$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft File: IvLC57wdpU2RnKW1lB03iJKyzLI.mft (raw, json) Hash identifier: PxrQ2tIgWt6IwIrUqFDyf1GvQ3S09rBpTOkYqKtsZ1s= Subject key identifier: 2D:E8:70:C5:19:FB:AC:15:B0:5F:66:64:B7:DD:57:9D:21:E8:CF:C7 Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2 Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2 Certificate serial: 0194BAF20EAED4E96329CF20A1EF344BD5F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft Manifest number: 0F91 Signing time: Fri 31 Jan 2025 06:00:13 +0000 Manifest this update: Fri 31 Jan 2025 06:00:13 +0000 Manifest next update: Sat 01 Feb 2025 06:00:13 +0000 Files and hashes: 1: 0KbtCJykTY4f7nA0QJzqQGWoqYA.roa (hash: T5Ow7OsLV+eTW1oVpch0eqCQrMYUfj4kySVUiBzlsHs=) 2: 1-SD58DvCs7ya-7E2FpTU4fI87Ow.roa (hash: HUsbSacmCFroTzSN4bvsRHu/98AfJF8ghdyReaEsmzs=) 3: 1ioN5dcfVbbcvdiMUenNAJRsRF8.roa (hash: LLwhiNyP/7V6w2Kt2BpGMO0L81bfKA5S/Ex0r1Yi3e4=) 4: 90wCTu_VG0cg3v518Jw-uQZKG0I.roa (hash: WGgublq3d4Yb/k0UHfCjetZRey/6UF8GGMjAYAWKBew=) 5: 9ustLRCmQrVjSomh2CSbiU8tgAw.roa (hash: iqcE7BuOcWgu3suvDSZKPBILDJpc9DfkSe4omHd7kiw=) 6: DthOD_kxSHI_yAmMQURpyHdQPX8.roa (hash: 8Uu1LNAmsaRUJ+QbM5XSgI4iAjEHIEeippuJeVtKzew=) 7: IvLC57wdpU2RnKW1lB03iJKyzLI.crl (hash: 71XadpaU4WKKeecwELgewaB27p9UDVBX+FjZi8Exmr8=) 8: Kp4lqcWI2L_udI0vjyDZ3KKhNqw.roa (hash: dhMCiSDQZM4kurcanBYjwM08N5LUsyI+HR6PEcfZSs4=) 9: Nv82XPVAXh7i0NinV8op7cxSCkY.roa (hash: Gwu9owA9BpGL2Gb5O0jUF/4E4PLOvSLoDJSNHgY1Ne0=) 10: O49fEEmdduEDlmHjywBTe4hbUrI.roa (hash: QGPcl2jLSGRNH/NTf0tO+RhE6wtLBqqp92bw06oxNfU=) 11: OPHGk6u2qSFcpqNXDoRynwkxRPg.roa (hash: tKvHMnELV5VNPCPmJyRYPHGYeZPGGn54PcC8eCvYwUE=) 12: Uc7Jp2LcRHWnSJ_AIl9MRS5N-ns.roa (hash: AngxdPPy9+UbmPG/n/8j13gA9QjKCfwyDf6PucND4FI=) 13: Uj9f4IMBhaHqTrTKSiJPLOEuUXY.roa (hash: BM3naWIqw85ohaDvPSxO7Ut5OjuXGJkv4mwMyMN/UKg=) 14: YrwRysh7sD29Ia5Zu8A5kmZtHqA.roa (hash: B6C4+KUjcPcxnfaU4l6MZpxuvV7eh3cyPcoK+0EeHe8=) 15: _2Z2DCyP8AoFTrwYYnrTE8duSKk.roa (hash: 9BjH2YLT3BThs3wwk+jwBx3zqx+MMwKVuJzuVbVoQIE=) 16: _6ri1KyGrKWa-tqTjRsqpyUSZCk.roa (hash: isLYHAJU5J3ZPuL1/UUePiNJm0MmjXaPrbTm1cYHTyQ=) 17: hqAa-HGl9YYSVOAZse-mATGGJYM.roa (hash: KOeloEwv9QnlDfRaZ27Ece4epTiFo9JQL3WkmnmhezQ=) 18: uPxOt98I1tBick-uHh01WFNrRvQ.roa (hash: /HibKZ31j64AXkabjb8asgWDIKN4DMb9TRIPZEdaXFw=) 19: zBCnMJFWnMXKgz_j_g57vjHzFUk.roa (hash: 4csBVOwSYwoxyrDsoROei21hUJZS/HdqdCvpTaBSh6Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 01 Feb 2025 06:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:ba:f2:0e:ae:d4:e9:63:29:cf:20:a1:ef:34:4b:d5:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2 Validity Not Before: Jan 31 06:00:13 2025 GMT Not After : Feb 1 06:00:13 2025 GMT Subject: CN=2de870c519fbac15b05f6664b7dd579d21e8cfc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:69:4e:a6:f8:b1:eb:b8:20:46:2c:9d:db:d9: 3a:d3:13:59:51:ad:9a:de:49:5d:2b:fe:cf:76:ba: e2:9f:ab:8b:d3:36:bd:cc:87:cb:c5:6e:59:61:9d: 22:45:32:09:be:e4:7a:c5:f4:e4:fe:16:84:fb:ec: 60:0c:fc:dd:9e:e8:2a:88:88:89:85:2f:c8:dc:27: 51:be:f8:10:ec:99:df:b3:da:aa:79:95:37:31:f1: b8:3b:08:6e:e2:bf:c0:fc:c6:f0:df:55:07:08:a2: e9:02:62:c8:61:10:cb:c7:51:4d:84:f5:92:e0:be: 3c:3f:f0:6b:8b:e5:44:b1:8b:83:24:0d:24:45:b4: 1a:a3:d0:34:54:71:fb:d3:cd:51:bb:85:6b:ae:38: 6a:d3:2d:20:30:60:92:94:a5:dc:19:60:50:17:a2: 1a:e1:92:fb:8d:74:fb:85:d9:33:1d:10:22:ad:9f: 31:24:fb:bc:78:29:47:3d:b2:ea:eb:4b:bd:23:85: 5c:28:70:95:64:86:12:15:ea:35:ad:78:07:e4:ab: 97:ff:8e:d6:31:46:82:7d:df:27:7a:37:f6:52:63: c9:41:22:ee:07:96:82:39:4e:2b:2a:b0:c6:cb:17: 37:34:88:20:35:71:0b:99:18:19:8f:a5:43:2d:f5: a0:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:E8:70:C5:19:FB:AC:15:B0:5F:66:64:B7:DD:57:9D:21:E8:CF:C7 X509v3 Authority Key Identifier: keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:fe:70:0b:87:48:5a:47:39:b5:71:c1:a6:79:39:f1:8c:20: 5f:5c:94:2f:ff:d4:16:c0:50:4b:3f:e6:52:f8:66:7e:81:c8: 92:10:da:f8:16:8d:91:02:5c:46:6c:1b:f5:e2:91:41:86:e8: 48:06:27:d9:f6:44:d8:bc:90:17:b2:1a:3c:63:b7:a9:40:9b: 58:9b:7d:f0:f7:2c:8c:15:df:4d:03:e7:88:1c:98:80:88:9f: 88:29:fd:90:e1:cb:49:a1:59:38:eb:c3:88:23:90:2f:1c:ff: ca:96:ac:06:52:4e:91:82:50:49:01:1e:82:07:45:5f:2d:77: b8:45:34:4c:93:ab:92:07:eb:29:f4:a5:5d:f4:28:f6:ab:a4: c0:b6:bb:bb:02:89:a9:49:6b:75:09:5d:f5:aa:df:be:16:cc: 77:a2:05:3d:ea:96:9c:d8:8e:ed:d8:6f:01:b5:ea:e7:53:c7: 58:26:4d:5f:8c:0f:e7:d9:49:1d:83:82:15:2a:d1:20:55:1b: ef:4d:d4:f8:46:50:3f:06:8f:48:a1:ce:31:63:cb:06:ed:31: df:a9:2a:6a:26:a1:e2:c8:f6:18:5f:9c:50:91:27:63:a9:fd: f4:67:98:c7:fc:53:a7:e5:ae:70:24:75:67:d2:32:7c:43:92: 0f:ef:d7:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZS68g6u1OljKc8goe80S9XyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZjJjMmU3YmMxZGE1NGQ5MTljYTViNTk0MWQzNzg4OTJi MmNjYjIwHhcNMjUwMTMxMDYwMDEzWhcNMjUwMjAxMDYwMDEzWjAzMTEwLwYDVQQD EygyZGU4NzBjNTE5ZmJhYzE1YjA1ZjY2NjRiN2RkNTc5ZDIxZThjZmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGlOpvix67ggRiyd29k60xNZUa2a 3kldK/7Pdrrin6uL0za9zIfLxW5ZYZ0iRTIJvuR6xfTk/haE++xgDPzdnugqiIiJ hS/I3CdRvvgQ7Jnfs9qqeZU3MfG4Owhu4r/A/Mbw31UHCKLpAmLIYRDLx1FNhPWS 4L48P/Bri+VEsYuDJA0kRbQao9A0VHH7081Ru4Vrrjhq0y0gMGCSlKXcGWBQF6Ia 4ZL7jXT7hdkzHRAirZ8xJPu8eClHPbLq60u9I4VcKHCVZIYSFeo1rXgH5KuX/47W MUaCfd8nejf2UmPJQSLuB5aCOU4rKrDGyxc3NIggNXELmRgZj6VDLfWgswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC3ocMUZ+6wVsF9mZLfdV50h6M/HMB8GA1UdIwQY MBaAFCLywue8HaVNkZyltZQdN4iSssyyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi82MDI1MzAtNmQyMi00NmYxLThlMDUt MDJkZWY2ZTg0YzkxLzEvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi82MDI1MzAtNmQyMi00NmYxLThlMDUtMDJkZWY2ZTg0Yzkx LzEvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHf5wC4dI Wkc5tXHBpnk58YwgX1yUL//UFsBQSz/mUvhmfoHIkhDa+BaNkQJcRmwb9eKRQYbo SAYn2fZE2LyQF7IaPGO3qUCbWJt98PcsjBXfTQPniByYgIifiCn9kOHLSaFZOOvD iCOQLxz/ypasBlJOkYJQSQEeggdFXy13uEU0TJOrkgfrKfSlXfQo9qukwLa7uwKJ qUlrdQld9arfvhbMd6IFPeqWnNiO7dhvAbXq51PHWCZNX4wP59lJHYOCFSrRIFUb 703U+EZQPwaPSKHOMWPLBu0x36kqaiah4sj2GF+cUJEnY6n99GeYx/xTp+WucCR1 Z9IyfEOSD+/X1w== -----END CERTIFICATE-----Generated at Fri Jan 31 15:31:26 2025 by rpki-client on console-fra.rpki-client.org