$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft File: 9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft (raw, json) Hash identifier: Ptab0nD+Yz8GvIi8vu9aAu8sc63/oqLQz5tBpDEqkHU= Subject key identifier: 0B:8D:A6:7D:B1:BE:81:22:12:16:20:90:AC:D0:B5:D2:A6:C3:42:78 Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2 Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2 Certificate serial: 018F6117DF317F1D89FDBB0C00AFA9E8D264 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft Manifest number: 0AF1 Signing time: Fri 10 May 2024 06:01:45 +0000 Manifest this update: Fri 10 May 2024 06:01:45 +0000 Manifest next update: Sat 11 May 2024 06:01:45 +0000 Files and hashes: 1: 8q20AD5cnij2ekbAcXZG5ZG1zqg.roa (hash: 6lhuyI+zMmF+Ttdu9Fh9dcEjzvizQqBB+EFyhF8GU40=) 2: 9HKAkHxpbhK8HArIODdxur5J3Bg.roa (hash: ADALvSypY+GZmzPJevp8Flm25zh/3vzBsbQXB7Ntd+k=) 3: 9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl (hash: W1bds7vWo9vJOtDbhGZHQvg0hj6RpVw3hOspeyTiagw=) 4: EApr4Z72ZNv6-Qhja73XLbTrlmg.roa (hash: Ktrdf1s5QJZ6PhoDT+NTHjgsDHtuzmtrt0ZxRgkLLSM=) 5: EVxxCEUT9DFdamK3DIwi34a8EF4.roa (hash: voFhoPPvtRDksdJjnpaslImc5jzHcTfSW2R30IY93zw=) 6: FxUbtoBHHJFHh1rjxlWefJqQzd4.roa (hash: oou3zVQHUOxJX3ve8cBSBLzJOCd68/v5Grbr0NCv7dw=) 7: I-N2iK55Kn9pHBCT3L1O1spvf0M.roa (hash: e0Synhjx8gn7Ve0RDYzxPxFzhRt7AMPJklUkHqfMDSk=) 8: K7z1hwkkvZPwTW0CqefikmmBiqc.roa (hash: EK1uSxTp5YX9HrrLY6GLHquTFYQRG3W1Xk/7L8iQbX8=) 9: Lq5JfOnTNwtLm-UhVUQEMrDKpD8.roa (hash: 8MheRB0jEkHeEJgsfNhWTOuT/UHpk86BQkbwKDJ+WAc=) 10: WUNEHvr0ZgHtoqSJbuN62py92Io.roa (hash: lDW06UuCrPMY+xkAqwZXNOm1gvX0QoZBq3udHgV8zvs=) 11: hMQJ0REVAil8ByHZtiDGC_OTbvo.roa (hash: CElKgM0bSkCPlL8WeeZx+gO42wHgy0V05RvEs8vlGZQ=) 12: mWDqFYlmoZAmZXRbhVfwNhxS47I.roa (hash: Q1uwFjgzBTkta1b2TS6n8J4KpQh1oJLBJaObN2Yyc5k=) 13: vhhINde8pr6IniUZPu9g1A1HxLI.roa (hash: /EZkqQztrjHRonhFehIiiH7gCy2pH5kPTbr0oKdPMAc=) 14: zhA79qWaLxO5M4tdovQumClxjfQ.roa (hash: SYwyNn3jfCc+9/0abtGhFEOF5EF2ffK+syXBjLNXI48=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 May 2024 05:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:61:17:df:31:7f:1d:89:fd:bb:0c:00:af:a9:e8:d2:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2 Validity Not Before: May 10 06:01:45 2024 GMT Not After : May 11 06:01:45 2024 GMT Subject: CN=0b8da67db1be812212162090acd0b5d2a6c34278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ed:3c:fe:ff:a7:02:23:c4:b3:fb:17:1a:89: 75:1a:20:e4:31:f1:f4:00:64:63:88:6b:c0:87:ad: 46:0a:3c:1c:a0:1e:1c:ec:f0:c7:b0:4b:f3:50:27: 68:f0:5c:83:06:35:1d:c6:51:eb:de:aa:f8:14:de: 01:80:32:33:d1:ad:26:2d:6f:9a:c4:2a:89:73:2c: 0c:34:47:81:de:34:c6:01:cb:b5:b1:05:8e:17:b8: 71:5b:b3:bc:ec:7d:68:c7:91:9b:5d:11:0b:1a:27: ca:c8:36:73:0c:5c:d4:70:26:ae:48:ff:82:ea:2e: bd:c7:a7:4e:7c:39:8d:b5:ba:14:13:99:a8:d4:a9: c4:aa:d4:57:87:d6:be:a1:27:35:79:a4:a8:82:4d: bf:1c:10:1c:cb:15:35:5c:10:b9:7a:83:0a:74:31: c9:4f:89:c8:55:3e:4c:7c:2b:82:85:fd:14:7a:7b: c5:36:5e:23:1c:14:69:7f:a7:9b:4d:92:e9:f6:64: ec:8a:87:86:06:e4:fc:e5:fb:fc:99:63:dd:3a:21: 8c:51:51:70:d5:10:48:4a:f6:4f:14:5d:74:a5:29: 2d:61:20:16:e5:4a:53:47:a6:05:eb:be:f9:b3:82: 1f:01:a0:ba:03:ad:14:f0:cd:ec:f5:6c:ff:13:7f: ad:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:8D:A6:7D:B1:BE:81:22:12:16:20:90:AC:D0:B5:D2:A6:C3:42:78 X509v3 Authority Key Identifier: keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:01:a8:67:56:cd:5b:26:c2:0b:35:04:01:af:0e:f0:a8:af: d5:ec:15:49:d3:09:ea:8a:b5:66:81:77:1e:af:db:1a:40:2b: f5:5d:2b:de:f0:75:f3:f2:e8:aa:43:80:3c:21:68:8f:21:8a: 69:bb:c6:56:f1:b2:6c:9c:e8:ba:6a:2f:0b:af:55:d9:0d:4d: b3:a5:52:59:a2:ff:b5:6a:62:e9:cf:37:00:e0:83:81:9e:11: 64:83:9d:8e:4a:92:97:92:62:3f:a7:61:2a:e7:4a:27:96:f7: b6:41:5b:23:8f:eb:a3:57:73:fe:eb:e3:72:e4:ac:65:a8:b5: a6:5a:2e:84:0a:95:d8:73:fa:23:75:f0:27:a2:17:a3:47:fb: 14:94:28:1a:48:4e:13:c3:bb:d1:ee:4a:c4:a3:ec:1b:98:05: a5:af:ce:ed:94:a5:ab:6f:1e:3d:12:40:21:f4:ce:d4:b3:ab: 71:fd:0b:4b:1b:56:61:22:a5:0b:8a:c0:11:8b:ed:ca:43:76: 09:19:6a:2b:83:6a:46:0b:8c:2a:08:ec:04:d1:8a:fa:8a:58: 72:a7:90:7d:c1:18:64:30:16:f2:ce:90:74:ab:21:bd:48:e5: e3:32:8d:4a:15:48:47:8b:6c:27:d8:4d:e5:5a:50:83:e0:21: 89:86:56:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY9hF98xfx2J/bsMAK+p6NJkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZmIzMmQyMjY2YjFmOWJjZTU3Y2FjOThiYzAyNDdmMmM5 MTk3ZjIwHhcNMjQwNTEwMDYwMTQ1WhcNMjQwNTExMDYwMTQ1WjAzMTEwLwYDVQQD EygwYjhkYTY3ZGIxYmU4MTIyMTIxNjIwOTBhY2QwYjVkMmE2YzM0Mjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5e08/v+nAiPEs/sXGol1GiDkMfH0 AGRjiGvAh61GCjwcoB4c7PDHsEvzUCdo8FyDBjUdxlHr3qr4FN4BgDIz0a0mLW+a xCqJcywMNEeB3jTGAcu1sQWOF7hxW7O87H1ox5GbXRELGifKyDZzDFzUcCauSP+C 6i69x6dOfDmNtboUE5mo1KnEqtRXh9a+oSc1eaSogk2/HBAcyxU1XBC5eoMKdDHJ T4nIVT5MfCuChf0UenvFNl4jHBRpf6ebTZLp9mTsioeGBuT85fv8mWPdOiGMUVFw 1RBISvZPFF10pSktYSAW5UpTR6YF6775s4IfAaC6A60U8M3s9Wz/E3+tBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAuNpn2xvoEiEhYgkKzQtdKmw0J4MB8GA1UdIwQY MBaAFPX7MtImax+bzlfKyYvAJH8skZfyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAt MmQxNDNkN2I4NTNjLzEvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAtMmQxNDNkN2I4NTNj LzEvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYAGoZ1bN WybCCzUEAa8O8Kiv1ewVSdMJ6oq1ZoF3Hq/bGkAr9V0r3vB18/LoqkOAPCFojyGK abvGVvGybJzoumovC69V2Q1Ns6VSWaL/tWpi6c83AOCDgZ4RZIOdjkqSl5JiP6dh KudKJ5b3tkFbI4/ro1dz/uvjcuSsZai1plouhAqV2HP6I3XwJ6IXo0f7FJQoGkhO E8O70e5KxKPsG5gFpa/O7ZSlq28ePRJAIfTO1LOrcf0LSxtWYSKlC4rAEYvtykN2 CRlqK4NqRguMKgjsBNGK+opYcqeQfcEYZDAW8s6QdKshvUjl4zKNShVIR4tsJ9hN 5VpQg+AhiYZWbA== -----END CERTIFICATE-----Generated at Fri May 10 12:18:20 2024 by rpki-client on console-ams.rpki-client.org