$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft File: 437h7O0Z-KCjpjW_qiZCk-NDd5U.mft (raw, json) Hash identifier: TpxGFgsJ955QSBMl9Lwke66i2S+oBwnka1ginzP5gIY= Subject key identifier: FD:07:2B:CD:F5:EC:37:52:BF:AC:05:0D:1B:AB:33:B6:14:79:E9:EE Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95 Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795 Certificate serial: 019650119E5C3EAB4B0ADA068EDF47F47750 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft Manifest number: 1523 Signing time: Sat 19 Apr 2025 22:00:54 +0000 Manifest this update: Sat 19 Apr 2025 22:00:54 +0000 Manifest next update: Sun 20 Apr 2025 22:00:54 +0000 Files and hashes: 1: 1-gMcB2tX1aJagc2aIqyie1JosUM.roa (hash: e/zYIsHTFYDxeTkK5hyPfn+knzLFEB1hZl3ZQmxyCc0=) 2: 437h7O0Z-KCjpjW_qiZCk-NDd5U.crl (hash: tTS1FNoLlgCU21FnuSxoj8gEuC6T/+QahHA/G1v3NaA=) 3: 9eNXipbIkyVdZ3T8NqmEYXwSLqE.roa (hash: BrQPu/EjsIQipBfThN07mTNPYYMcHP60+6UvtDcOjIw=) 4: EFuxyCYga5KedfhIetzIM8Wqp3Y.roa (hash: O+IR1hZ8a8RGzU0SmSAJy1+brABxzqq2amGl3toGZFo=) 5: HCRZ7kidZrpHRM8SX0jXI98_QOg.roa (hash: HUPg13X8WTvtMO+SgQO0HEMJKkRMS4NI1byIhfG01j4=) 6: JS9UWtZttem3o1fXhyj6cDhffLI.roa (hash: 2i5hM4JyTJhdNStU0tEfjgguQh3ME+ydQZVTRw+h18A=) 7: RX5TjbcaEwYk1IhE69eAlXBXNyQ.roa (hash: c0wkjrnxIEHQj5HUBmajY9pyKvCItPr80kJiD5UVJ6c=) 8: TxnmQLTJ7RG9p8EWlmGMzoVFKYM.roa (hash: ya4Fhh2AAgBvWI3PefXXRZJhuG79XQoe+sEudA3lm48=) 9: Ug41i06gdv9Ukc46NZ5XcrOupdE.roa (hash: llRNNcmXFkFqLY4QgsxGuCXjBef7WAi2K7CKwj9Mkc8=) 10: _z7lUoI1zB7ijV7HBhNzAOg7hvI.roa (hash: /vONE0L2m45mBqfcuw95QHCPgC/SgADGzcrX8+7SrZY=) 11: btFiCRe6ijn7iG7FxViTiaat_Ss.roa (hash: LM2pD9aQd87JsY0EO+NGidT06PsoOqy+c+K8ZJnFpLQ=) 12: iTq1k1-n5HC3mDH6yOxsGqky0UI.roa (hash: AGbGIRgcWmrYfxQjlQUEIVcfb2QPCldn/oJ/TJ7MR/A=) 13: ijEqoAEZpU0XwucBGAsnbQDDdNw.roa (hash: JCAoDA+s8OPB6Om2MtNX+ndsLOblJSylnwNeZbS7ZEI=) 14: oUN6hm9XIH9hez7uSosGEeiTS64.roa (hash: O2lJOrBjeZAv4ECvJJ0xPhkbtSeFQ6Qb6tFoYeeLtF0=) 15: rHz8kaauSx9yjUtMHgkc7yNJ95o.roa (hash: PhKHXgs0bJsWkyri4OmHbJXKHUs8Dv3fw5JQFOIgfUI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 20 Apr 2025 22:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:50:11:9e:5c:3e:ab:4b:0a:da:06:8e:df:47:f4:77:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795 Validity Not Before: Apr 19 22:00:54 2025 GMT Not After : Apr 20 22:00:54 2025 GMT Subject: CN=fd072bcdf5ec3752bfac050d1bab33b61479e9ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ed:59:9f:33:51:6f:70:23:2d:ed:db:e2:7f: 55:9f:08:4c:cb:29:d6:8c:5b:e8:51:ca:b5:68:c3: 04:45:c6:27:b0:25:21:a5:6a:b5:16:ba:bd:18:e1: bc:13:3b:09:f0:f8:c6:13:0d:09:b6:52:48:ce:e9: b4:69:b9:11:19:f5:2b:ef:98:ed:bb:77:ed:d5:a0: b8:b3:f0:99:0b:a4:a1:1a:89:e7:7e:8c:01:77:86: d0:da:2e:ce:72:38:d5:d1:d2:c3:26:28:12:65:d0: d0:67:30:54:de:39:86:a2:19:91:08:97:68:88:54: 3b:c9:bd:92:31:e5:66:b3:c9:48:e6:9f:75:e9:be: 18:ef:0d:7c:34:2f:f3:72:0f:84:1b:46:0a:c7:74: 38:00:41:a7:70:ba:1e:5a:40:ff:7b:62:34:d2:40: 72:6a:a8:34:2a:2e:40:0e:f5:75:42:2e:9a:0f:79: 60:3b:10:0f:c7:6c:d2:aa:04:3c:2d:05:a0:9e:61: 44:54:d5:25:44:1c:21:f5:68:56:31:3a:27:04:64: b9:2f:95:d5:70:8e:d8:bf:1e:86:68:31:55:d0:fa: ad:05:1b:58:fe:e0:88:ce:3c:3b:7a:93:44:d1:96: e9:0d:1f:4f:d5:65:ee:cd:77:bf:c3:3f:c8:3c:75: 80:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:07:2B:CD:F5:EC:37:52:BF:AC:05:0D:1B:AB:33:B6:14:79:E9:EE X509v3 Authority Key Identifier: keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:ab:25:fc:f4:5b:9a:bd:42:c1:44:08:a5:77:8b:79:4d:9b: 5c:49:8e:61:f1:75:20:66:34:0e:4d:52:03:a4:1c:a1:56:bd: a4:ba:aa:65:ae:0e:c7:f2:9b:5c:86:8a:85:fc:5e:f6:5d:fb: be:70:23:d0:90:74:b7:36:77:24:ac:ba:0d:fe:af:13:64:25: 84:7c:0e:26:13:28:8c:c8:e5:ff:10:9b:ef:df:5e:77:18:77: b4:3f:bb:63:d7:2a:31:a2:0a:3d:02:2f:02:e2:1e:18:e9:ce: 0d:ba:14:ad:b0:72:fd:dd:c6:44:f9:3a:6b:8a:2c:79:37:75: f7:94:9d:ab:f4:1d:7f:4a:1d:0d:48:e6:f2:57:fe:7d:fc:ca: 3d:bd:7d:1f:bc:98:be:d8:0d:48:fc:df:d0:f6:f6:2d:bc:4a: 01:6f:fa:9c:20:0a:67:76:ae:09:29:53:2c:d5:ae:9d:3b:5a: 70:07:d5:92:a5:e8:a3:70:43:ba:b9:24:e8:ce:14:45:e2:41: 4d:d1:65:b0:eb:20:1f:7f:f9:ea:c5:66:1b:4b:f0:ad:ac:50: 78:f0:2a:bb:a2:51:b6:81:56:47:11:16:d9:82:92:5b:4d:2c: ad:a9:27:2f:21:32:15:82:b4:71:2d:f2:d8:dc:f6:64:ac:09: 6f:f6:a5:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZQEZ5cPqtLCtoGjt9H9HdQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzN2VlMWVjZWQxOWY4YTBhM2E2MzViZmFhMjY0MjkzZTM0 Mzc3OTUwHhcNMjUwNDE5MjIwMDU0WhcNMjUwNDIwMjIwMDU0WjAzMTEwLwYDVQQD EyhmZDA3MmJjZGY1ZWMzNzUyYmZhYzA1MGQxYmFiMzNiNjE0NzllOWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxO1ZnzNRb3AjLe3b4n9VnwhMyynW jFvoUcq1aMMERcYnsCUhpWq1Frq9GOG8EzsJ8PjGEw0JtlJIzum0abkRGfUr75jt u3ft1aC4s/CZC6ShGonnfowBd4bQ2i7OcjjV0dLDJigSZdDQZzBU3jmGohmRCJdo iFQ7yb2SMeVms8lI5p916b4Y7w18NC/zcg+EG0YKx3Q4AEGncLoeWkD/e2I00kBy aqg0Ki5ADvV1Qi6aD3lgOxAPx2zSqgQ8LQWgnmFEVNUlRBwh9WhWMTonBGS5L5XV cI7Yvx6GaDFV0PqtBRtY/uCIzjw7epNE0ZbpDR9P1WXuzXe/wz/IPHWAzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP0HK8317DdSv6wFDRurM7YUeenuMB8GA1UdIwQY MBaAFON+4eztGfigo6Y1v6omQpPjQ3eVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMt MzZlMzQ0YWJjOWQzLzEvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMtMzZlMzQ0YWJjOWQz LzEvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEqsl/PRb mr1CwUQIpXeLeU2bXEmOYfF1IGY0Dk1SA6QcoVa9pLqqZa4Ox/KbXIaKhfxe9l37 vnAj0JB0tzZ3JKy6Df6vE2QlhHwOJhMojMjl/xCb799edxh3tD+7Y9cqMaIKPQIv AuIeGOnODboUrbBy/d3GRPk6a4oseTd195Sdq/Qdf0odDUjm8lf+ffzKPb19H7yY vtgNSPzf0Pb2LbxKAW/6nCAKZ3auCSlTLNWunTtacAfVkqXoo3BDurkk6M4UReJB TdFlsOsgH3/56sVmG0vwraxQePAqu6JRtoFWRxEW2YKSW00sraknLyEyFYK0cS3y 2Nz2ZKwJb/alEw== -----END CERTIFICATE-----Generated at Sun Apr 20 05:12:55 2025 by rpki-client