$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft File: h3e1s29m4TxDiMmTTaUHhWUV0HM.mft (raw, json) Hash identifier: hYk/64T9QnnmYsv/c6t6j7RPdtcq8xvLKTGRCsi7CDQ= Subject key identifier: 3B:C0:FD:61:9A:C6:C2:77:CB:66:EF:90:1B:63:BB:CC:86:1D:6D:32 Authority key identifier: 87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73 Certificate issuer: /CN=8777b5b36f66e13c4388c9934da507856515d073 Certificate serial: 01965726181B85C475A64FD6E666FB298B5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft Manifest number: 150C Signing time: Mon 21 Apr 2025 07:00:36 +0000 Manifest this update: Mon 21 Apr 2025 07:00:36 +0000 Manifest next update: Tue 22 Apr 2025 07:00:36 +0000 Files and hashes: 1: A6JGXr1SyvHwPS6KzQQ8jkJldSU.roa (hash: VUYWyhNS6ep9E7uE71FApUlIqX9LiZIrh4n1ahAsDso=) 2: TWqw0MHPHKoktRTg5xIAtx78yEM.roa (hash: PUFyi4vEY3nAKmSSQP1jmjE/95RjFLcOq0y69mlpJOM=) 3: V8TNai625jKsZmcQ_WZGrCSKrE4.roa (hash: vysxGoIRN63RAVmh7o1GuXI9idOSf2H3bNvDZcwjEdY=) 4: e6_LhXTjf-f7BeHN6H1yNQzFGts.roa (hash: li+C+e/TyH8gT/zIILB28hzFIhULplGnnZiYiHV9ZRc=) 5: gSW8bbfsJ2jQqNlN9dZhEGJFXP8.roa (hash: vU4Z2mH5UQmCsli4v0J2JenJSa7jKRcKq2cUWRszffQ=) 6: h3e1s29m4TxDiMmTTaUHhWUV0HM.crl (hash: Ind+VKk7sTu8igJjhQ1oZE+G3Wn1JjFCTfrZt1hofME=) 7: i0jLZUHWlEbTjItngq0hMz6l6J0.roa (hash: +fs8xaq1rUOg67Y/1DC1FdTxOQepuB3UaDQqJ+epLzo=) 8: mYsvImsoUU3Ub9pNivjve1CZzdk.roa (hash: 6hty2hcbqDF/bBkU2gmepu7xCrLxFUdqyzgzAZcFQt8=) 9: mcMvNLDOLrmNQ78kKv9_JRA7DZE.roa (hash: VPPZszck1h4O1z0bSD4PbxyUsa9F/mGv1ZkFIvAMZag=) 10: rIHZb_5Mc64A87xwROb5WoKPTaQ.roa (hash: h28IpYVJGdPeChoNExuao8goV9hXIxbKmOle/GHbji8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Apr 2025 07:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:57:26:18:1b:85:c4:75:a6:4f:d6:e6:66:fb:29:8b:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8777b5b36f66e13c4388c9934da507856515d073 Validity Not Before: Apr 21 07:00:36 2025 GMT Not After : Apr 22 07:00:36 2025 GMT Subject: CN=3bc0fd619ac6c277cb66ef901b63bbcc861d6d32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ef:95:2d:7c:54:6a:6f:c2:37:5e:7f:1d:c3: df:da:96:4b:de:71:14:c0:a7:98:62:6f:e6:6d:5d: f6:4f:f1:0c:27:72:83:e0:45:6f:ba:4e:52:9b:b6: e2:9b:f5:91:a6:6b:c2:21:1f:af:40:9b:77:db:1c: 71:6d:19:c2:cc:47:e2:86:c7:fc:2b:05:e1:4b:61: f1:3a:ba:2d:1b:7f:5e:65:f8:77:70:86:08:af:51: 3d:8d:6a:23:45:41:f6:82:df:0e:1a:8b:7a:04:b5: cf:2d:e3:0b:fd:1a:e9:f3:cd:f6:52:82:23:cc:d8: b3:5c:d3:67:e0:2e:c5:4e:0a:b3:c7:7b:28:bd:91: a2:f5:8b:05:b0:69:73:12:0e:c4:9b:a4:31:63:8f: 95:ac:5f:51:f4:6b:0f:ba:ff:47:99:20:02:2f:cc: d4:17:b6:5d:0c:70:d4:3d:89:e0:d8:71:91:78:fc: c4:ba:07:ba:f3:d2:04:34:99:fd:fa:e9:4d:05:d3: 12:a6:c8:67:9c:01:a3:20:ee:af:d2:6b:e7:2b:5d: 72:df:02:55:99:a2:9a:a8:80:59:ba:c6:ee:5e:4c: 23:0b:e5:f6:13:8e:ea:e7:f9:74:b0:d2:ab:47:1b: dc:39:55:20:b4:93:75:36:dc:dc:b0:16:b9:76:ec: 6d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:C0:FD:61:9A:C6:C2:77:CB:66:EF:90:1B:63:BB:CC:86:1D:6D:32 X509v3 Authority Key Identifier: keyid:87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:c7:e8:67:ae:1a:85:1f:7e:74:3a:c6:d0:61:cf:2d:ea:5a: b4:c9:e7:12:aa:a1:06:9d:54:4d:ff:2d:79:46:16:b7:2e:10: a7:3d:04:71:7e:49:e7:b3:ce:39:22:0c:31:5e:23:63:8c:53: b7:06:1b:55:59:f6:2b:ff:6a:30:f5:e1:aa:90:ed:ac:92:0b: 1e:c7:48:1c:da:4b:97:19:9b:4a:b6:c4:a6:0a:1b:40:89:e7: b5:9b:88:d9:a3:38:43:66:c5:31:8a:66:3c:7e:c7:1d:b2:17: 7c:84:64:44:e0:92:e4:e6:7d:c5:29:85:43:d4:5c:38:94:4c: cf:2b:e1:30:23:0a:08:a1:d6:18:2a:e7:0a:8e:75:bd:39:cd: 2f:d8:d9:1a:23:df:ea:27:29:cd:d9:85:e2:82:38:f4:f4:99: 19:e8:82:c4:f9:ce:7c:f1:2c:d7:18:34:72:b3:89:b3:0e:26: bc:13:d2:44:50:4c:d9:21:7f:31:8b:c0:0b:47:0a:58:9f:a7: ff:29:e1:c5:5d:58:f3:d0:97:4c:e2:1e:41:4d:42:35:f9:70: 13:b5:02:d0:71:eb:b2:53:7a:0f:ba:e7:20:25:90:e2:7e:40: 8e:2f:b9:7b:1b:aa:49:57:7c:76:f2:54:84:d0:08:a9:a9:8c: 40:5c:72:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZXJhgbhcR1pk/W5mb7KYtcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NzdiNWIzNmY2NmUxM2M0Mzg4Yzk5MzRkYTUwNzg1NjUx NWQwNzMwHhcNMjUwNDIxMDcwMDM2WhcNMjUwNDIyMDcwMDM2WjAzMTEwLwYDVQQD EygzYmMwZmQ2MTlhYzZjMjc3Y2I2NmVmOTAxYjYzYmJjYzg2MWQ2ZDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3++VLXxUam/CN15/HcPf2pZL3nEU wKeYYm/mbV32T/EMJ3KD4EVvuk5Sm7bim/WRpmvCIR+vQJt32xxxbRnCzEfihsf8 KwXhS2HxOrotG39eZfh3cIYIr1E9jWojRUH2gt8OGot6BLXPLeML/Rrp8832UoIj zNizXNNn4C7FTgqzx3sovZGi9YsFsGlzEg7Em6QxY4+VrF9R9GsPuv9HmSACL8zU F7ZdDHDUPYng2HGRePzEuge689IENJn9+ulNBdMSpshnnAGjIO6v0mvnK11y3wJV maKaqIBZusbuXkwjC+X2E47q5/l0sNKrRxvcOVUgtJN1NtzcsBa5duxtdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDvA/WGaxsJ3y2bvkBtju8yGHW0yMB8GA1UdIwQY MBaAFId3tbNvZuE8Q4jJk02lB4VlFdBzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2Mt ZWQxZjMwY2MxYzU3LzEvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2MtZWQxZjMwY2MxYzU3 LzEvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk8foZ64a hR9+dDrG0GHPLepatMnnEqqhBp1UTf8teUYWty4Qpz0EcX5J57POOSIMMV4jY4xT twYbVVn2K/9qMPXhqpDtrJILHsdIHNpLlxmbSrbEpgobQInntZuI2aM4Q2bFMYpm PH7HHbIXfIRkROCS5OZ9xSmFQ9RcOJRMzyvhMCMKCKHWGCrnCo51vTnNL9jZGiPf 6icpzdmF4oI49PSZGeiCxPnOfPEs1xg0crOJsw4mvBPSRFBM2SF/MYvAC0cKWJ+n /ynhxV1Y89CXTOIeQU1CNflwE7UC0HHrslN6D7rnICWQ4n5Aji+5exuqSVd8dvJU hNAIqamMQFxyaw== -----END CERTIFICATE-----Generated at Mon Apr 21 15:03:29 2025 by rpki-client