$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft File: AVttFZasBQGnGjk0RwUaYv8d2hY.mft (raw, json) Hash identifier: Smyb6iSwLb1MpQh76oLQR1EGbZfy8NExcF97CiwH+sg= Subject key identifier: 0C:64:9C:16:A8:56:30:D1:98:75:0C:A1:09:9C:E4:62:34:5E:4D:FD Authority key identifier: 01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16 Certificate issuer: /CN=015b6d1596ac0501a71a393447051a62ff1dda16 Certificate serial: 018F3BF9E23EB246D7075FD84C16FA4062B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft Manifest number: 0BE4 Signing time: Fri 03 May 2024 01:03:03 +0000 Manifest this update: Fri 03 May 2024 01:03:03 +0000 Manifest next update: Sat 04 May 2024 01:03:03 +0000 Files and hashes: 1: 1-enz8eg6hyjD5DOIwPXWVJ8PCOY.roa (hash: tgLX1TuiDQ8Q0Hyhu4jXqT9Jr6PWNjqWxMAI8C3yYOg=) 2: 2zZcO2V9AWocMlTITiupU3SvUlA.roa (hash: UECj1e3c/M+UfHIRh3+1NWptPnvSLrWwumjDTHvV9Xs=) 3: 6Kqs7OicgE2IrHEDzqncNXq0CzY.roa (hash: zo1EXRBt3clq37VrLcrRd+IyydSgdtr3uvYnDd9oHcM=) 4: AVttFZasBQGnGjk0RwUaYv8d2hY.crl (hash: MS+U8L2sSlRGlDFlD1Aeou5RU6NHHb4zel0StjHGh7w=) 5: ExreR655ua4VdeYRGfJcoYet3Zc.roa (hash: VPw4ulkGEHLV6eBi0EJE6uJfcdG2H+HTdL85qNdoS8g=) 6: IOS5lnyJn3Mn3GWKT5zxb-6aIis.roa (hash: Fj8pUMlgR7s+v9bZc9O2VBfhcvKGMejPgcB1+qBcBJA=) 7: O8uvSRIILHAvkeP1cFw0R2xPoNw.roa (hash: UpTYzrz2lasx/G1Acq07IVH7l3u2LwotURBUI4GD5dI=) 8: liRmjtCZrawgbauYlg7v074_-lk.roa (hash: oD37Xl0fVcj1oWd2f3i1gzLy9jJpdIpRRzEHca0Lfe8=) 9: tsjIHmRgPahCr9VTz4T4eq4Pj2s.roa (hash: GeLoyxu0Uc2bTZVYDRnMTr9HQ1APsE9Fk68MHWbt5xE=) 10: unahcy51J5L-q0G1yENIhaaqPCQ.roa (hash: gdXJg7j3FSUG6KMki5pJ/BlJ6STZrUqApemtIjnQEwA=) 11: zeq7-J2PPXPdY81lgQnl1cUtfoU.roa (hash: NjgAbNrcJi6leUxxE6MqpI2OqI5yw7gqud969ZgJWbU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 04 May 2024 01:03:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:3b:f9:e2:3e:b2:46:d7:07:5f:d8:4c:16:fa:40:62:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=015b6d1596ac0501a71a393447051a62ff1dda16 Validity Not Before: May 3 01:03:03 2024 GMT Not After : May 4 01:03:03 2024 GMT Subject: CN=0c649c16a85630d198750ca1099ce462345e4dfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:61:01:82:fe:57:e9:aa:fc:64:9c:d9:f0:88: 04:6d:28:6b:08:5d:0c:fc:60:d4:d0:47:dd:b3:f7: e4:aa:35:f5:fd:a2:76:3e:f2:83:16:1d:89:94:86: 54:5e:20:cc:cd:4e:fb:8e:ad:3f:76:57:84:f1:b9: 7f:eb:b3:44:7d:b1:d6:ca:23:53:5f:b8:74:22:e9: 2f:ae:b0:2d:e4:65:d7:c6:8f:9f:48:00:ba:a2:0c: 09:59:01:1c:9e:5f:ca:45:a9:80:65:3a:a7:c6:d8: 91:ea:09:5f:7b:ff:a2:06:76:7d:4a:31:73:50:d1: 99:5d:1c:3e:d9:71:c6:a1:66:28:5f:82:87:42:a4: 33:22:6c:d7:35:b1:e7:4f:65:0c:f1:96:77:45:1b: 1a:1d:05:3c:36:15:51:d1:1a:4a:b9:9a:72:4e:28: 53:ae:5b:04:fd:53:df:2f:fe:71:ba:83:57:3f:8a: 0e:08:d5:1c:91:06:ae:1a:7f:b4:e7:8e:a0:f2:a5: ae:10:7f:7a:d6:3d:06:7d:d6:56:37:68:2a:e2:9c: 67:33:d4:8e:86:65:00:a0:ec:5c:f0:22:0e:62:db: b1:f6:29:da:73:8b:5e:8c:c9:25:37:46:7a:3c:88: 92:25:63:57:ea:b9:7d:91:47:52:4f:c4:8a:82:a1: 68:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:64:9C:16:A8:56:30:D1:98:75:0C:A1:09:9C:E4:62:34:5E:4D:FD X509v3 Authority Key Identifier: keyid:01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:0b:e1:57:4d:4e:42:00:41:40:d4:3b:a4:c5:ba:5d:9f:47: a2:5d:09:db:4a:87:e4:a8:89:10:ac:be:a3:12:41:c3:8e:ee: 3e:fe:e5:10:7c:b4:64:79:04:33:ff:c2:a6:45:2e:00:e1:2d: b7:ce:7e:34:1c:66:4e:a3:3f:a1:ad:b3:a1:cf:1b:59:1c:8e: b4:8a:e9:05:53:95:b3:ac:fd:fc:5c:b5:0b:3b:57:27:ee:9a: 29:4a:51:01:ec:7b:64:1b:44:1e:38:84:4e:7b:2b:88:d0:78: b7:51:91:c9:e9:cc:0a:70:45:2e:71:c7:28:c0:2d:44:51:39: d9:05:61:e0:e4:9b:6b:76:33:a7:f6:c9:db:a5:aa:03:c7:1c: a6:f1:4e:0b:bd:b6:f5:cb:69:91:06:19:60:12:8c:76:24:a4: f9:a6:14:80:01:d7:5e:98:09:f7:9c:1f:e3:ec:7b:b0:59:3f: 19:24:44:0b:65:64:46:22:60:ea:5a:f2:9d:2c:6d:d6:2b:a4: 2f:68:f2:f7:72:66:7c:b5:f8:37:72:e7:b7:24:12:89:b1:97: c9:9c:e6:8c:78:66:cf:fe:24:4d:76:62:a5:de:e3:86:ab:d7: c0:79:ce:01:79:e4:f8:74:75:f2:85:ef:ea:28:e4:32:f0:35: 15:9c:ec:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY87+eI+skbXB1/YTBb6QGK0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNWI2ZDE1OTZhYzA1MDFhNzFhMzkzNDQ3MDUxYTYyZmYx ZGRhMTYwHhcNMjQwNTAzMDEwMzAzWhcNMjQwNTA0MDEwMzAzWjAzMTEwLwYDVQQD EygwYzY0OWMxNmE4NTYzMGQxOTg3NTBjYTEwOTljZTQ2MjM0NWU0ZGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGEBgv5X6ar8ZJzZ8IgEbShrCF0M /GDU0Efds/fkqjX1/aJ2PvKDFh2JlIZUXiDMzU77jq0/dleE8bl/67NEfbHWyiNT X7h0IukvrrAt5GXXxo+fSAC6ogwJWQEcnl/KRamAZTqnxtiR6glfe/+iBnZ9SjFz UNGZXRw+2XHGoWYoX4KHQqQzImzXNbHnT2UM8ZZ3RRsaHQU8NhVR0RpKuZpyTihT rlsE/VPfL/5xuoNXP4oOCNUckQauGn+0546g8qWuEH961j0GfdZWN2gq4pxnM9SO hmUAoOxc8CIOYtux9inac4tejMklN0Z6PIiSJWNX6rl9kUdST8SKgqFo8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAxknBaoVjDRmHUMoQmc5GI0Xk39MB8GA1UdIwQY MBaAFAFbbRWWrAUBpxo5NEcFGmL/HdoWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgt ZmVlOGYzNzkwNTY3LzEvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgtZmVlOGYzNzkwNTY3 LzEvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALgvhV01O QgBBQNQ7pMW6XZ9Hol0J20qH5KiJEKy+oxJBw47uPv7lEHy0ZHkEM//CpkUuAOEt t85+NBxmTqM/oa2zoc8bWRyOtIrpBVOVs6z9/Fy1CztXJ+6aKUpRAex7ZBtEHjiE TnsriNB4t1GRyenMCnBFLnHHKMAtRFE52QVh4OSba3Yzp/bJ26WqA8ccpvFOC722 9ctpkQYZYBKMdiSk+aYUgAHXXpgJ95wf4+x7sFk/GSREC2VkRiJg6lrynSxt1iuk L2jy93JmfLX4N3LntyQSibGXyZzmjHhmz/4kTXZipd7jhqvXwHnOAXnk+HR18oXv 6ijkMvA1FZzsBQ== -----END CERTIFICATE-----Generated at Fri May 3 07:01:58 2024 by rpki-client on console-fra.rpki-client.org