$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft File: HHrXdUeV3dYF8og4u3zDWd96Jmo.mft (raw, json) Hash identifier: cN83nAhWbXASXGipDhn3sYkjSBTaJr8i/NpZzqUjemc= Subject key identifier: 83:8C:02:C5:86:68:86:11:2C:F8:3E:56:7F:70:0C:F7:EA:FD:EB:CE Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Certificate serial: 018F2DCE5986F53069EFDEF678CE553919F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft Manifest number: 1158 Signing time: Tue 30 Apr 2024 07:00:49 +0000 Manifest this update: Tue 30 Apr 2024 07:00:49 +0000 Manifest next update: Wed 01 May 2024 07:00:49 +0000 Files and hashes: 1: 1-3yzwFMc2ZB8Cz0VSUsEWDGz6gQ.roa (hash: VflV+DaJBSp3rGIumJ0P6EnRkL/IwCA7KbpPBB5uMHE=) 2: 4cPQkZgue2nXQMjoJtLCRhz6yPU.roa (hash: DIHbn8wN+GM5uhGWLqhrGb0HVOwqpEOppW3eu1LD1G0=) 3: 9xE9nFPlj70J1OkAYkPQYHMcKz4.roa (hash: KbjCfY8tRKt9xgl6vTqDY8eEBJZsNH3uXTMfSSDkpxM=) 4: CR9J4P3W6wqD5UcHN9EKxK9WgsM.roa (hash: tm/IFVKPumpzRoLCLcUhB3urBRDBW5Bw74qLdKLw6Xo=) 5: ClM8BBlcSfOEIJEW6B2bFlcdFtI.roa (hash: 0tYWznCDvmHGBoUhdxe1z5ox8EgWu8jKLO+Kf+ar6vk=) 6: HHrXdUeV3dYF8og4u3zDWd96Jmo.crl (hash: 82ZnZr5IszV1I/EumZFV2Xj4rnG6HKMZ2q4sGS6t1EM=) 7: MLDNsjssqz38Mj7iSCj4Wu5FXVk.roa (hash: 4A/Hn6lRmk0ztw1eRI8+9HNrP+CwEg3sps6rhebe3jM=) 8: Sd-HFIo5J7Vc6LSqMWZrES8NEiU.roa (hash: kuizoLSB81TA+i+m0E0Yb2kHgOnBsumZFl4l861gtXQ=) 9: YDSbhUJS34wcW7m6rawPlxi2Dok.roa (hash: ZihpgAvk/MwAXi4GFOu5euNT7wlJZ8jUuEVochSYHkg=) 10: a3Raz4sYpthd0b0z1nauqGI-QAU.roa (hash: bCYGsHcqtfzk8H2DWcwiRc3Inxet/HCCvOX7WIU6Gv0=) 11: wuQ87vmo7QYBAU1MhhzDPeYx9VQ.roa (hash: e7NfJf5g8+my0XAZksaKPtinFgJH4DUn90+YMDhe0p0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 01 May 2024 07:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:2d:ce:59:86:f5:30:69:ef:de:f6:78:ce:55:39:19:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Validity Not Before: Apr 30 07:00:49 2024 GMT Not After : May 1 07:00:49 2024 GMT Subject: CN=838c02c5866886112cf83e567f700cf7eafdebce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c9:dc:4b:cc:c2:43:eb:3c:e8:f3:05:71:1a: 2c:02:9c:fb:07:a3:60:00:fd:dc:29:f9:22:46:d4: a5:ce:b9:20:ba:2a:6f:8e:8c:55:25:9c:ee:19:1f: 28:b8:84:35:40:a5:64:b2:9d:2d:fa:82:d7:3b:d9: 5b:59:d7:1e:9b:8c:b0:60:4e:d6:b2:18:51:5e:45: 85:32:cc:dd:e7:79:77:62:df:a3:cf:02:13:82:65: 89:65:2a:21:a2:1e:46:79:7f:43:10:39:77:64:35: 6a:8f:df:82:bb:64:33:04:66:6a:a5:17:01:0e:1f: 13:42:41:25:56:9c:ad:9b:79:ab:06:6f:38:31:24: fb:67:b2:c5:77:4b:50:98:cb:79:43:00:b1:17:35: 08:12:b6:15:9d:de:09:22:30:27:ad:7d:e7:ad:85: e0:70:e9:c5:57:0b:17:9d:74:77:55:2f:f1:fd:b2: d4:93:7c:a6:92:e4:6d:6a:05:29:49:f4:f7:a4:79: b0:32:c5:13:0e:86:a3:e5:59:07:f5:52:18:1b:02: 2a:5c:5d:1f:3d:6d:5b:e3:4e:5e:29:c8:a2:f4:af: 3a:fd:45:87:ea:b5:dc:33:0c:fb:44:34:23:02:bf: 96:10:99:31:28:5f:b7:0a:41:df:a1:4a:21:eb:7e: ac:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:8C:02:C5:86:68:86:11:2C:F8:3E:56:7F:70:0C:F7:EA:FD:EB:CE X509v3 Authority Key Identifier: keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:63:43:98:fd:f5:4b:ab:2e:85:c2:10:f4:d8:6d:38:48:02: 76:b7:da:51:c8:38:dd:2e:c8:10:70:f2:30:97:f0:76:09:51: 29:c9:f3:55:e5:53:23:e9:a8:10:de:0c:cd:23:1f:67:7b:40: 9c:88:db:66:c9:5b:c4:98:f0:43:a7:1e:2c:fa:e9:2b:a8:2b: d3:d0:6b:04:59:8c:c9:b1:9f:5e:0d:ef:45:21:d0:fb:ba:74: 80:58:14:39:42:1c:7f:6e:53:d0:85:c1:06:aa:ca:af:29:d0: a4:4c:80:c6:2a:b4:25:82:41:e5:ee:0e:af:48:a2:42:09:58: e0:cf:07:a0:4d:20:63:a9:90:27:b8:cb:a3:21:2f:55:ac:0c: 0c:74:ce:82:bc:56:29:27:36:05:c5:94:cb:12:97:93:98:39: c8:1c:72:93:f4:eb:8a:98:19:fe:9e:a1:6a:9a:ed:43:3d:ad: 3b:e1:8a:11:a7:ac:0b:28:4f:b6:48:a6:b7:4a:3c:c4:0f:3a: 48:07:75:ba:3e:f9:1a:38:76:8e:2b:5b:7d:00:b2:7e:1c:77: c6:98:d9:c9:89:e3:dd:e8:24:f3:9b:93:04:57:aa:b3:11:83: fd:93:31:66:e1:b7:32:d5:1d:86:47:14:8e:a6:3b:2b:fc:76: a0:a8:09:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY8tzlmG9TBp7972eM5VORn3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2FkNzc1NDc5NWRkZDYwNWYyODgzOGJiN2NjMzU5ZGY3 YTI2NmEwHhcNMjQwNDMwMDcwMDQ5WhcNMjQwNTAxMDcwMDQ5WjAzMTEwLwYDVQQD Eyg4MzhjMDJjNTg2Njg4NjExMmNmODNlNTY3ZjcwMGNmN2VhZmRlYmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsncS8zCQ+s86PMFcRosApz7B6Ng AP3cKfkiRtSlzrkguipvjoxVJZzuGR8ouIQ1QKVksp0t+oLXO9lbWdcem4ywYE7W shhRXkWFMszd53l3Yt+jzwITgmWJZSohoh5GeX9DEDl3ZDVqj9+Cu2QzBGZqpRcB Dh8TQkElVpytm3mrBm84MST7Z7LFd0tQmMt5QwCxFzUIErYVnd4JIjAnrX3nrYXg cOnFVwsXnXR3VS/x/bLUk3ymkuRtagUpSfT3pHmwMsUTDoaj5VkH9VIYGwIqXF0f PW1b405eKcii9K86/UWH6rXcMwz7RDQjAr+WEJkxKF+3CkHfoUoh636sRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIOMAsWGaIYRLPg+Vn9wDPfq/evOMB8GA1UdIwQY MBaAFBx613VHld3WBfKIOLt8w1nfeiZqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgt YWRhNWMyMGUzZjdiLzEvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgtYWRhNWMyMGUzZjdi LzEvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGmNDmP31 S6suhcIQ9NhtOEgCdrfaUcg43S7IEHDyMJfwdglRKcnzVeVTI+moEN4MzSMfZ3tA nIjbZslbxJjwQ6ceLPrpK6gr09BrBFmMybGfXg3vRSHQ+7p0gFgUOUIcf25T0IXB BqrKrynQpEyAxiq0JYJB5e4Or0iiQglY4M8HoE0gY6mQJ7jLoyEvVawMDHTOgrxW KSc2BcWUyxKXk5g5yBxyk/TripgZ/p6haprtQz2tO+GKEaesCyhPtkimt0o8xA86 SAd1uj75Gjh2jitbfQCyfhx3xpjZyYnj3egk85uTBFeqsxGD/ZMxZuG3MtUdhkcU jqY7K/x2oKgJAQ== -----END CERTIFICATE-----Generated at Tue Apr 30 14:34:59 2024 by rpki-client on console-fra.rpki-client.org