$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft File: qFMQ9QMTeuizXU8yn0bwad1wOBU.mft (raw, json) Hash identifier: 2JEcnx00Xzi6ZNahN5rfl9RPaJvFEs1t5Oj6BqF/Oog= Subject key identifier: 32:55:D3:0D:35:41:56:3E:61:87:AF:AC:9C:9A:A6:68:54:A3:F7:28 Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815 Certificate serial: 018F9C86FD0D9EB47888E8A665C3E9064921 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft Manifest number: 0969 Signing time: Tue 21 May 2024 19:00:43 +0000 Manifest this update: Tue 21 May 2024 19:00:43 +0000 Manifest next update: Wed 22 May 2024 19:00:43 +0000 Files and hashes: 1: AspSVUqcTyY3tgeJPVtmoMZTUEc.roa (hash: 5mazVwl41nmOIHx0+IXkI5Y6TP9lGglLHqnZw5m790Y=) 2: EFqz7lx9I4P_kfwri9FSWNBahXg.roa (hash: We3JwkjHovpi6e4tGxCGtco2K9kE2lyKSPcGvk/s6n0=) 3: QXmvJo6-tOzIkusbW4ikLtcGRNA.roa (hash: vNHIwg5S8DKIvFrO7yhmpJZ1EYpnraJs705PwTgYbQs=) 4: VPtPysHSOmlX7ebQX3Mc9NW0mqQ.roa (hash: CPbtTtuQm1D31R9pe+64uycEABH3ONKwSpF8v6ChlPw=) 5: k1T8BtKmLAvGLRQOJkwBUJvJtko.roa (hash: 2yWzR6brNimJxyZVSDkBhtZGlLvW1d2CJ3NPSGIg/n4=) 6: lsGvSke7WiBxu7As3xtdo2tm8FM.roa (hash: MXzauXCzOAHoQhiLB4LbBDy1gGefx040R+U5hJWCAVY=) 7: n8m9rV5Jny2tual3PiuDuyKQYzg.roa (hash: 7ZaRlsnxcpwy6D1Shqsur1nWXScYf13NisiVH9mIHbQ=) 8: qFMQ9QMTeuizXU8yn0bwad1wOBU.crl (hash: VNHFhkoSC7MFavQBRaNHFXphHSUsPy69EAiDTIZuyl8=) 9: sZWPaxj3o7dJqiBJGcQ_ZlSOI-c.roa (hash: zxeVB7p+B0lDUYrg+Lk8IkAt7uYVlmrkLo2Dsl8E/1k=) 10: u2iY02RaZacNA4z2HA0Y9KidfIo.roa (hash: tmsEqSB1MWNvuwah79s08gxV9oc+s/iAeyC4d1kCaVU=) 11: z9MgkyyUamM1CFQrm0UVdeK-Em4.roa (hash: lur8IpG2D9Jw42ZDqnkqTitVWToL9yQLfEmQ2sW/9oU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 May 2024 14:34:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:9c:86:fd:0d:9e:b4:78:88:e8:a6:65:c3:e9:06:49:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815 Validity Not Before: May 21 19:00:43 2024 GMT Not After : May 22 19:00:43 2024 GMT Subject: CN=3255d30d3541563e6187afac9c9aa66854a3f728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:da:09:d6:5a:46:43:4f:28:bf:50:9c:8c:fa: 18:f5:86:3c:fa:09:ad:e7:02:80:3f:f5:ad:3b:c1: 73:9c:75:20:41:ac:9d:20:26:05:76:31:61:48:93: 18:47:14:21:b1:68:2b:40:70:c5:c8:b9:34:a4:1a: 49:af:38:d9:cb:9c:27:90:d6:af:ed:96:ab:a1:3d: f4:e4:b7:6a:0b:86:bd:62:df:49:b1:1b:d1:11:e2: b9:45:bc:5d:f6:84:ab:3d:a4:66:eb:e4:11:29:9d: a4:69:2e:b4:fb:00:3a:59:ad:71:a8:43:f4:73:40: 4a:cd:42:9c:28:cc:c6:b4:ef:72:9a:d9:1b:f1:03: 0c:c6:fe:c4:0e:be:79:be:68:65:e1:78:57:ce:0b: 50:79:6d:8b:a8:d0:9d:51:20:f2:7a:3c:d1:df:ce: c4:68:d1:25:6c:da:2a:c2:d5:38:b9:20:0c:b9:ab: af:4c:be:cd:e1:7e:3e:21:a5:0b:00:8e:36:e2:21: 35:61:7f:0c:b1:b7:d3:26:48:78:7f:c6:5b:52:d8: 02:a2:ca:b8:01:f4:fe:27:d8:b3:e6:d8:e0:0b:2e: 55:d0:17:9a:dd:de:93:13:e9:97:9c:a3:d4:c7:2b: fc:10:da:b4:72:08:3e:d7:05:a1:40:c6:b4:de:f1: 88:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:55:D3:0D:35:41:56:3E:61:87:AF:AC:9C:9A:A6:68:54:A3:F7:28 X509v3 Authority Key Identifier: keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:c5:af:ba:b4:09:5f:af:5c:74:5b:1a:a1:5c:c7:36:93:b7: e3:8f:c0:1b:79:1d:4f:92:9d:c5:ff:bb:9d:36:12:46:ca:ef: 9d:28:af:13:2c:39:6a:23:72:de:99:98:62:f0:28:52:9c:16: d7:3d:78:a1:8e:af:ec:f1:84:8c:37:4e:00:50:fc:e5:e2:99: dd:2d:98:80:76:b9:50:9e:f2:76:32:c7:d7:ba:46:aa:06:33: 91:6e:41:d8:cb:88:af:07:9c:23:50:b1:3b:6e:fa:55:4f:cf: b1:f0:07:3d:84:6b:1f:48:9b:52:c2:02:88:c6:8a:a6:4e:76: 16:0f:39:97:c0:53:ec:9d:27:c3:ef:27:3a:6c:0d:ec:9c:f6: 12:d9:37:e7:52:0f:08:d1:76:f3:62:02:15:6c:d5:97:56:d7: d2:e0:7f:e0:ca:c5:20:35:8c:29:d0:1e:fc:c8:76:15:54:ea: 05:31:86:bb:aa:d6:42:8a:2e:1f:fc:91:7d:5f:b4:c2:21:88: 95:6a:9f:51:c9:58:5e:5a:2a:d1:6c:ff:fd:89:d0:58:20:1c: 1b:19:51:a9:fc:ff:0b:a9:98:19:71:c5:57:77:d0:4d:58:6c: a9:c1:cc:f9:e8:f1:e0:10:87:74:3d:36:6c:88:48:ab:6a:62: e1:b6:32:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY+chv0NnrR4iOimZcPpBkkhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NTMxMGY1MDMxMzdhZThiMzVkNGYzMjlmNDZmMDY5ZGQ3 MDM4MTUwHhcNMjQwNTIxMTkwMDQzWhcNMjQwNTIyMTkwMDQzWjAzMTEwLwYDVQQD EygzMjU1ZDMwZDM1NDE1NjNlNjE4N2FmYWM5YzlhYTY2ODU0YTNmNzI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNoJ1lpGQ08ov1CcjPoY9YY8+gmt 5wKAP/WtO8FznHUgQaydICYFdjFhSJMYRxQhsWgrQHDFyLk0pBpJrzjZy5wnkNav 7ZaroT305LdqC4a9Yt9JsRvREeK5Rbxd9oSrPaRm6+QRKZ2kaS60+wA6Wa1xqEP0 c0BKzUKcKMzGtO9ymtkb8QMMxv7EDr55vmhl4XhXzgtQeW2LqNCdUSDyejzR387E aNElbNoqwtU4uSAMuauvTL7N4X4+IaULAI424iE1YX8MsbfTJkh4f8ZbUtgCosq4 AfT+J9iz5tjgCy5V0Bea3d6TE+mXnKPUxyv8ENq0cgg+1wWhQMa03vGIswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDJV0w01QVY+YYevrJyapmhUo/coMB8GA1UdIwQY MBaAFKhTEPUDE3ros11PMp9G8GndcDgVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYt MzAxODlhNWE0ZWJhLzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYtMzAxODlhNWE0ZWJh LzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlsWvurQJ X69cdFsaoVzHNpO344/AG3kdT5Kdxf+7nTYSRsrvnSivEyw5aiNy3pmYYvAoUpwW 1z14oY6v7PGEjDdOAFD85eKZ3S2YgHa5UJ7ydjLH17pGqgYzkW5B2MuIrwecI1Cx O276VU/PsfAHPYRrH0ibUsICiMaKpk52Fg85l8BT7J0nw+8nOmwN7Jz2Etk351IP CNF282ICFWzVl1bX0uB/4MrFIDWMKdAe/Mh2FVTqBTGGu6rWQoouH/yRfV+0wiGI lWqfUclYXloq0Wz//YnQWCAcGxlRqfz/C6mYGXHFV3fQTVhsqcHM+ejx4BCHdD02 bIhIq2pi4bYyvg== -----END CERTIFICATE-----Generated at Tue May 21 21:11:35 2024 by rpki-client on console-fra.rpki-client.org