$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft File: 5b86csrW9LPcMFtMvjEIcFHZg_Y.mft (raw, json) Hash identifier: cAtVwaB7KkdAfm2tHQZX8GKDVMaBEcC1Te1z5V7yTkM= Subject key identifier: 1E:BA:1C:BF:A0:ED:D7:A8:66:80:36:2F:66:2C:59:DF:76:5B:4B:02 Authority key identifier: E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6 Certificate issuer: /CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6 Certificate serial: 018F9C88F4C4450FA6D8371EFA00857A8D21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft Manifest number: 0A7D Signing time: Tue 21 May 2024 19:02:52 +0000 Manifest this update: Tue 21 May 2024 19:02:52 +0000 Manifest next update: Wed 22 May 2024 19:02:52 +0000 Files and hashes: 1: 1-xyl6Jxfq3HeiUj71vDE_TbOW60.roa (hash: gP68iykkZ409IWqQwgiXAqAzymlud85K5V+ITzCeJSo=) 2: 5b86csrW9LPcMFtMvjEIcFHZg_Y.crl (hash: 6WLnxooJqb1X1wIYq89zIGaFkt55zM8WlkAN6BmG48o=) 3: BghQntOMen5t4YlxTMl79L2LwSI.roa (hash: 0uYvi1Am+vtZ1BKBgjfue31nyEJh3RNoX7jscezheAE=) 4: LD90gQNyPHqSI-fbXxmLdbvgs_g.roa (hash: yAfAAtogr0EeoQfK0+VryY18dtnRr8eQj60kcvOeqJY=) 5: MwiBLKTah_MGY-RC_77XOD8MCvI.roa (hash: HFXhYBPkyV7Hb+mGVJ5NUdwcbm93bs0R4XjIxZXFw6Q=) 6: NOQzUR_OJGx_rycG3xwaq--UwsU.roa (hash: JSfXS+fmw4Cb8dZCrB+6kB0DXv44DNwYJaaByDTCdiM=) 7: OH58xhpWMtQAvnvF7QFfUrjs6c8.roa (hash: HM9GsrzX1civM/UIBmZ757rKFYKLDJOOLu3+7ypGM6Y=) 8: WZzVmK_vnHnl-o4XvYrhg0Wmx_M.roa (hash: 5p97U/2CgZmUMwU08DUSF9RsUCJV+Z+Yp2zRU+UcXGQ=) 9: ZhXFh7ybPBwsATvgPQRZFg9fWvA.roa (hash: lkDNgjmHCH48Ue3+so8zVkUfr70z4cZuNdlsXc+l1LI=) 10: aCgDvocUKfI05oFVse5QHrrSCbw.roa (hash: JGMazpxsiggfjtLz7FzniAsSIVgABFXYe5BCsKifm8I=) 11: dYrzsYQ2wQpmQU8IX3gTHzhco6c.roa (hash: BXG4QOkUzGhisHoTrVSXoTcZbT/74xSRgkE18OZH9aI=) 12: jAcrNe6TSKKWSbYErzudPjSLidk.roa (hash: BFeWQ1A29nhMiT+MIUTNsBkuuTBMHL8zS8AmTUXTXdw=) 13: nsKfFsvaguNgkpoGs_fT3uLJLLc.roa (hash: 7P3BwXuchThRInjj0HMs3g8KEcVFcNDr1mryFw+xF7s=) 14: rA9u7_aCYD5rgPP81hsKwgB0qMc.roa (hash: +vdy4wYdw0j7WKHyFdKJ9/kzdqrbhtCSwMffImjqyss=) 15: ynCWUyfbJnTUiKxeySGl7jLw7_A.roa (hash: YVEdGzV6nStbfKY2Db/9ujcFGts1GAoDMMgGkOs/dNQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 May 2024 14:34:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:9c:88:f4:c4:45:0f:a6:d8:37:1e:fa:00:85:7a:8d:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6 Validity Not Before: May 21 19:02:52 2024 GMT Not After : May 22 19:02:52 2024 GMT Subject: CN=1eba1cbfa0edd7a86680362f662c59df765b4b02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6d:45:9d:78:fb:7e:27:0d:a1:7a:9c:1b:d0: 8a:cf:18:28:6b:38:5a:66:42:21:4b:6e:8f:0c:c2: b1:9a:ff:ce:24:5a:45:f1:d8:c0:db:6d:ee:f6:1d: 85:16:ef:b8:67:ea:e9:76:a2:dd:6e:06:ca:53:6c: ea:5d:16:da:40:a1:e8:0f:c1:e8:68:b6:eb:10:62: 20:57:87:b5:13:db:34:92:57:84:43:94:ac:2d:1c: 7d:7b:a3:37:df:20:d1:45:82:e6:89:f7:1c:6a:bf: 0d:4e:2a:a3:da:b3:c4:9c:e5:37:45:96:97:70:bf: c8:67:90:e1:63:22:8d:1c:8e:42:cd:75:c0:b2:49: ab:86:af:fc:e6:e1:30:da:e4:e1:7e:73:09:59:3a: 63:ee:66:8e:1f:88:02:8f:a6:cd:fb:40:19:ae:80: 16:ac:c2:e1:36:b0:3a:bc:65:ba:4a:53:19:fd:44: 6d:cd:b7:88:26:a5:f8:ad:5f:3c:d3:44:e6:73:c8: 77:1b:ed:9f:71:20:96:01:fd:64:e5:ad:97:f4:17: 06:9d:99:51:d2:13:fc:4c:e2:48:8d:d4:20:02:0c: 0f:91:57:9f:12:33:0d:12:15:47:ab:fe:fa:45:90: 29:dd:85:42:bd:a9:0e:c2:83:d1:48:bd:06:1a:59: 91:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:BA:1C:BF:A0:ED:D7:A8:66:80:36:2F:66:2C:59:DF:76:5B:4B:02 X509v3 Authority Key Identifier: keyid:E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:74:01:4d:53:57:09:7e:3a:fa:f0:98:86:26:cc:02:12:a7: 68:60:07:be:0e:f3:a5:49:36:e6:34:a7:e5:0c:4d:ec:8b:90: d3:61:71:06:f4:1b:ba:64:d4:33:60:8b:92:18:a0:dc:fb:f7: 41:de:3d:0d:3b:9e:2a:b4:69:5b:0d:eb:75:3f:cc:e9:d8:7c: 65:41:fa:79:dc:10:f5:13:fa:b8:2d:35:45:b0:2e:75:8c:ab: cf:93:02:ca:77:2e:b4:f7:c7:39:64:96:a5:37:30:35:b7:a4: 3b:9f:19:97:1e:5c:43:8a:74:a8:90:87:4b:08:51:60:46:ed: 3b:97:ed:2d:77:2b:93:96:35:ea:0a:55:2b:ef:1a:af:e2:38: 96:c3:bf:83:be:ec:e2:36:f8:57:d6:40:ba:22:d6:86:21:ca: dd:ac:9c:e2:5b:b5:2a:7c:c4:c7:09:3a:46:93:a1:43:d0:f4: 9a:a7:15:b5:5f:cf:c8:79:1c:2c:ce:ba:f2:aa:53:ba:fe:f3: 07:81:c2:e0:66:92:b5:91:8f:45:a3:0a:fe:42:b4:07:b8:7e: 95:be:f0:55:a9:56:0a:74:83:fc:32:4f:41:c9:13:90:a2:4d: f4:81:8f:3b:a4:d6:2f:21:f1:f0:19:ed:04:4a:bb:56:9b:b8: 4e:de:fe:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY+ciPTERQ+m2Dce+gCFeo0hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1YmYzYTcyY2FkNmY0YjNkYzMwNWI0Y2JlMzEwODcwNTFk OTgzZjYwHhcNMjQwNTIxMTkwMjUyWhcNMjQwNTIyMTkwMjUyWjAzMTEwLwYDVQQD EygxZWJhMWNiZmEwZWRkN2E4NjY4MDM2MmY2NjJjNTlkZjc2NWI0YjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsG1FnXj7ficNoXqcG9CKzxgoazha ZkIhS26PDMKxmv/OJFpF8djA223u9h2FFu+4Z+rpdqLdbgbKU2zqXRbaQKHoD8Ho aLbrEGIgV4e1E9s0kleEQ5SsLRx9e6M33yDRRYLmifccar8NTiqj2rPEnOU3RZaX cL/IZ5DhYyKNHI5CzXXAskmrhq/85uEw2uThfnMJWTpj7maOH4gCj6bN+0AZroAW rMLhNrA6vGW6SlMZ/URtzbeIJqX4rV8800Tmc8h3G+2fcSCWAf1k5a2X9BcGnZlR 0hP8TOJIjdQgAgwPkVefEjMNEhVHq/76RZAp3YVCvakOwoPRSL0GGlmRqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB66HL+g7deoZoA2L2YsWd92W0sCMB8GA1UdIwQY MBaAFOW/OnLK1vSz3DBbTL4xCHBR2YP2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWI4NmNzclc5TFBjTUZ0TXZqRUljRkhaZ19ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8yMzEzYjgtZGUwMi00MjI4LTkwMGEt MDliZTlkYjExZjY2LzEvNWI4NmNzclc5TFBjTUZ0TXZqRUljRkhaZ19ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8yMzEzYjgtZGUwMi00MjI4LTkwMGEtMDliZTlkYjExZjY2 LzEvNWI4NmNzclc5TFBjTUZ0TXZqRUljRkhaZ19ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABnQBTVNX CX46+vCYhibMAhKnaGAHvg7zpUk25jSn5QxN7IuQ02FxBvQbumTUM2CLkhig3Pv3 Qd49DTueKrRpWw3rdT/M6dh8ZUH6edwQ9RP6uC01RbAudYyrz5MCyncutPfHOWSW pTcwNbekO58Zlx5cQ4p0qJCHSwhRYEbtO5ftLXcrk5Y16gpVK+8ar+I4lsO/g77s 4jb4V9ZAuiLWhiHK3ayc4lu1KnzExwk6RpOhQ9D0mqcVtV/PyHkcLM668qpTuv7z B4HC4GaStZGPRaMK/kK0B7h+lb7wValWCnSD/DJPQckTkKJN9IGPO6TWLyHx8Bnt BEq7Vpu4Tt7+Jw== -----END CERTIFICATE-----Generated at Tue May 21 21:41:10 2024 by rpki-client on console-ams.rpki-client.org