$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft File: 1Ion9EsQQExS9v_E4I3IK_i13uQ.mft (raw, json) Hash identifier: V8C6CrtmOta9evru/lmT+CEc/VbYr12bUt4KmRmgCQQ= Subject key identifier: 49:02:69:E2:F3:64:89:EF:8B:0A:E4:35:F4:D1:62:99:75:71:EF:E6 Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Certificate serial: 018F8E93E8E714918AABF9BEEA4EF401893E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft Manifest number: 05D9 Signing time: Sun 19 May 2024 02:00:09 +0000 Manifest this update: Sun 19 May 2024 02:00:09 +0000 Manifest next update: Mon 20 May 2024 02:00:09 +0000 Files and hashes: 1: 0XQR0GR5stZrUPJCaA6MZ-Mynuk.roa (hash: o+Ujy5trfs+wZh1c3IvyV6rv0vC4CJVH25PvaO1Sz9A=) 2: 1Ion9EsQQExS9v_E4I3IK_i13uQ.crl (hash: +5FLIkm89oQDosGe/i0HIaWisCGTT2EwYieXhAkzb5k=) 3: 1enJwr-6ka1eThUUmLV_6Mstda0.roa (hash: ZICt+SFtKMtrBbM8IT7cZwYCtWbrimfuXseU7+Z8Reo=) 4: 3uSFA8wdel-DwcgtWTYAIoeNxy0.roa (hash: KVXffjo6MvdDtooAd41cajPlpNUxOYvS2rvBHOL5+WU=) 5: 6V8ilVK5cQ_f53I5gaoYlpeZRYo.roa (hash: RqbParCtuBfdo+m9YT2h45fvHfYY8+nCqcv4DaHARrQ=) 6: GorMNFFQqixNBGwQqqGC6298ntQ.roa (hash: +Ugdz9XfRCmx+XUvQE8SNWRAJdX5BZdhbC3n3NT5njk=) 7: K7vVGRu1FugRIPmJ8B3z8E19qBU.roa (hash: m5V3nBe0qPlqrMl+yFj+xAXwLLzQS9GU9Oglwo6YORs=) 8: LsGg-CJMcnNJkzsGbF5wndTQ-rE.roa (hash: 7IAwQWABMzd83zgAGYaRdCt2MRMVe80yQhrgNxmbwM0=) 9: Oljtf5Fg2WVMn-R2DXL5lNktpPs.roa (hash: tpJVx1aC6+JO9Vj3S1WbKoU+wy8Xi1mjBfD+QyeQ5D4=) 10: RO6IqTboToUUFyeSaZDvsz9gSdo.roa (hash: sQ/lIAbuwvZlfERyP3micWwKFukmX89UOSfVxwz2mC0=) 11: bZix6LYxoUSvVKqyLHF36U3-2cE.roa (hash: goAmBZEpOAOU7jg7c8mYx8L9lDGpWD8BLnNZFyjfr7U=) 12: oJP9aRVXoFLy2i2dSXudjMQgeyE.roa (hash: NIYmJYFdna9ZhYk4I3xXPQsMYGuyZ8U/wz3qjlpzxoU=) 13: utFEZrKyrx3HWoa7r7b22NmUepg.roa (hash: FV1GuTV6W9aMec10awWipVTEwdUn0T+49qxgfPo+F6E=) 14: yIwnVeCKoLe28XF4DcFyF59V9Go.roa (hash: JOsfBh1+jHGSy+MXxqzKGAh2QQBkLcJewYTnoIcrjrw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 May 2024 02:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:8e:93:e8:e7:14:91:8a:ab:f9:be:ea:4e:f4:01:89:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Validity Not Before: May 19 02:00:09 2024 GMT Not After : May 20 02:00:09 2024 GMT Subject: CN=490269e2f36489ef8b0ae435f4d162997571efe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ae:47:48:37:b6:36:c8:2c:7b:e3:5f:cb:23: b6:70:d2:e9:6b:7a:68:34:41:5e:8f:14:ee:9a:c4: a5:a0:75:95:a8:cc:e5:78:86:10:42:e0:0b:d5:8d: bd:43:7d:42:ed:a5:f8:5f:78:83:66:f8:29:1c:8a: 08:c5:c7:49:f2:29:a3:6e:b2:30:ba:97:07:d1:8c: db:62:6f:66:3c:06:f6:d6:69:48:d6:42:16:8c:a9: c9:4c:e2:74:06:05:e6:03:11:9e:59:f8:97:e1:53: c5:12:2f:ef:f3:64:e0:b5:38:f4:f8:46:a0:f5:90: 0e:4e:4f:25:67:f0:3f:f6:da:65:1a:bf:33:0a:50: d5:f7:26:42:98:b0:17:df:0e:95:91:10:27:77:50: 5f:d6:63:aa:67:ed:25:4f:83:a8:f7:a7:94:8e:96: 5e:3b:6a:d8:73:5c:c3:af:93:89:35:60:00:33:30: a0:1b:3c:fd:cc:a7:0d:d7:2f:24:95:0b:79:e6:3e: a2:67:01:35:d5:6a:d8:6c:cb:f7:02:44:3d:45:a8: 2e:c0:84:9d:7e:24:34:1a:4b:63:ac:f7:28:94:a0: b6:0f:2b:61:80:ad:25:80:44:1d:9a:4a:48:6f:34: 71:ce:e4:ff:9e:80:ca:cd:fd:c8:25:ed:d3:c0:fe: 46:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:02:69:E2:F3:64:89:EF:8B:0A:E4:35:F4:D1:62:99:75:71:EF:E6 X509v3 Authority Key Identifier: keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:7a:88:99:81:fa:1c:38:b9:5c:3d:fb:e6:d5:52:33:46:b8: 15:33:da:34:96:f1:ae:18:9e:3c:d2:d0:3e:c6:63:32:e0:48: ea:96:34:1d:4a:b1:ac:9b:a5:fe:4b:2e:4b:ef:9a:45:21:45: 8c:fd:54:03:40:b4:e8:ba:4d:8e:24:69:03:99:7b:52:36:8f: e8:46:ad:f3:d1:4d:15:87:69:d3:9b:af:47:5a:9c:c4:8c:e7: 66:ec:cd:bd:e7:4b:87:0b:76:65:7d:a4:30:3a:36:e4:cc:c1: 7d:03:38:de:7d:98:d5:85:ab:34:99:93:cb:b7:e4:42:22:86: cd:32:44:45:80:40:71:9c:be:6f:c3:d2:d3:26:61:34:71:09: bf:7b:12:7d:a9:6b:88:80:5b:8c:53:b6:02:05:a1:66:93:14: 62:28:75:ef:87:1c:21:28:ed:21:60:44:e3:89:fb:a5:49:91: b8:59:e3:de:ce:cb:fc:7b:6a:8f:c3:10:45:31:5c:e7:3a:54: 6a:d7:9e:55:3e:c0:c5:71:0f:d5:c9:f1:61:26:67:15:e6:c9: 8e:b8:ea:20:62:9d:e9:d4:ef:be:18:c6:e4:bb:a9:23:49:64: 77:73:09:a9:a7:34:fd:a9:37:da:6a:b1:b4:7c:09:24:a2:32: 9c:4e:7e:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY+Ok+jnFJGKq/m+6k70AYk+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0OGEyN2Y0NGIxMDQwNGM1MmY2ZmZjNGUwOGRjODJiZjhi NWRlZTQwHhcNMjQwNTE5MDIwMDA5WhcNMjQwNTIwMDIwMDA5WjAzMTEwLwYDVQQD Eyg0OTAyNjllMmYzNjQ4OWVmOGIwYWU0MzVmNGQxNjI5OTc1NzFlZmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhK5HSDe2Nsgse+NfyyO2cNLpa3po NEFejxTumsSloHWVqMzleIYQQuAL1Y29Q31C7aX4X3iDZvgpHIoIxcdJ8imjbrIw upcH0YzbYm9mPAb21mlI1kIWjKnJTOJ0BgXmAxGeWfiX4VPFEi/v82TgtTj0+Eag 9ZAOTk8lZ/A/9tplGr8zClDV9yZCmLAX3w6VkRAnd1Bf1mOqZ+0lT4Oo96eUjpZe O2rYc1zDr5OJNWAAMzCgGzz9zKcN1y8klQt55j6iZwE11WrYbMv3AkQ9RaguwISd fiQ0GktjrPcolKC2DythgK0lgEQdmkpIbzRxzuT/noDKzf3IJe3TwP5GMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEkCaeLzZInviwrkNfTRYpl1ce/mMB8GA1UdIwQY MBaAFNSKJ/RLEEBMUvb/xOCNyCv4td7kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYt NTlmNTk4NGI2NGVhLzEvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYtNTlmNTk4NGI2NGVh LzEvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYnqImYH6 HDi5XD375tVSM0a4FTPaNJbxrhiePNLQPsZjMuBI6pY0HUqxrJul/ksuS++aRSFF jP1UA0C06LpNjiRpA5l7UjaP6Eat89FNFYdp05uvR1qcxIznZuzNvedLhwt2ZX2k MDo25MzBfQM43n2Y1YWrNJmTy7fkQiKGzTJERYBAcZy+b8PS0yZhNHEJv3sSfalr iIBbjFO2AgWhZpMUYih174ccISjtIWBE44n7pUmRuFnj3s7L/Htqj8MQRTFc5zpU ateeVT7AxXEP1cnxYSZnFebJjrjqIGKd6dTvvhjG5LupI0lkd3MJqac0/ak32mqx tHwJJKIynE5+oA== -----END CERTIFICATE-----Generated at Sun May 19 06:40:27 2024 by rpki-client on console-fra.rpki-client.org