$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft File: I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft (raw, json) Hash identifier: Rie/ij+L5m96AxYyn8fdQKM2sOaE7Bgm1saKnLWCsTY= Subject key identifier: C3:94:FB:CE:0B:97:98:B0:30:9E:4A:4E:45:EA:EC:54:25:15:76:DA Authority key identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 Certificate issuer: /CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Certificate serial: 019653B7537B6377F67F65F8217CB3D209AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft Manifest number: 1228 Signing time: Sun 20 Apr 2025 15:00:45 +0000 Manifest this update: Sun 20 Apr 2025 15:00:45 +0000 Manifest next update: Mon 21 Apr 2025 15:00:45 +0000 Files and hashes: 1: 0qZlk63Gwo6PVve3R8hoNJeSalk.roa (hash: 9K8bAvhRQIcuHPJMwOdonfj+LysEV1qKdWBg1zShX+0=) 2: 1aR-_v953E36WGgYgibzeTBiCDE.roa (hash: FoIR2LSFc6nQ5Kqt0WYRr1Y8u7rsf9kyNtd6rG0B9zM=) 3: 2S36hALNEuA4FHD_a934872Co8w.roa (hash: 7vbdkC8QrVhET/DTmD2itapsbG53efZ5NYts2gI1WdE=) 4: Aqln2oXW1vmV-PUzF6Cd9Q8xD70.roa (hash: KUC6ZVgJ309wVObTlhs383nGmhCFSSEIPpt/KXrwLus=) 5: I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl (hash: LVb6WPB3S87Pgbkp7X8UrusebwPechL5eLK7TxC1ZUQ=) 6: ZpGAbaG9iTc5mQjGkWx21egzJos.roa (hash: hVROdEr8DhK5izAOiu4sPZbk59hiOCePPc1b1fzj7Mc=) 7: aCwRSHVYBYpytuE1o9MjNgDXz9I.roa (hash: lR91pW0BeR+aoFpolYB6lJ9nl5KY3mWGfuxUgw4Zch4=) 8: hTDGmmn2FYXUzU7TBnMKhJwzgBA.roa (hash: 1eTmB0t+VZgY89Mes1TNlFqfs2UJeJff1ZjTxBLpw/g=) 9: jlKsVMX7wEteoIWfSN3Uc9eAuVQ.roa (hash: 5HOZUuYu7Rw+ksliSgplThO4PdfYnW2rqUfOLfK21mA=) 10: k8Tsh2igTKK0UWxKZTZKxjOauZg.roa (hash: 2YaWS9l2TW+UMAMDTk1uUSdz30uNtfJAEAiFghKc1/k=) 11: mdNDH8tOemdbUwlqRGs3hb1Hrm4.roa (hash: WKtl9/rCVdqattn0ipGNumFRIFTCx0VUypyRv/GA3Gw=) 12: uIweupJOqhNaFZ9FFVay5RTc__M.roa (hash: t7JJhUA0yW4Du8+W3we/rUkzjJyZFVBXiW73J3eZJK8=) 13: z1a3i0frazTQqXgXDMZwXIVumzA.roa (hash: 8QcYCFJ7DbfNpdlzOwLSm6hk+eQgt4rWp4xCUkBVN6Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Apr 2025 15:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:53:b7:53:7b:63:77:f6:7f:65:f8:21:7c:b3:d2:09:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Validity Not Before: Apr 20 15:00:45 2025 GMT Not After : Apr 21 15:00:45 2025 GMT Subject: CN=c394fbce0b9798b0309e4a4e45eaec54251576da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4c:82:47:fe:4b:2f:c3:35:0a:7f:0e:d0:f3: c6:75:bf:ef:d2:56:d9:4e:33:fe:57:e7:da:e6:61: 00:be:7b:16:2b:f7:67:42:5d:b4:9f:02:de:54:f3: a7:dd:f7:7b:b0:59:c1:82:56:b6:48:e5:a9:0e:e3: d4:67:f1:e8:5c:79:94:f9:42:61:b1:5f:02:29:c0: 3e:6d:87:3c:f8:11:f7:83:37:89:4c:32:f3:44:e9: ab:bd:3a:f5:e6:17:13:bb:94:7c:9d:a8:4c:e9:65: c5:0e:df:93:af:f1:af:4e:36:c3:93:2f:8a:bc:ce: 44:85:b6:e9:53:1a:8d:ef:58:02:7b:1b:2e:34:cd: 01:0f:3e:0a:78:2d:1e:71:58:05:27:eb:c9:99:3c: b6:ca:90:48:e4:1e:8f:c9:2e:18:6d:f0:48:10:dd: 8b:b2:a2:8e:bf:68:70:a5:67:3a:1a:2e:5d:89:77: d9:32:30:2c:ba:7e:4d:7b:af:bb:b8:28:bf:b2:7f: 61:f4:46:67:79:42:7e:67:1a:6a:73:e7:76:6a:1b: ae:01:f1:bc:3e:dc:3b:3a:8c:29:f9:9a:ad:e5:cf: 66:4c:59:33:69:3d:1f:7e:40:81:e1:7a:ee:a6:e8: 8b:75:3c:cb:90:38:1b:6d:7d:e6:ca:cb:1e:d1:35: a8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:94:FB:CE:0B:97:98:B0:30:9E:4A:4E:45:EA:EC:54:25:15:76:DA X509v3 Authority Key Identifier: keyid:23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:df:3b:f0:84:9c:eb:21:7c:de:19:4d:7f:8c:2b:ff:85:96: 54:04:d4:f2:72:0f:62:64:65:13:49:f7:67:a3:cb:ed:ed:dc: 85:e4:0d:02:ee:69:a6:61:87:69:1c:4e:54:5d:ac:59:cf:a7: ed:f3:85:42:b2:98:47:7c:11:39:83:c7:24:79:2e:de:b0:fd: 2a:0c:57:1b:0f:4a:d4:cb:dd:ca:34:2c:40:11:9d:51:d6:1a: ce:8f:e0:fa:0b:57:bc:7c:ce:d9:22:69:c2:c1:7d:ea:b7:82: 78:98:d6:e5:d7:58:6a:cb:43:8c:f9:b4:a4:e9:7a:8a:76:11: 61:04:8b:62:98:f7:21:c3:37:5b:a8:be:cf:62:a3:1c:06:43: 62:b6:a1:c2:f5:88:e8:54:fb:54:d2:5c:12:45:42:66:fa:23: 40:30:c9:f2:ed:fc:39:1c:c7:58:f0:b6:b6:73:cd:f9:98:ee: 96:80:12:bd:34:dd:91:e6:3a:2d:be:c2:59:f2:65:6d:ae:23: 26:30:23:e5:5d:fb:67:03:60:f4:56:c5:7a:a2:91:22:be:49: e5:8a:ad:3c:e7:4e:fd:81:d4:52:14:0b:23:e5:2b:29:03:63: a6:5a:22:f4:51:1e:c8:7c:95:59:3a:39:f9:80:55:e8:cf:20: 1f:99:7d:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZTt1N7Y3f2f2X4IXyz0gmuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZTNkOTJiZmUxNjYxOWNhNTAwYzAzMjY3ZWZmYTlhYTdj YTBjNDcwHhcNMjUwNDIwMTUwMDQ1WhcNMjUwNDIxMTUwMDQ1WjAzMTEwLwYDVQQD EyhjMzk0ZmJjZTBiOTc5OGIwMzA5ZTRhNGU0NWVhZWM1NDI1MTU3NmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUyCR/5LL8M1Cn8O0PPGdb/v0lbZ TjP+V+fa5mEAvnsWK/dnQl20nwLeVPOn3fd7sFnBgla2SOWpDuPUZ/HoXHmU+UJh sV8CKcA+bYc8+BH3gzeJTDLzROmrvTr15hcTu5R8nahM6WXFDt+Tr/GvTjbDky+K vM5EhbbpUxqN71gCexsuNM0BDz4KeC0ecVgFJ+vJmTy2ypBI5B6PyS4YbfBIEN2L sqKOv2hwpWc6Gi5diXfZMjAsun5Ne6+7uCi/sn9h9EZneUJ+Zxpqc+d2ahuuAfG8 Ptw7Oowp+Zqt5c9mTFkzaT0ffkCB4XrupuiLdTzLkDgbbX3mysse0TWoHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMOU+84Ll5iwMJ5KTkXq7FQlFXbaMB8GA1UdIwQY MBaAFCPj2Sv+FmGcpQDAMmfv+pqnygxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYt ZjFiZjBjMzNhOTA4LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYtZjFiZjBjMzNhOTA4 LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVN878ISc 6yF83hlNf4wr/4WWVATU8nIPYmRlE0n3Z6PL7e3cheQNAu5ppmGHaRxOVF2sWc+n 7fOFQrKYR3wROYPHJHku3rD9KgxXGw9K1MvdyjQsQBGdUdYazo/g+gtXvHzO2SJp wsF96reCeJjW5ddYastDjPm0pOl6inYRYQSLYpj3IcM3W6i+z2KjHAZDYrahwvWI 6FT7VNJcEkVCZvojQDDJ8u38ORzHWPC2tnPN+ZjuloASvTTdkeY6Lb7CWfJlba4j JjAj5V37ZwNg9FbFeqKRIr5J5YqtPOdO/YHUUhQLI+UrKQNjploi9FEeyHyVWTo5 +YBV6M8gH5l9rA== -----END CERTIFICATE-----Generated at Sun Apr 20 18:38:36 2025 by rpki-client