$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft File: Ben8oKhYT-scEjGQcUIwYbCP5FY.mft (raw, json) Hash identifier: sq9/uAIa+DQGhdhOyBXf6FzALTjkZkF4kgcI73SUlAc= Subject key identifier: CE:BF:93:FF:35:4C:D5:67:8A:E3:E8:7B:19:32:51:56:0E:A3:2C:3D Authority key identifier: 05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 Certificate issuer: /CN=05e9fca0a8584feb1c12319071423061b08fe456 Certificate serial: 018F1FDBE3DC2DBBADCD327AD80073FF7BA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft Manifest number: 094B Signing time: Sat 27 Apr 2024 14:00:55 +0000 Manifest this update: Sat 27 Apr 2024 14:00:55 +0000 Manifest next update: Sun 28 Apr 2024 14:00:55 +0000 Files and hashes: 1: 06MswTUUU6oaj3FVeLmKaeZ-kj0.roa (hash: KjbQvRY3/Ia5lNOozuCz+6ivDQ4uyR48+8ce+hIfANs=) 2: 0vuiRDCEB9CQ7dclgRJ8LhFv3mo.roa (hash: v9WveenLH6IxR0zvMDUz5fe89Lje3RXrxjgVL86m87A=) 3: 8894O_OWaV6vQvsmT198_EeBrtY.roa (hash: vEzq75FKdNnCXhG8I0yIF8T0My/p9rjyP25Nrcernc4=) 4: 8dfcXEnHzGik_83Ev5JzuBEcSDQ.roa (hash: sir+1t3M1WDngxHPigqCpCTJGMMgnnssi5M+ZYc0h50=) 5: 9-jvzduNcpnHeHAWOnE2TCzqUcU.roa (hash: ijUxn3JoHMjcTGzNOK3LLYBiDUILQ25/TkPZxXl7a0A=) 6: 92WYtWvhngCXyU0sYllZFMDwDpU.roa (hash: 6C03zijzv8RySmsnspAc+Q+G4B8ExOdWd2pZe7Boefk=) 7: Ben8oKhYT-scEjGQcUIwYbCP5FY.crl (hash: BlFp9GVl3m1WX59UeFIDKMwUZ3ddGizcjyGFy665ASE=) 8: HrYcht0BVh8g1XESklWhuUHFwjE.roa (hash: rOKEPaAt0QXW2Tl0nVr3dmtjEWZ4joDHsE5TahEKMHQ=) 9: ObC-IJXgzioX5wtz8AJnRsGanJ8.roa (hash: 429l9uTSu1n2GtHtxnCg451FNEjkSOVQ35BfhEpnIMI=) 10: QzoqAFyU0H8z7ZXQ1Lv-FVgNhro.roa (hash: fmu7wGYzwNNaZ54RgyUd4DigjXp+tbd8U5u2IcOi/cQ=) 11: SgnbJBHVBEdicvK3Ck3PfwmHPXo.roa (hash: 8onPhXc3/nvhXkUcTcgwCH1n4KuC3aDA1coaibuiu7M=) 12: _7nPrFl4IyEZQfV99GXbvDeXrts.roa (hash: od5U5eRca9U32VcKyhw0ZbIN4OT7yqvduJtS+RWhCas=) 13: duU8RwQjmibXdkoG3tmv8WevtMY.roa (hash: JOKvhACEcr1gombyb3LoYQ0TCcAwKchfkjPRIEBjLcg=) 14: j1ZbmJr2a3cl93pUNrNuHJVQWVA.roa (hash: Z5JM6hU55VxAZ/yCIxYHdAdqTCSmWySg9rsqtMzCRVE=) 15: ozoLlf5cJ5xYHf1Spb5IeuGAm7g.roa (hash: 6NmfTfgXK06zcd+DXqwIy1mqv9jafUfp8LH/z4S5a2Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Apr 2024 11:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:1f:db:e3:dc:2d:bb:ad:cd:32:7a:d8:00:73:ff:7b:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05e9fca0a8584feb1c12319071423061b08fe456 Validity Not Before: Apr 27 14:00:55 2024 GMT Not After : Apr 28 14:00:55 2024 GMT Subject: CN=cebf93ff354cd5678ae3e87b193251560ea32c3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:54:00:12:a7:42:61:b4:13:58:0e:e3:9c:e8: f1:1c:f8:f5:6c:d3:aa:fd:0f:28:23:ae:2b:70:c8: 0b:fc:c2:9b:e0:91:e2:47:a9:12:b7:ed:5a:0d:4c: 6c:3a:27:11:27:30:09:6d:f1:70:e8:b3:a5:ca:d4: dd:73:17:13:31:95:a3:6b:24:19:ef:c4:8c:12:5c: cb:3e:6a:16:43:37:5e:e0:20:42:de:ef:97:dc:cf: e7:d4:5f:09:49:03:b6:c9:7d:b4:16:c2:46:2c:4a: db:64:39:6d:73:2f:15:9b:9f:00:d0:f7:1b:cf:d5: 12:b1:b2:81:05:bd:22:86:94:13:16:a9:b2:02:85: 4c:2b:07:0f:7b:60:00:fd:9d:70:d6:fb:fa:0e:bd: e1:75:c3:5d:08:41:39:ca:87:9d:cc:c1:29:e6:7f: 4f:10:8a:78:95:35:0e:25:17:0b:f4:30:4a:e5:56: 9b:42:2c:1a:89:c9:f2:e4:32:70:ab:7b:7e:a4:df: cf:79:38:07:2b:5b:a9:28:50:91:7f:ce:ac:f9:dd: a8:60:63:de:e5:0a:68:74:dd:6c:9b:0f:66:af:10: a9:d0:bb:a0:3d:15:43:3b:33:ca:42:d5:a7:4c:d2: 9c:9a:cc:8f:73:08:1b:93:1a:dc:e8:d7:ce:94:85: 2a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:BF:93:FF:35:4C:D5:67:8A:E3:E8:7B:19:32:51:56:0E:A3:2C:3D X509v3 Authority Key Identifier: keyid:05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:89:d8:0e:14:6a:ef:ca:9f:ce:c0:68:6e:39:b7:b4:e4:b9: 0b:92:d8:58:f3:37:27:97:d7:f5:58:02:0e:24:58:a0:69:95: 51:54:f1:6b:c2:4d:c7:ba:21:f9:f3:02:9b:86:4a:5f:54:73: 7a:d9:60:11:9d:b7:25:93:ba:d6:ca:07:ed:08:dd:8b:ec:80: 37:9d:ec:e7:79:e6:31:39:be:b4:4a:d8:a5:00:06:f8:5f:c1: 70:3b:31:20:a1:ee:b1:77:74:2f:b4:80:f2:af:06:1b:d2:03: b8:58:3f:cb:7a:3e:9b:40:1a:84:59:57:d8:e9:86:00:8e:4c: 86:e7:7d:c8:6c:48:d6:f0:0a:51:c7:5d:07:b7:7c:a8:27:83: 33:5c:38:07:d9:90:f7:00:ed:80:7b:87:17:0f:d0:f7:ee:eb: 57:bb:6f:3b:52:db:c6:3c:a4:46:f0:93:fc:fa:92:35:24:2d: 44:fd:15:d7:9d:de:e2:6f:37:77:48:8d:e6:d2:1c:e3:78:8f: d6:da:18:91:6e:81:6b:52:c0:80:60:af:76:f0:44:e2:d0:ff: f6:40:6e:22:4d:a5:36:a8:f1:0a:13:72:6e:fb:47:11:aa:bb: 83:a1:9d:3b:62:05:15:ac:81:8b:25:d0:e2:d9:32:0d:a2:74: b4:d9:9f:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY8f2+PcLbutzTJ62ABz/3upMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZTlmY2EwYTg1ODRmZWIxYzEyMzE5MDcxNDIzMDYxYjA4 ZmU0NTYwHhcNMjQwNDI3MTQwMDU1WhcNMjQwNDI4MTQwMDU1WjAzMTEwLwYDVQQD EyhjZWJmOTNmZjM1NGNkNTY3OGFlM2U4N2IxOTMyNTE1NjBlYTMyYzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVQAEqdCYbQTWA7jnOjxHPj1bNOq /Q8oI64rcMgL/MKb4JHiR6kSt+1aDUxsOicRJzAJbfFw6LOlytTdcxcTMZWjayQZ 78SMElzLPmoWQzde4CBC3u+X3M/n1F8JSQO2yX20FsJGLErbZDltcy8Vm58A0Pcb z9USsbKBBb0ihpQTFqmyAoVMKwcPe2AA/Z1w1vv6Dr3hdcNdCEE5yoedzMEp5n9P EIp4lTUOJRcL9DBK5VabQiwaicny5DJwq3t+pN/PeTgHK1upKFCRf86s+d2oYGPe 5QpodN1smw9mrxCp0LugPRVDOzPKQtWnTNKcmsyPcwgbkxrc6NfOlIUqpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM6/k/81TNVniuPoexkyUVYOoyw9MB8GA1UdIwQY MBaAFAXp/KCoWE/rHBIxkHFCMGGwj+RWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMt ZGVlM2VkNDk3YWVlLzEvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jN2VlOWUtYjViZi00YzJkLWE5ODMtZGVlM2VkNDk3YWVl LzEvQmVuOG9LaFlULXNjRWpHUWNVSXdZYkNQNUZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA4nYDhRq 78qfzsBobjm3tOS5C5LYWPM3J5fX9VgCDiRYoGmVUVTxa8JNx7oh+fMCm4ZKX1Rz etlgEZ23JZO61soH7Qjdi+yAN53s53nmMTm+tErYpQAG+F/BcDsxIKHusXd0L7SA 8q8GG9IDuFg/y3o+m0AahFlX2OmGAI5Mhud9yGxI1vAKUcddB7d8qCeDM1w4B9mQ 9wDtgHuHFw/Q9+7rV7tvO1LbxjykRvCT/PqSNSQtRP0V153e4m83d0iN5tIc43iP 1toYkW6Ba1LAgGCvdvBE4tD/9kBuIk2lNqjxChNybvtHEaq7g6GdO2IFFayBiyXQ 4tkyDaJ0tNmfyQ== -----END CERTIFICATE-----Generated at Sat Apr 27 18:52:32 2024 by rpki-client on console-ams.rpki-client.org