$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft File: h74JMJcJfERX_1qj5Yk8jBVDJhI.mft (raw, json) Hash identifier: mjY5s9W1eX9NM0Lcc4HNlLNA7Y0NwqhmHz5h4MsTi5U= Subject key identifier: D8:BD:16:B7:16:B2:70:23:7E:26:47:F0:B1:D7:43:72:10:B8:96:D3 Authority key identifier: 87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12 Certificate issuer: /CN=87be093097097c4457ff5aa3e5893c8c15432612 Certificate serial: 01960A5577E1D01178BEBAFEE0B9DF492AF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft Manifest number: 1167 Signing time: Sun 06 Apr 2025 09:01:35 +0000 Manifest this update: Sun 06 Apr 2025 09:01:35 +0000 Manifest next update: Mon 07 Apr 2025 09:01:35 +0000 Files and hashes: 1: 58EBygRjdS7517jE8ijFSPfVOH4.roa (hash: 7YP7WUOPsrK23qXejFg0a6c2K8s3GbzwWCeuhRLXrr4=) 2: 6gQb_YrXJIkOy1ffV5AywwaDFKA.roa (hash: YBUcx/W2YYWfTW+ZfLh5vpIiC6jkcxCKGBt0nojo2Ok=) 3: CjTW9-CUmuY1lxZ8OqndS2FXSrY.roa (hash: 9DQ0LnRbHYpMYq+dl7Z0Jfv0Jx2DrmotGXluT5sxbiI=) 4: UYD_ol6L79u8glgaI6wKUZit3aI.roa (hash: Gf9BtC+mpY9FQr0OFj9WV8BSFzyS8ChMq/mXIibBTC4=) 5: YxuPih3fAlXVoEE31gDs9iD2i1w.roa (hash: x8butTOJLg1TuADmdhNJfjqeOtty4tQbuYOKyeZNAJI=) 6: cgfWhp9nnNlIFwxwBmM9ufcXLT8.roa (hash: d9o/0tEnmxkRdMrExtvCAvZnhgV08vpjue2h9xSnd5M=) 7: h74JMJcJfERX_1qj5Yk8jBVDJhI.crl (hash: qsjJx8ZZbZYEC8quNk9bxCJ6bfFxCmwNCYtrFMvHWTc=) 8: jS9AN5oD9gr_onzGTzL8xf4_tCg.roa (hash: L5WRngdm8hXH1GtO9dblNyDW24uvtXBx7hO8Cv9i3R8=) 9: l73XbGk7c4j4MjyLCnCZ2AhSa5g.roa (hash: zN4KADzvP9RDaA1coLbTnlm7K8otMtISf3HRhyFdP4I=) 10: zDYhvUbelcRpqpslUbRSgUjh_fg.roa (hash: oMqhUHMRnzSTRY98vl61orkGgfrk9poSjKlRD++vvbQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 07 Apr 2025 09:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:0a:55:77:e1:d0:11:78:be:ba:fe:e0:b9:df:49:2a:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87be093097097c4457ff5aa3e5893c8c15432612 Validity Not Before: Apr 6 09:01:35 2025 GMT Not After : Apr 7 09:01:35 2025 GMT Subject: CN=d8bd16b716b270237e2647f0b1d7437210b896d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:00:b6:10:56:b0:1e:6f:75:cc:35:0f:d4:13: a0:6d:d8:82:bb:bc:74:53:5d:ce:e1:e6:2e:fd:eb: 2d:b2:0b:71:5d:64:bd:b6:ab:60:04:b3:52:51:4e: df:f9:9d:a8:a3:cf:8d:8c:e4:0b:92:4f:f5:d2:51: cc:e6:c1:1d:ce:82:75:e6:ba:f4:5c:98:16:db:69: c8:44:fa:60:db:0f:60:65:11:35:4c:bc:5f:28:5c: e2:8a:90:99:06:ff:2a:55:7d:47:9d:d9:e2:38:2c: de:0a:85:ef:60:0f:d9:1b:8a:db:19:7c:23:17:3e: 38:24:62:c1:bc:57:a9:a1:4e:ab:83:14:9f:77:59: f2:5d:a0:96:c8:9a:df:69:a9:09:5b:32:5c:92:bf: 83:5f:18:78:90:bd:29:33:57:f1:6b:1b:ab:d7:f6: b1:09:09:33:73:c1:43:f3:0f:58:87:c3:e2:3b:e7: fb:8e:35:96:75:c5:58:f4:aa:b5:e4:ca:1b:a3:3d: 78:56:45:e6:12:ed:11:52:d8:f7:12:d5:d8:56:61: 85:7b:58:cb:36:d0:d4:f3:6f:c6:5a:f4:02:2b:95: 41:05:50:93:b9:9c:68:d3:6f:54:6c:86:88:ea:10: e9:20:f9:75:a7:bb:de:37:0e:b4:98:1b:ba:1a:bf: 98:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:BD:16:B7:16:B2:70:23:7E:26:47:F0:B1:D7:43:72:10:B8:96:D3 X509v3 Authority Key Identifier: keyid:87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:1c:a4:97:92:8f:8f:87:87:6a:1a:12:f3:f5:13:c6:ba:71: 18:ab:27:a2:94:d5:e0:65:94:13:e7:c7:0b:0d:ba:61:67:05: f2:40:32:90:60:0e:58:49:fa:ae:cb:4e:69:23:19:46:7a:e0: fe:97:2f:4f:af:ed:3f:d5:5e:ea:f5:d8:fc:ee:f9:fe:8a:ec: ab:87:3a:bb:f0:6b:ac:00:9f:f5:83:64:15:38:9c:24:60:a3: 6a:c5:b1:db:e7:29:cc:1f:f7:bc:c9:ad:cd:06:d4:0b:af:87: d9:8c:da:63:58:56:0a:49:ec:e0:ad:c8:f8:b0:3b:69:76:ba: bc:0a:c0:ba:71:14:f3:8b:fc:ed:30:64:34:5c:44:82:87:19: 20:4f:b2:58:2e:8a:7c:0c:e6:83:9c:f7:62:e3:32:3b:3c:8f: 29:98:3c:29:da:03:ea:18:1e:44:e2:7b:58:18:d2:ad:58:b9: 37:e4:87:5f:7d:37:60:06:15:86:38:c6:87:87:33:e3:d3:2d: 07:9b:c8:eb:4a:b8:9b:5f:6f:eb:69:3e:0c:01:09:71:7a:4e: b7:14:83:d4:66:24:23:3f:db:df:51:ac:df:0a:24:78:a9:da: 74:9b:e1:05:cd:a6:25:c3:be:2e:6d:29:ce:8d:07:b6:42:8b: f8:5f:7f:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYKVXfh0BF4vrr+4LnfSSr3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3YmUwOTMwOTcwOTdjNDQ1N2ZmNWFhM2U1ODkzYzhjMTU0 MzI2MTIwHhcNMjUwNDA2MDkwMTM1WhcNMjUwNDA3MDkwMTM1WjAzMTEwLwYDVQQD EyhkOGJkMTZiNzE2YjI3MDIzN2UyNjQ3ZjBiMWQ3NDM3MjEwYjg5NmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygC2EFawHm91zDUP1BOgbdiCu7x0 U13O4eYu/estsgtxXWS9tqtgBLNSUU7f+Z2oo8+NjOQLkk/10lHM5sEdzoJ15rr0 XJgW22nIRPpg2w9gZRE1TLxfKFziipCZBv8qVX1HndniOCzeCoXvYA/ZG4rbGXwj Fz44JGLBvFepoU6rgxSfd1nyXaCWyJrfaakJWzJckr+DXxh4kL0pM1fxaxur1/ax CQkzc8FD8w9Yh8PiO+f7jjWWdcVY9Kq15Moboz14VkXmEu0RUtj3EtXYVmGFe1jL NtDU82/GWvQCK5VBBVCTuZxo029UbIaI6hDpIPl1p7veNw60mBu6Gr+YAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNi9FrcWsnAjfiZH8LHXQ3IQuJbTMB8GA1UdIwQY MBaAFIe+CTCXCXxEV/9ao+WJPIwVQyYSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDc0Sk1KY0pmRVJYXzFxajVZazhqQlZESmhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jYzhmNGEtNGMwMi00MDRiLThkOTMt MmNkZTY1ZjMxMTJhLzEvaDc0Sk1KY0pmRVJYXzFxajVZazhqQlZESmhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jYzhmNGEtNGMwMi00MDRiLThkOTMtMmNkZTY1ZjMxMTJh LzEvaDc0Sk1KY0pmRVJYXzFxajVZazhqQlZESmhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbRykl5KP j4eHahoS8/UTxrpxGKsnopTV4GWUE+fHCw26YWcF8kAykGAOWEn6rstOaSMZRnrg /pcvT6/tP9Ve6vXY/O75/orsq4c6u/BrrACf9YNkFTicJGCjasWx2+cpzB/3vMmt zQbUC6+H2YzaY1hWCkns4K3I+LA7aXa6vArAunEU84v87TBkNFxEgocZIE+yWC6K fAzmg5z3YuMyOzyPKZg8KdoD6hgeROJ7WBjSrVi5N+SHX303YAYVhjjGh4cz49Mt B5vI60q4m19v62k+DAEJcXpOtxSD1GYkIz/b31Gs3wokeKnadJvhBc2mJcO+Lm0p zo0HtkKL+F9/hw== -----END CERTIFICATE-----Generated at Sun Apr 6 17:49:06 2025 by rpki-client