$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.mft File: JgsrxFR3yB13TaoMKKtEt3S6CSA.mft (raw, json) Hash identifier: 9I3MM74obhAYvfXJf2nj5EHAZCijsKwjF2w2tm1RKrs= Subject key identifier: 8B:A2:0A:BD:64:F8:2B:78:FB:E8:74:FA:EF:0E:8E:AA:B8:34:D6:81 Authority key identifier: 26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20 Certificate issuer: /CN=260b2bc45477c81d774daa0c28ab44b774ba0920 Certificate serial: 01960B678C30F7C4532C6D893C9BFD714E0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.mft Manifest number: 0C3D Signing time: Sun 06 Apr 2025 14:00:57 +0000 Manifest this update: Sun 06 Apr 2025 14:00:57 +0000 Manifest next update: Mon 07 Apr 2025 14:00:57 +0000 Files and hashes: 1: 1-vjUFL9eUKNOH3DNHSKdRzXwLrc.roa (hash: E1OFkXJ2w0WBHM/2jJG2VFE7A0dOsn0uyLBEvDN92CY=) 2: 9Qp1lz6gdlmei4XDqjlb77aIr4c.roa (hash: /GHn25dkvuTMHnSPHF1/eiqXw/UVrF8KRTTdkWjQJCk=) 3: ElmmUi2BA5xfl3RGwKTnaLyhbiU.roa (hash: 7/HLb9yrgfenir+DMxSIjZmUv+UwMCuizDLWvP+aaNw=) 4: JgsrxFR3yB13TaoMKKtEt3S6CSA.crl (hash: gvHOtGeWolEuj3/qlvFes/li5pg/Hs7njaeB1AEKr7Q=) 5: TiJ8h1qlcilwepecSwvXjw5DbUQ.roa (hash: i3FrVocCPmFO/RIdZF92/i/Jo2J9RsAjOqfHgmiRxmw=) 6: YHHGCGfkm3-ojbm89zUZpVdC4H8.roa (hash: UELjE4JA89B/hW6SiWgp/75eVMvYsE/BMGGrkk8YeKo=) 7: YLMZPsprpRxhmDT0WIbhqx6F--Y.roa (hash: tFoaXBl2VXqD6JFS6seQ88nt8uiv/guhHad/lARB2fE=) 8: csEf9syoFNTGaMlU5MhYUuOIBiQ.roa (hash: SLfRD5P3fO1tXNQj8q98v89NmGiqv9196LApLqBPnXA=) 9: en8nzWGtf10islE8QqdlR4YhdFI.roa (hash: U8OOoKnf7CTO1HtbX3OrrQUalNfVeLzf0c6wknYG0oc=) 10: pAFGuOmFiinmNtzDNIWAAHCBzL8.roa (hash: smnkSIWrC+aFHsjL39EpGOubWh1B5xY83hqBzhP60WM=) 11: sNX7m19Q4f93jZSLto3SXxcMlN0.roa (hash: 6kJ1u/k/CP7HU6lSzylQyIDCN0aXiAlRkfuNvpisAHg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.mft rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 07 Apr 2025 07:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:0b:67:8c:30:f7:c4:53:2c:6d:89:3c:9b:fd:71:4e:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=260b2bc45477c81d774daa0c28ab44b774ba0920 Validity Not Before: Apr 6 14:00:57 2025 GMT Not After : Apr 7 14:00:57 2025 GMT Subject: CN=8ba20abd64f82b78fbe874faef0e8eaab834d681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:29:d6:05:e2:a0:49:cb:92:e8:89:6a:50:41: b7:f7:73:0b:dd:c7:eb:02:51:fa:94:aa:ad:c2:94: 3b:62:4a:0f:1f:6b:36:df:1d:26:38:70:22:ab:4b: 0d:e0:f4:47:9d:c0:10:60:f7:81:9a:48:9e:d1:2a: 9e:b8:c4:ad:86:56:7c:7d:88:02:3b:5c:d7:c1:c8: b8:e1:9a:d4:ed:1c:1a:72:69:db:7e:21:a6:20:f7: 6b:83:d0:1b:7d:a0:c1:34:39:b5:51:77:37:8a:20: 50:78:27:f4:67:15:66:27:f4:dc:fd:89:28:fe:82: 94:df:0e:87:5c:e0:19:28:86:f8:3e:0a:30:62:f6: e9:62:9c:34:8b:05:01:d6:c8:91:cf:6a:51:c2:5f: 20:59:72:95:f4:d4:62:28:59:da:4e:98:83:35:fb: 71:bc:26:25:9d:46:9e:cc:38:3a:fd:9f:6f:c0:54: f2:d6:af:1e:ed:94:f6:04:93:50:d1:68:43:cc:28: 3b:4a:5d:eb:76:1b:46:0e:dc:24:eb:be:a1:59:a2: 49:4a:82:f0:e9:a4:53:16:b9:a8:3c:c6:50:96:f2: 24:ed:99:c7:26:16:62:78:15:dc:94:88:d7:78:fb: a7:b2:1c:e3:8d:c3:a5:a8:8d:13:8f:1d:ee:58:57: 1b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:A2:0A:BD:64:F8:2B:78:FB:E8:74:FA:EF:0E:8E:AA:B8:34:D6:81 X509v3 Authority Key Identifier: keyid:26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:68:7a:de:03:34:aa:64:7c:e3:ce:dc:25:58:63:e8:4f:a2: 0d:03:c6:85:19:0e:ae:12:b7:c0:03:0c:06:b5:2a:2b:a8:49: a7:dd:93:bc:4c:5a:b0:ac:96:be:6e:cb:4f:c9:24:1d:b6:d5: 24:31:d6:2e:30:fe:26:56:38:99:b3:af:c4:c0:ff:70:57:a4: e2:9c:2d:07:52:9f:dd:7e:c0:5f:fb:6c:ec:ab:1a:f9:ed:3c: 83:e9:6a:9e:91:5a:ae:6c:76:e2:6f:7d:8a:6e:1f:55:88:ff: 96:77:5b:9d:c6:06:d6:33:aa:ca:2d:13:b0:ca:71:82:5e:24: 3f:80:a8:4a:28:54:94:b3:07:e4:09:21:4a:ff:de:14:b7:c1: 22:8f:78:39:ca:7d:1a:5c:98:8e:e3:8e:86:88:e5:7c:43:79: 8e:ae:fc:04:94:f2:0e:c6:f0:1b:b4:d8:89:9f:a4:ac:f4:9b: 54:07:54:2a:1c:c5:0c:d1:bf:72:01:5c:7b:bd:7b:1d:09:0c: 6a:75:d0:59:d3:09:28:4c:61:d2:13:96:6e:a1:c1:5b:e1:68: a4:8c:30:cb:b7:cc:8f:91:b1:39:63:ca:fb:ff:8a:82:2f:b5: 62:66:c9:93:30:71:89:1f:fc:66:a6:2a:e2:5d:13:f0:9a:f3: 6c:0a:19:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYLZ4ww98RTLG2JPJv9cU4LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2MGIyYmM0NTQ3N2M4MWQ3NzRkYWEwYzI4YWI0NGI3NzRi YTA5MjAwHhcNMjUwNDA2MTQwMDU3WhcNMjUwNDA3MTQwMDU3WjAzMTEwLwYDVQQD Eyg4YmEyMGFiZDY0ZjgyYjc4ZmJlODc0ZmFlZjBlOGVhYWI4MzRkNjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSnWBeKgScuS6IlqUEG393ML3cfr AlH6lKqtwpQ7YkoPH2s23x0mOHAiq0sN4PRHncAQYPeBmkie0SqeuMSthlZ8fYgC O1zXwci44ZrU7RwacmnbfiGmIPdrg9AbfaDBNDm1UXc3iiBQeCf0ZxVmJ/Tc/Yko /oKU3w6HXOAZKIb4PgowYvbpYpw0iwUB1siRz2pRwl8gWXKV9NRiKFnaTpiDNftx vCYlnUaezDg6/Z9vwFTy1q8e7ZT2BJNQ0WhDzCg7Sl3rdhtGDtwk676hWaJJSoLw 6aRTFrmoPMZQlvIk7ZnHJhZieBXclIjXePunshzjjcOlqI0Tjx3uWFcbDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIuiCr1k+Ct4++h0+u8Ojqq4NNaBMB8GA1UdIwQY MBaAFCYLK8RUd8gdd02qDCirRLd0ugkgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmdzcnhGUjN5QjEzVGFvTUtLdEV0M1M2Q1NBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83YjEyMDUtMzQ1MC00ZTkwLThiMTQt MTdlNjZjMWZkM2QxLzEvSmdzcnhGUjN5QjEzVGFvTUtLdEV0M1M2Q1NBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS83YjEyMDUtMzQ1MC00ZTkwLThiMTQtMTdlNjZjMWZkM2Qx LzEvSmdzcnhGUjN5QjEzVGFvTUtLdEV0M1M2Q1NBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArWh63gM0 qmR8487cJVhj6E+iDQPGhRkOrhK3wAMMBrUqK6hJp92TvExasKyWvm7LT8kkHbbV JDHWLjD+JlY4mbOvxMD/cFek4pwtB1Kf3X7AX/ts7Ksa+e08g+lqnpFarmx24m99 im4fVYj/lndbncYG1jOqyi0TsMpxgl4kP4CoSihUlLMH5AkhSv/eFLfBIo94Ocp9 GlyYjuOOhojlfEN5jq78BJTyDsbwG7TYiZ+krPSbVAdUKhzFDNG/cgFce717HQkM anXQWdMJKExh0hOWbqHBW+FopIwwy7fMj5GxOWPK+/+Kgi+1YmbJkzBxiR/8ZqYq 4l0T8JrzbAoZDw== -----END CERTIFICATE-----Generated at Sun Apr 6 16:56:08 2025 by rpki-client