$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft File: c_IQ8SmaHgrucdwdeeX7EgktMKk.mft (raw, json) Hash identifier: dmckxdZgRMw8wJ9kwBpxmuFtN9tMz0Ofs3f5uc5qJgY= Subject key identifier: EA:8C:ED:66:83:8A:AB:D9:8E:E8:71:E4:EF:42:57:4E:42:F4:3A:4E Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9 Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9 Certificate serial: 0196474525E5EB9886AA87BD0DE77A4E5414 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft Manifest number: 151B Signing time: Fri 18 Apr 2025 05:00:36 +0000 Manifest this update: Fri 18 Apr 2025 05:00:36 +0000 Manifest next update: Sat 19 Apr 2025 05:00:36 +0000 Files and hashes: 1: H74wGZKnnU6XEP7nVKoqw4XaEjE.roa (hash: zhm555s3zw/KlbcjZuumbYd6+z6n6717Q/inEo++9C0=) 2: JFyb9vOEShiklCUE-xhXQcKys24.roa (hash: yRt2GvdxkvGMHkQaqbdXsuANeN2IU6ZvnsT36x7jpNo=) 3: KFKPGq8CDIQff00UekrfFEmWWU4.roa (hash: pndCMKJbI0Ffrf6VYH3lHviYtYItndyotazCLP7aZyE=) 4: TLCOp8VQQYT-sDLZMkb_dNE0wJI.roa (hash: 8TF1RbnrjzrAYcRglOW5PIK7TmKRhUoFu7HvQr3ZHoA=) 5: XfGBei_fvFP0LcnT4xlGOunfSHY.roa (hash: ApG5cEMi+MNJR6ahm8kTy/uN64zS0fv0zRdzd/i6biA=) 6: ZrwHnbp0cmRv-8Aq-3dTrUs96b8.roa (hash: laG521bBX3KOp9w13a5/N7g1SD2gsHS2KdTqelNAv1g=) 7: c_IQ8SmaHgrucdwdeeX7EgktMKk.crl (hash: Vy24w1n/FA++Tz2O1tLwniyTMkvNY1qlEOVip4wF8T4=) 8: h5UPb41WBJf3smLRT3WauyTJhZk.roa (hash: 7y7FascFoSESS5H+heHuGPqwY6CoIfeWFtJUfTaH8Lg=) 9: nT9Kl7qa4avyYi6PobndNFEx2JI.roa (hash: 4NhOocRVxQsq48Sjltw5zBhFh6NiUij1mxelAtmoUp0=) 10: oZLWF8gLajZCT_M6ta5KOw1e-uE.roa (hash: Nxxg96Yg+gJgdj/JmtToAVEJngCcIJHEBAsuLi0S7A0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Apr 2025 01:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:47:45:25:e5:eb:98:86:aa:87:bd:0d:e7:7a:4e:54:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9 Validity Not Before: Apr 18 05:00:36 2025 GMT Not After : Apr 19 05:00:36 2025 GMT Subject: CN=ea8ced66838aabd98ee871e4ef42574e42f43a4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:85:19:76:b1:82:45:1c:cc:b8:be:70:75:7e: 6d:06:34:b2:26:79:45:6f:91:cf:0e:5e:c6:c3:a3: 4d:15:06:03:d5:10:43:8f:b1:97:0d:82:10:73:3a: 49:bc:13:c2:d3:c4:f4:2a:ae:fa:7a:a1:0e:8b:80: 9d:7a:e1:35:d9:f1:a5:d6:6e:c4:7b:47:69:1c:bd: ef:a1:b2:4d:de:00:08:7c:22:07:91:bb:88:aa:c6: f3:ca:58:07:04:1f:8b:93:56:fd:9d:15:9e:12:e7: e6:01:ef:3f:8c:e1:3f:31:64:15:0f:aa:d6:97:54: 48:9d:1f:aa:33:71:5f:d5:90:b8:02:e8:fb:d6:9c: e9:16:d9:64:f7:14:c7:31:ce:af:f2:ed:2d:22:93: 76:e3:37:d5:7b:aa:4e:8c:1e:5b:ea:50:5d:32:d5: 09:ba:6e:03:82:3d:9c:0e:fe:47:46:e0:95:6a:3a: 44:b0:fe:81:ca:f5:de:55:e8:bc:66:f3:c5:48:b1: ee:12:ef:fc:44:88:e0:fc:b6:99:bd:41:5a:db:71: 34:7e:88:42:6d:62:c0:92:29:74:a6:85:cb:a2:47: c9:bf:19:bf:ba:b6:6a:8e:05:12:28:50:a3:89:b5: 76:56:0e:bf:c8:9a:25:05:58:58:bf:e7:df:68:19: 97:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:8C:ED:66:83:8A:AB:D9:8E:E8:71:E4:EF:42:57:4E:42:F4:3A:4E X509v3 Authority Key Identifier: keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:63:9c:f2:83:b1:e9:98:d6:c8:45:10:cc:7c:2d:9f:6b:8f: 62:c7:ba:a6:ab:56:6a:bf:68:2e:8c:c5:15:47:c6:28:8b:a0: 5b:a1:de:ce:90:7d:29:87:fb:f6:ac:36:48:a8:19:e7:ce:17: 98:16:9e:f4:41:62:f8:9a:58:c4:ee:6e:f9:11:cd:78:da:d0: 9e:e7:2a:fe:09:45:f1:2c:5d:5f:e4:e0:c6:c0:66:5b:e3:be: 5f:48:12:69:dd:12:94:55:9c:81:bd:bf:61:a4:46:5f:1a:24: 42:f5:c5:b7:70:88:f7:7f:48:40:9a:b5:15:e4:50:d1:11:52: c3:86:8b:15:a2:fe:1f:f0:64:82:69:7e:b6:74:1b:de:17:8c: f1:7f:41:fc:25:2a:9e:2f:79:93:d4:9a:2f:2e:2d:a5:15:44: d7:41:95:10:23:51:cf:dd:69:15:26:78:c5:1d:75:13:8c:d7: 62:7d:b7:03:45:cb:84:a6:08:f6:47:69:ca:e2:71:96:99:cd: df:04:df:69:31:a1:7f:be:c3:e7:6b:56:ed:bb:33:51:be:8f: 0c:3f:3b:a3:c6:6f:f1:32:6c:02:c4:c7:d5:dc:31:e4:5a:d1: 79:35:c2:2d:a6:64:4b:12:ce:77:42:a2:73:4e:3b:f1:f9:fe: 1c:20:d5:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZHRSXl65iGqoe9Ded6TlQUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczZjIxMGYxMjk5YTFlMGFlZTcxZGMxZDc5ZTVmYjEyMDky ZDMwYTkwHhcNMjUwNDE4MDUwMDM2WhcNMjUwNDE5MDUwMDM2WjAzMTEwLwYDVQQD EyhlYThjZWQ2NjgzOGFhYmQ5OGVlODcxZTRlZjQyNTc0ZTQyZjQzYTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4UZdrGCRRzMuL5wdX5tBjSyJnlF b5HPDl7Gw6NNFQYD1RBDj7GXDYIQczpJvBPC08T0Kq76eqEOi4CdeuE12fGl1m7E e0dpHL3vobJN3gAIfCIHkbuIqsbzylgHBB+Lk1b9nRWeEufmAe8/jOE/MWQVD6rW l1RInR+qM3Ff1ZC4Auj71pzpFtlk9xTHMc6v8u0tIpN24zfVe6pOjB5b6lBdMtUJ um4Dgj2cDv5HRuCVajpEsP6ByvXeVei8ZvPFSLHuEu/8RIjg/LaZvUFa23E0fohC bWLAkil0poXLokfJvxm/urZqjgUSKFCjibV2Vg6/yJolBVhYv+ffaBmX7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOqM7WaDiqvZjuhx5O9CV05C9DpOMB8GA1UdIwQY MBaAFHPyEPEpmh4K7nHcHXnl+xIJLTCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kYjFiNDgtMWNjNS00ODMzLTkzZDkt Yjk0NjQ3MThiYTM3LzEvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kYjFiNDgtMWNjNS00ODMzLTkzZDktYjk0NjQ3MThiYTM3 LzEvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAmOc8oOx 6ZjWyEUQzHwtn2uPYse6pqtWar9oLozFFUfGKIugW6HezpB9KYf79qw2SKgZ584X mBae9EFi+JpYxO5u+RHNeNrQnucq/glF8SxdX+TgxsBmW+O+X0gSad0SlFWcgb2/ YaRGXxokQvXFt3CI939IQJq1FeRQ0RFSw4aLFaL+H/Bkgml+tnQb3heM8X9B/CUq ni95k9SaLy4tpRVE10GVECNRz91pFSZ4xR11E4zXYn23A0XLhKYI9kdpyuJxlpnN 3wTfaTGhf77D52tW7bszUb6PDD87o8Zv8TJsAsTH1dwx5FrReTXCLaZkSxLOd0Ki c0478fn+HCDV9g== -----END CERTIFICATE-----Generated at Fri Apr 18 07:59:09 2025 by rpki-client