$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft File: 3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft (raw, json) Hash identifier: W/I3AQocQVyC+E3CHG7nbqiDDaM4jffTWnlLEWvxRKM= Subject key identifier: 8F:40:48:9D:29:4A:A5:49:CB:76:D4:69:4B:58:46:44:8C:A9:00:90 Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89 Certificate issuer: /CN=dcef58d4cfa35543f8488a2756e6924e647b4589 Certificate serial: 018F4B342A44DFE78D9A3A2FBE2DD13133E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft Manifest number: 10C6 Signing time: Mon 06 May 2024 00:01:00 +0000 Manifest this update: Mon 06 May 2024 00:01:00 +0000 Manifest next update: Tue 07 May 2024 00:01:00 +0000 Files and hashes: 1: 1-exKtRbbKLh9NGtBizbU6Qs91nY.roa (hash: lpGUGnwnf3JuDnYve72WAVx+p0Jo5z0gOwnEBvUU/as=) 2: 3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl (hash: vVZjKXr9U//BaKI7AZaGjojcBOaNaPcGY+lNAeCmaIw=) 3: 4rJs4liSligk4htLUPChvwGnHfg.roa (hash: 7OtAUFDZorntUBWkWww6j0LJFLBFLaPAZNBrcOy7XnI=) 4: 6u6RLy_5PqEmcfjyrMHqhyJMEGA.roa (hash: exsWcdwGamrDnKH5ao2Y8Nsq4yGhf95bx0Moy1eIW6s=) 5: B8XNd75SwcAXU7MwOR8hDEGoo4w.roa (hash: qOivhZQLosqYBqxnN+1fp5afWYko45j7LbvWPk4BinM=) 6: Ef_4OzhB1QnH2BA6C-mxdkXeH3M.roa (hash: TB3VjbZpIJsuv9FhIX1yeBGVeGKFcfJ5Vxzsd1abI3A=) 7: EnkUpKrN79gl4l8kn3MzKuW5R5E.roa (hash: rgYfyBDjI2oBr/0jQbkr4epb/lAql6S3UKir52D0Iv0=) 8: GzY_tqZQyZA7O-iVYWBPt4-AvO4.roa (hash: Oi6NcZWhtde2pSviJOSgpORMSptYX6avLAFarENKIck=) 9: HTz5MOXaqymgmpqqeTqQcbF5xj0.roa (hash: Bp0kp01lbjy420UH0Oxy+m9+Wc3dYjKjHIW7RKUAjk4=) 10: I2uF5C-7hWT7y3naeNRoK4lfSZk.roa (hash: P2kb7aG2o8w/e4vKcSw9Nx8Tnto1z1ETB1aTnE8yQPA=) 11: JOLykskWxbMXIR7z8ciGpDjkIJQ.roa (hash: C5wqwywL5MveLyH7kQz1JW+lzfUPbdfmHa/3ac96BAE=) 12: KLBs_kVcHuwf9ZBz9PnFQsUNnTo.roa (hash: 6Ao+Ll64ziXh8yXNr11ghqJC3+hOLxIBU5uHnxGV1bA=) 13: LeLpc6dgtZHGeNO0yqAt0uj6fTI.roa (hash: b7rtoZDgwrWnHrFrTCaqrpeLOk5J8VXu02VgBrCWYEQ=) 14: PUWLKLpI6CS2Iw1pI-xhCQLH8dE.roa (hash: /foqgpDSPzPM2Wwk/Uv4jU7kI/LT0huOqCbZtReSxNE=) 15: R1L4RtgPRkaw1v1KJCuXp-AiBNo.roa (hash: nGOHWhbdXLHaJlQDHhswqiqh6P+Ha6dOei1hwUnK0rI=) 16: Sg6p5jxDucyiytdA_BHqhYP26RE.roa (hash: 1CDCKk++UOusosn8rB1u0l+vBhsIumTsE9XqilKvR/c=) 17: UeQOZVLrd6vHXtOWm2LoGJtiGqQ.roa (hash: rycqQdVy6me64GFb0iJRFxTQ5B4G71VLP5RP6AmHVJg=) 18: V1IHpErbztKUndLcBCon-fv-6nc.roa (hash: zy9T5ejXitS6HaQU41xje/kG6hFQ/BfPX2Hwbojd9tM=) 19: bSXXByjX4ABueVmz7_oe4wGlUnc.roa (hash: iwswvOATIevzG17rXtU8Co41yyT6Qu3yisOHfrsjYgI=) 20: fEQuMvgPPuDdrWFgBDXN0z2uT6A.roa (hash: 3CuMLmkwpXx0znmuC/lyJxr7E9Rj6NeTrbBAI1+lj40=) 21: hUerxVxPM-NZ-z12wu9AU-VSS_A.roa (hash: 2YAiuAdoex60BIiou9EAjZwAl4AzCmOUbnRsX9H+uGM=) 22: hwyASXpaMFYiNjgADt25bvnjQus.roa (hash: kTHisCsATnwUnAhW51j6JitWa/bfiANnQlHlOA3PJIY=) 23: jIv-sXNCDkuBlXy7FHmcCYNpARQ.roa (hash: 32v2gdg05ualub/MOuveYgfa8/6L1Zlo30w94Wz1vKs=) 24: kLapSaCszHTkHjj-5D35BnwdX3U.roa (hash: aum+w/zWFNqnp2yXDmIDbNJpry2kTCqoMURv44gS960=) 25: sIkJe_8TMuPMuiOttGUdpscpeCs.roa (hash: Os3pSB+5gg5sARYmKQ+RwIarATdPMccmB4lOB2kBzmc=) 26: sU35PHBn_2cVSSYPcFpp_LjFi84.roa (hash: r0vwyPC9BULhHpKPcIU4JoMjMWc6rMdWHZuL5fFBp4M=) 27: u-vKMruTDNsUxVFWOoTlyHR4P_s.roa (hash: 9rZkb/JMRMrIPqK7MoFjr3XsdonFG+n9BC+dOZGn1eM=) 28: xDCukfRi9itiHCw-2QNikYDvd8A.roa (hash: +smY2YcoWxf0JA5G5YeReu4zZNG58HkKBlXDf9HM660=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 07 May 2024 00:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:4b:34:2a:44:df:e7:8d:9a:3a:2f:be:2d:d1:31:33:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589 Validity Not Before: May 6 00:01:00 2024 GMT Not After : May 7 00:01:00 2024 GMT Subject: CN=8f40489d294aa549cb76d4694b5846448ca90090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7b:b0:c3:0f:1a:ac:7e:4a:b5:a4:7a:6a:f6: 7a:0a:ad:56:c6:9b:06:71:91:52:41:95:66:1d:5e: 7b:5b:ca:d6:61:bf:69:8d:63:63:8a:82:d9:ee:42: 5a:08:e0:b1:09:99:d2:a8:32:c1:8e:0e:02:8b:38: b5:e8:7a:43:10:b4:cb:fb:18:67:74:be:0d:e9:66: 52:29:ba:6d:f2:61:0c:02:42:a1:98:9f:84:56:f1: 71:58:7d:49:de:04:b9:9c:cd:6b:f9:04:9f:19:01: 4d:8e:31:80:93:d6:01:72:16:3c:ac:2f:e3:b2:7a: 23:80:37:57:f5:25:b1:af:f1:9b:18:fb:67:31:2a: c7:ff:38:99:50:1c:73:fb:1e:e6:c7:c6:60:04:28: cf:ac:29:71:ed:9a:39:76:df:29:c0:14:99:f9:b8: af:6a:82:4b:d4:c4:ad:ef:d8:71:b4:65:b9:89:37: 41:1e:9d:11:ec:78:25:10:a5:3c:22:13:3e:e0:18: ad:c0:8e:79:a8:4c:31:97:61:6b:a5:28:bd:e1:ec: 4a:33:d3:97:dc:0f:bb:b6:44:41:44:26:03:35:6b: 48:c1:9b:fa:5a:1f:4c:e4:22:fd:3b:e5:ba:ca:8d: 60:7f:33:c1:50:8d:88:8b:bc:8b:85:06:2f:dd:9f: 56:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:40:48:9D:29:4A:A5:49:CB:76:D4:69:4B:58:46:44:8C:A9:00:90 X509v3 Authority Key Identifier: keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:b6:b5:c6:c6:24:ec:aa:4b:0c:60:34:5c:43:bb:4d:59:b5: 73:3b:3c:d6:a5:cb:f8:d6:f6:be:30:8b:65:a2:87:ee:5d:59: 28:66:a7:45:d9:26:8d:59:40:43:1c:dd:3a:e4:3d:fb:79:8a: d3:90:b3:e6:7c:8e:32:eb:54:92:92:c1:57:1f:36:7b:27:ed: e5:c4:1a:fc:a6:50:79:b3:2d:8a:54:44:d9:9c:38:c8:9e:12: 00:10:b7:7b:6c:00:3d:3a:68:64:0f:cf:bb:76:06:00:d6:7a: bd:82:a5:51:65:2a:6e:a0:4e:44:b1:aa:f0:23:bd:06:0c:00: d2:56:53:3c:63:5f:8d:6f:95:74:1d:80:2f:61:2d:c0:f7:f2: 9b:c0:19:b3:e4:bc:08:d5:94:43:38:39:8f:2b:11:01:51:74: f6:a4:7d:12:6c:ea:30:3b:e2:48:50:2b:b2:d6:b4:bd:b0:0c: 39:00:c2:e6:a8:24:1c:f7:99:da:fc:da:54:f8:74:c2:c9:1f: 64:07:ee:1c:05:80:0c:9b:c5:ba:c9:34:82:c0:b9:91:19:b5: a4:d3:2f:c7:f5:b1:ae:3e:76:59:36:a5:c9:12:d6:30:ce:ed: 89:84:ff:30:14:f4:eb:69:51:e7:cf:06:90:27:e6:47:0c:6e: 75:73:b1:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY9LNCpE3+eNmjovvi3RMTPpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZWY1OGQ0Y2ZhMzU1NDNmODQ4OGEyNzU2ZTY5MjRlNjQ3 YjQ1ODkwHhcNMjQwNTA2MDAwMTAwWhcNMjQwNTA3MDAwMTAwWjAzMTEwLwYDVQQD Eyg4ZjQwNDg5ZDI5NGFhNTQ5Y2I3NmQ0Njk0YjU4NDY0NDhjYTkwMDkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXuwww8arH5KtaR6avZ6Cq1WxpsG cZFSQZVmHV57W8rWYb9pjWNjioLZ7kJaCOCxCZnSqDLBjg4Cizi16HpDELTL+xhn dL4N6WZSKbpt8mEMAkKhmJ+EVvFxWH1J3gS5nM1r+QSfGQFNjjGAk9YBchY8rC/j snojgDdX9SWxr/GbGPtnMSrH/ziZUBxz+x7mx8ZgBCjPrClx7Zo5dt8pwBSZ+biv aoJL1MSt79hxtGW5iTdBHp0R7HglEKU8IhM+4BitwI55qEwxl2FrpSi94exKM9OX 3A+7tkRBRCYDNWtIwZv6Wh9M5CL9O+W6yo1gfzPBUI2Ii7yLhQYv3Z9WTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI9ASJ0pSqVJy3bUaUtYRkSMqQCQMB8GA1UdIwQY MBaAFNzvWNTPo1VD+EiKJ1bmkk5ke0WJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMt MmVjZTA0ZTE4NWMyLzEvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMtMmVjZTA0ZTE4NWMy LzEvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANLa1xsYk 7KpLDGA0XEO7TVm1czs81qXL+Nb2vjCLZaKH7l1ZKGanRdkmjVlAQxzdOuQ9+3mK 05Cz5nyOMutUkpLBVx82eyft5cQa/KZQebMtilRE2Zw4yJ4SABC3e2wAPTpoZA/P u3YGANZ6vYKlUWUqbqBORLGq8CO9BgwA0lZTPGNfjW+VdB2AL2EtwPfym8AZs+S8 CNWUQzg5jysRAVF09qR9EmzqMDviSFArsta0vbAMOQDC5qgkHPeZ2vzaVPh0wskf ZAfuHAWADJvFusk0gsC5kRm1pNMvx/Wxrj52WTalyRLWMM7tiYT/MBT062lR588G kCfmRwxudXOx9Q== -----END CERTIFICATE-----Generated at Mon May 6 06:47:48 2024 by rpki-client on console-ams.rpki-client.org