$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft File: _TfMjxazxsvTNGqj7WF3Hz6DrJc.mft (raw, json) Hash identifier: kn4hPd96HnJy5hGybA78WT+MY3A0izI1E7XT2EZ3x7Y= Subject key identifier: EE:AB:F6:93:4D:6E:D3:0B:A4:BB:1F:8C:56:27:BC:4C:B1:3C:14:42 Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97 Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97 Certificate serial: 018F86A3F3EEF17B22AF7BC627EA9ABFAA45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft Manifest number: 11C1 Signing time: Fri 17 May 2024 13:00:42 +0000 Manifest this update: Fri 17 May 2024 13:00:42 +0000 Manifest next update: Sat 18 May 2024 13:00:42 +0000 Files and hashes: 1: 5_nL8M2Wg7xr3ppG_LZgU1-TZ_A.roa (hash: YJdb8km/i3GGoFyhp2XiGnBv/v5IZGl7NjkmTyE9CfQ=) 2: 9cv-BqKXTbv9-l3weblztzQO55Y.roa (hash: XjafAMoS10c/RGPUBJmodqEwDdwY5X9XBXmJxVYXyCM=) 3: 9ldwqpf8iaRwc7gPv6qDLGeXuz4.roa (hash: hIM8DOYjlsVe27ZrVisy9AZPPItSet33YQMaScpSIvc=) 4: ArEwGZaLp_pVln648nl1Sw4orWI.roa (hash: LvhewKBjt4kXSoNx+DkDoRIGAAsbw1IR71jCw0mpW/E=) 5: DdSiKc3lYNCxjCxCbUWfSAB9P1I.roa (hash: tBeWqTvz3zRDL9oV8mIg8hjrXVuNN4OWX6jdvmCeA44=) 6: KCAdOWkUZjWJyffQNT-SF03E5hQ.roa (hash: f/+Q5ed2qdw4megJJEiuMYrGHarYSSSriVUQZ2HnoIY=) 7: KkjB4wcKJB7shf5F946wjz3xuPQ.roa (hash: dnqQ1UrsOMo0PGDTCugpKyjR+EzbWYoVtUq9TSUed4Q=) 8: Ruu1TLcGrp1OPVmcuVssDSpm-eQ.roa (hash: wGCz7lMt/W0+0Yv/16zD/cwY2N1HW0boZiaq2EYkt7U=) 9: Th5Xeh8nXiBsXc6Pfvmbe6eik-M.roa (hash: 1KG2ClcrCy5S6p473cJ50vtzpWj4KLcnjmsCA3I7WII=) 10: _TfMjxazxsvTNGqj7WF3Hz6DrJc.crl (hash: mBEGtsxlOAp2xsicueAn6M/rdRNRMlOrqHhz72p5kdg=) 11: ikEQoCRbVW_OKU864WfmN_VOWdE.roa (hash: sP+viU1Svr20yw0X/OUOenW192+Ms9QSkTU2OY4SrBo=) 12: kY3KA70JOx6iZNcx29Ge1kTCS38.roa (hash: pAOi0+x2VvFwK5AHrUpBhN3p33Z4EOlnkeTE30pGsdY=) 13: kyiMWTrPRDE6ouvkfBtXt8d9pvk.roa (hash: /lJJKEtPgtCl84n8ujj6Re8luk9aycv3NGd8YPBuZOQ=) 14: un0kCN_Sbe3QnwuKHldGm2MhI3E.roa (hash: VaX6gg6vfZibQRyd7oKfXWDXY53lg92LvVOTSlm42OE=) 15: wkTUByEYgORXfkOKCtsdZb4pIf8.roa (hash: A3YOb2ZKWDOQJc5JV5v2A/VMfneyh3ZfYhub254uGMM=) 16: yV-5d2bEsy2B4rMXoK3Ys4VN4Tc.roa (hash: gpS9evnYLKVSFDh5v3DMR7makkyyxrSxS25Bu0CqIAQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 May 2024 13:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:86:a3:f3:ee:f1:7b:22:af:7b:c6:27:ea:9a:bf:aa:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97 Validity Not Before: May 17 13:00:42 2024 GMT Not After : May 18 13:00:42 2024 GMT Subject: CN=eeabf6934d6ed30ba4bb1f8c5627bc4cb13c1442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c8:12:a7:52:2f:17:cd:6a:f7:99:a8:8a:89: 3b:05:fb:e5:86:5b:49:00:44:72:62:be:ad:00:52: fc:e1:06:e9:8b:f3:f4:50:45:3a:6c:c9:2e:66:b5: 5d:88:1e:13:ce:ee:79:5e:02:11:9e:55:d4:a2:63: 32:22:9c:e1:b6:07:4b:88:99:91:82:1d:23:f5:c3: ed:ce:96:95:d5:0c:47:26:76:85:53:84:33:b5:f2: e8:63:ca:d8:1b:90:54:cc:cb:ed:38:33:8e:aa:2f: 16:64:15:4e:69:f8:50:e6:56:27:6c:6a:73:5a:a1: f3:d6:4d:22:c2:fd:35:a7:50:f8:c5:08:3b:6e:cb: da:2c:64:e7:5a:8e:56:77:b9:32:c2:96:95:b8:9f: 36:8d:45:57:2a:11:2d:18:3c:34:9f:42:5a:63:02: aa:55:c6:18:9e:8a:3a:1e:d9:d2:dc:fe:45:36:60: a0:de:e0:b7:40:01:cc:ba:9d:a3:75:b9:7a:0a:c5: aa:e8:22:46:6d:37:7a:d9:c5:55:27:62:55:26:6c: 53:2b:e3:8c:6c:74:ef:16:a2:5a:94:52:99:84:d2: cf:14:5b:b5:35:51:2f:e4:63:5d:85:f2:89:36:06: 49:b4:f3:27:03:d8:ad:42:b9:fb:b7:59:2c:e0:7b: be:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:AB:F6:93:4D:6E:D3:0B:A4:BB:1F:8C:56:27:BC:4C:B1:3C:14:42 X509v3 Authority Key Identifier: keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:a6:ba:be:6d:95:32:f8:e3:b7:e4:67:3d:c8:cb:d0:14:c7: e1:a3:e8:95:73:bf:f2:38:d4:8d:10:20:e4:68:f2:0a:5b:31: b8:c6:d5:20:82:40:d5:a3:ca:6e:c1:58:b1:44:14:2c:86:ea: 3b:ee:62:ce:bf:0b:f5:25:35:af:73:91:42:7c:28:ae:de:a9: e5:40:f2:fc:87:94:20:ec:ab:c7:7e:a6:0f:80:1c:8f:21:cf: df:18:ff:76:cc:50:67:ec:59:c4:a4:b2:ee:02:4e:b8:ec:d4: 27:d5:d8:2a:9e:02:85:f8:e6:1a:9f:8d:76:a9:15:74:1f:c5: 82:cd:18:6b:dd:99:22:e7:e5:01:dd:e4:e3:ad:b9:16:69:94: fb:e0:3e:fd:3c:77:a2:20:92:7f:fc:b2:9d:a3:8d:a3:4a:e9: d0:56:b1:ee:2a:d0:b1:71:31:65:a2:9a:c9:05:b9:b0:dd:13: 3a:8f:cd:74:39:e6:43:bd:b4:b2:72:ba:65:ad:4e:06:be:7f: 42:06:ec:0d:97:e9:2f:0e:35:0c:dc:ab:1a:57:96:52:93:a0: bd:1a:92:46:ea:4a:6b:a4:5d:9d:c1:77:5e:7c:dc:1f:cf:40: bc:fa:15:5d:b3:8d:09:a4:6e:d3:13:a6:1e:b1:0c:27:25:dd: ec:9b:8d:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY+Go/Pu8Xsir3vGJ+qav6pFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMzdjYzhmMTZiM2M2Y2JkMzM0NmFhM2VkNjE3NzFmM2U4 M2FjOTcwHhcNMjQwNTE3MTMwMDQyWhcNMjQwNTE4MTMwMDQyWjAzMTEwLwYDVQQD EyhlZWFiZjY5MzRkNmVkMzBiYTRiYjFmOGM1NjI3YmM0Y2IxM2MxNDQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4sgSp1IvF81q95moiok7BfvlhltJ AERyYr6tAFL84Qbpi/P0UEU6bMkuZrVdiB4Tzu55XgIRnlXUomMyIpzhtgdLiJmR gh0j9cPtzpaV1QxHJnaFU4QztfLoY8rYG5BUzMvtODOOqi8WZBVOafhQ5lYnbGpz WqHz1k0iwv01p1D4xQg7bsvaLGTnWo5Wd7kywpaVuJ82jUVXKhEtGDw0n0JaYwKq VcYYnoo6HtnS3P5FNmCg3uC3QAHMup2jdbl6CsWq6CJGbTd62cVVJ2JVJmxTK+OM bHTvFqJalFKZhNLPFFu1NVEv5GNdhfKJNgZJtPMnA9itQrn7t1ks4Hu+DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO6r9pNNbtMLpLsfjFYnvEyxPBRCMB8GA1UdIwQY MBaAFP03zI8Ws8bL0zRqo+1hdx8+g6yXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMt N2UwNWFiNDFiNmU0LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMtN2UwNWFiNDFiNmU0 LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZqa6vm2V Mvjjt+RnPcjL0BTH4aPolXO/8jjUjRAg5GjyClsxuMbVIIJA1aPKbsFYsUQULIbq O+5izr8L9SU1r3ORQnwort6p5UDy/IeUIOyrx36mD4AcjyHP3xj/dsxQZ+xZxKSy 7gJOuOzUJ9XYKp4ChfjmGp+NdqkVdB/Fgs0Ya92ZIuflAd3k4625FmmU++A+/Tx3 oiCSf/yynaONo0rp0Fax7irQsXExZaKayQW5sN0TOo/NdDnmQ720snK6Za1OBr5/ QgbsDZfpLw41DNyrGleWUpOgvRqSRupKa6RdncF3XnzcH89AvPoVXbONCaRu0xOm HrEMJyXd7JuNxQ== -----END CERTIFICATE-----Generated at Fri May 17 19:21:35 2024 by rpki-client on console-fra.rpki-client.org