$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft File: _97EpGpubk-aktC6Lgs6tWWL4b0.mft (raw, json) Hash identifier: 2hWrX8YkHEjQeYKLhYNC4FZsSE7pIuk1lan+Z2AB6+Q= Subject key identifier: EA:7C:41:A0:A4:09:F6:D6:8D:B2:80:E5:57:08:93:84:7F:34:A7:B7 Authority key identifier: FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD Certificate issuer: /CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd Certificate serial: 018F88249573179CE5C97A3CA2740A1831E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft Manifest number: 1186 Signing time: Fri 17 May 2024 20:00:49 +0000 Manifest this update: Fri 17 May 2024 20:00:49 +0000 Manifest next update: Sat 18 May 2024 20:00:49 +0000 Files and hashes: 1: 4Y2NNYeHWAWVaPMmiN5WIBOeTsM.roa (hash: vjoEV1ogvv/WpFnv5AnJxorcEUvTJvyMT2+E2P24tEU=) 2: 6oaKMr3WKw8ddnergIVXX7vsJnk.roa (hash: qBVdIVNN3mpTtwcxTG8W5/u/eFE9MMRv2aAppDV564o=) 3: C764ItRubMNCygN9jLLn8cimYJI.roa (hash: MAVfo1Weh01cL7dUSoRbJDpN3DStJUt9Ot5pMN+a3Q4=) 4: IOSllibqV1VAtKi4pcCBq6THH8Y.roa (hash: vQbnF2tURsvf7YkEYySUaBeQjumx095cllV+EVDhqdg=) 5: M0_vTS3zqHPW1i2kI__5N6549rs.roa (hash: Q3gQMOCiUL/p128tI+XIwI0qbVcdZfJ7UGnk3omt9Yw=) 6: Wz2y-O4BzW9kTTdxZpgus2cFU8A.roa (hash: 7HGW3d65+j2qzszlKD5caBSMaYEtANH6rFAT2aLD1Eg=) 7: _97EpGpubk-aktC6Lgs6tWWL4b0.crl (hash: KTAcz+Bn81fcaVlhQhoT+yXvzHPub80OSjd8W3bKI/M=) 8: a8RGwXdWoP6oFOEljBLA8oMBxmw.roa (hash: YLAaWYEMgueerdKKKNTs1ygUFG+W5J2pHFlfkNW6UAc=) 9: fWtzFGk8X8TPZKlaxbRkRZL5qX0.roa (hash: kczb4JsHB1+Xk+MuEf0cxa8ff9v0betAGUVhnpBGMJI=) 10: p1oPG2R_x0tSkl7GGzxwdEe8ttc.roa (hash: m2VeBGnjx5sRxe3FFBhIlnjgovGqSzsKC7KSiOexGTk=) 11: pUZzOdFBaRARHJnR9iae0-Dxc2I.roa (hash: BoNAybL6zuX9fIRbPxyP1YClHa9wb3D7hoQcPZS8UBc=) 12: yRY6aoqE-MS1qh53frCxFRB8mkQ.roa (hash: /4REbrWyWkmYFL/RmI1Pd9AyHisEIvREyaoktzqzGGo=) 13: ywO3inH8uRbqObf-KXhS8jV4gBs.roa (hash: p4RDTBd368w3k9IjoCJ9+5SbvsmClt83TVMbl2FBivw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 May 2024 17:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:88:24:95:73:17:9c:e5:c9:7a:3c:a2:74:0a:18:31:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd Validity Not Before: May 17 20:00:49 2024 GMT Not After : May 18 20:00:49 2024 GMT Subject: CN=ea7c41a0a409f6d68db280e5570893847f34a7b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:0b:51:62:7b:18:46:5a:0e:6d:a2:b8:d5:b8: 29:a0:5e:ff:04:a3:0e:fd:d0:b3:7e:14:4c:ea:14: 6b:7c:6a:7c:73:45:32:b0:4c:2d:2f:23:e0:49:60: 33:45:f6:63:39:50:2e:fd:6f:c7:1f:98:75:72:12: db:73:10:4e:4f:c8:65:f0:74:69:64:14:3b:6c:fd: 60:96:9d:af:4f:99:eb:db:61:24:25:77:e2:32:6b: 2d:f9:5b:f8:3c:f5:de:a2:71:72:d1:ad:1f:ed:0b: b0:32:87:4d:53:fd:28:b9:94:e8:47:cc:06:f5:1b: a2:5f:32:6b:4b:c4:af:96:d8:d9:25:0c:f9:cb:56: a6:4b:df:cd:de:5c:f5:53:a3:b6:28:31:03:b7:c6: 8a:a9:61:01:ed:50:52:81:3a:2d:bd:cb:0e:97:1e: 5d:fd:b8:e1:18:ae:05:c6:1a:4a:f3:2d:4f:8c:ed: 9f:a3:08:8b:17:52:71:bd:78:0c:dc:a5:b4:ea:37: 9b:6c:50:ac:38:cf:39:8d:ae:ac:38:a5:ad:16:8c: 59:a2:0a:21:de:13:2a:b7:25:d4:a5:02:23:bf:9a: ef:fb:37:bb:ca:da:6a:d5:b4:97:59:a1:49:04:01: 1c:92:24:c3:99:59:1d:6d:7e:f8:42:7d:19:34:6e: 7c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:7C:41:A0:A4:09:F6:D6:8D:B2:80:E5:57:08:93:84:7F:34:A7:B7 X509v3 Authority Key Identifier: keyid:FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:a3:47:54:4f:e3:b2:93:5d:f0:a9:12:34:f8:ee:d3:a0:38: 09:8b:02:a3:62:47:b7:6a:1c:08:40:9d:25:4a:c3:57:5c:3b: 3f:a8:94:f1:7b:d4:5c:f4:78:35:1c:f8:1c:5e:58:fe:5a:b5: bb:69:24:cf:89:f8:b7:60:41:45:d9:05:13:53:4f:71:c9:42: 22:5d:e3:0e:f3:26:6c:38:fc:34:fe:06:2b:42:d1:d0:c7:a4: e0:93:6a:07:74:21:1e:ba:d3:df:b4:c7:d3:b2:d5:ef:5a:4d: 5a:22:94:fa:1b:94:50:03:ba:0e:f4:cd:1a:ff:15:ba:84:02: f3:c3:19:0d:63:73:80:c9:99:2b:2c:59:ba:78:96:30:c8:30: ef:9a:6a:ef:f3:bd:4c:f5:7f:6d:dd:c1:a1:18:3e:a1:d0:e4: fd:5b:bb:8c:7d:4c:e3:1b:6c:7b:f3:13:d6:96:cc:95:82:75: e1:50:a5:34:ab:d2:ba:59:36:e1:9c:42:1c:13:66:dd:c8:33: 16:64:ef:e4:1b:e9:76:3b:1b:e4:fd:40:56:ec:41:f9:b5:f9: 19:40:c7:69:38:c8:e6:10:47:ef:9e:65:23:f9:d3:03:85:ad: e3:2c:4b:ad:7d:5d:79:d7:71:7c:cf:5b:c9:c4:71:f4:6e:d4: eb:a7:d3:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY+IJJVzF5zlyXo8onQKGDHmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZGVjNGE0NmE2ZTZlNGY5YTkyZDBiYTJlMGIzYWI1NjU4 YmUxYmQwHhcNMjQwNTE3MjAwMDQ5WhcNMjQwNTE4MjAwMDQ5WjAzMTEwLwYDVQQD EyhlYTdjNDFhMGE0MDlmNmQ2OGRiMjgwZTU1NzA4OTM4NDdmMzRhN2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQtRYnsYRloObaK41bgpoF7/BKMO /dCzfhRM6hRrfGp8c0UysEwtLyPgSWAzRfZjOVAu/W/HH5h1chLbcxBOT8hl8HRp ZBQ7bP1glp2vT5nr22EkJXfiMmst+Vv4PPXeonFy0a0f7QuwModNU/0ouZToR8wG 9RuiXzJrS8SvltjZJQz5y1amS9/N3lz1U6O2KDEDt8aKqWEB7VBSgTotvcsOlx5d /bjhGK4FxhpK8y1PjO2fowiLF1JxvXgM3KW06jebbFCsOM85ja6sOKWtFoxZogoh 3hMqtyXUpQIjv5rv+ze7ytpq1bSXWaFJBAEckiTDmVkdbX74Qn0ZNG58XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOp8QaCkCfbWjbKA5VcIk4R/NKe3MB8GA1UdIwQY MBaAFP/exKRqbm5PmpLQui4LOrVli+G9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEt N2U4YzZkNGQ5YmVmLzEvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEtN2U4YzZkNGQ5YmVm LzEvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARKNHVE/j spNd8KkSNPju06A4CYsCo2JHt2ocCECdJUrDV1w7P6iU8XvUXPR4NRz4HF5Y/lq1 u2kkz4n4t2BBRdkFE1NPcclCIl3jDvMmbDj8NP4GK0LR0Mek4JNqB3QhHrrT37TH 07LV71pNWiKU+huUUAO6DvTNGv8VuoQC88MZDWNzgMmZKyxZuniWMMgw75pq7/O9 TPV/bd3BoRg+odDk/Vu7jH1M4xtse/MT1pbMlYJ14VClNKvSulk24ZxCHBNm3cgz FmTv5Bvpdjsb5P1AVuxB+bX5GUDHaTjI5hBH755lI/nTA4Wt4yxLrX1deddxfM9b ycRx9G7U66fTTw== -----END CERTIFICATE-----Generated at Sat May 18 00:27:42 2024 by rpki-client on console-fra.rpki-client.org