$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft File: fQakK7JEblHxkuo3W99-7FpRx38.mft (raw, json) Hash identifier: 1zOHc3l1M3oSIoyWX1Z6cE4MQC3atTWpT/S1nb6NraI= Subject key identifier: 1E:E2:E0:11:66:25:5F:77:DE:2B:A5:D4:89:8E:CE:02:E6:62:2B:09 Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Certificate serial: 018F343E546C7BB69A1AEA3F5D0E2E2EE492 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft Manifest number: 0D24 Signing time: Wed 01 May 2024 13:00:51 +0000 Manifest this update: Wed 01 May 2024 13:00:51 +0000 Manifest next update: Thu 02 May 2024 13:00:51 +0000 Files and hashes: 1: 0Ptc5e04MYpFcKgbu4B-inPt8V8.roa (hash: hTx7CCmhdtcKGzDzeh/vfs+Vc/5S0Dh0Jau9lgTpZno=) 2: 2pezrgqhsJVwePtlDMBptXfUlYg.roa (hash: WyRROZNhvrIG6mWkQD6HGSZhiF4rscUeaT1smQ7eAI0=) 3: 36okcEqyJwBEmjqPensdrlJAZQE.roa (hash: VKpPcieQLNOOV1zq9Xmz7aseITxZFu3xU7GWxvPWPho=) 4: 6GbtVdXdF9J41hHVJuxQD41tzxE.roa (hash: Et40lsAk5stkMVL1iAJ9s0r4BCeqsf5MYkiR2+srhUI=) 5: 8tcgF35GkRrM-262SaTcEVPw6V8.roa (hash: kzaKl3CSevmaOWEGbsoGhrMOOV/MJk3Rc5AXB3FnCMA=) 6: 9SA_NUJQoN-5R9I9oUB9ftoZlgI.roa (hash: xiVm96H4PzVPMM0JHzWViQIfakKB3SzEeU9oyzJJBuM=) 7: DcpnPsKBWSVu9ROVfOol_ZaPshA.roa (hash: vWPQ0oymcNFvDFGYk1VazUgC5hJH6ZnUFyqKYbvN/7g=) 8: ElpSrJbzZk-aTNdoW8yP8n9tF6g.roa (hash: QHwL+7Qbu5Jq37868IBoGwLVpE7ZKhSr7Q8qcyeuhrA=) 9: GiRKTNrorQNftO23guHAbcFTNnQ.roa (hash: iKq2cDm8KO4bDaKkQi874E3IJmyfmiBfs00QGopGZaQ=) 10: H3nHw8z8666-L8U-_uxrwIJLMnY.roa (hash: MT6hy3SNloMEpBDAwfopc8db/vq7t+BAHUj/AXpHzkc=) 11: J8Y6M-rTzjkwTi4CCYVUDmsB7OU.roa (hash: NQC+auFCcfPaFPZ8Z2EqagYoFF60oKXcJnU+WF0m3Qc=) 12: LNyUHgMuzKrtcd38-8KBoI9J75s.roa (hash: YXeiwAJZMDkofaFFCvYiyeu0N19Mdf+bgtZAdJttxQo=) 13: MKYUTwexbxp7Q3QwH3nFWg5Gt9c.roa (hash: t5gUVQnT4ZiwtXHUxVlZeQ0YqvstAR/st4LuKOpMI38=) 14: MdJL5fDxVswlTt6-22Gv0Xa0PCQ.roa (hash: Q09uRS+Xxnx7xbNQCQdySWA0mcN91LrG6nGhxBJkkYI=) 15: Mzyn949UhdcCK5eerlZ5JDL7LJ4.roa (hash: xK/FununhztR3Pq5URkRqZKWIizbzlFSnWan/kAsW3k=) 16: NKTfhaynuJikCOogT3iqVZYPPlY.roa (hash: UbQmJTpXODvPpPEwff/DbF9QubJQYm387FRfIMAqhyo=) 17: QuviUgFlhVbcWVICKhuLqKq-rWI.roa (hash: FbZ2QwCkD4WYOcxZlHm5833NSoEUK/n32JEJ3i2VyXE=) 18: UWi0y91I-qFgkKybuqVY2vHIiD8.roa (hash: q0vjHCn3ediYNgX5UnJQ9n1nR0gHiIsyAHLgDENSfu0=) 19: Ug4yPWHwXqmOvkKRaFqWSrALbFE.roa (hash: z3OHqSu+1nCFIktQdqRIirne0J5TzIIRzIWVVAl62Kk=) 20: _xywnAxRzJYY7Cjr3ALQkOgTTg4.roa (hash: ZggYFy57ZGK4VqEWNGh9subbabARy5JFyyqaus7pcoo=) 21: bPbb9C03OvgjHKWEeoXmEOfSUoM.roa (hash: RI2dPBGhmB5ExZ9vavM6DjWDUEvXuGUqhBgL2YL1p/c=) 22: byoocndy3PKUdxdUXsA3MClDeqM.roa (hash: 46459WsfSLLO7oz/g6UZjcXvSOP0a/hBTGXppgrx8g8=) 23: fQakK7JEblHxkuo3W99-7FpRx38.crl (hash: gcN/MaHwyy8ZMwlpdSxbhHtEPNmIpvkH4ckDe1f5ISU=) 24: iMnUvgG_3_BEkzEIT_vuxHxBKh0.roa (hash: gD3HY92XTG+pfgdGpBPqFIbtjzhibf4XyOs0q6gZVds=) 25: jdSAQkXRU1EcDxGVMXB4lIxMwpQ.roa (hash: ybTgf6BpBUeMEIIaBWP/Q1N0ojjZeqh3yi1EvVdPwMs=) 26: k6YmwPg4lXJqh13GTCZcfca6oAU.roa (hash: n1xvurP+mFRvgiQsYMKeQTpiHSq2lacs/0/W5c0bMT4=) 27: minuj1QsdlCEJVZhsBl8Iu72K58.roa (hash: VriG46yyvPdT7A9tiIG7Kkwnc5c3fR5r9Dt8mgZ93wM=) 28: nzd75-pS9MC991OTVr3vTr4WJiU.roa (hash: VHjOeCvxloN6LRgchb79KbYJem8TBjQHkqGfd8VbQf4=) 29: pPk67LqQ1fZ-kSYK9Kqux2aMH70.roa (hash: x4FKosE07A5RcH2lyS1fSqiFUVJOZntWHGWLij8zkBI=) 30: qDLE5BHxzgZQ0026cMLMad0jOfo.roa (hash: gnmQZ0MoC0KKQasuKpGk7tno2QdAKH117dQdxsifcus=) 31: r9TRukFPgCmNrHvcMMf_DppB690.roa (hash: EWB7WIReTyQuKc10OD/fNzVe4p+VWtP51gol/nqAwDs=) 32: sfBrv1xvWRsdvQHZRhun597Aibg.roa (hash: qQNWTuWcAj4SrLmA0Xg3p/vFjmRHb2d+usicoZs+2x8=) 33: tUJ7Nt4jyOnG-YeQ5sPyAvcQkkQ.roa (hash: KQc31qB2c8zsTQcNP1zaByEJviR0VKpOZjqnYdwi6FI=) 34: usNcy26a5B5Yhagla4bXvTBjGsU.roa (hash: JsEIjHx5AqS30hQyGYGC6hOrZy7a/00uJGXaQq2vjko=) 35: v5haocw9WXy_b3brXQQXl9ceHnI.roa (hash: pLfRXlwEcQqbD7qxdfEspHVVOAYsw4CIvUAY818VcGU=) 36: x5b-MszIuT__xaih10u6UlXj4n8.roa (hash: hlJTpozm0LKwLpzR7XrZPgKAyWczpeqwPQljFAC43Ks=) 37: y0ommsCsC15s4VS_qF2pJRhm1uU.roa (hash: 3eE/osDrkvrzefH4YMwZVn4jQMFOQaSknCryRPUJeEo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 02 May 2024 13:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:34:3e:54:6c:7b:b6:9a:1a:ea:3f:5d:0e:2e:2e:e4:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Validity Not Before: May 1 13:00:51 2024 GMT Not After : May 2 13:00:51 2024 GMT Subject: CN=1ee2e01166255f77de2ba5d4898ece02e6622b09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:98:42:ed:9b:47:70:02:a8:b3:93:7f:29:b0: b3:0b:ac:bf:3e:e6:75:a1:38:7f:98:ea:24:d3:09: f3:36:bf:d2:46:7c:16:94:5f:1d:e4:bc:34:98:9a: db:95:c0:06:f9:9c:f2:ea:89:0d:4f:49:f0:5e:dd: 47:b0:7f:54:4c:2e:36:ab:72:ca:f3:f1:f7:a9:79: 5c:75:ba:ca:a6:1e:53:97:fa:bf:b6:19:5e:b4:a4: 83:8a:20:1f:5b:b3:a6:6a:0c:30:66:a8:f6:cf:01: 36:0f:48:85:ae:e6:cc:00:bd:be:dd:1c:f2:67:a3: fc:f4:f3:c2:a1:d6:61:44:15:9f:58:ca:6b:c5:f4: c2:13:59:40:d3:9b:3b:54:5b:fb:91:82:f3:bc:28: 35:de:65:32:b7:1a:59:3d:b1:65:54:c1:8a:f4:33: d8:2c:cf:43:dd:fc:1d:f8:e5:12:90:4e:fa:f6:bc: 88:d8:e3:31:51:2c:84:51:af:99:9c:f7:ed:fa:bd: f1:59:3c:3e:79:34:2c:f3:40:1d:c2:65:05:ef:90: 37:6d:2e:da:a4:0b:b9:7c:81:88:8c:9b:a8:3f:0a: 24:ad:85:fb:09:8f:c6:a4:a0:1a:bc:1f:a6:1e:16: 0b:83:63:29:02:1e:84:b4:d9:d9:02:52:7b:43:69: 64:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:E2:E0:11:66:25:5F:77:DE:2B:A5:D4:89:8E:CE:02:E6:62:2B:09 X509v3 Authority Key Identifier: keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:44:6f:f4:4f:e9:da:29:5c:00:16:32:8a:56:ba:b0:20:c1: 5b:60:dd:e0:5c:62:35:3b:11:e3:94:c4:62:de:c0:a0:01:b9: 9f:1d:77:7e:7a:a3:92:e7:85:50:e9:d8:3b:a9:d5:52:85:f0: 5b:3f:7e:d1:60:23:83:92:b9:4c:1b:64:c4:35:79:ee:fe:c6: 36:94:ac:82:df:d3:ad:6e:5c:83:e3:c9:34:39:7f:38:f1:e4: 99:fd:ff:42:b4:5c:90:52:a0:f8:34:e3:36:74:8c:ea:ba:a6: 63:76:d3:82:75:5b:9a:05:6c:f1:c4:f1:37:41:ab:3d:bf:91: 69:e7:4a:f7:c2:d4:99:68:9b:34:f3:3e:85:d0:f2:ed:9c:34: 5c:4c:d7:f1:18:02:e4:b3:8f:f9:d9:3c:b8:72:ba:df:38:68: 1c:49:55:e9:f4:32:82:3c:52:53:b3:07:f8:d9:e3:c1:06:5d: 84:6c:0a:9c:6a:96:1e:a4:b6:be:76:98:e2:1a:1f:3f:f6:ae: a6:b8:0e:51:a7:6e:5b:1d:c6:98:48:d2:4d:f2:56:f1:f5:97: 99:1e:ca:5f:7b:2d:4c:50:a5:c0:39:5a:fb:32:83:c5:e9:a4: e1:77:1b:3b:a3:9a:5f:55:83:db:ef:75:99:e2:9c:87:f5:a8: b8:5d:cb:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY80PlRse7aaGuo/XQ4uLuSSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1 MWM3N2YwHhcNMjQwNTAxMTMwMDUxWhcNMjQwNTAyMTMwMDUxWjAzMTEwLwYDVQQD EygxZWUyZTAxMTY2MjU1Zjc3ZGUyYmE1ZDQ4OThlY2UwMmU2NjIyYjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5hC7ZtHcAKos5N/KbCzC6y/PuZ1 oTh/mOok0wnzNr/SRnwWlF8d5Lw0mJrblcAG+Zzy6okNT0nwXt1HsH9UTC42q3LK 8/H3qXlcdbrKph5Tl/q/thletKSDiiAfW7OmagwwZqj2zwE2D0iFrubMAL2+3Rzy Z6P89PPCodZhRBWfWMprxfTCE1lA05s7VFv7kYLzvCg13mUytxpZPbFlVMGK9DPY LM9D3fwd+OUSkE769ryI2OMxUSyEUa+ZnPft+r3xWTw+eTQs80AdwmUF75A3bS7a pAu5fIGIjJuoPwokrYX7CY/GpKAavB+mHhYLg2MpAh6EtNnZAlJ7Q2lkYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB7i4BFmJV933iul1ImOzgLmYisJMB8GA1UdIwQY MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt MmNmODA2YjJkMGYyLzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAckRv9E/p 2ilcABYyila6sCDBW2Dd4FxiNTsR45TEYt7AoAG5nx13fnqjkueFUOnYO6nVUoXw Wz9+0WAjg5K5TBtkxDV57v7GNpSsgt/TrW5cg+PJNDl/OPHkmf3/QrRckFKg+DTj NnSM6rqmY3bTgnVbmgVs8cTxN0GrPb+RaedK98LUmWibNPM+hdDy7Zw0XEzX8RgC 5LOP+dk8uHK63zhoHElV6fQygjxSU7MH+NnjwQZdhGwKnGqWHqS2vnaY4hofP/au prgOUaduWx3GmEjSTfJW8fWXmR7KX3stTFClwDla+zKDxemk4XcbO6OaX1WD2+91 meKch/WouF3L4Q== -----END CERTIFICATE-----Generated at Wed May 1 21:54:39 2024 by rpki-client on console-ams.rpki-client.org