$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.mft File: QfWhDk_SZVrbu0Dt4YsmFaxVjqk.mft (raw, json) Hash identifier: 8LfgRCwYN0Xt0Dd4Grrp4VIDzo4CgrwDh6c94Jc5NdA= Subject key identifier: 9D:EC:A8:4B:2F:70:9D:9F:9F:54:EC:44:83:84:0C:A3:12:6F:A0:91 Authority key identifier: 41:F5:A1:0E:4F:D2:65:5A:DB:BB:40:ED:E1:8B:26:15:AC:55:8E:A9 Certificate issuer: /CN=41f5a10e4fd2655adbbb40ede18b2615ac558ea9 Certificate serial: 018F82904029BB596B66BE7B6F1A8D2ED8B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.mft Manifest number: 1188 Signing time: Thu 16 May 2024 18:00:42 +0000 Manifest this update: Thu 16 May 2024 18:00:42 +0000 Manifest next update: Fri 17 May 2024 18:00:42 +0000 Files and hashes: 1: 0xbd8sgfZcVKF9uWomyenEU41X0.roa (hash: XMjeFyNcoZnVoPCz/mv+4gOhJ8UVJkwIitK6LHkFv54=) 2: 45aXjuokswiW39fx3CqUH82WnIQ.roa (hash: 1bk8sJdmK4vkj68QR/N67ZNIjt+ChruhaQIklCxIbMA=) 3: C1ROWJrktcCe7IvBd9c2GgDZuhA.roa (hash: NCcvBC7IX7NGG0jkl4mdO2KjaFjHXAFD9GNcUduHrzs=) 4: GFxsTGRc6lwrbeiKMvqO73tvW9M.roa (hash: WPoYac112CDAtH+vCBXRBpy9Olgu32ZQACBiKGNrBpo=) 5: IzHwNm-BEQTEBYULoYhnNcicmo0.roa (hash: yQ54dHkz7MXvYm3+yZl/AUTutqPwCCn9suLHijKfXJI=) 6: QfWhDk_SZVrbu0Dt4YsmFaxVjqk.crl (hash: hdf7u/VtSCs0pDmzBHej0cX2aOFJkLa7A9oUERaJ+RY=) 7: U6CMGZWetkyjmqpyRrZKimchDyk.roa (hash: zHHfrfEft63f1F+weV57nt8ZKPCnuv5c/bqnQUeug/Q=) 8: Uu6M6m1gWFUsIGfL44RBBGQtCR0.roa (hash: Z2EnPuuD9R/VoG9pfDZ3Lepme0USUZSV7wvv496Dseo=) 9: V6iUNWwYLEinQmrNOl070Dbx3lM.roa (hash: RWwiWD1fMGsQsUgWYjxV8D6zfNqV48l2xU20VnXn3IM=) 10: WKmjvN-mPD8di-iGYQiqfhge8Vw.roa (hash: zI48l97EZdJlaUlzK3DPSPK2EIfu4G5TJJaSKzy/CB8=) 11: YXUOPX6cE9y3-HbqZ5h89vgXW-I.roa (hash: DlTtGRkkvqAKxGiL8AgLg8RI4pgfHzZz/NQip9y+rHE=) 12: bM1SIdD5RiywQzJQHXyZ2nXJYQU.roa (hash: /diheX7SO95do/Rxzn8KM52H1xJUm977Q8HjHndrzOM=) 13: cgwC3lrWO880doz4bZGsnwRl5Jg.roa (hash: 4s1h35eNd4FE7ElmYCR+W5nhBFLQqCvzmNBpS0ybGxw=) 14: dd3oIxIBaBxRer6cZLbvvWg26Os.roa (hash: JD8w4SBsdMT1FEUgLsc4mDvlAo6sAqumvM+7ex6G0SI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.mft rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 May 2024 14:49:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:82:90:40:29:bb:59:6b:66:be:7b:6f:1a:8d:2e:d8:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41f5a10e4fd2655adbbb40ede18b2615ac558ea9 Validity Not Before: May 16 18:00:42 2024 GMT Not After : May 17 18:00:42 2024 GMT Subject: CN=9deca84b2f709d9f9f54ec4483840ca3126fa091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:ed:dd:18:66:4f:8d:7b:83:10:f2:a8:39:45: 58:c1:30:63:67:1e:71:b1:0b:96:67:ee:91:65:26: 3a:0a:7b:e9:d8:ee:12:85:2a:d2:bf:bc:47:a1:b3: c8:53:3d:08:f8:db:96:d2:78:cb:1d:b4:8b:6c:04: 4b:1b:89:45:9b:be:66:ca:c3:de:0a:a1:aa:29:f6: 03:44:e1:e7:0c:7c:d1:03:b1:af:5c:e6:37:3a:b2: 40:8c:69:7f:38:c1:f8:0d:c5:f3:e4:80:d7:67:f4: 10:9e:4b:db:6b:80:b6:68:e9:c4:bd:6b:eb:3a:63: b8:34:36:0b:a9:fa:9c:49:bd:41:53:06:4d:3d:5c: 3b:1b:e2:38:ff:42:1b:96:df:59:54:37:0b:35:54: f5:6d:52:cb:c5:cb:6a:9c:19:35:f2:b3:1d:42:2e: 5a:51:30:ac:77:c6:12:8d:70:29:27:af:42:80:68: 8a:79:1c:6b:bb:db:75:4a:e4:e7:08:d3:4f:cb:d8: 5d:38:d6:bc:39:67:6b:ec:a7:89:63:db:51:4a:69: 26:d7:6d:fc:d0:40:fa:e5:23:ac:55:1e:59:4b:2a: 23:94:6d:86:98:9b:65:cc:36:18:b1:ca:dc:a5:17: bc:2d:7f:c1:a1:ac:9a:f6:f9:d1:a8:05:5d:ba:ca: d6:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:EC:A8:4B:2F:70:9D:9F:9F:54:EC:44:83:84:0C:A3:12:6F:A0:91 X509v3 Authority Key Identifier: keyid:41:F5:A1:0E:4F:D2:65:5A:DB:BB:40:ED:E1:8B:26:15:AC:55:8E:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:28:56:c1:73:84:ea:8a:b4:1e:c7:e0:16:14:cc:f3:82:22: 88:f9:07:e4:cd:44:b9:73:f5:32:41:88:7d:13:f1:90:26:e8: 2c:4e:25:f7:d1:c9:92:5a:e7:7b:1a:a0:5f:70:de:ab:0d:14: 16:f7:28:54:64:7e:b0:67:aa:e6:6d:65:5e:1a:08:60:6e:9e: 7e:bf:f2:c8:61:ea:62:05:37:e0:6a:44:37:c3:e3:11:39:b1: 5c:b3:95:ce:bb:e2:b9:7a:a7:a4:db:b2:c1:00:2d:1c:b4:81: 5b:a2:3c:de:7d:49:2f:51:1d:45:86:37:a4:02:53:1c:ee:8c: 70:9a:c5:33:6d:92:da:d8:c2:4d:8c:4b:e8:0f:2b:be:85:9f: 62:db:7b:f2:c1:db:c0:a8:25:be:1d:58:b5:af:66:2a:43:c7: f5:84:66:c1:6d:a9:e8:a8:85:69:e5:d6:08:14:9b:a3:75:5d: ec:e0:d9:83:36:a6:25:9e:56:5a:af:00:15:36:b7:37:b1:3f: 57:3f:a5:46:1a:17:fb:6b:a6:5d:8b:e0:ef:da:e4:1c:17:11: 3d:d0:0d:05:46:c2:8e:67:ff:2b:93:50:13:89:ff:11:2b:20: 84:f1:d2:09:25:60:47:80:2a:b6:96:52:c2:30:2f:74:cf:04: 71:fe:79:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY+CkEApu1lrZr57bxqNLti3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxZjVhMTBlNGZkMjY1NWFkYmJiNDBlZGUxOGIyNjE1YWM1 NThlYTkwHhcNMjQwNTE2MTgwMDQyWhcNMjQwNTE3MTgwMDQyWjAzMTEwLwYDVQQD Eyg5ZGVjYTg0YjJmNzA5ZDlmOWY1NGVjNDQ4Mzg0MGNhMzEyNmZhMDkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8e3dGGZPjXuDEPKoOUVYwTBjZx5x sQuWZ+6RZSY6Cnvp2O4ShSrSv7xHobPIUz0I+NuW0njLHbSLbARLG4lFm75mysPe CqGqKfYDROHnDHzRA7GvXOY3OrJAjGl/OMH4DcXz5IDXZ/QQnkvba4C2aOnEvWvr OmO4NDYLqfqcSb1BUwZNPVw7G+I4/0Iblt9ZVDcLNVT1bVLLxctqnBk18rMdQi5a UTCsd8YSjXApJ69CgGiKeRxru9t1SuTnCNNPy9hdONa8OWdr7KeJY9tRSmkm1238 0ED65SOsVR5ZSyojlG2GmJtlzDYYscrcpRe8LX/Boaya9vnRqAVdusrWswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ3sqEsvcJ2fn1TsRIOEDKMSb6CRMB8GA1UdIwQY MBaAFEH1oQ5P0mVa27tA7eGLJhWsVY6pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWZXaERrX1NaVnJidTBEdDRZc21GYXhWanFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84ZDNjODItZTQwMy00ZGE2LWIzMTUt ODc5MDIwNmYwZDc0LzEvUWZXaERrX1NaVnJidTBEdDRZc21GYXhWanFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi84ZDNjODItZTQwMy00ZGE2LWIzMTUtODc5MDIwNmYwZDc0 LzEvUWZXaERrX1NaVnJidTBEdDRZc21GYXhWanFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArihWwXOE 6oq0HsfgFhTM84IiiPkH5M1EuXP1MkGIfRPxkCboLE4l99HJklrnexqgX3Deqw0U FvcoVGR+sGeq5m1lXhoIYG6efr/yyGHqYgU34GpEN8PjETmxXLOVzrviuXqnpNuy wQAtHLSBW6I83n1JL1EdRYY3pAJTHO6McJrFM22S2tjCTYxL6A8rvoWfYtt78sHb wKglvh1Yta9mKkPH9YRmwW2p6KiFaeXWCBSbo3Vd7ODZgzamJZ5WWq8AFTa3N7E/ Vz+lRhoX+2umXYvg79rkHBcRPdANBUbCjmf/K5NQE4n/ESsghPHSCSVgR4AqtpZS wjAvdM8Ecf552A== -----END CERTIFICATE-----Generated at Thu May 16 20:55:22 2024 by rpki-client on console-fra.rpki-client.org