$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft File: kiIItHtqhk2dH_M-BqqB0TgZp04.mft (raw, json) Hash identifier: bJyZ+/YQWeD+5z6s88NbNhCKNRmrmwkZfYIvEg8RSwk= Subject key identifier: 6D:EF:01:4C:44:08:EE:2A:EA:57:F0:93:BB:FF:56:94:5D:AE:87:8C Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e Certificate serial: 018F885B56D5174025F596ADF889B13681DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft Manifest number: 11B0 Signing time: Fri 17 May 2024 21:00:38 +0000 Manifest this update: Fri 17 May 2024 21:00:38 +0000 Manifest next update: Sat 18 May 2024 21:00:38 +0000 Files and hashes: 1: 0Pz098o1dS9yk2YskdZRGAl_cJI.roa (hash: N6lMXlPqoen0FCYPz+HwWNeR6ovFG/5LJoekUKmc9ok=) 2: G0obgMV9-maIltZG_cb3UNBqvQE.roa (hash: nC743wZ9xrds+ez5J8t1bx96oI9bZUc3ci4roQzIDyo=) 3: HLW2FdYZ36s-5iireh5nBU6bk9U.roa (hash: qNA61ANyNXKYA5Y8eNxhXI5+LS7Qno+WCVIYsX6s+WI=) 4: HmKMu4EPt440QOirukTCdIEPNz4.roa (hash: 02ZXzKy/gLBMbTNUQnbBeuWG+8AzzTFJ4W1JAHkP8dE=) 5: M3hHUYdfm00J5Ktwfa_KUMhaiMg.roa (hash: EsVNsCUSWmqHQZPIM7WKfa/bL7Smd7fYzbl+X5ToUyk=) 6: SKKdcT2DKbR9sMb9jljfbISQb9Y.roa (hash: yCxr+6k/q9BnMUzwhVY48xlSgYzzIodnpWspX6Pk3C4=) 7: Wh3e5wNmHns1QYwyzP2IY-rZUAY.roa (hash: oOlAn/+MMgC+Wi3nXNLlX+uC+V5LxHWROIUA5cM2D5k=) 8: Wz89oNRqvbs3H_evuBiQAoGH7t4.roa (hash: q3yPzxm322hH8Aq9w/9+ZZAK+dIbJwsB3Sd+XQ9J+ww=) 9: bAdJeDELcX7iZSe1Lt3b2OBmBEs.roa (hash: mtheu+1p88m2luoqeL8YbYjbUvb0A7SZ1yT7yfINW+g=) 10: ewaVCFvaAAsUba9Oexqnc-aZwuY.roa (hash: x4KprTKaONjJZu8plHS0FoFvNOL2bSTkg1HRRcZabIE=) 11: kgVbx6Patx1ikgdz2razbP9xDME.roa (hash: 4PK9/dC293Ny1ugslmAK+orWxiGre+5xA1pLvULqlLc=) 12: kiIItHtqhk2dH_M-BqqB0TgZp04.crl (hash: alBdkSXvlXr/1cOfzZqn3UNol2j8WNBNETf4unfTdzo=) 13: nhDoI7zn4PTIoRcRYe-3R-rsbvM.roa (hash: sFcCnboN9q0vVfAsT7BS0XpGzo5vppLF1tUfs/IOA7I=) 14: pVxf1oTH_1Jx7RliJgQw2hnnzRo.roa (hash: LmE7IvJbGTBQkKQxikkVyOLi/k3Ll41v/GiWE0GYECk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 May 2024 17:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:88:5b:56:d5:17:40:25:f5:96:ad:f8:89:b1:36:81:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e Validity Not Before: May 17 21:00:38 2024 GMT Not After : May 18 21:00:38 2024 GMT Subject: CN=6def014c4408ee2aea57f093bbff56945dae878c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c2:91:32:d9:c1:55:0d:5a:04:56:ad:f7:d0: 4a:1d:24:45:09:11:14:21:aa:01:49:af:b5:22:23: 40:c6:98:a4:6f:61:4c:60:2f:2b:a6:6d:52:ea:15: 5f:b3:aa:de:cc:65:66:9f:5d:c5:7c:26:2b:2c:ca: 18:53:ef:8a:e5:83:d9:f9:3f:34:a3:bb:6e:28:22: a5:51:93:2e:89:da:d1:f2:70:41:61:e6:ad:f4:25: 1b:b3:ee:10:98:d1:85:b4:b8:79:91:77:da:ad:1f: c4:6c:43:40:dc:e7:18:fc:f5:70:a3:5c:ae:52:0b: f6:6b:b2:a6:a9:b2:16:19:a3:cd:3d:70:37:42:49: f1:e7:f5:cd:8b:02:4d:06:bb:db:4b:5d:54:c1:22: 1f:93:48:55:6f:25:8c:c0:06:50:7c:a0:e4:7a:a9: f6:f4:2d:3e:c9:7a:73:e7:46:67:6a:f2:be:29:7d: c1:d7:70:c0:f4:7b:b0:b9:63:92:39:88:f0:3c:65: 01:40:6c:cc:91:5d:fb:9d:4e:f3:2c:59:68:91:9f: bf:d2:f1:05:f1:00:48:fc:48:2b:40:45:d4:98:cf: 98:f5:64:45:96:00:1d:18:00:79:dc:66:fe:27:20: 36:82:34:77:10:cf:4a:f0:dd:88:c5:1a:2e:7f:38: ec:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:EF:01:4C:44:08:EE:2A:EA:57:F0:93:BB:FF:56:94:5D:AE:87:8C X509v3 Authority Key Identifier: keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:cd:33:be:6c:8a:63:c4:d9:9f:02:b1:fb:3c:c2:d5:86:dc: bc:a2:4b:e4:b9:88:ec:78:a1:a5:46:25:04:af:f1:85:e9:0e: ed:4e:d1:2c:6b:96:35:fa:b5:02:97:e2:90:72:06:66:d5:e9: a8:f6:11:31:36:e0:aa:aa:73:db:60:58:13:75:9f:57:71:36: 11:d8:28:12:d0:b7:d8:d5:b0:1d:a0:78:81:53:3b:60:b4:60: 7b:01:43:2a:24:dd:b5:f8:3b:d9:34:7d:4f:55:16:44:f5:81: 89:2b:fc:84:cf:34:b8:02:85:fb:60:62:82:af:f7:88:dd:42: 9a:af:71:ca:05:60:5a:6c:43:44:c8:fb:eb:a7:f3:a1:63:20: a9:03:d4:56:2c:56:15:b5:e5:c8:68:57:d5:e5:0b:c9:00:eb: 63:1e:da:34:a5:fb:3e:43:0e:5a:03:4e:04:aa:fc:a1:34:97: 94:09:93:d6:1d:9f:75:ee:67:e0:06:5b:46:ff:a6:f3:1c:8d: b3:db:c9:ac:6e:64:78:da:54:7f:79:a6:d7:1b:77:17:41:fb: 09:8f:d0:fd:6c:9b:7e:3f:5a:71:7d:f2:f0:2b:89:6f:4c:c4: 35:55:1b:f3:e6:b2:03:00:4f:d2:53:d9:90:0c:ad:1a:ae:bd: 4d:9d:d4:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY+IW1bVF0Al9Zat+ImxNoHdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMjIwOGI0N2I2YTg2NGQ5ZDFmZjMzZTA2YWE4MWQxMzgx OWE3NGUwHhcNMjQwNTE3MjEwMDM4WhcNMjQwNTE4MjEwMDM4WjAzMTEwLwYDVQQD Eyg2ZGVmMDE0YzQ0MDhlZTJhZWE1N2YwOTNiYmZmNTY5NDVkYWU4NzhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMKRMtnBVQ1aBFat99BKHSRFCREU IaoBSa+1IiNAxpikb2FMYC8rpm1S6hVfs6rezGVmn13FfCYrLMoYU++K5YPZ+T80 o7tuKCKlUZMuidrR8nBBYeat9CUbs+4QmNGFtLh5kXfarR/EbENA3OcY/PVwo1yu Ugv2a7KmqbIWGaPNPXA3Qknx5/XNiwJNBrvbS11UwSIfk0hVbyWMwAZQfKDkeqn2 9C0+yXpz50ZnavK+KX3B13DA9HuwuWOSOYjwPGUBQGzMkV37nU7zLFlokZ+/0vEF 8QBI/EgrQEXUmM+Y9WRFlgAdGAB53Gb+JyA2gjR3EM9K8N2IxRoufzjsVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG3vAUxECO4q6lfwk7v/VpRdroeMMB8GA1UdIwQY MBaAFJIiCLR7aoZNnR/zPgaqgdE4GadOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTct OTViMDhlMzY2MGNmLzEva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTctOTViMDhlMzY2MGNm LzEva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX80zvmyK Y8TZnwKx+zzC1YbcvKJL5LmI7HihpUYlBK/xhekO7U7RLGuWNfq1ApfikHIGZtXp qPYRMTbgqqpz22BYE3WfV3E2EdgoEtC32NWwHaB4gVM7YLRgewFDKiTdtfg72TR9 T1UWRPWBiSv8hM80uAKF+2Bigq/3iN1Cmq9xygVgWmxDRMj766fzoWMgqQPUVixW FbXlyGhX1eULyQDrYx7aNKX7PkMOWgNOBKr8oTSXlAmT1h2fde5n4AZbRv+m8xyN s9vJrG5keNpUf3mm1xt3F0H7CY/Q/Wybfj9acX3y8CuJb0zENVUb8+ayAwBP0lPZ kAytGq69TZ3Uhw== -----END CERTIFICATE-----Generated at Sat May 18 00:42:25 2024 by rpki-client on console-ams.rpki-client.org