$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft File: CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft (raw, json) Hash identifier: mpq3bhH6sBEotZ+SoSF0Sy61BtzCc/dh72Vn7a+PEnA= Subject key identifier: 2A:26:32:9F:8F:35:C5:C1:20:3A:2D:00:5C:46:34:72:4C:FC:66:47 Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Certificate serial: 018F46B29D9A6BF5E4AAAF2D1E72A60DA5D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft Manifest number: 1186 Signing time: Sun 05 May 2024 03:01:01 +0000 Manifest this update: Sun 05 May 2024 03:01:01 +0000 Manifest next update: Mon 06 May 2024 03:01:01 +0000 Files and hashes: 1: 37Hdxw55UaSlkCH4hw_jq3D_ask.roa (hash: 8CxvzsNYAEUNTxN6aYWO+TDoMC6NCZj90vE4nzLPjJk=) 2: Av6ADFhe3PaHcBJW6xr18DA9v6M.roa (hash: b23XAlMUkI49YIAVNpnl8tPrFM397w2EnLX6XW8f2E8=) 3: BFIAPGinLq80kciss10DZt2fwFc.roa (hash: X5EIRsWCKs5fuFNOH/+hjQ7jPxTRModZM+LB6Lwg98w=) 4: CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl (hash: 0DUELSM1iM7DIh3idVmQnn9FoPCI9Tqi1UKzTDEtOFw=) 5: FSLnbe4TJt29VL_O3oZpxa0n6AA.roa (hash: u3pFy7i04o9t3o+pao/14X2I0M8YQhckgfD4PM0GyVo=) 6: JFbRTwrN8TW_19bYxLW2yCRV4I4.roa (hash: seEdq0+Wzb8UFJRE05a8kifb/mDfrz1pG8aZKmvwW4Y=) 7: MMAgcHrQ-TGROCUvSlTTs46saLc.roa (hash: wzAa40QCYrgvluN6j8Nuk0TQrgVEs3jBPRJIFiRB5DA=) 8: MUmG_dA-aavv2uK-xKa6CJUhGHk.roa (hash: gB3RuvGfHULN6avqDd4ZJHMpP+q3GnxO/a7iNGMS9kA=) 9: VfQMGJnUPps_APgM0vmJzkrjqoc.roa (hash: MCpsScLI0I8aeLtldsOQ402lcvmoWaLrA/LtBeNyG/s=) 10: ZxyBZUunAChPzgZWGtPGnoArGrU.roa (hash: RG5dGu15PiWDLMPlxXr9ZsfVhU7f145bxO7z1DwHA+w=) 11: b4fYfIgiMl29Y4eA44p2mPzGUyQ.roa (hash: aqKNFJvxUOaQTzw/0+z0DW8DJMY+vXmlPCkP9UH3L5Q=) 12: iiRK6SjrQDzD7LRT1RkruJaueuc.roa (hash: 8FC6K78lQwGpmO0Beoh5RbQ7gdZMY1Pg+ogF2LxCPQs=) 13: y3b_Ryw3ZVWyAqwmyXJHbBI-V7E.roa (hash: ZSr/KPYqH1P2d9+YfGve2AmTcGyeAoKLHR1FhVlkEE8=) 14: yCurq0ZUIoxIShLP1KKDF9hPUYQ.roa (hash: T+89pLRXwrByR5yPoMBU33eKRrCT08RHsCMIu4iYn8c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 05 May 2024 20:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:46:b2:9d:9a:6b:f5:e4:aa:af:2d:1e:72:a6:0d:a5:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Validity Not Before: May 5 03:01:01 2024 GMT Not After : May 6 03:01:01 2024 GMT Subject: CN=2a26329f8f35c5c1203a2d005c4634724cfc6647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4b:86:d3:ea:f4:1c:41:a6:78:d0:7c:9d:58: 3f:13:9e:22:43:07:14:80:f2:63:85:94:54:56:8a: bd:41:d3:58:b0:db:b3:db:e6:f6:02:70:7b:fd:1a: a7:af:ef:2b:53:09:90:3c:ff:c7:99:b2:53:4c:2e: bc:d7:fa:c3:d2:3c:3a:bf:53:23:7c:54:c5:5b:81: 7f:1f:6a:ff:63:1f:47:0f:44:02:9d:ce:34:55:d4: cf:2d:2d:22:2d:d2:03:8c:df:5b:89:9d:d0:04:0d: a3:31:e8:5c:4c:74:6c:ea:e6:91:bc:c9:1f:41:6e: 1d:76:f9:d3:67:f5:17:21:38:c5:50:a0:13:d6:38: a9:6b:88:ab:25:e1:45:23:7b:9a:c7:21:d8:b8:73: e4:6e:d1:6b:88:f3:53:2e:f8:69:5b:ff:b5:5d:d8: 1f:b0:45:13:2f:ca:e4:43:4e:0a:b2:98:8b:41:60: 22:82:eb:58:93:e9:e0:19:31:fa:0b:b0:7e:1d:0e: 0d:9a:7f:ae:74:22:65:61:e9:58:a4:de:eb:d3:6a: 59:16:62:b5:9a:11:b2:12:3f:40:49:5e:99:e4:97: 25:a7:a7:c9:0e:89:9b:80:19:59:ce:a1:4b:52:50: 2e:1b:17:3c:63:2b:4b:eb:dd:41:ed:1a:2a:5a:94: 84:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:26:32:9F:8F:35:C5:C1:20:3A:2D:00:5C:46:34:72:4C:FC:66:47 X509v3 Authority Key Identifier: keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:96:15:87:28:ce:61:37:ee:61:f9:b6:a5:90:fc:8d:cf:ce: db:0c:5b:b5:9b:35:45:55:4a:a2:db:a3:15:04:ce:e8:70:b3: fa:67:46:10:74:6b:ca:6c:80:45:58:f8:8b:36:ec:99:67:17: 86:25:5f:26:7e:45:35:40:71:e4:f8:b4:69:24:9d:92:b9:72: d5:71:1f:b5:e3:31:9a:01:a8:b1:c4:4b:fa:53:c5:92:2e:10: b4:81:22:ba:5c:19:7c:fe:c3:c6:9c:b2:a3:85:6a:53:9d:bf: 1e:44:44:8f:b5:29:2f:f6:a3:5e:a2:66:dd:de:f2:95:a4:e6: 52:25:e6:dd:42:15:c0:6a:49:10:b7:52:4e:02:8e:5a:1c:18: ee:09:9a:11:7e:52:7d:a3:f3:a0:67:26:82:a6:80:92:72:3f: 59:85:e0:d2:ae:4a:12:fd:26:9f:36:5e:94:5d:5e:7f:bf:b1: 94:4c:b9:ad:76:74:e0:ba:26:49:cb:c7:17:c4:ea:f3:89:2b: 42:22:2c:18:62:a8:24:27:b8:e1:21:00:f4:9b:33:fb:b2:f7: b9:0f:4f:7d:bc:22:0a:7f:e4:67:95:79:e2:5c:7d:cc:77:a8: a2:82:af:4f:45:1a:4f:d1:7e:fa:00:83:fe:ab:08:ed:0f:79: d4:41:94:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY9Gsp2aa/Xkqq8tHnKmDaXXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MWI3YTIyZTUxY2ZiOWNmODQyMDVlNDQ0OTk5OGFkNTVk OGYwNjUwHhcNMjQwNTA1MDMwMTAxWhcNMjQwNTA2MDMwMTAxWjAzMTEwLwYDVQQD EygyYTI2MzI5ZjhmMzVjNWMxMjAzYTJkMDA1YzQ2MzQ3MjRjZmM2NjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEuG0+r0HEGmeNB8nVg/E54iQwcU gPJjhZRUVoq9QdNYsNuz2+b2AnB7/Rqnr+8rUwmQPP/HmbJTTC681/rD0jw6v1Mj fFTFW4F/H2r/Yx9HD0QCnc40VdTPLS0iLdIDjN9biZ3QBA2jMehcTHRs6uaRvMkf QW4ddvnTZ/UXITjFUKAT1jipa4irJeFFI3uaxyHYuHPkbtFriPNTLvhpW/+1Xdgf sEUTL8rkQ04KspiLQWAigutYk+ngGTH6C7B+HQ4Nmn+udCJlYelYpN7r02pZFmK1 mhGyEj9ASV6Z5Jclp6fJDombgBlZzqFLUlAuGxc8YytL691B7RoqWpSENQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFComMp+PNcXBIDotAFxGNHJM/GZHMB8GA1UdIwQY MBaAFAgbeiLlHPuc+EIF5ESZmK1V2PBlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYt MDM2NzI2OGZmODcxLzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYtMDM2NzI2OGZmODcx LzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApJYVhyjO YTfuYfm2pZD8jc/O2wxbtZs1RVVKotujFQTO6HCz+mdGEHRrymyARVj4izbsmWcX hiVfJn5FNUBx5Pi0aSSdkrly1XEfteMxmgGoscRL+lPFki4QtIEiulwZfP7Dxpyy o4VqU52/HkREj7UpL/ajXqJm3d7ylaTmUiXm3UIVwGpJELdSTgKOWhwY7gmaEX5S faPzoGcmgqaAknI/WYXg0q5KEv0mnzZelF1ef7+xlEy5rXZ04LomScvHF8Tq84kr QiIsGGKoJCe44SEA9Jsz+7L3uQ9PfbwiCn/kZ5V54lx9zHeoooKvT0UaT9F++gCD /qsI7Q951EGUPg== -----END CERTIFICATE-----Generated at Sun May 5 03:53:24 2024 by rpki-client on console-fra.rpki-client.org