$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.mft File: IVJmQ1YX-g8f0oN-yAxtg7C51gg.mft (raw, json) Hash identifier: CREM5T/FO7keU/GQRKll2iuK0IRuhb+VThsdMm4AYHw= Subject key identifier: E2:AD:10:F7:26:B6:25:2E:4D:BC:FA:A8:44:40:3F:80:B5:1D:C5:0D Authority key identifier: 21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08 Certificate issuer: /CN=215266435617fa0f1fd2837ec80c6d83b0b9d608 Certificate serial: 018F49B3A410C6F680AC7226DB72CA63DAA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.mft Manifest number: 1175 Signing time: Sun 05 May 2024 17:01:00 +0000 Manifest this update: Sun 05 May 2024 17:01:00 +0000 Manifest next update: Mon 06 May 2024 17:01:00 +0000 Files and hashes: 1: 1187DuXxpWobN2KwOEz9Fp3zGhM.roa (hash: cjLAlkKXpgWqWYKDrScpfT7oGdt3VF4CrYQ3TdD+yMA=) 2: 4nK3g12RbCcfxqgFVnykcf0J91g.roa (hash: nqu9NRsefj+e1CBrnu2+ZU15INPeCPoNXklPW5IEcXE=) 3: 6hak8wOkhRhFN6WEMqB_WwKBmvQ.roa (hash: bWoqXzZcrGM4JIC876F355qWRTjooy6UHHxrSbjnD3E=) 4: A0kwvkDILTSwpyTzQyoYMEG9Xmo.roa (hash: 4iWLxhz/iYtAfHwGAUxo5gI51XWRJNGY3ipC61UUOpE=) 5: CMsUEEtfEggas9YUzaeE9Wi_zz8.roa (hash: TH/BqMQsHnCegfhFh6JgXoDmPt8IIILKLvM+iqFWSg0=) 6: IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl (hash: Npeu2mpp7UCqPY5vhSa00L4P5KWLM8anXKFSa6SrjS8=) 7: JnSEvVhrSZY3iKrDNN2KCcFhD4s.roa (hash: jKdYdm/OUYF/fcrU61OIr5TmK9rRq1SMBXgEtVNmXaA=) 8: M1ZAZlronvEzbQVBFiYTHl4zwws.roa (hash: PWPtlVy3i0WkuS0RThX96zS3B4puucECdlxclETnNA8=) 9: RwxtC4FlIH-BRM456436ARQdixY.roa (hash: 5OEHjdAVhmjTGujmtWTXPuxpGhOBM64b1nTAsTM3K14=) 10: T6j2xcZfzDFBRYeaH9A6ZYQJiOc.roa (hash: Fcf3FVyX90isd1y2sGVaHiNrYadnjOPZJmRAcELtix8=) 11: UMd3p_q3AlA0FTggOaSdjNfL8ps.roa (hash: Iuj3pB23MMt3nw1keN/qkjW6nHha0ZLA8EBpAmwJlwg=) 12: fbh_9hTx2c1_FJL3vCqmLO_CahI.roa (hash: UZgn5IKDrkgfr5AolWouHcTdfycJKRCfUyzyDJdsVqI=) 13: mwaG4NJTYrks3DUQ9il5d21CRpc.roa (hash: 1evp8kykSnLTfg6MglC0IbynzLi/6TuPXBQZMrJrGWo=) 14: rQ6yLw1dMo8O_gtlwNqf9rCJuC4.roa (hash: yRqT0yPywNNGSJCZBmpkZnB38IaPSzACBWALfvbRNdk=) 15: rqM2DlGn65vRcKIBH8ZEQ6uDsvA.roa (hash: tNQKyZgAqB4doIa9VnlnPUmHtRHohm38corUZ6CfKFo=) 16: smxtunAvuwVl7VA4eJFp9OAuEeE.roa (hash: vsm3kM5rrg0dXu1eTZs7BBtTYDRIipRLgFl8mbMMCgg=) 17: t_omVMmfqkpTJYqeDoKAbQ8LWNM.roa (hash: Grf+z2xxAV4ldI/TyMAcEUillMkXqLArD7nqXixAIZ4=) 18: usdimstwfKvIPwk_4Bc5npNvXlc.roa (hash: N9vVOgke0XpNQhfeegYuxPJxj5IPjJwlxKOTbISeoWo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.mft rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 06 May 2024 17:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:49:b3:a4:10:c6:f6:80:ac:72:26:db:72:ca:63:da:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=215266435617fa0f1fd2837ec80c6d83b0b9d608 Validity Not Before: May 5 17:01:00 2024 GMT Not After : May 6 17:01:00 2024 GMT Subject: CN=e2ad10f726b6252e4dbcfaa844403f80b51dc50d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:91:1e:c3:b6:2a:8b:ba:f7:8d:e2:ee:6f:c5: 46:f2:d7:f4:65:9a:86:2d:66:2c:15:18:4c:a6:2e: 73:95:97:81:95:ea:f9:57:7f:cb:ed:63:82:54:9c: ee:18:0a:13:48:bb:54:43:60:c8:86:2d:ec:cc:05: e8:b7:df:31:5a:4a:2b:64:0b:1a:d5:e6:dd:6c:17: 00:99:14:50:28:ef:9f:73:1e:96:a7:a6:37:27:4b: 1b:70:7f:c7:b1:01:df:b2:da:6b:5e:51:f9:5c:ed: bb:26:b4:bf:8d:c4:51:f9:98:56:a9:80:03:e2:ae: 8b:25:38:5f:32:f0:5a:1d:8c:2e:fa:2e:76:ad:fc: ed:1a:48:3c:83:34:b1:b3:9a:ba:6e:79:98:54:d3: 9d:a9:90:dc:b4:f0:08:0f:fb:be:19:1b:87:ac:ac: b3:05:2a:ec:ac:21:71:56:24:54:8f:85:94:02:ae: f2:73:b1:b3:ed:1c:31:4d:fd:9c:d5:1c:73:7f:26: 23:c7:f5:cc:bb:f9:d7:58:96:1b:8e:8a:18:ef:29: 93:5b:9b:b7:ef:aa:ce:cf:54:3c:e2:a4:b8:e8:08: ed:bb:7c:09:02:f2:66:e3:f9:3e:e6:db:05:2c:79: fb:14:7a:a4:1f:20:4c:dd:04:49:b0:76:d8:b6:99: 89:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:AD:10:F7:26:B6:25:2E:4D:BC:FA:A8:44:40:3F:80:B5:1D:C5:0D X509v3 Authority Key Identifier: keyid:21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:60:ca:c6:90:39:38:8f:7f:09:e2:cc:c3:44:a0:8b:21:37: fb:61:73:c6:77:c5:9a:94:22:14:c1:11:f4:a1:d2:ca:2a:91: ef:f7:19:01:93:13:b0:b7:21:88:14:3a:13:6c:9b:51:7d:09: 19:b2:87:e1:89:b9:d1:f7:68:f0:4c:78:dc:8f:53:d2:3d:53: 63:d4:b6:c7:de:0a:90:9a:e6:1c:fd:fb:05:d7:bd:39:6c:29: b9:49:35:7b:9f:74:11:22:d7:0f:5b:1b:cb:42:de:4e:bc:6e: 5e:61:69:3f:ba:84:66:4d:5a:9d:5c:f7:b4:30:11:b6:8e:48: f6:3a:ff:59:60:63:60:52:e6:b8:cb:97:46:10:c6:fe:71:5c: ab:72:f1:d9:53:22:be:1e:72:12:76:55:a9:49:d5:4e:20:57: 87:53:35:9b:17:14:af:bf:d9:31:ad:f9:71:c7:89:c6:e6:ef: 81:9a:c2:66:30:95:eb:c1:d8:84:cf:71:26:e8:9a:59:52:2b: 96:c9:8c:d3:6a:77:78:9d:01:ae:b3:7e:a8:fc:3c:64:53:ad: fe:6d:78:10:25:56:5c:69:25:47:5e:ff:02:36:72:81:98:07: 87:dc:c4:8f:16:5c:2c:e1:3f:05:29:01:f9:3b:1c:81:aa:b3: e3:17:22:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY9Js6QQxvaArHIm23LKY9qpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxNTI2NjQzNTYxN2ZhMGYxZmQyODM3ZWM4MGM2ZDgzYjBi OWQ2MDgwHhcNMjQwNTA1MTcwMTAwWhcNMjQwNTA2MTcwMTAwWjAzMTEwLwYDVQQD EyhlMmFkMTBmNzI2YjYyNTJlNGRiY2ZhYTg0NDQwM2Y4MGI1MWRjNTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZEew7Yqi7r3jeLub8VG8tf0ZZqG LWYsFRhMpi5zlZeBler5V3/L7WOCVJzuGAoTSLtUQ2DIhi3szAXot98xWkorZAsa 1ebdbBcAmRRQKO+fcx6Wp6Y3J0sbcH/HsQHfstprXlH5XO27JrS/jcRR+ZhWqYAD 4q6LJThfMvBaHYwu+i52rfztGkg8gzSxs5q6bnmYVNOdqZDctPAID/u+GRuHrKyz BSrsrCFxViRUj4WUAq7yc7Gz7RwxTf2c1RxzfyYjx/XMu/nXWJYbjooY7ymTW5u3 76rOz1Q84qS46Ajtu3wJAvJm4/k+5tsFLHn7FHqkHyBM3QRJsHbYtpmJAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOKtEPcmtiUuTbz6qERAP4C1HcUNMB8GA1UdIwQY MBaAFCFSZkNWF/oPH9KDfsgMbYOwudYIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVZKbVExWVgtZzhmMG9OLXlBeHRnN0M1MWdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9jMDcyYWUtMTVkNy00MmE4LWJmYzIt YmM5M2NhNjc5ZTFmLzEvSVZKbVExWVgtZzhmMG9OLXlBeHRnN0M1MWdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9jMDcyYWUtMTVkNy00MmE4LWJmYzItYmM5M2NhNjc5ZTFm LzEvSVZKbVExWVgtZzhmMG9OLXlBeHRnN0M1MWdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYGDKxpA5 OI9/CeLMw0SgiyE3+2FzxnfFmpQiFMER9KHSyiqR7/cZAZMTsLchiBQ6E2ybUX0J GbKH4Ym50fdo8Ex43I9T0j1TY9S2x94KkJrmHP37Bde9OWwpuUk1e590ESLXD1sb y0LeTrxuXmFpP7qEZk1anVz3tDARto5I9jr/WWBjYFLmuMuXRhDG/nFcq3Lx2VMi vh5yEnZVqUnVTiBXh1M1mxcUr7/ZMa35cceJxubvgZrCZjCV68HYhM9xJuiaWVIr lsmM02p3eJ0BrrN+qPw8ZFOt/m14ECVWXGklR17/AjZygZgHh9zEjxZcLOE/BSkB +Tscgaqz4xciTg== -----END CERTIFICATE-----Generated at Sun May 5 19:10:00 2024 by rpki-client on console-fra.rpki-client.org