$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft File: IvLC57wdpU2RnKW1lB03iJKyzLI.mft (raw, json) Hash identifier: xe1JQ2IO2N9ng1JXN+6YbAVIQNko8P3h5rM+ijOb1Sw= Subject key identifier: 22:A2:A5:4E:43:59:A8:F1:BC:62:3D:99:62:A5:B0:2A:B1:AE:76:91 Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2 Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2 Certificate serial: 018F71D36C3AC91254D2E31F529C0E3EDAA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft Manifest number: 0CCF Signing time: Mon 13 May 2024 12:00:32 +0000 Manifest this update: Mon 13 May 2024 12:00:32 +0000 Manifest next update: Tue 14 May 2024 12:00:32 +0000 Files and hashes: 1: 6DIruzDtNLKY1KvbdU4FS7XhypI.roa (hash: 53jiJ/d4P/JJYdJgNQ8EuImodhF9BPPsybfL9g9nxqk=) 2: CRav-kAnaTCSWjonIP6cOo_clU4.roa (hash: Od07L82YLZboYvPIM3RWhbqLX4NNecCludMb4S+wlGM=) 3: Cmjqxtw5xzvhyUNdHCiwzU8qpu8.roa (hash: lw4pDy0L4CEYwanQ2NA5xRRYslDOBeS5Utei4Pj3ddU=) 4: IvLC57wdpU2RnKW1lB03iJKyzLI.crl (hash: YKphB8vfoZxDT9IO1bJt3YcLJadDzSRUkA1FXOvYjHA=) 5: OkWsPpCY9cmp0n7on3mOCdxKZeE.roa (hash: AKVMJaAbXj4vjL/+WnwKx6S5l/ISR1qmL0qXph50h7Y=) 6: QILwz7PCysFKM0haafF1QoFZCb4.roa (hash: Qk1oPbRRu/Vb6AcRWacIaivj+lAETgaPx5zZDbkrTbw=) 7: WAXfaCwq8gy5fzYsBVRDCJvR0uM.roa (hash: B8nMb7XC6UZowviWps22dmdyOLfKfGCFUe4dR5/X0+4=) 8: ZqB00BJh1bL0az3KA6LZS1ukKYY.roa (hash: oQve/lHQi97wxeVWOHPyWJe+6JbnB6sE1Yb/2lWCU6I=) 9: auhedlG9t5zzptcI9wpQtDWJ-oY.roa (hash: yFhLuVIRM55NBCT6jkxoB5RbQLO1vwt3bztwB5VGXtM=) 10: c30csS6JK4s9MoQXsamjG5S5mQY.roa (hash: lVQXJ67RyqpidXoEAZ7j7+rNp3Q3lOFHrXyCzDWq548=) 11: e9FiSR-si3ZZIIh7m3ucedBhmmU.roa (hash: FAPlBpcRcLl1kbfthVbKlhuFOhWyKbXM9jmK9JQeeh8=) 12: g3VdNhHZ_8v9WHRAEp_3HLnc4TU.roa (hash: oafbuu+bvUp2ja6vnLne1a3NVyN490D94jiPo+s07TU=) 13: hCmnb5a1bG-SSw-lxAZazyqNkVQ.roa (hash: ALvRbQisUAukYzcwf9cgpHPgQuw64zhen3GsUjne7ZM=) 14: hxUYqrWVKAOMWD_6pCrGH0A3jVk.roa (hash: O63z7HBnWoql9o6l8WaWVYwbugnAyu2kF8egfDAIAIM=) 15: kx-3IA9C3XQGTgFLPlmfhsVZLWY.roa (hash: OAml4cNOlSN+Qo5w+aMoIDMWfUkNtSzj/qG5F/RWi2E=) 16: ofccGEsA-SEdFvLGfPfjeIfP77Q.roa (hash: BGXKRA39vq6rFiW7IhKvitmTS0tEmkbu9EDcRH2rAnc=) 17: pBsWpQD-vmbUxsqTN30uJT-COcA.roa (hash: 3yn06mdg3AqgVAXJh+5Yxl3OKZwzDmymp3kyGrQJp3k=) 18: z8Ug_SbeObB3ODb0f9ErXY44QAg.roa (hash: xoHgZTS2AVGE4gKwu1+lP1Qtl7ZhhaCE5iIcibvj8tY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 14 May 2024 05:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:71:d3:6c:3a:c9:12:54:d2:e3:1f:52:9c:0e:3e:da:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2 Validity Not Before: May 13 12:00:32 2024 GMT Not After : May 14 12:00:32 2024 GMT Subject: CN=22a2a54e4359a8f1bc623d9962a5b02ab1ae7691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:36:dc:e4:a1:86:41:bc:c8:28:9f:0d:5e:6c: 58:80:c1:a6:a1:b9:5d:89:7c:4b:b4:ce:5a:60:fd: 21:f4:14:a6:1b:b2:0d:31:6e:95:0d:2e:64:76:9b: 81:d8:5a:0d:61:8a:42:79:09:19:b0:e3:fb:6f:f4: 37:ad:15:8a:87:d0:8c:35:17:a0:c0:90:cc:cd:8f: 90:e6:47:f6:34:b4:d1:20:82:b3:1b:03:f0:67:93: a4:d9:74:2e:2d:72:c6:54:0e:ea:46:75:87:b5:70: 44:1e:b3:d9:6e:e2:18:d1:86:f1:d4:39:49:62:84: 65:5d:c5:33:ed:92:99:06:5e:21:e5:3f:4e:2f:9d: b1:4c:f1:12:99:e0:be:ba:f7:5f:21:3d:fa:1a:a4: 8b:aa:0f:be:be:e0:c5:01:d3:3f:d1:0a:73:7a:eb: cc:41:96:f7:d6:d1:ed:81:3f:5b:a3:9b:e7:20:49: d7:15:ed:de:fd:76:40:31:62:f8:5a:14:8b:92:aa: ab:1b:97:7d:80:e1:eb:95:f9:5e:59:9f:d7:1d:65: f0:37:40:2a:f2:b8:88:99:ce:e1:ce:70:37:3d:81: 93:68:df:d0:be:fa:a4:c1:8b:bf:1f:21:c0:32:9a: b4:8d:0d:15:76:b7:3f:4d:02:e0:0e:a2:5d:44:79: 05:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:A2:A5:4E:43:59:A8:F1:BC:62:3D:99:62:A5:B0:2A:B1:AE:76:91 X509v3 Authority Key Identifier: keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:ab:cd:54:be:3f:c7:a2:c7:1a:69:64:bc:8d:bc:44:12:bc: c8:35:51:97:36:82:04:ec:de:79:e9:90:30:ab:26:f9:66:56: 30:13:77:af:39:e4:37:5f:8a:97:27:2f:0c:0c:ab:0e:c4:12: 35:d8:67:0f:82:e5:00:aa:89:4e:70:6d:a8:55:1b:0a:0c:d0: 61:b6:d7:47:79:5e:bc:c5:05:79:91:b5:a6:38:a8:ae:b7:23: 50:76:d3:09:82:15:20:0e:63:6c:06:c5:ad:dd:e4:08:2a:4e: cd:58:31:35:7e:de:dd:e9:c0:c8:7d:98:fe:af:dd:17:60:17: b7:be:ac:27:86:67:d5:6e:8f:33:28:64:35:bb:11:77:15:ac: 16:ba:8b:93:be:aa:df:ca:44:1c:b8:44:14:1e:8e:4b:2c:8e: 1a:7c:a9:69:3e:d7:44:5f:65:ba:18:71:a5:85:fe:85:82:0b: ee:ef:ee:fe:f4:03:68:65:ab:4e:33:30:ef:7c:69:2f:d7:c8: da:06:d9:b8:38:5d:17:ad:34:c7:a1:04:35:5c:61:f8:33:9f: 93:f2:4e:1e:e7:ca:02:23:b7:da:d9:08:09:f8:43:45:25:3c: 25:87:39:7d:3d:44:17:9c:58:fa:21:ca:32:9d:c7:c1:be:06: 3b:38:02:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY9x02w6yRJU0uMfUpwOPtqnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZjJjMmU3YmMxZGE1NGQ5MTljYTViNTk0MWQzNzg4OTJi MmNjYjIwHhcNMjQwNTEzMTIwMDMyWhcNMjQwNTE0MTIwMDMyWjAzMTEwLwYDVQQD EygyMmEyYTU0ZTQzNTlhOGYxYmM2MjNkOTk2MmE1YjAyYWIxYWU3NjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Dbc5KGGQbzIKJ8NXmxYgMGmobld iXxLtM5aYP0h9BSmG7INMW6VDS5kdpuB2FoNYYpCeQkZsOP7b/Q3rRWKh9CMNReg wJDMzY+Q5kf2NLTRIIKzGwPwZ5Ok2XQuLXLGVA7qRnWHtXBEHrPZbuIY0Ybx1DlJ YoRlXcUz7ZKZBl4h5T9OL52xTPESmeC+uvdfIT36GqSLqg++vuDFAdM/0QpzeuvM QZb31tHtgT9bo5vnIEnXFe3e/XZAMWL4WhSLkqqrG5d9gOHrlfleWZ/XHWXwN0Aq 8riImc7hznA3PYGTaN/QvvqkwYu/HyHAMpq0jQ0Vdrc/TQLgDqJdRHkFLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCKipU5DWajxvGI9mWKlsCqxrnaRMB8GA1UdIwQY MBaAFCLywue8HaVNkZyltZQdN4iSssyyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi82MDI1MzAtNmQyMi00NmYxLThlMDUt MDJkZWY2ZTg0YzkxLzEvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi82MDI1MzAtNmQyMi00NmYxLThlMDUtMDJkZWY2ZTg0Yzkx LzEvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANavNVL4/ x6LHGmlkvI28RBK8yDVRlzaCBOzeeemQMKsm+WZWMBN3rznkN1+KlycvDAyrDsQS NdhnD4LlAKqJTnBtqFUbCgzQYbbXR3levMUFeZG1pjiorrcjUHbTCYIVIA5jbAbF rd3kCCpOzVgxNX7e3enAyH2Y/q/dF2AXt76sJ4Zn1W6PMyhkNbsRdxWsFrqLk76q 38pEHLhEFB6OSyyOGnypaT7XRF9luhhxpYX+hYIL7u/u/vQDaGWrTjMw73xpL9fI 2gbZuDhdF600x6EENVxh+DOfk/JOHufKAiO32tkICfhDRSU8JYc5fT1EF5xY+iHK Mp3Hwb4GOzgCHw== -----END CERTIFICATE-----Generated at Mon May 13 15:07:31 2024 by rpki-client on console-ams.rpki-client.org