$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft File: rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft (raw, json) Hash identifier: aLputmmdY+yI8JiFWk4WcBcb6Fx+M6Pgo0aLERqA7Ek= Subject key identifier: A1:92:1A:B4:76:DB:7D:6D:16:02:46:50:02:08:79:9C:F6:62:93:F3 Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5 Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5 Certificate serial: 0196094294A0D6715CBDB6BA970794936968 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft Manifest number: 1514 Signing time: Sun 06 Apr 2025 04:01:20 +0000 Manifest this update: Sun 06 Apr 2025 04:01:20 +0000 Manifest next update: Mon 07 Apr 2025 04:01:20 +0000 Files and hashes: 1: 0SyYaQgLQzTmHyjwALNgjgW6Ips.roa (hash: 9FZRGxKEG0jtfYGiry8IM0OKO6/JFkO8TxODVgljdw8=) 2: 1oM3GP4XRi0mqDBcN0k0C4RTdHY.roa (hash: Eqko1gSCAK/Ec5hGsjBzpPB0Hmmto77uxcqKM6nkuos=) 3: 3wty7vsO9UIAL71reBrfPy8oYTQ.roa (hash: rNtuN9r+yk/6orL0d+CeXB5qTYEo7nBji2qcFakMUQ0=) 4: 4JhjKslYK-x39Xd53DH9TC69Rk8.roa (hash: e58H1T1DE3lMwZ8TDVT9NRaFGvcdvvX7mUpQQhawZYI=) 5: 4rBl4Xgj-eyO-Qb6KkYRdP_q3yA.roa (hash: 9Fg4JBY24DsNxM7h9nmxlQnxm85kk0BWdXCDra924l8=) 6: D-_QiVeAYymMyrqyEwwxZVlJ77w.roa (hash: pLHDIfQfn00HxVAd67SY9GUFCYPJH9fT0t4z495xhcU=) 7: MKj1D95IscsnJcwFu1G_QR6ra0Y.roa (hash: fa1NTOC8gwDd/cU25OwEYI6M+pi4vH6HCYjqk3JwdQU=) 8: PQ4JRK_v8Rb4S6Y1Hjjg1mh8-RM.roa (hash: 6S6SDi+NoevpWtxjp+Phs+mUreAi/RCvfLId1bbLsWc=) 9: SHESx2HqUfWZxboQ6jP2hImYKmU.roa (hash: OlCdziBdwRc0FY5ejIFVQ8Nt867ISEKKLNxKfPnLzFA=) 10: TevPA31zpqIvq6GeQSDxtNa30UQ.roa (hash: 2nDbpMbvjKPaiiXiHqb4sCzw1FXoCOAaM9XlGLGbhC8=) 11: U2a4Mi5anG6MoVx-kSkOlCHuZ9U.roa (hash: WzVg8UcZ00h0mbpXiGBDaneFB3IZyzn0LFRbQNJ9OXc=) 12: UU4qmywXJeD0s-bEtA06YqQJbXY.roa (hash: U8vbKeUDnyxjI4tldoiMN64co7xQZg9nWw+wDHbmz3c=) 13: cbX3FwOgi9rS1ENe_k5BLCxVdg4.roa (hash: 35j9cePlwM12en+EIoj2uwLnq2TReRAiO2SX/9vwgDk=) 14: nwRRU278nZ-OoZkxunLEdDGvAcI.roa (hash: XtojZB9yoPUFiPBHYDNCJYd8iy1TyLCfmu2Ry8BmvwU=) 15: rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl (hash: BWpt4Gxcx1/k5EgzXEuqilu4p6SUcZeMlEOhw6h3gfA=) 16: xZHK8sMXJRR9tFEPi8Dz0m2XwJE.roa (hash: P4VjA7AD0Rq8qJwX9hUh9U04YYNDoPlLqjbXRLiEoic=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 07 Apr 2025 04:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:09:42:94:a0:d6:71:5c:bd:b6:ba:97:07:94:93:69:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5 Validity Not Before: Apr 6 04:01:20 2025 GMT Not After : Apr 7 04:01:20 2025 GMT Subject: CN=a1921ab476db7d6d160246500208799cf66293f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:31:27:0f:4a:f8:50:36:a9:bc:b6:be:c2:c3: 20:24:92:05:3c:92:a0:58:cd:33:9b:fe:5b:20:a2: 39:d2:9a:ce:5f:61:6c:39:ac:e0:fb:a2:fd:7e:93: e4:8e:cc:b4:94:67:ac:e7:03:da:02:5d:0c:31:e2: 72:e3:e7:38:4b:6b:61:e4:f7:e8:b3:f3:b5:ba:af: 2f:d2:88:69:84:c0:4e:80:46:99:05:b4:7d:b6:55: 84:09:0c:3c:49:39:6b:35:bf:1f:5b:62:e5:ab:c0: f7:52:e4:1c:f0:15:66:90:62:c2:8e:81:87:bd:76: c1:58:b3:18:91:80:50:fd:8d:a7:d4:a3:36:94:7b: 59:f6:f8:2d:54:6f:4c:88:f0:52:e3:3a:d9:0f:04: 8e:c7:ac:fe:da:d7:11:55:56:ec:fd:76:b3:d1:9c: 78:9a:a4:1a:0a:a4:6d:8e:62:11:a0:0a:e9:8d:ed: 14:61:45:4c:7b:9d:ac:cc:16:b2:29:66:ba:b1:c4: 54:08:8a:1f:cd:29:55:eb:a0:12:99:d9:44:72:e4: 2d:7f:30:af:e5:6b:fb:c5:5c:cd:a8:8d:65:6c:3d: 99:e4:4b:26:02:fc:70:5e:14:00:d6:ba:ab:40:ee: f1:b2:a5:86:d1:90:66:7d:22:79:fe:cb:59:04:f7: d6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:92:1A:B4:76:DB:7D:6D:16:02:46:50:02:08:79:9C:F6:62:93:F3 X509v3 Authority Key Identifier: keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:0e:1c:3b:53:b4:8e:e5:db:b0:72:7b:5a:d7:d9:d6:09:f1: 65:45:18:61:69:86:bb:7c:ea:90:c2:ff:06:7a:27:28:5e:d9: 67:6f:8e:4f:87:1d:c9:3c:16:56:9e:32:22:29:d8:d7:47:ea: 44:11:78:ea:4b:07:21:80:a1:8e:18:2f:9e:87:0f:6e:c0:2a: 64:d9:4e:36:c7:b7:f2:b1:62:35:7c:fa:54:8a:96:ba:aa:44: 00:28:4e:63:25:dc:89:b9:cc:eb:91:74:e8:a7:75:24:df:e3: cb:b7:f1:43:ea:b5:2f:48:f5:bb:b4:11:25:89:a1:c9:62:1c: ab:94:ad:3a:6d:f4:16:03:19:1d:a0:a9:4c:b4:9f:4c:79:71: 26:6d:72:68:11:21:d2:20:44:cd:4a:8d:fc:e5:ff:aa:b1:27: 61:6b:39:47:f1:2f:af:56:67:16:3b:dd:4b:49:23:f8:c1:33: 1b:01:84:20:cd:2b:85:0e:52:fd:a6:36:ab:de:67:46:9e:6f: 65:47:10:4c:43:f8:7f:0c:39:b8:91:55:af:89:62:f1:16:90: c9:bd:90:16:d3:75:e7:c3:1c:97:de:1b:ca:4c:87:2c:79:54: 98:52:e0:e2:c9:0c:2b:1f:56:69:b0:06:1f:e1:a3:91:e3:d5: da:96:e2:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYJQpSg1nFcvba6lweUk2loMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMGRhNDNiNGE1ZDNkYjc4YmEzZjc3NGU1YjMxYjc3MDM3 MjAyZDUwHhcNMjUwNDA2MDQwMTIwWhcNMjUwNDA3MDQwMTIwWjAzMTEwLwYDVQQD EyhhMTkyMWFiNDc2ZGI3ZDZkMTYwMjQ2NTAwMjA4Nzk5Y2Y2NjI5M2YzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjEnD0r4UDapvLa+wsMgJJIFPJKg WM0zm/5bIKI50prOX2FsOazg+6L9fpPkjsy0lGes5wPaAl0MMeJy4+c4S2th5Pfo s/O1uq8v0ohphMBOgEaZBbR9tlWECQw8STlrNb8fW2Llq8D3UuQc8BVmkGLCjoGH vXbBWLMYkYBQ/Y2n1KM2lHtZ9vgtVG9MiPBS4zrZDwSOx6z+2tcRVVbs/Xaz0Zx4 mqQaCqRtjmIRoArpje0UYUVMe52szBayKWa6scRUCIofzSlV66ASmdlEcuQtfzCv 5Wv7xVzNqI1lbD2Z5EsmAvxwXhQA1rqrQO7xsqWG0ZBmfSJ5/stZBPfWdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKGSGrR2231tFgJGUAIIeZz2YpPzMB8GA1UdIwQY MBaAFK0NpDtKXT23i6P3dOWzG3cDcgLVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTct YzUxNWYzNTRjYzVhLzEvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTctYzUxNWYzNTRjYzVh LzEvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOQ4cO1O0 juXbsHJ7WtfZ1gnxZUUYYWmGu3zqkML/BnonKF7ZZ2+OT4cdyTwWVp4yIinY10fq RBF46ksHIYChjhgvnocPbsAqZNlONse38rFiNXz6VIqWuqpEAChOYyXcibnM65F0 6Kd1JN/jy7fxQ+q1L0j1u7QRJYmhyWIcq5StOm30FgMZHaCpTLSfTHlxJm1yaBEh 0iBEzUqN/OX/qrEnYWs5R/Evr1ZnFjvdS0kj+MEzGwGEIM0rhQ5S/aY2q95nRp5v ZUcQTEP4fww5uJFVr4li8RaQyb2QFtN158Mcl94bykyHLHlUmFLg4skMKx9WabAG H+GjkePV2pbi3A== -----END CERTIFICATE-----Generated at Sun Apr 6 10:59:50 2025 by rpki-client