$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft File: JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft (raw, json) Hash identifier: rIMbwN4N390K0ojexL7y5W2oWzEFhk5EIWmYslDiGf4= Subject key identifier: 67:3F:E5:52:DE:B6:62:85:79:04:F9:E2:E5:F4:E1:9F:8C:9A:A3:50 Authority key identifier: 25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04 Certificate issuer: /CN=255876412d20fbb6cab823481782ac47703b4404 Certificate serial: 01960ED6E0AC6A409575FB59F7B60DE565A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft Manifest number: 01AF Signing time: Mon 07 Apr 2025 06:01:25 +0000 Manifest this update: Mon 07 Apr 2025 06:01:25 +0000 Manifest next update: Tue 08 Apr 2025 06:01:25 +0000 Files and hashes: 1: 8g-49_qQ3fcAAr8ogKNyJYRIsqM.roa (hash: YUM8nQydrUaGiZYWfH9e5CkG/0ZnMAVKiwEv7wrrmyU=) 2: HL_391YyhybjwJ74kNKee4Xme30.roa (hash: SKqvmhnXy6lVHKlIjthvO2Ffcm5YC3y5BAN0frkvak8=) 3: JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl (hash: 3LW+6JxTBZw8SugDP5NDN13m0/dnoKjcfgI9VLIFqzg=) 4: UFzq6HTzLsKXQDiIwbMVwsSvCKE.roa (hash: SkcdE34ZRnlvciguMZx89azOscHKjWKi4kmUM6ce2ek=) 5: Vf3C3nEL83KU-t7pLCkbgpiASsA.roa (hash: 6SosAmZB67F6Q5qUy5fWvfEJcjGr5qv93jKtlhRr2es=) 6: b37yA0vBw9z9NXOjP3ngOC-nsdQ.roa (hash: xnMkc8ma8YV2ulWTsjtILbYV33NvcPwQMYE2M0mdniE=) 7: evsBxqfpyH3zHvt0KdEDbPjJt40.roa (hash: vsA8eWY0hm6KpE4+4Kq5HkaUgEZIYMzjLRq48DP4yG4=) 8: hp0pLX_QGiWhiOhgc-g-g3McIzI.roa (hash: iRmxgVLqjy7bOiMWp10+U3a2wekQwe0YpGsmUpp/wOw=) 9: lwlNrqm3r8NOZc8muUo80fFlOeY.roa (hash: FfJzjpvXZQfdbT9Lc8mjBM1Q8TX5WkjUXsorwJal9Zo=) 10: pu4GRTEZI-DDS8alCpZhtqjD728.roa (hash: 4gymL9RPKKRX/UazcJNoKfCcQGjN640R8KkZ8YDasZ0=) 11: r6VOlpU6VgL1WVlEQKIIOdFJ6jc.roa (hash: qZ5211k3RJOzvqXcolh5rN4QAkWpCPQgoaSC1kNOR9w=) 12: zB7jZpVQ6_QohXb9Ts1uTCDa9vc.roa (hash: G92uGtD4p7P9jynyu17jJLaD0YzUsjPpS9i4T5WM4LU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 08 Apr 2025 06:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:0e:d6:e0:ac:6a:40:95:75:fb:59:f7:b6:0d:e5:65:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=255876412d20fbb6cab823481782ac47703b4404 Validity Not Before: Apr 7 06:01:25 2025 GMT Not After : Apr 8 06:01:25 2025 GMT Subject: CN=673fe552deb662857904f9e2e5f4e19f8c9aa350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:11:79:03:a9:e2:a6:87:14:6b:dc:5d:4d:30: fc:1f:54:c8:b5:9c:a5:a1:62:b4:21:58:e1:2b:e8: 18:8c:5f:34:98:c8:0f:56:03:7e:98:63:4d:a5:ef: f3:2d:4e:a7:3a:b4:8b:8d:e0:e0:37:29:59:4a:e6: e6:bf:3f:2f:69:db:30:bc:b2:dc:cb:7c:78:b9:e3: bf:0b:d9:55:1d:d8:6d:99:e1:c2:01:59:29:53:f9: a6:94:17:d7:e5:30:66:0d:75:cd:69:f5:2c:7f:0b: e2:84:3b:0b:3e:1a:3d:fe:b7:85:d3:48:fd:7b:11: 74:9a:04:38:fa:40:04:b6:56:f0:c6:22:9a:91:a0: 30:c3:6d:df:98:26:f4:43:fc:05:c9:8c:ca:a3:31: 7b:f5:20:3c:a9:fb:07:69:1b:2b:0c:68:07:72:0e: bd:e1:24:df:26:45:74:0a:ca:ad:66:fb:db:c8:d3: 24:60:35:24:d0:18:e0:7c:cb:31:84:e4:83:fa:fb: 7c:1d:c7:f2:95:39:ef:a8:58:fd:8c:d0:cb:d6:8e: 05:1c:f8:c5:a8:c1:60:07:d5:c8:24:93:46:38:7d: 97:93:d2:d8:72:69:a5:a2:8a:b1:74:41:5a:6b:75: f4:38:26:89:3f:f1:6d:ea:3b:37:4a:e4:57:23:d8: e8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:3F:E5:52:DE:B6:62:85:79:04:F9:E2:E5:F4:E1:9F:8C:9A:A3:50 X509v3 Authority Key Identifier: keyid:25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:5d:e6:f5:67:b1:4d:62:3c:25:1e:0b:39:b3:52:75:f4:4f: 16:32:38:5b:97:bf:7f:5b:0e:24:38:7e:b7:a7:90:78:dc:65: e0:8b:4e:2c:24:b6:23:bc:7e:6b:09:95:f9:fc:82:e8:0b:59: 2c:1f:4d:4f:a7:da:a3:d1:42:13:e1:6b:22:ae:e2:82:77:cd: c9:1f:bc:75:b5:10:cc:ed:13:7b:a9:9a:2d:a5:93:62:cc:02: f0:7b:e1:7e:2a:11:8a:e6:cc:89:5d:7e:af:14:e0:53:31:22: 94:9b:a0:ad:e4:7a:29:49:6b:60:dd:3e:bf:c9:6f:72:bd:6f: 6c:18:99:2d:4a:6a:3a:a4:c8:a6:9b:f5:f5:8d:6b:a2:f5:a6: 31:a3:76:ed:ec:85:6b:35:9a:92:94:c4:dd:99:71:86:dd:34: f3:31:f9:4c:7b:0d:85:98:02:ed:61:23:9c:dd:8c:5a:0a:e7: 5d:58:9b:b6:31:1f:66:90:f7:7c:fb:1f:d4:b2:22:6a:a9:5e: 47:c3:f7:9a:0e:63:dc:2e:ed:44:b0:fa:f0:4b:b6:43:96:2b: 28:08:75:64:70:73:c3:0a:28:2e:38:c3:d5:25:a9:aa:5c:db: 75:0a:f6:4a:60:77:fd:19:44:f2:d7:40:7e:8a:41:29:77:e8: d5:20:8a:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYO1uCsakCVdftZ97YN5WWpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1NTg3NjQxMmQyMGZiYjZjYWI4MjM0ODE3ODJhYzQ3NzAz YjQ0MDQwHhcNMjUwNDA3MDYwMTI1WhcNMjUwNDA4MDYwMTI1WjAzMTEwLwYDVQQD Eyg2NzNmZTU1MmRlYjY2Mjg1NzkwNGY5ZTJlNWY0ZTE5ZjhjOWFhMzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxF5A6nipocUa9xdTTD8H1TItZyl oWK0IVjhK+gYjF80mMgPVgN+mGNNpe/zLU6nOrSLjeDgNylZSubmvz8vadswvLLc y3x4ueO/C9lVHdhtmeHCAVkpU/mmlBfX5TBmDXXNafUsfwvihDsLPho9/reF00j9 exF0mgQ4+kAEtlbwxiKakaAww23fmCb0Q/wFyYzKozF79SA8qfsHaRsrDGgHcg69 4STfJkV0CsqtZvvbyNMkYDUk0BjgfMsxhOSD+vt8HcfylTnvqFj9jNDL1o4FHPjF qMFgB9XIJJNGOH2Xk9LYcmmlooqxdEFaa3X0OCaJP/Ft6js3SuRXI9jogQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGc/5VLetmKFeQT54uX04Z+MmqNQMB8GA1UdIwQY MBaAFCVYdkEtIPu2yrgjSBeCrEdwO0QEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kZDA2MmEtMTMxOS00MDE5LWE1NTEt ODc2YzdmY2E0YjM0LzEvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9kZDA2MmEtMTMxOS00MDE5LWE1NTEtODc2YzdmY2E0YjM0 LzEvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsl3m9Wex TWI8JR4LObNSdfRPFjI4W5e/f1sOJDh+t6eQeNxl4ItOLCS2I7x+awmV+fyC6AtZ LB9NT6fao9FCE+FrIq7ignfNyR+8dbUQzO0Te6maLaWTYswC8HvhfioRiubMiV1+ rxTgUzEilJugreR6KUlrYN0+v8lvcr1vbBiZLUpqOqTIppv19Y1rovWmMaN27eyF azWakpTE3Zlxht008zH5THsNhZgC7WEjnN2MWgrnXVibtjEfZpD3fPsf1LIiaqle R8P3mg5j3C7tRLD68Eu2Q5YrKAh1ZHBzwwooLjjD1SWpqlzbdQr2SmB3/RlE8tdA fopBKXfo1SCKUg== -----END CERTIFICATE-----Generated at Mon Apr 7 16:30:18 2025 by rpki-client