$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft File: k2d9fLknHONhJW6YM8x7FP0CPr4.mft (raw, json) Hash identifier: hXfUf9Ry/yihJVRxJyrxGnGNddJYlXP9oV1xeLv1350= Subject key identifier: AA:CE:87:02:F8:D7:A0:B2:3E:3A:30:45:4C:F0:BB:EB:6B:2D:AB:7F Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Certificate serial: 018F60AA103CDD2B0066F3217EF25AF8934B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft Manifest number: 11C4 Signing time: Fri 10 May 2024 04:01:48 +0000 Manifest this update: Fri 10 May 2024 04:01:48 +0000 Manifest next update: Sat 11 May 2024 04:01:48 +0000 Files and hashes: 1: 6HsXin8nvk0w429rw1_4Tsb_Cro.roa (hash: W9ZJ/K+6i7LEhuNVMl+1WINcgeNyr68g7tVCJ8KSzCo=) 2: 8oP_VAWoP11v3BGXZ2emNLBjtgU.roa (hash: cbssEtp4UtpQjlAVZ/fRAqVLmrZnkVhlhW4BvEAMpIM=) 3: 9ArX02VU-OjOKzCnPi3PCxujkWA.roa (hash: OkXq1ooxriYnHmUI9P6M3zr6ZvzIXQfTxpyQBMpMwSI=) 4: BU7gSG7A6EzIMXPLa3s2N0S6P-Q.roa (hash: fQY60TbH6/mn3uDTNoPxNyQWhHO89rO6WtI9JTS7G34=) 5: Ccl4SNNK1NuqYyS-WlIt-OQltDI.roa (hash: Fyt9neRKO6R+TN/cs7jV5grf4d6U+KjwTpbt8CnYpbg=) 6: G8xhcV65ucF8VQ4zyXlNvIY7WaU.roa (hash: mYzuxRcPEzAV1Y7eeW3bqRjJh5Ug4YK+a0AsB+agIsA=) 7: GFO9e3G0qnOC-B2cLfOes1NGI_I.roa (hash: CZuKGqThhgWg/xSsX3rT4vQvQnpCP0qaYIEiUL0pKa0=) 8: Ml-s93sUGqqtpvrV21mXs_KcPPg.roa (hash: 08/vf4r20ixglaTs9NoUeBNOVscYG14VUlOa2pZY+RM=) 9: Vh5Uoke6-4iQT89_Mir46TvCxEI.roa (hash: NackWAXM0RGNSvzob3gWsVQbEP8tqjuLgYIVkaZo2yY=) 10: VhPSTSBOgtIHUZf9s-YyFv4T6_w.roa (hash: TG2G8OFQRXRVHv6FrThOeEO4+fMK3bSevDqVIvvp4CQ=) 11: WTFOClVSmVHHMTP1UyV9FQUSUsI.roa (hash: hKpi+SixN6dXRMEI0Bx3UYdUu6ua49sBAEOb2WgIok0=) 12: XPlQEBKPlrAUVyCtDPCRVfP7rLU.roa (hash: TV+6JsgLNUtz6NjpYJuN8806pmKEtFAYFP1qLJF1iDU=) 13: bXh_eEMCs7I31OeuZeL0Inq4a50.roa (hash: XHgZ7CG2TlU4b0mTXyipC45fHWsY8ofrlAYh4vmnGq0=) 14: k2d9fLknHONhJW6YM8x7FP0CPr4.crl (hash: +tOAOObpxelkkHpB97VeQd9uRU7KEA6HQWhq2kyohRU=) 15: l6PESaXru3XwZnhL3QEUM6POesM.roa (hash: 86jpAOalTeFF6dUqf5NNxmCa6QMbP1rBcLnDET395Xk=) 16: mpBlYx9ElBJbDAb9JuJ0w0KFbNg.roa (hash: h3cyDYHhxIS2iJVnV/DGZx5iP7DcU+Hov/FmbtZ0qaw=) 17: pMy17ooA24-d04K1qk0u5HggW6Y.roa (hash: 1X5BhhMkEtw1s43TfbUlhyUV9u6Ai+n8b/JYykqVyf4=) 18: s5Lz7uokRVJ_IZ6nYTkz_QoLMy8.roa (hash: PUS8wQG57NyBpbqrlY9m4knbPzDEzrzmSFM7272cMaQ=) 19: t_B_ZIIj3xsBbs-h-d6F9BueiA8.roa (hash: so4iW6qxFxX1sfnyzYBYSlz0plUvecnBqz1Kz3uVfhA=) 20: uMr62u1xxUTJx89KjzFYEYK3J3s.roa (hash: xgUR3xLRU+VU2FnoH3TYMioZtgvOCOdmzzatLykV86g=) 21: uTVeSBU-JOFb6Q0-sM5TOe4bvU0.roa (hash: fEn+wbI3+GlJaj/V8W7cDHMTLISR1Tr8Cr52zOXm5Q8=) 22: vP9Td1ZEUHX74eZZo8Kn2Or7mjg.roa (hash: XiqL6aHd9FQouBl44BB/rofyzh/8nuPHWVvGXnODFbU=) 23: w6iAoBrih5Qj4q5MYVKIWej5fY0.roa (hash: IM8saOwnpnuNES4PfXQKCvmU5kzk9VaQ0NBlO1QUmu0=) 24: xI4YCgzkvMH1my9gUpACgdiC_es.roa (hash: PMoqhtq4PaBGXW9IeCXNdfIc4BDqHqAqXQRm3a/Mfq4=) 25: xXxdrSvKqTu4bYcLyLyP14iUiy0.roa (hash: IcwcHbi7zXCWkl0+eLNlsudxyzDpEqqAD0DRyZ4NU6Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 May 2024 04:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:60:aa:10:3c:dd:2b:00:66:f3:21:7e:f2:5a:f8:93:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Validity Not Before: May 10 04:01:48 2024 GMT Not After : May 11 04:01:48 2024 GMT Subject: CN=aace8702f8d7a0b23e3a30454cf0bbeb6b2dab7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:37:ef:f2:de:4f:0e:e3:32:ca:07:55:40:55: 6b:25:39:38:dd:78:34:44:56:d5:13:01:d4:af:20: 42:d2:b9:fa:55:1b:09:aa:43:6c:c8:fc:85:c3:cc: c4:bf:46:2a:d9:af:f1:77:4c:b3:32:e8:e5:49:de: 1c:db:de:08:6a:a5:1c:7b:1c:e2:f7:62:39:1e:94: 39:84:9b:f7:6f:5b:62:16:80:8a:d2:dd:d8:3c:7a: 7b:91:1e:47:d5:c8:c0:13:d5:3d:9c:a5:8b:7c:19: 53:fd:85:7e:05:02:85:b1:15:f3:4f:b3:63:05:6e: 50:47:1f:e7:d4:5d:f9:f8:a5:54:23:a6:71:48:43: cd:b4:0a:f6:85:c8:01:4f:46:ba:5c:82:07:57:fe: 50:a2:cc:8d:1a:a1:d0:b7:0c:9f:f7:1f:4d:d4:95: 5d:11:27:47:53:02:34:5e:09:d8:97:41:76:60:32: 18:98:dd:ca:33:14:d4:34:40:6f:7a:d8:16:4b:1f: f7:52:40:d9:64:c3:b8:d5:a5:47:44:5e:91:bd:57: 15:b8:ec:d6:a5:c4:61:7f:aa:ee:14:95:a4:69:93: ed:54:4e:eb:83:60:72:2c:33:43:e0:c4:c9:6a:9d: d2:21:67:c8:d4:75:26:91:21:60:f6:1f:ce:e1:9e: 2f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:CE:87:02:F8:D7:A0:B2:3E:3A:30:45:4C:F0:BB:EB:6B:2D:AB:7F X509v3 Authority Key Identifier: keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:39:97:cf:ff:c7:a8:b5:6c:ef:f6:e6:30:56:03:88:86:2e: 24:88:0a:27:76:66:31:b7:9b:68:f4:11:33:4e:80:5b:0e:88: d2:8f:f0:44:ff:cd:fb:0a:63:e5:fb:0c:ec:ee:10:87:05:ec: dc:29:1d:ff:d7:c4:91:96:ad:5d:54:48:0e:96:17:f4:0f:10: 5a:8f:19:60:13:d7:c3:de:23:39:ae:45:13:23:7f:3a:a9:c6: db:91:3a:fb:bc:32:e5:18:c9:6d:9b:d3:87:c1:ad:8c:d4:5d: 15:35:ac:80:55:46:7a:62:b1:f5:36:de:5e:7f:5b:38:96:e3: a4:f6:db:8a:c8:95:09:35:20:2e:e8:4c:49:18:37:ff:b0:81: 11:76:af:3d:8c:28:c8:9e:4a:92:fa:26:e4:29:16:d7:17:47: ba:ca:66:24:a3:b1:2b:3e:8b:01:71:de:63:dc:97:15:40:e1: a2:7d:56:f1:88:5b:cf:64:ed:ac:ba:0c:ed:0c:d0:23:ed:40: fc:8c:19:18:af:a1:56:8c:b6:81:5f:16:ab:76:ae:e2:f6:6e: e9:3d:24:92:f4:f8:84:d1:52:7e:8d:1e:14:c3:dd:1e:55:c7: 99:5b:54:f4:20:45:5a:38:66:8b:01:28:b7:47:71:9c:17:77: 2a:60:67:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY9gqhA83SsAZvMhfvJa+JNLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw MjNlYmUwHhcNMjQwNTEwMDQwMTQ4WhcNMjQwNTExMDQwMTQ4WjAzMTEwLwYDVQQD EyhhYWNlODcwMmY4ZDdhMGIyM2UzYTMwNDU0Y2YwYmJlYjZiMmRhYjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Tfv8t5PDuMyygdVQFVrJTk43Xg0 RFbVEwHUryBC0rn6VRsJqkNsyPyFw8zEv0Yq2a/xd0yzMujlSd4c294IaqUcexzi 92I5HpQ5hJv3b1tiFoCK0t3YPHp7kR5H1cjAE9U9nKWLfBlT/YV+BQKFsRXzT7Nj BW5QRx/n1F35+KVUI6ZxSEPNtAr2hcgBT0a6XIIHV/5QosyNGqHQtwyf9x9N1JVd ESdHUwI0XgnYl0F2YDIYmN3KMxTUNEBvetgWSx/3UkDZZMO41aVHRF6RvVcVuOzW pcRhf6ruFJWkaZPtVE7rg2ByLDND4MTJap3SIWfI1HUmkSFg9h/O4Z4viwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKrOhwL416CyPjowRUzwu+trLat/MB8GA1UdIwQY MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt OTlhY2I5OWNlNzU0LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0 LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgTmXz//H qLVs7/bmMFYDiIYuJIgKJ3ZmMbebaPQRM06AWw6I0o/wRP/N+wpj5fsM7O4QhwXs 3Ckd/9fEkZatXVRIDpYX9A8QWo8ZYBPXw94jOa5FEyN/OqnG25E6+7wy5RjJbZvT h8GtjNRdFTWsgFVGemKx9TbeXn9bOJbjpPbbisiVCTUgLuhMSRg3/7CBEXavPYwo yJ5Kkvom5CkW1xdHuspmJKOxKz6LAXHeY9yXFUDhon1W8Yhbz2TtrLoM7QzQI+1A /IwZGK+hVoy2gV8Wq3au4vZu6T0kkvT4hNFSfo0eFMPdHlXHmVtU9CBFWjhmiwEo t0dxnBd3KmBncA== -----END CERTIFICATE-----Generated at Fri May 10 07:33:25 2024 by rpki-client on console-fra.rpki-client.org