUTacy/hrHoThrrRubTNtOfdSrnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8yZDViZGYtNTI2NS00OWI4LThhZmUt MmI5MjBiZGUzOTkwLzEvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8yZDViZGYtNTI2NS00OWI4LThhZmUtMmI5MjBiZGUzOTkw LzEvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl8UgCtxm aEKdSDv9tCIt5/7n8UldLO1XwpNwfxo3VX6RnIDF4+xgOMPHs3ICDzi8k/iUpK2E JkRgTU2jyvrY/ofuAXcoJ98otPpdds3fvo2N+psX9HcI/4Mcw/21yjkvI31YAVDK CH3CrBf8s2ouKqVYlcfFKfvoMVwG7iCTIGxa9i4NnAluQgCqMSUlB8wqcw/AsLTv Cd0ZNGHuZCYplHoV0X/IJEJ/8PGCQ8RL4PuyCd4SrvC5xNEg+hFiS0keErMGqQy8 bAWmRQ8z7nwI5QK7ERH+C6YcumwKLzW69iygSZWox/Wwq7AWuPL1nImu178o3wnv QGyKYVt/X0UjDA== -----END CERTIFICATE-----Generated at Sat Jun 29 01:28:53 2024 by rpki-client on console-fra.rpki-client.org