$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft File: W1JjSi6wP4VlteM9wrn0kEH3z7A.mft (raw, json) Hash identifier: szdhgQnAirdEV6AnBUPWa8ijL6ussyDi4ig3SoJRQkI= Subject key identifier: C7:17:90:83:13:30:C0:DD:48:BD:63:D5:EC:B5:9B:44:C8:5C:E6:52 Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Certificate serial: 018F87B63A1B328E6F5995089619CF8A80B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft Manifest number: 1192 Signing time: Fri 17 May 2024 18:00:17 +0000 Manifest this update: Fri 17 May 2024 18:00:17 +0000 Manifest next update: Sat 18 May 2024 18:00:17 +0000 Files and hashes: 1: BXDe_Az_ihUHdG_dhks3640Kmiw.roa (hash: SrSdiisioBvyKKXREmeKmGHqpKkEj2kdd9r1s4N6/yI=) 2: CEZahpVyVOvgB1tN-ko-mLYap1Q.roa (hash: YYr/G20bgZF8cmj/y0ierMWaoMXCsT9v4Vk7qei1BoA=) 3: DCPnLNmVUVIC8Virb7CzCbX7bTA.roa (hash: poC0njw2gGFdjJkWV4AUTcCNKFmJRb3ZqUq3Z4DXkzA=) 4: EinaYUKdL9Pfswka9B_vt5rcZPo.roa (hash: cIzqSPwD+RaXxLmQDlYnukjZZNN6P/pymXkxHSth8Kg=) 5: GxK70MZxLYx8qXLUPuipKdF6AD4.roa (hash: YnqugVgTD4pnamRm/fSWmHvH92SK1OGc52L7IowKS14=) 6: HLaLnUoZDsAxT0J0mMSNf6xCwS4.roa (hash: TThjJU9AhEkDmXqPhkv0wm16qiM4exiODsKLEGlw9A8=) 7: Jg_o77Wkgf0eDRk7GQyovBKyA_M.roa (hash: 2HFwxti9mhd5XNesoQ10OCFzKlSSqRHZSMdDZsUMLKs=) 8: Jt9b3fZfT_CLq9TZmbcgob67QK8.roa (hash: Glahka348WvApywlwyfNy/D4YX/eX7UcrB1nQBCBm90=) 9: Nw-NS4F_D_Co6zRIbVPlMWKqe0s.roa (hash: Md2NDQJ6IRg63Vm7cwkKZTnyIu0FgZXHJyZWqiE67uw=) 10: Qg1pjyJeDihNmhSniN58UqwOhRA.roa (hash: NRosJANV6haYkvmzAyilEuXCkhp9Cegc8VBD1jurSg8=) 11: W1JjSi6wP4VlteM9wrn0kEH3z7A.crl (hash: u53449AirWY2BAksdfZjyQ6i+vtoTzxxfCm82hRkIpo=) 12: _eOkdTh5AZb_4-tj0jYibkxj6xI.roa (hash: j7JG/NKL/ofOkXGMCJPyR/L24k8qbMqX+dxFy1+5eto=) 13: jdpXFqgSOq_OrfPGSURfw7EtwjA.roa (hash: NZM9BeWwtCDC6uUCa17DCGwDxjogrAPttTqJ6ThGMos=) 14: nJzYieTbgieqMc8WKD2qAGo3yTI.roa (hash: RILWbBILVUrL9jEVQjaketReijK2z8WG00dK7TaSGXw=) 15: n_SfCSn85vzjJN30OyRYin2zkog.roa (hash: MPpJrQbun1JSWCIGNzebQh5HpGoD8O8CLt28Ayev8L8=) 16: wToPZdoXJWHlnb1OKiu-CqfEPbw.roa (hash: 5MdqQwCOvFiQ4m5jniXB6QEWkAi2G7KL/9y/28JbRRQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 May 2024 17:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:87:b6:3a:1b:32:8e:6f:59:95:08:96:19:cf:8a:80:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Validity Not Before: May 17 18:00:17 2024 GMT Not After : May 18 18:00:17 2024 GMT Subject: CN=c71790831330c0dd48bd63d5ecb59b44c85ce652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:85:22:f0:4e:3a:68:ab:1f:e3:50:c2:c2:ef: 7b:d6:6b:29:ed:94:8c:bf:d0:15:1b:44:74:1b:0e: 7a:33:99:9a:40:81:1a:2b:3f:5a:36:5b:3c:64:2f: 81:ab:5b:db:80:c5:a6:90:17:ca:0f:c7:cd:7c:29: 7f:37:3f:44:49:8a:6d:dc:a1:83:be:42:b1:e3:18: 0b:0a:3c:c2:a3:84:99:50:07:fe:f0:d8:72:91:f7: c3:ff:52:05:0c:be:b3:65:f2:44:fb:2c:bb:46:ff: ef:f0:35:b6:f4:3a:04:f5:8b:1c:1d:a3:73:61:b7: 98:e5:05:f9:85:7d:36:cf:63:6b:37:52:36:97:03: 0f:01:8f:70:1c:8b:6f:31:6c:6f:9a:39:8b:b3:3a: d3:80:78:df:9c:0d:b6:a9:87:ce:fe:6a:ce:65:5e: e2:d3:3b:5a:8e:a1:5d:28:4a:1a:44:b6:f3:e6:0e: 2d:e2:5b:11:13:63:77:8b:ab:eb:c0:1b:c3:89:a3: ed:d2:29:7d:4c:6d:aa:0d:2a:65:50:e0:45:46:4e: db:85:e1:5c:6c:44:e5:df:7f:25:3c:6b:d2:4c:1a: 73:39:e8:ba:89:16:40:44:6f:4c:26:d9:65:ea:5e: e2:40:49:e5:05:26:6f:8c:21:51:af:90:b7:84:c3: e4:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:17:90:83:13:30:C0:DD:48:BD:63:D5:EC:B5:9B:44:C8:5C:E6:52 X509v3 Authority Key Identifier: keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:26:e8:f4:33:84:c7:ba:7a:00:0b:84:e7:d6:4b:a7:f5:9f: 94:63:7f:b9:5a:26:cf:2e:60:4f:78:b9:b0:92:3a:a2:7a:bd: 08:cb:e9:88:9a:57:7d:45:8a:4f:da:23:1e:d3:71:4d:4d:11: 7b:ad:df:93:45:21:5f:64:ca:07:da:fa:92:9b:5c:ee:e7:bb: d5:bd:26:51:00:4c:3b:8a:c9:8f:23:9f:ea:cc:e0:2d:f5:bf: 2f:25:7f:10:4d:de:19:ea:ee:86:83:67:3d:ea:09:01:8c:57: 99:5d:60:77:c9:a6:6f:fc:d6:a7:d1:05:5c:3a:10:4f:45:93: 3c:18:0d:14:66:c5:7e:a9:46:f8:94:59:3a:0f:4c:32:c7:e6: 6d:c2:fb:f4:2c:f9:f6:2e:17:fc:80:21:8e:4b:1f:c8:a8:3c: 6e:be:fe:8a:d5:7f:86:72:11:fa:fc:ef:ba:45:0e:22:94:3d: 32:0c:46:57:b2:ee:bc:45:f8:10:ae:2a:e1:a2:70:6c:9f:77: 49:3c:5b:46:81:e6:a0:a6:ff:30:89:4e:36:ba:e1:01:a5:66: 22:9e:5e:a8:e3:f4:ee:05:03:cc:ba:35:d1:0d:9c:e3:2c:ee: 87:88:95:b7:7f:8f:0f:ab:9b:8e:3e:63:9b:5f:9b:c3:76:41: 57:95:61:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY+HtjobMo5vWZUIlhnPioC1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNTI2MzRhMmViMDNmODU2NWI1ZTMzZGMyYjlmNDkwNDFm N2NmYjAwHhcNMjQwNTE3MTgwMDE3WhcNMjQwNTE4MTgwMDE3WjAzMTEwLwYDVQQD EyhjNzE3OTA4MzEzMzBjMGRkNDhiZDYzZDVlY2I1OWI0NGM4NWNlNjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYUi8E46aKsf41DCwu971msp7ZSM v9AVG0R0Gw56M5maQIEaKz9aNls8ZC+Bq1vbgMWmkBfKD8fNfCl/Nz9ESYpt3KGD vkKx4xgLCjzCo4SZUAf+8NhykffD/1IFDL6zZfJE+yy7Rv/v8DW29DoE9YscHaNz YbeY5QX5hX02z2NrN1I2lwMPAY9wHItvMWxvmjmLszrTgHjfnA22qYfO/mrOZV7i 0ztajqFdKEoaRLbz5g4t4lsRE2N3i6vrwBvDiaPt0il9TG2qDSplUOBFRk7bheFc bETl338lPGvSTBpzOei6iRZARG9MJtll6l7iQEnlBSZvjCFRr5C3hMPkmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMcXkIMTMMDdSL1j1ey1m0TIXOZSMB8GA1UdIwQY MBaAFFtSY0ousD+FZbXjPcK59JBB98+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUt ZGM2NTU0ZmQxMjM1LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUtZGM2NTU0ZmQxMjM1 LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlSbo9DOE x7p6AAuE59ZLp/WflGN/uVomzy5gT3i5sJI6onq9CMvpiJpXfUWKT9ojHtNxTU0R e63fk0UhX2TKB9r6kptc7ue71b0mUQBMO4rJjyOf6szgLfW/LyV/EE3eGeruhoNn PeoJAYxXmV1gd8mmb/zWp9EFXDoQT0WTPBgNFGbFfqlG+JRZOg9MMsfmbcL79Cz5 9i4X/IAhjksfyKg8br7+itV/hnIR+vzvukUOIpQ9MgxGV7LuvEX4EK4q4aJwbJ93 STxbRoHmoKb/MIlONrrhAaVmIp5eqOP07gUDzLo10Q2c4yzuh4iVt3+PD6ubjj5j m1+bw3ZBV5VhKA== -----END CERTIFICATE-----Generated at Sat May 18 00:29:25 2024 by rpki-client on console-ams.rpki-client.org