$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft File: JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft (raw, json) Hash identifier: DUgrdLYr2wuJP7xpRKUFPDaoHcWtiaXZXWC13ciZPQc= Subject key identifier: FA:27:A3:DB:83:FD:40:77:E3:3A:C9:B8:EF:ED:F9:93:74:60:6C:B1 Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c Certificate serial: 018F5AA7367CD37C597461A5BBF619132304 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft Manifest number: 1189 Signing time: Thu 09 May 2024 00:00:58 +0000 Manifest this update: Thu 09 May 2024 00:00:58 +0000 Manifest next update: Fri 10 May 2024 00:00:58 +0000 Files and hashes: 1: 8wQbxG0KRKuWI1S7YGJQCvWvB-M.roa (hash: 1gISVguOyOhC0kJinPDxVVS1MYiMVdBfoMfiOlgJNdo=) 2: 9-FhmxiZK5Xe9jqdKdiUhgP0shQ.roa (hash: nRZC+FxQO/beGVSiu8Mcdh7bavwgXmX2HbabrGbOXGU=) 3: FBJQvS2d6aPtDmBC26dMXvcwKF0.roa (hash: oCRUCnSPOCTMgmLQuFKvPgwJ36wIdbWFOaouIs5Wjng=) 4: IjTHt34fcGQWGmoNOHkegXHL0Nw.roa (hash: Nox69MuD6x2YwTUuiHb7HXKEQNWjaq5zrOadyfMMFhY=) 5: JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl (hash: zHzIOe1N9SJkYNhzzjAIsN4ccd9xUWJYygQYMlzkPsI=) 6: Obt-TsVOHprXLZD1cL22W05ZE9k.roa (hash: NrWhDc9axZrK741ba10UBeDqkjQq1gZkBBrMqllwAa8=) 7: PZ9nQHSnG3UsfTdeKfPTlgzNGqQ.roa (hash: sI544LGLxkuGeOh3oV87NmA/OvHOOkqgwCDcswKeYH4=) 8: d12QY9rHhuSDE3GWiNW4CEaBptw.roa (hash: aeDGoILf5960kb68xSf2WB8bgtuNw04EtpGWl8P7Dyk=) 9: fR48VQDXb1tXA5q8olbHpzKvGTI.roa (hash: +9yD6Jy5GH9s1ivHLVmc0cmLZyNWxUp7UZw9QLfaciM=) 10: n0m62i3DR3LjgqHx-5XJLQKY6L4.roa (hash: 99mDwyhN6MkxvMwx+iX7RkDxhZGG9oMQxrMRXk9TV78=) 11: vv-PwzapaKEYBrWPq1aAilEeGwU.roa (hash: fEUMdnCtkqWyzDMcU+ZtUp3IEaZef9S3+ZcC98hSrvA=) 12: wtO9H6MOFY2AfefxRjPcng3KwwE.roa (hash: /tMCB8S3lEgfikhfwLZanCTAvQIHM3gc6AdLgUx/3ao=) 13: yZ-kJcVnVw-jBC8bbpJ9j4e1ATg.roa (hash: Ib21Nkp2+DoMLQvqaafBeZ/6ZFoSCLii+u8g7k88jY8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 10 May 2024 00:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:5a:a7:36:7c:d3:7c:59:74:61:a5:bb:f6:19:13:23:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c Validity Not Before: May 9 00:00:58 2024 GMT Not After : May 10 00:00:58 2024 GMT Subject: CN=fa27a3db83fd4077e33ac9b8efedf99374606cb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:8f:bf:4b:85:4d:6e:10:e2:ba:e2:80:08:39: 8b:fd:f6:05:91:04:3e:25:b2:39:2a:74:a8:de:6a: b3:f2:b8:ad:7d:f6:84:8e:c7:26:5e:c4:25:17:04: 34:82:a1:0c:d5:90:0f:7d:65:eb:cd:f5:78:28:9d: e4:7d:9e:51:00:e5:06:33:67:cd:21:79:0a:a1:0b: c1:b6:60:65:3b:4e:84:11:63:fc:6e:d3:03:81:45: 9f:c1:7f:4a:e3:40:6f:d0:4c:d7:b9:dd:b8:89:fa: 68:20:45:94:60:ae:04:f6:39:6d:ea:a2:83:9f:7f: b9:60:d0:6c:88:8f:8a:e0:de:f3:c2:6e:f4:37:20: 7c:1d:3f:5e:02:f8:4e:90:cf:2c:2b:23:fc:9f:db: 2b:e9:34:bf:1e:37:57:0b:d4:ff:97:f8:b8:b0:d2: 25:28:75:4f:cd:19:fc:3b:7a:44:4e:fe:d0:35:91: 77:92:aa:80:fb:0f:3f:13:af:76:0c:bb:49:b5:ff: 71:8c:b5:e5:9c:57:39:89:7a:82:e9:ef:7e:b4:6a: 76:b3:2a:71:cd:61:80:a0:27:20:4f:13:4f:f9:94: 1c:5c:a0:db:eb:3b:f0:e8:6f:5f:c2:99:0a:fc:bf: 74:8b:82:06:98:9d:a9:f8:d3:6e:13:7e:cf:8c:8a: d8:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:27:A3:DB:83:FD:40:77:E3:3A:C9:B8:EF:ED:F9:93:74:60:6C:B1 X509v3 Authority Key Identifier: keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:67:9a:d3:8d:22:98:7c:24:71:5e:49:23:65:e3:c6:d9:94: 54:47:e4:0a:e6:13:f2:5b:8b:e4:3c:9b:28:de:ad:dd:f3:2b: 0d:ac:31:88:f0:57:70:df:21:fd:93:9b:c9:a7:32:7b:82:ff: 6c:1c:e2:ff:ca:45:0d:ab:5f:4a:d0:c0:fc:30:43:8f:75:fe: b3:31:e7:a7:e4:16:05:f2:ca:d5:ea:d6:c4:a6:d6:cc:d5:12: 50:5d:12:ed:f3:6b:0e:b9:12:d2:eb:6a:04:02:cf:94:3c:71: 22:16:a0:65:21:44:94:12:5a:5e:72:ba:7e:62:56:8b:5f:4a: b0:32:b8:2f:a5:5b:1b:3a:a4:54:79:dd:f3:1f:84:08:7e:89: 59:d9:fe:5f:2d:2b:d1:86:4e:44:4e:a1:e1:cc:f4:c1:65:4c: 6f:1c:3a:14:1e:8e:05:cb:27:5c:86:77:6e:b7:bb:2a:55:d8: 36:f4:54:7b:79:2e:f9:fc:f4:38:e0:26:9e:eb:b6:1c:88:55: 19:9c:bf:e6:b1:ed:48:43:64:3d:61:52:a0:a6:da:93:3a:59: 4e:12:f1:56:55:a1:91:c9:e5:80:91:27:8e:64:8b:ce:c4:4f: fd:1d:d0:8e:95:3a:ea:51:66:58:a7:02:f2:55:6d:b2:15:24: cb:4e:16:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY9apzZ803xZdGGlu/YZEyMEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZTRhZWQzZWY3MmJlZTMxNDE2NjBkMTE0OWUxNmQwNzky MDVmM2MwHhcNMjQwNTA5MDAwMDU4WhcNMjQwNTEwMDAwMDU4WjAzMTEwLwYDVQQD EyhmYTI3YTNkYjgzZmQ0MDc3ZTMzYWM5YjhlZmVkZjk5Mzc0NjA2Y2IxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1o+/S4VNbhDiuuKACDmL/fYFkQQ+ JbI5KnSo3mqz8ritffaEjscmXsQlFwQ0gqEM1ZAPfWXrzfV4KJ3kfZ5RAOUGM2fN IXkKoQvBtmBlO06EEWP8btMDgUWfwX9K40Bv0EzXud24ifpoIEWUYK4E9jlt6qKD n3+5YNBsiI+K4N7zwm70NyB8HT9eAvhOkM8sKyP8n9sr6TS/HjdXC9T/l/i4sNIl KHVPzRn8O3pETv7QNZF3kqqA+w8/E692DLtJtf9xjLXlnFc5iXqC6e9+tGp2sypx zWGAoCcgTxNP+ZQcXKDb6zvw6G9fwpkK/L90i4IGmJ2p+NNuE37PjIrY1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPono9uD/UB34zrJuO/t+ZN0YGyxMB8GA1UdIwQY MBaAFCXkrtPvcr7jFBZg0RSeFtB5IF88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEt ZWQzZTM4Zjk1NzdmLzEvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82MzM2ZDAtOTQ5NC00NmQzLTk4NjEtZWQzZTM4Zjk1Nzdm LzEvSmVTdTAtOXl2dU1VRm1EUkZKNFcwSGtnWHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqmea040i mHwkcV5JI2XjxtmUVEfkCuYT8luL5DybKN6t3fMrDawxiPBXcN8h/ZObyacye4L/ bBzi/8pFDatfStDA/DBDj3X+szHnp+QWBfLK1erWxKbWzNUSUF0S7fNrDrkS0utq BALPlDxxIhagZSFElBJaXnK6fmJWi19KsDK4L6VbGzqkVHnd8x+ECH6JWdn+Xy0r 0YZORE6h4cz0wWVMbxw6FB6OBcsnXIZ3bre7KlXYNvRUe3ku+fz0OOAmnuu2HIhV GZy/5rHtSENkPWFSoKbakzpZThLxVlWhkcnlgJEnjmSLzsRP/R3QjpU66lFmWKcC 8lVtshUky04WJg== -----END CERTIFICATE-----Generated at Thu May 9 06:31:38 2024 by rpki-client on console-fra.rpki-client.org