$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft File: vfrSPhHPDSSkd1lOugn5msxvH_8.mft (raw, json) Hash identifier: vYdu33e7RCwd5YGdC+XR03f5xEnpBLaJBPZh3mmmZh4= Subject key identifier: 58:3C:99:50:38:04:54:11:26:7D:61:0A:EE:95:A4:49:5F:13:BE:D4 Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF Certificate issuer: /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff Certificate serial: 0196564A285E162E3C26602AFD5AD3935CB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft Manifest number: 1519 Signing time: Mon 21 Apr 2025 03:00:22 +0000 Manifest this update: Mon 21 Apr 2025 03:00:22 +0000 Manifest next update: Tue 22 Apr 2025 03:00:22 +0000 Files and hashes: 1: 6WLkt-CJrHz9HrmJ80IE8yLiggQ.roa (hash: A1D8GCMAKibxSwfJYYFLTLyOk7V1Z8lwvSAEOW0OnkI=) 2: 7vjowzcPet99DpSwRMSRoDCwwzU.roa (hash: X+UxdfFDiClGq5vQ6ru5h4wKAEV+wpHwdLPZ+uKZ1dI=) 3: KrWr-uxPx9ROkw1dMPy0luW9rHI.roa (hash: wAvc90Nk+tLmXZJ7T3uA3J3ZDaVOAEjfbFhLJlJ5p7c=) 4: W6ybVPAGTpEsw7meUuR6P0SBWi0.roa (hash: Pk0B2oz1VW/tzo+fvfG4VG2dc2avAQtB88TgpiGpr1s=) 5: _l-kXEP7uNjKBXPQ_iDyaiai-0s.roa (hash: yKpSNSngqAM/eyMmWKP/S33qgMa9todToBwJi00eda0=) 6: e5O39jLwx-J5_GwekaRwgr2d2RE.roa (hash: HUk8Z3Nkmb3qkmakGlU4y4u1qV2j7sm1wiYlhVDlC1I=) 7: fL3fAtFLchxlzuCc2GY65y6LmZ0.roa (hash: XRZwhdg6OIZelMOuq2OiZcg4UiZ6j5YXWUKJ7b9dB2A=) 8: jVxo0eRrcP2pgqEM2o5yJCaDJF8.roa (hash: 16iXvR9xhaKTmRi0zkcfcRjJRbOmgMjKBuv8xrJfUx4=) 9: lVRxioxScoDE7zhaCYNE7hVti4o.roa (hash: 2SOb+vjF9aw2d+xYqFyVysIAXg1nOJ/HsxNH3uvPjjc=) 10: oFZG6FuqcB6CEgUjG9AbuL9dAS0.roa (hash: UZD/yf7XHoNO7JDGnUu+XcMvM0jiJ1W2cL6Q6ekzwvE=) 11: rzIhKyyjXlSGxIVHnVv7j-nWQ4A.roa (hash: wyAyy8rxCcwgCB+QLmatxIedkc9CxRz+G4M60YbCHcQ=) 12: tiIoys09kmXMH3pj0eYY3jB6F7o.roa (hash: /BFY3lyPkgwMGI6Yoxtr7ZIkhvJMoAS7umXiaAeUjKk=) 13: vfrSPhHPDSSkd1lOugn5msxvH_8.crl (hash: 6bROrRM8nMrTxzx3ViqzUHNgCxHMOFKPahD3b4/TnN0=) 14: yNNopewn85t08Znw5j3oTWUISEc.roa (hash: ZkUCX6gB41bOpnUPfzdbRC3CiwRZ4yyWFwXTC/D9/dc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Apr 2025 01:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:56:4a:28:5e:16:2e:3c:26:60:2a:fd:5a:d3:93:5c:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff Validity Not Before: Apr 21 03:00:22 2025 GMT Not After : Apr 22 03:00:22 2025 GMT Subject: CN=583c995038045411267d610aee95a4495f13bed4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d2:c0:28:b5:04:0d:ee:e7:18:d6:02:33:b8: f5:7a:c1:e4:61:89:09:0d:38:e0:a7:dd:18:f0:0f: db:18:85:a2:33:54:1e:92:e5:33:96:68:a8:78:2e: 7a:1c:0c:71:a1:80:93:3f:f5:91:3a:4d:8d:b6:76: cc:f8:d8:28:c6:69:ee:23:28:0a:5d:7f:8d:52:9c: fe:d9:64:95:1a:38:a9:ea:1f:b3:3a:af:c6:cd:6b: dc:08:4b:46:00:fd:ca:09:72:e4:f0:9a:04:ba:71: 05:bf:f7:ef:ac:38:3c:a6:2f:7f:2c:2d:7f:87:6a: c9:4c:9b:1d:00:b7:fa:fd:e4:5c:63:9d:00:12:33: d3:54:6c:16:6b:ca:4a:17:ac:10:20:43:6f:b6:fd: 2c:74:43:5d:84:6e:99:c6:94:ec:4b:b8:f8:64:2f: 51:25:a8:2e:de:f1:d6:24:e3:41:e2:00:44:cd:87: 37:b8:b9:a4:0a:90:6b:30:66:75:3b:68:46:f8:06: c6:0b:dd:cd:aa:45:5b:02:6b:93:41:85:d5:89:19: 5f:a8:9f:63:7e:7d:6c:69:7a:93:ff:01:bc:c6:7a: 37:fd:6f:14:3c:de:9c:fc:d2:41:e9:d4:bc:ef:97: 81:ce:f5:7a:5a:5e:8a:a5:89:ff:ad:9f:d6:ae:1a: 5a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:3C:99:50:38:04:54:11:26:7D:61:0A:EE:95:A4:49:5F:13:BE:D4 X509v3 Authority Key Identifier: keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:18:59:e6:a9:13:6d:35:74:45:f3:6a:1f:84:b4:5d:88:f4: 98:60:c6:16:13:d2:05:15:8d:74:b2:de:2d:09:08:9d:52:be: f5:33:13:db:a1:8e:c1:95:ec:70:24:58:71:7a:f5:2c:9f:4d: e2:e8:97:ba:bf:09:35:f7:bb:b7:26:13:56:2c:f1:59:9e:4c: 8d:66:65:a4:98:e9:5e:9d:5a:10:41:8d:0a:ab:71:b8:30:42: 70:3b:20:51:df:ae:fd:43:fc:bd:65:20:2b:79:fc:82:c9:5c: c1:55:4b:09:30:56:8a:2d:34:50:4a:28:27:f1:95:92:e2:c4: df:2a:59:e8:43:d5:15:d4:76:28:ea:47:e2:91:0a:04:33:71: 2d:f5:d4:d3:6c:f7:76:2b:1d:93:59:99:0f:e6:55:82:3d:c9: 34:11:1f:06:b9:31:9d:7f:32:a8:ef:01:9f:78:6b:39:1a:2f: 60:90:01:1a:e1:06:16:06:d3:d0:f2:f4:b7:bb:81:d2:b1:3c: 8b:dd:d9:08:0e:1d:2c:97:a2:9b:ac:c0:35:88:af:3f:b3:e3: 51:35:8a:cd:d1:d5:52:45:66:de:1c:29:73:77:ab:47:42:f8: 6c:d6:c9:af:67:1c:7e:36:17:fb:23:b6:a1:2e:9a:81:88:58: 70:39:9f:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZWSiheFi48JmAq/VrTk1y2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZmFkMjNlMTFjZjBkMjRhNDc3NTk0ZWJhMDlmOTlhY2M2 ZjFmZmYwHhcNMjUwNDIxMDMwMDIyWhcNMjUwNDIyMDMwMDIyWjAzMTEwLwYDVQQD Eyg1ODNjOTk1MDM4MDQ1NDExMjY3ZDYxMGFlZTk1YTQ0OTVmMTNiZWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdLAKLUEDe7nGNYCM7j1esHkYYkJ DTjgp90Y8A/bGIWiM1QekuUzlmioeC56HAxxoYCTP/WROk2NtnbM+NgoxmnuIygK XX+NUpz+2WSVGjip6h+zOq/GzWvcCEtGAP3KCXLk8JoEunEFv/fvrDg8pi9/LC1/ h2rJTJsdALf6/eRcY50AEjPTVGwWa8pKF6wQIENvtv0sdENdhG6ZxpTsS7j4ZC9R Jagu3vHWJONB4gBEzYc3uLmkCpBrMGZ1O2hG+AbGC93NqkVbAmuTQYXViRlfqJ9j fn1saXqT/wG8xno3/W8UPN6c/NJB6dS875eBzvV6Wl6KpYn/rZ/WrhpaawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFg8mVA4BFQRJn1hCu6VpElfE77UMB8GA1UdIwQY MBaAFL360j4Rzw0kpHdZTroJ+ZrMbx//MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9lMjUyMzktNmFiMC00OTE5LWE3NmEt NGY0ZTcxZTMyMDg0LzEvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9lMjUyMzktNmFiMC00OTE5LWE3NmEtNGY0ZTcxZTMyMDg0 LzEvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHxhZ5qkT bTV0RfNqH4S0XYj0mGDGFhPSBRWNdLLeLQkInVK+9TMT26GOwZXscCRYcXr1LJ9N 4uiXur8JNfe7tyYTVizxWZ5MjWZlpJjpXp1aEEGNCqtxuDBCcDsgUd+u/UP8vWUg K3n8gslcwVVLCTBWii00UEooJ/GVkuLE3ypZ6EPVFdR2KOpH4pEKBDNxLfXU02z3 disdk1mZD+ZVgj3JNBEfBrkxnX8yqO8Bn3hrORovYJABGuEGFgbT0PL0t7uB0rE8 i93ZCA4dLJeim6zANYivP7PjUTWKzdHVUkVm3hwpc3erR0L4bNbJr2ccfjYX+yO2 oS6agYhYcDmfOw== -----END CERTIFICATE-----Generated at Mon Apr 21 10:43:32 2025 by rpki-client