$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft File: 8FIRKM9jSqavp-9S1THz_NVWKPk.mft (raw, json) Hash identifier: oGBTCG3nOTCEHzmNjihS9ulYObgVfi0d31jAfBf/cmQ= Subject key identifier: 9C:C5:3F:8A:0C:0E:31:53:8A:5D:D3:81:D6:21:BE:21:C5:B9:33:6C Authority key identifier: F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9 Certificate issuer: /CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9 Certificate serial: 018F3A0B0D4D555E173134AE4B0251FF27DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft Manifest number: 1157 Signing time: Thu 02 May 2024 16:02:33 +0000 Manifest this update: Thu 02 May 2024 16:02:33 +0000 Manifest next update: Fri 03 May 2024 16:02:33 +0000 Files and hashes: 1: 1G0GndQxPN_ijKQXod2nDRjRK3A.roa (hash: svcZUSP1M9nMS5vYUw03InJSZc0A98zEzvtu2zSVU0Y=) 2: 2lpdEuX0pmT8tr30UoYg53K17Z0.roa (hash: L800/MG7j3YwnU+h/ZNwGTuouEu6GfmWU0Y8mUf/uaY=) 3: 3prsfM0cuiyTxnUnqrv7EC-ZbwE.roa (hash: cdyb9SLygfaQoyFfqx2oSkoURO/74AhP5WKHg88MMvQ=) 4: 8FIRKM9jSqavp-9S1THz_NVWKPk.crl (hash: BG2TdeRoVQOEPoR0TviipeVi81LmWMMAhRQF1/TxT34=) 5: J5xTlzWp8A-qablmd2J4f3Zdo7E.roa (hash: w+h4ZIHuD5LYbyOIPxyfC8yFaTzdXfKgv5QtJW3wNv0=) 6: PaGXnno3vgfbNXwyjeEIYw218dQ.roa (hash: 1WHWIO7GjSeDkHrz9g0N/ijvmexmZHQZsK2xnmSDU58=) 7: YChrPM81EzeXeXGZK57kbhwOQlo.roa (hash: XmT/5GJ5JOmsX7EFCnkA6Pr+ZBfYyP5hOY27NGq2hzc=) 8: ZNv71iUsk0Bm3WtxTdreFeiUfx0.roa (hash: 9D8R3hZ40ZYmF2phuv0ZuL6BcX7UBesONoB2I4u3n90=) 9: jY7oRuZfy9PeDRqh9U8yeyK7iFk.roa (hash: AoTIlQ5l0VVrMNIDzv1G3rKdc979k7vm8iRkHm/vox0=) 10: ptcH9EPFEU17qfPaJv0WXlYcznk.roa (hash: mckXI8EADgmMiy3vCpGJfpz0vJ/X6nC4uDbCzbqCPcI=) 11: qapmNctVsTX2rwDPGXyTm2Cw20A.roa (hash: tujT0ZNdIFZeOkreCCNXZVY838OGosbA5X7lQtsLmfI=) 12: xfAr5Ajt95pkgsmUWNXDVcDdAO0.roa (hash: 64JwlnQ3/+4hIQ96GKgmZQ6/DCjccjOelVOpfyAAuM8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 03 May 2024 16:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:3a:0b:0d:4d:55:5e:17:31:34:ae:4b:02:51:ff:27:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9 Validity Not Before: May 2 16:02:33 2024 GMT Not After : May 3 16:02:33 2024 GMT Subject: CN=9cc53f8a0c0e31538a5dd381d621be21c5b9336c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c9:1c:25:c9:18:40:2b:b8:79:b5:7a:be:8b: c8:b4:dc:ab:b8:b7:6f:4e:a7:f7:8b:24:8d:43:a8: 88:56:b2:27:7b:49:e9:96:fb:e1:0f:84:60:d4:d5: 1e:4f:87:b2:f7:d6:75:22:04:a2:91:a5:33:7b:48: a1:d2:df:a5:c3:4b:be:b6:ff:6f:e3:c4:aa:c4:81: 00:a4:ec:39:98:26:32:0b:73:4d:61:ef:e1:b8:32: 50:70:3d:62:d0:30:8e:e7:f7:39:83:d7:a0:36:e5: 80:e3:59:6e:e7:40:47:23:db:4a:01:b1:4a:15:83: 19:8b:62:f1:b3:0a:49:4e:a3:74:07:30:1b:d4:0c: 9d:b9:a3:c2:93:e0:31:48:09:ae:23:bd:07:9c:7d: 16:ab:2b:c5:1e:9e:6a:26:ea:31:96:c7:57:22:ac: a3:cb:c2:ad:f6:60:a0:c5:49:6a:59:33:cb:71:99: 80:5e:6b:9a:f2:5e:8b:28:c6:5c:29:69:b6:83:97: 86:0a:2f:d9:1c:0d:e3:a9:c8:42:f4:d2:b6:d3:c9: 98:12:2d:83:b1:7b:16:50:47:08:d3:a2:0f:a2:f4: 50:0b:bd:86:51:62:aa:18:73:38:8c:e1:e8:95:c8: a2:c4:13:a3:59:8e:38:39:70:fc:f4:d9:a1:6c:94: eb:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:C5:3F:8A:0C:0E:31:53:8A:5D:D3:81:D6:21:BE:21:C5:B9:33:6C X509v3 Authority Key Identifier: keyid:F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:5f:55:33:d8:32:48:5a:2d:14:c7:5d:e9:f5:27:f5:58:7b: 04:d3:f7:29:e4:eb:f8:e7:13:67:62:80:7d:19:5c:43:0b:89: 6d:98:93:0f:b6:74:69:47:66:20:58:67:25:17:0e:4b:a9:90: 3f:e1:cf:a7:59:31:fb:71:3c:dd:c1:2b:99:bd:3e:5f:69:67: 64:75:c9:05:3c:ab:5b:6b:e6:95:05:f8:4f:d9:7b:83:6a:20: a6:18:9f:de:86:3d:ef:7d:6a:3d:2d:10:41:7b:7d:2d:a1:25: fc:c8:67:33:ac:a3:2c:e0:2f:21:50:57:44:e1:d8:71:5d:15: 71:e5:b5:cb:6d:2e:11:04:dd:91:ce:59:03:ea:00:a0:21:36: aa:c3:60:43:fc:e6:a9:03:e0:3c:77:c1:30:36:89:f2:6f:44: cc:52:d9:cb:6b:10:38:af:12:9e:61:ce:6f:48:5f:5b:73:4d: a6:e4:22:b0:39:9c:0c:37:3e:09:48:99:1c:69:e5:c1:e2:15: 4a:cb:6d:75:2d:02:a3:b9:81:60:a7:d8:cd:22:d7:21:72:9d: a9:b2:45:02:4c:2f:8f:13:5d:13:06:ec:b2:24:ae:58:3b:6d: 75:dd:bc:00:46:33:a8:3e:d6:06:b9:e1:32:bb:ad:53:01:29: 1d:c9:01:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY86Cw1NVV4XMTSuSwJR/yfeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNTIxMTI4Y2Y2MzRhYTZhZmE3ZWY1MmQ1MzFmM2ZjZDU1 NjI4ZjkwHhcNMjQwNTAyMTYwMjMzWhcNMjQwNTAzMTYwMjMzWjAzMTEwLwYDVQQD Eyg5Y2M1M2Y4YTBjMGUzMTUzOGE1ZGQzODFkNjIxYmUyMWM1YjkzMzZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0skcJckYQCu4ebV6vovItNyruLdv Tqf3iySNQ6iIVrIne0nplvvhD4Rg1NUeT4ey99Z1IgSikaUze0ih0t+lw0u+tv9v 48SqxIEApOw5mCYyC3NNYe/huDJQcD1i0DCO5/c5g9egNuWA41lu50BHI9tKAbFK FYMZi2LxswpJTqN0BzAb1AyduaPCk+AxSAmuI70HnH0WqyvFHp5qJuoxlsdXIqyj y8Kt9mCgxUlqWTPLcZmAXmua8l6LKMZcKWm2g5eGCi/ZHA3jqchC9NK208mYEi2D sXsWUEcI06IPovRQC72GUWKqGHM4jOHolciixBOjWY44OXD89NmhbJTrLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJzFP4oMDjFTil3TgdYhviHFuTNsMB8GA1UdIwQY MBaAFPBSESjPY0qmr6fvUtUx8/zVVij5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUt ZTQ0MTliNjQyMTJlLzEvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUtZTQ0MTliNjQyMTJl LzEvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE19VM9gy SFotFMdd6fUn9Vh7BNP3KeTr+OcTZ2KAfRlcQwuJbZiTD7Z0aUdmIFhnJRcOS6mQ P+HPp1kx+3E83cErmb0+X2lnZHXJBTyrW2vmlQX4T9l7g2ogphif3oY9731qPS0Q QXt9LaEl/MhnM6yjLOAvIVBXROHYcV0VceW1y20uEQTdkc5ZA+oAoCE2qsNgQ/zm qQPgPHfBMDaJ8m9EzFLZy2sQOK8SnmHOb0hfW3NNpuQisDmcDDc+CUiZHGnlweIV SsttdS0Co7mBYKfYzSLXIXKdqbJFAkwvjxNdEwbssiSuWDttdd28AEYzqD7WBrnh MrutUwEpHckBdg== -----END CERTIFICATE-----Generated at Fri May 3 03:15:11 2024 by rpki-client on console-fra.rpki-client.org