$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft File: C047O4QkIliGMULtOhl5LZfLvHQ.mft (raw, json) Hash identifier: YGDQ2rxyIvM+ql8dbpDUm+n3kewcJZSUFDlb6fGCZQk= Subject key identifier: 0C:4F:99:BB:EB:71:BD:64:AD:4F:BB:2C:C2:39:18:3D:7F:1B:2B:56 Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Certificate serial: 019617A2689B43769196C7448A0F08A74479 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft Manifest number: 019F Signing time: Tue 08 Apr 2025 23:00:41 +0000 Manifest this update: Tue 08 Apr 2025 23:00:41 +0000 Manifest next update: Wed 09 Apr 2025 23:00:41 +0000 Files and hashes: 1: 4EVIucA70gYtRBC_kvd8S_jO4G4.roa (hash: f24fNYbERcDJzGGGVxLcXRg46QfyX7NJWLWSxrMNmcw=) 2: BEBIiS8kF8YsGnU_xtcNUlRLrD4.roa (hash: jOHIlKdvXIgJGWM14XmaB7UsAMXtqbb4a2RVgY2if5A=) 3: C047O4QkIliGMULtOhl5LZfLvHQ.crl (hash: 1dmbKrxFii3GCtSGuKuiCCtBxmTQkOH4HSiL1yhn7qA=) 4: EvZmdpYLd03WERL_L0i0mrtj944.roa (hash: CV2qEuFjtfL/Sdsin89UXRGI8h47pjbkcQWbmiCWOHY=) 5: H49hyQPEQJXxJVi2iR8A2ADQ41U.roa (hash: eqi7i//uHcpOg1OfB0kupkpo9kTQKxZE6a6NNvU+Pyg=) 6: LWsi3KmW8bzkCxEOXVP0T6JNl74.roa (hash: ++a3kmsuF/zJu9wF6l25AqVnQ10r4JeQqeeIizqUJQ4=) 7: QiWAHKME9j6jXWoDWmLBMtajJvE.roa (hash: aMoyecQaaEfNleHM1MRWgY3enB8c6H07Bf7pHPlVlXU=) 8: YDFeVGcfCRWwkla5yvVihURp96w.roa (hash: KXYzCuBnwDyE4MCQIyptZv94ewf8cBJZDBMejoQRhWY=) 9: b7g_AfGKRKl1uxe-BoiQM3sl0nw.roa (hash: Zf9ZuQPGxN3TX6S4uzmoIy9WChIwMZZm6ZNHezb6N+U=) 10: bCaBS4aQHjuaa_tTVMTRXq8OR_U.roa (hash: 7H4q9uVHSlMkwQO5xRA3Q4nmZoDkIn1SJmtZoSSXixQ=) 11: rxVj7HxUdpCbEmncDNwlrERybAQ.roa (hash: lGsN4Soe7emS1tDACEfDPVW5uJ4WgQ8icgYo5G8FKks=) 12: sbkxRvSrfQGNdpGANqUogURHroU.roa (hash: GVO8i7AC/aFii+I0dhy+QGbxHH4AqRNBV/o41DJJYK4=) 13: uSB4Q9lZ5N_vUTK7fY2jb9w2g4Y.roa (hash: br5Lt3idKAa3r0A/AYPd7r0VCPVHp7gxtlokiM1B+jU=) 14: uuTcIhmMVylXKoo0d8I18SaHjWU.roa (hash: a8ZKg1ASt06tQrhILg7SaB6+2r8ufbJSPrndEQoQ7X4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 09 Apr 2025 22:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:17:a2:68:9b:43:76:91:96:c7:44:8a:0f:08:a7:44:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Validity Not Before: Apr 8 23:00:41 2025 GMT Not After : Apr 9 23:00:41 2025 GMT Subject: CN=0c4f99bbeb71bd64ad4fbb2cc239183d7f1b2b56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c2:2f:34:82:d8:6e:dc:9c:4d:97:16:5f:42: a2:bf:5a:a1:a9:64:9d:a7:05:d5:4d:4f:ae:c6:46: ee:ef:21:22:91:25:10:5e:09:0e:9d:77:ec:ed:68: 90:cf:bc:82:a5:58:59:f9:28:c7:94:21:91:4e:9a: 08:67:bc:6d:f2:6a:85:87:40:b2:18:19:a5:7e:0b: fb:d9:0b:d6:1d:a1:9f:29:03:cc:55:7d:9f:d0:6a: 75:57:b9:72:85:de:e0:a0:5f:96:f5:98:ed:fd:60: b2:5f:b4:69:91:58:91:fc:4b:71:ad:2c:bc:ed:20: f1:4d:51:11:bb:d0:fc:26:e1:81:2f:23:6c:f4:a7: f9:0a:bd:aa:e5:c6:e4:17:bb:1b:1d:37:b3:32:6e: 20:77:35:02:d2:9e:7d:24:9b:bc:81:32:65:0a:86: c5:b3:15:c5:0f:f1:da:41:47:e1:81:f5:92:45:c4: a4:cc:ca:53:6f:c9:5e:03:27:ef:3b:31:e4:de:4b: 4a:1d:fd:ad:6d:37:69:fe:ec:15:73:1c:51:39:fe: 32:81:61:ba:c9:96:6c:42:ae:b4:56:a9:47:f3:1c: e2:43:84:d2:c4:0c:b6:d3:c9:a0:a3:ad:1c:7f:78: b7:ac:f0:65:e0:70:4c:32:fe:61:d5:e5:49:ce:0f: ae:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:4F:99:BB:EB:71:BD:64:AD:4F:BB:2C:C2:39:18:3D:7F:1B:2B:56 X509v3 Authority Key Identifier: keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:ff:30:7f:c0:b9:f5:e2:b0:76:b7:6b:3f:4c:07:6a:9c:73: 5c:8e:8d:4f:55:5a:1b:a2:93:1c:f2:70:28:6f:c1:92:1a:de: a8:f0:4a:e9:9a:22:20:ef:8c:27:cf:8a:0c:4a:45:8c:76:0e: 4b:d9:0c:08:f0:e2:e3:36:ee:51:f0:a8:37:0e:af:d3:2c:d3: 1a:78:d3:f8:11:d0:98:e5:7e:bc:eb:9e:64:1e:72:a7:01:ac: 78:b0:5f:2d:04:85:69:b7:a3:9a:4f:c2:14:53:d5:80:60:c9: 78:da:24:dd:2f:6f:51:af:f3:14:dc:79:49:af:17:6d:3e:9d: b9:7b:b0:fb:31:22:f1:a5:7f:1b:da:61:48:cf:38:5c:28:5d: 70:30:a6:89:d7:7d:01:80:3d:ae:42:98:89:e6:5b:ea:fe:53: 4a:45:b8:ec:33:90:f6:5c:80:c1:f4:a5:b5:57:dc:d3:1b:ce: 31:9e:2a:42:be:4c:57:ff:f2:32:77:1b:12:bf:d6:86:ce:c4: 38:5d:df:9d:13:9a:8f:b4:2d:67:56:a4:cd:d0:3a:ba:1f:ab: 96:70:fb:c8:93:01:92:8e:fd:78:01:02:08:45:26:ed:da:d3: 6e:04:c3:74:96:b2:db:18:53:3e:d2:f8:5e:24:ce:f7:98:37: 3b:62:44:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYXomibQ3aRlsdEig8Ip0R5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj YmJjNzQwHhcNMjUwNDA4MjMwMDQxWhcNMjUwNDA5MjMwMDQxWjAzMTEwLwYDVQQD EygwYzRmOTliYmViNzFiZDY0YWQ0ZmJiMmNjMjM5MTgzZDdmMWIyYjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8IvNILYbtycTZcWX0Kiv1qhqWSd pwXVTU+uxkbu7yEikSUQXgkOnXfs7WiQz7yCpVhZ+SjHlCGRTpoIZ7xt8mqFh0Cy GBmlfgv72QvWHaGfKQPMVX2f0Gp1V7lyhd7goF+W9Zjt/WCyX7RpkViR/EtxrSy8 7SDxTVERu9D8JuGBLyNs9Kf5Cr2q5cbkF7sbHTezMm4gdzUC0p59JJu8gTJlCobF sxXFD/HaQUfhgfWSRcSkzMpTb8leAyfvOzHk3ktKHf2tbTdp/uwVcxxROf4ygWG6 yZZsQq60VqlH8xziQ4TSxAy208mgo60cf3i3rPBl4HBMMv5h1eVJzg+uQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAxPmbvrcb1krU+7LMI5GD1/GytWMB8GA1UdIwQY MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt MTRkMjM4NTI3ODM1LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1 LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYf8wf8C5 9eKwdrdrP0wHapxzXI6NT1VaG6KTHPJwKG/BkhreqPBK6ZoiIO+MJ8+KDEpFjHYO S9kMCPDi4zbuUfCoNw6v0yzTGnjT+BHQmOV+vOueZB5ypwGseLBfLQSFabejmk/C FFPVgGDJeNok3S9vUa/zFNx5Sa8XbT6duXuw+zEi8aV/G9phSM84XChdcDCmidd9 AYA9rkKYieZb6v5TSkW47DOQ9lyAwfSltVfc0xvOMZ4qQr5MV//yMncbEr/Whs7E OF3fnROaj7QtZ1akzdA6uh+rlnD7yJMBko79eAECCEUm7drTbgTDdJay2xhTPtL4 XiTO95g3O2JEAQ== -----END CERTIFICATE-----Generated at Wed Apr 9 05:57:32 2025 by rpki-client