$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft File: MH2IfALgfJ5HTR-OIQScqmzj-9M.mft (raw, json) Hash identifier: TkwoqX0ctvjYsLY+Xnpf+s+78608u+PhgYy1e7ZSQ1o= Subject key identifier: 57:0A:35:34:6B:C0:08:E8:06:A6:DF:18:CA:2D:F5:5F:05:AB:B9:05 Authority key identifier: 30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3 Certificate issuer: /CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3 Certificate serial: 0196556EC642C2A32DA426AA1427F39E76C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft Manifest number: 1501 Signing time: Sun 20 Apr 2025 23:00:45 +0000 Manifest this update: Sun 20 Apr 2025 23:00:45 +0000 Manifest next update: Mon 21 Apr 2025 23:00:45 +0000 Files and hashes: 1: Go3D60IftVT7kBobBk8HTq_r6wY.roa (hash: /aH1VuqUtHMC947Kt5tr1ajHSrdHN60XTYZiPes2dOU=) 2: JKKr0NwqKrBRfO9-TNMA6fKjebU.roa (hash: +prVLn/SSNSb/SQ4BmX9heAxTyq0XNrqnNVcVb/zNYQ=) 3: MH2IfALgfJ5HTR-OIQScqmzj-9M.crl (hash: QBHB6IrNtFcmEV7pOdYtZznPN2uoHXxP+8jEsjHP4cw=) 4: OrdWNePRO-azuf-x7WJ0gNqkZc8.roa (hash: ehZsJBwER/Ak+kPEJiQOXw5pziTKWHwzzGUWq4oZM/c=) 5: Q3_mv-tF2Z1EHDZHaZk8mJMN1bk.roa (hash: oXSPeYLnMI9gMBulzyR8eDJwfmPdLhgYhc4vqS0U/tE=) 6: S2TXSI-3n25IfgGnM4uuJwml268.roa (hash: DAgFF4qJxC/k8JOz+sB1Q1cvXx4PDaouIru4SXZXgbU=) 7: UJuJe34B0guqTgOl--QOCgSYvZE.roa (hash: c2O3pbkk6z+NjOLR47vzvdpTF+ZJKIik+rzOAO3mk2Y=) 8: bR8kj_c2TPqFFFMT255K3OTqBTI.roa (hash: mIG3JTVdQTlKmcdrQlCtE5KtfNee8F1irJglkfAd6/0=) 9: e_JO57HIUgxnL2zZw_SZRKtvz2k.roa (hash: kYzJL9upOKUtQTqnQ+rXijBf3P483K+T+FEi6SAaLE0=) 10: iF74lchyYH7faRXUXMHNpR_TrWc.roa (hash: 7HXWZbOcLR6YZsq3MaREkcOeGbzmuGmdyIo3eOGAB/M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Apr 2025 16:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:55:6e:c6:42:c2:a3:2d:a4:26:aa:14:27:f3:9e:76:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3 Validity Not Before: Apr 20 23:00:45 2025 GMT Not After : Apr 21 23:00:45 2025 GMT Subject: CN=570a35346bc008e806a6df18ca2df55f05abb905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:98:37:1b:42:9f:6a:a4:01:00:2a:d0:52:b1: fe:a2:24:40:b5:36:3b:ea:17:b2:b1:50:b1:4e:fd: a5:d8:8d:6c:7d:7e:6a:8f:cc:4d:fa:1e:31:61:5e: ca:65:09:f4:77:db:c2:f6:ef:00:6e:fd:5a:3b:53: 47:6b:80:26:67:7c:d2:14:9b:40:23:c5:e3:85:4b: 47:fd:08:0c:1f:22:15:d6:a8:de:c5:97:2d:cb:0d: 31:85:e0:ba:b6:03:a7:d4:91:1f:e1:50:c4:0b:b9: 61:01:69:53:66:bf:b7:fe:4c:80:f2:12:de:14:39: fc:5d:0a:45:98:24:d6:de:6f:27:89:07:9f:77:0c: ad:b1:72:cb:ca:06:1e:4b:c0:11:cd:9c:bc:e4:7b: 2e:0b:65:ce:d1:13:e6:74:99:18:65:e2:e4:bd:3b: 0f:53:cd:9b:f8:ef:5d:31:26:fa:d0:78:ea:13:77: d0:67:c3:d9:07:8d:65:3d:70:5d:8c:c3:b0:00:72: 29:81:0c:ba:6c:f2:41:d6:b8:3f:a0:77:1f:ba:6e: cd:72:ae:af:a1:a7:98:a6:0a:5a:58:0d:3a:31:ae: 94:8a:21:b9:84:10:2d:72:d8:8a:09:7d:46:b3:33: 8c:c9:0f:a6:4c:59:5e:5a:47:a7:18:35:0a:5f:2b: 6c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:0A:35:34:6B:C0:08:E8:06:A6:DF:18:CA:2D:F5:5F:05:AB:B9:05 X509v3 Authority Key Identifier: keyid:30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:b5:77:2e:5e:be:e1:dc:56:2a:20:9b:32:2c:49:59:fd:41: 98:a2:64:b9:dc:2a:50:6d:8f:18:c1:5d:75:ab:2d:46:c2:35: 5e:da:74:69:b1:50:75:e5:e7:ed:29:ff:7a:48:01:fe:ec:86: 6f:8a:d0:72:c5:d8:7b:da:81:62:37:cc:15:e9:8a:51:11:3b: 9d:01:6c:14:dc:c6:d0:c2:fc:ee:c1:03:eb:d6:27:58:d4:1d: 8f:b6:07:a8:a0:b7:67:ad:d3:66:b3:5c:56:b6:14:14:db:ac: 3a:2f:d7:d1:c9:2b:33:5f:14:d1:a2:8b:0f:32:77:9b:72:16: a2:41:7b:5e:de:4f:40:14:b1:ba:4c:15:87:f4:63:3f:83:84: 45:42:c7:67:50:02:07:5b:07:25:42:39:05:24:2b:59:63:71: e2:aa:b7:70:9e:32:9d:7d:b1:c1:61:bc:2f:38:bb:e4:6a:78: c8:ea:a9:e5:99:ce:71:7c:93:cc:10:6e:93:88:66:57:c8:ac: 91:66:1a:9e:67:4c:00:6f:5e:f4:14:73:18:c6:64:cc:a1:98: 3d:25:57:55:5b:0e:2c:c8:10:61:db:e4:b7:a7:00:c7:13:89: c7:62:04:3e:86:e3:fe:41:bf:8e:32:5d:48:7a:32:59:91:0b: 20:f7:cf:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZVbsZCwqMtpCaqFCfznnbJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwN2Q4ODdjMDJlMDdjOWU0NzRkMWY4ZTIxMDQ5Y2FhNmNl M2ZiZDMwHhcNMjUwNDIwMjMwMDQ1WhcNMjUwNDIxMjMwMDQ1WjAzMTEwLwYDVQQD Eyg1NzBhMzUzNDZiYzAwOGU4MDZhNmRmMThjYTJkZjU1ZjA1YWJiOTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pg3G0KfaqQBACrQUrH+oiRAtTY7 6heysVCxTv2l2I1sfX5qj8xN+h4xYV7KZQn0d9vC9u8Abv1aO1NHa4AmZ3zSFJtA I8XjhUtH/QgMHyIV1qjexZctyw0xheC6tgOn1JEf4VDEC7lhAWlTZr+3/kyA8hLe FDn8XQpFmCTW3m8niQefdwytsXLLygYeS8ARzZy85HsuC2XO0RPmdJkYZeLkvTsP U82b+O9dMSb60HjqE3fQZ8PZB41lPXBdjMOwAHIpgQy6bPJB1rg/oHcfum7Ncq6v oaeYpgpaWA06Ma6UiiG5hBAtctiKCX1GszOMyQ+mTFleWkenGDUKXytsVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFcKNTRrwAjoBqbfGMot9V8Fq7kFMB8GA1UdIwQY MBaAFDB9iHwC4HyeR00fjiEEnKps4/vTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9iMjBkODMtNjEyYy00YjYyLTk3YTMt MWE1ZTVmMTkxYmZhLzEvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9iMjBkODMtNjEyYy00YjYyLTk3YTMtMWE1ZTVmMTkxYmZh LzEvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmrV3Ll6+ 4dxWKiCbMixJWf1BmKJkudwqUG2PGMFddastRsI1Xtp0abFQdeXn7Sn/ekgB/uyG b4rQcsXYe9qBYjfMFemKURE7nQFsFNzG0ML87sED69YnWNQdj7YHqKC3Z63TZrNc VrYUFNusOi/X0ckrM18U0aKLDzJ3m3IWokF7Xt5PQBSxukwVh/RjP4OERULHZ1AC B1sHJUI5BSQrWWNx4qq3cJ4ynX2xwWG8Lzi75Gp4yOqp5ZnOcXyTzBBuk4hmV8is kWYanmdMAG9e9BRzGMZkzKGYPSVXVVsOLMgQYdvkt6cAxxOJx2IEPobj/kG/jjJd SHoyWZELIPfP9w== -----END CERTIFICATE-----Generated at Mon Apr 21 02:11:09 2025 by rpki-client