$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft File: iabNn0vrewwE0x_-XGdKh6dznSE.mft (raw, json) Hash identifier: 5usbBM+S5P0ywW17vwo9EYMdZAQIUknuhAxGClFZzsE= Subject key identifier: 64:F9:9B:30:D9:77:62:49:18:E1:0F:45:BF:80:48:77:43:F0:F9:82 Authority key identifier: 89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21 Certificate issuer: /CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21 Certificate serial: 0194BB9722077DD15CE1FFA97D679B75A3E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft Manifest number: 142E Signing time: Fri 31 Jan 2025 09:00:31 +0000 Manifest this update: Fri 31 Jan 2025 09:00:31 +0000 Manifest next update: Sat 01 Feb 2025 09:00:31 +0000 Files and hashes: 1: 1AVD6_mgeoD7QDUZJl7EDizwiPA.roa (hash: cX/v9qqSG1teaYFoFOKsa3bn2RyT9qsyhWH8nkdQ7JA=) 2: 8nPu7g_10GykuOn6hB7ddpZ32pc.roa (hash: PE7yr9seUogU++GGlz15g0vomylBpNKOs5X1aqyCFXY=) 3: FuyO4nKRxR39tBuC6eKFQfxQwrc.roa (hash: GUrm17XZGeWFCxLew8/dow89FusnPuSqgk9j0BnqmKQ=) 4: IRm19nOK5U99-KFgT6Iyqb6FLRs.roa (hash: il+0ahEt0jHE3mPTA9QCPGv0irQio4DzrHv3lezN4EI=) 5: OCZT2CotgRCIuoB7CyLdArI0Xq4.roa (hash: 2KavfbQ9/xCmCPRw2wyEJR9Q6ABQMSBcOd2DtqJChbQ=) 6: QCfiaxU0-L0V2BF9e1C_GwYnzP4.roa (hash: VRlfNE6x9/KNibY36WnSc/VobsG0jDrCOQJvdKNN4i4=) 7: TrekbKofwJJgypIh3djYyzsCUwU.roa (hash: TCCyZiFHD9x34gvfVDyLYWKAPcQuU4dBBXrQhqnIl2k=) 8: hR_O6orQ7VIoQZRz0Ft_rQtrjmE.roa (hash: ufdueV5sW54kE98qc2NMXNaVclJV1tmEIBRjswSFBHQ=) 9: iabNn0vrewwE0x_-XGdKh6dznSE.crl (hash: 0Bcw4RQibTdwypMCjIVSolvbN+8rkIwhhNwWIiKdMSA=) 10: mmf39HAPu66pAhfk5t6hl32At34.roa (hash: v8H+MR6QM0GWin6TVlCN7PLO5Ye9iX/HYlHyOCGTDCY=) 11: poQ9sY-40mE5OkfYNESkcevxBo8.roa (hash: t3e6WnaTkGCDqI4QgZzs43WxvQ36SKjt1xL670t+gp8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 01 Feb 2025 09:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:bb:97:22:07:7d:d1:5c:e1:ff:a9:7d:67:9b:75:a3:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21 Validity Not Before: Jan 31 09:00:31 2025 GMT Not After : Feb 1 09:00:31 2025 GMT Subject: CN=64f99b30d977624918e10f45bf80487743f0f982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e4:21:c3:81:b4:71:79:82:17:16:78:25:71: 68:66:a8:ee:d5:89:2a:bc:0b:86:9d:39:94:fc:e1: 9d:8c:bc:3f:2a:bc:d0:25:2f:2b:9a:98:3e:7a:df: 02:8d:20:6c:0f:2c:57:6f:64:e4:c3:29:33:3a:d8: 60:af:7c:02:0f:4e:0a:14:fb:d6:b7:68:94:9e:77: af:45:e2:98:4b:e5:50:6e:ef:ec:5a:2f:65:f8:d9: db:44:7c:48:ba:e2:9e:26:fe:60:06:e4:f9:8f:4d: 60:58:b9:59:0f:43:20:b1:5f:a8:64:82:a7:ec:84: 21:08:70:e8:44:2a:ec:a8:bc:55:54:bd:5d:37:e8: 54:70:8e:2f:6b:3d:40:1b:ff:de:13:05:ea:b2:c4: 2c:75:2d:15:eb:2a:53:9a:0c:01:9f:69:15:05:a8: 08:a8:85:97:d2:35:b4:a1:12:82:f1:c1:98:7e:4e: 79:1e:90:ee:cd:57:c0:2f:fd:1c:2a:f2:f0:86:71: e8:c2:54:fd:6f:59:cc:05:4b:eb:0b:b5:57:3a:25: 2e:d5:da:f2:f1:71:9f:4b:dc:6e:44:e0:e0:e1:9e: 9c:e8:a3:3d:9c:eb:00:4b:83:74:90:42:89:a9:f5: 42:68:3c:34:ab:26:23:7f:4b:c4:cc:b3:a8:b7:60: ad:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:F9:9B:30:D9:77:62:49:18:E1:0F:45:BF:80:48:77:43:F0:F9:82 X509v3 Authority Key Identifier: keyid:89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:6b:3c:19:e0:fe:ce:9c:f0:76:9c:93:13:ba:69:fb:d7:b4: d0:29:db:ff:a2:10:7e:74:cd:21:a0:af:6f:8b:06:36:fd:6a: 4a:25:c9:0b:6b:92:83:52:0d:96:08:a3:42:db:dc:fb:dc:7d: 5f:a3:0b:a4:00:29:16:fe:f2:eb:0b:01:21:e1:7f:76:ee:a5: 29:04:e6:69:ee:48:c0:df:f8:fa:07:3f:4f:30:c2:ed:3d:df: f1:8d:e1:69:a1:f2:e6:b4:dc:9b:58:bc:94:ec:2a:47:d1:c7: c6:4f:fe:8a:d2:4f:da:df:fc:af:a9:5a:17:e5:5b:f0:3c:d1: a5:53:2e:ae:ed:2d:81:35:90:c9:fc:22:ce:19:48:e3:c3:52: d9:c8:e3:39:4f:b4:db:34:41:c7:8f:c0:07:43:76:6e:bc:eb: f6:d0:26:10:95:03:32:bd:34:d0:d6:22:d8:10:bb:57:36:80: 2c:79:ba:42:14:64:6b:7b:85:c6:a4:4a:a5:62:df:24:e6:8b: d3:01:26:03:e3:df:13:80:7a:cb:7d:bb:e4:11:95:1f:3b:8e: f9:8d:e3:89:eb:08:89:1a:06:6a:cb:dd:50:84:68:0d:ab:ef: c8:c2:68:57:c6:74:53:5d:7d:84:9f:85:34:7d:db:c6:af:42: 1e:7b:c4:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZS7lyIHfdFc4f+pfWebdaPlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YTZjZDlmNGJlYjdiMGMwNGQzMWZmZTVjNjc0YTg3YTc3 MzlkMjEwHhcNMjUwMTMxMDkwMDMxWhcNMjUwMjAxMDkwMDMxWjAzMTEwLwYDVQQD Eyg2NGY5OWIzMGQ5Nzc2MjQ5MThlMTBmNDViZjgwNDg3NzQzZjBmOTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOQhw4G0cXmCFxZ4JXFoZqju1Ykq vAuGnTmU/OGdjLw/KrzQJS8rmpg+et8CjSBsDyxXb2TkwykzOthgr3wCD04KFPvW t2iUnnevReKYS+VQbu/sWi9l+NnbRHxIuuKeJv5gBuT5j01gWLlZD0MgsV+oZIKn 7IQhCHDoRCrsqLxVVL1dN+hUcI4vaz1AG//eEwXqssQsdS0V6ypTmgwBn2kVBagI qIWX0jW0oRKC8cGYfk55HpDuzVfAL/0cKvLwhnHowlT9b1nMBUvrC7VXOiUu1dry 8XGfS9xuRODg4Z6c6KM9nOsAS4N0kEKJqfVCaDw0qyYjf0vEzLOot2Ct2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGT5mzDZd2JJGOEPRb+ASHdD8PmCMB8GA1UdIwQY MBaAFImmzZ9L63sMBNMf/lxnSoenc50hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85OWE0Y2MtNDcyMC00YTY0LWFhMDYt MWY5MjQ0OTVmY2RkLzEvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni85OWE0Y2MtNDcyMC00YTY0LWFhMDYtMWY5MjQ0OTVmY2Rk LzEvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJWs8GeD+ zpzwdpyTE7pp+9e00Cnb/6IQfnTNIaCvb4sGNv1qSiXJC2uSg1INlgijQtvc+9x9 X6MLpAApFv7y6wsBIeF/du6lKQTmae5IwN/4+gc/TzDC7T3f8Y3haaHy5rTcm1i8 lOwqR9HHxk/+itJP2t/8r6laF+Vb8DzRpVMuru0tgTWQyfwizhlI48NS2cjjOU+0 2zRBx4/AB0N2brzr9tAmEJUDMr000NYi2BC7VzaALHm6QhRka3uFxqRKpWLfJOaL 0wEmA+PfE4B6y3275BGVHzuO+Y3jiesIiRoGasvdUIRoDavvyMJoV8Z0U119hJ+F NH3bxq9CHnvEZw== -----END CERTIFICATE-----Generated at Fri Jan 31 15:29:40 2025 by rpki-client on console-fra.rpki-client.org