$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft File: DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft (raw, json) Hash identifier: ClBPqE2VfJpq558o6iFTwUqCjkwA11/h9sG7VICr14M= Subject key identifier: BF:25:79:EB:D4:89:A6:09:0A:90:C9:B8:1C:DC:E9:31:66:79:D6:73 Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64 Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664 Certificate serial: 0195FF63E19D0203C54FBFB9337545043EA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft Manifest number: 0DC5 Signing time: Fri 04 Apr 2025 06:01:30 +0000 Manifest this update: Fri 04 Apr 2025 06:01:30 +0000 Manifest next update: Sat 05 Apr 2025 06:01:30 +0000 Files and hashes: 1: 0-YPkmULAfXnz-x8O4HjpPXrRgc.roa (hash: 4hkO4QjkvJDhiXFvv5DxoiJEgtCK4O1iDNeqMzaTU3Y=) 2: 1-_faHefIQXiAFnH3LNhBjrPU09I.roa (hash: 7InTaPWZ/MJFW8mHuJCEltHrQe/oJd/TwCKtlJ9uvvg=) 3: 2TU9zRlg4BupLvfFfZ7nbqZ_3fY.roa (hash: Q+LzT1EBZiXr+my5xIMRRPF6wrKo64s9mQmOfTnOJXc=) 4: 3cmiag-OFPHODxLb1KMirqc2FN4.roa (hash: di5HoeNyYyjDjq7zRaZtas9CEUZ0AIaTVNE5BqvZ7NU=) 5: 3r_fS2iqTHTpqVrmAdmmLy8h5Uo.roa (hash: 0H+5GAjDMQaP4P2zWWWPVnZ5P/dbumJ+SDOD0JaXOts=) 6: BSzGMTPMq-wN-qGAx5X2D1S9LyA.roa (hash: BvSVSe8mZx3zsVFBrO0OJZXXGEEERCM53ZjLPIwFvwo=) 7: CTV38ZT_kPdUbW8ChEbSmJ6D_xY.roa (hash: yntCphEUvGZYiNPfiCzzcsgLL+fxDyvsgRdAxblWwLU=) 8: DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl (hash: Vu+TwO+i1watib18d/zHeRYQC1/zW8LMxBDzB4br6xA=) 9: FWQETtkN_oL4od4Al2G3UDgEL5c.roa (hash: xaM2HH/7hc4DXnOzRecNa3benIQdBaCSuVr3xBWruxw=) 10: I3HMzg_QmJAYWZSbsxJu7-jY00E.roa (hash: GSyQIbiBxY1fX31ira1MjHAesY8aGG/De+BRbgOx2qc=) 11: J1hhtf3gTs8cmUIBfj_g7V7c5qk.roa (hash: Str6Vmr/NRskfnPMQpbp4pXOuly0BQP6BEJAk+C3Jm4=) 12: NmY3Cr2hTmLmrJ4cFR4Mbk6O2f8.roa (hash: 3vnVC3SAIOmJWTDh9HP/nluckKtdf1CaP0omwy3IFuI=) 13: OKEgLmB_4ei0G0uw28caa8G3iPw.roa (hash: w8AbZTm+uTbT/9sxDIvDozMxX1t2Mfifb772t5Mh9zE=) 14: R10kzlmrHw9WAyAvK8-iRqbaBaA.roa (hash: XqcsBbYv+/IKS1qiI7jigpCKSJFXUkDBvTdSLdA8/XI=) 15: Y8BxdOG4E83LClpFnmkd0iyca1M.roa (hash: Ho2liFzRTVRlfVeCSm6qtB/bpgcQQigB8GNzfsMibJM=) 16: a2k-bxYcmm3kHfce2aU5FLKv-4E.roa (hash: Idu0EAICE2kNK56b/YbhSusdo/ak8Y2nDki9I5fmt4o=) 17: c_BvljorzCC91xKN9SXmWQ8PZtY.roa (hash: tm7MMwTrRhcL2zqzjy3kf+lPaC41oVQy/y652O4EMmQ=) 18: dfRwLnd7H7w_OVSLP8kz-J08HvU.roa (hash: FPuBb8+13HSQLJU9CpclAE8hKmqwuolZDcDf1PJudFQ=) 19: dtKVxUHGrAkfKqCobm6KXtRp0E8.roa (hash: 83vvkJxmaytP0GLHWBg53bMWqx3mr1WoGbL8xTTfoKE=) 20: eobitmCPSS93nZyZrt6H4tzwfb0.roa (hash: LnX7b8s+/yLhrNscuvO3jZ4nog0puSgY6ARRzJz2m78=) 21: ivaRRc1DWzJYCrjzmD7SPHajmck.roa (hash: fbqrU3gLkOHm9Lw9w1LVFyGxETrg/SyMnPOPP5yhyR0=) 22: jI6_drTo1PWnufC4oiNHSu223XA.roa (hash: Ni1IeOuPqg+nIvkmnYu+vOs52S50BNNNPDhfXtty6xU=) 23: mGwtUKTp1lrZYeXsHRygkPmeOjs.roa (hash: IXq7ynhykZbaN/EO7syj+TvBCLuqP/D/GJNTwgfgRF4=) 24: sbxNn528r3_zzXNbv7r2uOHDqfE.roa (hash: qSGnUn/ItuImBIisLX01AnYKn5TPmOvO3e69Iv0XU/o=) 25: t1LshJm8xEx-87XbFhNq7UZM0do.roa (hash: qxpyfe2Q7y0I+2bbmEdIUUqvN7x6u3MnxvZPf3Uv5NQ=) 26: tYTCXjdd6a-Lr6S2LTPv_OpkXmc.roa (hash: GHmsgW330iSp8of0BZELcAg4KzkX+Jd8lu+4iluVCwo=) 27: xNs_MXSsSqQhb7POy7D96jrbBfE.roa (hash: Kqde4DiWfgPpGL5KKhrxdr3e5I5JwanO0Au/BQUqUf4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 06:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:95:ff:63:e1:9d:02:03:c5:4f:bf:b9:33:75:45:04:3e:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664 Validity Not Before: Apr 4 06:01:30 2025 GMT Not After : Apr 5 06:01:30 2025 GMT Subject: CN=bf2579ebd489a6090a90c9b81cdce9316679d673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7a:ee:1e:96:78:ef:e1:80:17:05:3b:8a:50: 14:cc:9b:d4:6e:d6:22:8f:d1:85:24:0f:54:f6:67: 9d:5f:fa:d7:69:9f:43:7b:58:9e:76:b8:01:93:07: ae:3a:da:1b:4b:9d:db:60:f8:c8:68:c8:30:01:41: b3:fc:b8:8f:cb:2b:cd:2e:7c:12:ce:b8:0c:c9:48: 27:b9:27:0d:88:e7:c5:36:a9:c6:fd:78:5b:81:5f: 92:9d:7b:5c:0c:56:f6:fd:08:a7:e2:c4:3f:e9:c2: f2:a9:5a:22:18:fd:15:40:d1:a8:d5:b0:ed:ba:7f: 34:d3:3b:eb:c6:47:ca:66:e2:e5:ce:b4:c1:c7:8e: 51:5a:e8:08:aa:4a:7d:81:1b:f0:d0:b1:e5:c1:ec: 7f:89:3d:41:0c:64:49:96:07:42:ba:cf:d9:3f:7e: 51:36:a4:a1:cc:9e:47:36:a3:60:d1:ff:21:e5:3d: 8f:7c:7f:af:5e:eb:cc:6b:10:6a:f6:fb:62:95:f0: d8:50:89:2a:cb:dd:c7:7b:22:b1:09:ad:54:77:25: 1a:37:26:2f:97:3b:0c:2f:8c:b6:3e:86:57:43:e5: 2f:9e:a1:c8:f7:ab:86:af:9a:b7:78:ca:38:17:d3: d4:0f:93:0c:68:20:b3:22:3f:21:24:8f:d5:94:26: c3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:25:79:EB:D4:89:A6:09:0A:90:C9:B8:1C:DC:E9:31:66:79:D6:73 X509v3 Authority Key Identifier: keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:2e:92:3d:3e:6b:ed:cf:79:4e:69:80:1c:5d:42:05:ac:de: 0f:3c:60:5b:19:70:12:d2:ea:18:14:92:8b:72:87:2e:7b:ac: 8c:ad:01:1f:05:0c:d1:e8:75:32:d8:3b:0d:84:e8:d9:37:95: e5:21:39:68:3b:5b:ec:1c:e2:09:9f:1d:6e:2e:1d:42:b0:8e: f9:64:09:ab:39:00:da:c7:2b:65:8b:ce:87:b6:33:8a:9a:97: ea:49:2f:86:de:c0:5f:67:8c:a7:5f:6b:68:b3:20:d8:f7:6b: 6f:77:ff:a6:c5:74:eb:94:d6:ff:6b:3e:aa:f1:32:0a:c2:cd: 8c:c7:29:c9:12:a5:98:d4:d0:19:85:0a:da:6a:3f:c1:60:7b: 76:15:73:09:ea:91:d1:f9:7a:63:54:68:75:7c:b9:bf:f7:7d: 87:9b:2f:22:09:26:98:45:3d:cc:b9:04:f3:10:d0:7d:c6:42: 4c:6e:08:64:03:11:18:eb:a5:92:fe:9f:2b:79:93:ce:94:fa: bd:04:97:92:c6:a5:2f:aa:8b:41:89:87:8d:b6:c3:42:98:96: fe:fb:4b:44:f2:a1:4a:d7:8c:e8:a5:fd:20:17:60:2b:3e:be: 8c:c4:b7:49:16:73:46:da:9a:f9:04:25:cf:f6:2f:69:5a:a5: f1:af:ed:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZX/Y+GdAgPFT7+5M3VFBD6oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMjk5OTA0MmM1ZTIwMDZiZDVhZWI3YTA1ZGUxZTk2YTVl NzM2NjQwHhcNMjUwNDA0MDYwMTMwWhcNMjUwNDA1MDYwMTMwWjAzMTEwLwYDVQQD EyhiZjI1NzllYmQ0ODlhNjA5MGE5MGM5YjgxY2RjZTkzMTY2NzlkNjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHruHpZ47+GAFwU7ilAUzJvUbtYi j9GFJA9U9medX/rXaZ9De1iedrgBkweuOtobS53bYPjIaMgwAUGz/LiPyyvNLnwS zrgMyUgnuScNiOfFNqnG/XhbgV+SnXtcDFb2/Qin4sQ/6cLyqVoiGP0VQNGo1bDt un800zvrxkfKZuLlzrTBx45RWugIqkp9gRvw0LHlwex/iT1BDGRJlgdCus/ZP35R NqShzJ5HNqNg0f8h5T2PfH+vXuvMaxBq9vtilfDYUIkqy93HeyKxCa1UdyUaNyYv lzsML4y2PoZXQ+UvnqHI96uGr5q3eMo4F9PUD5MMaCCzIj8hJI/VlCbD5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL8leevUiaYJCpDJuBzc6TFmedZzMB8GA1UdIwQY MBaAFA0pmQQsXiAGvVrregXeHpal5zZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUt OGMxNTM5NjViYWM5LzEvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUtOGMxNTM5NjViYWM5 LzEvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUS6SPT5r 7c95TmmAHF1CBazeDzxgWxlwEtLqGBSSi3KHLnusjK0BHwUM0eh1Mtg7DYTo2TeV 5SE5aDtb7BziCZ8dbi4dQrCO+WQJqzkA2scrZYvOh7YzipqX6kkvht7AX2eMp19r aLMg2Pdrb3f/psV065TW/2s+qvEyCsLNjMcpyRKlmNTQGYUK2mo/wWB7dhVzCeqR 0fl6Y1RodXy5v/d9h5svIgkmmEU9zLkE8xDQfcZCTG4IZAMRGOulkv6fK3mTzpT6 vQSXksalL6qLQYmHjbbDQpiW/vtLRPKhSteM6KX9IBdgKz6+jMS3SRZzRtqa+QQl z/YvaVql8a/tcw== -----END CERTIFICATE-----Generated at Fri Apr 4 16:23:53 2025 by rpki-client