$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft File: iabNn0vrewwE0x_-XGdKh6dznSE.mft (raw, json) Hash identifier: 6l8JY5rERUyXqmvgSaWCBwbgnejI5fLEZfK7+8wfBmU= Subject key identifier: CD:99:9C:43:0F:09:1A:9E:CC:E3:FA:DB:8E:6F:E2:61:87:4D:C9:E3 Authority key identifier: 89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21 Certificate issuer: /CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21 Certificate serial: 01901DEC057DAADE843261C22755BDAEF7A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft Manifest number: 11CA Signing time: Sat 15 Jun 2024 22:02:05 +0000 Manifest this update: Sat 15 Jun 2024 22:02:05 +0000 Manifest next update: Sun 16 Jun 2024 22:02:05 +0000 Files and hashes: 1: AzYDkxUWLaTZjB-XX-6Nvh-LWE4.roa (hash: fi96oSZBasCVRfM6Vgb5HhkMhxaQGlHtSNowYgJi0vo=) 2: CWj233lPAqw8_rMALxBmTEPyJlU.roa (hash: P6cfsKR3FgH9iwh9rK6dQ7yJ2NZK5YWiWQYv4mJVkp8=) 3: DG99ydt56AbkZ_iH7Oq6NNq3Tf8.roa (hash: 6UGTlTGb2kzg1TCNJrW+xXoODOI86hXrsgvB9zQ5b5s=) 4: DyWx6fnnjYUkrSWlylTt0GQe7oc.roa (hash: mrZMC5yn6HP2pfYaRI3UXzgu3el0WX6o/tbMuAD4z+o=) 5: FjrlhT1M167FHSdwm_rwiutafjk.roa (hash: p4Vv2oS3XKbd0+RJHbs36RdBkIjCU/k2xLvydzWBC5g=) 6: G2Nc7X8kuhaKkBB5rKZzY5f6d_w.roa (hash: BiQ1jJwpRLMR5whpXakkBkSSSmnMdLyFbrLDwM9WtXM=) 7: NJDTF5BiDxH2xSIKF9q-MQGA90w.roa (hash: NJGq3QWPIg9Qigxi5PBl+vCMoEQbNj/zmOAYVq5Qc5o=) 8: _QWAF4YKL2UUphqXSW3bXNArDiA.roa (hash: v0GrkY0j4LkSWmr+4RDsVhQVoA2WPqtMEQxHabJhRlc=) 9: aSE_vOxaBPTwzQojgmT49BImlkc.roa (hash: OIvF6XmAsffCFEWyuQeuAM2IcS4Blmxz4lQAKiXuSus=) 10: iabNn0vrewwE0x_-XGdKh6dznSE.crl (hash: bLMoOpYywO9bBY9xi0ne6tG8Fwc2MxjPppsd4KBlTao=) 11: u_WkSaiz99hMIXWO3ApLD8m07JA.roa (hash: HT2GM0bq9jwDXyb7lx39cGT6xIdRxAxsRAw+XsmQxIk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 16 Jun 2024 22:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:90:1d:ec:05:7d:aa:de:84:32:61:c2:27:55:bd:ae:f7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21 Validity Not Before: Jun 15 22:02:05 2024 GMT Not After : Jun 16 22:02:05 2024 GMT Subject: CN=cd999c430f091a9ecce3fadb8e6fe261874dc9e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e9:46:f6:49:49:3c:24:31:60:cc:4a:b0:b0: c0:26:22:b5:83:52:b4:03:3a:27:2a:1e:30:16:f0: 20:c4:69:6d:55:42:b9:a2:ae:4d:0a:3a:da:12:f7: 77:7e:fc:aa:03:59:89:54:3b:33:c3:a2:be:a4:4b: e1:05:e2:03:bd:b1:a2:4b:c0:a0:a6:ce:72:8e:88: 6b:03:74:ab:af:94:fb:ed:d9:f1:00:c1:36:6d:f0: 16:15:99:79:a5:4f:32:6e:d1:c7:07:b8:1f:b6:09: 96:00:81:09:c8:c7:16:4d:d8:ac:42:b2:77:eb:8c: 2b:d8:89:60:ec:df:9b:06:6e:0b:f5:70:81:59:d3: e4:65:5b:3b:05:34:b2:59:f9:c4:59:f6:bf:ad:1b: 86:fd:38:5a:27:3b:6f:f4:35:b3:48:c2:9e:87:5d: 1b:f6:d1:20:e5:b0:09:c1:10:7a:d1:ff:f0:2f:de: 36:72:b5:41:af:b9:4e:02:ea:a9:ef:c6:12:8e:21: e6:aa:4f:43:ab:45:9c:e4:54:ba:b5:96:91:bf:b7: e2:91:60:87:90:6a:fd:d0:26:28:3c:a1:97:b3:9c: 3a:9e:0e:a2:b5:d5:4a:fd:61:24:28:6e:9f:dd:50: 89:99:36:0e:32:64:7e:ef:bc:a4:e2:92:d8:4c:ab: 24:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:99:9C:43:0F:09:1A:9E:CC:E3:FA:DB:8E:6F:E2:61:87:4D:C9:E3 X509v3 Authority Key Identifier: keyid:89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:64:08:97:7f:ce:a8:4b:ff:ed:c0:54:91:98:8f:37:5b:c0: da:98:22:05:87:76:58:09:af:f3:89:aa:d7:9e:4d:b2:0d:6e: ac:c2:ee:25:d5:62:22:09:9e:77:d3:b8:9c:21:f6:26:1e:37: 27:09:e1:b4:32:5b:68:62:80:cc:ee:25:93:f3:57:54:73:4c: 1a:13:d8:4b:e6:56:3e:01:35:3e:8b:aa:73:c0:5c:44:92:51: d1:79:71:e3:c2:ea:bb:fc:af:c7:55:6f:4e:77:ca:2f:a3:95: 27:f7:89:d8:9c:ba:de:3c:46:49:97:12:92:01:71:4f:2f:6d: 75:73:2b:43:31:60:b5:f6:28:7d:94:7a:89:e9:47:5d:81:e6: 16:09:5d:ef:aa:03:9c:80:56:77:36:21:38:51:d7:ce:bb:01: 43:d9:98:02:9f:8b:67:c5:bb:dc:55:13:46:16:41:3e:7c:d0: 36:95:df:a9:24:20:37:12:6a:b5:d2:f4:f8:2c:74:60:6d:22: a5:c7:03:b0:51:95:7e:98:2e:43:89:0d:61:ae:ae:24:18:a9: 01:0f:e4:e2:09:23:36:5d:ea:b9:df:35:cf:65:ab:ac:b4:5b: 08:7f:dc:46:53:6a:2c:dc:c6:a6:77:67:59:66:22:0a:d1:3c: 56:4e:d5:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZAd7AV9qt6EMmHCJ1W9rvegMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YTZjZDlmNGJlYjdiMGMwNGQzMWZmZTVjNjc0YTg3YTc3 MzlkMjEwHhcNMjQwNjE1MjIwMjA1WhcNMjQwNjE2MjIwMjA1WjAzMTEwLwYDVQQD EyhjZDk5OWM0MzBmMDkxYTllY2NlM2ZhZGI4ZTZmZTI2MTg3NGRjOWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOlG9klJPCQxYMxKsLDAJiK1g1K0 AzonKh4wFvAgxGltVUK5oq5NCjraEvd3fvyqA1mJVDszw6K+pEvhBeIDvbGiS8Cg ps5yjohrA3Srr5T77dnxAME2bfAWFZl5pU8ybtHHB7gftgmWAIEJyMcWTdisQrJ3 64wr2Ilg7N+bBm4L9XCBWdPkZVs7BTSyWfnEWfa/rRuG/ThaJztv9DWzSMKeh10b 9tEg5bAJwRB60f/wL942crVBr7lOAuqp78YSjiHmqk9Dq0Wc5FS6tZaRv7fikWCH kGr90CYoPKGXs5w6ng6itdVK/WEkKG6f3VCJmTYOMmR+77yk4pLYTKskTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM2ZnEMPCRqezOP6245v4mGHTcnjMB8GA1UdIwQY MBaAFImmzZ9L63sMBNMf/lxnSoenc50hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85OWE0Y2MtNDcyMC00YTY0LWFhMDYt MWY5MjQ0OTVmY2RkLzEvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni85OWE0Y2MtNDcyMC00YTY0LWFhMDYtMWY5MjQ0OTVmY2Rk LzEvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZWQIl3/O qEv/7cBUkZiPN1vA2pgiBYd2WAmv84mq155Nsg1urMLuJdViIgmed9O4nCH2Jh43 JwnhtDJbaGKAzO4lk/NXVHNMGhPYS+ZWPgE1Pouqc8BcRJJR0Xlx48Lqu/yvx1Vv TnfKL6OVJ/eJ2Jy63jxGSZcSkgFxTy9tdXMrQzFgtfYofZR6ielHXYHmFgld76oD nIBWdzYhOFHXzrsBQ9mYAp+LZ8W73FUTRhZBPnzQNpXfqSQgNxJqtdL0+Cx0YG0i pccDsFGVfpguQ4kNYa6uJBipAQ/k4gkjNl3qud81z2WrrLRbCH/cRlNqLNzGpndn WWYiCtE8Vk7VFg== -----END CERTIFICATE-----Generated at Sun Jun 16 04:09:36 2024 by rpki-client on console-ams.rpki-client.org