$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft File: BVFgW2dezk4PznF1rjGpP6gnK6Y.mft (raw, json) Hash identifier: 2q9w0+r3pHNwBWSEJ1I7fm49L7eULCTcZOC3E+zXWsU= Subject key identifier: 07:29:8D:9B:B0:1C:EA:AD:20:E2:86:67:C1:E7:D6:6D:0A:2A:3B:C0 Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6 Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6 Certificate serial: 0196195B489982F91F5C9F10B79CF1CA98C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft Manifest number: 1511 Signing time: Wed 09 Apr 2025 07:02:14 +0000 Manifest this update: Wed 09 Apr 2025 07:02:14 +0000 Manifest next update: Thu 10 Apr 2025 07:02:14 +0000 Files and hashes: 1: 5t_gEPyzONNwmcX_6ew0Ih3Mk2Q.roa (hash: vkkst1UDRXFHGnw3oCIz/VahP4EJhU4cLye1AO0QLS0=) 2: B-VB7mD6d3yYH8PU8AgFih1fMDc.roa (hash: T5HGrFxvsUPySvUxTWFtkDKWgc+DSV2mLNavrR7oxEo=) 3: BVFgW2dezk4PznF1rjGpP6gnK6Y.crl (hash: wmtT+BRwiVIWEJ5g26AjmUyvEgvGJvrjFKxd5ZxQm9c=) 4: FQTXSvb27ypAWeWR6u4PUk-NFzc.roa (hash: oVmw4Wr4zacFRrwMuuDV+itYXymrywavxqZKYRr/zHc=) 5: GIdtnYTfB_OfNmkj58C5zvwyoiY.roa (hash: mrolhVBCf9ezcIiNdke1ILuseOXCo3lGnZtCw7CJdqk=) 6: JIWScFv9Kksz3-WjVTMxXPLjiWo.roa (hash: 9Ejcda+LEF9Prza7a6M4k8Cqx+Jsocz8uwzratsGHfs=) 7: Ry99V7wdnB63QA0YiggryZhHU-U.roa (hash: mMBh91Bzq2gPCtQkwNpkOUuuvLHWXUK22LlIXX1xS/g=) 8: T2zf4MlLIMSvzzuDsJMAjIOyKkY.roa (hash: ueRz8nTweEwyQ4f6p4yvV8towA7SPGMkaN88JD99IhM=) 9: WTBCbSxb7h1w4Up4KNg9SZTnE6c.roa (hash: zGDl99MvN6NddN0ACg6xKrKwSNupTCXGaQXZUdGsWZY=) 10: Wgn-Z3i6lXU4mVGYn9zEOu2Y5uo.roa (hash: KDlQZdCuo/nIV3/PuDzNC2v7AGRYnk63vIIL7+xFyqo=) 11: ZNVBvSaI1BNlFT5y4meV0Zbgnzw.roa (hash: bWlw2kG0F8Yo+irCKVO4en+85QCKnglxRBdSlkv67r0=) 12: ZmV3RrHyNbdlPpXWHxyJNKlqz_0.roa (hash: duiYNAfkU9vNSfSeoTIVT6MoGsXF5yCoHKwjI4a3RZo=) 13: bLACyeWnCQUwWZqE5WZ_BrmQU6Y.roa (hash: uwoE5/d36cX/Ks6beQm+PxMT5NEUJYwmYJZfciGwpzU=) 14: lSQaQo1pT929AIuNEO-jfbBj_uI.roa (hash: aky/WPIxzMhPYRkj4RXOkjGc0PhL0aXcIKo/I7TPgXM=) 15: lmjGoIkmtRARzMHJ3Iv6xZvWT5U.roa (hash: D1V3yIkbb8Fb2YGAP6nceG/MedRCxNzvPEgyVbvAN7Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 10 Apr 2025 07:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:19:5b:48:99:82:f9:1f:5c:9f:10:b7:9c:f1:ca:98:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6 Validity Not Before: Apr 9 07:02:14 2025 GMT Not After : Apr 10 07:02:14 2025 GMT Subject: CN=07298d9bb01ceaad20e28667c1e7d66d0a2a3bc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b4:86:29:41:91:b4:0b:70:2a:34:e1:a9:98: 25:c5:45:af:58:b4:9f:3f:10:5a:40:f2:14:c8:ac: 3c:eb:3b:ab:25:59:72:23:24:cc:c3:0a:30:aa:74: ad:a3:ae:b2:e9:3c:68:4f:60:b5:63:9e:48:5b:b2: 95:10:72:fa:c8:0d:fa:41:7f:f6:c5:8d:16:03:3d: 80:e3:f3:c8:18:41:83:15:61:9b:45:26:91:48:27: 81:bf:a5:cb:85:f9:51:42:23:5f:db:2f:6d:e8:d0: e1:c4:ac:cf:5b:df:53:72:dd:62:73:39:b0:66:ef: 0a:29:a6:74:59:12:76:8f:41:31:4e:81:62:7d:eb: f9:26:5e:ae:bd:b0:cb:4c:f9:7f:5b:63:68:89:99: 09:e2:ed:38:7e:cf:16:14:d1:ce:72:06:26:4f:4a: cc:b1:3a:34:d9:49:ff:39:8b:2e:bf:99:67:d5:be: b9:5a:22:66:54:b6:1e:e0:45:5c:de:ea:b9:73:24: 0a:db:60:bd:d8:c1:89:0a:3e:72:2e:54:2b:16:bd: aa:49:9e:2e:e3:9c:f1:8c:c2:3a:ad:f4:30:3c:85: ed:a2:31:1e:8a:2f:90:f2:00:90:63:94:39:e8:4a: 7f:cf:21:85:39:74:75:37:e8:b1:1d:12:a0:e7:86: 96:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:29:8D:9B:B0:1C:EA:AD:20:E2:86:67:C1:E7:D6:6D:0A:2A:3B:C0 X509v3 Authority Key Identifier: keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:b2:90:3c:d8:2b:9d:6f:6d:0e:e8:3d:5a:0d:0c:67:74:eb: 2d:e5:60:0c:0a:38:de:3b:72:a8:c7:49:6c:7c:e2:a2:00:3e: 35:9d:30:3e:b3:e5:c8:0b:92:03:b5:20:4f:b7:f4:b0:c5:de: 77:e0:c0:b9:dd:30:a9:95:ec:2e:67:33:d7:e0:a3:7e:bf:f3: 5f:3c:ef:ab:02:eb:04:93:9d:f2:47:76:0e:37:98:54:5f:0d: 1f:5e:3f:ec:50:2e:81:5a:a6:23:c0:c0:e8:18:64:8e:fe:91: 5f:d1:2d:c9:61:86:36:0d:12:ad:2b:5d:cb:1e:b3:e6:7f:5d: f3:52:a3:7d:b0:1a:98:bd:6b:0b:c5:cb:7f:1a:91:19:db:48: b7:a1:23:bb:dd:98:3c:a5:eb:16:53:af:81:db:3a:b5:71:1b: 8e:f1:da:70:45:f7:ea:7e:b4:5c:f9:4b:4d:1a:b8:d8:77:f3: c3:26:51:09:a9:a3:0e:6b:33:c5:e3:ee:28:c7:70:f9:22:ff: 1c:78:27:83:00:b2:1f:4b:5a:64:ed:fa:b6:69:98:19:5a:c9: c4:e5:5d:ed:fd:05:73:9a:be:dc:00:07:a4:ea:40:76:e1:37: 89:88:c4:0c:9b:b6:c7:ca:f0:32:cc:bd:1d:96:07:3a:aa:f4: 8d:8c:76:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYZW0iZgvkfXJ8Qt5zxypjJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NTE2MDViNjc1ZWNlNGUwZmNlNzE3NWFlMzFhOTNmYTgy NzJiYTYwHhcNMjUwNDA5MDcwMjE0WhcNMjUwNDEwMDcwMjE0WjAzMTEwLwYDVQQD EygwNzI5OGQ5YmIwMWNlYWFkMjBlMjg2NjdjMWU3ZDY2ZDBhMmEzYmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LSGKUGRtAtwKjThqZglxUWvWLSf PxBaQPIUyKw86zurJVlyIyTMwwowqnSto66y6TxoT2C1Y55IW7KVEHL6yA36QX/2 xY0WAz2A4/PIGEGDFWGbRSaRSCeBv6XLhflRQiNf2y9t6NDhxKzPW99Tct1iczmw Zu8KKaZ0WRJ2j0ExToFifev5Jl6uvbDLTPl/W2NoiZkJ4u04fs8WFNHOcgYmT0rM sTo02Un/OYsuv5ln1b65WiJmVLYe4EVc3uq5cyQK22C92MGJCj5yLlQrFr2qSZ4u 45zxjMI6rfQwPIXtojEeii+Q8gCQY5Q56Ep/zyGFOXR1N+ixHRKg54aW9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAcpjZuwHOqtIOKGZ8Hn1m0KKjvAMB8GA1UdIwQY MBaAFAVRYFtnXs5OD85xda4xqT+oJyumMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEt MDc3OWY0OGVjZWEwLzEvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEtMDc3OWY0OGVjZWEw LzEvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmbKQPNgr nW9tDug9Wg0MZ3TrLeVgDAo43jtyqMdJbHziogA+NZ0wPrPlyAuSA7UgT7f0sMXe d+DAud0wqZXsLmcz1+Cjfr/zXzzvqwLrBJOd8kd2DjeYVF8NH14/7FAugVqmI8DA 6Bhkjv6RX9EtyWGGNg0SrStdyx6z5n9d81KjfbAamL1rC8XLfxqRGdtIt6Eju92Y PKXrFlOvgds6tXEbjvHacEX36n60XPlLTRq42HfzwyZRCamjDmszxePuKMdw+SL/ HHgngwCyH0taZO36tmmYGVrJxOVd7f0Fc5q+3AAHpOpAduE3iYjEDJu2x8rwMsy9 HZYHOqr0jYx2dA== -----END CERTIFICATE-----Generated at Wed Apr 9 12:51:15 2025 by rpki-client