$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft File: RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft (raw, json) Hash identifier: RPYVaHG5QQaRK+qTWlydcwzC4mfCg53B669TJnw2dSQ= Subject key identifier: CE:32:78:62:77:E7:1A:11:73:5C:4C:32:CB:D4:44:F4:DD:95:88:6F Authority key identifier: 45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2 Certificate issuer: /CN=458d12f095053c35876b88b47685d6435421fcf2 Certificate serial: 01962C05AD733563DCECFB30E0728255D4C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft Manifest number: 14F6 Signing time: Sat 12 Apr 2025 22:01:31 +0000 Manifest this update: Sat 12 Apr 2025 22:01:31 +0000 Manifest next update: Sun 13 Apr 2025 22:01:31 +0000 Files and hashes: 1: 0bSG1GbQSr3JP2M9BW2A6zWEmWQ.roa (hash: m8/KEzPrRo4PqG3DFfILeyvmSqlK6Zrphut5P8ccG8c=) 2: 9lwL98-HDVBrZzYLRCpSdOAFXpo.roa (hash: Za/9eX9VNb3FiSxJk6MAE/CpFGWxRO5mjghE1elRivc=) 3: B0iUIhkwv2ZZdyXRyu9yUh7Z61o.roa (hash: F6O6OkDRyyyGqFimHsLztSYsh0AUNFPNkRW3jSPwvEw=) 4: I1EoUAseUd3MHO-sI_txqICBiwc.roa (hash: khM+HdjIw9WozXCqEk/wtCOtMrpNfxWXErjSXn8BT5M=) 5: KQ7nGqqdl8DwDw35UdDbOJPZhfY.roa (hash: 8pIf1gsysAeCO62ayw5k2bU+b1g8t0mrR6+zNCtTibQ=) 6: LS_oKjOyENRZwn9y786G7x_fDEc.roa (hash: qwrjawF9Z67WE+ivjm8mPIl3xqaLReHxca9+SNnwKPE=) 7: Pvub5ztTS47f0XG6tBZE9ngX8Rw.roa (hash: euQ5dqT6xwCfoTsPu9P7kfQ9UGdbPzkkEJWSyFwCBTw=) 8: RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl (hash: 4dxIQCALel6/S06+aM4M/6l+xc/7aJ87e3uaVFZzF04=) 9: lqxGizsVmZbvi7xpd3yzs2I4ILw.roa (hash: aTi4SECMvkjegR9/FyzL9HTmeGkM0AsiVgyipWCsYrY=) 10: sFnlwbiQ75y8_114DKwn3kP_iWc.roa (hash: dkHr9wKemXLLSQfaJK2+kCvWwELtA6u+nMBynz2rXgQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 13 Apr 2025 18:34:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:2c:05:ad:73:35:63:dc:ec:fb:30:e0:72:82:55:d4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458d12f095053c35876b88b47685d6435421fcf2 Validity Not Before: Apr 12 22:01:31 2025 GMT Not After : Apr 13 22:01:31 2025 GMT Subject: CN=ce32786277e71a11735c4c32cbd444f4dd95886f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f5:01:b7:d4:f8:a3:41:3b:0f:f0:81:4d:81: dd:58:28:10:da:44:6d:4c:30:11:46:8d:8d:d6:12: d7:7f:f3:f0:3c:b6:54:f9:e7:83:63:2b:41:f2:cf: 38:44:bb:9b:02:ef:e8:36:59:ef:28:44:d1:95:84: de:5a:19:2e:03:77:85:52:b0:52:b8:15:92:7d:fa: b0:41:13:f4:ca:67:c5:15:ef:a1:b0:22:35:34:e5: f2:40:b8:b8:b2:8d:45:d1:08:29:c8:1d:96:a1:b9: 7e:cf:5e:7b:ae:fd:aa:5f:19:ba:a9:79:fa:cf:6e: 68:5a:0a:27:73:f5:d9:61:86:29:1e:d9:dd:17:f8: da:38:5a:18:54:b2:37:cf:31:45:25:d7:da:fd:d5: 67:94:7b:b6:6e:38:d5:03:49:d2:ec:f6:7d:f5:21: b6:b6:be:3f:c4:78:34:16:d7:9e:d9:16:52:1a:47: 55:d8:ea:cc:7e:5f:ed:17:69:e2:23:e5:43:14:19: 00:a5:37:ec:6f:e5:7d:65:4c:cc:93:5b:b8:2b:9d: 43:02:62:23:af:8f:54:21:02:03:b7:36:db:90:e2: af:67:8f:90:63:13:ca:d6:dc:fa:4a:3e:0c:ff:54: 3a:44:73:23:7d:1c:aa:9c:22:e3:8d:be:5b:9e:98: c9:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:32:78:62:77:E7:1A:11:73:5C:4C:32:CB:D4:44:F4:DD:95:88:6F X509v3 Authority Key Identifier: keyid:45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:63:79:ef:a6:ce:69:ac:00:74:3a:27:a8:fc:82:4f:ba:ca: 69:c3:c2:3d:93:76:d7:ed:3b:e0:47:24:12:55:f5:42:83:cc: 0d:73:03:8a:91:a5:15:86:9c:6a:63:a5:77:79:76:6c:07:41: a5:03:d9:46:ae:a8:38:f5:5b:f9:c2:74:cc:b3:f6:dd:c5:e4: 31:89:d5:80:3a:60:da:48:87:9f:0a:7b:62:39:d4:0b:92:42: 8e:e2:b9:3e:1e:0b:08:65:91:fd:92:7e:e7:81:a0:7c:78:fd: 9e:6c:02:f6:a7:65:93:ea:e1:e6:8b:0c:f2:6d:84:66:a3:86: 56:b1:05:6e:15:69:ea:ea:17:8c:ac:f9:ef:3f:cd:df:f7:01: 0d:1c:f4:62:e8:6e:65:d8:7b:15:d5:05:66:a5:93:7f:c0:54: 14:cf:63:15:89:09:23:69:d2:ca:c7:a2:ab:88:dc:5c:87:42: 10:40:36:00:db:ff:21:38:b0:06:7e:b2:8f:b7:90:cc:47:8c: b3:4d:d0:c2:79:69:6c:62:53:ad:03:39:72:e3:ed:f4:98:80: 74:98:dc:1f:79:38:a8:71:a8:cf:8f:3e:3a:96:87:23:f1:bc: 85:91:34:63:bc:88:29:1d:53:a0:ff:1e:c5:b5:ad:e1:90:58: 5c:b9:9d:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYsBa1zNWPc7Psw4HKCVdTAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OGQxMmYwOTUwNTNjMzU4NzZiODhiNDc2ODVkNjQzNTQy MWZjZjIwHhcNMjUwNDEyMjIwMTMxWhcNMjUwNDEzMjIwMTMxWjAzMTEwLwYDVQQD EyhjZTMyNzg2Mjc3ZTcxYTExNzM1YzRjMzJjYmQ0NDRmNGRkOTU4ODZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfUBt9T4o0E7D/CBTYHdWCgQ2kRt TDARRo2N1hLXf/PwPLZU+eeDYytB8s84RLubAu/oNlnvKETRlYTeWhkuA3eFUrBS uBWSffqwQRP0ymfFFe+hsCI1NOXyQLi4so1F0QgpyB2Wobl+z157rv2qXxm6qXn6 z25oWgonc/XZYYYpHtndF/jaOFoYVLI3zzFFJdfa/dVnlHu2bjjVA0nS7PZ99SG2 tr4/xHg0Ftee2RZSGkdV2OrMfl/tF2niI+VDFBkApTfsb+V9ZUzMk1u4K51DAmIj r49UIQIDtzbbkOKvZ4+QYxPK1tz6Sj4M/1Q6RHMjfRyqnCLjjb5bnpjJjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM4yeGJ35xoRc1xMMsvURPTdlYhvMB8GA1UdIwQY MBaAFEWNEvCVBTw1h2uItHaF1kNUIfzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83Y2VjYzctZjYzZC00M2ZjLWIyMTkt Mzk1NTk1OWVhZjgxLzEvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS83Y2VjYzctZjYzZC00M2ZjLWIyMTktMzk1NTk1OWVhZjgx LzEvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmGN576bO aawAdDonqPyCT7rKacPCPZN21+074EckElX1QoPMDXMDipGlFYacamOld3l2bAdB pQPZRq6oOPVb+cJ0zLP23cXkMYnVgDpg2kiHnwp7YjnUC5JCjuK5Ph4LCGWR/ZJ+ 54GgfHj9nmwC9qdlk+rh5osM8m2EZqOGVrEFbhVp6uoXjKz57z/N3/cBDRz0Yuhu Zdh7FdUFZqWTf8BUFM9jFYkJI2nSyseiq4jcXIdCEEA2ANv/ITiwBn6yj7eQzEeM s03QwnlpbGJTrQM5cuPt9JiAdJjcH3k4qHGoz48+OpaHI/G8hZE0Y7yIKR1ToP8e xbWt4ZBYXLmdGg== -----END CERTIFICATE-----Generated at Sun Apr 13 01:38:53 2025 by rpki-client