$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft File: ayM9dVCLToXMz0Q0mny3AxmNHSY.mft (raw, json) Hash identifier: wLGaLujXNtU4bDXm2rKVhBwujSQk8yKRQSBbtwTOQjc= Subject key identifier: 7E:71:F6:1D:8D:F9:1E:97:A1:76:90:6F:FA:77:0A:15:15:15:8A:24 Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26 Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26 Certificate serial: 018F652B12523F269C7972F5C0EE9F60099A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft Manifest number: 0EB7 Signing time: Sat 11 May 2024 01:01:12 +0000 Manifest this update: Sat 11 May 2024 01:01:12 +0000 Manifest next update: Sun 12 May 2024 01:01:12 +0000 Files and hashes: 1: 1FKMz9AvG63mAuIvkE7qpDnegiU.roa (hash: vWe6ifWzwyUsWhZf6g0aiRsEpN97G7LCHVTXXP4Sf/w=) 2: 5UMQxB5mFjZB-bX4FGDfQ3GI_dQ.roa (hash: 2jaCAcB0NGDYhhcJ8zcDGol8EUJjXVTV0OVuWy7odBg=) 3: 5r7l3VaqCVCpne0PpvUkNz1X1io.roa (hash: GOjX2xlA3XGjBtBbx9r0pX6VKdH9kX21EQEw2DvwZxs=) 4: 82AaFMBhg37Hc4Xk81JKohC1ONo.roa (hash: 71kWXVQuX7SI2uHnRJkSo4Yd47McmR5VwcwqR7m4lrw=) 5: GdcGiC9cGsttiXPLTJXRuRsafS4.roa (hash: jX6hL3eYspX3B13+r321DXWWdI4PARGGEqjma/tuO3s=) 6: H_M3c8k3BTOHZ2xJjxadP77wVFM.roa (hash: NUMShWGiVB726RBW3qC/63RkLg4jOIESe8fZYNp4DdQ=) 7: If5FirTL8H28OxAlrzXBFk4tKiE.roa (hash: Batk9I69OyZQjD+KHf54TQpS1PhFs4S2OMBBcTdyZNk=) 8: T1POvqxZjrhkctwxQC1bSBJl6-k.roa (hash: FLWQ12R2565JfGUBAThHtcRd1IN3C3HGuE4ejo223Wg=) 9: _CBI-xUph-EV2AVx8j6qNT6F6cY.roa (hash: eGGoAm6FxxAsHXaz1GYQBlqYvUDtIyHKVdt98DpdZXY=) 10: ayM9dVCLToXMz0Q0mny3AxmNHSY.crl (hash: rfLJLykaCP/xhWNnHoa9/Ac55eWte9tOFilNlw5UxrA=) 11: c-qz21WLjIgnp6jMw2CwZxJKMxM.roa (hash: +p5fsFATD06jL/hc+bHYOLiqBbdUOYXnsU50LImMvSw=) 12: cyI0rvF-ExGYocN9q1HkP5hwucY.roa (hash: 2yMXYpJBZHeHXcGEq0gBJa2LVNW/Ifup+xGmwNDtbpI=) 13: gvIKzzI3bwPERJtQe-QqUNiLRlo.roa (hash: 5lxo9uPLb7BD86aeakgfPVc/QTT8eSb62q07S9VDg9I=) 14: l7GDPKdB66TOBAktW0viKbLqoJc.roa (hash: sCr0Hiy5ctuXtTb9BSdPPbjRTY7O1difObgdBh3wQ1I=) 15: naLWqWY7adsifnPH9ksCmCZZ42o.roa (hash: mu5jGFfpCy3ESJ2i88ZqXPwC2ODMNcyIdd75MhXQ2/o=) 16: ueJBktQ4v8jP-pfC1XtwzhvXvww.roa (hash: OTz16uXrUneqQ0QZp8v+Glwx6BeXIVxySFFpuBLqSSg=) 17: w2qY6wXryLRJven5jwVHtiFUem8.roa (hash: CVAqLldpWlYK8WqQxUzhDKZUS55ewiAyi6+zFPElId0=) 18: wkGYdhL0DXJxtvUqL6W8lqF5V50.roa (hash: WYrPMT9s0Z7UyIEvob11ZzDXKDbXZ+UV04Rz6Op6VAU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 May 2024 23:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:65:2b:12:52:3f:26:9c:79:72:f5:c0:ee:9f:60:09:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26 Validity Not Before: May 11 01:01:12 2024 GMT Not After : May 12 01:01:12 2024 GMT Subject: CN=7e71f61d8df91e97a176906ffa770a1515158a24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:5f:4e:b7:7b:98:40:dc:f7:de:70:2a:79:92: 32:57:53:d3:93:fe:80:ae:5c:b8:63:03:b0:c1:73: 5b:00:fa:8d:43:83:df:fc:37:2b:c0:17:14:69:66: 0e:ff:ac:bf:e0:96:7c:4f:9c:e2:e3:95:6c:aa:43: eb:4e:0f:e2:26:ec:d4:be:86:5d:d3:45:2d:d4:2c: 5f:6b:52:0d:ab:6d:a7:48:e9:5e:6f:83:8b:2f:19: ba:f5:ec:3e:df:9b:d1:17:c3:20:50:0e:c5:0a:b3: 16:05:78:64:cc:8f:8c:93:2c:05:b3:c4:c9:ab:bf: 9a:61:71:46:f1:b6:30:ea:49:94:db:2b:d0:b1:00: b4:84:3a:fa:b0:1e:19:36:53:2f:3d:b4:1f:0e:0a: 4e:fb:30:bf:d8:ae:45:ac:c2:7a:27:fb:9f:3e:cd: 04:3b:b6:63:82:d7:5f:77:cb:b9:77:19:4a:fd:c5: b1:c7:cb:69:a8:cb:1c:7d:b7:32:4e:cc:49:bf:00: 08:b5:dc:34:d5:c7:b9:de:10:0f:84:fb:d9:4a:1c: cc:d6:76:fe:0a:a0:e1:76:9c:43:61:a7:87:47:b0: aa:d7:78:b6:a4:3a:3f:c4:78:bd:9f:aa:5c:74:5b: 31:af:dc:ff:e3:13:a5:68:a1:fd:5f:d9:7d:27:93: dc:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:71:F6:1D:8D:F9:1E:97:A1:76:90:6F:FA:77:0A:15:15:15:8A:24 X509v3 Authority Key Identifier: keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:ee:c5:d2:be:b3:c1:cb:c8:a4:ab:be:89:f4:44:38:f9:e6: a8:a1:04:0b:42:e7:01:a8:56:7c:f1:a7:f1:f3:08:39:18:d5: f5:77:e4:1a:29:0e:c6:61:74:22:49:51:b6:c7:9b:eb:db:35: b9:db:cd:7b:19:50:0a:48:ee:fa:a3:f5:7f:52:07:60:c3:e9: 81:17:04:8b:e4:9f:b5:4a:1a:dd:96:b8:12:4d:1d:5d:41:b3: 56:dd:26:4c:a2:71:25:2e:24:95:10:dc:9d:f7:0e:9b:5e:d6: b6:05:5e:4f:f6:2d:1e:de:3c:91:89:3a:1c:55:6a:b1:f0:c5: 17:66:67:48:a1:68:21:d3:14:f6:d1:90:10:57:78:2e:5b:ce: 5e:8a:c0:d9:2d:a4:b1:d3:e1:91:c6:74:4a:d2:25:35:04:d5: 36:71:df:f4:a5:c1:68:76:70:55:e3:ba:ec:88:a8:85:3e:39: 2a:8b:c8:f1:a6:01:09:f1:b1:42:86:7d:36:15:08:85:c0:67: 70:0e:1a:c1:8a:38:ae:8d:bb:f2:8a:8b:40:9d:08:18:a7:b0: e9:08:af:cf:89:44:e0:76:88:86:c0:42:11:fd:c7:94:3a:db: 75:31:7b:55:b9:8c:ee:b1:38:2a:45:ca:94:04:36:75:10:28: 60:67:51:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY9lKxJSPyaceXL1wO6fYAmaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMjMzZDc1NTA4YjRlODVjY2NmNDQzNDlhN2NiNzAzMTk4 ZDFkMjYwHhcNMjQwNTExMDEwMTEyWhcNMjQwNTEyMDEwMTEyWjAzMTEwLwYDVQQD Eyg3ZTcxZjYxZDhkZjkxZTk3YTE3NjkwNmZmYTc3MGExNTE1MTU4YTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnF9Ot3uYQNz33nAqeZIyV1PTk/6A rly4YwOwwXNbAPqNQ4Pf/DcrwBcUaWYO/6y/4JZ8T5zi45VsqkPrTg/iJuzUvoZd 00Ut1Cxfa1INq22nSOleb4OLLxm69ew+35vRF8MgUA7FCrMWBXhkzI+MkywFs8TJ q7+aYXFG8bYw6kmU2yvQsQC0hDr6sB4ZNlMvPbQfDgpO+zC/2K5FrMJ6J/ufPs0E O7Zjgtdfd8u5dxlK/cWxx8tpqMscfbcyTsxJvwAItdw01ce53hAPhPvZShzM1nb+ CqDhdpxDYaeHR7Cq13i2pDo/xHi9n6pcdFsxr9z/4xOlaKH9X9l9J5PcywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH5x9h2N+R6XoXaQb/p3ChUVFYokMB8GA1UdIwQY MBaAFGsjPXVQi06FzM9ENJp8twMZjR0mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEt ZmE5Y2I1MWNkMGYxLzEvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEtZmE5Y2I1MWNkMGYx LzEvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS+7F0r6z wcvIpKu+ifREOPnmqKEEC0LnAahWfPGn8fMIORjV9XfkGikOxmF0IklRtseb69s1 udvNexlQCkju+qP1f1IHYMPpgRcEi+SftUoa3Za4Ek0dXUGzVt0mTKJxJS4klRDc nfcOm17WtgVeT/YtHt48kYk6HFVqsfDFF2ZnSKFoIdMU9tGQEFd4LlvOXorA2S2k sdPhkcZ0StIlNQTVNnHf9KXBaHZwVeO67IiohT45KovI8aYBCfGxQoZ9NhUIhcBn cA4awYo4ro278oqLQJ0IGKew6Qivz4lE4HaIhsBCEf3HlDrbdTF7VbmM7rE4KkXK lAQ2dRAoYGdREA== -----END CERTIFICATE-----Generated at Sat May 11 06:09:57 2024 by rpki-client on console-ams.rpki-client.org