$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft File: BMvltGI9q0LxWpBQAtt85i6FTyk.mft (raw, json) Hash identifier: tE/icbDV6ToPcOymX+snCJEcOeRnpB6/0vZAYFqs0Cc= Subject key identifier: 3A:31:F5:2E:6C:33:8C:6A:34:87:0E:D9:ED:91:C3:EF:25:DD:93:62 Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Certificate serial: 018F877F324ADD98C464E5D5B5031B297031 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft Manifest number: 0ED0 Signing time: Fri 17 May 2024 17:00:11 +0000 Manifest this update: Fri 17 May 2024 17:00:11 +0000 Manifest next update: Sat 18 May 2024 17:00:11 +0000 Files and hashes: 1: 2pAru1Er-omNMzjpXxXX5QCu9dw.roa (hash: jzotIQOGmOcfuIo5BOobmbaMoQA+VeTDZv3ZUSQumFI=) 2: 4ATeCpuXYO0_0kFf5t4Tti-keJI.roa (hash: UBKwsNQHXObFvH+c/pXBaATBl7AAtwKTAaK4AIQ5AgA=) 3: 4yHr9-l1CbbxANcIh06x6HIOj4Y.roa (hash: wJoBDBsZruQvi4J4ZdZlqe6D3koco/lpPC119krFeDc=) 4: 8GNymxHgYzccC_OsVx4IAE7pHO0.roa (hash: D3F0FEtAh7EdwIFp/EpUMnSLvFYvS2z3xfeuipEM80Y=) 5: 8aeSVpJcfSJW1iwHzpRPoAA-tHE.roa (hash: Bsh4miGhcJxpY4NMOANMMKb7Z2277tqDJiujXgXQ+6c=) 6: 8yqU5YTNWMTQpmMCHvZGuWfFtYw.roa (hash: Z0f7wsRfXNqqadxnRsY88EJegn+HRljfSWRDxAqUD40=) 7: BMvltGI9q0LxWpBQAtt85i6FTyk.crl (hash: VEbwWtpf68WhRIEuQHQlwg960UzOkE1VJLr3PN3pHrU=) 8: RdSnPYQL0uYwqHq2ewQyyxK1N-g.roa (hash: Pw3RuljdTsOUFO3NE6KQ5M+CO3FjhV43p+jtCot1epE=) 9: fv8DPIKcV9KWATTd5NiBa4sIFeA.roa (hash: DtHO6DcjQ3Mw0G84EqtI0Tm9SOS3H58zDAj1TTnGUuk=) 10: k9kwUTMXRJRJwV5ANx6-vBRPH9g.roa (hash: oh7hI2qshP1WbOOwit0yZUI5/HfQ+4tcS3emdIxxJuc=) 11: lseQebEqUeW4TSi3gnmG5RYKSPg.roa (hash: +pRHTW+s5O1G80eLUfbL/xA6esXdjoYzdv9NcbI+uRM=) 12: nQnAnlPJebG7244qFFDuRF2JQfE.roa (hash: XcMHujCUb0tO9VnBSEqYuGtxUeuSywhoznOkTWsw1a0=) 13: sTKsT3yqB5aV5OZc5oftIMxxBaw.roa (hash: iD0wDrja6LQp1VVVA5RxlkPuofU0N1dcsTrc8hyWVas=) 14: uzjqgeIkSDIv2l0aY4cVREn3y_c.roa (hash: 2GlFHRGoqzueizD/BdGkrX2fb2LG6+CJdLbJIaFQ8js=) 15: vXND_x7skyTvt7ZsSyPIENyMNR4.roa (hash: dbx/+n9QBAyqXHuZB5TrNksmeXPfw8rZibK3OeMiU6Y=) 16: x6v3kOVm35aJLKVKmsFciEubcOo.roa (hash: f5Va+EA30+4q2K7ooRQU4yObo27+gd22mhk4V/OuWYQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 May 2024 16:46:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:87:7f:32:4a:dd:98:c4:64:e5:d5:b5:03:1b:29:70:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Validity Not Before: May 17 17:00:11 2024 GMT Not After : May 18 17:00:11 2024 GMT Subject: CN=3a31f52e6c338c6a34870ed9ed91c3ef25dd9362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7d:ab:ae:10:0c:3e:e9:9c:d5:a5:64:53:3d: 93:0e:8f:fe:19:e7:90:bf:ed:02:8b:0d:49:40:33: 20:2d:97:14:df:e0:88:f4:13:b9:da:6a:a8:18:bd: b1:86:be:de:ef:fb:b5:ac:ff:f0:f7:b7:c8:f5:0a: 8d:9b:87:09:fd:f5:cd:e6:5a:8a:1c:47:ea:5e:72: 44:bf:a9:c4:84:33:26:86:bd:f3:7d:ba:5c:44:8d: 37:b9:ab:cd:da:04:93:ff:ba:75:2d:f7:46:5b:8a: 45:59:1f:cd:b9:ff:c7:2f:d1:67:c3:b0:5c:95:d4: 40:81:c6:99:11:d4:f0:fe:d0:32:7f:3d:aa:6f:90: 60:a2:be:dc:16:9c:20:ef:97:f7:ad:2b:08:ee:a0: c6:fc:69:9c:59:18:dc:8a:53:e1:5a:89:7f:e0:73: 53:55:1b:98:49:82:ff:57:b4:37:fb:6b:6a:37:37: 09:1f:19:a0:6b:67:ce:c7:fd:c3:ac:ca:9f:da:2b: 24:54:38:1f:c3:1b:12:f1:bc:92:1c:50:c5:a9:b3: 5b:1c:c5:93:8f:4d:76:b5:c7:9d:47:18:a9:aa:a3: 9c:e2:9f:0c:9e:19:b5:7b:10:ad:38:df:b3:fc:21: dd:98:18:1b:a8:55:08:69:3c:ab:55:0c:8e:fb:fc: 82:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:31:F5:2E:6C:33:8C:6A:34:87:0E:D9:ED:91:C3:EF:25:DD:93:62 X509v3 Authority Key Identifier: keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:97:c2:86:a8:39:b1:50:c8:3c:65:59:c8:de:98:68:1e:3c: 27:01:67:69:6a:ae:d5:04:26:ba:60:3e:d8:1b:26:ef:01:8b: 52:3d:a8:e6:3b:6a:79:57:ac:06:2f:99:e3:0a:7a:c6:48:36: 63:45:a3:f5:66:8d:42:e6:52:e0:df:84:b9:12:9d:6e:a6:f4: b0:d4:f9:ee:e1:93:71:40:4f:95:c9:5b:f4:56:ae:bf:67:2f: b8:9f:57:e8:ce:80:61:c2:39:f5:e7:92:2e:5d:45:70:1a:2f: 0c:8a:6b:c5:0b:8d:ea:93:b8:ac:30:43:11:d3:bf:da:96:2f: 5b:dc:1d:70:e4:11:c6:06:ae:74:82:99:3f:3e:c5:2d:3c:2e: 37:e2:af:01:73:77:6c:29:b9:9b:72:6b:62:82:ec:fe:25:46: 66:c5:df:3b:52:7e:20:8b:bb:c9:d2:cd:11:80:e6:40:5b:44: be:dd:3d:19:bd:cc:56:f3:c8:19:b1:cc:6f:e9:f7:43:03:0b: c2:2c:24:df:d0:10:33:b2:3b:ad:a7:06:ba:96:60:45:30:b0: 66:e2:b5:d5:58:cf:1b:d5:23:3d:75:b8:13:84:c8:6d:5f:ff: 68:64:c2:94:ba:ef:05:5e:11:a3:78:61:cb:d2:e0:85:c6:01: bc:ec:35:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY+HfzJK3ZjEZOXVtQMbKXAxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0Y2JlNWI0NjIzZGFiNDJmMTVhOTA1MDAyZGI3Y2U2MmU4 NTRmMjkwHhcNMjQwNTE3MTcwMDExWhcNMjQwNTE4MTcwMDExWjAzMTEwLwYDVQQD EygzYTMxZjUyZTZjMzM4YzZhMzQ4NzBlZDllZDkxYzNlZjI1ZGQ5MzYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvn2rrhAMPumc1aVkUz2TDo/+GeeQ v+0Ciw1JQDMgLZcU3+CI9BO52mqoGL2xhr7e7/u1rP/w97fI9QqNm4cJ/fXN5lqK HEfqXnJEv6nEhDMmhr3zfbpcRI03uavN2gST/7p1LfdGW4pFWR/Nuf/HL9Fnw7Bc ldRAgcaZEdTw/tAyfz2qb5Bgor7cFpwg75f3rSsI7qDG/GmcWRjcilPhWol/4HNT VRuYSYL/V7Q3+2tqNzcJHxmga2fOx/3DrMqf2iskVDgfwxsS8bySHFDFqbNbHMWT j012tcedRxipqqOc4p8Mnhm1exCtON+z/CHdmBgbqFUIaTyrVQyO+/yCpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDox9S5sM4xqNIcO2e2Rw+8l3ZNiMB8GA1UdIwQY MBaAFATL5bRiPatC8VqQUALbfOYuhU8pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODct MDU3ODE3YmE5ZmI3LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODctMDU3ODE3YmE5ZmI3 LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANpfChqg5 sVDIPGVZyN6YaB48JwFnaWqu1QQmumA+2Bsm7wGLUj2o5jtqeVesBi+Z4wp6xkg2 Y0Wj9WaNQuZS4N+EuRKdbqb0sNT57uGTcUBPlclb9Fauv2cvuJ9X6M6AYcI59eeS Ll1FcBovDIprxQuN6pO4rDBDEdO/2pYvW9wdcOQRxgaudIKZPz7FLTwuN+KvAXN3 bCm5m3JrYoLs/iVGZsXfO1J+IIu7ydLNEYDmQFtEvt09Gb3MVvPIGbHMb+n3QwML wiwk39AQM7I7racGupZgRTCwZuK11VjPG9UjPXW4E4TIbV//aGTClLrvBV4Ro3hh y9LghcYBvOw1vg== -----END CERTIFICATE-----Generated at Fri May 17 18:01:52 2024 by rpki-client on console-ams.rpki-client.org