$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft File: vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft (raw, json) Hash identifier: STmj2acQ1yvDVs+mVE4Yo2UVapS4wnAvZksSCrl95i0= Subject key identifier: C9:F2:55:BC:18:35:BC:D1:42:DC:91:E0:62:08:20:AD:17:5E:2D:03 Authority key identifier: BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C Certificate issuer: /CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c Certificate serial: 0196504823CBE073689E39B21F8AEDEE76C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft Manifest number: 120B Signing time: Sat 19 Apr 2025 23:00:26 +0000 Manifest this update: Sat 19 Apr 2025 23:00:26 +0000 Manifest next update: Sun 20 Apr 2025 23:00:26 +0000 Files and hashes: 1: 8Fk9kDKNu_wHTuVpwQ1FTDYEEUM.roa (hash: R9lk1OKBJor+p6Fk8Cm9760Y52YkNlkiK4HwLBjauEw=) 2: LCMzGb8KK1XAn7ueElCREh4ehR0.roa (hash: 9Gw2b+IOeGIlGw5y7XNoxgCnQ7hXETrnIXJowIYGjqA=) 3: LShVVLJCwZTpOQVpRu4BHXCMY5o.roa (hash: qOW5Q7zU6W8XRrp7RUj6wZmvzkpmHb4NVAohhcOeaxY=) 4: bmuOfACYZiZOnCTz9ES9s06c_ac.roa (hash: kxF+XBYjW7ExfLjJidwuYPma+i/t1erJy7+ooTz+eSY=) 5: dqSVfYV4r9M8RMZopTNsSTKHeIY.roa (hash: XrN+1wwdRwyX8n7r+VHCtW4D45jLjIPlWVhNaBZnVwQ=) 6: h9mNIwplN3HJblv2au9Os6COmfk.roa (hash: MUN1yxszebSMcti0G9u7TeXrwfcHsFyRaIzpQnCM9XQ=) 7: mUZj0w-uWUstpfqo5cH06vK19uA.roa (hash: MzyNzzDoUFyK/QZw2a/+HQPhRLTClRfb/mdHjVRhByQ=) 8: r0mTEa6qt-IyELm4t03iQrSQvaU.roa (hash: 5O0ZRSkH9lwLC8LUcZsdLUDFOU7u/lNlnWwcFjFATOs=) 9: rHoYFPQ0T9Hef-z6s-pJ7i0yyQo.roa (hash: xQJ9yww4YSKaaEyQBdYXA5up0iEVqjr/At6e2xJMUB8=) 10: vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl (hash: /rDOtJkBZ1w6RfCTNemuaRZOH2ByRCJjUprgII0pL7A=) 11: vfYaTtc4brt0Ov1kx9oCUOHIJXI.roa (hash: eB+hXGbiqW76z1VHwcXpM+YfyI+lZHNYCy9KL7CJ5lM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 20 Apr 2025 22:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:50:48:23:cb:e0:73:68:9e:39:b2:1f:8a:ed:ee:76:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c Validity Not Before: Apr 19 23:00:26 2025 GMT Not After : Apr 20 23:00:26 2025 GMT Subject: CN=c9f255bc1835bcd142dc91e0620820ad175e2d03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:00:3f:02:e6:05:31:e0:b5:c3:dc:83:cb:a0: 30:71:ba:d8:11:cb:74:d2:70:19:ce:60:09:fc:3f: 42:5e:50:8a:d2:23:88:31:1d:b6:b4:ff:54:22:43: bd:cd:ed:e3:d4:c9:e8:78:fe:f9:b7:4a:71:8a:d7: 77:ae:70:15:21:ff:63:8b:da:dc:43:30:a9:1f:15: 62:94:38:74:b6:ce:c5:e5:dc:4b:fc:a0:0b:ed:1e: 7a:67:ed:05:a8:1e:b6:5d:1c:e4:c5:d0:fa:a2:35: 2d:89:53:3e:e9:b0:e1:8e:e5:68:25:eb:55:c8:f2: 59:fa:73:30:bc:45:64:9c:62:9e:63:bb:0b:10:16: 29:7f:9e:76:6e:20:9c:54:e9:67:77:e8:87:24:fa: cd:d9:0f:9a:9f:08:ac:98:c2:c9:ab:f3:82:36:60: e8:76:af:d1:5f:eb:1c:ee:c6:44:6a:32:22:78:e8: a3:5d:e0:4f:e5:b0:b8:b0:ea:3e:bb:f7:3a:7f:e3: f6:e8:57:68:8f:04:2f:b2:67:d4:9c:a5:de:69:39: e1:7b:01:2c:06:6a:9d:bc:99:ed:b7:6b:5d:83:95: 56:53:94:f3:c7:bb:98:a7:e4:80:ba:6c:ab:26:f1: 98:03:db:25:ef:40:32:c6:6d:71:82:98:00:06:67: f0:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:F2:55:BC:18:35:BC:D1:42:DC:91:E0:62:08:20:AD:17:5E:2D:03 X509v3 Authority Key Identifier: keyid:BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:97:7e:40:fc:2c:ef:c6:e5:b4:8d:c6:ef:4e:a7:09:24:c4: fe:f4:e4:ba:b9:25:d1:06:3f:a7:ca:ed:68:6c:10:06:d6:42: f3:ff:4d:60:a4:98:a2:9a:84:f2:49:1b:16:27:69:b0:6d:f1: 99:ec:64:4a:12:30:81:61:4b:b1:f1:ca:82:92:f1:93:1e:cb: 0f:b7:66:fe:a2:00:aa:c1:85:0c:0f:29:b1:23:ef:d3:5d:9b: 34:32:77:d0:65:f8:5a:c4:dc:47:f2:a3:42:64:55:ef:b8:fe: 7b:03:af:8a:ce:e9:ff:16:5d:bb:9a:c4:e9:54:a9:70:78:5b: 5f:1f:b5:9b:f0:76:a6:5a:da:cc:f2:55:85:b7:36:22:5b:c2: 27:d2:d8:43:f8:f9:65:32:fb:4a:39:03:1d:1d:75:1e:c6:58: 6d:24:f3:f1:99:ef:fd:9b:5d:32:72:95:1f:67:8e:0e:a9:f5: fa:10:57:f8:93:da:bd:0a:66:b4:47:7b:68:c9:a5:07:d4:be: 0e:fd:8d:d9:80:0e:ca:ca:ab:b7:08:62:e0:24:13:95:0d:ab: ee:20:64:5c:80:d6:a5:ec:21:5c:6a:e1:27:5a:66:88:81:28: 22:c6:aa:dc:87:dc:a3:dd:6b:bb:1a:e7:90:3d:3b:cd:eb:30: 05:4f:06:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZQSCPL4HNonjmyH4rt7nbCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNDcwM2UwOGNhMGQ2YTMxMGNiYzY0M2ZmY2IzMDdmZjZj ZGM2NWMwHhcNMjUwNDE5MjMwMDI2WhcNMjUwNDIwMjMwMDI2WjAzMTEwLwYDVQQD EyhjOWYyNTViYzE4MzViY2QxNDJkYzkxZTA2MjA4MjBhZDE3NWUyZDAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAA/AuYFMeC1w9yDy6AwcbrYEct0 0nAZzmAJ/D9CXlCK0iOIMR22tP9UIkO9ze3j1MnoeP75t0pxitd3rnAVIf9ji9rc QzCpHxVilDh0ts7F5dxL/KAL7R56Z+0FqB62XRzkxdD6ojUtiVM+6bDhjuVoJetV yPJZ+nMwvEVknGKeY7sLEBYpf552biCcVOlnd+iHJPrN2Q+anwismMLJq/OCNmDo dq/RX+sc7sZEajIieOijXeBP5bC4sOo+u/c6f+P26FdojwQvsmfUnKXeaTnhewEs BmqdvJntt2tdg5VWU5Tzx7uYp+SAumyrJvGYA9sl70Ayxm1xgpgABmfwvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMnyVbwYNbzRQtyR4GIIIK0XXi0DMB8GA1UdIwQY MBaAFLxHA+CMoNajEMvGQ//LMH/2zcZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84NjNiYTAtMDQ3Ni00M2Q3LThiZTct NjZlZGEyMjhmZWM3LzEvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy84NjNiYTAtMDQ3Ni00M2Q3LThiZTctNjZlZGEyMjhmZWM3 LzEvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUpd+QPws 78bltI3G706nCSTE/vTkurkl0QY/p8rtaGwQBtZC8/9NYKSYopqE8kkbFidpsG3x mexkShIwgWFLsfHKgpLxkx7LD7dm/qIAqsGFDA8psSPv012bNDJ30GX4WsTcR/Kj QmRV77j+ewOvis7p/xZdu5rE6VSpcHhbXx+1m/B2plrazPJVhbc2IlvCJ9LYQ/j5 ZTL7SjkDHR11HsZYbSTz8Znv/ZtdMnKVH2eODqn1+hBX+JPavQpmtEd7aMmlB9S+ Dv2N2YAOysqrtwhi4CQTlQ2r7iBkXIDWpewhXGrhJ1pmiIEoIsaq3Ifco91ruxrn kD07zeswBU8GRw== -----END CERTIFICATE-----Generated at Sun Apr 20 04:58:31 2025 by rpki-client