$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft File: 8DBljxbS2I00FkWS_NTeExMfFpU.mft (raw, json) Hash identifier: OHvTuCpeo5poh5r+eG8ycMp9JF9E0mc12rfG2VPGszI= Subject key identifier: 86:9A:96:42:57:F9:ED:9D:94:36:5E:10:B2:79:D8:00:3F:85:C0:61 Authority key identifier: F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95 Certificate issuer: /CN=f030658f16d2d88d34164592fcd4de13131f1695 Certificate serial: 018FC05CFB6320A42622D49664FD9FBD9E23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft Manifest number: 0758 Signing time: Tue 28 May 2024 18:01:09 +0000 Manifest this update: Tue 28 May 2024 18:01:09 +0000 Manifest next update: Wed 29 May 2024 18:01:09 +0000 Files and hashes: 1: 1-eoVG1JgiqIAFUIVKA2wulWAQ34.roa (hash: iY/Sxl972lW+LQka/74IZQ5gqnevAgDIpxffKYqiVY8=) 2: 52FCKBkbjH72m_shxb3j4Rv7fPY.roa (hash: JnCnLnTsA0/BtvlJS4q0yXyRoyZsayNibb0C8yARvEA=) 3: 8DBljxbS2I00FkWS_NTeExMfFpU.crl (hash: W93syzed4TXr4HjjV0R6C3G4/NBDxiIXBXh5tk9TtCY=) 4: 98izQ2es-1G34C9AJK417Go3WOg.roa (hash: xO5w9aIxMW0ot3+UMIf2IvrjV1+2oBEZZ/fsxA76ufI=) 5: GNhoTLricbZlnGJZklHdjqbLD5U.roa (hash: 1CcFdcfXRaGXa3Y7DGwZ6lpQ1SVZLMsmv5yIPavq2bg=) 6: KLw7GEcHnJw04IejupOmku8Ionw.roa (hash: JeaFutcfFciGcdA5U+OmxEUDfwc5mpQN0nZp5vuHIlY=) 7: L48DomMqUNHOfF5KusUrgKNg-7k.roa (hash: fdTI+B8JXz5ZcFDuQ34NvzcvGSyyenZ21Hx94/6HZIE=) 8: WeKadrUA1dZDa4eu2SJNZ_C2VeE.roa (hash: 2oGYb99mwJBfcG3zhMzzLJuDlCpHxbEv/dL2Qew3fsc=) 9: al50n4VedPswUwVZlNsFfmqRBiY.roa (hash: +jDgiaVLpDAueCHpu0Pv2tT9HQMF7ghBMRiVlfje8h0=) 10: gNt6JUnthqqa6lSoplobpd0cTlI.roa (hash: bVqW1L5gwcevFgXYZJQ4xnOvubSUV42f2VMusEQ4IMw=) 11: xNi0pb-qETK1nFsJb8O1S0sF9Jw.roa (hash: KFC68WALx5BWqi9v9BUqJS09FLBVGR/iJgoy6P7aysQ=) 12: zMj8Rh12UcgvQOBX19U4056FXnY.roa (hash: rLgXHQXZ+O4EHjnPYqf3dP3E/oJ2QkabjRtXamBW8Kg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 May 2024 14:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:c0:5c:fb:63:20:a4:26:22:d4:96:64:fd:9f:bd:9e:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f030658f16d2d88d34164592fcd4de13131f1695 Validity Not Before: May 28 18:01:09 2024 GMT Not After : May 29 18:01:09 2024 GMT Subject: CN=869a964257f9ed9d94365e10b279d8003f85c061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:7c:69:ff:61:ce:c6:c5:45:58:a3:b3:90:39: 46:f4:ff:fd:86:ef:54:8f:b5:c6:ef:f6:71:e1:07: aa:b6:9f:ab:91:3c:63:47:1d:fa:0b:d0:07:bf:45: 96:b3:72:5a:fc:6b:f5:c0:2a:60:67:5a:58:75:f0: 1a:af:15:f1:0f:f4:b8:a1:f6:55:db:36:1b:d9:9c: 79:49:5f:4f:03:95:c5:8c:5e:ad:e3:9b:40:ff:ef: e6:00:57:12:54:30:18:96:da:e3:b7:4d:95:31:c1: c9:32:a3:ee:10:9e:60:68:60:06:3a:d1:26:0b:5b: cc:0b:6a:16:7c:f8:2a:19:9f:82:c7:c0:34:3d:01: 18:7a:53:d5:13:1a:bb:0f:ac:fb:c1:2c:f9:51:f2: 87:ec:df:fc:32:e6:ea:fe:f5:2b:14:9d:0f:cb:2e: b8:f4:ec:4d:8f:b4:07:c9:e3:12:45:90:29:ce:e0: 68:a2:95:7d:7b:02:8c:ed:b6:f8:69:e6:14:45:00: ab:b3:c6:ad:52:24:04:ec:84:c8:4c:ab:08:a5:64: d1:9d:cd:89:b4:2f:73:fb:e2:a7:00:2c:b9:19:aa: 65:93:cd:47:e1:db:00:94:f0:ec:c0:27:b9:40:6c: f5:a2:97:cf:9f:82:49:07:4f:58:7d:89:71:3f:53: 99:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:9A:96:42:57:F9:ED:9D:94:36:5E:10:B2:79:D8:00:3F:85:C0:61 X509v3 Authority Key Identifier: keyid:F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:1f:48:1a:fd:9a:ce:6e:88:19:f7:50:b4:e4:ac:09:6e:7e: 58:c7:ad:0f:e0:cb:32:73:19:f9:69:c3:45:d6:a7:e3:74:bd: fa:c5:22:e6:b1:1e:b3:4c:3f:f7:95:7d:1f:b4:67:16:97:e9: 94:5d:bc:f5:fc:bd:c2:ec:02:45:11:ea:a8:65:71:22:88:62: da:8e:90:97:13:95:24:3a:7c:b7:d1:e9:a5:82:d5:38:f2:fa: 5e:ee:68:1f:99:4e:04:51:e9:86:c2:a0:ab:35:3d:7a:d1:67: 89:7f:7a:24:33:64:b2:97:93:6e:18:ee:fb:7f:fc:16:8e:30: 63:db:cb:14:e5:da:b9:7c:97:74:8e:7f:07:23:ec:b6:68:d3: db:9e:eb:63:01:27:7e:67:85:c7:b7:87:17:bd:de:c3:01:0b: 84:e5:c9:bf:7d:53:d0:21:c1:86:b8:d0:8c:52:30:7b:bb:99: dd:43:08:5e:b2:31:ff:2c:8e:73:6d:3d:0d:c3:41:86:f0:4c: 93:f6:34:63:ff:77:0b:51:75:3a:b9:80:08:0f:01:33:0c:3d: 34:6c:34:07:fb:ab:d6:39:01:91:c4:97:07:a6:57:f8:50:8f: a1:a2:b2:df:2b:10:73:10:90:0b:c9:5b:4a:ae:9d:48:25:70: 1a:e9:cd:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY/AXPtjIKQmItSWZP2fvZ4jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwMzA2NThmMTZkMmQ4OGQzNDE2NDU5MmZjZDRkZTEzMTMx ZjE2OTUwHhcNMjQwNTI4MTgwMTA5WhcNMjQwNTI5MTgwMTA5WjAzMTEwLwYDVQQD Eyg4NjlhOTY0MjU3ZjllZDlkOTQzNjVlMTBiMjc5ZDgwMDNmODVjMDYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nxp/2HOxsVFWKOzkDlG9P/9hu9U j7XG7/Zx4Qeqtp+rkTxjRx36C9AHv0WWs3Ja/Gv1wCpgZ1pYdfAarxXxD/S4ofZV 2zYb2Zx5SV9PA5XFjF6t45tA/+/mAFcSVDAYltrjt02VMcHJMqPuEJ5gaGAGOtEm C1vMC2oWfPgqGZ+Cx8A0PQEYelPVExq7D6z7wSz5UfKH7N/8Mubq/vUrFJ0Pyy64 9OxNj7QHyeMSRZApzuBoopV9ewKM7bb4aeYURQCrs8atUiQE7ITITKsIpWTRnc2J tC9z++KnACy5Gaplk81H4dsAlPDswCe5QGz1opfPn4JJB09YfYlxP1OZJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIaalkJX+e2dlDZeELJ52AA/hcBhMB8GA1UdIwQY MBaAFPAwZY8W0tiNNBZFkvzU3hMTHxaVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOERCbGp4YlMySTAwRmtXU19OVGVFeE1mRnBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi82NjkzZTMtODljYS00NGExLWE4YjYt ODk0ODA1Mjg5Y2MwLzEvOERCbGp4YlMySTAwRmtXU19OVGVFeE1mRnBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi82NjkzZTMtODljYS00NGExLWE4YjYtODk0ODA1Mjg5Y2Mw LzEvOERCbGp4YlMySTAwRmtXU19OVGVFeE1mRnBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAax9IGv2a zm6IGfdQtOSsCW5+WMetD+DLMnMZ+WnDRdan43S9+sUi5rEes0w/95V9H7RnFpfp lF289fy9wuwCRRHqqGVxIohi2o6QlxOVJDp8t9HppYLVOPL6Xu5oH5lOBFHphsKg qzU9etFniX96JDNkspeTbhju+3/8Fo4wY9vLFOXauXyXdI5/ByPstmjT257rYwEn fmeFx7eHF73ewwELhOXJv31T0CHBhrjQjFIwe7uZ3UMIXrIx/yyOc209DcNBhvBM k/Y0Y/93C1F1OrmACA8BMww9NGw0B/ur1jkBkcSXB6ZX+FCPoaKy3ysQcxCQC8lb Sq6dSCVwGunNtw== -----END CERTIFICATE-----Generated at Wed May 29 00:18:01 2024 by rpki-client on console-ams.rpki-client.org