$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft File: 437h7O0Z-KCjpjW_qiZCk-NDd5U.mft (raw, json) Hash identifier: Q2GWJJLwYL0Sx6Kov2U+Ze0Rj2yXyVKu3wzK218Ki+A= Subject key identifier: DD:B2:97:11:2E:46:C7:EE:BC:3C:56:E9:5D:06:03:B9:E0:35:0E:D7 Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95 Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795 Certificate serial: 018F44C498B7FE24CC2E2DF46586D684EB23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft Manifest number: 1176 Signing time: Sat 04 May 2024 18:01:25 +0000 Manifest this update: Sat 04 May 2024 18:01:25 +0000 Manifest next update: Sun 05 May 2024 18:01:25 +0000 Files and hashes: 1: 1-m2O2KqpQZj1TqZftPeZN6Atlak.roa (hash: WjsW6bpAWyru4dmzzqi8ayoIbRDN0n7vGVxepfoOuC0=) 2: 28vMx22TVnLfIBGnW3KKKyD-4ak.roa (hash: w1Vn/H+5hhuR3KJgaITsrJC9A/Fs42C1SdmOz9UdkWM=) 3: 437h7O0Z-KCjpjW_qiZCk-NDd5U.crl (hash: jLKsgzgzFIWWTtiDsJ5AG0gr85xxjt5iu2n3DbR3ITA=) 4: 5gajPlkCmapWxDJAtSTO--UyqG4.roa (hash: 0C0fggM4MZZFtaowNgi1HR1yXoyS2DMyciGpl0Eyf80=) 5: 9j6hInOmVn84j79m4EjScku39aI.roa (hash: akq0zLL2ApXS7jv+4OdwECbrLPzLt1lLVgDJR3jGuYo=) 6: IeSERaf_EXlONlXFBVBh67ioSvU.roa (hash: qy8EDhNuNcLevsYTpWqxS3R/Yq5zCO2lArxij0H2EYc=) 7: MeTZYkmW5YPhJmBbaFSWUH5meC4.roa (hash: ozRj2hwZp4lOLGAV33JpQdxI9xS7NvXcHOIOemOlLLI=) 8: Ns8sXdG-J1aDJKkGSNJO7t9i-uU.roa (hash: Pe//ZVJYngk/dxGYg/MmjbCl7LZ+F8IBGQzmyO68bi8=) 9: T8lM_UqhplA-167vdfCJ5xZjNPo.roa (hash: 1/ENtHsGU45ZTM6cLZwlVfTR8SQkL6TtKC2hJLvF3TA=) 10: fnONzvJm2vGIgOow9kBsU-uD3iQ.roa (hash: sQVhpn6Kw1JjnhjvVYi0/dCkv0CNWl52kmfnOsX8e/g=) 11: j9vuXS20ZcQzDAFC63g_6Sr1-0Y.roa (hash: SA4v8w46en7Nn+pzjdA60MMfwy+vuYIIZx0IQAWX9qw=) 12: mQiDUNcITxN36MK8F9Vwmi8fo4o.roa (hash: xO51QS8O43duxZ5R/yFhW3YN8oUTC/nXiBxs39X0KSE=) 13: nKcJs922KonzdB3NL-6p13cEnE8.roa (hash: 4hyeRFqyHNcbboH1gxbTtNovRsqDfEZnLff48AJ5DIs=) 14: q8BugWJbAtj9im3_AmkgCWm0h2w.roa (hash: NF3whjEPqHqiAUFoDb+73ziomxKW9k1RLSFAvrxJ6o4=) 15: xb9HjZBV3NRacpRqWQc06PhEZsg.roa (hash: Sl0r2cmzeh9oiR4nG2poQA6C3HQ36gEn3ruESl8w/5o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 05 May 2024 14:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:44:c4:98:b7:fe:24:cc:2e:2d:f4:65:86:d6:84:eb:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795 Validity Not Before: May 4 18:01:25 2024 GMT Not After : May 5 18:01:25 2024 GMT Subject: CN=ddb297112e46c7eebc3c56e95d0603b9e0350ed7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:89:07:1e:0c:cc:93:72:95:bd:d2:10:ba:7a: ba:bc:f4:71:86:55:69:9c:a9:80:29:5e:85:37:cf: f2:ef:f8:aa:72:e0:ae:6a:bd:a0:b9:0a:fe:10:54: 88:47:e6:3c:d2:81:0b:9a:28:dd:26:d5:5e:b3:0b: c3:4c:7d:7c:f5:8c:d1:35:20:df:a0:a5:15:74:61: 7d:41:44:68:81:c0:24:cd:0b:aa:8e:0a:84:35:38: 13:9f:2a:11:38:5a:83:c6:41:8f:31:b2:8b:16:23: b6:44:ae:d5:34:43:9f:f2:6e:9c:19:b9:f8:4c:97: 0e:de:ec:cd:7e:54:cf:a3:f3:00:38:bc:35:f6:0a: 56:4e:c5:ef:9e:1f:b0:d0:66:71:91:cf:73:69:e0: 88:36:80:e9:f3:b6:08:72:0a:0b:35:d4:48:c5:21: ec:44:94:83:75:5f:20:94:99:53:94:78:42:03:e9: aa:82:92:ea:c0:5d:6f:fe:73:55:07:db:b8:99:95: ed:2b:f5:31:1a:9c:48:7c:0e:bf:a1:0b:1b:0a:3e: 0a:21:22:ce:0e:26:74:05:5d:f8:38:c4:78:45:c5: 1e:6c:bb:4d:2a:76:17:29:bc:fe:df:32:43:87:63: 07:5c:3c:90:7c:f1:ad:9f:56:47:0d:dd:4a:3a:b0: dd:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:B2:97:11:2E:46:C7:EE:BC:3C:56:E9:5D:06:03:B9:E0:35:0E:D7 X509v3 Authority Key Identifier: keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:6b:8c:ba:ac:42:4b:be:88:67:64:95:78:e1:b9:e2:6d:dc: f1:25:cc:78:13:89:92:86:59:8a:a9:12:34:9f:9f:ba:ad:55: e4:86:f3:b9:29:f2:da:fb:e5:14:ac:f1:11:cf:ca:e3:07:9f: 11:0d:95:61:52:e1:5e:86:f0:33:49:1a:3a:7a:ce:13:43:19: 58:b8:cb:68:a1:a8:c9:c4:d8:a3:b0:f5:59:90:12:ff:29:f5: 14:17:50:28:47:36:99:89:28:60:72:22:3d:84:4c:50:10:9d: fe:7a:ad:f5:fc:7f:50:da:c6:4f:b5:2a:22:b5:e8:d9:41:b3: 80:ab:f5:85:7e:34:bf:d9:d4:a5:72:b6:fe:07:e2:da:1e:90: 4e:dc:8d:13:7e:68:e0:aa:a4:39:98:2a:18:14:c5:d4:2c:9c: d9:41:d0:21:22:a6:de:47:80:a3:a9:3a:27:be:18:68:3a:36: 79:b4:a6:8c:e9:db:a1:b6:3d:ae:79:47:e7:8c:e6:48:cd:a0: d7:2d:32:18:a8:14:52:10:3c:c9:80:e6:b6:e8:a0:8c:e3:a5: f3:89:12:d2:e2:38:8a:2b:2c:14:26:2d:06:59:e4:0e:c3:48: 96:75:1c:68:a8:56:8d:7f:1a:60:e8:1c:df:8c:c0:13:b7:06: a7:67:12:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY9ExJi3/iTMLi30ZYbWhOsjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzN2VlMWVjZWQxOWY4YTBhM2E2MzViZmFhMjY0MjkzZTM0 Mzc3OTUwHhcNMjQwNTA0MTgwMTI1WhcNMjQwNTA1MTgwMTI1WjAzMTEwLwYDVQQD EyhkZGIyOTcxMTJlNDZjN2VlYmMzYzU2ZTk1ZDA2MDNiOWUwMzUwZWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IkHHgzMk3KVvdIQunq6vPRxhlVp nKmAKV6FN8/y7/iqcuCuar2guQr+EFSIR+Y80oELmijdJtVeswvDTH189YzRNSDf oKUVdGF9QURogcAkzQuqjgqENTgTnyoROFqDxkGPMbKLFiO2RK7VNEOf8m6cGbn4 TJcO3uzNflTPo/MAOLw19gpWTsXvnh+w0GZxkc9zaeCINoDp87YIcgoLNdRIxSHs RJSDdV8glJlTlHhCA+mqgpLqwF1v/nNVB9u4mZXtK/UxGpxIfA6/oQsbCj4KISLO DiZ0BV34OMR4RcUebLtNKnYXKbz+3zJDh2MHXDyQfPGtn1ZHDd1KOrDd3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN2ylxEuRsfuvDxW6V0GA7ngNQ7XMB8GA1UdIwQY MBaAFON+4eztGfigo6Y1v6omQpPjQ3eVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMt MzZlMzQ0YWJjOWQzLzEvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMtMzZlMzQ0YWJjOWQz LzEvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADGuMuqxC S76IZ2SVeOG54m3c8SXMeBOJkoZZiqkSNJ+fuq1V5IbzuSny2vvlFKzxEc/K4wef EQ2VYVLhXobwM0kaOnrOE0MZWLjLaKGoycTYo7D1WZAS/yn1FBdQKEc2mYkoYHIi PYRMUBCd/nqt9fx/UNrGT7UqIrXo2UGzgKv1hX40v9nUpXK2/gfi2h6QTtyNE35o 4KqkOZgqGBTF1Cyc2UHQISKm3keAo6k6J74YaDo2ebSmjOnbobY9rnlH54zmSM2g 1y0yGKgUUhA8yYDmtuigjOOl84kS0uI4iissFCYtBlnkDsNIlnUcaKhWjX8aYOgc 34zAE7cGp2cSLA== -----END CERTIFICATE-----Generated at Sat May 4 22:53:18 2024 by rpki-client on console-fra.rpki-client.org