$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft File: VCltI970yFIcZH3Giss8Ej9hHYk.mft (raw, json) Hash identifier: nEy7HRxfauubOCu/GIPI/RpwnbT1VBRj+hoQl1aNhxU= Subject key identifier: 7A:B4:56:AB:FA:D4:99:22:38:FD:F6:5C:DD:29:7C:40:B9:91:B4:96 Authority key identifier: 54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89 Certificate issuer: /CN=54296d23def4c8521c647dc68acb3c123f611d89 Certificate serial: 01960AC2D80C9B9FEA8496DE6C2EF09C33AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft Manifest number: 1120 Signing time: Sun 06 Apr 2025 11:01:03 +0000 Manifest this update: Sun 06 Apr 2025 11:01:03 +0000 Manifest next update: Mon 07 Apr 2025 11:01:03 +0000 Files and hashes: 1: 1SldOKbELOjKigiDwKOX9yrln5w.roa (hash: fmEO0ohhPTmh26Uu49kFiwQxzt5GJqHO94Hmm4ImaNw=) 2: 7CzbNrtp5RtnUa0QvVDrCiB4-GQ.roa (hash: MSGYg43Lpi2l9kj2jvxvbrmtu1KoOP76L+2QcLwRLTY=) 3: 9lCeO4TUjBNc1nJhioNR2Srwqjc.roa (hash: Fg6u79AASkerccVWXjCGzoOYhRTs135qG7S8Ln7z22s=) 4: HIGaJFZVTqANpoUrum_XWo9Khps.roa (hash: 2mkcqMxs62ge1s9tiYFXxw5tu5EZ+UKfCmkGRyd/frI=) 5: HeuY-063QK_nNTZBJsl2N9nPT0Y.roa (hash: cNW0QUKkOECAhom7mEwINa2XXTLvyYriHy+M/7EUYUc=) 6: LorY4n0U-aZMcbhTfwzw87yq2Uc.roa (hash: +fw8Kk7QrRma5kjO6L7XYIo8vAhLOEhcDfP55yYODiI=) 7: VCltI970yFIcZH3Giss8Ej9hHYk.crl (hash: 8uHfQnKieWt+WrBuXvPZrPtLmgckNRItxUlqj4U7KOk=) 8: WPkCAe56qcayLw7OSJ39BmQs3dc.roa (hash: aYDDBvFy7ps2t01cjyeWqbWteq/VAxNlg5mzuMH4OGk=) 9: eZijdgAhwuy-ZHRdobMyGcqAvoA.roa (hash: S0x+KVIu+g/l2rZQeyvQLaSq7XxKaGP3nRvfj6m7jNs=) 10: j6WIbMvfpSuER9TZDV1ZY6J-TKg.roa (hash: ObBYTSyTFGBKG+ev+DE2prDLFfsdLKDktKAoj4ncZrw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 07 Apr 2025 07:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:0a:c2:d8:0c:9b:9f:ea:84:96:de:6c:2e:f0:9c:33:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54296d23def4c8521c647dc68acb3c123f611d89 Validity Not Before: Apr 6 11:01:03 2025 GMT Not After : Apr 7 11:01:03 2025 GMT Subject: CN=7ab456abfad4992238fdf65cdd297c40b991b496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6a:33:38:a4:64:af:f3:a7:48:92:ff:1d:d9: 54:ba:3d:70:b1:6f:25:6b:b1:7c:d7:e1:47:00:98: 2e:e6:fa:1c:01:b9:91:fd:bc:33:96:ad:ef:c4:34: 6e:aa:fb:63:eb:2f:3f:a2:ae:b0:ae:bc:47:09:8d: 44:97:0e:ed:01:7b:e6:0e:5e:66:65:a8:57:a7:85: e4:ef:5f:fd:74:0e:c5:76:f2:c5:d3:8a:07:4b:0e: b3:ec:97:a1:db:35:26:b3:0a:30:5c:ac:95:c9:e3: b5:6e:9b:c8:8b:aa:83:e4:3b:cc:d8:83:50:32:d7: e5:27:03:62:83:a0:8a:7d:84:db:97:4b:84:11:a1: 93:e0:ac:4c:2e:8d:36:85:6c:5d:d4:c3:cf:e8:11: 91:4d:fe:79:de:05:79:83:0d:70:c4:c6:fd:e4:81: 8c:b9:42:46:99:b0:48:20:c1:30:65:c7:dd:0d:b6: bd:4d:09:55:23:64:18:0e:30:72:58:09:6d:79:50: 69:3a:c9:66:22:1c:94:57:9d:77:2a:51:fe:5e:54: ce:c1:0e:98:6a:74:b9:be:81:d9:37:c6:a2:c1:20: 4b:bc:11:ba:98:f7:14:d7:1c:e9:4c:b6:6d:60:ea: 0a:cc:49:fe:ad:b7:49:c9:67:54:04:da:a2:46:05: 51:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:B4:56:AB:FA:D4:99:22:38:FD:F6:5C:DD:29:7C:40:B9:91:B4:96 X509v3 Authority Key Identifier: keyid:54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:48:6a:cc:eb:ae:cd:97:80:10:f4:3b:7b:0d:61:3c:52:41: ab:22:a5:e3:07:73:ba:31:30:a7:f6:94:a6:5f:ee:b6:29:1a: 5b:52:db:d8:0a:6e:67:57:8c:45:8b:1d:8c:9e:1b:05:f2:3c: 17:da:45:4a:68:9b:86:7d:46:b5:94:2d:63:32:29:67:0a:18: f3:d0:c0:10:3a:6a:4b:82:c3:0a:d9:0e:95:cf:6b:24:0b:5a: 4a:e6:4d:12:2a:03:35:02:4e:a7:a1:3c:78:c8:00:c8:d0:17: e0:2b:74:1d:6d:26:fb:05:a5:bc:4d:b0:0d:40:23:4f:9f:19: ad:12:4d:08:30:35:45:55:ae:5b:ef:57:a6:15:ff:0f:19:dc: a5:74:56:10:17:86:a3:bf:ac:5f:5d:f6:0f:0d:cd:fa:c3:68: 6f:6b:24:95:77:e8:7f:dc:41:cc:ea:d2:5d:bb:c7:f9:bc:69: aa:02:8f:69:00:ac:86:ec:3e:13:57:9c:a8:7f:7b:1a:da:ff: 72:36:71:93:90:0d:ea:1b:28:57:c6:10:05:7b:3f:0b:8c:90: bc:96:d2:1d:4e:06:1b:49:47:34:1f:51:e1:21:b1:cc:fd:83: 38:fd:7d:03:99:f6:1e:db:94:75:11:6e:ea:9d:cc:2f:63:ed: 94:b6:18:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYKwtgMm5/qhJbebC7wnDOrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Mjk2ZDIzZGVmNGM4NTIxYzY0N2RjNjhhY2IzYzEyM2Y2 MTFkODkwHhcNMjUwNDA2MTEwMTAzWhcNMjUwNDA3MTEwMTAzWjAzMTEwLwYDVQQD Eyg3YWI0NTZhYmZhZDQ5OTIyMzhmZGY2NWNkZDI5N2M0MGI5OTFiNDk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GozOKRkr/OnSJL/HdlUuj1wsW8l a7F81+FHAJgu5vocAbmR/bwzlq3vxDRuqvtj6y8/oq6wrrxHCY1Elw7tAXvmDl5m ZahXp4Xk71/9dA7FdvLF04oHSw6z7Jeh2zUmswowXKyVyeO1bpvIi6qD5DvM2INQ MtflJwNig6CKfYTbl0uEEaGT4KxMLo02hWxd1MPP6BGRTf553gV5gw1wxMb95IGM uUJGmbBIIMEwZcfdDba9TQlVI2QYDjByWAlteVBpOslmIhyUV513KlH+XlTOwQ6Y anS5voHZN8aiwSBLvBG6mPcU1xzpTLZtYOoKzEn+rbdJyWdUBNqiRgVRcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHq0Vqv61JkiOP32XN0pfEC5kbSWMB8GA1UdIwQY MBaAFFQpbSPe9MhSHGR9xorLPBI/YR2JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUt OTQyNDgyZjhkMmVhLzEvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUtOTQyNDgyZjhkMmVh LzEvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG0hqzOuu zZeAEPQ7ew1hPFJBqyKl4wdzujEwp/aUpl/utikaW1Lb2ApuZ1eMRYsdjJ4bBfI8 F9pFSmibhn1GtZQtYzIpZwoY89DAEDpqS4LDCtkOlc9rJAtaSuZNEioDNQJOp6E8 eMgAyNAX4Ct0HW0m+wWlvE2wDUAjT58ZrRJNCDA1RVWuW+9XphX/DxncpXRWEBeG o7+sX132Dw3N+sNob2sklXfof9xBzOrSXbvH+bxpqgKPaQCshuw+E1ecqH97Gtr/ cjZxk5AN6hsoV8YQBXs/C4yQvJbSHU4GG0lHNB9R4SGxzP2DOP19A5n2HtuUdRFu 6p3ML2PtlLYYgg== -----END CERTIFICATE-----Generated at Sun Apr 6 15:04:53 2025 by rpki-client