$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft File: tOgroXFdaurlsBAnJf_gyDRzXX0.mft (raw, json) Hash identifier: I+OAq3C98OxEtHso3FFz856SXXJ8qw5F4yHYzr7YHKE= Subject key identifier: 96:70:52:66:4B:82:6C:0E:2F:C4:2D:4E:7F:A3:93:29:DB:0B:74:00 Authority key identifier: B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D Certificate issuer: /CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d Certificate serial: 018F87498D254ADAAE3334DB454F7F148131 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft Manifest number: 0959 Signing time: Fri 17 May 2024 16:01:35 +0000 Manifest this update: Fri 17 May 2024 16:01:35 +0000 Manifest next update: Sat 18 May 2024 16:01:35 +0000 Files and hashes: 1: 00yRHX1knbp7uAfkdOc04d4p-I0.roa (hash: vrOEmVc3h1yS0yZlVy2D21dXG9+7FiCIEd+ocA/cxZ8=) 2: 1-aINTZuEA44GwMcS1Q_0wYddlx8.roa (hash: Ac8UfhqtE29CJhcHXyasd3mODnhCfqZfyGukFcQIIbg=) 3: 4juoXk6O8O5PwtBizl_d7pW1jW4.roa (hash: qHD3cqlCCQpl1/LxoyeT8YGOjJUytifeXw7xxnWH0+8=) 4: 5uc81bJnqYNuMerFwaG0jHTnCU8.roa (hash: 3PbIbKSqdmD/Ugk6iWL2Pp0tOLQUBl1qXnL+Ec0Log4=) 5: 5y0Gse_aiq1CFYHSpdd9xryk0dg.roa (hash: x9Aj2FpSydUZgjwkZb0/1DV6HzmtxfeI/Do22M+GWdA=) 6: BN0KYhm1Wyk8lvX-J3ZbaUnsKW4.roa (hash: m380wFZUCuGIkQSSfRorHcPew6oQUNEKavdz0EknKII=) 7: K9HE4jGHKBvlLBBQ4Y9VAQ8w7hI.roa (hash: 01KaQenRXeDZ19B+zemhlgL0rea4/zskIhaW0lWAlRY=) 8: LxcaHYo96dm5tq0a5JNbqt6I2L8.roa (hash: iSbN4Giyt6svc61dZVwtAB8TA363DOIUw51J1MeAOyI=) 9: mArrhtMFHu6uyjqxZX8Dp4AH-BE.roa (hash: zQziqnBRL7YR5leeCaVqrsGOG74ycsP677MRPyuRq70=) 10: rh5necTbUedteXDuc4Rqy01DR-A.roa (hash: XTITnuD2L01KaZwuGgG+t+Pp/F0nV71Vq1K7ks2ujFw=) 11: tOgroXFdaurlsBAnJf_gyDRzXX0.crl (hash: Bw9hYUXmTQqLOfDawfFNmQKFY3AaOzLDZcxMgRexzMc=) 12: yDyYv0Kc1rcKFpHpvT8mACBtk9I.roa (hash: ywZgMA7fkTLJulBk8Edp1KCYsjR9jBb4pKBuLjMab9M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 May 2024 16:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:87:49:8d:25:4a:da:ae:33:34:db:45:4f:7f:14:81:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d Validity Not Before: May 17 16:01:35 2024 GMT Not After : May 18 16:01:35 2024 GMT Subject: CN=967052664b826c0e2fc42d4e7fa39329db0b7400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:9c:a0:fc:21:6f:83:62:e9:f5:86:e8:f7:33: 28:f1:d3:70:e3:3c:b0:f6:0e:ff:85:4d:8c:7a:68: 4b:04:ef:df:76:40:b8:fd:7a:e3:7b:9e:e9:c2:4e: a8:af:d2:65:36:13:7c:7f:21:2b:98:7b:cf:b4:0c: d2:9c:1a:d3:75:01:20:39:51:3e:de:58:52:17:69: c8:a5:b2:1f:47:00:33:7a:61:65:d6:60:20:e8:74: 33:0e:28:32:fc:14:b0:85:60:be:f9:01:dc:db:8f: f7:4a:c1:29:a4:ea:75:34:43:a8:f5:cc:27:49:28: 73:25:99:dc:66:3f:b0:48:0f:dc:28:b0:75:b5:86: 25:54:7a:1b:41:ad:6d:08:cc:f6:25:51:2a:7b:8b: 7c:dc:39:7d:de:cc:46:6a:05:44:0f:b6:2d:80:f7: 90:95:1c:79:7f:6f:49:18:57:6f:e2:8c:59:85:90: 07:fd:d9:ff:5c:ee:f6:03:82:3a:a7:8d:3f:1b:e8: c0:3c:44:46:44:d0:d5:9f:d1:06:1b:21:bd:fd:40: 14:ba:79:21:9c:a9:b4:7f:5b:1e:1c:8f:81:d2:6f: d8:0a:fa:61:34:9a:96:fc:a5:60:25:4a:56:42:3f: ce:28:42:55:c1:a8:d8:a7:d4:93:40:08:71:ff:73: 7c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:70:52:66:4B:82:6C:0E:2F:C4:2D:4E:7F:A3:93:29:DB:0B:74:00 X509v3 Authority Key Identifier: keyid:B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:0a:b7:66:a1:b6:31:4d:c2:fb:7c:73:97:36:7c:eb:4d:4b: d4:8c:0a:15:95:a9:4f:15:3e:01:62:cd:74:c5:63:e8:2a:7d: 5b:4e:bf:74:86:b3:81:70:2e:d0:c2:ce:1d:8a:fe:2d:b3:af: a3:0a:c0:aa:99:78:dd:86:c5:e4:91:50:c3:74:00:81:7c:e0: a2:ca:be:ef:c2:7b:2a:58:39:2e:bd:16:07:3e:6e:15:85:6b: 75:20:8f:e4:18:44:84:83:03:94:a9:86:fb:57:b8:d8:b0:2b: a1:49:ad:06:cd:2f:16:92:f0:cf:bd:12:c3:3e:90:ed:f0:c2: 59:be:ff:4b:60:20:18:5d:f0:1b:c4:ce:1a:18:c2:f8:8e:5f: 86:3c:ff:bd:d8:27:9c:ec:3d:1c:3f:4a:05:25:82:74:a2:5d: 28:e4:41:30:23:ba:17:47:4b:77:2f:fa:d7:e7:d2:e8:10:6c: 60:c2:e4:aa:89:a3:ff:3c:43:8b:83:84:1c:13:ff:46:82:b1: cb:3e:f9:81:9f:cb:2e:f5:65:5e:f8:cb:eb:36:95:3d:83:3e: b0:f6:3f:1c:f0:bd:58:7a:6e:71:7e:b2:6e:d7:26:4f:07:37: b5:95:6a:3f:11:df:5a:7a:e8:c4:fe:70:20:58:a8:6c:df:33: c3:c2:3f:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY+HSY0lStquMzTbRU9/FIExMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZTgyYmExNzE1ZDZhZWFlNWIwMTAyNzI1ZmZlMGM4MzQ3 MzVkN2QwHhcNMjQwNTE3MTYwMTM1WhcNMjQwNTE4MTYwMTM1WjAzMTEwLwYDVQQD Eyg5NjcwNTI2NjRiODI2YzBlMmZjNDJkNGU3ZmEzOTMyOWRiMGI3NDAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJyg/CFvg2Lp9Ybo9zMo8dNw4zyw 9g7/hU2MemhLBO/fdkC4/Xrje57pwk6or9JlNhN8fyErmHvPtAzSnBrTdQEgOVE+ 3lhSF2nIpbIfRwAzemFl1mAg6HQzDigy/BSwhWC++QHc24/3SsEppOp1NEOo9cwn SShzJZncZj+wSA/cKLB1tYYlVHobQa1tCMz2JVEqe4t83Dl93sxGagVED7YtgPeQ lRx5f29JGFdv4oxZhZAH/dn/XO72A4I6p40/G+jAPERGRNDVn9EGGyG9/UAUunkh nKm0f1seHI+B0m/YCvphNJqW/KVgJUpWQj/OKEJVwajYp9STQAhx/3N80wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJZwUmZLgmwOL8QtTn+jkynbC3QAMB8GA1UdIwQY MBaAFLToK6FxXWrq5bAQJyX/4Mg0c119MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85MTUxYzAtMzMyNi00ODAxLTkzNjMt YzdkMTk5MzBkNjZkLzEvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy85MTUxYzAtMzMyNi00ODAxLTkzNjMtYzdkMTk5MzBkNjZk LzEvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjQq3ZqG2 MU3C+3xzlzZ8601L1IwKFZWpTxU+AWLNdMVj6Cp9W06/dIazgXAu0MLOHYr+LbOv owrAqpl43YbF5JFQw3QAgXzgosq+78J7Klg5Lr0WBz5uFYVrdSCP5BhEhIMDlKmG +1e42LAroUmtBs0vFpLwz70Swz6Q7fDCWb7/S2AgGF3wG8TOGhjC+I5fhjz/vdgn nOw9HD9KBSWCdKJdKORBMCO6F0dLdy/61+fS6BBsYMLkqomj/zxDi4OEHBP/RoKx yz75gZ/LLvVlXvjL6zaVPYM+sPY/HPC9WHpucX6ybtcmTwc3tZVqPxHfWnroxP5w IFiobN8zw8I/Qw== -----END CERTIFICATE-----Generated at Sat May 18 00:22:15 2024 by rpki-client on console-fra.rpki-client.org