$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft File: BztMEkjEvPIrBXffypsU2QY8KMA.mft (raw, json) Hash identifier: nSusQlB2K/xsVIv2/5lI1JBubhF7yOn+N2ZR7v93O+w= Subject key identifier: 30:82:76:35:05:18:C0:5A:DE:14:7C:FC:D4:91:D3:62:23:95:11:43 Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0 Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0 Certificate serial: 018F490EDB25AC750C9774F9E4A2F81B59ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft Manifest number: 0F9A Signing time: Sun 05 May 2024 14:01:01 +0000 Manifest this update: Sun 05 May 2024 14:01:01 +0000 Manifest next update: Mon 06 May 2024 14:01:01 +0000 Files and hashes: 1: 1B0MjJvImsmwnBC54J1UxQN0O-8.roa (hash: EwXvEJhnIv7c1sS/pbpigr1iO1F/0Uk6hhVQTnNgrNs=) 2: 2UR7n5W2YH2DkF5Xpufws-QOw2M.roa (hash: T79yZiReAyVWYO9VqL1KX+dHjDEhEzPut3+iTxpGaMk=) 3: 2YJOY-n9NwKwcqzLt0551H97vj4.roa (hash: b+JBLHOtv9483D7e4lUPnnrEHklP5VSLIeYVjmq/9R0=) 4: 3qq6o7e9LSH7mJWTjqi3lyFqw5U.roa (hash: dho1GYRt0l2Wr3tggGU32gbZxI5GFSZvfLpy8Tsgxo0=) 5: 7jlk6DFx6zzLFMshUVQFSCNh1gk.roa (hash: mvNRCoHNOlcbKeKo6B3KLXjDEaqvaRZkX6K1KmoMMHc=) 6: BztMEkjEvPIrBXffypsU2QY8KMA.crl (hash: VZHoyihngZTOElN/c2RXZwx2Ee0LMef354JWedh9Jxs=) 7: KUsJCVgPy1fTvMovfuqxtI9z3VY.roa (hash: /Nd2qqexq+/z2JUhe+iOicaiLexKpmKDvDJQg7xrRKw=) 8: M5qvFaZa0jjX6USKWgwabLQ71GA.roa (hash: WeMMEHXwKsigOeHICITkoK6YmZYDY/LxBORSEwZHG14=) 9: Md-crvhdTpDpDvWZiF-t87BiFi8.roa (hash: wRs1I/W6rUmHPf9ky7qxgoVzRRGifkp3gc6WUm7ierU=) 10: NxftkZQxhYA3gBK3YLZ--5dhjYY.roa (hash: 4yrwLP1M0nV7nvr8eZqE21N8mlyaBcxifLM+RHEawwg=) 11: QTNYwKTQq4V_8Ba7DXovWn-UJf4.roa (hash: aUFXAIcoTOn9phW1VaarOK8yet7G3VS0br+ZMIAbJzI=) 12: RJYL095BXPZRuECIDjJxfXjEOA8.roa (hash: X8MP8WeVxYBtX5YvdfYlzaTq4Qbp1xmhinLiIQL+gTU=) 13: TvvxXYs1iLCo0S2nPEz8X1hhjtc.roa (hash: sBYWauWFHJNJqDddsXXMNATaZ/bU3/UVdKBh3/8uZIA=) 14: VSftAl8CS2FVSqGw4I2Tc74L344.roa (hash: teF8p1/matweefE/W+rPPeuf5hbvgnstY2MupD+Nr44=) 15: Vzu9LGhrwScWPRXVowbWLFMZNQg.roa (hash: W4EXSzL9KXSVpRMdwESQIOOlVWWbP9qBkbILyjRV/KY=) 16: Z9ln1zHGg4dXPHdYUCwUEGik6Z4.roa (hash: 8BnER/mvx0nzyN/lQ+wslvkmwX7mangYsFUR9zE4o60=) 17: a8OQkvKCwaalzHJV8ZnmdhdEec8.roa (hash: u0BT7utTh1usGrC4FywgdWEqhgBE9AVHaQJlUIGy4U4=) 18: aA3Wc6FdIQRBGV-CVjQvKlREFUY.roa (hash: nCauzRVxbwRaMjsofeKLnZvG6FX8RhNG0vZ3Rm607cI=) 19: dgs0vnL-bpGllISxQ2yvfCblR9o.roa (hash: aPDzjBOaCwyR/T4JoMEBhbkwPHUggin7oTpeir5gVYk=) 20: eHMGQjOZXw5_rgA5oZKFNp9N7uM.roa (hash: q00YxCXZiKyV5wcFj6KKfNq78k1TGXTXOtVaRpAUIsY=) 21: e_8OyKXT4_wQAu4mMprIonNhVes.roa (hash: HtOMx5VxC0eT8TL1PF4v39TUfYxy/ATRtXyPJTujF3M=) 22: eyd9mYBiy1QWZ6eLRCi7H1QcORI.roa (hash: kFMsYJHjYrwcyvDYbkIFRERNd4DIOW6is4VTwSXZp+I=) 23: mHPI6ziQlfw_LqOAsA9ciBy0btU.roa (hash: rGOCR6nuyMuqjGzrjZryVLVUqTtjVCBQMkXUQ60z0BA=) 24: oVYxan-GXhsmrmb41bN8odlAt4k.roa (hash: 833Ix0wX4tLDeRRUyNavAIl46KZywd6YLxdzDFuv02w=) 25: wSEfPAomuVv66ROBOQh7GkyZOeQ.roa (hash: PmOV+z+rCWXNn/Vh2k/XpmdSE1NxBPZ83KCn3DNE3m8=) 26: xEkiw27nSRXD0YX8mmmgmkPtAns.roa (hash: YYM95/iDyLjUrsE4wJBcmuwEac+F2swUyOhTmU5i+Ww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 06 May 2024 14:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:49:0e:db:25:ac:75:0c:97:74:f9:e4:a2:f8:1b:59:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0 Validity Not Before: May 5 14:01:01 2024 GMT Not After : May 6 14:01:01 2024 GMT Subject: CN=308276350518c05ade147cfcd491d36223951143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a4:46:73:79:6c:ba:30:9d:57:59:4e:85:9b: fe:8e:77:6a:bb:55:37:5e:b9:c2:20:8a:8c:e2:82: 88:0a:c3:2a:4f:7a:63:a6:d9:25:66:e6:6f:57:65: 41:33:c3:25:e9:26:18:61:00:04:5d:11:a4:b2:7b: 51:fd:06:2e:8f:3c:fb:9b:c0:e1:df:64:ed:23:06: 7f:2d:e5:14:67:5c:bc:3d:c1:4c:9a:1f:fd:83:89: a0:83:30:ed:77:b6:a5:ca:84:02:8c:f8:97:1e:e3: 6b:d1:ba:53:ce:ac:7c:96:d6:b3:e3:79:47:52:e0: c7:89:7e:f3:80:b8:69:0b:33:4d:57:4b:0e:f5:d3: 3b:07:c7:e9:f2:2e:04:8e:33:65:3d:12:3e:f1:a0: f6:b3:74:9c:89:06:d4:03:96:a9:74:75:ae:d5:37: 47:a3:43:fa:6d:6f:e1:c2:b8:3f:9e:8c:7b:f2:ff: 18:14:65:71:0f:49:0a:89:51:6d:ee:cb:52:91:8c: 1c:6f:2c:87:b0:41:1d:5c:03:cf:4b:86:f8:54:96: b6:f1:bf:f6:a7:9b:06:af:e1:8f:8a:c9:c3:ff:f8: 32:73:82:48:cb:64:f5:9a:b2:11:8a:68:0b:dc:39: b8:46:4a:37:22:89:a4:b7:c6:d9:f5:df:a5:b8:83: e5:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:82:76:35:05:18:C0:5A:DE:14:7C:FC:D4:91:D3:62:23:95:11:43 X509v3 Authority Key Identifier: keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:d2:28:a2:4f:df:b9:37:e3:60:85:84:b7:dc:52:f6:1a:32: 82:8e:4a:81:39:bf:58:77:83:8a:e5:e1:73:e4:06:eb:be:5d: 0a:42:6f:af:a1:f2:15:6f:a0:2a:f9:90:34:2f:51:d3:01:f1: d5:93:d8:da:82:02:65:84:5e:76:f1:51:88:1e:bb:70:ef:9f: 0b:94:fa:4e:61:48:90:4f:28:35:ed:b5:6f:97:06:8a:fb:7c: a7:19:29:03:89:15:e8:42:10:25:41:d7:ea:5c:ed:e5:60:e8: 98:6a:48:6b:ee:da:3f:53:cd:b5:56:e0:83:ef:6f:82:b2:7d: a2:f6:02:d5:ce:bc:6a:b1:d8:ed:df:64:56:f1:6f:b1:03:b4: 55:13:5e:04:e3:71:a2:2d:12:9b:e0:a4:49:90:28:0b:1c:2f: 67:92:b5:8c:11:11:a3:3f:b8:ea:b1:d6:63:fd:4a:dd:1f:e3: 7e:f4:77:a6:cb:35:ec:03:1d:e6:c9:d5:1a:27:e9:f0:69:22: 46:0a:1d:1c:7b:65:46:17:28:1a:af:6e:59:9d:bf:f0:5b:ef: ed:58:83:17:e7:8e:a7:4a:37:ba:e1:4a:f7:8e:17:d1:9e:9e: 9c:27:19:08:72:03:0b:16:11:ce:d9:22:3c:83:7b:8f:2c:15: 62:54:bb:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY9JDtslrHUMl3T55KL4G1ntMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3M2I0YzEyNDhjNGJjZjIyYjA1NzdkZmNhOWIxNGQ5MDYz YzI4YzAwHhcNMjQwNTA1MTQwMTAxWhcNMjQwNTA2MTQwMTAxWjAzMTEwLwYDVQQD EygzMDgyNzYzNTA1MThjMDVhZGUxNDdjZmNkNDkxZDM2MjIzOTUxMTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaRGc3lsujCdV1lOhZv+jndqu1U3 XrnCIIqM4oKICsMqT3pjptklZuZvV2VBM8Ml6SYYYQAEXRGksntR/QYujzz7m8Dh 32TtIwZ/LeUUZ1y8PcFMmh/9g4mggzDtd7alyoQCjPiXHuNr0bpTzqx8ltaz43lH UuDHiX7zgLhpCzNNV0sO9dM7B8fp8i4EjjNlPRI+8aD2s3SciQbUA5apdHWu1TdH o0P6bW/hwrg/nox78v8YFGVxD0kKiVFt7stSkYwcbyyHsEEdXAPPS4b4VJa28b/2 p5sGr+GPisnD//gyc4JIy2T1mrIRimgL3Dm4Rko3Iomkt8bZ9d+luIPlrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDCCdjUFGMBa3hR8/NSR02IjlRFDMB8GA1UdIwQY MBaAFAc7TBJIxLzyKwV338qbFNkGPCjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQt YThkMzYxY2U2NGFhLzEvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQtYThkMzYxY2U2NGFh LzEvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmNIook/f uTfjYIWEt9xS9hoygo5KgTm/WHeDiuXhc+QG675dCkJvr6HyFW+gKvmQNC9R0wHx 1ZPY2oICZYRedvFRiB67cO+fC5T6TmFIkE8oNe21b5cGivt8pxkpA4kV6EIQJUHX 6lzt5WDomGpIa+7aP1PNtVbgg+9vgrJ9ovYC1c68arHY7d9kVvFvsQO0VRNeBONx oi0Sm+CkSZAoCxwvZ5K1jBERoz+46rHWY/1K3R/jfvR3pss17AMd5snVGifp8Gki RgodHHtlRhcoGq9uWZ2/8Fvv7ViDF+eOp0o3uuFK944X0Z6enCcZCHIDCxYRztki PIN7jywVYlS72A== -----END CERTIFICATE-----Generated at Sun May 5 18:58:18 2024 by rpki-client on console-fra.rpki-client.org