$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft File: HO6RKWyUmS0VGiMiQObPOhdtIDk.mft (raw, json) Hash identifier: 2zs2ei88APOCva79gvEAka9G6rNyd51rYgZVTOYl7ec= Subject key identifier: DF:F5:3C:ED:F8:B8:8E:D0:E6:CA:4F:9D:4A:B8:C3:37:76:28:57:49 Authority key identifier: 1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39 Certificate issuer: /CN=1cee91296c94992d151a232240e6cf3a176d2039 Certificate serial: 01964BFDF5E6F5D1BDAC29EA33C316346ADF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft Manifest number: 0FC6 Signing time: Sat 19 Apr 2025 03:00:56 +0000 Manifest this update: Sat 19 Apr 2025 03:00:56 +0000 Manifest next update: Sun 20 Apr 2025 03:00:56 +0000 Files and hashes: 1: 102Rcb8KW1Pgg5SOwqYp5kasBLk.roa (hash: y7m1QcMceHxmu8M/v2wfuOKJTXQndwbvVHTDN4L1lSE=) 2: 1mc01k4JB9mO_uUxoDo8i1hWS0E.roa (hash: 8wTCoFuyYANLWW2D/EVqLWg408oEqbUMAtp374e3yJQ=) 3: 88P_skAGBFp7OKZHRnG0KVJmPoI.roa (hash: tGiqK/XqC0JOJiX2Em9KLLavk6JfLtdyVgtUQOZcMls=) 4: Gm_cS8iJj-tFJXP1V0-jwGNEWbI.roa (hash: Mek1+m4iEtpLgT/StSNohRI7JnRBASyUnmLHmN4630g=) 5: HO6RKWyUmS0VGiMiQObPOhdtIDk.crl (hash: 349I7oAaGlMQkqNSwgRjLkLqb1AVU1+3+IbSNKONuyY=) 6: M5xSNSg74xAiPhHirIDMnYyKKDI.roa (hash: kFY18cM1/c9JgLsf0tF1GX9g3u8AHSeqmtNVMWpdTXM=) 7: Npd-hacRQ57Kduiqr1RWMbXhGmA.roa (hash: WabQYFdWc7dGq5W0nQkAEwuDtxytEQkZlmuQjmPaRbg=) 8: bge-I_W1NXO4wXcUD8wO2q8GORE.roa (hash: QczRVPNbfyo75luxG1p381iR6nIvpAPPLqlT8W5S9ag=) 9: kKXRYJxwMMXbPNKSde4f-CErN8I.roa (hash: vsnRE4FK7Q7v85LDHKqSHekGSg54JFxZp3g76izUfTw=) 10: kaRHNamZXPJCw_g8nY9b4j30k2Y.roa (hash: 4Wp2FhFr3sOAxEWUnXlXchKEwJ5dKGkuJJKV3L/ukrM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 20 Apr 2025 03:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:4b:fd:f5:e6:f5:d1:bd:ac:29:ea:33:c3:16:34:6a:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cee91296c94992d151a232240e6cf3a176d2039 Validity Not Before: Apr 19 03:00:56 2025 GMT Not After : Apr 20 03:00:56 2025 GMT Subject: CN=dff53cedf8b88ed0e6ca4f9d4ab8c33776285749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d2:7f:66:d0:7f:ed:95:77:b9:82:8a:21:8b: ea:49:5e:e3:24:60:27:59:ef:2e:6e:11:31:0e:a8: a9:8d:a2:a7:2d:1c:93:08:1d:18:76:1d:9b:2a:1a: c5:e4:80:3b:de:7a:d3:c0:90:ad:97:c8:7b:0e:24: fe:3a:f5:d5:b4:88:b1:c7:2a:24:be:d9:d1:79:3d: b4:b8:69:24:c1:89:e6:49:ae:4d:49:e7:e0:c0:bd: 6f:5b:31:7b:02:ca:5d:bc:17:72:56:6e:bd:17:12: 03:99:4d:38:44:0c:5c:ec:d5:f6:ce:2f:76:ca:1b: bc:05:4d:41:3f:18:82:08:f6:34:ee:17:f7:ba:41: ef:48:ab:4d:f6:4a:7b:8e:08:63:ec:a5:4d:55:0a: 79:b4:d3:ba:b3:66:fc:2b:ba:05:fd:19:d6:56:11: 45:f0:99:37:2d:c9:f4:88:a1:21:1e:93:f5:0c:f1: 61:69:1e:b1:b9:91:4f:83:db:8e:1a:b3:d1:ec:53: 53:ca:9f:e4:31:e5:69:d1:c4:a5:71:ad:39:ba:2f: ea:ca:f3:92:f7:03:64:cd:66:ec:c5:75:13:76:5c: 1b:d0:07:5d:fb:df:8f:5c:42:07:f3:d8:b0:47:63: 12:ac:45:c6:3b:a7:6e:72:09:bd:cc:15:a0:be:62: 17:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:F5:3C:ED:F8:B8:8E:D0:E6:CA:4F:9D:4A:B8:C3:37:76:28:57:49 X509v3 Authority Key Identifier: keyid:1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:b9:da:30:3d:7e:61:5e:51:83:f5:36:17:e9:97:11:35:58: 5d:e9:03:9b:11:2f:61:01:b9:b3:f3:c7:17:9b:d6:63:35:ab: a1:19:01:de:49:18:8d:2d:88:59:c0:cd:f6:aa:83:a0:9e:62: f5:10:15:0e:91:f0:66:f3:7e:ff:07:30:14:f4:30:86:37:1e: 1d:d7:22:9e:7e:4e:fd:04:a2:af:66:7c:e0:88:7d:32:c0:ff: c5:cf:cb:cd:70:c7:57:c9:78:85:26:84:00:8f:3c:72:d0:74: 72:c8:d7:5a:a4:bb:5e:96:1b:54:ed:e6:a0:1b:3c:2c:09:19: 71:0d:d2:85:62:ba:3c:e9:5f:8a:a0:d0:a7:ca:a2:b9:85:13: c4:47:ab:04:45:91:33:bb:46:07:f3:a3:e7:77:55:e8:9a:99: 3d:97:e8:4d:72:5e:1e:8c:4a:7e:91:a2:03:7c:b9:32:9c:93: 51:03:03:5b:e4:72:50:a5:f4:d1:d5:22:2e:b0:f9:43:17:65: 86:e2:c9:0a:5d:19:ad:4b:cc:2e:7d:f8:c0:e7:36:e7:33:75: 15:ca:2f:fe:1d:2b:43:69:23:fe:0c:b1:12:0a:b3:4b:06:a5: 9f:49:90:e0:0f:59:48:ce:95:b5:49:eb:9d:b7:42:29:ff:ea: e2:e2:15:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZL/fXm9dG9rCnqM8MWNGrfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjZWU5MTI5NmM5NDk5MmQxNTFhMjMyMjQwZTZjZjNhMTc2 ZDIwMzkwHhcNMjUwNDE5MDMwMDU2WhcNMjUwNDIwMDMwMDU2WjAzMTEwLwYDVQQD EyhkZmY1M2NlZGY4Yjg4ZWQwZTZjYTRmOWQ0YWI4YzMzNzc2Mjg1NzQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtJ/ZtB/7ZV3uYKKIYvqSV7jJGAn We8ubhExDqipjaKnLRyTCB0Ydh2bKhrF5IA73nrTwJCtl8h7DiT+OvXVtIixxyok vtnReT20uGkkwYnmSa5NSefgwL1vWzF7AspdvBdyVm69FxIDmU04RAxc7NX2zi92 yhu8BU1BPxiCCPY07hf3ukHvSKtN9kp7jghj7KVNVQp5tNO6s2b8K7oF/RnWVhFF 8Jk3Lcn0iKEhHpP1DPFhaR6xuZFPg9uOGrPR7FNTyp/kMeVp0cSlca05ui/qyvOS 9wNkzWbsxXUTdlwb0Add+9+PXEIH89iwR2MSrEXGO6ducgm9zBWgvmIXQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN/1PO34uI7Q5spPnUq4wzd2KFdJMB8GA1UdIwQY MBaAFBzukSlslJktFRojIkDmzzoXbSA5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9jOTFlYzMtMjgyMC00MTdiLTlhYWQt YmFjYWI0NzVlNmNjLzEvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9jOTFlYzMtMjgyMC00MTdiLTlhYWQtYmFjYWI0NzVlNmNj LzEvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiLnaMD1+ YV5Rg/U2F+mXETVYXekDmxEvYQG5s/PHF5vWYzWroRkB3kkYjS2IWcDN9qqDoJ5i 9RAVDpHwZvN+/wcwFPQwhjceHdcinn5O/QSir2Z84Ih9MsD/xc/LzXDHV8l4hSaE AI88ctB0csjXWqS7XpYbVO3moBs8LAkZcQ3ShWK6POlfiqDQp8qiuYUTxEerBEWR M7tGB/Oj53dV6JqZPZfoTXJeHoxKfpGiA3y5MpyTUQMDW+RyUKX00dUiLrD5Qxdl huLJCl0ZrUvMLn34wOc25zN1Fcov/h0rQ2kj/gyxEgqzSwaln0mQ4A9ZSM6VtUnr nbdCKf/q4uIVsw== -----END CERTIFICATE-----Generated at Sat Apr 19 12:42:47 2025 by rpki-client