$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.mft File: BpLF8WMTZTQlvEZxBYdeOil8_5s.mft (raw, json) Hash identifier: dqw5pSNgG8kdq00m16KNhQH+BqH4hYE7xvuDcGuQAWs= Subject key identifier: 9B:29:1D:FF:FD:9B:A0:AE:7D:28:BE:59:D6:F8:14:AF:63:04:25:83 Authority key identifier: 06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B Certificate issuer: /CN=0692c5f16313653425bc467105875e3a297cff9b Certificate serial: 018F3663CAF21F6BCFBB4F214ED7A1881B0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.mft Manifest number: 041E Signing time: Wed 01 May 2024 23:01:00 +0000 Manifest this update: Wed 01 May 2024 23:01:00 +0000 Manifest next update: Thu 02 May 2024 23:01:00 +0000 Files and hashes: 1: 0Ety3xCycDhAidG7p5bIRjrYjeo.roa (hash: aLsbVHIDUUAex/RZ1ZWst9bgNv/XFEKagSgdP4ck1Qs=) 2: 1-79pq9Zw_dyX1Ql1YX2hbzdLPMM.roa (hash: jslR6tpZ8hK4M/pFGL9x/QW6SmfFP97/ZJsMbm6aaSU=) 3: 1AOr8Dhfja5s-fmm2_g_oSFTVq0.roa (hash: mvIzno7Foy3Vj205ExDVYIyG2MXNNEBi7P8jTZAs8ig=) 4: 5snQ2bvtuvJ0GupoEaTVp05p-l0.roa (hash: Xq+IHg4+ouiSv4IImcJhzh9sG32HYOmMO1T7eSkASUo=) 5: BpLF8WMTZTQlvEZxBYdeOil8_5s.crl (hash: dS6lu6EnVYKAQVEYujcc2cpMxTM3gkwxmfiz6fHqIdg=) 6: CFr6eNem9Jr4YjuDcRng805adC0.roa (hash: viYWFtB8Th7ZTHNijUHtku0QF6QIcDjx5qBAn9O9Ix0=) 7: KEtFLcWdW2NfyrL58IbivTqYHww.roa (hash: vK3Fj/ae94GAWpas1F8in1reLGo58MXXdNpnFY761AQ=) 8: aoCVuWP-vXvuRmt4v5WexowUv6Q.roa (hash: yUlv2BsDdUDeDITq1D+1s/CE8ndCoaxyVOpzOmoJ6uM=) 9: mKKriCrO0GAx6wXUexWslvu8LSc.roa (hash: FrSN6184kW7xB8iF1RKx9SGTZziePzZZuM0d+5b73JE=) 10: ogMmYxWuuth8uzHI-1JYR54mKLs.roa (hash: J5m47QMDuJVQLxqXk5rIic5joAcAdUsOy2MyT0zaWeo=) 11: pG1ncMNDygRzBrkuCaB_6DRSZ58.roa (hash: 11paJD21SqlJhLllY2Hp2XxqTqKTd8JuoCxPszUptz0=) 12: pb4r-8TBR8KYKmjG0hb12MrQAG8.roa (hash: TCZXfPFaEnKw/pc1ohls8/cBQomB9TQ0mDYVBfp5Nw8=) 13: qkEJRQx-RFghhQI8IXPHoi4x0-E.roa (hash: Fqcs6AfO5bjd7XnTOoC4KCIamECz3sDVM0c8ilA+OrE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.mft rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 02 May 2024 23:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:36:63:ca:f2:1f:6b:cf:bb:4f:21:4e:d7:a1:88:1b:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0692c5f16313653425bc467105875e3a297cff9b Validity Not Before: May 1 23:01:00 2024 GMT Not After : May 2 23:01:00 2024 GMT Subject: CN=9b291dfffd9ba0ae7d28be59d6f814af63042583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:14:3c:38:69:c4:35:b7:69:4e:38:91:43:26: 75:bd:be:1a:7e:2c:44:1c:6a:df:9c:f7:9d:72:da: dd:6d:9d:b5:18:a3:e1:6d:74:eb:9d:7b:df:01:c5: 06:78:ff:62:a4:bd:e3:41:65:f5:1d:9b:2c:18:a2: 65:22:1a:f3:f4:29:0e:28:a1:36:e5:23:92:b1:2d: 59:76:97:ed:a5:60:15:e1:73:45:15:7b:62:1f:b1: 49:32:ee:31:b9:b9:a8:e0:13:2c:88:5c:6e:b2:42: 26:89:c6:bc:bf:11:fd:ac:26:88:64:3e:9f:a3:ee: 7f:5c:49:d8:bf:df:ed:90:8a:39:93:6e:4c:47:e4: 05:17:cc:6d:88:21:8a:cf:9e:77:4f:d9:98:f0:d6: a9:22:8a:4e:80:da:66:8c:8e:f7:2a:3e:6e:d0:f9: e5:68:4f:ce:3a:85:82:79:33:6b:f8:5d:a8:65:94: ca:14:06:a6:03:f4:ae:63:d8:42:fe:f9:47:cd:64: 8d:36:9d:32:14:b5:9c:1c:4e:8c:8b:33:e6:f9:6b: 99:4c:46:a8:b4:d5:c5:52:e5:02:c5:ff:1e:c2:d6: 38:e2:5f:f4:9a:06:0c:fa:fd:8a:bb:75:31:d8:07: 96:25:65:9c:5f:a8:23:3f:bd:3f:a5:cc:6c:8f:6f: e4:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:29:1D:FF:FD:9B:A0:AE:7D:28:BE:59:D6:F8:14:AF:63:04:25:83 X509v3 Authority Key Identifier: keyid:06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:38:6a:b6:eb:0a:7b:8b:40:b1:96:a4:7b:3f:85:da:32:51: 15:4c:fb:38:3e:ec:5c:1a:c3:2d:02:2c:f6:0c:41:04:70:e6: 5b:99:45:36:67:d8:22:82:50:2c:c3:1c:18:da:d7:c9:27:fb: c9:5d:26:30:a8:d4:e1:68:7b:f8:4a:a5:ac:31:53:d0:77:21: 0c:42:8f:0a:9e:57:2f:10:b5:f2:ea:95:df:e1:0e:d6:dd:ca: e3:e8:ce:6f:b8:6d:10:13:21:14:47:33:db:8c:93:98:62:b1: 9a:0e:d4:8b:d8:95:27:69:da:22:86:27:03:d1:48:cc:74:37: 12:81:43:c1:fd:2a:39:5d:89:ce:b7:8e:48:5a:3e:04:08:2e: 6a:94:3a:0e:65:37:bb:2d:57:bd:54:99:3a:ab:8b:58:0e:72: fd:2f:39:2b:e8:b0:bf:e4:fe:0b:57:52:77:ae:60:e7:fe:c6: 24:bc:73:82:81:f8:f3:28:30:dc:eb:73:1f:e2:12:ba:9c:c3: 4e:ac:50:ba:6d:81:9e:1f:10:75:b4:4c:a7:47:c5:31:18:07: 4f:c2:35:23:e2:b8:51:09:14:51:1a:59:3d:20:fb:e9:68:21: 5d:ac:03:4c:8a:47:f3:a0:1c:72:00:f4:3e:5a:14:95:e3:37: 28:69:ea:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY82Y8ryH2vPu08hTtehiBsPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2OTJjNWYxNjMxMzY1MzQyNWJjNDY3MTA1ODc1ZTNhMjk3 Y2ZmOWIwHhcNMjQwNTAxMjMwMTAwWhcNMjQwNTAyMjMwMTAwWjAzMTEwLwYDVQQD Eyg5YjI5MWRmZmZkOWJhMGFlN2QyOGJlNTlkNmY4MTRhZjYzMDQyNTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hQ8OGnENbdpTjiRQyZ1vb4afixE HGrfnPedctrdbZ21GKPhbXTrnXvfAcUGeP9ipL3jQWX1HZssGKJlIhrz9CkOKKE2 5SOSsS1ZdpftpWAV4XNFFXtiH7FJMu4xubmo4BMsiFxuskImica8vxH9rCaIZD6f o+5/XEnYv9/tkIo5k25MR+QFF8xtiCGKz553T9mY8NapIopOgNpmjI73Kj5u0Pnl aE/OOoWCeTNr+F2oZZTKFAamA/SuY9hC/vlHzWSNNp0yFLWcHE6MizPm+WuZTEao tNXFUuUCxf8ewtY44l/0mgYM+v2Ku3Ux2AeWJWWcX6gjP70/pcxsj2/kjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJspHf/9m6CufSi+Wdb4FK9jBCWDMB8GA1UdIwQY MBaAFAaSxfFjE2U0JbxGcQWHXjopfP+bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnBMRjhXTVRaVFFsdkVaeEJZZGVPaWw4XzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83Nzk5MjgtODgxYy00MzNhLWIyNDMt YzlmNTdlOTU5ZWYxLzEvQnBMRjhXTVRaVFFsdkVaeEJZZGVPaWw4XzVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS83Nzk5MjgtODgxYy00MzNhLWIyNDMtYzlmNTdlOTU5ZWYx LzEvQnBMRjhXTVRaVFFsdkVaeEJZZGVPaWw4XzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHjhqtusK e4tAsZakez+F2jJRFUz7OD7sXBrDLQIs9gxBBHDmW5lFNmfYIoJQLMMcGNrXySf7 yV0mMKjU4Wh7+EqlrDFT0HchDEKPCp5XLxC18uqV3+EO1t3K4+jOb7htEBMhFEcz 24yTmGKxmg7Ui9iVJ2naIoYnA9FIzHQ3EoFDwf0qOV2JzreOSFo+BAguapQ6DmU3 uy1XvVSZOquLWA5y/S85K+iwv+T+C1dSd65g5/7GJLxzgoH48ygw3OtzH+ISupzD TqxQum2Bnh8QdbRMp0fFMRgHT8I1I+K4UQkUURpZPSD76WghXawDTIpH86AccgD0 PloUleM3KGnqsw== -----END CERTIFICATE-----Generated at Thu May 2 01:43:34 2024 by rpki-client on console-fra.rpki-client.org