$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft File: iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft (raw, json) Hash identifier: VrRBUPxAgTOyEDXW9XJCct+NG+MfguLA4HBWMBk4beY= Subject key identifier: 90:05:57:0A:8F:AF:8F:A6:09:C1:D3:E1:1A:FC:76:28:4D:B2:44:DF Authority key identifier: 88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22 Certificate issuer: /CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922 Certificate serial: 0194BABB4704566EBB95DA18E8D62299C701 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft Manifest number: 1438 Signing time: Fri 31 Jan 2025 05:00:23 +0000 Manifest this update: Fri 31 Jan 2025 05:00:23 +0000 Manifest next update: Sat 01 Feb 2025 05:00:23 +0000 Files and hashes: 1: 1hGfq7Np-lC5zqkd-UT0koXInYM.roa (hash: IolKuhXpkJOZaKvUYrnuFzhweh0wUA9JjzSA29FK4X0=) 2: OKSpYrLatEWj0ajOMlnkl0RP5oU.roa (hash: A3Q0jZ1iyPESI+l4cyY/4KEw8Naq+QWll8F7NuPp7jY=) 3: PLd2rwZg3BIFbLdVMuwtqawwJvA.roa (hash: gUsiRiMGcsZ6xvt9E4RkFX3vwnGKGG3T/EDvqaLktLs=) 4: TNbxUiFA_umQvykwt3Iu_LF7CJg.roa (hash: NXX5izWtwfV8obTckhCDRFJla3tNI4Ymq5sn2Ta0SdQ=) 5: Te2XnOHoF3kxEXlzUZBzf1wEQAw.roa (hash: MqV2PMMmoiIdPWIHn+RrSp4UgSOKiV5NzoDXudREYfo=) 6: UYdwUM3DfeHmFmZCeWtOn3yoNG4.roa (hash: BZ3e9G1LFxjJ3lhwzouEb+QxxMJLc2utfmKL1mbzfmY=) 7: iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl (hash: xmUio6t5Ibn9FJUuy2BJvQzUskGCRRQ2CiiK1v1nkbo=) 8: qDeEtGfZREAKrCYzj77GIoMaflI.roa (hash: jq7FvsHAOWp3lpc3C+AgAEp5Bh6v65uQo2orXopz1i8=) 9: rjPYT3hASUgJ6V6pMv8rczg7wDI.roa (hash: gjugzVDut3tOkBALsAOUch2hCi+rlYTeCTT5ZsnsEbg=) 10: w4BFMIHTNaFjHcRjMoBiDbI7zmk.roa (hash: vJoeMgJNOYp1THBJib5QAyACrsySmDjtx1d5b0MPo9k=) 11: xgdaw_rveHEK5d7Lv8gByebbpYM.roa (hash: EozZHq6IPOfxAVYv3DQOy1kcFkmojoflMd4HHwmO24Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 01 Feb 2025 05:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:ba:bb:47:04:56:6e:bb:95:da:18:e8:d6:22:99:c7:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922 Validity Not Before: Jan 31 05:00:23 2025 GMT Not After : Feb 1 05:00:23 2025 GMT Subject: CN=9005570a8faf8fa609c1d3e11afc76284db244df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:31:d6:29:4e:d1:df:e3:b2:1c:d7:ce:eb:8a: c5:80:2c:d6:e8:53:a8:5e:f0:9d:00:dd:c9:79:69: ee:32:ff:1b:c1:72:f0:65:f5:63:6a:a2:17:c8:f9: ba:4f:34:40:0b:9c:d2:f1:50:f8:ed:51:0b:23:14: 4b:0b:cd:cd:8c:6a:c0:98:9c:3a:38:61:a0:fa:a7: 3c:c8:c7:fd:d8:b1:d3:14:00:4f:63:d6:08:53:3a: 63:81:e0:4d:8e:53:7b:57:e7:0b:31:cc:d0:cc:15: 67:2f:03:a1:10:b0:95:33:8d:cc:af:f2:1e:c1:75: 21:74:a6:54:b6:e7:c9:8c:4e:35:c1:42:c3:31:f6: e1:bb:d7:20:cc:1a:d6:d5:c1:e7:44:5a:64:bf:f6: f8:f0:2a:57:28:39:3e:14:4a:9b:10:8e:bb:35:e4: f0:0e:7b:7a:0c:ba:03:0c:8e:4c:d3:dd:25:d3:44: 84:b9:1c:fb:77:ed:12:e2:fc:c5:fe:fd:e1:68:0b: 72:45:d5:2b:e4:f6:6e:3e:a7:76:c1:2c:c4:35:29: ab:17:b3:11:53:89:b3:b2:86:b0:0a:9f:98:60:8c: 6e:11:ac:e7:de:ad:a3:ad:99:38:8e:4d:1b:e6:7f: 32:1f:61:be:d4:f1:8a:4a:29:72:1a:13:38:d3:ea: 41:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:05:57:0A:8F:AF:8F:A6:09:C1:D3:E1:1A:FC:76:28:4D:B2:44:DF X509v3 Authority Key Identifier: keyid:88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:5e:99:49:0d:0c:d4:51:42:d0:cf:25:5e:e6:74:c3:a3:fa: 32:a1:fd:40:24:2d:fa:ee:cf:c6:b7:d4:43:7d:27:75:a5:ab: 87:14:a0:46:87:e2:e6:48:bf:8d:0e:e6:44:ef:bd:43:8e:0d: 3a:e0:ba:c7:ea:00:83:58:f5:43:26:2f:b8:62:77:5b:ab:b3: 90:a8:cd:24:74:b3:e7:df:2e:76:11:6d:06:06:4e:a8:9b:d0: 02:a8:3e:f5:4a:05:6d:27:e5:67:b3:88:58:36:0f:51:f2:6c: 6e:57:25:d6:fc:f2:24:c1:f6:2a:3a:57:42:2d:83:71:b9:65: be:50:fd:ec:ca:c9:50:66:15:35:6c:6a:d0:78:d2:5a:f3:4f: 7b:64:6c:e7:34:14:f8:8f:3c:7f:83:ec:9b:44:29:96:25:2c: 93:66:88:d1:6c:97:c2:d1:70:1e:78:40:b3:a8:1b:af:e7:a1: 0f:52:d5:61:be:2b:ce:62:01:18:1a:7f:a7:98:30:98:d9:32: 3f:59:a4:8a:8a:93:63:f0:6b:41:20:a2:0f:41:56:49:f5:58: ef:d4:67:bd:ac:9c:06:28:6f:80:a0:59:55:6b:7c:ea:c1:67: 70:64:5d:2c:4c:a6:4f:53:0d:c8:ff:4c:65:e0:b1:57:63:66: 55:f4:69:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZS6u0cEVm67ldoY6NYimccBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4MTdhYWZlYzYxYzNhNmIwMjRiNmE5ZjU0ZmZiNzY0Y2Ez ZGY5MjIwHhcNMjUwMTMxMDUwMDIzWhcNMjUwMjAxMDUwMDIzWjAzMTEwLwYDVQQD Eyg5MDA1NTcwYThmYWY4ZmE2MDljMWQzZTExYWZjNzYyODRkYjI0NGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jHWKU7R3+OyHNfO64rFgCzW6FOo XvCdAN3JeWnuMv8bwXLwZfVjaqIXyPm6TzRAC5zS8VD47VELIxRLC83NjGrAmJw6 OGGg+qc8yMf92LHTFABPY9YIUzpjgeBNjlN7V+cLMczQzBVnLwOhELCVM43Mr/Ie wXUhdKZUtufJjE41wULDMfbhu9cgzBrW1cHnRFpkv/b48CpXKDk+FEqbEI67NeTw Dnt6DLoDDI5M090l00SEuRz7d+0S4vzF/v3haAtyRdUr5PZuPqd2wSzENSmrF7MR U4mzsoawCp+YYIxuEazn3q2jrZk4jk0b5n8yH2G+1PGKSilyGhM40+pBZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJAFVwqPr4+mCcHT4Rr8dihNskTfMB8GA1UdIwQY MBaAFIgXqv7GHDprAktqn1T/t2TKPfkiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUJlcV9zWWNPbXNDUzJxZlZQLTNaTW85LVNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9mZTJkNzItYzJkZC00NmMxLTk0Mjkt ZTY2MzY5NjQ5NDExLzEvaUJlcV9zWWNPbXNDUzJxZlZQLTNaTW85LVNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My9mZTJkNzItYzJkZC00NmMxLTk0MjktZTY2MzY5NjQ5NDEx LzEvaUJlcV9zWWNPbXNDUzJxZlZQLTNaTW85LVNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlV6ZSQ0M 1FFC0M8lXuZ0w6P6MqH9QCQt+u7PxrfUQ30ndaWrhxSgRofi5ki/jQ7mRO+9Q44N OuC6x+oAg1j1QyYvuGJ3W6uzkKjNJHSz598udhFtBgZOqJvQAqg+9UoFbSflZ7OI WDYPUfJsblcl1vzyJMH2KjpXQi2DcbllvlD97MrJUGYVNWxq0HjSWvNPe2Rs5zQU +I88f4Psm0QpliUsk2aI0WyXwtFwHnhAs6gbr+ehD1LVYb4rzmIBGBp/p5gwmNky P1mkioqTY/BrQSCiD0FWSfVY79RnvaycBihvgKBZVWt86sFncGRdLEymT1MNyP9M ZeCxV2NmVfRp3Q== -----END CERTIFICATE-----Generated at Fri Jan 31 15:28:54 2025 by rpki-client on console-fra.rpki-client.org