$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft File: F7UEL8INm6sWduCa9_8bpb-trnU.mft (raw, json) Hash identifier: zrXsIykGui1qUB59niLMIFsZ2qPtOv0rytEeuVp6mZA= Subject key identifier: 45:1A:9D:1C:27:5E:55:12:86:B0:59:00:3F:9C:8B:55:63:B1:39:1F Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75 Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75 Certificate serial: 018F3C6621B322360CF76645D52C3E41D83E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft Manifest number: 0AB0 Signing time: Fri 03 May 2024 03:01:17 +0000 Manifest this update: Fri 03 May 2024 03:01:17 +0000 Manifest next update: Sat 04 May 2024 03:01:17 +0000 Files and hashes: 1: 1kBMT4qxg6DrNF9nvIfjhoHbSfg.roa (hash: QslXF84HY+fiOOIb2NsalyanS+PhBb4K2lPB8vsMUsw=) 2: 7erOOiy1Kz-639fqjRntq0tIdgw.roa (hash: kCOMjLlq9HyJX+BZiqepnviVMaepC+M2166rKXlLJl4=) 3: A3gHLi9-RpPd1TmUhoZQx3RVV-E.roa (hash: o2Dupc3dD5K0M4AUqixeDtvfDVzd/F7L2ggqcx2QH1o=) 4: DuU1uBwHxDFL5vgUvbCmzhWsThg.roa (hash: s/CUE7C5yLqY6vKrrRTEvcokXoeJkTQZuPuZcZ279rc=) 5: F7UEL8INm6sWduCa9_8bpb-trnU.crl (hash: Zumvlu77tf6BCLBm5CxxicShx69X2ev+ybU18qUaSW8=) 6: HkcWh0Is3p1QloSPW_5suNLrIp8.roa (hash: jdrcpvYsLK3IYTBJyacL49MpIH7ic53aM/1JfgvTx6g=) 7: Iu30C8NZjJrhlk5iOLBdxD1gNAE.roa (hash: zYqnj8XEd76O8eniyp1E/qfpdHKhjDfUeRtXgH8rWII=) 8: UfMXTisPTOQhevljbnKzS02s5lo.roa (hash: FEqA8XQmB1quqSw92V89K6L0fHEKloJT9Xo+6E8ezG8=) 9: VyQSiAENV_R36GbGywJb2Lt26ps.roa (hash: 5CVoowL+N2ygPXpcEtXEwm7QSAYrscxXbcA0rKCvgsA=) 10: WmPQld-coiRvXCf-mGavzR9A3V0.roa (hash: MRZUousPg/dms04xcrQySsRmUHVVCjTxxePwTJf+EjE=) 11: bzRVZzwxJy5dYKFSWsSjSmSpVsE.roa (hash: Dsg6c4WKp0zrzcb4oQ19HmyIZUTzPjHyVURfsWD40SM=) 12: g7z1EqpCsBQj3T7AQDwJ4PvrG7w.roa (hash: x5XaIeBMijpV4o4gEqGRwHaw4Ow93GtIRVwZqWw4iao=) 13: huUEZ_XmGpGyzbVMyLMohv0hHgc.roa (hash: /gL1VnivQOaVZO41KNZWzSN35ipJpTx/suf3VVhNxss=) 14: lCxMEu0q-UGYZyCeuknWh_v4qDs.roa (hash: VfWi5x9yJK+9W9uB3Ko6uBhrqDZ0+x+F7/+WdC6jRO4=) 15: sxgO5gRtWj4ncCsUAGBKyh9KcOQ.roa (hash: ZHpvHmk9QNAAqDZcVik167UFUKvsPL1GCtylt/NtG2o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 04 May 2024 00:09:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:3c:66:21:b3:22:36:0c:f7:66:45:d5:2c:3e:41:d8:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75 Validity Not Before: May 3 03:01:17 2024 GMT Not After : May 4 03:01:17 2024 GMT Subject: CN=451a9d1c275e551286b059003f9c8b5563b1391f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:87:47:b3:31:f2:2a:cc:cd:58:8d:00:1d:8a: 2d:57:cc:e3:1f:22:3d:46:52:86:d3:3b:0e:31:83: 85:f4:94:5f:32:41:27:42:14:f1:9a:67:07:04:d7: 4d:16:de:f6:8c:e7:f8:56:c1:f5:b9:24:eb:41:cb: 76:75:63:a3:aa:f7:f9:5b:c9:9d:be:2b:4e:41:aa: 56:80:70:a2:26:d6:e0:41:f1:6c:03:a1:6a:8a:43: 4c:3c:64:fa:35:ad:0f:cc:a5:f8:5a:2b:2c:7d:6f: 49:a7:6b:70:80:6f:ae:00:d8:98:97:53:5d:01:f0: 00:70:0b:2d:ce:00:65:43:5a:08:44:0c:38:ec:77: d8:c9:f8:6d:9b:12:69:95:5e:7b:f5:15:13:24:97: de:63:1d:2b:3c:26:21:77:53:2f:fa:1f:e3:20:f2: 30:0d:b3:63:53:72:fb:28:74:01:d3:58:39:36:89: 57:17:7c:c4:26:58:3f:4c:2b:d6:1f:f6:2d:f7:53: b6:78:05:99:d8:f4:f7:bc:23:3d:ab:69:7e:d1:c0: a9:64:f4:02:42:56:1f:f3:74:5c:bb:87:4d:e5:41: 6d:fd:45:23:15:cb:6d:60:f5:1e:80:ba:47:26:f3: de:52:e4:9d:43:ad:03:3a:e5:52:e7:a0:fb:06:54: 2c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:1A:9D:1C:27:5E:55:12:86:B0:59:00:3F:9C:8B:55:63:B1:39:1F X509v3 Authority Key Identifier: keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:59:b9:91:e1:ba:83:c0:26:eb:60:ce:16:41:b4:72:98:ae: ef:81:3e:4d:89:a8:21:a5:f4:05:95:ca:93:b0:62:b6:74:04: 88:c5:a6:b5:85:b4:ac:8a:1a:36:09:8a:74:05:99:56:ca:61: 29:6d:a1:ba:c2:3c:c8:14:08:b8:7b:48:65:00:81:f9:37:e2: 48:94:5a:6f:5b:8e:cc:dc:ff:ec:da:85:b6:f0:3a:c2:d6:72: 01:22:c3:04:bd:4e:21:3b:ec:10:c4:c3:c6:84:c3:d2:94:82: 54:24:4c:73:b6:b1:0a:c0:76:06:d9:bc:5b:18:c3:c4:7a:af: f8:57:62:e1:e8:2f:f3:17:b8:26:3b:62:38:05:1d:e3:66:19: b1:29:a8:aa:aa:63:ca:6d:ee:d6:48:6f:60:f0:d3:36:87:95: e4:61:4e:1b:ee:94:40:cb:8a:74:4d:2f:be:14:08:13:52:07: 92:50:8e:22:59:65:ed:d1:4a:4a:db:a5:23:e3:9f:6b:e8:f4: 76:9b:35:41:37:dd:c6:84:01:ee:61:8d:0b:f6:ba:9a:ec:54: 44:10:7b:b8:af:8c:30:10:d4:a4:bc:73:93:51:67:9b:8b:57: d3:e0:d8:aa:49:e1:48:90:38:84:20:08:db:fb:96:3d:f1:43: 9b:0c:84:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY88ZiGzIjYM92ZF1Sw+Qdg+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3YjUwNDJmYzIwZDliYWIxNjc2ZTA5YWY3ZmYxYmE1YmZh ZGFlNzUwHhcNMjQwNTAzMDMwMTE3WhcNMjQwNTA0MDMwMTE3WjAzMTEwLwYDVQQD Eyg0NTFhOWQxYzI3NWU1NTEyODZiMDU5MDAzZjljOGI1NTYzYjEzOTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04dHszHyKszNWI0AHYotV8zjHyI9 RlKG0zsOMYOF9JRfMkEnQhTxmmcHBNdNFt72jOf4VsH1uSTrQct2dWOjqvf5W8md vitOQapWgHCiJtbgQfFsA6FqikNMPGT6Na0PzKX4WissfW9Jp2twgG+uANiYl1Nd AfAAcAstzgBlQ1oIRAw47HfYyfhtmxJplV579RUTJJfeYx0rPCYhd1Mv+h/jIPIw DbNjU3L7KHQB01g5NolXF3zEJlg/TCvWH/Yt91O2eAWZ2PT3vCM9q2l+0cCpZPQC QlYf83Rcu4dN5UFt/UUjFcttYPUegLpHJvPeUuSdQ60DOuVS56D7BlQsWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEUanRwnXlUShrBZAD+ci1VjsTkfMB8GA1UdIwQY MBaAFBe1BC/CDZurFnbgmvf/G6W/ra51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQt YmM2Nzk0ZTk1ZTVhLzEvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQtYmM2Nzk0ZTk1ZTVh LzEvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADFm5keG6 g8Am62DOFkG0cpiu74E+TYmoIaX0BZXKk7BitnQEiMWmtYW0rIoaNgmKdAWZVsph KW2husI8yBQIuHtIZQCB+TfiSJRab1uOzNz/7NqFtvA6wtZyASLDBL1OITvsEMTD xoTD0pSCVCRMc7axCsB2Btm8WxjDxHqv+Fdi4egv8xe4JjtiOAUd42YZsSmoqqpj ym3u1khvYPDTNoeV5GFOG+6UQMuKdE0vvhQIE1IHklCOIlll7dFKStulI+Ofa+j0 dps1QTfdxoQB7mGNC/a6muxURBB7uK+MMBDUpLxzk1Fnm4tX0+DYqknhSJA4hCAI 2/uWPfFDmwyEhA== -----END CERTIFICATE-----Generated at Fri May 3 04:41:30 2024 by rpki-client on console-ams.rpki-client.org