$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft File: RklSvBZUQexuLiAQyTPcgw82FzE.mft (raw, json) Hash identifier: IQWkNC3Jagwwb4N086EOalmUkQXBHNvDm1e2iMiD0UA= Subject key identifier: AF:46:F5:75:F7:24:18:A5:F5:E3:7F:A0:F1:2D:DF:1F:45:C4:93:1E Authority key identifier: 46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 Certificate issuer: /CN=464952bc165441ec6e2e2010c933dc830f361731 Certificate serial: 01960B9E9B27AC35C6F72C704292A18A273C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft Manifest number: 087F Signing time: Sun 06 Apr 2025 15:01:05 +0000 Manifest this update: Sun 06 Apr 2025 15:01:05 +0000 Manifest next update: Mon 07 Apr 2025 15:01:05 +0000 Files and hashes: 1: 7HWHA8UqwHtsqDMBW-DwrAaDDjM.roa (hash: e8s5o0udkcNi/3gr4/Pby8a6BORkIl6Tk5BcUgdqf98=) 2: 7kAjdsFeoGIlffyRccGeBTEu_FE.roa (hash: V5X41O+8NhL09TYkx6MudBsqNZ4WocGTuULsSpgpD3E=) 3: 8ZU3bGrm9xWhwMuNBNg_sVSf78w.roa (hash: q1BAPF4hVnnZILV3v3GzNcOP1nX7SZBYfnbCOVjjzwo=) 4: CH-MNJ62x7kM2_t2iuWi-Pl441k.roa (hash: HaFXnQzr7MPgH+K0peJzoRzHcSdMpsIno7S1dDVTYls=) 5: F93HK3zZbjyanEiJSO9cArJniew.roa (hash: wrh+x7Klvcmq0ZMqoDo7aM3datdsQCypsCC/kWY8BG4=) 6: RklSvBZUQexuLiAQyTPcgw82FzE.crl (hash: DsKSzhOhAWYWXFFCp9NTxe/XT0wy2aMpOusZybFfNy0=) 7: RocZhE1Sgw4wWmm8LnKO4d7f68w.roa (hash: +rys+d7y9dD2VIYL252iXtWKGL/n4lME4L1WtriVBxI=) 8: U47Wz_LD2xLJywbdswHmPzRJpDo.roa (hash: qCq8pw/dLAXcMlcPqPaGHxhAYIuN8gInNQEcnd7HSIs=) 9: XVHP5qtngkOzkHHcBMfCOoE6FyE.roa (hash: U8lDjEDePEbA90E5ZD4uXWmkg3O6630794CxqDFoPBY=) 10: cSOzcJuJznyp0-yCo16vcwC-SO4.roa (hash: /BcpV3CpFg+yHnaLyG3CeUoFmA/RLptEV35Vt1SRJwQ=) 11: g8u27N4QItUirByGNIpicNOy82Y.roa (hash: 86XD7A3oPGKMoD9IAzlfVhw0nOpZrI3Tfibq7N31K6c=) 12: iH3j8qY1-071YfTwOblznlAQw6s.roa (hash: yME8emyVjusbrBjqemdlgI+CwPOa3VlHZpR5ZeMxUWc=) 13: mGSm6WnPN8htR3E3SqRmvrkDAW0.roa (hash: ma8SoOibhRfVHVvLv4aSGOKoznJfyTFPs8hixxk0hN8=) 14: ryDPDikJ1i_zY_ss9G41qhvN3jc.roa (hash: h94vj7TMlIg5ainHE5mYHmcUUj3Q1WNeWVzGbaI/3Fg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 07 Apr 2025 10:07:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:0b:9e:9b:27:ac:35:c6:f7:2c:70:42:92:a1:8a:27:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=464952bc165441ec6e2e2010c933dc830f361731 Validity Not Before: Apr 6 15:01:05 2025 GMT Not After : Apr 7 15:01:05 2025 GMT Subject: CN=af46f575f72418a5f5e37fa0f12ddf1f45c4931e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:25:e5:85:13:6c:63:72:62:32:3c:37:14:7f: d2:7a:60:c5:da:6c:84:eb:47:83:c0:76:4b:1d:a8: 9b:81:40:c9:6d:eb:6e:d1:64:b3:35:c5:7a:33:af: 17:94:cf:b4:39:02:fb:29:10:78:13:87:bb:58:ba: e2:18:e5:97:79:40:94:d1:e6:42:b4:51:01:49:9f: 58:bd:3c:a1:de:33:30:49:d9:e3:8b:43:9f:29:d0: 7b:d7:db:22:eb:68:a4:96:0d:6e:e8:90:b6:c8:05: f5:53:94:6c:2d:b4:1e:99:f5:4c:d4:f3:d6:17:cc: bb:e6:39:3a:a1:d1:e7:6c:21:bb:a8:f3:85:95:ab: 5d:31:12:74:28:b7:f8:54:fe:65:30:08:6b:ef:96: 0c:b6:1e:b4:a8:b9:bc:10:1e:9b:d4:f6:3a:e4:ad: 49:b6:2b:ce:2d:fa:7e:0b:62:f0:9e:28:8f:d0:3a: 5d:d5:e7:1d:5f:ed:25:2e:db:0e:4b:c7:12:05:10: b5:c1:bd:40:3b:97:c2:6b:5a:3c:33:a3:f8:e2:47: 4c:3e:b7:8f:42:04:0c:b4:12:5e:27:8e:1c:f0:30: d4:28:24:be:58:50:ee:57:d2:01:de:7e:29:42:02: 6c:a5:ec:20:50:00:04:09:52:06:e0:f7:84:a6:d1: e8:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:46:F5:75:F7:24:18:A5:F5:E3:7F:A0:F1:2D:DF:1F:45:C4:93:1E X509v3 Authority Key Identifier: keyid:46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:10:38:89:d3:21:8d:dd:c9:95:7b:dc:be:fd:f3:bb:f6:da: c4:28:2a:61:7b:99:59:e7:c4:bb:4b:ea:ec:0e:c9:48:ac:ad: 8e:eb:a7:e2:1b:89:14:b3:76:37:1f:ec:c6:61:31:49:82:ab: 76:a1:35:5c:51:6f:6c:ae:b7:b8:0c:87:5b:a3:8e:47:7b:0e: 7e:43:26:13:ee:ff:24:92:c0:7f:7e:21:e6:f1:2a:84:4f:da: a0:c5:ff:7f:f2:7c:a9:41:fb:23:d1:a2:a4:b3:d2:8a:8c:20: 42:b2:44:20:4e:0b:c5:c9:5e:0c:ea:49:99:72:94:b1:55:88: 5e:9b:df:21:7c:67:b1:0d:d0:42:b7:c0:ae:84:0b:d2:3e:13: 00:52:5c:71:60:08:c1:90:4e:89:f1:67:28:dd:e8:3c:12:0a: 75:dd:f9:88:69:02:e9:e0:d2:84:b9:28:74:d5:02:55:97:ff: ea:70:a7:f7:46:97:3e:68:64:70:25:fb:56:c8:b9:34:42:21: d8:82:8d:79:3c:3d:50:f0:0f:3d:f1:fb:1c:df:5e:ba:ed:96: c8:e1:62:83:5b:db:d1:ad:cd:c2:e3:fa:bd:ec:29:59:73:e4: b7:f6:86:26:29:bd:e3:80:dd:91:dc:c1:3e:0a:34:9b:69:5d: d6:ab:82:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYLnpsnrDXG9yxwQpKhiic8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NDk1MmJjMTY1NDQxZWM2ZTJlMjAxMGM5MzNkYzgzMGYz NjE3MzEwHhcNMjUwNDA2MTUwMTA1WhcNMjUwNDA3MTUwMTA1WjAzMTEwLwYDVQQD EyhhZjQ2ZjU3NWY3MjQxOGE1ZjVlMzdmYTBmMTJkZGYxZjQ1YzQ5MzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3iXlhRNsY3JiMjw3FH/SemDF2myE 60eDwHZLHaibgUDJbetu0WSzNcV6M68XlM+0OQL7KRB4E4e7WLriGOWXeUCU0eZC tFEBSZ9YvTyh3jMwSdnji0OfKdB719si62iklg1u6JC2yAX1U5RsLbQemfVM1PPW F8y75jk6odHnbCG7qPOFlatdMRJ0KLf4VP5lMAhr75YMth60qLm8EB6b1PY65K1J tivOLfp+C2LwniiP0Dpd1ecdX+0lLtsOS8cSBRC1wb1AO5fCa1o8M6P44kdMPreP QgQMtBJeJ44c8DDUKCS+WFDuV9IB3n4pQgJspewgUAAECVIG4PeEptHoqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK9G9XX3JBil9eN/oPEt3x9FxJMeMB8GA1UdIwQY MBaAFEZJUrwWVEHsbi4gEMkz3IMPNhcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQt ODQyODU4MTIyYmJjLzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQtODQyODU4MTIyYmJj LzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXhA4idMh jd3JlXvcvv3zu/baxCgqYXuZWefEu0vq7A7JSKytjuun4huJFLN2Nx/sxmExSYKr dqE1XFFvbK63uAyHW6OOR3sOfkMmE+7/JJLAf34h5vEqhE/aoMX/f/J8qUH7I9Gi pLPSiowgQrJEIE4LxcleDOpJmXKUsVWIXpvfIXxnsQ3QQrfAroQL0j4TAFJccWAI wZBOifFnKN3oPBIKdd35iGkC6eDShLkodNUCVZf/6nCn90aXPmhkcCX7Vsi5NEIh 2IKNeTw9UPAPPfH7HN9euu2WyOFig1vb0a3NwuP6vewpWXPkt/aGJim944DdkdzB Pgo0m2ld1quC7g== -----END CERTIFICATE-----Generated at Sun Apr 6 18:33:52 2025 by rpki-client