$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/912LUoFfPyYT6UiZLsn-Zg9pSbQ.mft File: 912LUoFfPyYT6UiZLsn-Zg9pSbQ.mft (raw, json) Hash identifier: hvTaHyy0l814ZHBaiJdARDRvePdJgjwjuLyQCEADYws= Subject key identifier: A4:FB:A4:34:7E:37:EE:7F:B4:0D:D4:FA:43:94:6E:6D:20:9D:71:3E Authority key identifier: F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4 Certificate issuer: /CN=f75d8b52815f3f2613e948992ec9fe660f6949b4 Certificate serial: 01960D562782CA1A6E8CD20957A60FFB7BDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/912LUoFfPyYT6UiZLsn-Zg9pSbQ.mft Manifest number: 0C08 Signing time: Sun 06 Apr 2025 23:01:12 +0000 Manifest this update: Sun 06 Apr 2025 23:01:12 +0000 Manifest next update: Mon 07 Apr 2025 23:01:12 +0000 Files and hashes: 1: 83EOlWZrKO5WLCsH1uDGC8_UIug.roa (hash: dE0NgpwbEwFSGcpMTtwW5p9tcH+Ofugiyh6IAvXsg/Q=) 2: 912LUoFfPyYT6UiZLsn-Zg9pSbQ.crl (hash: kkoqGqFztVYaJExxPoFgNnE3+4ouOeeZBQ/G4v2a1WY=) 3: EQCfY24u-v14gFZg6mEatGrQlnc.roa (hash: 7urxznVERwJsu9nXwiEV164v/NsP1Yv6Whx7ky/oxQE=) 4: FRMJ2z4kCJ_w8lrb8z-QFwDHfEs.roa (hash: C02friGf2/eI41x3ctdCJsSF5237prwoIfP9E5DpSNA=) 5: NWnnwK9I8wP3Or6FJHn1SqSLopk.roa (hash: 8ldjsoYuIJKPxFfa19l3U4pzPGfgBiSMm2mGccBHKGY=) 6: UOCQKduqblhh9o-f86FvQfKHV0c.roa (hash: TOGEgHCgJiNTtsiSlbwmeQrH1soAdbmWm7mmYeknIE0=) 7: dEXO9NtDWtMvuKsCei1xkWUIoBE.roa (hash: gWxcq8JfsePhlPUyxSKsdmXYD6a8c5bTJZtjvL0VdUU=) 8: egiuQKi8pr64nTrCAPbAZypV0ZU.roa (hash: DxhscGNFlV1SfBzigPHOPXoJo5Jjra211pN0o1cY2rw=) 9: jvgAj820BHmbS6dawcsjgknVHcI.roa (hash: VTNVnGHAQYgawjDvftIaFAiMEhAvJNij67DPO7xbqJ4=) 10: krl0Jsk9HNKc5F6_HL3kifkmfzc.roa (hash: n/2n8jQslZYUzDM2c1IG4Vfrpp7KiJ9q2Z28mgmfZhs=) 11: rZfBI75kuDIF2aIxsEx1hcY2lXs.roa (hash: PLQiXwMX44ivIOaOW7tJo/dlFTfIke5qTZbaMzs3iec=) 12: rzSQEADNAhcXIalIFFah8EBGx6g.roa (hash: cbqkIaXAvUtNSHXdkHJ+QSFg/T8RKyxYgO0+nbGwa/E=) 13: tl7GaLblOWr2GanIAlszHrHcQa8.roa (hash: 6I0v9Zu0sa21SgWy2hnLUqumUqvlsRKc2tRmYosfTp0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/912LUoFfPyYT6UiZLsn-Zg9pSbQ.crl rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/912LUoFfPyYT6UiZLsn-Zg9pSbQ.mft rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 07 Apr 2025 23:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:0d:56:27:82:ca:1a:6e:8c:d2:09:57:a6:0f:fb:7b:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f75d8b52815f3f2613e948992ec9fe660f6949b4 Validity Not Before: Apr 6 23:01:12 2025 GMT Not After : Apr 7 23:01:12 2025 GMT Subject: CN=a4fba4347e37ee7fb40dd4fa43946e6d209d713e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:ed:00:81:cd:f1:d4:86:11:e3:32:0f:45:f8: 7b:f6:69:b8:40:cc:9a:6d:ee:d9:e7:6d:aa:54:51: 9b:96:15:e9:e9:f1:af:85:6a:66:6e:5f:b6:d3:3b: c6:a0:6c:ff:22:44:f9:e7:ae:bf:fd:97:1a:a9:f5: 29:a6:85:70:64:e8:41:a7:fd:f5:38:10:26:8e:9d: 1b:11:fd:27:53:63:b8:2c:00:9f:24:1f:1a:cc:4a: d0:08:55:82:7a:73:11:c4:f8:50:fd:73:6c:fc:f1: 8c:20:92:0f:cb:96:c5:be:93:b7:46:36:5b:55:ce: 49:c6:98:ee:ed:28:26:bc:ee:f2:f0:0b:48:cf:7a: 80:2f:17:10:2d:90:d1:93:6a:53:5b:a3:02:be:65: 3a:85:78:45:12:23:12:bf:4f:23:78:82:f5:31:39: c8:bc:f9:1d:77:4e:88:e0:51:06:c5:3f:4e:d4:c0: f3:92:97:0e:e0:62:1c:ab:10:9d:23:3d:a8:86:c4: 90:9b:46:ff:50:bd:62:6e:64:1d:d5:3d:8c:78:22: 9a:84:f3:a0:01:a2:14:5b:0e:75:30:2d:7c:55:a0: b1:8b:94:43:56:26:1e:d8:37:3f:10:b3:63:c7:0b: 27:05:f9:c1:4b:9a:d1:f7:c2:b6:b7:11:f1:16:39: 53:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:FB:A4:34:7E:37:EE:7F:B4:0D:D4:FA:43:94:6E:6D:20:9D:71:3E X509v3 Authority Key Identifier: keyid:F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/912LUoFfPyYT6UiZLsn-Zg9pSbQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/912LUoFfPyYT6UiZLsn-Zg9pSbQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:e0:44:ad:c4:85:07:a5:1e:a1:80:fb:86:0c:74:ab:af:21: 52:cb:06:b1:78:11:22:c7:42:97:67:8a:98:7e:70:99:55:8f: 76:1d:97:86:bb:f0:92:0d:fe:f4:db:a6:23:39:7e:24:7d:2c: f2:b3:85:09:d6:6d:19:08:4f:02:1c:bc:06:c3:42:b3:4b:62: 4d:d2:0a:0a:a7:c1:5e:12:9d:b9:d8:34:27:36:cd:29:fe:08: c7:7a:f6:f9:a4:d7:82:a8:a0:38:3a:ab:4e:2c:21:20:8f:3c: c1:20:a5:a7:cc:3d:fa:a5:98:4a:83:73:bf:b5:52:15:63:65: 9e:2a:db:63:98:3f:75:02:21:6f:93:65:07:5a:58:ce:a4:16: 1b:a4:7b:15:d5:25:9f:64:e3:91:da:f0:78:85:56:27:65:d7: 50:62:6e:83:9c:2d:17:67:5c:09:22:0b:b3:8a:ba:b2:7b:57: d3:79:d6:b3:b7:fe:b2:32:4d:31:67:4c:ca:61:b1:51:5c:d2: 01:ce:36:2f:b9:6d:bc:c1:ca:53:3f:58:0d:4b:ef:67:f6:71: fc:21:fd:93:1a:3a:3f:94:bd:11:5a:cf:e8:2a:6a:9e:3e:41: 12:fa:ec:8b:54:f0:5c:71:a6:2e:bd:52:e7:82:22:86:11:a1: bb:b0:5f:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYNVieCyhpujNIJV6YP+3vcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3NWQ4YjUyODE1ZjNmMjYxM2U5NDg5OTJlYzlmZTY2MGY2 OTQ5YjQwHhcNMjUwNDA2MjMwMTEyWhcNMjUwNDA3MjMwMTEyWjAzMTEwLwYDVQQD EyhhNGZiYTQzNDdlMzdlZTdmYjQwZGQ0ZmE0Mzk0NmU2ZDIwOWQ3MTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7e0Agc3x1IYR4zIPRfh79mm4QMya be7Z522qVFGblhXp6fGvhWpmbl+20zvGoGz/IkT5566//ZcaqfUppoVwZOhBp/31 OBAmjp0bEf0nU2O4LACfJB8azErQCFWCenMRxPhQ/XNs/PGMIJIPy5bFvpO3RjZb Vc5Jxpju7SgmvO7y8AtIz3qALxcQLZDRk2pTW6MCvmU6hXhFEiMSv08jeIL1MTnI vPkdd06I4FEGxT9O1MDzkpcO4GIcqxCdIz2ohsSQm0b/UL1ibmQd1T2MeCKahPOg AaIUWw51MC18VaCxi5RDViYe2Dc/ELNjxwsnBfnBS5rR98K2txHxFjlT/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKT7pDR+N+5/tA3U+kOUbm0gnXE+MB8GA1UdIwQY MBaAFPddi1KBXz8mE+lImS7J/mYPaUm0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTEyTFVvRmZQeVlUNlVpWkxzbi1aZzlwU2JRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC85NTE0ZWQtMjc2ZS00YWJhLTg5N2Ut YTQ0MTBlMTBiNmY1LzEvOTEyTFVvRmZQeVlUNlVpWkxzbi1aZzlwU2JRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC85NTE0ZWQtMjc2ZS00YWJhLTg5N2UtYTQ0MTBlMTBiNmY1 LzEvOTEyTFVvRmZQeVlUNlVpWkxzbi1aZzlwU2JRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAReBErcSF B6UeoYD7hgx0q68hUssGsXgRIsdCl2eKmH5wmVWPdh2Xhrvwkg3+9NumIzl+JH0s 8rOFCdZtGQhPAhy8BsNCs0tiTdIKCqfBXhKdudg0JzbNKf4Ix3r2+aTXgqigODqr TiwhII88wSClp8w9+qWYSoNzv7VSFWNlnirbY5g/dQIhb5NlB1pYzqQWG6R7FdUl n2TjkdrweIVWJ2XXUGJug5wtF2dcCSILs4q6sntX03nWs7f+sjJNMWdMymGxUVzS Ac42L7ltvMHKUz9YDUvvZ/Zx/CH9kxo6P5S9EVrP6Cpqnj5BEvrsi1TwXHGmLr1S 54IihhGhu7BfpA== -----END CERTIFICATE-----Generated at Mon Apr 7 06:07:23 2025 by rpki-client