$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft File: ayM9dVCLToXMz0Q0mny3AxmNHSY.mft (raw, json) Hash identifier: ZWuY5T3Ioidq6s/hscgmDx2GTW9MeeN5UpGbx8BBk+I= Subject key identifier: 56:5C:A6:C1:A7:B1:F3:EC:18:92:A3:C6:12:6E:1A:5D:07:B5:BA:4C Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26 Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26 Certificate serial: 018F6ED36F878A43619654FDBE53C95D5C46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft Manifest number: 0EBC Signing time: Sun 12 May 2024 22:01:41 +0000 Manifest this update: Sun 12 May 2024 22:01:41 +0000 Manifest next update: Mon 13 May 2024 22:01:41 +0000 Files and hashes: 1: 1FKMz9AvG63mAuIvkE7qpDnegiU.roa (hash: vWe6ifWzwyUsWhZf6g0aiRsEpN97G7LCHVTXXP4Sf/w=) 2: 5UMQxB5mFjZB-bX4FGDfQ3GI_dQ.roa (hash: 2jaCAcB0NGDYhhcJ8zcDGol8EUJjXVTV0OVuWy7odBg=) 3: 5r7l3VaqCVCpne0PpvUkNz1X1io.roa (hash: GOjX2xlA3XGjBtBbx9r0pX6VKdH9kX21EQEw2DvwZxs=) 4: 82AaFMBhg37Hc4Xk81JKohC1ONo.roa (hash: 71kWXVQuX7SI2uHnRJkSo4Yd47McmR5VwcwqR7m4lrw=) 5: GdcGiC9cGsttiXPLTJXRuRsafS4.roa (hash: jX6hL3eYspX3B13+r321DXWWdI4PARGGEqjma/tuO3s=) 6: H_M3c8k3BTOHZ2xJjxadP77wVFM.roa (hash: NUMShWGiVB726RBW3qC/63RkLg4jOIESe8fZYNp4DdQ=) 7: If5FirTL8H28OxAlrzXBFk4tKiE.roa (hash: Batk9I69OyZQjD+KHf54TQpS1PhFs4S2OMBBcTdyZNk=) 8: T1POvqxZjrhkctwxQC1bSBJl6-k.roa (hash: FLWQ12R2565JfGUBAThHtcRd1IN3C3HGuE4ejo223Wg=) 9: _CBI-xUph-EV2AVx8j6qNT6F6cY.roa (hash: eGGoAm6FxxAsHXaz1GYQBlqYvUDtIyHKVdt98DpdZXY=) 10: ayM9dVCLToXMz0Q0mny3AxmNHSY.crl (hash: zfAYAtb9jKcTStFnzLMX33P8uJjHE+R2zr60wRh1QFs=) 11: c-qz21WLjIgnp6jMw2CwZxJKMxM.roa (hash: +p5fsFATD06jL/hc+bHYOLiqBbdUOYXnsU50LImMvSw=) 12: cyI0rvF-ExGYocN9q1HkP5hwucY.roa (hash: 2yMXYpJBZHeHXcGEq0gBJa2LVNW/Ifup+xGmwNDtbpI=) 13: gvIKzzI3bwPERJtQe-QqUNiLRlo.roa (hash: 5lxo9uPLb7BD86aeakgfPVc/QTT8eSb62q07S9VDg9I=) 14: l7GDPKdB66TOBAktW0viKbLqoJc.roa (hash: sCr0Hiy5ctuXtTb9BSdPPbjRTY7O1difObgdBh3wQ1I=) 15: naLWqWY7adsifnPH9ksCmCZZ42o.roa (hash: mu5jGFfpCy3ESJ2i88ZqXPwC2ODMNcyIdd75MhXQ2/o=) 16: ueJBktQ4v8jP-pfC1XtwzhvXvww.roa (hash: OTz16uXrUneqQ0QZp8v+Glwx6BeXIVxySFFpuBLqSSg=) 17: w2qY6wXryLRJven5jwVHtiFUem8.roa (hash: CVAqLldpWlYK8WqQxUzhDKZUS55ewiAyi6+zFPElId0=) 18: wkGYdhL0DXJxtvUqL6W8lqF5V50.roa (hash: WYrPMT9s0Z7UyIEvob11ZzDXKDbXZ+UV04Rz6Op6VAU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 13 May 2024 19:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:6e:d3:6f:87:8a:43:61:96:54:fd:be:53:c9:5d:5c:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26 Validity Not Before: May 12 22:01:41 2024 GMT Not After : May 13 22:01:41 2024 GMT Subject: CN=565ca6c1a7b1f3ec1892a3c6126e1a5d07b5ba4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:08:d8:be:7b:f0:21:44:51:61:7b:e3:f6:a1: 6d:29:9a:5d:e2:9c:be:2d:48:0d:e6:09:31:d2:c4: 1f:73:ac:ef:f9:75:b5:3f:63:84:b2:27:72:be:d3: 2b:36:55:bd:fe:7a:2a:77:9f:7f:8e:97:8b:d9:c2: 54:9a:8e:46:05:a8:85:22:cb:ae:ff:ba:22:fe:6b: c8:dc:10:82:1e:52:7a:10:24:01:78:a5:98:d7:0c: 7d:4c:40:00:55:cc:3a:32:9e:c3:63:7c:86:65:fd: 4a:ad:24:ee:4e:eb:a2:e4:f8:d3:79:be:40:f1:13: ea:23:14:33:16:eb:cc:64:e9:3b:d7:40:fa:0d:42: 2c:88:80:ee:b5:98:d2:56:df:19:be:02:65:23:02: cf:24:fe:ab:56:b6:9c:3c:b6:44:21:1e:07:b6:8d: f5:bc:b1:d4:39:53:53:e7:6d:b0:92:79:3f:1c:cf: 83:2e:db:20:7d:6f:e0:30:5d:33:4e:89:e2:fa:d0: 9b:3f:02:8e:b9:58:d5:a2:11:34:04:ac:4b:e6:a8: 33:24:b8:df:b3:a4:fa:bc:9c:62:b6:cb:62:84:31: e5:43:9c:f6:99:8c:89:85:f0:a2:52:99:43:6e:ea: 54:4c:89:d0:74:f3:65:f2:87:1e:0e:e6:bd:e0:c6: c7:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:5C:A6:C1:A7:B1:F3:EC:18:92:A3:C6:12:6E:1A:5D:07:B5:BA:4C X509v3 Authority Key Identifier: keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:90:db:2b:0e:1d:2b:0f:32:d0:7a:8a:90:11:51:60:8e:24: b2:ef:fb:cf:7e:7b:e7:72:87:cc:81:eb:f3:fc:de:45:e2:3e: be:3e:76:3c:8d:81:58:82:0b:1b:df:09:fa:99:5c:b2:e4:a6: ba:cb:53:62:b4:84:47:aa:20:10:0d:6c:4e:93:f5:37:71:dd: 6f:5a:61:4c:b1:ce:56:1d:7a:b0:c2:10:63:d5:57:ad:3c:24: 5a:61:20:66:8c:f4:60:b5:70:c6:a0:71:42:3e:94:a9:34:08: 22:97:f1:81:e2:40:14:69:f8:79:32:c6:52:bb:09:5c:64:76: b4:1c:e7:08:9a:0e:78:10:34:19:50:2e:eb:98:66:60:27:d1: fc:63:eb:0f:45:d5:44:48:cd:74:e5:64:f0:9b:a0:20:f7:25: 76:f3:16:30:bc:03:a3:d9:95:e6:f3:41:1a:14:ef:fc:84:91: 6e:c9:71:c3:0b:14:99:01:b6:de:9f:e7:6c:e7:02:9d:1d:6b: 22:97:e0:66:96:db:32:11:b1:12:3f:6a:e5:60:72:1a:54:49: 44:90:05:cd:b7:f4:f0:1f:0a:83:48:7e:63:4e:3f:11:fe:0a: 61:d1:e1:e5:4f:8c:ea:39:b7:ec:9b:2b:98:a8:40:24:a6:7d: d1:0e:1a:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY9u02+HikNhllT9vlPJXVxGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMjMzZDc1NTA4YjRlODVjY2NmNDQzNDlhN2NiNzAzMTk4 ZDFkMjYwHhcNMjQwNTEyMjIwMTQxWhcNMjQwNTEzMjIwMTQxWjAzMTEwLwYDVQQD Eyg1NjVjYTZjMWE3YjFmM2VjMTg5MmEzYzYxMjZlMWE1ZDA3YjViYTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgjYvnvwIURRYXvj9qFtKZpd4py+ LUgN5gkx0sQfc6zv+XW1P2OEsidyvtMrNlW9/noqd59/jpeL2cJUmo5GBaiFIsuu /7oi/mvI3BCCHlJ6ECQBeKWY1wx9TEAAVcw6Mp7DY3yGZf1KrSTuTuui5PjTeb5A 8RPqIxQzFuvMZOk710D6DUIsiIDutZjSVt8ZvgJlIwLPJP6rVracPLZEIR4Hto31 vLHUOVNT522wknk/HM+DLtsgfW/gMF0zToni+tCbPwKOuVjVohE0BKxL5qgzJLjf s6T6vJxitstihDHlQ5z2mYyJhfCiUplDbupUTInQdPNl8oceDua94MbHowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFZcpsGnsfPsGJKjxhJuGl0HtbpMMB8GA1UdIwQY MBaAFGsjPXVQi06FzM9ENJp8twMZjR0mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEt ZmE5Y2I1MWNkMGYxLzEvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEtZmE5Y2I1MWNkMGYx LzEvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGpDbKw4d Kw8y0HqKkBFRYI4ksu/7z35753KHzIHr8/zeReI+vj52PI2BWIILG98J+plcsuSm ustTYrSER6ogEA1sTpP1N3Hdb1phTLHOVh16sMIQY9VXrTwkWmEgZoz0YLVwxqBx Qj6UqTQIIpfxgeJAFGn4eTLGUrsJXGR2tBznCJoOeBA0GVAu65hmYCfR/GPrD0XV REjNdOVk8JugIPcldvMWMLwDo9mV5vNBGhTv/ISRbslxwwsUmQG23p/nbOcCnR1r IpfgZpbbMhGxEj9q5WByGlRJRJAFzbf08B8Kg0h+Y04/Ef4KYdHh5U+M6jm37Jsr mKhAJKZ90Q4aGQ== -----END CERTIFICATE-----Generated at Sun May 12 22:51:31 2024 by rpki-client on console-fra.rpki-client.org