$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft File: dmcCNs0OA4aEozGUvefUuVrcZvc.mft (raw, json) Hash identifier: QOBUHYoFY5t1FjZ3xEseVOBcGWqb1jxnWqDj0Ng5XyI= Subject key identifier: A2:03:09:61:47:8C:4C:01:B4:2E:F3:D8:EA:73:DA:89:DE:98:C9:56 Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7 Certificate serial: 01950FEB30C0BC22B393003855BB52F0B4FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft Manifest number: 0C3F Signing time: Sun 16 Feb 2025 18:00:26 +0000 Manifest this update: Sun 16 Feb 2025 18:00:26 +0000 Manifest next update: Mon 17 Feb 2025 18:00:26 +0000 Files and hashes: 1: 3aGZcGWIs_eMlaFgLeBFbbKoNDQ.roa (hash: TFkuucN4UO3fh05NKBE3AbRffgRyYyePtYVgR0x7i+c=) 2: VxpPmjuX-xDJQCZmjad0BLzyqaQ.roa (hash: scQCA4WB1SH7VqMcUYx00R9CCsEQG1/Vi2LqLMj0V5E=) 3: YX6TdSLrfQISm2CR9jSMfrWeHto.roa (hash: thQkWvF4nLGlemNm7VcbLLVFDEUCum3r3Jy72QYLpXE=) 4: _EShF3PxGOJE5SZRfQySmvZg1kg.roa (hash: Fv1ecycEXgD6srZq4/0n/myzWwH/n6NbHepwG+mEp58=) 5: a6q6SMppTrXBxB1ybsHve0I84N0.roa (hash: zWAoSAHCDkJxMs7sBHL6WOI4Hvocxl0YCPnrC6K64Fc=) 6: bH5bF_8mxPt1PuFzjL55ZoPT9u4.roa (hash: 61i/OUkjcDYfRXVmFio9adx3zcL9HFjQz1PgrGFxL9g=) 7: dmcCNs0OA4aEozGUvefUuVrcZvc.crl (hash: kju/YGK7TtIkR4Tysprn0rPZ0t5LB5JhSC59V9qq4ec=) 8: fMMGd3zJDjytcmyhyCVTpEhw1kU.roa (hash: 8DAdzVawL9mvA1o+Hlejvqrd7KSs7UEw/UCVjERrvbY=) 9: w0j3028GTs0XxpRerIzPD_MNXeU.roa (hash: lraXgIU7h+zQb9zRqFGVcDbnN4LuLIfjAyKAE8V60jM=) 10: xHUWp-IhZmk_U8CwKK_n9BGOcbI.roa (hash: 2RFD3xexMzAEEdEVrKN657pvNZq2T3uOKQ0MCXLlbXI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:95:0f:eb:30:c0:bc:22:b3:93:00:38:55:bb:52:f0:b4:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7 Validity Not Before: Feb 16 18:00:26 2025 GMT Not After : Feb 17 18:00:26 2025 GMT Subject: CN=a2030961478c4c01b42ef3d8ea73da89de98c956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:06:18:43:5a:4b:96:36:38:78:9f:9d:75:5d: 8e:6b:0a:ad:b2:7d:5f:77:9c:20:d7:09:94:3a:f3: 8c:2b:2b:f2:2e:0b:98:ee:34:d8:b5:a6:a8:b9:f5: 7c:17:14:aa:a9:e9:32:7a:ff:2d:f5:3b:48:78:4e: 48:af:c7:ec:69:71:bb:55:d7:e8:bf:0e:b4:f5:89: a7:6e:5f:0a:2c:e4:06:62:a4:da:fc:6a:47:3f:ce: 17:99:4d:07:2e:b3:71:2c:d7:cc:17:77:30:2a:a9: 06:e7:50:42:64:d9:c5:f1:9d:6f:71:d7:8e:3c:62: 63:a8:26:e6:79:a9:57:38:87:b1:b7:b5:ad:33:8f: 6a:97:aa:6e:10:59:aa:c6:90:d6:48:b8:0d:3d:ef: 03:0e:52:c2:a2:6d:a7:e0:59:61:95:1e:f4:0b:31: 1a:a6:04:26:3f:d4:85:1f:50:10:00:93:ae:f9:12: c4:9d:ed:09:ca:11:5e:f6:c6:00:dd:67:7f:0c:c3: da:bf:bd:d6:33:1a:d9:52:78:1b:64:d7:68:06:39: d7:08:49:de:5b:0c:61:2e:61:75:76:eb:0b:2d:80: 3e:f8:67:a3:14:04:99:be:13:57:8d:b8:ea:e8:fb: 5b:12:7c:12:2a:ab:1c:28:ff:1a:31:46:14:ef:e3: 37:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:03:09:61:47:8C:4C:01:B4:2E:F3:D8:EA:73:DA:89:DE:98:C9:56 X509v3 Authority Key Identifier: keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:5d:97:f0:fe:eb:f9:e8:8e:23:f7:74:73:c3:ac:0f:cc:fa: 31:95:45:89:fd:46:55:d7:97:1c:75:36:f2:97:e5:ff:11:5b: 9e:29:72:86:f5:5b:b2:0e:5a:66:06:1e:5f:13:fa:5f:7b:b5: 98:46:ef:82:ae:17:03:93:dc:3c:ec:4d:3d:b8:eb:4e:ef:36: 5e:f7:e0:50:57:d3:02:02:b0:e5:48:3f:c4:4f:88:7e:34:82: 30:6e:b6:ca:b0:47:7b:ae:ea:46:09:c7:3b:fe:22:e1:9d:9f: 0e:4e:6b:f3:f6:ba:74:51:1d:c8:85:18:0c:17:0d:75:f5:25: d1:c6:8a:d4:d2:ff:82:8b:57:70:55:e6:65:42:65:cd:3a:71: 60:bd:2f:27:7c:3c:48:74:67:fe:95:2b:b3:d7:d2:2d:4a:57: 1b:f1:ae:92:95:6f:9f:c4:4a:e6:4e:02:9b:f9:88:5e:6e:d6: e3:b2:22:af:72:c7:ec:f1:a3:e3:bc:d2:da:be:63:b9:44:53: 69:6f:82:67:06:b5:d7:24:90:43:29:da:47:75:72:20:27:87: 39:38:61:6a:c7:91:ba:82:ae:84:a7:0f:a0:bf:9e:ea:65:b4: d6:c6:ee:46:89:77:d9:34:cb:72:6d:5b:3c:be:5a:6e:69:93: 9a:16:77:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZUP6zDAvCKzkwA4VbtS8LT+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NjcwMjM2Y2QwZTAzODY4NGEzMzE5NGJkZTdkNGI5NWFk YzY2ZjcwHhcNMjUwMjE2MTgwMDI2WhcNMjUwMjE3MTgwMDI2WjAzMTEwLwYDVQQD EyhhMjAzMDk2MTQ3OGM0YzAxYjQyZWYzZDhlYTczZGE4OWRlOThjOTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgYYQ1pLljY4eJ+ddV2Oawqtsn1f d5wg1wmUOvOMKyvyLguY7jTYtaaoufV8FxSqqekyev8t9TtIeE5Ir8fsaXG7Vdfo vw609Ymnbl8KLOQGYqTa/GpHP84XmU0HLrNxLNfMF3cwKqkG51BCZNnF8Z1vcdeO PGJjqCbmealXOIext7WtM49ql6puEFmqxpDWSLgNPe8DDlLCom2n4FlhlR70CzEa pgQmP9SFH1AQAJOu+RLEne0JyhFe9sYA3Wd/DMPav73WMxrZUngbZNdoBjnXCEne WwxhLmF1dusLLYA++GejFASZvhNXjbjq6PtbEnwSKqscKP8aMUYU7+M36wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKIDCWFHjEwBtC7z2Opz2onemMlWMB8GA1UdIwQY MBaAFHZnAjbNDgOGhKMxlL3n1Lla3Gb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgt YmE0ZmMyMzQ2ODNlLzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgtYmE0ZmMyMzQ2ODNl LzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWF2X8P7r +eiOI/d0c8OsD8z6MZVFif1GVdeXHHU28pfl/xFbnilyhvVbsg5aZgYeXxP6X3u1 mEbvgq4XA5PcPOxNPbjrTu82XvfgUFfTAgKw5Ug/xE+IfjSCMG62yrBHe67qRgnH O/4i4Z2fDk5r8/a6dFEdyIUYDBcNdfUl0caK1NL/gotXcFXmZUJlzTpxYL0vJ3w8 SHRn/pUrs9fSLUpXG/GukpVvn8RK5k4Cm/mIXm7W47Iir3LH7PGj47zS2r5juURT aW+CZwa11ySQQynaR3VyICeHOThhaseRuoKuhKcPoL+e6mW01sbuRol32TTLcm1b PL5abmmTmhZ3SA== -----END CERTIFICATE-----Generated at Sun Feb 16 22:01:03 2025 by rpki-client