$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft File: sa8S9cp1ySKkql2stJwEqTI39O0.mft (raw, json) Hash identifier: /Arf+b2GUkLdjVDi8HUDA7iEdyH0GtddTy//PiDLNvI= Subject key identifier: C5:F6:5C:E5:7F:F2:64:92:03:D8:5D:82:5D:B6:33:E8:C0:7F:64:C2 Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Certificate serial: 01902ACB3245AF49D19E9252AAA38D6EDDE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft Manifest number: 0DCC Signing time: Tue 18 Jun 2024 10:01:17 +0000 Manifest this update: Tue 18 Jun 2024 10:01:17 +0000 Manifest next update: Wed 19 Jun 2024 10:01:17 +0000 Files and hashes: 1: 02hc6JgWitJscQKFhogl4dZ92hc.roa (hash: pzOSGio3pWFX43S1mVvEXTZ8dGupKg0aN02/TVWGRTg=) 2: CO_0VE__NsDRRWgM22BpYj_P-2w.roa (hash: 9L7dPXppBRKZPIfj81oZDhRpj2/gGSzU+lLa3XMak6w=) 3: MaJbxX7lvgTSe8VYrkuHEDEjJ1c.roa (hash: nMkrejMTQudZWMPjWuiNB0rg0Bbk9m7eiUt5bCoHuXs=) 4: Q4aKzuKQcgX50MlBztxa6HU46jA.roa (hash: cbl/cso0tWlmSWlEs785PG36HyXKWDL4j4gIFNwLAGU=) 5: SEIOQ4mdZb_iSheEz1F1Bg-CtNU.roa (hash: 7Ej2rU0OZFZbGapajcLDwx0yeguHS93IaKcHLxYpbQw=) 6: _oUr7Rhxmgrw_t3mq_4wlq2-Ibo.roa (hash: nZbQ0HhgfysXLW0z9jWk6JcbyV2Nx7drLm7xDQQ8XOo=) 7: bhoYkN3pKblGPjYnNMM28QUpz4E.roa (hash: E28KJizivFfnHroqCGrPqW9LQVkUzuh2UOiIY+1nRsA=) 8: dL0XWuMWe_2-McofnGQYe3IpEEY.roa (hash: qG37sZz9RReQrTdvUDPZTM4LSjg11839PWfzjmfw/Cg=) 9: ddaqNnwzkA1UVhffHrdWE-QahMA.roa (hash: q8d1zIYgc9JeMgQqho+q2BFsy8ShX6RWpD5+PpGwVqA=) 10: heoykRXl7IUhde8E857nSji3u8Y.roa (hash: K3rCW5Dcu1FrDJY1HYWZW2W6XyZvEgLsxN88xAmRMuI=) 11: sa8S9cp1ySKkql2stJwEqTI39O0.crl (hash: nKSuhopHbCxCOUXcBu5lSmtAPvPtRjGdavzyaDaTHzg=) 12: tLAu2MNg_WCsJYkDt3cdfv_RIOY.roa (hash: GpIhjEUiDfDzAVFGrf7Oe+IL3e9PH3VSKFtDiC6V3ow=) 13: xfxwGRtmBoGNmwOOyh5eFNYPfXY.roa (hash: AyiP/FF2qci3BxbNXp3IVhC0+1I+8uj6Wg87qOzx0Zo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 19 Jun 2024 07:33:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:90:2a:cb:32:45:af:49:d1:9e:92:52:aa:a3:8d:6e:dd:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Validity Not Before: Jun 18 10:01:17 2024 GMT Not After : Jun 19 10:01:17 2024 GMT Subject: CN=c5f65ce57ff2649203d85d825db633e8c07f64c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:26:0b:39:6b:60:c7:71:c2:16:a1:b3:73:d0: cc:39:ea:57:90:47:fc:f2:90:a9:08:a3:c0:b5:77: ba:43:e8:87:86:4c:b3:59:7f:be:ed:02:c4:ae:7c: 25:48:38:43:e8:ce:ea:ac:36:a5:d5:83:25:5a:9a: 6d:2f:a9:96:63:54:51:95:f3:9d:05:f2:a6:9b:45: 74:17:29:66:e3:ac:f5:22:d4:d5:50:be:f4:76:cb: d6:e0:f6:89:ce:ab:3f:e3:cf:1e:aa:c2:e3:d9:af: 78:ce:de:4b:4f:27:3f:31:44:2b:0b:0e:fa:6b:a8: 1f:cd:ea:32:6f:79:a1:f9:da:70:ef:02:73:29:38: e5:3e:72:d7:53:99:1b:45:d9:40:8a:4a:0f:e9:e8: 4d:73:b3:a4:6f:0f:e5:0b:32:7d:2a:3f:96:a1:7b: bf:43:7f:93:67:c6:b3:4d:8f:e3:de:9d:6c:db:98: a8:7a:b2:cf:2b:48:01:a6:f7:35:db:ca:30:66:36: 9f:9e:97:b7:77:9f:31:d6:d3:6b:24:78:8e:28:f5: c2:8f:86:f6:de:91:04:75:16:44:4c:4f:72:d9:ef: 62:06:49:6f:41:96:9c:9a:d7:49:3f:0a:fa:0b:89: f5:bc:3b:52:d4:d5:44:d6:5c:d1:a0:35:a5:85:f8: 34:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:F6:5C:E5:7F:F2:64:92:03:D8:5D:82:5D:B6:33:E8:C0:7F:64:C2 X509v3 Authority Key Identifier: keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:bd:76:35:40:21:74:0e:ef:b8:9e:4e:01:37:a2:40:aa:d8: 86:fe:ee:b9:68:c4:ab:6e:73:63:6c:3d:5a:e7:8e:79:6f:ae: e9:bf:e6:26:8a:9f:1b:f2:09:29:13:68:b8:33:a3:98:a7:91: a2:b9:10:0c:98:b9:bd:f9:e5:c9:30:76:c9:51:85:63:73:46: a0:15:ae:77:fa:74:6f:4f:e6:5b:56:30:fb:79:ae:fb:9b:8b: 25:df:ec:f6:b6:8c:59:04:e5:0e:b0:5a:a4:1d:43:7a:78:fd: 12:c9:5a:e0:f9:de:4e:03:6b:97:e7:7a:d2:6d:61:ce:d9:57: 02:51:07:5f:99:70:ac:d4:95:d8:86:35:ee:c1:e3:8d:c0:10: 80:3e:0d:6c:c1:19:97:65:22:ce:75:cd:b3:f8:a6:c5:90:f2: 3c:3e:cf:04:33:ff:88:4f:45:f5:35:49:4b:d8:cf:96:e2:59: ff:c8:d8:9c:2f:3a:3c:08:45:6b:64:3b:a0:3f:28:cd:50:15: 9d:0d:0d:e2:20:69:f7:fd:bb:86:c6:ea:c4:3f:68:59:16:ba: a0:8d:e9:b8:c9:15:69:33:79:79:1b:dc:ea:99:d3:4d:5a:98: 9a:5f:19:34:98:45:f4:ea:ce:f0:6b:df:4a:a2:56:11:b1:7b: 9f:3c:81:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZAqyzJFr0nRnpJSqqONbt3gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYWYxMmY1Y2E3NWM5MjJhNGFhNWRhY2I0OWMwNGE5MzIz N2Y0ZWQwHhcNMjQwNjE4MTAwMTE3WhcNMjQwNjE5MTAwMTE3WjAzMTEwLwYDVQQD EyhjNWY2NWNlNTdmZjI2NDkyMDNkODVkODI1ZGI2MzNlOGMwN2Y2NGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryYLOWtgx3HCFqGzc9DMOepXkEf8 8pCpCKPAtXe6Q+iHhkyzWX++7QLErnwlSDhD6M7qrDal1YMlWpptL6mWY1RRlfOd BfKmm0V0Fylm46z1ItTVUL70dsvW4PaJzqs/488eqsLj2a94zt5LTyc/MUQrCw76 a6gfzeoyb3mh+dpw7wJzKTjlPnLXU5kbRdlAikoP6ehNc7Okbw/lCzJ9Kj+WoXu/ Q3+TZ8azTY/j3p1s25ioerLPK0gBpvc128owZjafnpe3d58x1tNrJHiOKPXCj4b2 3pEEdRZETE9y2e9iBklvQZacmtdJPwr6C4n1vDtS1NVE1lzRoDWlhfg0rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMX2XOV/8mSSA9hdgl22M+jAf2TCMB8GA1UdIwQY MBaAFLGvEvXKdckipKpdrLScBKkyN/TtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUt NTc2MGVmYmNjNjU0LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUtNTc2MGVmYmNjNjU0 LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJr12NUAh dA7vuJ5OATeiQKrYhv7uuWjEq25zY2w9WueOeW+u6b/mJoqfG/IJKRNouDOjmKeR orkQDJi5vfnlyTB2yVGFY3NGoBWud/p0b0/mW1Yw+3mu+5uLJd/s9raMWQTlDrBa pB1Denj9Esla4PneTgNrl+d60m1hztlXAlEHX5lwrNSV2IY17sHjjcAQgD4NbMEZ l2UiznXNs/imxZDyPD7PBDP/iE9F9TVJS9jPluJZ/8jYnC86PAhFa2Q7oD8ozVAV nQ0N4iBp9/27hsbqxD9oWRa6oI3puMkVaTN5eRvc6pnTTVqYml8ZNJhF9OrO8Gvf SqJWEbF7nzyBnw== -----END CERTIFICATE-----Generated at Tue Jun 18 12:46:27 2024 by rpki-client on console-fra.rpki-client.org