$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.mft File: Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.mft (raw, json) Hash identifier: 7tVQmGs1EbY5d1Wo/e9dcNzGQ9nHUad66wqtWEMRcVk= Subject key identifier: E4:8E:7A:C1:9B:3A:FF:46:EE:1F:0F:3C:18:52:19:ED:07:E7:07:3E Authority key identifier: 5B:2D:D9:FE:62:8B:6B:C1:01:41:DE:02:41:76:6A:1B:7A:63:19:3F Certificate issuer: /CN=5b2dd9fe628b6bc10141de0241766a1b7a63193f Certificate serial: 018F1936660410C5EDD30A65982833C13F35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.mft Manifest number: 1087 Signing time: Fri 26 Apr 2024 07:02:26 +0000 Manifest this update: Fri 26 Apr 2024 07:02:26 +0000 Manifest next update: Sat 27 Apr 2024 07:02:26 +0000 Files and hashes: 1: 2elKa6i_RzTZnRpnaJ2TYLp-Onk.roa (hash: aXu/tbE7ariGqykoQU8l7ZDuI5iPdhk9F9mNAz8jC2c=) 2: 3BNCC6G8UKlPfD-EcgCOqjK8dfw.roa (hash: FnYucASH0faDas5zVmszZ9oYD2dtWt4x1IpKf5VnjYM=) 3: 3o8myZ_Y-fkyy2X8wzy1b01ZMug.roa (hash: bjkiR2W8stJRMyuDlbA8BBZDd9gMYSRmsHzyRF+xqms=) 4: 8UX-9eWqADWEjQTLgZmDGo0sfi4.roa (hash: wTS+NltJCmB9LrIbyD40fkMkIbpxp2uUCUOjxXpI9sY=) 5: DI44sVDvO7RuAU8dwuLDCHlnU-Y.roa (hash: PNwnNJOq5te0xdiJ9tiO5PK7hyVQ4Z2sa8Ycr/PBEYU=) 6: Jcoh4y6gYB3YE7Y0W-brVFJBSoU.roa (hash: fkWLTJqKlG+vf1YdQdMNhDbxH0Oij7cOWSvmHKJ9vj4=) 7: LCqjqzImYtF3LfKSarayZ28FQZw.roa (hash: aM7YmAujA6RDorSyjELX7/oGKDM41qLvTiUFQB10RRw=) 8: NkQHnXfBpUc3DMuW29R-qLBKwGQ.roa (hash: WukUTE+nKWHprtk5cf1YfbwbziTk9i1jdIuZyqBuYVI=) 9: UgdYxJZ4kSIL7GqlE3O86lqWSnY.roa (hash: AZ86jCS/H/Vk4Auz884p3PVaLkrZIsAj1dOzZhCAs6U=) 10: Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.crl (hash: rSCBJe30HqbYfk4K/fmRZQZoWliPFAeTFliJJbdom88=) 11: mOwLFZD8cQhJeAk93TUwR_fZSiM.roa (hash: UJFOgWKFnmWUoFEZnNWxjdqcF++8ojzKAPNNBvHmyB0=) 12: oGE-1j_0GnxqNwbw9oIc2C1iNnM.roa (hash: qHSS3V10m5YUcktzm6QW8yFah9NvI4XfA8vyqvEvzOU=) 13: sit7Wse_7Jmn-eEohy-uhj7dy44.roa (hash: 1wjcrLrH2/tVv/dJ/8OYNIJeJWY4rsYTa4S6L8U72t4=) 14: u9iaDA0fDpCE9DMMpsuC-iH2cUw.roa (hash: qIEFKKj+M9X3slA8bmPPO6aOw9fDtX/idz/geyVyrJg=) 15: uNEwSESXchQDBwMR2BT3BRCtkGM.roa (hash: 4V8uX59vr66ou0i42HfX9VvwrfhCnScGVEmBUYmHc9M=) 16: vYc2URA4GqV-dqL39TsmbzXnkuw.roa (hash: jg5YJLnqbhYiwle0h8wHZ7rG5yIPzNomTG3tGx4Euxg=) 17: yySu_F27fY9R333IwDkAdjdsJxE.roa (hash: HgN30qZE8bgClwiryRIWKau+8YL0IxPBp+aXjpONRLY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.crl rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.mft rsync://rpki.ripe.net/repository/DEFAULT/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Apr 2024 07:02:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:19:36:66:04:10:c5:ed:d3:0a:65:98:28:33:c1:3f:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b2dd9fe628b6bc10141de0241766a1b7a63193f Validity Not Before: Apr 26 07:02:26 2024 GMT Not After : Apr 27 07:02:26 2024 GMT Subject: CN=e48e7ac19b3aff46ee1f0f3c185219ed07e7073e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:bc:c0:c3:32:de:d1:0d:99:f7:4f:cc:4c:48: dd:68:13:4d:f7:af:11:27:ea:1d:91:fb:a1:07:a3: 26:c1:6b:50:1d:8c:89:a2:ed:b9:cf:c6:16:ca:b8: 0b:33:7d:77:ce:8e:18:f8:23:2d:25:67:1d:cc:97: 55:01:23:b5:23:04:e0:2b:7e:91:f8:9d:94:18:c5: 4d:13:06:5e:93:c8:e5:c5:69:f2:4e:d9:be:85:e9: a9:37:43:9c:65:5d:27:d1:9c:49:60:9e:57:ab:42: 7e:3c:5f:e4:29:66:b2:47:37:ed:c7:23:70:b2:94: 0b:85:43:2a:6f:ad:f8:c4:a2:04:e4:2a:25:d6:ef: 32:77:f4:6b:3c:fe:bf:85:de:e8:c2:f9:33:fe:12: d0:59:47:68:b1:8a:ac:a8:0b:4d:96:f2:07:ea:4f: 4c:4f:5f:03:4a:cb:71:c7:b1:cc:0e:94:99:59:1a: 11:fb:69:12:ef:c2:57:e7:57:00:02:4e:51:7a:73: 92:a5:c2:4b:24:27:6c:44:1f:87:5e:be:1e:8e:77: 27:71:25:0f:e5:ea:a2:e4:e8:c1:f3:e2:3e:40:94: 39:83:59:f6:f3:37:64:6f:c7:e5:ee:55:e1:25:97: 5d:e2:9c:a4:ae:26:ce:14:b5:5c:84:12:41:3e:13: 61:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:8E:7A:C1:9B:3A:FF:46:EE:1F:0F:3C:18:52:19:ED:07:E7:07:3E X509v3 Authority Key Identifier: keyid:5B:2D:D9:FE:62:8B:6B:C1:01:41:DE:02:41:76:6A:1B:7A:63:19:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:ed:48:58:0f:26:c9:cb:9e:15:dc:df:b7:e5:1f:9a:5c:99: f6:1b:76:6d:38:16:7f:36:91:76:ec:d8:c5:2f:61:88:df:27: b0:bd:f7:65:7f:dd:55:7e:6d:29:d1:e4:e3:7c:8e:eb:2c:7c: 9f:72:60:81:f4:75:ba:ca:5d:6a:cc:c8:14:40:b0:c9:4d:d2: 43:56:2f:ad:1d:ab:66:a5:54:78:8e:c2:77:7c:a3:c7:f4:7c: b2:5c:4d:14:20:82:be:d2:5a:27:5b:fe:d3:d5:9d:7c:31:97: 58:04:93:53:9b:ab:98:b1:c3:3f:95:91:cd:ca:de:b5:ce:c2: 99:01:1b:6e:61:51:1c:85:c3:ed:18:50:4a:c7:51:d6:05:79: 0b:c3:ad:89:c8:38:25:ba:1e:30:bf:4c:d2:9c:6f:c9:2c:90: 91:8c:6f:e4:9e:86:e2:dc:a6:d0:84:16:2e:d5:61:aa:14:48: e1:c2:96:2f:8e:a3:9e:13:d7:3f:8c:f5:a4:5b:2c:3f:68:1e: 9c:da:b4:62:f6:af:70:6a:a2:c5:2f:aa:fe:4f:79:4f:ed:a9: 60:74:22:69:1c:17:d0:1a:cb:e6:a6:56:c0:67:f3:5d:8c:e1: 0e:6d:a4:1d:9f:d4:9d:d1:9d:06:69:57:e6:b3:97:14:9a:09: de:ec:cd:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY8ZNmYEEMXt0wplmCgzwT81MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViMmRkOWZlNjI4YjZiYzEwMTQxZGUwMjQxNzY2YTFiN2E2 MzE5M2YwHhcNMjQwNDI2MDcwMjI2WhcNMjQwNDI3MDcwMjI2WjAzMTEwLwYDVQQD EyhlNDhlN2FjMTliM2FmZjQ2ZWUxZjBmM2MxODUyMTllZDA3ZTcwNzNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrzAwzLe0Q2Z90/MTEjdaBNN968R J+odkfuhB6MmwWtQHYyJou25z8YWyrgLM313zo4Y+CMtJWcdzJdVASO1IwTgK36R +J2UGMVNEwZek8jlxWnyTtm+hempN0OcZV0n0ZxJYJ5Xq0J+PF/kKWayRzftxyNw spQLhUMqb634xKIE5Col1u8yd/RrPP6/hd7owvkz/hLQWUdosYqsqAtNlvIH6k9M T18DSstxx7HMDpSZWRoR+2kS78JX51cAAk5RenOSpcJLJCdsRB+HXr4ejncncSUP 5eqi5OjB8+I+QJQ5g1n28zdkb8fl7lXhJZdd4pykribOFLVchBJBPhNhMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOSOesGbOv9G7h8PPBhSGe0H5wc+MB8GA1UdIwQY MBaAFFst2f5ii2vBAUHeAkF2aht6Yxk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3kzWl9tS0xhOEVCUWQ0Q1FYWnFHM3BqR1Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi80ZGU4ODktZGM5ZC00MWU1LWIzYWEt MGQ3YjU1MWY4MjhjLzEvV3kzWl9tS0xhOEVCUWQ0Q1FYWnFHM3BqR1Q4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi80ZGU4ODktZGM5ZC00MWU1LWIzYWEtMGQ3YjU1MWY4Mjhj LzEvV3kzWl9tS0xhOEVCUWQ0Q1FYWnFHM3BqR1Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnu1IWA8m ycueFdzft+UfmlyZ9ht2bTgWfzaRduzYxS9hiN8nsL33ZX/dVX5tKdHk43yO6yx8 n3JggfR1uspdaszIFECwyU3SQ1YvrR2rZqVUeI7Cd3yjx/R8slxNFCCCvtJaJ1v+ 09WdfDGXWASTU5urmLHDP5WRzcretc7CmQEbbmFRHIXD7RhQSsdR1gV5C8Oticg4 JboeML9M0pxvySyQkYxv5J6G4tym0IQWLtVhqhRI4cKWL46jnhPXP4z1pFssP2ge nNq0YvavcGqixS+q/k95T+2pYHQiaRwX0BrL5qZWwGfzXYzhDm2kHZ/UndGdBmlX 5rOXFJoJ3uzNdw== -----END CERTIFICATE-----Generated at Fri Apr 26 12:21:00 2024 by rpki-client on console-ams.rpki-client.org