$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft File: DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft (raw, json) Hash identifier: w+qhszBKLFZWqOT2Tl0zP7mA9P16gDVsSgKaYyHbwW0= Subject key identifier: 20:58:E6:0C:DB:89:65:CC:61:4A:D1:B6:CD:33:7B:C0:72:2D:CE:60 Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 Certificate issuer: /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Certificate serial: 018F4E6C44C8193CB4C839F17A0B4CB88A07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft Manifest number: 0B22 Signing time: Mon 06 May 2024 15:01:09 +0000 Manifest this update: Mon 06 May 2024 15:01:09 +0000 Manifest next update: Tue 07 May 2024 15:01:09 +0000 Files and hashes: 1: 0AOj-EjsyvEXu1WvL2PT1O97D8Q.roa (hash: wENEWKHy8Bc1NXEJIiWw5rzRYbw2yYc96D9nrQHNHXc=) 2: 1aGY_pLegLq_PpVOIxMUzW61L_Y.roa (hash: AnVrlIkHv8z1gKd/1/MOiDEHuk1viVh9XlnvHYccoPA=) 3: CkCnri3lSaXXbadmcG-6wRv2-PE.roa (hash: 7JGNKfdPWixf3M5Eqp3bIEevZSNbKaqlgUUW3mjVW/E=) 4: DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl (hash: Wu24q8XPu7SR+DMEt4RGwI43dXXd0Ch33k9foetefZo=) 5: MEIlS7IwiLZFZAjDbUEW9wVxJWQ.roa (hash: kPmoUN/wsSxhThYCYRNvT0+6Lnaebye7g5WdMN4Zri0=) 6: OC4Uwb6Q5kJno2ZoIyHvySKw6nE.roa (hash: Fhzek0bV1WEoR+uZe5kkOvhCOnecsM7zDF1ScprjRNs=) 7: QVlAR2tdgoy_yJa7PElguHJ6cXg.roa (hash: 0zLRVeqNGgmTE3LbohQH2ivPkajASvcKXUKDVSU2Gso=) 8: UPuF44uwp8xzxjpGUnJekTkVfG8.roa (hash: KESiHCr36biLbzgi+T0mJUhNFyZ2s4cVoe9zn31UZvs=) 9: VF6Jziy3wdWbFQzMRY0s9ZfwNSc.roa (hash: b/GzxNuKl49U972kD2+4KcSATymA7bCHOsT4EmYgaz0=) 10: Wx0n_P_6F5MSg1KVySM5tJqWkSg.roa (hash: sbGIguG5dPvziuiTSZQdtg7/KXVpeak3iQuqTG+/62w=) 11: aYp75pnYs8GSvqvM3CZHh1nGddM.roa (hash: uOlsQay3tEzmki5yU4i5hLL3iIw/bMtz3EL9DjNQ5Gk=) 12: hnvpUHX0WPufsHJX4IVh7FOCWaI.roa (hash: QdlBY0zLv5+Q1rrZVDEqQo8xNagHRpl1vDKuGGJEIcI=) 13: j1WCIBJO1RjmpKwmKVIYvLFf0fE.roa (hash: D7iLWrDrTIkaE96d65M7MgpC+OCMNHuJaNzDDtslgPg=) 14: nK_B3-FLV0bP6Y2hENMckP7xj_k.roa (hash: OPJNeVIECo28SF1LJdHL7pOK5lICwA3/BF27LCREoJo=) 15: shW2GRmq7hMCAnltrGT4bLUdG5s.roa (hash: /ZmsVWib7zEtDIkO18PQG8C0v7cm8FxZcl6weu+9PqI=) 16: yyPioYPL202O23xyB-0T1_JS4dQ.roa (hash: 2kwxqqGezXrPpfgYIo9wQ4mMsT6KHpVXboYluUw8b4o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 07 May 2024 11:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:4e:6c:44:c8:19:3c:b4:c8:39:f1:7a:0b:4c:b8:8a:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Validity Not Before: May 6 15:01:09 2024 GMT Not After : May 7 15:01:09 2024 GMT Subject: CN=2058e60cdb8965cc614ad1b6cd337bc0722dce60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c1:c1:37:f4:ea:25:4f:ef:d6:4e:12:78:4b: 11:e9:28:ef:a1:6d:f9:f4:44:f7:17:91:b5:45:6a: d9:2c:b6:99:15:c8:dc:09:8c:96:5b:77:ae:be:00: 04:f7:0e:be:7b:92:c4:99:67:eb:08:7b:d4:aa:14: 4b:3f:11:9d:3f:88:f6:8b:0a:df:a3:8f:82:23:46: e6:f6:71:7c:af:c3:78:02:07:c0:df:64:0f:05:f2: 43:cf:40:58:00:b8:25:26:37:8c:28:aa:3b:ad:dd: 54:50:3f:c9:62:9b:96:5f:9a:59:46:e1:f5:68:45: 97:ec:0a:e6:af:65:97:35:2a:7b:4d:cc:4e:41:df: 4e:37:16:d5:43:5a:71:4e:66:a0:f2:87:eb:64:07: cb:48:68:4e:f4:91:00:0d:92:4e:4b:3c:53:b0:3e: 20:e3:5f:4f:e0:f7:9f:79:5a:19:d7:9a:a9:1c:08: fe:f4:25:e0:c9:ac:9b:a3:91:0b:5d:5d:ba:e3:c4: 89:18:3f:d5:6c:ee:b9:f5:eb:73:e9:6a:14:55:a0: 8b:c2:6e:c6:f9:29:f3:f0:9d:a7:2f:40:87:17:f7: 0e:f7:c9:1a:56:a5:bf:81:5a:04:10:87:19:23:a2: 18:85:b7:19:47:fc:bd:86:2f:e1:6d:a7:60:c2:86: 6c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:58:E6:0C:DB:89:65:CC:61:4A:D1:B6:CD:33:7B:C0:72:2D:CE:60 X509v3 Authority Key Identifier: keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:2f:2b:15:b1:b3:2a:f1:51:4e:b8:93:2c:b0:7d:de:43:02: e6:6a:c2:c9:e1:77:48:49:f5:c6:32:dd:f8:17:89:df:e5:88: 72:59:dc:71:16:c7:b8:c9:a2:58:e6:89:c9:5c:f9:56:1e:b4: 17:d1:ff:2f:23:f0:28:f0:11:4b:48:68:15:d3:9e:3f:da:c0: 1d:cf:e3:77:ea:f0:de:3f:a0:86:5e:aa:12:36:b4:20:05:d9: 14:bf:24:3f:a2:95:85:b2:52:60:7b:86:c5:9d:6a:9d:4c:1a: 95:9a:97:6c:f7:01:0c:a8:de:17:96:39:26:ff:2e:46:41:58: 43:f4:4d:e8:55:16:3e:c3:9a:64:a9:b9:95:76:0d:5b:ef:35: 75:be:cf:7f:7d:57:7a:f9:48:2d:00:fa:f3:bc:0e:9e:03:a6: ff:fe:b2:09:b3:14:bb:07:1e:f3:0f:32:26:14:e9:89:e6:47: ed:91:ad:c3:5e:6a:4b:35:ce:3d:97:a5:da:05:c2:22:8c:46: 4b:df:df:ef:cd:9a:f2:e3:dd:a3:06:28:44:17:ce:ff:83:e2: 43:0a:4f:71:1b:1b:99:24:c5:f1:99:56:5d:bb:cc:15:63:6f: 5a:18:47:75:ca:57:20:88:b4:fe:d3:ce:48:d6:cc:11:77:ed: 9e:dd:7d:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY9ObETIGTy0yDnxegtMuIoHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkYjY3YzVjN2ZhN2ZlMjQ5MmVlYzM3Y2Y0Mjc2NDJiNzFk NDI1YjAwHhcNMjQwNTA2MTUwMTA5WhcNMjQwNTA3MTUwMTA5WjAzMTEwLwYDVQQD EygyMDU4ZTYwY2RiODk2NWNjNjE0YWQxYjZjZDMzN2JjMDcyMmRjZTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cHBN/TqJU/v1k4SeEsR6SjvoW35 9ET3F5G1RWrZLLaZFcjcCYyWW3euvgAE9w6+e5LEmWfrCHvUqhRLPxGdP4j2iwrf o4+CI0bm9nF8r8N4AgfA32QPBfJDz0BYALglJjeMKKo7rd1UUD/JYpuWX5pZRuH1 aEWX7Armr2WXNSp7TcxOQd9ONxbVQ1pxTmag8ofrZAfLSGhO9JEADZJOSzxTsD4g 419P4PefeVoZ15qpHAj+9CXgyaybo5ELXV2648SJGD/VbO659etz6WoUVaCLwm7G +Snz8J2nL0CHF/cO98kaVqW/gVoEEIcZI6IYhbcZR/y9hi/hbadgwoZsNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCBY5gzbiWXMYUrRts0ze8ByLc5gMB8GA1UdIwQY MBaAFA22fFx/p/4kku7DfPQnZCtx1CWwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjkt YjAzZGY5OTZlNDgxLzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjktYjAzZGY5OTZlNDgx LzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACy8rFbGz KvFRTriTLLB93kMC5mrCyeF3SEn1xjLd+BeJ3+WIclnccRbHuMmiWOaJyVz5Vh60 F9H/LyPwKPARS0hoFdOeP9rAHc/jd+rw3j+ghl6qEja0IAXZFL8kP6KVhbJSYHuG xZ1qnUwalZqXbPcBDKjeF5Y5Jv8uRkFYQ/RN6FUWPsOaZKm5lXYNW+81db7Pf31X evlILQD687wOngOm//6yCbMUuwce8w8yJhTpieZH7ZGtw15qSzXOPZel2gXCIoxG S9/f782a8uPdowYoRBfO/4PiQwpPcRsbmSTF8ZlWXbvMFWNvWhhHdcpXIIi0/tPO SNbMEXftnt197w== -----END CERTIFICATE-----Generated at Mon May 6 18:39:00 2024 by rpki-client on console-ams.rpki-client.org