$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft File: 8FIRKM9jSqavp-9S1THz_NVWKPk.mft (raw, json) Hash identifier: +qJOTY+PZe21oqDMijSCS+3mQK8bPmESm9N2q/ny1gw= Subject key identifier: 21:4B:EC:39:4A:0A:55:74:02:56:DF:B1:77:BB:1F:61:C4:C4:E8:CA Authority key identifier: F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9 Certificate issuer: /CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9 Certificate serial: 019609E74F4B63AF4C8A4844BCBA23B4ACB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft Manifest number: 14E0 Signing time: Sun 06 Apr 2025 07:01:16 +0000 Manifest this update: Sun 06 Apr 2025 07:01:16 +0000 Manifest next update: Mon 07 Apr 2025 07:01:16 +0000 Files and hashes: 1: 0vpioq7e7IBvU0f7txi-wExHAPw.roa (hash: lCvUWIuH8RdERCkztaN1NhfYOchJDmj9ywnhD1WG0qs=) 2: 1-t-clxlx4vHi76xBwGIh0Y5orug.roa (hash: WGphFqEzeHYQfivrVaHRtOvOzzhN/PDKxrZlm3FuIDA=) 3: 4CCEdgNV-fGWUC_aGHxQwbUsOKQ.roa (hash: zTRmkFZkHzwf+QYURy5/v5Sjyovq0HLSmOwtNQ48L/c=) 4: 8FIRKM9jSqavp-9S1THz_NVWKPk.crl (hash: 0ql/d1JkIlPtfYl15/zpkvWq61XJh2oGn5RsDTa/gM8=) 5: 9oOMh0CjqydkdSKEbK66nXXsu4E.roa (hash: qQJNJWud5A2R6q9LElC5WdsYynVdzga12kQWDH61mWo=) 6: AoQYABlbiRY1s0Gu3McHV58zrpk.roa (hash: 9zDAXKdytFg/3YwoUton7cniFW2Ja9ArE5tJ2skkn+c=) 7: OdGF_e17lYBOCmXmsk6hkXdf7b4.roa (hash: mFKHbPekFFY75D3Eu+1fU9mzEnOZ9+rJaeHup24zW3Q=) 8: PFyByii-LGzRSy90jiJ5mw1207A.roa (hash: gIS/3e5ejAqBGpUPti4f7RxoNdrem0KAE6vwjMubh3s=) 9: Qkq_75MjyviWe2NqgT_-Mwn9gnM.roa (hash: wJb9fi2vDIIR6voDYxFFRDUWuFkEQa98zP1PFmkzpXs=) 10: ScwFXX2rYjT7naQciVMaotJ-UfM.roa (hash: X8Vp96ZEvVObF+OkcOx9P04g9HBNU6my6Pc/b9LR72Y=) 11: rh7_88ku0NVEacOTg4kYRNyhUIs.roa (hash: Uz863y1lKUf+O+OGV8gNQDxIpi4RBI83I9R9FXt5Xp4=) 12: u37q8oxj6d2YnoBLY1VE3CqS2g0.roa (hash: QV9HVDjMgl4TBfOFPjFKF+CTfrUEm6XmvkI/fobJGaM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 07 Apr 2025 07:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:09:e7:4f:4b:63:af:4c:8a:48:44:bc:ba:23:b4:ac:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9 Validity Not Before: Apr 6 07:01:16 2025 GMT Not After : Apr 7 07:01:16 2025 GMT Subject: CN=214bec394a0a55740256dfb177bb1f61c4c4e8ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8d:20:6f:97:80:7a:d2:f4:c3:86:5d:7f:ea: e6:8d:d0:8f:32:23:f8:e6:62:d1:fa:65:20:41:aa: af:14:67:7d:4f:97:9c:7e:72:69:b1:e0:0e:ff:28: f6:7d:2d:3c:16:8e:b7:dc:9e:99:f5:78:61:e3:40: ca:4a:17:18:a0:3d:d3:bc:e9:6e:20:3d:26:67:20: fc:8b:92:4c:b0:45:94:e5:b0:a4:7d:28:5d:bc:74: 9c:01:8c:c8:8f:13:f2:ba:22:ce:70:96:75:ef:42: 54:59:80:23:32:e1:7c:0c:f7:f9:88:18:ad:3f:da: 98:91:bc:bd:62:b0:55:80:ed:b6:ac:30:9c:a5:ef: c5:aa:07:fe:97:4c:36:d3:c6:4d:88:c3:5d:e0:75: 9c:fd:81:ab:45:ec:85:8f:de:cf:8a:92:33:e6:ad: 01:88:30:31:bb:c5:de:c2:0b:af:a2:1b:69:ff:52: ee:37:05:ab:42:de:7e:79:f3:8c:38:0b:10:5e:a9: d0:5c:b6:57:af:f6:50:11:26:33:5b:f4:ba:b3:57: 47:8f:2a:20:d2:0a:3c:80:8b:0c:78:d7:57:f9:a4: 8c:af:ca:39:8d:ac:98:cf:fd:62:b8:9c:67:0a:a7: dd:0b:f2:46:25:aa:da:aa:f5:ca:40:8c:03:89:db: 44:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:4B:EC:39:4A:0A:55:74:02:56:DF:B1:77:BB:1F:61:C4:C4:E8:CA X509v3 Authority Key Identifier: keyid:F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:91:d0:81:f3:d2:f4:8b:12:a2:81:4a:47:92:c7:da:18:18: 8f:90:1f:95:00:81:c4:5f:a2:5b:85:53:8c:99:bd:37:94:71: 33:6f:de:39:d6:cb:d2:27:ee:62:a5:56:92:7c:34:99:a0:26: cf:52:55:65:7f:ee:cc:93:c4:e8:6f:1d:42:33:d7:73:96:7d: 26:de:ce:a7:59:13:66:9d:bb:b7:4d:97:e5:af:b4:85:7e:c5: 69:de:7c:91:35:66:cf:33:b3:c9:64:cc:e7:cd:6b:e9:60:24: ec:ef:2c:c1:58:1d:05:cf:2e:13:27:a2:28:49:3c:81:78:8c: 6f:ff:df:76:b6:45:99:84:66:ac:6a:d7:d6:6b:ad:aa:f2:f0: e8:57:82:c0:bf:22:c9:92:dd:67:90:30:bf:25:b5:46:a4:88: aa:b4:bb:05:6d:14:46:8e:ef:82:be:2b:d3:ea:b5:a0:bb:57: 52:46:59:d3:f6:41:04:1c:4f:b9:3b:85:48:38:36:4f:c7:e6: a7:43:77:b1:a4:8c:e2:e3:24:84:94:76:d1:1d:9e:0a:69:5a: d5:40:42:a7:6a:ec:b4:16:64:0a:e5:74:6f:c0:b8:0a:8b:af: 31:74:a5:9a:ef:f8:65:91:91:73:77:b0:0b:25:5a:70:4b:4b: 2e:01:92:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYJ509LY69MikhEvLojtKywMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNTIxMTI4Y2Y2MzRhYTZhZmE3ZWY1MmQ1MzFmM2ZjZDU1 NjI4ZjkwHhcNMjUwNDA2MDcwMTE2WhcNMjUwNDA3MDcwMTE2WjAzMTEwLwYDVQQD EygyMTRiZWMzOTRhMGE1NTc0MDI1NmRmYjE3N2JiMWY2MWM0YzRlOGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoI0gb5eAetL0w4Zdf+rmjdCPMiP4 5mLR+mUgQaqvFGd9T5ecfnJpseAO/yj2fS08Fo633J6Z9Xhh40DKShcYoD3TvOlu ID0mZyD8i5JMsEWU5bCkfShdvHScAYzIjxPyuiLOcJZ170JUWYAjMuF8DPf5iBit P9qYkby9YrBVgO22rDCcpe/Fqgf+l0w208ZNiMNd4HWc/YGrReyFj97PipIz5q0B iDAxu8Xewguvohtp/1LuNwWrQt5+efOMOAsQXqnQXLZXr/ZQESYzW/S6s1dHjyog 0go8gIsMeNdX+aSMr8o5jayYz/1iuJxnCqfdC/JGJaraqvXKQIwDidtEtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCFL7DlKClV0AlbfsXe7H2HExOjKMB8GA1UdIwQY MBaAFPBSESjPY0qmr6fvUtUx8/zVVij5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUt ZTQ0MTliNjQyMTJlLzEvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUtZTQ0MTliNjQyMTJl LzEvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkZHQgfPS 9IsSooFKR5LH2hgYj5AflQCBxF+iW4VTjJm9N5RxM2/eOdbL0ifuYqVWknw0maAm z1JVZX/uzJPE6G8dQjPXc5Z9Jt7Op1kTZp27t02X5a+0hX7Fad58kTVmzzOzyWTM 581r6WAk7O8swVgdBc8uEyeiKEk8gXiMb//fdrZFmYRmrGrX1mutqvLw6FeCwL8i yZLdZ5AwvyW1RqSIqrS7BW0URo7vgr4r0+q1oLtXUkZZ0/ZBBBxPuTuFSDg2T8fm p0N3saSM4uMkhJR20R2eCmla1UBCp2rstBZkCuV0b8C4CouvMXSlmu/4ZZGRc3ew CyVacEtLLgGScg== -----END CERTIFICATE-----Generated at Sun Apr 6 10:47:57 2025 by rpki-client