$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft File: HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft (raw, json) Hash identifier: 12dJtSZsG6mRILSFqPbWYgUHvUg9aXvEinjf6+dGPyY= Subject key identifier: DC:17:95:E1:C6:C8:9D:5C:BD:C8:E9:7B:90:E2:93:8D:C9:2E:E6:FF Authority key identifier: 1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C Certificate issuer: /CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c Certificate serial: 01964D7F0591F1B55FC3266D8C47FBA9B6CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft Manifest number: 120B Signing time: Sat 19 Apr 2025 10:01:32 +0000 Manifest this update: Sat 19 Apr 2025 10:01:32 +0000 Manifest next update: Sun 20 Apr 2025 10:01:32 +0000 Files and hashes: 1: 08evUpXsyAPB9m1i5yjV5oz1esw.roa (hash: vQX+ikiXTHSqymHxaB/XvD/QqJEhDTJRgfstS4d4Uvw=) 2: 15KhGd4HmYbpuYXtzncXGULTUqY.roa (hash: iH3AMLCtT6vKx2SSnrUr9zrzWdEsbyifJgPpor+ZLYo=) 3: BhmCDxcE0gsUJ8n-5kUDWm_-44o.roa (hash: /tiZqBXubo3kuYkXe6qdVTzGxoqo7003YeEc2CAhCcU=) 4: HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl (hash: RGa7roa/tRcbgxeIcH8nIdLWU/Ad0cNl6P1XS7TGs7g=) 5: QxGFNF72x4BqsfaQ6jtAOQBOPno.roa (hash: 65riUzSqL2rM8j5Yrj0UOmDbiXGurF7dxCWBn61aeEc=) 6: T14YGVIyo0B0GMjaoAuVV86EHfQ.roa (hash: 64ZLK4f1zxb+Q2lGELGqmESC0E6Ee+2GtOPU4byIZ/8=) 7: YnMnO6Ox-cLnCOmPN8tx_DOoXrE.roa (hash: H/u4fv7xb+AglIzSXH/LHd19mSFb3s1BHiBbxYj4lFI=) 8: jxv2C5982Ccg_jEpftvAMhLewtw.roa (hash: ueLKoc7Uurshn1hvFPw53fM94VCiIuFDiqRrlZVXFno=) 9: kitPrlRKaPvvRZMjj30sn5SBic8.roa (hash: fAdfxW88rLA4/vorwxlP/gvwEwkcGlSH5cxUXmS7nf0=) 10: nmT81wvx-yTg9GH4m684w5fXqeE.roa (hash: HhIS1Nk34d3rWMjsVPRyr9xcyHWgFy7qSFWM4Tl9pLE=) 11: vhqfgZBGlkmJeOA75et_kaK8pwc.roa (hash: HXruhXdyCN/4KKZEyQ4qWiEgEF32HHhcblnNFIim6w8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 20 Apr 2025 07:26:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:4d:7f:05:91:f1:b5:5f:c3:26:6d:8c:47:fb:a9:b6:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c Validity Not Before: Apr 19 10:01:32 2025 GMT Not After : Apr 20 10:01:32 2025 GMT Subject: CN=dc1795e1c6c89d5cbdc8e97b90e2938dc92ee6ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:70:1b:8c:ca:77:0a:f3:f3:9e:85:07:75:35: 68:d3:ff:80:2e:35:f2:97:53:cc:a2:9e:47:0b:c3: 50:ce:eb:18:c7:4f:11:84:55:c6:cf:d2:38:c7:0d: f5:c4:08:96:00:da:04:73:3f:fd:83:b6:91:e5:fe: 57:c7:c1:6b:91:b8:c9:97:f3:28:a8:be:b9:4d:8d: e4:8c:cc:e7:73:9d:51:4e:52:7a:50:a1:9a:d3:ad: 75:b2:06:3d:ee:4c:d1:7e:c3:a1:3e:c8:0a:e6:cc: 6e:f1:b8:35:08:76:05:c7:68:4b:d8:8e:47:26:42: 5b:d9:56:f5:02:cf:c5:fb:1b:7a:56:54:fa:ac:e6: f1:52:05:1d:ae:b5:83:81:a5:f1:f4:02:6d:b6:dc: b2:7e:c2:48:67:97:91:44:51:a3:84:bf:37:8a:29: 95:e1:08:93:6a:e3:ad:68:fb:83:43:c7:3e:dc:aa: 8d:77:6a:17:79:fd:18:5c:5a:9a:47:68:83:58:cc: c9:d5:e6:cc:85:ae:c9:8c:42:b6:31:eb:b3:30:50: 93:d8:c5:ab:20:a6:1b:1c:d3:91:b5:51:ce:a7:6e: b4:bd:66:f5:7f:a6:c3:2f:c9:ac:50:80:ea:c1:22: 8e:76:bd:f3:79:cd:f2:6f:f3:50:85:2e:95:62:06: 23:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:17:95:E1:C6:C8:9D:5C:BD:C8:E9:7B:90:E2:93:8D:C9:2E:E6:FF X509v3 Authority Key Identifier: keyid:1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:5e:71:e7:a9:a0:14:1e:ac:eb:41:36:d7:69:75:bf:9c:da: e0:50:61:3a:7b:80:e6:5c:17:27:7b:f3:9c:eb:a0:db:ad:44: 2c:79:2c:56:f9:cc:05:85:83:77:ca:62:51:0c:9d:48:12:61: c8:ab:7d:b0:9b:ed:15:39:f6:20:c1:75:38:f0:b6:b2:03:e9: 1a:df:05:e5:63:e1:ac:7d:69:bb:be:4b:b5:e6:7e:3e:aa:4e: 31:a1:ed:ec:7e:6f:58:4c:a6:7b:ae:f0:28:df:d9:ee:87:f8: 00:12:6b:4b:c3:21:0c:a1:3b:26:6b:44:a0:ea:85:d0:34:2b: 4c:ff:3a:7e:67:1b:99:3a:70:2a:1f:80:e0:5a:42:af:dc:c4: 7b:be:35:8e:b5:c2:de:df:3d:d5:42:19:6c:15:9a:df:9e:e4: 1e:6e:42:11:9d:e3:3d:79:b3:c5:5f:05:0b:f7:74:c5:8c:de: 28:3a:f5:d6:94:52:1b:08:47:11:3c:32:6e:d9:bc:69:33:83: f1:e0:49:65:5a:52:35:af:39:de:52:b2:68:09:34:db:20:2d: f7:ac:72:ad:d7:30:34:74:d5:1b:f7:16:a8:5f:40:32:4c:8c: 34:e9:aa:df:17:53:e9:79:f1:20:44:66:af:c4:b1:68:1b:77: f6:5c:92:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZNfwWR8bVfwyZtjEf7qbbOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMTRlYjFlZWY2NmMyZDM0OWYzZjdkN2JhZmE2OGU0OWZi ZmVjOWMwHhcNMjUwNDE5MTAwMTMyWhcNMjUwNDIwMTAwMTMyWjAzMTEwLwYDVQQD EyhkYzE3OTVlMWM2Yzg5ZDVjYmRjOGU5N2I5MGUyOTM4ZGM5MmVlNmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HAbjMp3CvPznoUHdTVo0/+ALjXy l1PMop5HC8NQzusYx08RhFXGz9I4xw31xAiWANoEcz/9g7aR5f5Xx8FrkbjJl/Mo qL65TY3kjMznc51RTlJ6UKGa0611sgY97kzRfsOhPsgK5sxu8bg1CHYFx2hL2I5H JkJb2Vb1As/F+xt6VlT6rObxUgUdrrWDgaXx9AJtttyyfsJIZ5eRRFGjhL83iimV 4QiTauOtaPuDQ8c+3KqNd2oXef0YXFqaR2iDWMzJ1ebMha7JjEK2MeuzMFCT2MWr IKYbHNORtVHOp260vWb1f6bDL8msUIDqwSKOdr3zec3yb/NQhS6VYgYjAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNwXleHGyJ1cvcjpe5Dik43JLub/MB8GA1UdIwQY MBaAFB4U6x7vZsLTSfP317r6aOSfv+ycMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGhUckh1OW13dE5KOF9mWHV2cG81Si1fN0p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8zMzNhYjEtYWY5Yi00MzRjLThkMTMt OWNhOThmNDk1MGNmLzEvSGhUckh1OW13dE5KOF9mWHV2cG81Si1fN0p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy8zMzNhYjEtYWY5Yi00MzRjLThkMTMtOWNhOThmNDk1MGNm LzEvSGhUckh1OW13dE5KOF9mWHV2cG81Si1fN0p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOF5x56mg FB6s60E212l1v5za4FBhOnuA5lwXJ3vznOug261ELHksVvnMBYWDd8piUQydSBJh yKt9sJvtFTn2IMF1OPC2sgPpGt8F5WPhrH1pu75LteZ+PqpOMaHt7H5vWEyme67w KN/Z7of4ABJrS8MhDKE7JmtEoOqF0DQrTP86fmcbmTpwKh+A4FpCr9zEe741jrXC 3t891UIZbBWa357kHm5CEZ3jPXmzxV8FC/d0xYzeKDr11pRSGwhHETwybtm8aTOD 8eBJZVpSNa853lKyaAk02yAt96xyrdcwNHTVG/cWqF9AMkyMNOmq3xdT6XnxIERm r8SxaBt39lySNQ== -----END CERTIFICATE-----Generated at Sat Apr 19 15:17:13 2025 by rpki-client