$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft File: BVFgW2dezk4PznF1rjGpP6gnK6Y.mft (raw, json) Hash identifier: Aop2KUKS9BnGfcbPMcGCGNPN/4++RBVvdJEjR0IuQ2o= Subject key identifier: 73:7E:41:B8:3D:8D:0F:11:0E:96:66:FF:38:9A:EF:7E:74:75:C2:A9 Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6 Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6 Certificate serial: 018F5F97204503148D56B268165C7F056472 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft Manifest number: 1193 Signing time: Thu 09 May 2024 23:01:30 +0000 Manifest this update: Thu 09 May 2024 23:01:30 +0000 Manifest next update: Fri 10 May 2024 23:01:30 +0000 Files and hashes: 1: 70zkDo5I6FAud-vYzAFjuWpiYXc.roa (hash: vtcB4WpDFnHCrfzXvVfJ5UK7hNf1m35Ybw18CAVL7Cc=) 2: BVFgW2dezk4PznF1rjGpP6gnK6Y.crl (hash: HXgAR0H1xzzCofyfBYIHNUL5Q7Ilfe199RFx2wxjl1c=) 3: H4ZOrP9F0MEuQqVg6AYmoOPLQDg.roa (hash: MozpigqtvqUhqbBs2/h6MWLEpVITWTGgcffP6LjH1ZY=) 4: MTckVLo32sMls5KM9TC1YJRfScs.roa (hash: 4CLC82KjVGjzjbMAyc7bkj2lirVcDwnrUOm2MJsBDco=) 5: M_n6ZSx3bKA3NBNV1bNPequv6hk.roa (hash: ROFbip2OIf2+1GopeB3fT6uNX1Zx+HMwSbhZsttSdp8=) 6: MzO_hlzRIGdrXRD8ZJKWdDZawto.roa (hash: S+LPw8pYzFvsU5te2LsbQ0TJgTDz89il1/yD+/tgtlE=) 7: N7WKQSTDYeed0t6SRUV2IaIfwJ4.roa (hash: JIhDusrryDLa/8a3bADYcVKDz/47AZUW8AXFyt/Ss68=) 8: QKbhqnsXiFGdhBwUUpg2AzDZkD4.roa (hash: TWcedXtEbo5FQjEyEEJlIG6MmjkrznkKDE+P6JeqhBY=) 9: Ui4VJiTOkYD1-Bk0bLVrq2cIzWY.roa (hash: D9d+MSOWsOMv6yefcHoiKuRtPM5X0TuAezL8hOjBZSM=) 10: ZBWGWAqzzMphg8N26iWCScRydeg.roa (hash: A6bFWbJ2kwMwkm3nxNWtNaJhbLgU7mMYdBxgzHzi2zU=) 11: dQhDG0xX-qThErXogqMiaL2Bf9I.roa (hash: 6VrItchjVA3XiBywKvD5gKgXOe1f0uI2hvo6vWF12Uc=) 12: f2e3pBYArH8MRuEYi3JDqJGGX_I.roa (hash: HDiLeae1WjBqOdkX1l7fFhyS6eC70vWko4BVEbFuf5Y=) 13: jKrMkwfp85W6Crt6MR6LYfTzAOs.roa (hash: RW6k5BOKK7MkKUac/6UvRI+7ZzxMzv2pw90OM1dMfPw=) 14: jO-V0f7GA4fOEWb20-4_t4pJ5Rg.roa (hash: h2KqJxX+xdGpGNslXDiYmoBfr1soy2toBPqs2bemrtU=) 15: p0UnklHT7AYiN5pDFR_gtRKYHnI.roa (hash: bOavOiYH2nkgwWIUrE7ZQfh8h4hS3dTPbD/djKvp10I=) 16: xBN0jtI0CXCpDXka0-yeZBUN41g.roa (hash: SnvkpUHLF0jkVJ6iAtCiEgwZ2cFtc9DQUfTb3umIRkE=) 17: z9iVptFKI5R17f4E0awYZQ2kWmQ.roa (hash: AqPa3VPdK6wi9PMlVVsn6LTcZ48mUlpkiqaBalCY6JM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 10 May 2024 20:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:5f:97:20:45:03:14:8d:56:b2:68:16:5c:7f:05:64:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6 Validity Not Before: May 9 23:01:30 2024 GMT Not After : May 10 23:01:30 2024 GMT Subject: CN=737e41b83d8d0f110e9666ff389aef7e7475c2a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:46:0f:b4:12:46:ec:29:5b:dd:fd:4c:ad:75: 77:c8:bf:cd:9e:cf:37:da:61:fa:8c:16:04:dd:dc: 43:04:60:13:d0:7a:3b:a7:11:df:ff:e1:60:8b:77: 56:89:ac:d2:12:41:1b:5f:08:44:2c:c7:ec:7f:22: 9f:16:6f:e6:47:3d:2e:1e:f1:a7:09:f4:d1:d7:73: 95:01:89:b1:1c:20:4b:09:67:ce:f8:f2:7b:1f:c0: 67:15:cf:0a:19:a2:ab:a1:98:52:12:36:f3:85:2a: 4b:8f:af:68:a0:82:1c:91:e4:8e:ed:42:d2:51:93: 2f:95:b9:2a:6a:8c:b7:d5:05:ed:ac:2a:4d:d5:72: c5:76:56:f3:d2:7a:d1:0f:44:f9:a0:8d:bd:35:14: a8:de:74:60:96:7f:0d:c7:11:65:41:a9:ae:dc:00: b1:04:c0:b8:69:60:1a:ea:a9:da:11:72:62:5a:aa: 7f:8c:77:2f:ff:cc:f5:7d:1f:1b:64:b0:2e:39:37: 58:23:b7:18:db:50:d6:98:f5:fb:13:96:9f:1a:5c: 2a:e6:50:c6:1f:ff:8b:0c:8a:f1:94:9e:3b:22:55: 05:91:e0:9d:7f:52:98:9e:1a:c9:1a:07:1b:07:ca: 1d:00:d3:f8:c6:b7:58:93:c0:9b:fb:b9:be:06:3c: 40:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:7E:41:B8:3D:8D:0F:11:0E:96:66:FF:38:9A:EF:7E:74:75:C2:A9 X509v3 Authority Key Identifier: keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:5c:4e:fb:f7:13:cd:ca:76:c5:ee:5d:53:8d:70:e0:54:3c: d2:ac:b3:3b:46:9e:db:e8:66:b1:e7:e1:20:e7:3a:70:eb:ef: 83:2f:2f:1e:14:bb:82:74:d9:43:3f:d1:56:e7:d5:7a:a1:cc: d9:aa:61:6c:c9:b2:1f:06:8b:6f:9d:61:af:7f:da:98:8e:fc: cc:ac:7f:63:2a:02:f8:79:3c:15:14:c2:cb:f9:54:49:88:b5: d9:0b:b3:b2:22:ce:56:2e:3a:80:c7:20:04:e7:3b:59:57:ed: 63:4b:a2:ec:6d:a6:d6:fb:24:ea:4a:de:3e:73:d0:82:b4:4b: bf:47:8f:4d:34:56:43:6c:a6:5d:a4:7b:2e:1a:cc:8f:dd:18: f2:bb:fc:fa:c0:74:af:3f:02:92:36:6f:ce:39:9c:d9:c6:07: e4:02:3c:f1:b1:6a:47:ca:95:54:97:6e:31:fc:a0:0e:d5:c1: eb:6d:e2:72:ce:70:89:2a:c6:bb:c7:0b:bd:42:80:e1:bd:a6: 5f:b5:25:03:2f:91:8c:fc:4b:b2:ca:16:16:74:fc:be:40:a1: 3d:c0:27:5b:e1:2f:41:46:87:c8:72:fd:0e:2d:55:b1:41:3c: 33:54:cc:08:6b:3b:6c:e7:5b:8f:0a:98:5b:09:f7:79:33:11: df:a1:7e:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY9flyBFAxSNVrJoFlx/BWRyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NTE2MDViNjc1ZWNlNGUwZmNlNzE3NWFlMzFhOTNmYTgy NzJiYTYwHhcNMjQwNTA5MjMwMTMwWhcNMjQwNTEwMjMwMTMwWjAzMTEwLwYDVQQD Eyg3MzdlNDFiODNkOGQwZjExMGU5NjY2ZmYzODlhZWY3ZTc0NzVjMmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEYPtBJG7Clb3f1MrXV3yL/Nns83 2mH6jBYE3dxDBGAT0Ho7pxHf/+Fgi3dWiazSEkEbXwhELMfsfyKfFm/mRz0uHvGn CfTR13OVAYmxHCBLCWfO+PJ7H8BnFc8KGaKroZhSEjbzhSpLj69ooIIckeSO7ULS UZMvlbkqaoy31QXtrCpN1XLFdlbz0nrRD0T5oI29NRSo3nRgln8NxxFlQamu3ACx BMC4aWAa6qnaEXJiWqp/jHcv/8z1fR8bZLAuOTdYI7cY21DWmPX7E5afGlwq5lDG H/+LDIrxlJ47IlUFkeCdf1KYnhrJGgcbB8odANP4xrdYk8Cb+7m+BjxA8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHN+Qbg9jQ8RDpZm/zia7350dcKpMB8GA1UdIwQY MBaAFAVRYFtnXs5OD85xda4xqT+oJyumMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEt MDc3OWY0OGVjZWEwLzEvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEtMDc3OWY0OGVjZWEw LzEvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdVxO+/cT zcp2xe5dU41w4FQ80qyzO0ae2+hmsefhIOc6cOvvgy8vHhS7gnTZQz/RVufVeqHM 2aphbMmyHwaLb51hr3/amI78zKx/YyoC+Hk8FRTCy/lUSYi12QuzsiLOVi46gMcg BOc7WVftY0ui7G2m1vsk6krePnPQgrRLv0ePTTRWQ2ymXaR7LhrMj90Y8rv8+sB0 rz8CkjZvzjmc2cYH5AI88bFqR8qVVJduMfygDtXB623ics5wiSrGu8cLvUKA4b2m X7UlAy+RjPxLssoWFnT8vkChPcAnW+EvQUaHyHL9Di1VsUE8M1TMCGs7bOdbjwqY Wwn3eTMR36F+yg== -----END CERTIFICATE-----Generated at Fri May 10 00:51:21 2024 by rpki-client on console-ams.rpki-client.org