$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft File: IbrXTn9sCUmic2pXR4SW19i0UOY.mft (raw, json) Hash identifier: ByOi0NEJsNN88/SGLwTXS3QLzu2hbWw7AQ7zsWejJ2M= Subject key identifier: EC:E9:8E:A0:EA:E2:D8:DC:EA:65:5A:35:86:11:4C:8D:DF:D5:E8:BC Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6 Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6 Certificate serial: 018F54009BA9762F57EC27F17A1022B70BA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft Manifest number: 116E Signing time: Tue 07 May 2024 17:01:16 +0000 Manifest this update: Tue 07 May 2024 17:01:16 +0000 Manifest next update: Wed 08 May 2024 17:01:16 +0000 Files and hashes: 1: 0lCEWt7EhpSrsRI4bNz-kUzH2eI.roa (hash: nf39ZNfSGf9BEk40Vvwca4uqDbeTd2DAZISUuvs+Eto=) 2: 173XCGuWwq5g4SYyuCKpmiLksE0.roa (hash: eflSdKbu4fIOHMe2PRbyyDc4R9xfZEjM3Gp8gsNGHjU=) 3: 1OoSbnplx9UuuILS1ErEE3GanzA.roa (hash: NqJDIs7CYKcEh9rQly7mZgZSK1cJn5dUNdgGnxMrXwE=) 4: 1qYVLxR7cW6hLPqlPhP2CCTtV88.roa (hash: jZ1Q3rLwolCPAFADdV3G0S75x8CvMTsTd5Llv82phFc=) 5: IWgKs7elqt1E06qXx8A-tsDlahA.roa (hash: MZgts1LYHvjsf4HZUKAONCQa3epE3Il7udsYa/VyaEo=) 6: IbrXTn9sCUmic2pXR4SW19i0UOY.crl (hash: AutV2Nj9ubJg07RwYuDLAHEc1mrMWj0PFPpJaaChjZY=) 7: JZ_FozYS2VyPtXAjoziYBmcRKKI.roa (hash: I6IxX+2ncpe3K/ksn5JNNWZiw7MeTVOkJ+Zor2udrEQ=) 8: K4_A0q40LqMnY2sIgFDzNevowe0.roa (hash: iG/EewkQSXq1FpT6dk4dYQevy8pEv6cDpcB14nVbEXg=) 9: LFRhd-k46sX-wTh6M8Ngh7IGnQE.roa (hash: IXQkGGQXjj6NNS1i6oshUou2HsPSaXT0iPqwfrA/bD8=) 10: NnGI4Ah--Sf06-hX7QFnoAvh-ks.roa (hash: 0m6AfwaQtJNtCpzi6sm1xyWCSrWHb0Wtg0jafPnbozw=) 11: QOEZZD4JI-4CLpe74W4ZcpwmgH4.roa (hash: EsAflJMUWBTSMNKA5HNcZ90yWQF/cofZEDfeNoz5XBk=) 12: SQmOD4ONbbNgxfX0D0uk_AC6woA.roa (hash: mYFAhOKzrtDH3gt5j/A8Fdb+HiEEGrHT5/Pr+jTdujY=) 13: SdxiNDGYYyjxMkaPwWgr1T9XxNI.roa (hash: DP2MTIdggGgFhDSklgpOvP1pkHcdIVqrs10Mt4j0dmU=) 14: TpY0DQgDNO0kbdZGkP7QQ8WXh0s.roa (hash: j0kdDmS1+YBLttihUEHfNW4jCM8Bv7jQZOU3WAywF9E=) 15: XuRddUCzvQf8sMVVLUjcQ_tCzqI.roa (hash: NncEAJcGYZhxkSgCzbzDzWc9fyE0QMnk2oC8LTZIKdQ=) 16: Yr2oqsD2BlcfUhAWTJbFCHYxliM.roa (hash: p2+0eAEbjFeY7Q45GMx0XAsBZmxVP8j8kIniX625xsM=) 17: _rluX7mpfMRhXZj9rKuIhirt-jI.roa (hash: OnXgoJdOOZ0FbyI9ZEGZnMcIvoPK21mQ/8QVKvuIyl4=) 18: bCSieWo-w4fpCq83KLhIaTqEOW4.roa (hash: kTQtlhHM4IZrhBolk9xQ5GppIc04PHq1Qs6KhkQC5fI=) 19: eYxLltUjppZRjlbakLuWWSfjujs.roa (hash: Ov4k3wc9gsD8/U45NW2a2Lpn7jA5xWCbUsGBCf/kGu0=) 20: esbx-vbqSIJ3h9n5otBRbgpW6HM.roa (hash: ML5nokz/6aBa/N4kALbXJqMfk7SLetlu0rG42WxSMOY=) 21: p7kWSjjLXqciyxVoQ0JksSWtDwk.roa (hash: eiDZV4j3kNBHnzKXh9NZHcjYbVHchbfqF40WRU7Pr6M=) 22: r4rwUUhXTCUkEZAOXuJN9fXk95E.roa (hash: VB7AX+BGjUOHmh59VRcVDuWEl/9cXmzhqhUieJpe9i8=) 23: rKrQAk-c57o6_PJu7O5PscgOvXs.roa (hash: /2RWJV9CevbTBtSH/4G/jy3LXBLFUFF/xNLgpIbTUlo=) 24: swEm2Xx1J2VI-wwszDmILMESolQ.roa (hash: jmyi7M48PLbxALpJ0QRFUrKXrExUQVsostbXEqPxBjY=) 25: uH9YCi3E1qGdyuQHk6BJ1T1SIHI.roa (hash: bZayB46+gOeDrr9dF8fkoLZu8NDJ3a2uIHPPj01DbW8=) 26: uWay8Qb-ypcDd7A2AWYsDwJWc_E.roa (hash: vzg2RnVcm3vUeAQxbt9XODe8QIBH8qEzbU8VvD7RW+Q=) 27: ydp4IekY2oJNPzfS78n2BXCuQ9Y.roa (hash: FS6wyLyxeB80Gc3/Xwus6uyrmwpFSUj66EIvGOyonEw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 08 May 2024 14:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:54:00:9b:a9:76:2f:57:ec:27:f1:7a:10:22:b7:0b:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6 Validity Not Before: May 7 17:01:16 2024 GMT Not After : May 8 17:01:16 2024 GMT Subject: CN=ece98ea0eae2d8dcea655a3586114c8ddfd5e8bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:34:bb:12:a1:7a:9c:97:8a:0c:b5:22:05:f0: 9c:cb:a4:d2:e9:78:00:5f:28:04:81:02:ee:21:08: 07:36:ed:7c:95:c1:ed:9a:27:6c:11:f0:82:b0:f5: 8b:f3:75:38:00:af:87:2c:7a:cb:b5:a0:18:78:0d: c5:21:78:63:a1:26:a7:2d:02:70:87:bb:cc:49:3f: 20:73:58:35:73:1a:24:40:25:56:e4:08:c6:f6:73: 4e:a7:87:2e:ab:bf:36:ed:16:ea:7e:79:73:09:7e: 69:89:1b:c6:68:ad:7d:2b:0a:11:78:6a:67:b4:71: 3d:f4:a2:9e:ee:79:f7:57:c9:30:86:a1:57:9c:54: 6c:21:c4:cc:26:c7:3b:5c:dc:a1:42:f4:34:7b:a5: d1:fe:77:71:62:fa:24:16:89:56:8b:16:15:73:b9: 82:9e:fe:21:7b:cf:08:7b:92:f0:3e:4a:59:dd:74: 20:ef:b9:3f:1c:7c:35:48:4b:57:a9:0f:c9:31:b4: 35:91:f6:18:34:68:23:d6:30:6b:a9:2c:23:01:57: e2:66:ed:18:ab:a4:e0:82:ef:ba:a5:1c:a3:75:dc: dd:89:51:57:9a:87:7d:69:d0:63:59:72:4e:db:ce: 2d:dd:2f:bc:84:6f:a9:bf:f0:7e:fc:b7:9d:75:fb: 18:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E9:8E:A0:EA:E2:D8:DC:EA:65:5A:35:86:11:4C:8D:DF:D5:E8:BC X509v3 Authority Key Identifier: keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:fd:fb:8d:c4:c6:54:cc:e5:5e:2d:5f:73:e3:9b:84:69:33: 2a:d4:1e:24:3b:68:8c:c8:58:4a:48:18:0f:e4:e8:59:1d:2b: 6f:06:99:b9:e9:a4:df:f3:d7:c7:5a:20:43:49:e5:db:f2:ee: bd:c6:af:6e:1c:12:ad:fd:71:5a:f0:5a:95:b5:ae:71:d7:68: f7:3a:1f:f9:b6:e2:e1:7e:b6:4d:4b:c0:ec:a4:4f:58:a9:b5: 15:94:f4:fe:29:d5:a9:76:5d:55:cf:8e:c5:c4:23:69:7d:64: 29:28:22:57:aa:0f:46:57:1c:5b:c6:d3:df:9c:5b:50:a7:26: f7:cc:e6:94:c3:cd:e1:b2:e5:6b:69:88:f3:b9:aa:6f:f3:36: 93:65:cb:ca:0a:23:99:2e:71:aa:40:cd:f6:4f:82:62:28:6a: b9:38:96:10:bd:33:37:57:ac:f7:38:81:f3:ad:de:6b:4a:cf: e3:1d:c2:09:92:7d:fd:74:64:76:c9:11:36:98:34:08:98:a0: a3:49:6a:a2:90:d1:5a:99:6a:d3:15:4f:43:7c:77:f9:b1:ce: ab:ac:2e:7d:45:32:0c:93:f3:ad:b1:ba:9c:0e:8e:11:92:69: 64:67:49:5e:1a:57:4a:b5:63:df:26:e3:f3:6b:52:98:4e:ae: 71:5f:3b:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY9UAJupdi9X7CfxehAitwuiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYmFkNzRlN2Y2YzA5NDlhMjczNmE1NzQ3ODQ5NmQ3ZDhi NDUwZTYwHhcNMjQwNTA3MTcwMTE2WhcNMjQwNTA4MTcwMTE2WjAzMTEwLwYDVQQD EyhlY2U5OGVhMGVhZTJkOGRjZWE2NTVhMzU4NjExNGM4ZGRmZDVlOGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDS7EqF6nJeKDLUiBfCcy6TS6XgA XygEgQLuIQgHNu18lcHtmidsEfCCsPWL83U4AK+HLHrLtaAYeA3FIXhjoSanLQJw h7vMST8gc1g1cxokQCVW5AjG9nNOp4cuq7827RbqfnlzCX5piRvGaK19KwoReGpn tHE99KKe7nn3V8kwhqFXnFRsIcTMJsc7XNyhQvQ0e6XR/ndxYvokFolWixYVc7mC nv4he88Ie5LwPkpZ3XQg77k/HHw1SEtXqQ/JMbQ1kfYYNGgj1jBrqSwjAVfiZu0Y q6Tggu+6pRyjddzdiVFXmod9adBjWXJO284t3S+8hG+pv/B+/LeddfsYuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOzpjqDq4tjc6mVaNYYRTI3f1ei8MB8GA1UdIwQY MBaAFCG6105/bAlJonNqV0eEltfYtFDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQt NDQzMzIyOWE4NDczLzEvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQtNDQzMzIyOWE4NDcz LzEvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcv37jcTG VMzlXi1fc+ObhGkzKtQeJDtojMhYSkgYD+ToWR0rbwaZuemk3/PXx1ogQ0nl2/Lu vcavbhwSrf1xWvBalbWucddo9zof+bbi4X62TUvA7KRPWKm1FZT0/inVqXZdVc+O xcQjaX1kKSgiV6oPRlccW8bT35xbUKcm98zmlMPN4bLla2mI87mqb/M2k2XLygoj mS5xqkDN9k+CYihquTiWEL0zN1es9ziB863ea0rP4x3CCZJ9/XRkdskRNpg0CJig o0lqopDRWplq0xVPQ3x3+bHOq6wufUUyDJPzrbG6nA6OEZJpZGdJXhpXSrVj3ybj 82tSmE6ucV875Q== -----END CERTIFICATE-----Generated at Tue May 7 19:49:19 2024 by rpki-client on console-ams.rpki-client.org