$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft File: IvLC57wdpU2RnKW1lB03iJKyzLI.mft (raw, json) Hash identifier: mPB2xhL8UPTlD0MPyULJ3ua2jnu3tGKjr31KKNiicwc= Subject key identifier: 04:94:62:16:0E:AB:84:EE:2A:C9:54:B2:3F:AF:81:65:40:33:61:E2 Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2 Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2 Certificate serial: 018F34071935DC31FE0FA9E96EB3E1476FB1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft Manifest number: 0CAF Signing time: Wed 01 May 2024 12:00:31 +0000 Manifest this update: Wed 01 May 2024 12:00:31 +0000 Manifest next update: Thu 02 May 2024 12:00:31 +0000 Files and hashes: 1: 6DIruzDtNLKY1KvbdU4FS7XhypI.roa (hash: 53jiJ/d4P/JJYdJgNQ8EuImodhF9BPPsybfL9g9nxqk=) 2: CRav-kAnaTCSWjonIP6cOo_clU4.roa (hash: Od07L82YLZboYvPIM3RWhbqLX4NNecCludMb4S+wlGM=) 3: Cmjqxtw5xzvhyUNdHCiwzU8qpu8.roa (hash: lw4pDy0L4CEYwanQ2NA5xRRYslDOBeS5Utei4Pj3ddU=) 4: IvLC57wdpU2RnKW1lB03iJKyzLI.crl (hash: +Czg6xLDwKavolHPodFOhgpl/kAnG6GmoRGI5kPL6Kg=) 5: OkWsPpCY9cmp0n7on3mOCdxKZeE.roa (hash: AKVMJaAbXj4vjL/+WnwKx6S5l/ISR1qmL0qXph50h7Y=) 6: QILwz7PCysFKM0haafF1QoFZCb4.roa (hash: Qk1oPbRRu/Vb6AcRWacIaivj+lAETgaPx5zZDbkrTbw=) 7: WAXfaCwq8gy5fzYsBVRDCJvR0uM.roa (hash: B8nMb7XC6UZowviWps22dmdyOLfKfGCFUe4dR5/X0+4=) 8: ZqB00BJh1bL0az3KA6LZS1ukKYY.roa (hash: oQve/lHQi97wxeVWOHPyWJe+6JbnB6sE1Yb/2lWCU6I=) 9: auhedlG9t5zzptcI9wpQtDWJ-oY.roa (hash: yFhLuVIRM55NBCT6jkxoB5RbQLO1vwt3bztwB5VGXtM=) 10: c30csS6JK4s9MoQXsamjG5S5mQY.roa (hash: lVQXJ67RyqpidXoEAZ7j7+rNp3Q3lOFHrXyCzDWq548=) 11: e9FiSR-si3ZZIIh7m3ucedBhmmU.roa (hash: FAPlBpcRcLl1kbfthVbKlhuFOhWyKbXM9jmK9JQeeh8=) 12: g3VdNhHZ_8v9WHRAEp_3HLnc4TU.roa (hash: oafbuu+bvUp2ja6vnLne1a3NVyN490D94jiPo+s07TU=) 13: hCmnb5a1bG-SSw-lxAZazyqNkVQ.roa (hash: ALvRbQisUAukYzcwf9cgpHPgQuw64zhen3GsUjne7ZM=) 14: hxUYqrWVKAOMWD_6pCrGH0A3jVk.roa (hash: O63z7HBnWoql9o6l8WaWVYwbugnAyu2kF8egfDAIAIM=) 15: kx-3IA9C3XQGTgFLPlmfhsVZLWY.roa (hash: OAml4cNOlSN+Qo5w+aMoIDMWfUkNtSzj/qG5F/RWi2E=) 16: ofccGEsA-SEdFvLGfPfjeIfP77Q.roa (hash: BGXKRA39vq6rFiW7IhKvitmTS0tEmkbu9EDcRH2rAnc=) 17: pBsWpQD-vmbUxsqTN30uJT-COcA.roa (hash: 3yn06mdg3AqgVAXJh+5Yxl3OKZwzDmymp3kyGrQJp3k=) 18: z8Ug_SbeObB3ODb0f9ErXY44QAg.roa (hash: xoHgZTS2AVGE4gKwu1+lP1Qtl7ZhhaCE5iIcibvj8tY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 02 May 2024 12:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:34:07:19:35:dc:31:fe:0f:a9:e9:6e:b3:e1:47:6f:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2 Validity Not Before: May 1 12:00:31 2024 GMT Not After : May 2 12:00:31 2024 GMT Subject: CN=049462160eab84ee2ac954b23faf8165403361e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:00:2e:87:8b:7c:c3:84:28:6f:e5:3f:e2:bf: f5:67:23:4e:be:27:63:63:98:40:5a:1c:3a:6b:39: 25:05:a5:4b:a7:9b:02:d9:43:3c:96:10:b5:32:1d: 18:4b:8c:46:ec:3e:b6:22:de:86:2f:e2:a5:85:02: e2:81:75:d7:5c:e1:9a:8b:ab:21:55:11:f9:d0:eb: 73:f9:80:c4:f1:d5:11:40:98:6d:fe:0f:5a:96:a9: 2b:27:74:d9:ec:86:89:d4:0e:c7:89:28:51:1b:ef: b9:65:7e:7a:33:25:cb:93:ae:f3:ee:f1:d6:15:08: 17:86:ba:d3:4d:12:d8:78:6b:be:7c:8f:04:d9:a7: df:ae:bf:cc:8d:eb:8b:b0:18:73:26:a6:14:72:e7: cd:5f:2a:b3:34:81:50:21:ef:70:09:3d:39:33:d6: 58:77:7e:3e:bf:73:0c:0c:b6:48:cc:12:fa:27:2d: 04:07:86:f4:f5:da:0e:4f:86:59:c6:ed:5c:21:4a: 0b:4c:98:5c:44:5d:a2:09:d3:26:28:5a:5e:44:34: e2:2b:8b:08:57:e6:dd:19:3f:4e:1d:a6:77:c6:f0: 4d:56:04:25:2b:02:f6:8e:0b:9b:23:8a:15:95:b0: e1:64:86:84:a0:9a:2e:14:48:6d:bc:36:eb:d8:04: e0:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:94:62:16:0E:AB:84:EE:2A:C9:54:B2:3F:AF:81:65:40:33:61:E2 X509v3 Authority Key Identifier: keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:32:13:8e:ae:c1:98:50:66:77:04:cd:b7:5e:41:eb:57:30: 76:49:64:3b:24:f9:1f:85:d0:34:20:db:f5:ea:e6:87:2e:3f: bb:2f:60:94:71:18:96:b8:83:99:a8:e0:9e:8b:98:d2:37:40: 49:51:12:94:d8:4e:1e:82:8a:f6:08:61:f7:82:aa:03:bc:4a: 9f:45:68:32:49:53:25:61:37:b0:26:85:e9:2f:b6:30:7f:de: f6:62:d4:be:76:ac:f7:5f:45:6f:81:e9:c7:44:88:79:14:7f: ae:a0:49:c2:59:51:f9:5e:1d:d5:fa:47:1e:dc:79:1c:f7:94: cf:86:53:55:71:e9:12:16:1c:c9:3b:86:0d:88:84:ff:f4:1e: c1:c9:b8:46:a7:6b:2d:5c:ee:d0:09:3e:3b:2b:11:5e:a6:66: 3d:b0:5c:f3:d6:f0:39:8b:79:13:9f:ef:a2:07:b2:81:97:49: 3d:f9:eb:31:aa:a0:86:1a:e3:01:d8:a1:03:3b:fb:50:89:72: 2a:d7:0b:8b:ec:63:1a:3d:f5:39:96:ba:cb:91:b0:16:c1:4a: 6e:05:05:f2:66:f8:09:ba:4a:4f:b1:d7:35:7e:f1:b2:c9:8b: 0a:9a:53:fe:f0:f0:8c:bd:98:ae:75:0c:e6:2c:d3:c1:9c:3e: e4:9f:5f:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY80Bxk13DH+D6npbrPhR2+xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZjJjMmU3YmMxZGE1NGQ5MTljYTViNTk0MWQzNzg4OTJi MmNjYjIwHhcNMjQwNTAxMTIwMDMxWhcNMjQwNTAyMTIwMDMxWjAzMTEwLwYDVQQD EygwNDk0NjIxNjBlYWI4NGVlMmFjOTU0YjIzZmFmODE2NTQwMzM2MWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gAuh4t8w4Qob+U/4r/1ZyNOvidj Y5hAWhw6azklBaVLp5sC2UM8lhC1Mh0YS4xG7D62It6GL+KlhQLigXXXXOGai6sh VRH50Otz+YDE8dURQJht/g9alqkrJ3TZ7IaJ1A7HiShRG++5ZX56MyXLk67z7vHW FQgXhrrTTRLYeGu+fI8E2affrr/MjeuLsBhzJqYUcufNXyqzNIFQIe9wCT05M9ZY d34+v3MMDLZIzBL6Jy0EB4b09doOT4ZZxu1cIUoLTJhcRF2iCdMmKFpeRDTiK4sI V+bdGT9OHaZ3xvBNVgQlKwL2jgubI4oVlbDhZIaEoJouFEhtvDbr2ATg+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFASUYhYOq4TuKslUsj+vgWVAM2HiMB8GA1UdIwQY MBaAFCLywue8HaVNkZyltZQdN4iSssyyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi82MDI1MzAtNmQyMi00NmYxLThlMDUt MDJkZWY2ZTg0YzkxLzEvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi82MDI1MzAtNmQyMi00NmYxLThlMDUtMDJkZWY2ZTg0Yzkx LzEvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADjITjq7B mFBmdwTNt15B61cwdklkOyT5H4XQNCDb9ermhy4/uy9glHEYlriDmajgnouY0jdA SVESlNhOHoKK9ghh94KqA7xKn0VoMklTJWE3sCaF6S+2MH/e9mLUvnas919Fb4Hp x0SIeRR/rqBJwllR+V4d1fpHHtx5HPeUz4ZTVXHpEhYcyTuGDYiE//Qewcm4Rqdr LVzu0Ak+OysRXqZmPbBc89bwOYt5E5/vogeygZdJPfnrMaqghhrjAdihAzv7UIly KtcLi+xjGj31OZa6y5GwFsFKbgUF8mb4CbpKT7HXNX7xssmLCppT/vDwjL2YrnUM 5izTwZw+5J9fCQ== -----END CERTIFICATE-----Generated at Wed May 1 21:17:43 2024 by rpki-client on console-ams.rpki-client.org