$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft File: 4FdMKHjWtTYTm4lfCMnG2xjhKps.mft (raw, json) Hash identifier: lE29vZLFwQ0rt3BS3GDlXd9ueyvsp6GcOGdLin/heGA= Subject key identifier: D2:43:21:21:42:EF:C4:3D:AB:C6:EB:58:09:2A:47:60:AD:52:17:65 Authority key identifier: E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B Certificate issuer: /CN=e0574c2878d6b536139b895f08c9c6db18e12a9b Certificate serial: 0190625E21D579AA9F30716720989C60FE51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft Manifest number: 11F0 Signing time: Sat 29 Jun 2024 05:00:54 +0000 Manifest this update: Sat 29 Jun 2024 05:00:54 +0000 Manifest next update: Sun 30 Jun 2024 05:00:54 +0000 Files and hashes: 1: 2LdUeQ2AqByZeexMRoImu32pplA.roa (hash: I/qBixg9wofc+nNAIgMwi0w1XBAPwxQHpMwzlALEDWg=) 2: 2rk-wig0NSg4teptDJQwpEBmsaE.roa (hash: hHVIzwE+eMFffINWLYhCmBSeRAWs6Iqm9qAIoqonEdM=) 3: 4FdMKHjWtTYTm4lfCMnG2xjhKps.crl (hash: uu9a1JvtfEnUHyufl7+Ed+OgYAdDQ6RBU77mLA3MoZ0=) 4: AdQEpwyXXtV2-WL9Ch5cOfruRYI.roa (hash: i6qMGuKsfk/MzkytFogVloPQxuD0TyjpaNzRaWrr34Y=) 5: Irje-HhBRXWI-E0JO8haxhdN8UY.roa (hash: Q3LMPf4TNmst7Nwa54SbF8QZlU1Fvg/n3vmdBjUpjM0=) 6: Jc0PmoRiYw4FMpap616npM3Nask.roa (hash: B233hWE2dtK7LfhrieMhm0vez8Qec3jPLFp3amJ+jTU=) 7: KXYMW1XYlc4MHcqpwlP3pL9MhSk.roa (hash: PPeGx8cRht2mJF8A6RQRcSyTUzT+L6w2TGVntVt0XLM=) 8: Kwe3Ad3pOhho9wgmGA81n6fKp9M.roa (hash: iONMgjbDrdey3suuVyFGK4YIGq093QsvxOH7/Q3p8z8=) 9: naMSbDv-cUa-1XhcA3K0TIQqW-M.roa (hash: L7fQwTpl65CT5Ryogsv/z/cqit/r+GKOhjfriryreh4=) 10: uPvADUpEkoFl52hjqF1we5KfLO8.roa (hash: +WVB7DWV0MgkJPXrxWOjyZ1lcSw33nc5QJlQntTofSc=) 11: xb7GLZatKUTNZRse1AurQSNewso.roa (hash: zpL/3hc+SjX1QFFvVXHUQS3to+376Qlxt4F5YE+RM8c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 30 Jun 2024 02:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:90:62:5e:21:d5:79:aa:9f:30:71:67:20:98:9c:60:fe:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0574c2878d6b536139b895f08c9c6db18e12a9b Validity Not Before: Jun 29 05:00:54 2024 GMT Not After : Jun 30 05:00:54 2024 GMT Subject: CN=d243212142efc43dabc6eb58092a4760ad521765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ea:38:b8:68:06:2b:2c:ba:0b:31:3b:c7:a2: f1:e7:2a:04:9b:74:b8:d6:98:7f:d0:ba:d5:b4:9f: 85:d9:d0:ec:00:cc:a1:56:a3:b4:bb:3f:bf:42:57: 67:c9:54:c0:6d:cc:60:04:78:b1:59:1f:77:5e:04: d0:97:a8:53:f2:4e:67:81:f5:62:7e:d5:c2:02:ce: b6:91:02:68:73:0b:b5:77:34:59:83:83:5c:ec:55: 37:a4:02:54:2c:83:7a:9e:36:a3:38:b5:fe:7a:d6: a6:e2:d5:e9:99:4a:9e:1d:45:89:72:b4:6b:71:aa: 15:40:16:4e:2a:c6:6c:12:ce:b2:13:9c:9f:b3:67: 43:4e:51:5a:61:2e:38:98:31:a2:f4:be:74:d9:50: 71:35:42:bb:1e:ca:9b:77:25:e2:4f:02:54:42:28: 8f:dc:e3:50:ca:80:30:97:ad:0e:2a:3a:01:f6:14: 37:36:0a:ee:cf:fb:93:fa:22:b8:37:6c:43:93:69: 7a:5c:d3:28:a1:c1:92:be:ae:4c:24:e3:a6:5c:73: a0:1a:5d:77:3d:87:3c:94:c4:2b:8c:89:04:68:e8: 8a:dd:5b:9c:d4:54:66:3f:10:02:ee:d8:c1:4b:ae: 96:cf:56:39:92:44:c3:59:80:92:24:54:7b:4e:b4: cd:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:43:21:21:42:EF:C4:3D:AB:C6:EB:58:09:2A:47:60:AD:52:17:65 X509v3 Authority Key Identifier: keyid:E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:59:e4:69:41:e2:c9:88:77:6b:47:8a:ec:a7:cc:f9:23:75: 4d:44:39:49:a5:13:b9:27:42:d9:39:4b:65:50:1a:f0:52:95: c7:0b:52:d8:59:d9:5a:58:52:46:db:eb:95:30:52:ca:44:1d: 63:1d:0e:35:df:92:c7:db:a6:2f:96:2d:d0:3d:35:84:7f:50: 0b:53:be:de:e8:a5:64:12:bd:06:dc:d0:32:ee:12:c7:72:ef: 0f:97:60:1a:36:16:8d:23:2a:d8:ab:ba:98:a8:fc:b5:d9:fa: f3:d4:da:7a:c6:fd:68:f0:09:e5:9f:b1:b8:ee:80:19:78:df: 0f:b4:24:59:f8:8b:ce:97:c7:26:56:63:f4:e6:4f:4e:4a:04: d9:4e:1e:f3:eb:a9:92:6e:d4:47:f9:e4:c0:63:e1:78:64:f3: a2:ef:3e:00:85:67:87:bc:c2:1d:d1:7e:01:67:58:cf:46:25: b0:43:55:5a:b0:2b:8a:e7:c6:7c:3b:47:9c:e5:2f:78:ad:7a: a5:98:2f:b9:fa:8d:68:00:2d:c6:13:47:ea:0c:f6:f4:30:f4: 0e:72:d7:3e:40:d9:2c:b6:b9:ca:21:b3:35:21:dc:f2:aa:8c: 04:bd:4b:e9:b9:56:c0:a4:75:da:b9:c6:f1:de:bf:98:cd:69: 08:14:38:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZBiXiHVeaqfMHFnIJicYP5RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwNTc0YzI4NzhkNmI1MzYxMzliODk1ZjA4YzljNmRiMThl MTJhOWIwHhcNMjQwNjI5MDUwMDU0WhcNMjQwNjMwMDUwMDU0WjAzMTEwLwYDVQQD EyhkMjQzMjEyMTQyZWZjNDNkYWJjNmViNTgwOTJhNDc2MGFkNTIxNzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuo4uGgGKyy6CzE7x6Lx5yoEm3S4 1ph/0LrVtJ+F2dDsAMyhVqO0uz+/QldnyVTAbcxgBHixWR93XgTQl6hT8k5ngfVi ftXCAs62kQJocwu1dzRZg4Nc7FU3pAJULIN6njajOLX+etam4tXpmUqeHUWJcrRr caoVQBZOKsZsEs6yE5yfs2dDTlFaYS44mDGi9L502VBxNUK7HsqbdyXiTwJUQiiP 3ONQyoAwl60OKjoB9hQ3Ngruz/uT+iK4N2xDk2l6XNMoocGSvq5MJOOmXHOgGl13 PYc8lMQrjIkEaOiK3Vuc1FRmPxAC7tjBS66Wz1Y5kkTDWYCSJFR7TrTNaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNJDISFC78Q9q8brWAkqR2CtUhdlMB8GA1UdIwQY MBaAFOBXTCh41rU2E5uJXwjJxtsY4SqbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEZkTUtIald0VFlUbTRsZkNNbkcyeGpoS3BzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8yOGQ2MDAtYTg2OS00YWIxLTliMmUt NDQ2MDE5OTY2YTE5LzEvNEZkTUtIald0VFlUbTRsZkNNbkcyeGpoS3BzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8yOGQ2MDAtYTg2OS00YWIxLTliMmUtNDQ2MDE5OTY2YTE5 LzEvNEZkTUtIald0VFlUbTRsZkNNbkcyeGpoS3BzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHVnkaUHi yYh3a0eK7KfM+SN1TUQ5SaUTuSdC2TlLZVAa8FKVxwtS2FnZWlhSRtvrlTBSykQd Yx0ONd+Sx9umL5Yt0D01hH9QC1O+3uilZBK9BtzQMu4Sx3LvD5dgGjYWjSMq2Ku6 mKj8tdn689Taesb9aPAJ5Z+xuO6AGXjfD7QkWfiLzpfHJlZj9OZPTkoE2U4e8+up km7UR/nkwGPheGTzou8+AIVnh7zCHdF+AWdYz0YlsENVWrAriufGfDtHnOUveK16 pZgvufqNaAAtxhNH6gz29DD0DnLXPkDZLLa5yiGzNSHc8qqMBL1L6blWwKR12rnG 8d6/mM1pCBQ4Jg== -----END CERTIFICATE-----Generated at Sat Jun 29 08:28:48 2024 by rpki-client on console-fra.rpki-client.org