$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft File: q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft (raw, json) Hash identifier: FGhmaoCCTrEuaFmrwIsveC70Kx45lUmJ3p4+hA04Eic= Subject key identifier: 2C:8F:0A:8D:26:01:FD:4F:30:C6:AE:45:FA:7D:40:F8:81:63:3F:35 Authority key identifier: AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D Certificate issuer: /CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d Certificate serial: 018F5EF1F1FD7B2C496A607B6CB058C0D468 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft Manifest number: 11B2 Signing time: Thu 09 May 2024 20:01:05 +0000 Manifest this update: Thu 09 May 2024 20:01:05 +0000 Manifest next update: Fri 10 May 2024 20:01:05 +0000 Files and hashes: 1: 1_sC_dFMZeLIllxzzCom8m3oC24.roa (hash: hHyEwXOx5apAecqLil1HW8G3SfPzzCRgg7SGbki0S9c=) 2: 2QHJMnD_CZXNF2xm0bSriUiy2qA.roa (hash: EpHU42YHLpSSkW9YJtR4rnlT2zInKhEwZODAU7+VOeI=) 3: 3xK9VYzR7Qf_MPw8G-5ZmcUQh90.roa (hash: 1+5KIgdBDp0KcfrgcX31GjPnPlfrCGgRodvJ/c8jSHs=) 4: 4dFs79qfVextAiqWefRXmJI7b-8.roa (hash: M/uYSiFjGrCOuNv6cFb6eOrQTMXIGgexHRq4Fvdgitk=) 5: AQsEHnFCH5rVPWcKh2RBIVIA01Q.roa (hash: 4390srgu6UL/kkGnudRxQh09f3MbGXUhbfEY8FI2pjw=) 6: RBQ9MooZ3uLdaSdFo8ZLS8WxqBY.roa (hash: hhh/LUJEjxbXWhqOnDhkYvA8lBls3nVgGCYXrKnFbIM=) 7: _DNu35fOuTEpmLweKNXRez9gVzo.roa (hash: G2HzbBiq0H79ScFjZ8OiL/jcb9g85Hu35rpS9IJRy9Q=) 8: asMeuVAxfFSHsGBRv1USFv9iKo4.roa (hash: 3sUJ1OnR6MPAPiN5/s3pm37f1wpveBiHrBAOXjYIMiE=) 9: i_R5NFdbWeknkgZLuOms5ToxkZI.roa (hash: X7NAFthP8vpxsvPjpduIMTMaJ1JJp7ldwbSJtILzLEs=) 10: isGjn6X8-nPwbIuk48gKuialh5Y.roa (hash: SLWkC6stP0gqahDyhCTwnSZRJj4mMC42nKqAFv14EzQ=) 11: q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl (hash: 2M9CX4bBh7UgtaUz6Xw0tAmj6eNV/46dKzXpIMkg1tI=) 12: tZYGOeJ7aJqvKIYPUrcLi4O_Kcw.roa (hash: KvHR5P0hooFnukInlmlb6NP0DWOtAGeHIbmSGVZ8HOc=) 13: ti4TdK-W7cb6DV9nQZPhBgkSuig.roa (hash: EQf1aUZ7MxAK/usKrRI25x6HzRZF5Wk5yUaSJrdwVAk=) 14: zj094OV_qBK0jWBO9tCRsVpw3kk.roa (hash: LHQcst11InOMumWMXpg6McjHu4Bnz6c/YOOxyo4X8KE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 10 May 2024 20:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:5e:f1:f1:fd:7b:2c:49:6a:60:7b:6c:b0:58:c0:d4:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d Validity Not Before: May 9 20:01:05 2024 GMT Not After : May 10 20:01:05 2024 GMT Subject: CN=2c8f0a8d2601fd4f30c6ae45fa7d40f881633f35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b5:40:bb:e4:6d:f5:b3:e1:92:ed:b9:ae:4d: f9:91:c2:67:af:58:28:4c:2f:93:03:f1:eb:11:0a: 53:83:0e:c5:2b:f9:77:b3:65:3d:a6:3c:9e:fd:5d: fc:ba:fa:be:c4:22:72:a2:f5:13:58:e3:88:99:84: d1:99:fb:0e:7e:58:e5:b2:81:e1:80:5f:a5:1f:b9: 84:d5:45:a9:6f:56:90:59:eb:69:9e:b3:34:34:7f: dc:a8:52:e2:a2:75:3e:d0:00:ea:be:aa:31:ea:a0: 03:1d:07:7b:91:f9:65:6f:ae:f8:88:4b:c3:ee:cd: bb:9e:9d:e5:bf:54:00:8a:71:9e:04:bd:bd:4f:ea: 0e:d2:8b:ec:48:ed:5b:96:cf:3b:9b:20:cd:6f:b5: 0c:cd:25:18:ce:f3:4c:08:0e:27:4a:7d:9b:74:80: 7d:51:9e:cc:4b:77:16:86:1e:80:95:75:99:1d:88: c0:03:21:88:d4:82:5b:ec:16:f2:8f:91:ce:c0:29: 88:77:99:7d:6d:2c:4c:36:48:b7:f5:54:ca:e6:eb: bb:66:37:ca:c4:87:be:75:57:a9:a4:f2:8a:bd:c6: e0:8e:52:22:7c:e7:ec:c1:ab:65:8e:98:e0:1a:f8: 82:88:8b:fa:06:ac:45:5f:65:a9:d0:a2:51:9e:7f: 91:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:8F:0A:8D:26:01:FD:4F:30:C6:AE:45:FA:7D:40:F8:81:63:3F:35 X509v3 Authority Key Identifier: keyid:AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:1e:c4:2b:be:c8:d4:db:ac:94:3e:5a:2c:ca:11:f9:6b:bc: 02:16:fa:b0:ee:7e:28:a9:ee:b3:42:0e:04:6b:be:5e:bc:15: ee:f3:a4:14:c3:e3:4d:35:c8:80:c7:b4:fa:da:8e:17:ae:b9: 21:c1:2e:2d:d8:01:16:72:ca:0e:fd:33:c5:06:80:67:74:6e: 96:2a:fc:8c:d3:cd:97:c3:7b:43:c8:c6:d3:7c:da:55:0e:ec: 44:b4:b2:65:6e:b4:df:1c:d9:c3:73:6a:04:2a:a9:ed:36:c2: 0e:79:c4:b5:8e:6b:7a:04:03:b7:d2:fd:53:81:76:29:09:e6: 18:a4:d5:23:01:d4:c1:fa:b1:05:4b:ff:03:e2:2e:bf:b1:91: 07:1a:38:22:b6:ea:47:50:46:cd:6b:40:9b:ce:e4:a7:57:81: b1:3b:cc:48:10:b6:1e:88:f4:24:95:d6:7c:ce:f3:fa:f1:89: 54:c3:09:c8:91:95:59:88:8a:f7:00:dc:1d:e6:33:88:03:fb: 34:58:df:a9:ff:a1:8a:74:37:ae:3d:d7:59:9e:81:87:23:14: d3:07:62:b5:c8:96:8f:55:58:d7:83:04:34:f4:70:c2:62:a5: 51:6d:a9:e8:cc:9f:46:cd:bb:14:7b:21:59:a6:73:88:7f:c7: b3:ef:9c:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY9e8fH9eyxJamB7bLBYwNRoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiNzFlOWIxM2Y1YzMzOWE1ODY5MmVlYWJlNzJlYWE0MDZi YmJkN2QwHhcNMjQwNTA5MjAwMTA1WhcNMjQwNTEwMjAwMTA1WjAzMTEwLwYDVQQD EygyYzhmMGE4ZDI2MDFmZDRmMzBjNmFlNDVmYTdkNDBmODgxNjMzZjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrVAu+Rt9bPhku25rk35kcJnr1go TC+TA/HrEQpTgw7FK/l3s2U9pjye/V38uvq+xCJyovUTWOOImYTRmfsOfljlsoHh gF+lH7mE1UWpb1aQWetpnrM0NH/cqFLionU+0ADqvqox6qADHQd7kfllb674iEvD 7s27np3lv1QAinGeBL29T+oO0ovsSO1bls87myDNb7UMzSUYzvNMCA4nSn2bdIB9 UZ7MS3cWhh6AlXWZHYjAAyGI1IJb7Bbyj5HOwCmId5l9bSxMNki39VTK5uu7ZjfK xIe+dVeppPKKvcbgjlIifOfswatljpjgGviCiIv6BqxFX2Wp0KJRnn+RNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCyPCo0mAf1PMMauRfp9QPiBYz81MB8GA1UdIwQY MBaAFKtx6bE/XDOaWGku6r5y6qQGu719MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTNIcHNUOWNNNXBZYVM3cXZuTHFwQWE3dlgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82YmEzOWMtZWYxZC00ZDQ4LTk4MmIt Y2Y0YjkwMDk5N2EwLzEvcTNIcHNUOWNNNXBZYVM3cXZuTHFwQWE3dlgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS82YmEzOWMtZWYxZC00ZDQ4LTk4MmItY2Y0YjkwMDk5N2Ew LzEvcTNIcHNUOWNNNXBZYVM3cXZuTHFwQWE3dlgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOR7EK77I 1NuslD5aLMoR+Wu8Ahb6sO5+KKnus0IOBGu+XrwV7vOkFMPjTTXIgMe0+tqOF665 IcEuLdgBFnLKDv0zxQaAZ3Rulir8jNPNl8N7Q8jG03zaVQ7sRLSyZW603xzZw3Nq BCqp7TbCDnnEtY5regQDt9L9U4F2KQnmGKTVIwHUwfqxBUv/A+Iuv7GRBxo4Irbq R1BGzWtAm87kp1eBsTvMSBC2Hoj0JJXWfM7z+vGJVMMJyJGVWYiK9wDcHeYziAP7 NFjfqf+hinQ3rj3XWZ6BhyMU0wditciWj1VY14MENPRwwmKlUW2p6MyfRs27FHsh WaZziH/Hs++cpg== -----END CERTIFICATE-----Generated at Fri May 10 02:05:00 2024 by rpki-client on console-fra.rpki-client.org