$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft File: 3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft (raw, json) Hash identifier: y5783l+uaLFrs8BdILkmnhNF2FfBaUBvj7iHc29iGHU= Subject key identifier: C8:FA:34:01:24:E5:6A:79:AA:A7:7C:58:E3:91:0D:89:F4:0D:4E:E4 Authority key identifier: DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20 Certificate issuer: /CN=dc5c532f3cd5e11e19feb19655d4f19926f02020 Certificate serial: 019655DD3C1F466A7CAFD63E77856BD7681F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft Manifest number: 0329 Signing time: Mon 21 Apr 2025 01:01:24 +0000 Manifest this update: Mon 21 Apr 2025 01:01:24 +0000 Manifest next update: Tue 22 Apr 2025 01:01:24 +0000 Files and hashes: 1: 1-WZZnjR8DlZqLUibcRUcYzm0QDU.roa (hash: /lrkBjM9dGMr6D7JGPVc5syjsFBtCzanEGLfhb4dKM0=) 2: 3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl (hash: RBNN/TpYvO9QKQ2B7InCzBPH+17uz63cBQguPRbbWyo=) 3: 3jZyUpaNiuxwzYQ21tChGVq7yOY.roa (hash: rlRJ/UNIhVQKGyw4Wr/cDFs+VO81jRk6SUephZD3g4o=) 4: 5khyx2A9d0Q0e3huYGosj5KCOlo.roa (hash: m/iIxHfeWDlWWpGAIqzgFb7iOcTekZb0i9Y2aBX+dy4=) 5: 7cUCY2EysYK09Y_F1tsMsp_B8MU.roa (hash: el4sZWuoJZOOcj14KO5Yq16IPPIz+c0KckgEteIx4YM=) 6: ILbeank0F3xhLsgBl0NZfpBZFig.roa (hash: 8RlSwtQK5lhGbhOtyX4cacpgfYuG3exGirW2aa5+FLI=) 7: KBQWtgPCMeq_IbONzoF64FnlzwE.roa (hash: EZ3seNeYjAQFpAfGwhXlV+Wya2vQO7lfYcVB84EkqA4=) 8: PBiom43THD1F1SBGVmDFN9WwnMo.roa (hash: EVRLL8Mxobz8XRwc26H2JAHWkuwMiYakvll8d/79CJQ=) 9: TnqWiZSrJP5FZLgDlXk-iaFi5k8.roa (hash: 8gjKeaSL9Im1mKl/CKczQDSLzI2OEBo3YD5qQoY5RT0=) 10: VXGu7cRy3TUPyfgbIf2vopAF1Lc.roa (hash: 40vRMPsPFPCFnDUP/ikEgH9v+gi1iVOQkLoxtLSkOqE=) 11: ZaSQVTZm2f4ebc71HIkhrpqqsuk.roa (hash: X8/L0T6q0bM6s++7u2MQIu4RlHWQNdJcKAvE7bH3VP4=) 12: jldP_NkgEKrLmFaYQtB6TuhGzRs.roa (hash: Cz3xmiLxKccg4wAv608JqhvYxIHIutFBcyhT8Ond0Zs=) 13: oQk2rT9-TmTMiTawX34MBI0QTrc.roa (hash: 6J7fvMBzz5wnq8Q655iOLvmHY5jKT0LznvTL3IrQ8Xw=) 14: unsmmkYBpbXrCubGO7XS6N7I7QM.roa (hash: /TaQOoUPP+hWic0pvVLJBHflkZLzIc8T4AFkDEL7yKk=) 15: w9Z-5nLehvUlBeOI2h5dSoEBLSw.roa (hash: dyC69X2s5yoLrmCLq7pBQHExLj0vbp1A/uwW5wlqEug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Apr 2025 01:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:55:dd:3c:1f:46:6a:7c:af:d6:3e:77:85:6b:d7:68:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc5c532f3cd5e11e19feb19655d4f19926f02020 Validity Not Before: Apr 21 01:01:24 2025 GMT Not After : Apr 22 01:01:24 2025 GMT Subject: CN=c8fa340124e56a79aaa77c58e3910d89f40d4ee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:38:10:bc:d5:9f:16:56:79:96:5d:56:0e:95: b8:af:02:5e:04:1b:7a:f2:32:4a:09:8a:1f:0a:b8: fa:e4:b4:da:27:e9:d2:37:5d:41:89:b6:e7:17:2a: 52:78:24:d2:bc:a7:0e:ea:dd:a7:30:99:be:34:6e: 08:dc:2c:51:4a:33:1c:09:b2:2b:35:e9:8b:fc:ad: dc:21:12:ab:90:7e:db:cb:5a:ef:d2:da:13:b7:66: 11:c7:42:a3:f9:75:3e:bd:a7:81:37:e0:a5:9a:f8: 10:7a:30:e6:cc:44:6c:4f:9b:1e:b0:65:0e:86:22: fb:c4:e9:33:72:0b:9a:de:57:d3:6f:c7:77:69:7c: 57:2b:de:f6:93:99:61:f0:1f:75:45:fb:9b:5c:c8: 83:56:0a:f2:d6:73:3a:cf:29:b1:32:8b:a1:35:b3: a8:2b:9a:ab:5c:ad:12:db:24:0b:ad:c2:8e:70:d3: 76:0f:75:42:16:60:20:dc:f2:1d:d6:d8:0b:bd:4f: f9:ec:86:fa:dd:2d:4b:63:00:5d:df:c3:39:e0:21: a0:20:ed:3a:0e:30:6c:bb:0e:fb:9f:bb:98:86:ff: 26:9a:65:e6:1a:c8:52:f0:22:09:99:e3:71:7d:10: d8:aa:29:d9:2d:0d:c5:22:ff:ac:7f:1a:0a:03:48: 9b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:FA:34:01:24:E5:6A:79:AA:A7:7C:58:E3:91:0D:89:F4:0D:4E:E4 X509v3 Authority Key Identifier: keyid:DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:7f:24:92:8d:ab:16:a1:5b:66:d3:81:5c:40:17:48:d4:22: da:4f:c4:c5:a9:c5:e3:b4:72:f1:0f:12:ba:37:15:57:9c:71: 96:32:03:68:5d:f2:a8:0f:fa:b1:94:e0:39:c7:b0:19:8a:0c: 4b:77:c8:c1:55:44:af:8b:57:19:d3:d0:7a:15:bc:2b:d4:d7: 86:09:ae:cd:83:66:82:e0:82:c9:6b:89:13:1d:f2:2e:99:8a: 8b:1b:48:ec:ff:84:c3:3c:6d:cf:ad:de:8f:fa:e6:30:8e:1b: 6e:c1:0c:49:1d:87:65:28:c3:30:36:4d:eb:d0:c1:59:18:28: a3:a6:42:04:88:f2:f2:df:c2:21:04:fe:41:1b:dc:8f:2c:5b: 9a:17:b2:b1:d1:1b:9b:c9:66:75:01:03:94:ef:21:76:ae:47: 5f:35:84:dd:ca:e3:f9:9e:a9:41:11:f7:ef:53:c6:87:6f:8f: 61:2f:ec:2d:13:74:d5:a0:da:f2:38:98:63:0e:96:91:9c:17: 17:0b:bd:44:54:19:3c:46:8c:46:4f:67:55:80:25:27:14:6c: 59:af:7b:94:3e:77:bc:c7:52:ba:25:5b:05:32:24:f7:cf:08: 80:78:39:b5:41:b6:e4:00:02:59:34:e5:5d:2e:d2:76:88:a5: 35:a8:93:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZV3TwfRmp8r9Y+d4Vr12gfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNWM1MzJmM2NkNWUxMWUxOWZlYjE5NjU1ZDRmMTk5MjZm MDIwMjAwHhcNMjUwNDIxMDEwMTI0WhcNMjUwNDIyMDEwMTI0WjAzMTEwLwYDVQQD EyhjOGZhMzQwMTI0ZTU2YTc5YWFhNzdjNThlMzkxMGQ4OWY0MGQ0ZWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTgQvNWfFlZ5ll1WDpW4rwJeBBt6 8jJKCYofCrj65LTaJ+nSN11BibbnFypSeCTSvKcO6t2nMJm+NG4I3CxRSjMcCbIr NemL/K3cIRKrkH7by1rv0toTt2YRx0Kj+XU+vaeBN+ClmvgQejDmzERsT5sesGUO hiL7xOkzcgua3lfTb8d3aXxXK972k5lh8B91RfubXMiDVgry1nM6zymxMouhNbOo K5qrXK0S2yQLrcKOcNN2D3VCFmAg3PId1tgLvU/57Ib63S1LYwBd38M54CGgIO06 DjBsuw77n7uYhv8mmmXmGshS8CIJmeNxfRDYqinZLQ3FIv+sfxoKA0ibZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMj6NAEk5Wp5qqd8WOORDYn0DU7kMB8GA1UdIwQY MBaAFNxcUy881eEeGf6xllXU8Zkm8CAgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEt NGI2YzFjZjlmZTRmLzEvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEtNGI2YzFjZjlmZTRm LzEvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ38kko2r FqFbZtOBXEAXSNQi2k/ExanF47Ry8Q8SujcVV5xxljIDaF3yqA/6sZTgOcewGYoM S3fIwVVEr4tXGdPQehW8K9TXhgmuzYNmguCCyWuJEx3yLpmKixtI7P+Ewzxtz63e j/rmMI4bbsEMSR2HZSjDMDZN69DBWRgoo6ZCBIjy8t/CIQT+QRvcjyxbmheysdEb m8lmdQEDlO8hdq5HXzWE3crj+Z6pQRH371PGh2+PYS/sLRN01aDa8jiYYw6WkZwX Fwu9RFQZPEaMRk9nVYAlJxRsWa97lD53vMdSuiVbBTIk988IgHg5tUG25AACWTTl XS7SdoilNaiT4g== -----END CERTIFICATE-----Generated at Mon Apr 21 04:06:40 2025 by rpki-client