$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft File: DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft (raw, json) Hash identifier: dwG8tjFyMz5gqJb8LHYrJbQSzCot0mcVr0SDz7I1jKk= Subject key identifier: D3:D4:0B:F5:50:AC:4D:11:8E:AF:46:2F:68:DB:D9:5E:A2:46:D4:04 Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Certificate serial: 0190EFC5AC0948F8B93CB18DBADE580C7986 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft Manifest number: 123B Signing time: Fri 26 Jul 2024 16:00:27 +0000 Manifest this update: Fri 26 Jul 2024 16:00:27 +0000 Manifest next update: Sat 27 Jul 2024 16:00:27 +0000 Files and hashes: 1: 20q5ylf1YJsm8RXiEl85HQxbM0g.roa (hash: PLHieY+cBGvE+qmRqwBONLcwgkYlaPVnIJ0MzjRIXVY=) 2: 2gUjlPsHqb_ncJcZ78sLRgGxgm0.roa (hash: 6pPasbljOid/unjMtz4muULDrAeLY88ZGgh5fs7tFUA=) 3: 3D7rJFyhnPBQv7KbLuLvgJxN48U.roa (hash: eFSTwFQuCpY+9JuTu481CDzZ+JcTAWphQkHvsTWt1qU=) 4: 3kJfKaEdoRO8F1BsxeAb1_F-eO4.roa (hash: nWHbcOJ7nJfQ34U+mLXxnYhPaiW6rMc/NRjtTtnEFys=) 5: A4ETMnVpd9FKMsWr1xoGVNiRnQ0.roa (hash: om1gO0GDBD6gvouVjflpQK4UVmpP3oimb5oVnEzGSHI=) 6: C6SZ6sx6DqKZyXUk0FyTcVkU28g.roa (hash: 29omU0S1FzDixXTVjlH5LMOkvtB6uWxUWAQvxa0RxFY=) 7: CicAHWRR5XOwNMJCvxwZATnlww8.roa (hash: HD4XTQ66LapfO87iOiV3HPYGdxRYCImk1DdsXwOnng0=) 8: DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl (hash: wN3vAwm3MKlaW/EZP8KXZW93vb95N/blkfTlHkr6yW4=) 9: DS3A8f598VOd6_-2g-KDEl73Fh4.roa (hash: eJzg7+d7/JBTEKtsOdD1OZfc+ifYUlRADs9hIT64vvA=) 10: FEmNV6RCXEyXSd2kVJ8L786goBY.roa (hash: bb6RMCGc4tJgnUSuQIuxYAR34DxEQ6c3anZt6NKD4o4=) 11: NWrwC-CLu-jxgbH3O_DuLYKhOF4.roa (hash: TJ7gN7ruytFjGwlTLNh7t1tWjn1CMeZhzRnEQtjhluU=) 12: NhO3_RjbYIpGKWdlFLCubHI1S1Q.roa (hash: Bx1MYNMWhkMUsNXeW8txyueZdiri180rcR0ME4YiE/o=) 13: OeKoXcd26vyCg9h0RkAhdzBSnoo.roa (hash: 1lzGTe/X4eOGN99jeD4ND4SYrGHbTm9yHFyQfmgf0fE=) 14: PG7Zf8aAWfqw9tKBN6g1hjNwDPQ.roa (hash: sPDzBzy3QYxqJx/oMxGQ1FFccqsNGIFk/vyJOo8gdvU=) 15: S2abFgVBaX0vxIMVaBvfqkautT8.roa (hash: ZIJ5a+Cyw/DlmQJsbFP/o6mLYtorGNIc27EwACJUnDI=) 16: U9dcbHPHf_3ASAJ7POK5fWlL5uw.roa (hash: 3eIXlWjf9tJGyYVtPsciWlDO1pjT8+VzuGXX6vdJE/Y=) 17: WymygCcy2Cth2XCvGhpRvzNvm8U.roa (hash: saRq3HRvr89AG4wdqhPbp/MCJcv27U/aycPomon4sMw=) 18: XgFgH_9RQY6v5e1k8toTXe3dGdA.roa (hash: mjUBb0W676jXnwpAo0EqjPP4mAvi+5/TfeXi0bh4ZJI=) 19: duyt9Q95uxdJTfQpIcIlJc-dN5k.roa (hash: aJN1l/17Ww/SdimLNISIp50voX+ETKkoGnJIVTr+Ej4=) 20: gKxNSLaRPEFnDExhi75buJWdrpU.roa (hash: SumVMzb4NtPBdfqqjxWXnD82kQ3CCubj9rTDNwTZufM=) 21: j2u66JaywmoFYWfPIADVdkPFJQ0.roa (hash: Em5MQjkqzDdxE+eTy+VgcmbQciK3FMpXD4JxzeW/9JQ=) 22: mSiIWURkQkpONEXeScvdUxN-Rrk.roa (hash: Dbf2NNHLkjwbVRVdC0AdCaSnEu/8byFPH6WOmdVAUAM=) 23: pCkXekt-IN15CD9_d0JUkoetpLY.roa (hash: Ic8KLXKTsRta59ty8Jlls4Nhokb7B889HKvIqQ+FqvM=) 24: rUzBuLfMTnGa0Sw4qWDG8MdNv8Y.roa (hash: xgXz1M4afQozNwIOLdafkUm7BvYEWhyCq4btNRWRY+M=) 25: so3611zKNeWDC7xRB_gxQRKcfE0.roa (hash: 1I8I3fP+BXgxqvv4+VEimTztqZSIqwxgXnPKlgwP0KE=) 26: tXzCu7HU1iQIa1IG46ejSsoHoTA.roa (hash: 1qFE0LUluZ0P/Oyt+0AJYBKNasL68koX7VEUM9iuHz8=) 27: uE7fBnbRHYfmBCkHPxXmbGGjA8o.roa (hash: qoYnsB8xu2nQbGo8D50i97IapNq2JumQn04kxc9+nE0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Jul 2024 16:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:90:ef:c5:ac:09:48:f8:b9:3c:b1:8d:ba:de:58:0c:79:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Validity Not Before: Jul 26 16:00:27 2024 GMT Not After : Jul 27 16:00:27 2024 GMT Subject: CN=d3d40bf550ac4d118eaf462f68dbd95ea246d404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1b:5f:36:54:01:8d:cd:43:09:2d:2c:19:c4: be:e1:09:f8:87:50:eb:e6:f9:cb:05:fb:59:f0:cb: a2:c9:7b:2f:8f:10:ce:9d:a9:ee:6e:0e:07:ed:69: 67:8e:5f:d9:c3:df:8d:6d:5e:5a:be:54:9c:9f:f9: 60:8c:f6:de:db:85:99:9c:a1:f8:42:ad:2f:f3:dc: e1:33:fe:cc:e7:38:ac:e9:d4:0b:72:b5:34:7d:14: 00:a5:90:24:8d:09:57:a2:02:03:1f:69:8e:7c:80: d5:47:31:f9:df:8f:c7:0d:6f:c7:e1:d7:53:f2:ad: 8a:39:9e:e2:c5:0d:e3:a9:76:42:22:97:78:42:6e: 6f:32:07:c6:62:bc:bc:5b:80:e7:0c:d0:94:91:30: 64:44:19:4a:3a:6f:88:55:3e:c1:a9:ef:32:d7:71: 00:8d:6d:91:28:6b:0a:69:d2:4e:9f:e0:bc:d7:55: 23:0e:46:41:10:6e:b8:34:bb:80:4b:fd:5f:f3:cf: dc:80:e9:f5:61:3e:66:dc:22:3d:af:8d:e4:05:5a: ae:17:a3:31:d8:e0:12:f7:17:34:7a:57:80:21:3b: 05:74:1f:1a:11:da:7b:1f:0e:92:47:b2:21:e6:7d: 97:3a:de:2e:d3:6f:93:37:c5:fe:9b:42:17:ad:db: eb:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:D4:0B:F5:50:AC:4D:11:8E:AF:46:2F:68:DB:D9:5E:A2:46:D4:04 X509v3 Authority Key Identifier: keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:ff:13:cc:a7:b3:d4:c3:10:38:a5:f3:a9:e7:42:91:15:63: f6:7c:9b:45:4b:11:cd:b5:57:3d:5e:3b:21:dd:02:6f:00:5c: 98:0e:f6:8d:9c:e9:2f:89:e6:5b:38:46:b1:ef:8b:12:4e:66: f9:ff:9f:38:d9:6c:38:5e:31:8a:68:b9:d1:76:43:d2:80:17: 14:05:b4:6e:86:f4:e4:d0:29:36:21:67:c8:d0:9f:8c:42:13: b1:67:61:ce:3e:de:db:66:8c:07:7a:cb:ed:28:eb:52:32:d1: be:46:5a:22:67:f3:28:73:15:0f:d8:66:f4:9e:55:a8:df:86: c4:83:c2:a7:59:ea:1b:66:08:26:7b:60:88:64:94:61:8b:f6: 76:a6:b4:ee:3d:67:48:c8:ee:20:13:91:f5:98:13:da:f2:34: 61:39:ad:97:48:89:1b:5c:68:93:0a:b2:8a:73:b6:99:32:2e: fe:8a:3b:72:0d:d5:a5:ab:7f:f9:b1:30:9c:9c:d0:52:8a:02: f7:02:04:5c:26:82:a6:21:58:a7:80:db:2d:ff:4a:e7:f6:ef: b0:b9:c4:d5:fb:32:64:ca:d3:d1:49:b8:6d:07:37:ac:0b:a1: 95:c7:3b:ea:e3:f0:b3:df:32:7b:b7:67:31:1a:60:d0:8d:d2: c9:20:3f:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZDvxawJSPi5PLGNut5YDHmGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMjFiOTI1YjRjNGJjYzMwZjc3YzljNDFiYThkMDQwYWM5 NWRmYzYwHhcNMjQwNzI2MTYwMDI3WhcNMjQwNzI3MTYwMDI3WjAzMTEwLwYDVQQD EyhkM2Q0MGJmNTUwYWM0ZDExOGVhZjQ2MmY2OGRiZDk1ZWEyNDZkNDA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRtfNlQBjc1DCS0sGcS+4Qn4h1Dr 5vnLBftZ8MuiyXsvjxDOnanubg4H7Wlnjl/Zw9+NbV5avlScn/lgjPbe24WZnKH4 Qq0v89zhM/7M5zis6dQLcrU0fRQApZAkjQlXogIDH2mOfIDVRzH534/HDW/H4ddT 8q2KOZ7ixQ3jqXZCIpd4Qm5vMgfGYry8W4DnDNCUkTBkRBlKOm+IVT7Bqe8y13EA jW2RKGsKadJOn+C811UjDkZBEG64NLuAS/1f88/cgOn1YT5m3CI9r43kBVquF6Mx 2OAS9xc0eleAITsFdB8aEdp7Hw6SR7Ih5n2XOt4u02+TN8X+m0IXrdvr9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNPUC/VQrE0Rjq9GL2jb2V6iRtQEMB8GA1UdIwQY MBaAFAwhuSW0xLzDD3fJxBuo0ECsld/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2Ut YTM0NzU2NDE1OGY4LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2UtYTM0NzU2NDE1OGY4 LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY/8TzKez 1MMQOKXzqedCkRVj9nybRUsRzbVXPV47Id0CbwBcmA72jZzpL4nmWzhGse+LEk5m +f+fONlsOF4ximi50XZD0oAXFAW0bob05NApNiFnyNCfjEITsWdhzj7e22aMB3rL 7SjrUjLRvkZaImfzKHMVD9hm9J5VqN+GxIPCp1nqG2YIJntgiGSUYYv2dqa07j1n SMjuIBOR9ZgT2vI0YTmtl0iJG1xokwqyinO2mTIu/oo7cg3Vpat/+bEwnJzQUooC 9wIEXCaCpiFYp4DbLf9K5/bvsLnE1fsyZMrT0Um4bQc3rAuhlcc76uPws98ye7dn MRpg0I3SySA/Jg== -----END CERTIFICATE-----Generated at Fri Jul 26 23:20:10 2024 by rpki-client on console-ams.rpki-client.org