$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft File: BztMEkjEvPIrBXffypsU2QY8KMA.mft (raw, json) Hash identifier: J2QGnnprsycSJcvIe3S6NkRwDPV3a2J2gadfsV5z88I= Subject key identifier: 90:E7:70:73:1F:64:CB:C4:78:E4:3C:07:C9:5E:95:7E:75:02:B2:E1 Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0 Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0 Certificate serial: 018F90824E038283AEDE77EDD22904A2371A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft Manifest number: 0FBF Signing time: Sun 19 May 2024 11:00:09 +0000 Manifest this update: Sun 19 May 2024 11:00:09 +0000 Manifest next update: Mon 20 May 2024 11:00:09 +0000 Files and hashes: 1: 1B0MjJvImsmwnBC54J1UxQN0O-8.roa (hash: EwXvEJhnIv7c1sS/pbpigr1iO1F/0Uk6hhVQTnNgrNs=) 2: 2UR7n5W2YH2DkF5Xpufws-QOw2M.roa (hash: T79yZiReAyVWYO9VqL1KX+dHjDEhEzPut3+iTxpGaMk=) 3: 2YJOY-n9NwKwcqzLt0551H97vj4.roa (hash: b+JBLHOtv9483D7e4lUPnnrEHklP5VSLIeYVjmq/9R0=) 4: 3qq6o7e9LSH7mJWTjqi3lyFqw5U.roa (hash: dho1GYRt0l2Wr3tggGU32gbZxI5GFSZvfLpy8Tsgxo0=) 5: 7jlk6DFx6zzLFMshUVQFSCNh1gk.roa (hash: mvNRCoHNOlcbKeKo6B3KLXjDEaqvaRZkX6K1KmoMMHc=) 6: BztMEkjEvPIrBXffypsU2QY8KMA.crl (hash: Z1v14RkWX7aE4500GhLApPqxVK9TN5ja3LnmoKIgzb4=) 7: KUsJCVgPy1fTvMovfuqxtI9z3VY.roa (hash: /Nd2qqexq+/z2JUhe+iOicaiLexKpmKDvDJQg7xrRKw=) 8: M5qvFaZa0jjX6USKWgwabLQ71GA.roa (hash: WeMMEHXwKsigOeHICITkoK6YmZYDY/LxBORSEwZHG14=) 9: Md-crvhdTpDpDvWZiF-t87BiFi8.roa (hash: wRs1I/W6rUmHPf9ky7qxgoVzRRGifkp3gc6WUm7ierU=) 10: NxftkZQxhYA3gBK3YLZ--5dhjYY.roa (hash: 4yrwLP1M0nV7nvr8eZqE21N8mlyaBcxifLM+RHEawwg=) 11: QTNYwKTQq4V_8Ba7DXovWn-UJf4.roa (hash: aUFXAIcoTOn9phW1VaarOK8yet7G3VS0br+ZMIAbJzI=) 12: RJYL095BXPZRuECIDjJxfXjEOA8.roa (hash: X8MP8WeVxYBtX5YvdfYlzaTq4Qbp1xmhinLiIQL+gTU=) 13: TvvxXYs1iLCo0S2nPEz8X1hhjtc.roa (hash: sBYWauWFHJNJqDddsXXMNATaZ/bU3/UVdKBh3/8uZIA=) 14: VSftAl8CS2FVSqGw4I2Tc74L344.roa (hash: teF8p1/matweefE/W+rPPeuf5hbvgnstY2MupD+Nr44=) 15: Vzu9LGhrwScWPRXVowbWLFMZNQg.roa (hash: W4EXSzL9KXSVpRMdwESQIOOlVWWbP9qBkbILyjRV/KY=) 16: Z9ln1zHGg4dXPHdYUCwUEGik6Z4.roa (hash: 8BnER/mvx0nzyN/lQ+wslvkmwX7mangYsFUR9zE4o60=) 17: a8OQkvKCwaalzHJV8ZnmdhdEec8.roa (hash: u0BT7utTh1usGrC4FywgdWEqhgBE9AVHaQJlUIGy4U4=) 18: aA3Wc6FdIQRBGV-CVjQvKlREFUY.roa (hash: nCauzRVxbwRaMjsofeKLnZvG6FX8RhNG0vZ3Rm607cI=) 19: dgs0vnL-bpGllISxQ2yvfCblR9o.roa (hash: aPDzjBOaCwyR/T4JoMEBhbkwPHUggin7oTpeir5gVYk=) 20: eHMGQjOZXw5_rgA5oZKFNp9N7uM.roa (hash: q00YxCXZiKyV5wcFj6KKfNq78k1TGXTXOtVaRpAUIsY=) 21: e_8OyKXT4_wQAu4mMprIonNhVes.roa (hash: HtOMx5VxC0eT8TL1PF4v39TUfYxy/ATRtXyPJTujF3M=) 22: eyd9mYBiy1QWZ6eLRCi7H1QcORI.roa (hash: kFMsYJHjYrwcyvDYbkIFRERNd4DIOW6is4VTwSXZp+I=) 23: mHPI6ziQlfw_LqOAsA9ciBy0btU.roa (hash: rGOCR6nuyMuqjGzrjZryVLVUqTtjVCBQMkXUQ60z0BA=) 24: oVYxan-GXhsmrmb41bN8odlAt4k.roa (hash: 833Ix0wX4tLDeRRUyNavAIl46KZywd6YLxdzDFuv02w=) 25: wSEfPAomuVv66ROBOQh7GkyZOeQ.roa (hash: PmOV+z+rCWXNn/Vh2k/XpmdSE1NxBPZ83KCn3DNE3m8=) 26: xEkiw27nSRXD0YX8mmmgmkPtAns.roa (hash: YYM95/iDyLjUrsE4wJBcmuwEac+F2swUyOhTmU5i+Ww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 May 2024 05:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:90:82:4e:03:82:83:ae:de:77:ed:d2:29:04:a2:37:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0 Validity Not Before: May 19 11:00:09 2024 GMT Not After : May 20 11:00:09 2024 GMT Subject: CN=90e770731f64cbc478e43c07c95e957e7502b2e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a8:02:cb:ec:2d:28:8b:67:fa:6b:33:94:63: 81:f6:f2:7a:37:89:8f:12:55:e7:21:b7:d6:73:f6: dc:9e:bb:0c:43:8c:53:94:0e:e5:48:c7:80:ec:51: 0c:c5:c3:cf:0d:4a:fc:cb:32:f4:5b:a7:6c:e5:83: bb:5b:37:6e:c0:67:f0:bb:a3:ed:79:a9:bd:82:8f: 80:55:64:9f:47:18:25:80:e2:3e:fe:36:5c:77:18: c7:96:f7:15:44:37:95:93:7a:f3:64:e5:2b:4f:64: 84:04:1e:de:b4:0f:57:1e:e1:41:fd:1c:f7:55:ec: 8b:60:ab:ee:28:2d:9d:6b:5c:d2:b3:ca:17:53:0e: d7:28:7c:e9:96:4b:39:0f:55:9b:0d:ce:86:fc:f8: aa:64:df:c1:ce:39:04:0d:fb:99:00:1b:f4:69:ac: 8a:ad:aa:d1:5c:df:e1:a2:10:ef:d1:45:ea:b8:4d: 54:55:8d:ea:2e:c6:16:fe:09:0c:0c:97:18:89:d4: aa:74:b7:b9:57:bb:f9:cc:5c:7e:90:9a:71:d9:0d: a3:6b:ee:34:e3:40:76:d5:cb:19:4d:6f:8f:8d:6d: 12:a7:a0:41:0f:b7:44:c0:db:84:cb:3e:f6:d4:fb: 98:0d:49:f8:e2:ad:43:4b:23:6b:e6:53:02:da:6e: 18:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:E7:70:73:1F:64:CB:C4:78:E4:3C:07:C9:5E:95:7E:75:02:B2:E1 X509v3 Authority Key Identifier: keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:8e:5a:9e:b8:99:ff:c7:52:21:a5:50:ac:a3:8f:80:cc:f4: cc:ed:52:1d:b4:d1:84:54:3d:1d:74:1b:97:5a:6b:30:bf:29: b1:86:ec:0c:b7:52:89:0d:94:d5:c9:10:18:bb:76:c4:0c:9c: e2:d5:d0:d1:52:98:ac:82:0d:b1:36:b1:ac:98:ae:f0:f8:1c: 2e:8f:bd:b9:4b:53:94:7a:3b:b0:5a:61:79:e7:58:2f:42:73: c0:47:6e:38:3e:8c:3b:df:30:a0:2d:76:ff:51:e0:63:aa:81: df:8a:48:7d:c9:f1:d3:85:35:fc:34:f5:6d:08:54:59:7e:ac: 96:d2:9e:4a:2e:25:c0:27:1f:0c:b1:89:52:76:05:b5:74:e3: 09:88:f5:fd:47:58:20:d1:3a:af:e8:30:ab:bc:b0:cc:e2:1b: 05:7a:c1:24:fa:30:64:e1:2b:08:28:d4:3f:00:ab:00:66:ba: 7e:74:57:25:a9:2d:9e:38:c6:e1:ee:e7:a2:32:df:16:15:4e: 18:dd:1a:cc:34:c8:5f:e3:3b:a2:ea:65:bd:32:c9:b4:89:d1: 6d:64:30:bc:41:c2:0a:8c:eb:ec:a6:5b:bf:ab:1c:e2:cb:f1: 4b:33:5b:b0:db:ea:17:24:44:ba:23:e3:c3:95:5a:d1:f5:57: 9f:c8:08:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY+Qgk4DgoOu3nft0ikEojcaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3M2I0YzEyNDhjNGJjZjIyYjA1NzdkZmNhOWIxNGQ5MDYz YzI4YzAwHhcNMjQwNTE5MTEwMDA5WhcNMjQwNTIwMTEwMDA5WjAzMTEwLwYDVQQD Eyg5MGU3NzA3MzFmNjRjYmM0NzhlNDNjMDdjOTVlOTU3ZTc1MDJiMmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKgCy+wtKItn+mszlGOB9vJ6N4mP ElXnIbfWc/bcnrsMQ4xTlA7lSMeA7FEMxcPPDUr8yzL0W6ds5YO7WzduwGfwu6Pt eam9go+AVWSfRxglgOI+/jZcdxjHlvcVRDeVk3rzZOUrT2SEBB7etA9XHuFB/Rz3 VeyLYKvuKC2da1zSs8oXUw7XKHzplks5D1WbDc6G/PiqZN/BzjkEDfuZABv0aayK rarRXN/hohDv0UXquE1UVY3qLsYW/gkMDJcYidSqdLe5V7v5zFx+kJpx2Q2ja+40 40B21csZTW+PjW0Sp6BBD7dEwNuEyz721PuYDUn44q1DSyNr5lMC2m4YbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJDncHMfZMvEeOQ8B8lelX51ArLhMB8GA1UdIwQY MBaAFAc7TBJIxLzyKwV338qbFNkGPCjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQt YThkMzYxY2U2NGFhLzEvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQtYThkMzYxY2U2NGFh LzEvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi45anriZ /8dSIaVQrKOPgMz0zO1SHbTRhFQ9HXQbl1prML8psYbsDLdSiQ2U1ckQGLt2xAyc 4tXQ0VKYrIINsTaxrJiu8PgcLo+9uUtTlHo7sFpheedYL0JzwEduOD6MO98woC12 /1HgY6qB34pIfcnx04U1/DT1bQhUWX6sltKeSi4lwCcfDLGJUnYFtXTjCYj1/UdY INE6r+gwq7ywzOIbBXrBJPowZOErCCjUPwCrAGa6fnRXJaktnjjG4e7nojLfFhVO GN0azDTIX+M7ouplvTLJtInRbWQwvEHCCozr7KZbv6sc4svxSzNbsNvqFyREuiPj w5Va0fVXn8gI/Q== -----END CERTIFICATE-----Generated at Sun May 19 14:58:21 2024 by rpki-client on console-ams.rpki-client.org