$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft File: fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft (raw, json) Hash identifier: /NJMbZHyUpxzlW2pblilfNEoxHK5fr9Y8mVFEr27I/8= Subject key identifier: 62:12:D0:57:08:F9:FB:52:B4:2E:39:8A:37:5F:A7:44:1A:31:A7:27 Authority key identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 Certificate issuer: /CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Certificate serial: 01963086C9BD9D619D237E0C4B19C0323904 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft Manifest number: 14FE Signing time: Sun 13 Apr 2025 19:01:01 +0000 Manifest this update: Sun 13 Apr 2025 19:01:01 +0000 Manifest next update: Mon 14 Apr 2025 19:01:01 +0000 Files and hashes: 1: DBK9l2G1Y1RQ5PjyPxL_4I1OMHc.roa (hash: 3ebqdm6jhi27iGWijCrC+ujaLCSP8YdtxyMrgT6MGh0=) 2: De225tD85-F1qbUEFGgafancbWE.roa (hash: ffQBtPdq/jYZ9UDdbPyqbcdbl0gguGtGw9sQ+gR7uW0=) 3: FVwdutw7NFu1BbmJwTuCXcvc_14.roa (hash: m5b5TQzeQb/gop0Hx8V4hVEc9cB9H3Vuqes4y1yEy8w=) 4: GGjTVZWbLSDhQp9W7TQ3y8oF_b4.roa (hash: Pk5u57XOUkvuKTr8WK8jFr5Dz4GoBS8wm3HWTrG8FLc=) 5: LBBZUXMrOft_XP60iSESTKt86sM.roa (hash: 89zGaVQWdEa8E1V0POtFohdWRYv8E1LJMUoFWfa2mrg=) 6: NoQQo7-js6L12fR0RacWq8GG0sQ.roa (hash: 5b2ty4pyO343YcitFJvqMF9Dc1v6ZLu7zQaIL0yJMCU=) 7: P7tcMbdP2x9DJkbSuUwIb9G9x9o.roa (hash: QjQA68r89i9yJT2InLr4ogmEqW/3iVwOl7YPH7/R1Mo=) 8: VX4ftyY4KZHbSmiCReLCvSah6K0.roa (hash: Rn1JFaArfYotjjdUcRkdUwwvp5zW652Iz5Ayfo9Jabw=) 9: fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl (hash: gqW4H23AkD58Pl2iWEujujMmFPtTOOSRZ8YNPOcwZrI=) 10: h-1L5eLqg4mkZA6vkbFimrHVmcg.roa (hash: bqaSlAu3zA+3kNA8VplAkJvr2kDap+TG6ZM8MSm8+8U=) 11: vCDuY3lxDvFGl_QkzVFbCKb-ZsE.roa (hash: OduZBIIo/1HneBK/hYWAUdQ5Rk0JzBTx0gVli+SLKl8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 14 Apr 2025 17:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:30:86:c9:bd:9d:61:9d:23:7e:0c:4b:19:c0:32:39:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Validity Not Before: Apr 13 19:01:01 2025 GMT Not After : Apr 14 19:01:01 2025 GMT Subject: CN=6212d05708f9fb52b42e398a375fa7441a31a727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:63:27:9a:2a:ab:4d:c5:b4:6e:20:d5:6e:61: f9:b4:fa:27:c3:59:4b:bd:92:cb:9c:83:8f:87:eb: 54:40:b1:84:45:77:61:7a:0e:57:0a:83:57:76:54: 8e:72:32:23:8d:cb:cc:dc:e5:6d:27:76:ae:a5:1c: 5c:a4:8e:05:be:0a:d4:1d:58:b0:e6:3e:24:0c:90: 9f:4e:74:d6:dd:89:a5:93:90:5e:b1:5d:55:f4:6e: 14:86:f6:6c:43:a0:c0:19:8e:80:bd:fb:de:4c:3c: 5a:0b:3f:48:b2:cf:e6:2c:b4:01:22:cf:20:1e:47: ac:a7:80:65:cc:c1:af:0f:76:42:90:3a:ff:58:69: 0a:14:2d:03:30:80:b0:db:f5:e2:f2:c1:c9:9d:55: 45:96:83:d4:65:62:6e:fc:ad:e9:5a:6e:2f:59:a9: bf:51:f0:eb:5a:61:78:cc:2d:fb:8e:b8:07:3e:91: c7:ee:93:a4:9d:b8:8f:f4:dd:ab:6a:52:38:73:58: 11:02:dd:53:7a:c3:44:f5:db:e5:e8:64:d5:35:de: 5e:3a:8f:a4:da:00:eb:de:7c:a2:57:d6:10:2b:2e: f7:3b:c2:a0:68:45:ff:91:70:34:8f:ae:cc:4c:34: 6a:05:05:2f:3a:c8:b3:07:c0:c0:75:ee:60:da:5a: 29:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:12:D0:57:08:F9:FB:52:B4:2E:39:8A:37:5F:A7:44:1A:31:A7:27 X509v3 Authority Key Identifier: keyid:7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:1a:85:bf:42:4c:7b:d0:67:89:8d:e5:20:a7:1e:b6:d2:96: 9c:74:b9:4a:70:6c:70:71:db:63:7a:8c:cd:d0:e4:5b:0a:98: 89:9f:df:3d:a4:17:63:39:81:49:5e:cb:c6:d4:5b:7e:dd:52: fe:d3:91:8a:f8:2a:79:db:a0:68:95:26:a0:be:78:32:9f:e2: 29:6b:70:a4:c6:7e:99:15:04:15:1c:e5:99:29:78:b3:60:63: 76:c2:2f:29:d5:8f:49:fc:d7:cb:cd:e7:2d:14:4d:6f:5f:fe: 01:e1:1a:00:c8:a4:5f:2e:b2:23:cf:4a:5c:c4:35:15:6b:25: 4e:3f:0f:cc:7a:a7:70:70:bb:2e:b1:e7:ac:db:ac:42:fd:9a: d9:64:c2:04:be:61:a3:04:8a:12:63:eb:48:52:94:30:21:41: 8f:f9:f7:f8:d6:f3:5c:09:82:d8:08:b3:60:1b:ab:21:b2:67: 5b:42:4b:11:76:19:9c:db:af:59:93:0d:af:5a:a2:00:0b:f1: bd:ba:e1:30:b3:56:aa:a8:9c:f9:dc:16:93:20:c3:c2:6a:80: 1c:71:0b:5a:8d:21:af:42:64:3d:c9:f2:39:03:dc:5f:4b:bd: 59:6d:4b:ad:de:f0:60:03:4a:05:97:97:5d:1f:de:d6:3f:c9: 12:a9:fa:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYwhsm9nWGdI34MSxnAMjkEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDRjMjVjMmY4YjQ3ZTVkYWY1MmQxYzRjNWE1MDk5OWRk MGEwYTkwHhcNMjUwNDEzMTkwMTAxWhcNMjUwNDE0MTkwMTAxWjAzMTEwLwYDVQQD Eyg2MjEyZDA1NzA4ZjlmYjUyYjQyZTM5OGEzNzVmYTc0NDFhMzFhNzI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGMnmiqrTcW0biDVbmH5tPonw1lL vZLLnIOPh+tUQLGERXdheg5XCoNXdlSOcjIjjcvM3OVtJ3aupRxcpI4FvgrUHViw 5j4kDJCfTnTW3Ymlk5BesV1V9G4UhvZsQ6DAGY6AvfveTDxaCz9Iss/mLLQBIs8g Hkesp4BlzMGvD3ZCkDr/WGkKFC0DMICw2/Xi8sHJnVVFloPUZWJu/K3pWm4vWam/ UfDrWmF4zC37jrgHPpHH7pOknbiP9N2ralI4c1gRAt1TesNE9dvl6GTVNd5eOo+k 2gDr3nyiV9YQKy73O8KgaEX/kXA0j67MTDRqBQUvOsizB8DAde5g2lop8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGIS0FcI+ftStC45ijdfp0QaMacnMB8GA1UdIwQY MBaAFH0Ewlwvi0fl2vUtHExaUJmd0KCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMt ZTYzZTk0Y2JhMDlmLzEvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMtZTYzZTk0Y2JhMDlm LzEvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGxqFv0JM e9BniY3lIKcettKWnHS5SnBscHHbY3qMzdDkWwqYiZ/fPaQXYzmBSV7LxtRbft1S /tORivgqedugaJUmoL54Mp/iKWtwpMZ+mRUEFRzlmSl4s2BjdsIvKdWPSfzXy83n LRRNb1/+AeEaAMikXy6yI89KXMQ1FWslTj8PzHqncHC7LrHnrNusQv2a2WTCBL5h owSKEmPrSFKUMCFBj/n3+NbzXAmC2AizYBurIbJnW0JLEXYZnNuvWZMNr1qiAAvx vbrhMLNWqqic+dwWkyDDwmqAHHELWo0hr0JkPcnyOQPcX0u9WW1Lrd7wYANKBZeX XR/e1j/JEqn6KQ== -----END CERTIFICATE-----Generated at Sun Apr 13 22:34:39 2025 by rpki-client