$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft File: rtruqRF6HVzMMgIilVoJ-qB5j9k.mft (raw, json) Hash identifier: xhopiNyaK5eelKAyKYfkPqg5eHaBwcLeSbaAJiUpGmc= Subject key identifier: 08:38:79:5E:B7:33:B7:37:7D:07:55:A6:D0:F8:BA:3B:BA:E7:D6:56 Authority key identifier: AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9 Certificate issuer: /CN=aedaeea9117a1d5ccc320222955a09faa0798fd9 Certificate serial: 018F836C8BBBE8E38C7CEB8A251E59945C83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft Manifest number: 1180 Signing time: Thu 16 May 2024 22:01:19 +0000 Manifest this update: Thu 16 May 2024 22:01:19 +0000 Manifest next update: Fri 17 May 2024 22:01:19 +0000 Files and hashes: 1: GiNohb1Z-DajycYfnzNpucse6F0.roa (hash: L91OMW5wfUw5AWfdMO/4Lv0alOTY+AGGGQW9FCTWX+0=) 2: KT5bLeDxqU5LEXTyzGgfqeJmiPg.roa (hash: NjSm9iLLz5jAcS9mEwtYOLZzHnFn6XZc0vOY21tw4iE=) 3: Lx1VoTsDm5MFgbICeZrM2LH0Rj4.roa (hash: OztradwJNwoF4XW4WKYhJnxA8yGyq2RT81VP0mbmSR0=) 4: P0D1-nwD0liEYq1CYI2eiXljWP4.roa (hash: SUXyzbw7tzBG9gwaCp5Hrv21qMojP+5Cr1UpYbPZpJk=) 5: QS8qW1jupYxTrEfQItZqAiZimkU.roa (hash: xPhWfL9VZxsr75OQwn0t9JTUChcDfuzg+ERQy7acv3A=) 6: UPCT3pbWvZTRLCAkijoB-9Shlxw.roa (hash: Yk+6xHTeZSkoLo9vCVKC5xbKjYmSKO7OExX+VnLT7J0=) 7: dP6IlN_OcRl0H6NvF80oBAIoUIc.roa (hash: eMD/LFiWFN2Rt3gwhwXIP/a4Ckjo16nW6DKQnSOXnBI=) 8: eNgwZkgpVkJqTeRROvenEh0BXrI.roa (hash: T19X1hvQ58aP7x+4wt5cx2urMfvacZqImuzToRRrG9c=) 9: fH8aeloE2jClqKU52DLxikMqNYg.roa (hash: JxiJb6V1uNBHZ8jgU6F1RBMQ9fKcCy/CrncbNtBNo28=) 10: mjq_OyPXC_Sji3QhCh4CHL6gpU8.roa (hash: Rcafw00l7WdAnH3IrZUnG8gb3brbnUx0ZwZeWCNmKJY=) 11: mo2U1pC5MQVS-1ZIErEx49Y3BQw.roa (hash: 86qeGsYIBORDOpcpaapvgbKp6TXABlL18HyvUOyZD9c=) 12: rtruqRF6HVzMMgIilVoJ-qB5j9k.crl (hash: QKb+x9nGbMFVA+Pstz7oJkjlDZh4/56NA1j+f+TTXaY=) 13: sOEJIoe0VkU2XI1-s7oSPWRdA8A.roa (hash: ODXef2bRxzB9h/d/ooc0Ixi2xs254q15qo2pQ4yaUT4=) 14: sr69Y8oqWhZo5ljas_79jM15Mh0.roa (hash: 0AqvF01ZLsdnlDSLRirZJK7IoFOvrUJe4KI8Nitvp1w=) 15: upUJX6jvUgJl64mYBBUxFNHhVlQ.roa (hash: hjMbyKeiJOeWKptiBKRl+7xy463rxTH8o92CNVRU0T0=) 16: v-whXSuK-x1uCyUmUk7PpjK_prw.roa (hash: QKDqlCPWm22GItyznvBEhsYIHNFY2OlnC4pNLQLOUe0=) 17: vWat_btL0xf5daASJE8MPs7k7Xw.roa (hash: rP2gG9gCEQF/VW6yGHKPryXSrMx1wDt412Ggfu+zXaA=) 18: z0AeTCJuR5UFUXvYFU_SH5bbzVQ.roa (hash: Wyzw6w79k8ESG86YnIEt2nGSOXZPD+5xGUu0+CAFu4c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 May 2024 22:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:83:6c:8b:bb:e8:e3:8c:7c:eb:8a:25:1e:59:94:5c:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aedaeea9117a1d5ccc320222955a09faa0798fd9 Validity Not Before: May 16 22:01:19 2024 GMT Not After : May 17 22:01:19 2024 GMT Subject: CN=0838795eb733b7377d0755a6d0f8ba3bbae7d656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:73:4b:53:91:84:83:5e:13:1b:ae:7d:da:7a: 8d:24:2b:4a:4b:18:81:3c:ac:7b:ab:fd:77:b1:a0: 31:27:72:a2:89:97:d9:43:3a:0b:e2:d5:cb:de:e2: 47:68:f8:2d:22:2d:dc:f9:a1:82:aa:7a:7b:aa:55: a2:62:a7:0b:81:a5:73:5c:b5:97:b6:8d:75:32:e4: be:11:6d:66:3d:ac:1f:c4:89:1e:95:d6:57:84:b2: bb:d1:a5:1f:89:fc:5f:80:8b:92:b9:85:0a:f1:83: 5c:ea:c7:c3:32:90:7f:c7:c5:8b:b3:3a:f1:e4:ac: a3:74:f6:4d:cd:0a:ae:db:18:9d:9e:07:a0:21:0d: 4d:43:d5:17:a1:c4:e2:7c:47:32:9a:f9:cd:dc:6e: e8:a8:bd:ec:6f:78:08:67:c0:a3:38:dd:9c:50:e9: 88:92:b3:17:f8:a1:d9:57:8e:48:a7:b0:cb:e3:82: 0e:c5:39:72:d5:b5:14:17:2a:c5:05:a8:fc:d8:e8: 01:b4:04:4f:8d:15:97:b4:aa:6d:44:a4:29:92:50: 80:a9:45:4a:e8:d0:00:f0:7b:3c:30:fb:a8:1d:5a: 9f:64:33:85:da:b7:54:a2:50:9e:fd:02:2c:20:59: 25:d8:6e:96:64:8b:87:fe:ce:79:25:5f:e0:d9:e8: fe:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:38:79:5E:B7:33:B7:37:7D:07:55:A6:D0:F8:BA:3B:BA:E7:D6:56 X509v3 Authority Key Identifier: keyid:AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:7c:5d:c4:01:96:1e:64:2e:45:32:21:f3:7f:51:dd:c0:59: f3:31:5f:f2:5c:eb:ca:7d:f7:70:e3:76:73:75:25:af:91:f2: 19:7b:59:ac:7e:b0:0a:0e:df:ce:76:97:52:f5:67:72:39:a9: 6a:db:ef:ea:12:b3:7d:ea:47:75:98:89:3a:cf:47:5a:05:17: 71:8c:1c:83:22:79:6e:5b:03:98:99:37:c6:3e:be:ea:50:26: e4:c1:a1:09:27:a3:49:22:40:5b:a4:48:4c:ba:9d:39:d6:bf: c4:02:23:65:d5:2d:5e:89:61:4c:38:2d:80:f3:18:7f:f7:1d: b3:20:6b:86:1f:0b:49:e4:de:48:39:a0:1d:6e:40:89:43:be: 95:81:d9:08:6c:a7:f6:f4:24:f9:95:ea:47:dd:31:52:46:46: 5e:9b:84:55:5d:40:b8:dd:6a:52:e2:02:69:d7:66:49:75:a1: b3:c8:26:93:16:aa:0d:53:d7:e0:88:ff:25:0f:d9:cb:02:c8: dd:c1:35:8d:56:6e:a0:9c:b2:68:de:fc:ff:66:2f:cd:a9:df: fb:86:e0:bc:02:6f:26:b9:4f:a5:54:59:0d:d2:65:ce:74:e2: db:3a:29:79:51:f0:1a:a4:95:ce:c8:47:db:fb:e4:58:9c:ec: a2:40:45:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY+DbIu76OOMfOuKJR5ZlFyDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZGFlZWE5MTE3YTFkNWNjYzMyMDIyMjk1NWEwOWZhYTA3 OThmZDkwHhcNMjQwNTE2MjIwMTE5WhcNMjQwNTE3MjIwMTE5WjAzMTEwLwYDVQQD EygwODM4Nzk1ZWI3MzNiNzM3N2QwNzU1YTZkMGY4YmEzYmJhZTdkNjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXNLU5GEg14TG6592nqNJCtKSxiB PKx7q/13saAxJ3KiiZfZQzoL4tXL3uJHaPgtIi3c+aGCqnp7qlWiYqcLgaVzXLWX to11MuS+EW1mPawfxIkeldZXhLK70aUfifxfgIuSuYUK8YNc6sfDMpB/x8WLszrx 5KyjdPZNzQqu2xidngegIQ1NQ9UXocTifEcymvnN3G7oqL3sb3gIZ8CjON2cUOmI krMX+KHZV45Ip7DL44IOxTly1bUUFyrFBaj82OgBtARPjRWXtKptRKQpklCAqUVK 6NAA8Hs8MPuoHVqfZDOF2rdUolCe/QIsIFkl2G6WZIuH/s55JV/g2ej+nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAg4eV63M7c3fQdVptD4uju659ZWMB8GA1UdIwQY MBaAFK7a7qkReh1czDICIpVaCfqgeY/ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEt OTk4NjhjNTEzMjlhLzEvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEtOTk4NjhjNTEzMjlh LzEvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmnxdxAGW HmQuRTIh839R3cBZ8zFf8lzryn33cON2c3Ulr5HyGXtZrH6wCg7fznaXUvVncjmp atvv6hKzfepHdZiJOs9HWgUXcYwcgyJ5blsDmJk3xj6+6lAm5MGhCSejSSJAW6RI TLqdOda/xAIjZdUtXolhTDgtgPMYf/cdsyBrhh8LSeTeSDmgHW5AiUO+lYHZCGyn 9vQk+ZXqR90xUkZGXpuEVV1AuN1qUuICaddmSXWhs8gmkxaqDVPX4Ij/JQ/ZywLI 3cE1jVZuoJyyaN78/2Yvzanf+4bgvAJvJrlPpVRZDdJlznTi2zopeVHwGqSVzshH 2/vkWJzsokBFiw== -----END CERTIFICATE-----Generated at Fri May 17 07:42:29 2024 by rpki-client on console-ams.rpki-client.org