$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.mft File: K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.mft (raw, json) Hash identifier: fyKELgc+dvlVCb5RI67+31fjfK+un1Z6/MBeCsPD2FI= Subject key identifier: C6:D4:55:7A:D1:CC:72:D3:92:E8:A4:D4:56:09:F1:A3:14:89:52:25 Authority key identifier: 2B:96:7E:77:2C:C7:29:83:05:A1:1F:FA:65:DD:18:5F:6A:58:91:0B Certificate issuer: /CN=2b967e772cc7298305a11ffa65dd185f6a58910b Certificate serial: 018F86359CD288FCA88D262F5C07AB9F7B17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.mft Manifest number: 0926 Signing time: Fri 17 May 2024 11:00:11 +0000 Manifest this update: Fri 17 May 2024 11:00:11 +0000 Manifest next update: Sat 18 May 2024 11:00:11 +0000 Files and hashes: 1: 27ldqk-jKBnu8LVqYTk_i_DIGQ4.roa (hash: YD7PapvI+fv+K9HFAgNWvcJNEUwxQ/HOsDdaPLfW+p8=) 2: 5WUDK7bTpUz_tjpeIAGa5CBjRa0.roa (hash: 47R576uZrxoaOnno9+vdB1897HLU63zrYwh6gLnBORM=) 3: 69e6qAyN6XwS3zgdBQwRfBphOho.roa (hash: 8MoUhZ9foKZf5oO0dqXB5MYzMbzB47ISSrnXV5oZkWU=) 4: 9_gONkhZAXVY-qIkd5NP2Ii86ZE.roa (hash: MTXq03LqBYlKwXS/Rq/SfVia1+MPHzn/A/nL3Z0II94=) 5: B6M1Vsu_UgmqSPvi-drD94BkcDQ.roa (hash: QBgPWZchSnwpv+pWNpHJHLYbvTf5ZQ0ZloskKfwiRg0=) 6: K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.crl (hash: YFZ7hhhhHydfRfiyk0Uww+jzAIPZHdPlBynKyfmGLOI=) 7: QHz5RnBTFdJRquF0NP-26ruWKn0.roa (hash: taijIFai2/Pc8zOTk9q+vkGlwfhGsj5fwFqx1WAw6p0=) 8: QM_egHDcrR5q7nQYoBWntLtbrf8.roa (hash: JUyicMrB30y0J1zYURmpfu8mjeoieQp5GegTUKCNjqU=) 9: S5azbY9FJe1jXVxfaVqb4PpayZI.roa (hash: n5t6PwOg50nHTbgEd7qMNT86raoDPa83i2MHKoxSrJc=) 10: p6w56tZfHOP_ZGcBHF9QKvsy6F4.roa (hash: nIR9beM3z0SQIE8U74il0g9rsOeSSgY90BzU/EhLIZk=) 11: pUN9oAwy_WWSpziePCmks_6SHRE.roa (hash: Hhy4qO1BprlOMcnZIy/n8L8w7FuVUfpM29EdCbbZ5tI=) 12: qqaWKWVrqXLgNIhqOLqOLT6vALw.roa (hash: YuUNHeQHN/9ykZpKsd3M2YuT1W91P1nT66R/m2ce9kU=) 13: tQDmd_HVthGlh-15RwSiluD0ZXw.roa (hash: n2v5hMPR/jbnVttaRvQHSX1MtJExMkz7vX/MDwLW7dE=) 14: vdUGTvaJnk6jVS1dp_5pFhxoius.roa (hash: aQN/FjAV+TOzRf9vyI7efG6pWnTiQ/9wvqErdaLMGqk=) 15: wh8J7RB-BmB8aELJ3lFn9XJ00zw.roa (hash: OqqZhygKCmF503lAhK61n1l4VE+q41GXX/rk9zfL/YM=) 16: yyv1D2qI27bauPstP8jHFSXNpeo.roa (hash: Sxrzc1lcTsK9rH5txG2i/iG81mOTq4nJkLi0RU9h8Ls=) 17: z7hQ2VZFDIsRx1Dhc2oaVl9p-hc.roa (hash: FS+N9+SB4TBjtQFyIlWwysQ5OGB36fojo2Tdd8qJXJg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.mft rsync://rpki.ripe.net/repository/DEFAULT/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 May 2024 11:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:86:35:9c:d2:88:fc:a8:8d:26:2f:5c:07:ab:9f:7b:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b967e772cc7298305a11ffa65dd185f6a58910b Validity Not Before: May 17 11:00:11 2024 GMT Not After : May 18 11:00:11 2024 GMT Subject: CN=c6d4557ad1cc72d392e8a4d45609f1a314895225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e2:13:d5:15:34:b9:b3:6d:09:fd:ae:92:9e: db:a2:27:b0:e1:f2:86:86:4c:46:82:58:27:a5:51: 01:09:5d:3e:60:97:58:91:8e:67:1d:50:5c:59:20: fb:8a:fa:65:08:b2:f2:28:42:86:82:ba:0c:cd:35: 06:53:5a:eb:e8:a7:9f:5e:72:5d:00:98:f5:5a:f7: f6:d4:89:22:56:63:49:3d:d8:d7:53:a3:10:09:9b: ae:6e:a8:27:85:cc:3d:40:88:9b:ae:a1:0a:09:fc: 1e:dd:66:16:2c:f3:b1:e2:68:14:9a:9d:91:86:20: bb:82:cd:16:e1:ac:1f:9b:b9:8c:06:67:d4:f9:34: 75:46:ea:ce:fb:38:f9:05:09:ea:87:56:d9:00:03: 62:26:26:fe:62:4f:a2:ee:ae:1b:65:e0:be:bd:af: 76:68:30:02:dd:c1:80:a3:ad:11:07:95:0e:a0:a8: fb:23:e3:78:b4:55:ff:98:1b:8e:1a:5c:06:e7:e8: 18:02:83:5f:f7:3f:69:51:ed:2d:98:82:24:48:06: 83:a6:bd:53:44:0d:8f:16:80:02:2f:1a:d9:c1:3e: 6c:d1:98:1c:2a:e6:f3:c6:53:cc:06:df:86:97:cf: 1b:c1:a4:a6:48:0d:17:7a:2a:7f:e6:29:18:35:ed: fe:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:D4:55:7A:D1:CC:72:D3:92:E8:A4:D4:56:09:F1:A3:14:89:52:25 X509v3 Authority Key Identifier: keyid:2B:96:7E:77:2C:C7:29:83:05:A1:1F:FA:65:DD:18:5F:6A:58:91:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:ae:0c:f1:58:c4:df:7f:2d:a4:97:b5:1e:35:4a:4c:5b:2e: 33:54:b0:16:76:1d:1a:82:12:cc:19:79:15:dc:0e:a8:ce:a3: 68:95:07:6a:08:4a:9f:a9:77:72:67:96:c6:5c:11:51:0d:52: 53:8c:e1:24:71:5c:1b:36:36:34:3a:1a:9b:ae:f1:bb:74:39: e1:80:6d:61:45:6a:75:93:50:be:bb:32:c6:a2:1d:3f:db:69: bc:0e:f8:e7:1f:0a:02:a8:b3:8a:a1:69:30:45:fa:bd:8e:7c: b9:1c:6c:8f:f6:0b:d5:7f:be:e4:d5:e0:7b:21:15:d3:0b:82: 00:e7:07:66:46:8e:21:e0:a3:44:94:c7:fb:ee:5d:dd:e5:12: 65:11:2d:d2:db:63:5c:8c:c6:36:91:37:76:dd:85:72:48:4c: 10:88:94:0f:19:86:6b:da:7d:5d:9b:b6:41:74:33:df:be:9f: 04:32:09:90:7f:25:ca:e5:10:8a:af:65:3c:ed:34:96:aa:6d: 3b:e2:77:09:0a:ec:c7:94:b9:fc:c2:d9:30:03:de:1c:40:ff: 74:1e:5f:d8:9c:08:f4:19:dc:4f:67:0f:7a:67:46:49:f2:a5: 6b:0e:6d:9f:58:6b:a6:c0:cb:2e:ca:c0:2d:ac:6d:94:65:b1: ee:58:05:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY+GNZzSiPyojSYvXAern3sXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiOTY3ZTc3MmNjNzI5ODMwNWExMWZmYTY1ZGQxODVmNmE1 ODkxMGIwHhcNMjQwNTE3MTEwMDExWhcNMjQwNTE4MTEwMDExWjAzMTEwLwYDVQQD EyhjNmQ0NTU3YWQxY2M3MmQzOTJlOGE0ZDQ1NjA5ZjFhMzE0ODk1MjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuIT1RU0ubNtCf2ukp7boiew4fKG hkxGglgnpVEBCV0+YJdYkY5nHVBcWSD7ivplCLLyKEKGgroMzTUGU1rr6KefXnJd AJj1Wvf21IkiVmNJPdjXU6MQCZuubqgnhcw9QIibrqEKCfwe3WYWLPOx4mgUmp2R hiC7gs0W4awfm7mMBmfU+TR1RurO+zj5BQnqh1bZAANiJib+Yk+i7q4bZeC+va92 aDAC3cGAo60RB5UOoKj7I+N4tFX/mBuOGlwG5+gYAoNf9z9pUe0tmIIkSAaDpr1T RA2PFoACLxrZwT5s0ZgcKubzxlPMBt+Gl88bwaSmSA0Xeip/5ikYNe3+0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMbUVXrRzHLTkuik1FYJ8aMUiVIlMB8GA1UdIwQY MBaAFCuWfncsxymDBaEf+mXdGF9qWJELMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzVaLWR5ekhLWU1Gb1JfNlpkMFlYMnBZa1FzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS82NjBlNzQtYTNiYy00NDRiLTljNmEt NThjOTZkNjZmMGExLzEvSzVaLWR5ekhLWU1Gb1JfNlpkMFlYMnBZa1FzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS82NjBlNzQtYTNiYy00NDRiLTljNmEtNThjOTZkNjZmMGEx LzEvSzVaLWR5ekhLWU1Gb1JfNlpkMFlYMnBZa1FzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPK4M8VjE 338tpJe1HjVKTFsuM1SwFnYdGoISzBl5FdwOqM6jaJUHaghKn6l3cmeWxlwRUQ1S U4zhJHFcGzY2NDoam67xu3Q54YBtYUVqdZNQvrsyxqIdP9tpvA745x8KAqiziqFp MEX6vY58uRxsj/YL1X++5NXgeyEV0wuCAOcHZkaOIeCjRJTH++5d3eUSZREt0ttj XIzGNpE3dt2FckhMEIiUDxmGa9p9XZu2QXQz376fBDIJkH8lyuUQiq9lPO00lqpt O+J3CQrsx5S5/MLZMAPeHED/dB5f2JwI9BncT2cPemdGSfKlaw5tn1hrpsDLLsrA LaxtlGWx7lgFwg== -----END CERTIFICATE-----Generated at Fri May 17 18:30:58 2024 by rpki-client on console-fra.rpki-client.org