$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft File: l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft (raw, json) Hash identifier: ehEE32GsD6CYmxbYrafIQ8tbG2rdTw5v3akEcDpqEqM= Subject key identifier: 6D:6A:64:8E:10:C1:6D:AC:A6:12:4A:E6:C8:51:7B:CD:F4:3B:1A:CF Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Certificate serial: 018F82FD8D6A3A3228C237D350E42D517148 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft Manifest number: 0240 Signing time: Thu 16 May 2024 20:00:05 +0000 Manifest this update: Thu 16 May 2024 20:00:05 +0000 Manifest next update: Fri 17 May 2024 20:00:05 +0000 Files and hashes: 1: 5Q6TazizNZP069w3OqZlPT3VnMA.roa (hash: MqFrFMICq1Ia2Wa95BqQ/xk/pVuHi5PcFMFdoWXsQzA=) 2: 6Q9S9rTHfGqWFsFO1J6vEM9xVPI.roa (hash: PfBx4Wj7wQY8pT8odg3I8YMfCibQlD51v1uDRIGu/Lk=) 3: 7AarGFpmzxMM3BMMiUCSdKVzuR4.roa (hash: y5QHEYvsYCjGVCmeL62vmveFNb6leAGhQiP3cqLu2OA=) 4: EXx1RCTyJO3IhBDNHaCcSPLI_rw.roa (hash: 9OJE//NWDya9BBk9gO0Ef/aQ+teWcDXOJU7/4veW4+E=) 5: HFG8crhZqa0VsgcF-yIQkWC8mZA.roa (hash: WPdm44zOYPzXFKc15xniunD9XsLapQclqpWLTCd20mQ=) 6: KG99ZaelzWjeIqNtxFRm12q_bg0.roa (hash: 5Oj46QZw/4vX6GsbrcfX86pMcPh1Y1M6TiSVrexkkMs=) 7: QeHJwnhAkpXHO4v9mvtikuSAPms.roa (hash: xoKdBooEsFUwYNd8D2PHHdDRRZTiYLbXiYTdS54pbaY=) 8: _cktXOvLE7Sfsdzvui_X-kq4TcI.roa (hash: Gd9dvTt64iZyvi9flKzLoaN3bwqkmhChRbv4aC0fCRo=) 9: a7cozjz_VlptmO3crTYSIafZv3Q.roa (hash: si4nw2kic4kUcPbTs/4Iy8E0i248prtukmqshQeugkk=) 10: bqqG0FAAUoSehDSiHrJ56SDxyaI.roa (hash: ICWu3QXPVl7uBfFIggd/lcwOzyJA/lS/eRU8IOMnCck=) 11: l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl (hash: gjk4plHhkZsNechm5kTkUAaLyIRVC3VmYpW+IeU2Wzg=) 12: oSDVzSu5TJsKhNFZbQ-G7yy3Uig.roa (hash: 0khgo7LNlts8r+CeyhQBvMoGP1+0yhpDCcdsOn1Q5Cs=) 13: vSqStmLGNAJTogWbuua3TsunNXM.roa (hash: qu+AT1SuROcnw3G9X2TZCCnrcOyGYofqMOomT56rwQo=) 14: zo157da-AB6HI374tBFkz6iDmOk.roa (hash: a8NBWQzChpeRoliTClZgXPSTJGxIjnt6GocR1e8Aj/4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 May 2024 14:49:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:82:fd:8d:6a:3a:32:28:c2:37:d3:50:e4:2d:51:71:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5 Validity Not Before: May 16 20:00:05 2024 GMT Not After : May 17 20:00:05 2024 GMT Subject: CN=6d6a648e10c16daca6124ae6c8517bcdf43b1acf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:6f:7f:b6:16:d2:50:72:60:63:17:f8:69:f9: 80:3d:81:0d:1c:b2:9f:58:d0:93:50:4c:ce:d3:21: e4:d2:28:f3:4f:00:1c:ea:9e:43:b1:5f:c2:9c:1e: a2:48:4d:d9:0f:3b:41:d4:6d:f1:03:86:40:4a:34: 27:16:2e:2f:fe:17:3c:37:5d:cd:11:b1:2c:17:92: 49:d7:76:85:d5:fa:77:08:84:2c:52:51:56:78:51: c8:97:27:4a:de:a9:5e:03:ed:56:f6:11:9d:b4:2e: de:c5:1f:52:1c:96:52:88:6b:fb:f0:5c:f4:32:fe: 39:13:84:a4:f0:a8:09:8e:62:54:73:10:24:f2:14: 0f:d7:10:53:3c:a5:9a:f9:c6:15:db:72:1d:15:bd: 5b:f7:9e:41:25:55:fe:5c:66:82:ca:a6:91:84:ce: b6:96:99:a3:be:0e:43:41:ff:52:d3:6d:72:36:ba: 1b:7b:6f:a6:f2:d7:1c:b2:56:e7:73:ce:05:6e:02: 70:d5:c6:17:7c:7c:65:91:1d:30:b6:e3:a4:8e:11: c2:13:94:03:fc:23:d1:c4:f6:0a:11:a3:a3:1c:19: 7d:ca:97:91:d3:7a:0e:0b:e3:ff:82:1e:55:aa:14: 98:5e:7c:ee:25:0d:6f:eb:7e:50:cc:dd:e2:44:1a: 26:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:6A:64:8E:10:C1:6D:AC:A6:12:4A:E6:C8:51:7B:CD:F4:3B:1A:CF X509v3 Authority Key Identifier: keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:65:0c:6b:0e:78:b5:48:f7:08:87:c1:fb:f6:9a:b1:42:42: 70:fe:20:0f:51:2e:33:77:15:5e:aa:2c:43:1c:e7:eb:d6:53: e0:9d:86:b2:c5:63:d5:7b:fa:ab:1f:f8:80:ce:02:c4:26:bc: a9:a7:86:00:6f:3d:aa:bc:75:44:2a:82:67:7d:fa:3d:fb:d0: 70:88:37:c0:06:c9:7d:46:3c:fa:24:f3:f6:bc:65:99:00:b2: 38:d9:fe:99:0a:33:a4:56:0f:63:6f:f3:ca:e6:ca:4e:e1:8c: bf:0f:fd:e5:0a:a0:79:6d:17:63:ba:1d:6f:16:6b:95:b9:5c: 8e:ca:09:c9:77:73:2b:aa:da:90:d0:5c:61:be:9d:8c:50:c7: c2:b3:5d:76:4f:58:f3:f6:0e:26:7a:92:46:cb:ca:e7:e7:e2: 9a:5a:4c:34:be:a8:78:50:ee:79:87:08:6e:9b:5d:68:47:76: c5:b2:6a:d0:d2:09:f6:df:db:94:5d:14:a2:8b:06:45:3d:f9: 2c:cc:74:d5:25:7c:af:05:2e:da:76:dd:ae:5d:a3:60:f4:1c: 5c:ab:b9:a7:8c:86:56:12:5d:4c:53:ea:e5:04:ed:18:e9:1d: 10:3b:af:3c:85:59:a2:a3:38:c3:d9:1d:15:a2:07:b0:d4:4f: fc:41:1c:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY+C/Y1qOjIowjfTUOQtUXFIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3OTkxNDBiNDJkYjZjYjZiZjhjNmRkNDEzNzQ3ZmNmNGE2 ZmQ5YjUwHhcNMjQwNTE2MjAwMDA1WhcNMjQwNTE3MjAwMDA1WjAzMTEwLwYDVQQD Eyg2ZDZhNjQ4ZTEwYzE2ZGFjYTYxMjRhZTZjODUxN2JjZGY0M2IxYWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk29/thbSUHJgYxf4afmAPYENHLKf WNCTUEzO0yHk0ijzTwAc6p5DsV/CnB6iSE3ZDztB1G3xA4ZASjQnFi4v/hc8N13N EbEsF5JJ13aF1fp3CIQsUlFWeFHIlydK3qleA+1W9hGdtC7exR9SHJZSiGv78Fz0 Mv45E4Sk8KgJjmJUcxAk8hQP1xBTPKWa+cYV23IdFb1b955BJVX+XGaCyqaRhM62 lpmjvg5DQf9S021yNrobe2+m8tccslbnc84FbgJw1cYXfHxlkR0wtuOkjhHCE5QD /CPRxPYKEaOjHBl9ypeR03oOC+P/gh5VqhSYXnzuJQ1v635QzN3iRBomhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG1qZI4QwW2sphJK5shRe830OxrPMB8GA1UdIwQY MBaAFJeZFAtC22y2v4xt1BN0f89Kb9m1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2Qt NTk1OTE5YmUwZjUyLzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS80ZWVmMDMtOTFmZS00NDVhLWE3Y2QtNTk1OTE5YmUwZjUy LzEvbDVrVUMwTGJiTGFfakczVUUzUl96MHB2MmJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMGUMaw54 tUj3CIfB+/aasUJCcP4gD1EuM3cVXqosQxzn69ZT4J2GssVj1Xv6qx/4gM4CxCa8 qaeGAG89qrx1RCqCZ336PfvQcIg3wAbJfUY8+iTz9rxlmQCyONn+mQozpFYPY2/z yubKTuGMvw/95QqgeW0XY7odbxZrlblcjsoJyXdzK6rakNBcYb6djFDHwrNddk9Y 8/YOJnqSRsvK5+fimlpMNL6oeFDueYcIbptdaEd2xbJq0NIJ9t/blF0UoosGRT35 LMx01SV8rwUu2nbdrl2jYPQcXKu5p4yGVhJdTFPq5QTtGOkdEDuvPIVZoqM4w9kd FaIHsNRP/EEcSw== -----END CERTIFICATE-----Generated at Thu May 16 21:48:44 2024 by rpki-client on console-fra.rpki-client.org