$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft File: FL7g69BrS4EvnhNxbiXxw8PRTMY.mft (raw, json) Hash identifier: AqzU7QiDCmT7zNYQ44wkEzznpkcFe4RHhVDhhA19L9I= Subject key identifier: B2:60:CA:BF:ED:F7:F2:B9:95:CC:4D:BC:88:1C:77:93:F1:07:0B:8A Authority key identifier: 14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6 Certificate issuer: /CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6 Certificate serial: 019616593E60BF54F2EED389537BB2326F2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft Manifest number: 14F1 Signing time: Tue 08 Apr 2025 17:01:09 +0000 Manifest this update: Tue 08 Apr 2025 17:01:09 +0000 Manifest next update: Wed 09 Apr 2025 17:01:09 +0000 Files and hashes: 1: 08gO2xhzYB9MrOPyUgzVPTFsEks.roa (hash: uuTu5Ilmhz+ZTWX0lT3lDAgUnguN/hhWVP6RiQFWbO0=) 2: 2WvVwy-PRL5GLrJD80GhjHcE31U.roa (hash: V+gab5/KP1zLki+Ce4a8elUju3qZMThRlJep3bHdmjU=) 3: DlttiF7sTnpZBCWr79VnOWAb-Cw.roa (hash: 1I+LBYXesIZu1L3F5YYgW1sIY18eU3XqF+UKWnyiXM4=) 4: E_7lfxRnXL43BaxS0BR35ae28-8.roa (hash: bsdbl8+gmpOB2GMwRa9PUSXIwKLCbxh9y6aoGWsrfmA=) 5: FL7g69BrS4EvnhNxbiXxw8PRTMY.crl (hash: hDJwk5xRo5Ic6CwU7H+66HW9Kcr0T3lxvedurW0Q1i8=) 6: LVCOq86MWXkEBLGlXajn0ZENzKo.roa (hash: za/dFUKCElp0tRhTQ1rRsumZkCaRLeXmcSoTGiaBfbk=) 7: MRT2LF_aEOeFlu0z18oRZu0OKoQ.roa (hash: RWWOAldqVltxk1TROg2IYHHxbCDwXOV9TETvXzcXc50=) 8: RS51aQgOg2IG7Kd3gYmS2BKt-mo.roa (hash: 04jNZ5D66dkBNT8VoJCjjfzY2tYl+DQ4VUJcAaUENu8=) 9: UkVGZcePqwW-KxvbBYt50liz4UM.roa (hash: HUtG9jf1oU5Vm0ZUnGnbYEpFmR4EvSJFZLnuUG/MWnk=) 10: kVpC8L3NVBoBD0uRMCZwUe0L0hI.roa (hash: ZhoOhvNlGipJNbOy/H0tyIYa78nFkIWP7NHbAfT2b3I=) 11: uqIp0R_dvDEsqpriRwcj3sItHGw.roa (hash: 0M8ijVLRqjXM3pBRfR1epwx7A0hp1U4azXVWoA9LspU=) 12: wNeMSi5MrXHKJ9Bcd1J1t9TUVxs.roa (hash: 3TBrkx3yBNsIFnG+W7zhjJSop/DWdhzl60pc+HRX438=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 09 Apr 2025 13:43:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:16:59:3e:60:bf:54:f2:ee:d3:89:53:7b:b2:32:6f:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6 Validity Not Before: Apr 8 17:01:09 2025 GMT Not After : Apr 9 17:01:09 2025 GMT Subject: CN=b260cabfedf7f2b995cc4dbc881c7793f1070b8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:44:ea:0d:5f:e1:ba:8b:23:9c:a5:4a:80:65: 65:8a:64:f4:91:61:42:f9:bf:bd:b3:14:49:3f:c0: 8f:39:1d:6f:de:e1:24:df:bb:bf:df:0d:f4:d4:80: c0:19:c9:d1:11:7d:7d:1f:21:a8:8d:13:39:aa:cf: bc:82:3d:fa:9b:57:3b:67:87:e6:dd:ff:4d:38:a0: 48:d4:b9:45:15:15:5a:e8:60:80:1d:45:b4:01:e6: 8f:66:a2:fa:4d:f4:ab:38:bc:68:db:3c:ac:78:bd: 26:bb:2f:be:a6:9d:60:d5:f8:a6:f5:15:f6:f9:63: 06:b2:c7:c6:18:94:fd:53:51:33:04:54:c7:0b:bf: 6d:30:9a:97:d6:5d:af:22:6e:c7:34:9a:fe:b9:8e: 9b:10:25:92:aa:ed:cd:1d:42:6f:07:4f:92:83:f7: 14:cc:80:15:d5:75:d7:ae:de:40:6d:f3:80:00:a0: ad:b0:e3:e8:a0:24:03:66:f6:c2:9c:69:4d:71:18: 4e:71:c3:33:93:87:29:de:5a:94:29:68:7d:58:cd: bf:78:13:e6:d7:57:fe:f9:a5:53:cc:7c:e3:bf:95: b9:9f:4f:21:98:0a:c4:ed:49:35:e3:56:1e:d5:99: a6:ce:d8:95:b7:1d:31:93:ee:e9:9e:ee:1e:8d:b4: 03:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:60:CA:BF:ED:F7:F2:B9:95:CC:4D:BC:88:1C:77:93:F1:07:0B:8A X509v3 Authority Key Identifier: keyid:14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:6e:2e:bf:9c:f6:80:86:64:37:e2:3e:87:65:12:11:cd:76: f5:45:d9:c8:42:15:dc:0f:6e:ac:4c:49:c9:43:dc:36:d7:38: 93:0b:c4:3a:24:bb:36:9f:b4:59:2c:d2:61:11:07:44:47:3d: 3e:54:ef:39:23:61:e0:d4:4b:17:c4:07:72:b3:24:ef:13:80: 80:5b:a9:69:52:d9:3e:0f:de:21:84:8b:9d:dc:4f:a0:42:d6: 4d:5f:94:26:8b:b7:ed:16:18:64:0f:d8:a2:5f:9d:2c:d2:cf: 5b:4c:6d:a9:7f:e5:4b:7f:39:90:ba:57:b6:7d:01:f0:1f:5c: ae:cd:a2:54:67:ea:d4:4b:5c:70:b0:cd:44:ea:b5:3c:c8:14: 4f:3e:d0:42:8c:15:4f:d4:9e:f3:b7:41:6b:7f:0e:c3:b8:d1: 15:dd:26:0c:53:e5:68:f6:1c:9f:35:14:21:f3:76:5b:7a:40: 0f:b7:f6:ea:cb:34:7e:2a:9b:85:93:7f:5c:ff:35:14:70:df: 2f:15:1a:5d:09:85:ea:a7:88:98:69:9b:97:8b:43:66:2f:ae: 78:64:08:30:1e:ac:6d:9f:c7:ac:fd:1e:81:86:6f:b7:29:c2: 3a:d8:34:6c:4d:18:91:8f:f8:48:a4:bd:52:96:3c:fb:9e:12: 77:55:48:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYWWT5gv1Ty7tOJU3uyMm8sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0YmVlMGViZDA2YjRiODEyZjllMTM3MTZlMjVmMWMzYzNk MTRjYzYwHhcNMjUwNDA4MTcwMTA5WhcNMjUwNDA5MTcwMTA5WjAzMTEwLwYDVQQD EyhiMjYwY2FiZmVkZjdmMmI5OTVjYzRkYmM4ODFjNzc5M2YxMDcwYjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0TqDV/huosjnKVKgGVlimT0kWFC +b+9sxRJP8CPOR1v3uEk37u/3w301IDAGcnREX19HyGojRM5qs+8gj36m1c7Z4fm 3f9NOKBI1LlFFRVa6GCAHUW0AeaPZqL6TfSrOLxo2zyseL0muy++pp1g1fim9RX2 +WMGssfGGJT9U1EzBFTHC79tMJqX1l2vIm7HNJr+uY6bECWSqu3NHUJvB0+Sg/cU zIAV1XXXrt5AbfOAAKCtsOPooCQDZvbCnGlNcRhOccMzk4cp3lqUKWh9WM2/eBPm 11f++aVTzHzjv5W5n08hmArE7Uk141Ye1ZmmztiVtx0xk+7pnu4ejbQD5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLJgyr/t9/K5lcxNvIgcd5PxBwuKMB8GA1UdIwQY MBaAFBS+4OvQa0uBL54TcW4l8cPD0UzGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUt ZDFiYjZiNGRkNzAxLzEvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUtZDFiYjZiNGRkNzAx LzEvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnG4uv5z2 gIZkN+I+h2USEc129UXZyEIV3A9urExJyUPcNtc4kwvEOiS7Np+0WSzSYREHREc9 PlTvOSNh4NRLF8QHcrMk7xOAgFupaVLZPg/eIYSLndxPoELWTV+UJou37RYYZA/Y ol+dLNLPW0xtqX/lS385kLpXtn0B8B9crs2iVGfq1EtccLDNROq1PMgUTz7QQowV T9Se87dBa38Ow7jRFd0mDFPlaPYcnzUUIfN2W3pAD7f26ss0fiqbhZN/XP81FHDf LxUaXQmF6qeImGmbl4tDZi+ueGQIMB6sbZ/HrP0egYZvtynCOtg0bE0YkY/4SKS9 UpY8+54Sd1VIBA== -----END CERTIFICATE-----Generated at Tue Apr 8 19:06:31 2025 by rpki-client