$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft File: 1Ion9EsQQExS9v_E4I3IK_i13uQ.mft (raw, json) Hash identifier: 3qUEUUTiPio9Wg4Bu7fdM8rq/JquKgVwtE2U4gqr0WE= Subject key identifier: CD:5D:ED:86:69:18:2B:4A:AB:E0:BF:65:8A:14:85:F3:1B:DC:0A:E4 Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Certificate serial: 018F4C7E1CB785516EC59DA70CC2D8B641D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft Manifest number: 05B5 Signing time: Mon 06 May 2024 06:01:24 +0000 Manifest this update: Mon 06 May 2024 06:01:24 +0000 Manifest next update: Tue 07 May 2024 06:01:24 +0000 Files and hashes: 1: 1Ion9EsQQExS9v_E4I3IK_i13uQ.crl (hash: tlaVu0B9wSnCs3Q023+G9H/EjhwQTMWn9ajcSX5gVvU=) 2: 3uSFA8wdel-DwcgtWTYAIoeNxy0.roa (hash: KVXffjo6MvdDtooAd41cajPlpNUxOYvS2rvBHOL5+WU=) 3: 6V8ilVK5cQ_f53I5gaoYlpeZRYo.roa (hash: RqbParCtuBfdo+m9YT2h45fvHfYY8+nCqcv4DaHARrQ=) 4: GorMNFFQqixNBGwQqqGC6298ntQ.roa (hash: +Ugdz9XfRCmx+XUvQE8SNWRAJdX5BZdhbC3n3NT5njk=) 5: K7vVGRu1FugRIPmJ8B3z8E19qBU.roa (hash: m5V3nBe0qPlqrMl+yFj+xAXwLLzQS9GU9Oglwo6YORs=) 6: Oljtf5Fg2WVMn-R2DXL5lNktpPs.roa (hash: tpJVx1aC6+JO9Vj3S1WbKoU+wy8Xi1mjBfD+QyeQ5D4=) 7: RKogmcL4h-UnNxb_gubVZ6t21Mk.roa (hash: NrIOhcdXtbDLOGEhMEofSgaIcVwu4B8xq+q80XqEv7w=) 8: RO6IqTboToUUFyeSaZDvsz9gSdo.roa (hash: sQ/lIAbuwvZlfERyP3micWwKFukmX89UOSfVxwz2mC0=) 9: bZix6LYxoUSvVKqyLHF36U3-2cE.roa (hash: goAmBZEpOAOU7jg7c8mYx8L9lDGpWD8BLnNZFyjfr7U=) 10: kdML4QayhAUKSX2EMP92boC8pzY.roa (hash: WvLDMwYMfasnE9w2UJ2soCyrkVjQnK/erwVYEmH1g6c=) 11: oJP9aRVXoFLy2i2dSXudjMQgeyE.roa (hash: NIYmJYFdna9ZhYk4I3xXPQsMYGuyZ8U/wz3qjlpzxoU=) 12: utFEZrKyrx3HWoa7r7b22NmUepg.roa (hash: FV1GuTV6W9aMec10awWipVTEwdUn0T+49qxgfPo+F6E=) 13: yIwnVeCKoLe28XF4DcFyF59V9Go.roa (hash: JOsfBh1+jHGSy+MXxqzKGAh2QQBkLcJewYTnoIcrjrw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 07 May 2024 02:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:4c:7e:1c:b7:85:51:6e:c5:9d:a7:0c:c2:d8:b6:41:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Validity Not Before: May 6 06:01:24 2024 GMT Not After : May 7 06:01:24 2024 GMT Subject: CN=cd5ded8669182b4aabe0bf658a1485f31bdc0ae4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:52:a6:0e:f8:0b:1b:52:28:4a:08:96:ae:b5: 6c:55:20:52:0b:98:41:f7:37:1a:fd:21:d5:a4:5f: fe:62:77:93:80:fe:3b:ba:2b:34:93:b9:be:76:5e: 02:7d:57:85:e1:28:1b:58:68:54:fd:f7:52:bb:e0: 36:08:b9:50:a8:49:0b:5e:b5:30:82:99:d5:be:7a: 44:e1:93:52:12:d6:e6:bd:9d:58:4c:ec:3d:f5:5a: ab:55:bd:4d:ef:fd:34:4c:f1:af:1f:cd:f1:0b:5b: c0:f0:41:2e:70:45:7f:8d:1c:53:29:70:6c:cd:a7: 63:02:84:f1:9c:17:70:ce:79:a4:2b:05:8a:58:17: a7:d0:ed:4b:77:12:41:71:de:43:75:04:b3:be:f2: da:6f:ba:fc:bc:38:0b:c1:11:d4:61:df:32:19:07: bc:a8:7d:6d:e9:a4:87:e1:83:b5:a9:7d:54:af:ba: 2e:f0:7b:e4:5c:22:14:35:63:2e:40:e2:e7:40:66: cc:7f:73:ed:78:c3:e7:54:da:ce:9d:ba:32:33:70: a6:f9:0d:1a:fc:5e:50:36:4a:d0:34:f2:f2:3b:93: 81:81:ba:4f:80:3b:38:38:62:90:b7:cb:99:78:81: 5f:00:74:ff:dd:d3:ee:90:c3:ec:7a:05:73:2c:0f: 8c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:5D:ED:86:69:18:2B:4A:AB:E0:BF:65:8A:14:85:F3:1B:DC:0A:E4 X509v3 Authority Key Identifier: keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:1d:35:2b:96:2d:32:65:ad:ff:e5:bd:b4:c8:16:dc:37:fe: d6:0a:12:6a:5c:2f:dc:77:93:b8:aa:dd:72:31:75:99:08:2e: 16:bf:23:ce:a0:a6:1c:69:a3:04:09:0c:aa:f9:fe:4e:b8:31: e3:c8:1c:26:b5:8e:0a:a7:86:d6:92:51:39:23:b1:d0:88:db: 23:af:c1:a5:a5:e0:3a:fa:f0:69:78:45:91:b4:3e:1c:ab:32: 59:8b:f0:a5:04:68:ef:a7:0c:4c:11:c9:f9:ef:b8:b3:51:61: ec:0d:6d:f5:99:37:88:6a:fc:b9:bb:6a:b7:5d:58:35:d3:31: 97:93:05:b0:2c:58:62:6f:e3:c4:93:83:90:70:52:f1:d3:f6: 80:f8:56:39:44:70:e6:de:46:e8:13:24:e0:b5:40:59:4a:14: 42:8a:a3:12:50:6a:a0:49:9c:f5:ae:3f:db:61:40:9a:d2:e3: 5c:5c:fc:48:9d:66:a3:a9:90:6d:ed:8f:70:86:4b:70:5b:5c: f3:52:b3:44:13:69:72:0e:c2:aa:72:d2:08:aa:6f:4a:f0:1b: 8a:a6:0a:ca:42:a4:09:65:82:a3:fa:b0:28:50:d9:ff:9e:aa: ff:4d:68:6d:ae:72:3b:83:73:d5:ad:ae:e7:11:60:03:f3:e4: 2a:d4:5e:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY9Mfhy3hVFuxZ2nDMLYtkHSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0OGEyN2Y0NGIxMDQwNGM1MmY2ZmZjNGUwOGRjODJiZjhi NWRlZTQwHhcNMjQwNTA2MDYwMTI0WhcNMjQwNTA3MDYwMTI0WjAzMTEwLwYDVQQD EyhjZDVkZWQ4NjY5MTgyYjRhYWJlMGJmNjU4YTE0ODVmMzFiZGMwYWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVKmDvgLG1IoSgiWrrVsVSBSC5hB 9zca/SHVpF/+YneTgP47uis0k7m+dl4CfVeF4SgbWGhU/fdSu+A2CLlQqEkLXrUw gpnVvnpE4ZNSEtbmvZ1YTOw99VqrVb1N7/00TPGvH83xC1vA8EEucEV/jRxTKXBs zadjAoTxnBdwznmkKwWKWBen0O1LdxJBcd5DdQSzvvLab7r8vDgLwRHUYd8yGQe8 qH1t6aSH4YO1qX1Ur7ou8HvkXCIUNWMuQOLnQGbMf3PteMPnVNrOnboyM3Cm+Q0a /F5QNkrQNPLyO5OBgbpPgDs4OGKQt8uZeIFfAHT/3dPukMPsegVzLA+MRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM1d7YZpGCtKq+C/ZYoUhfMb3ArkMB8GA1UdIwQY MBaAFNSKJ/RLEEBMUvb/xOCNyCv4td7kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYt NTlmNTk4NGI2NGVhLzEvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYtNTlmNTk4NGI2NGVh LzEvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYh01K5Yt MmWt/+W9tMgW3Df+1goSalwv3HeTuKrdcjF1mQguFr8jzqCmHGmjBAkMqvn+Trgx 48gcJrWOCqeG1pJROSOx0IjbI6/BpaXgOvrwaXhFkbQ+HKsyWYvwpQRo76cMTBHJ +e+4s1Fh7A1t9Zk3iGr8ubtqt11YNdMxl5MFsCxYYm/jxJODkHBS8dP2gPhWOURw 5t5G6BMk4LVAWUoUQoqjElBqoEmc9a4/22FAmtLjXFz8SJ1mo6mQbe2PcIZLcFtc 81KzRBNpcg7CqnLSCKpvSvAbiqYKykKkCWWCo/qwKFDZ/56q/01oba5yO4Nz1a2u 5xFgA/PkKtReUA== -----END CERTIFICATE-----Generated at Mon May 6 10:32:51 2024 by rpki-client on console-fra.rpki-client.org