$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft File: jzgYVUpRgI7vuCnsdGWjIi8nASM.mft (raw, json) Hash identifier: qIHHN+eckVab91fk9d6wyx04hwr6Up58IIUtwX8zO7Q= Subject key identifier: 61:2A:56:8E:DF:F1:90:4C:B2:91:D7:52:3D:91:5F:BB:E1:F1:9B:86 Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23 Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123 Certificate serial: 01964520291CFB4D651D7DCC435366DBC8C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft Manifest number: 152D Signing time: Thu 17 Apr 2025 19:00:57 +0000 Manifest this update: Thu 17 Apr 2025 19:00:57 +0000 Manifest next update: Fri 18 Apr 2025 19:00:57 +0000 Files and hashes: 1: 1-d5l7iEM0a18LhX1EyGB8md8n8M.roa (hash: 501zHAdTFZeEcvr80KDCfqteaSP9iBPoj2GeSoFGK4o=) 2: 1pbl9lLrLHSegTR5aMKg_vc70Uo.roa (hash: JuIlY/C1ag+dEHYXDzz9ICIcinIRd2dm1piPpM/bPQE=) 3: 3zrOYfPwdwhMIYtIoDWyzk7SucA.roa (hash: ruw9KhAohiZRqx+LW+C5lr9bjBdHC4VDTTsxeERmgZg=) 4: 9LsXhoJtL7-2qGdvOA9nYY52LA4.roa (hash: x0mvykiBl3PdYycDz3PAmyxOLKYTeQXbhrJjdxOiRbA=) 5: D9naFu6VO2lwpjmohULxFpHf9o0.roa (hash: /QUuvgGaHE+yk+5fnp+5qSsx9OmsxECFhKZjRSqaWdE=) 6: Dhmm9E4z9IDgJopzgLGmxrHdNQ4.roa (hash: B8DLE1dNxG4G5fXZ02aNrPdB4JUf1oXnLm020cY0Ang=) 7: Fex3ntehhk9YD9UIIrzJwNM9wrw.roa (hash: sq3dolfBoZQI4X41dAgCq7RgYZJhMoyQLMqp5TWhC2I=) 8: VjpJTcOg3A5jj9MR_Jf-2rC27FI.roa (hash: j+JKcPjYq1zl0l4R0plKeTXWGQoSZJuEOufZw9GSsFY=) 9: YW1hjZcECO_e-0edVIPSxYfb76o.roa (hash: Z7Jb+7gEawQrZdP5rGn/EP9zISP8MR7q05pqJZYy5UQ=) 10: Yf4EPkmLCRMBoZZIyHDnCPRPVEI.roa (hash: ttyqpkkqQzqqS+yO4BIrD80NvM4sA9JzqnD08LyFADk=) 11: dXcSjT8XLHwaAMrJxhlYycEZesc.roa (hash: vJl3MVsCu53wiiS+S6cF6AaFBwg//wkLirqkCxUkMcU=) 12: djNEYQKUqckFK1iM46DyL8t42d0.roa (hash: NQBuvCxVnkGQRlXPk53EZOQo+ABbplgx2/ODuq1jN3M=) 13: f7g9WoNm-2HicP4eAC6c6FDXbfw.roa (hash: zw4AKABwEHT1G3SslViMu4vYgw9q/wbL5miIJACFbLo=) 14: gvygCJRNiZjAzFCHzFEh-Jvn8p4.roa (hash: GokX4+GYxsZuRoER2H3W827pg8jM7a0dfuDGYTpJcug=) 15: jzgYVUpRgI7vuCnsdGWjIi8nASM.crl (hash: rT3nR1509iK+ZMt1oMHrMeZKv5mosCZoydKE9jgZmgw=) 16: l4eCCyQbqnmNaWzCsO-CTHaJLBQ.roa (hash: +can2V5bGbRV5XkaQEn6m/2qdSAnNySkBwlFd9kA+2w=) 17: mfw9rN7s0JH2LVr_IrLTwFMFT7k.roa (hash: Fl3Qq4SjgxhY/P+3EJokj3AAPC+i2wSth+OMzYo5JiY=) 18: sHn49Wbb5PrrjUwnaQqlFkCVe1w.roa (hash: Js/zXcmF6Rja4dKWo6EIhgWUvKjRGSk5unEUfI1hOIs=) 19: xQd5W4e4PnDjglCYlz04ippgCtY.roa (hash: Tau6wHDOULjCaWttAcL4vrdDPhetrZL68pVWIATRLJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 18 Apr 2025 16:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:45:20:29:1c:fb:4d:65:1d:7d:cc:43:53:66:db:c8:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123 Validity Not Before: Apr 17 19:00:57 2025 GMT Not After : Apr 18 19:00:57 2025 GMT Subject: CN=612a568edff1904cb291d7523d915fbbe1f19b86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:99:2a:7d:81:8d:59:a1:4b:be:d2:a2:79:32: c1:06:1b:c7:9d:e0:5f:fa:63:22:ac:79:81:c3:d0: f7:98:38:5d:f6:70:48:aa:35:98:da:03:6e:68:46: a1:c6:04:bd:47:fa:e8:52:fb:a4:cd:d6:89:2a:d2: 08:24:4a:2d:b6:96:ea:20:b8:61:cf:74:7a:b5:d9: 21:9a:3b:5f:c5:6b:b6:32:03:fc:05:3e:c5:b2:85: 6a:c0:89:a7:96:5a:75:a7:a0:e6:84:29:de:ac:78: 7d:2a:fa:7f:a1:0f:5c:50:70:e4:e7:fc:c3:b6:37: 3f:04:dd:8b:90:c1:43:1a:5b:ba:72:b7:ce:2b:b6: 98:6f:d1:2c:4b:5a:be:d8:0d:13:1f:dc:37:5d:da: 72:3b:76:34:5e:cc:b6:6e:ac:83:40:37:dd:b9:f8: ca:37:9e:15:20:4c:18:f8:35:55:f9:f4:15:b5:f8: 0a:84:03:fe:04:00:44:37:63:bd:53:8c:7b:92:5b: 4f:30:35:3d:51:87:85:b6:65:ae:45:95:9d:a8:5b: 48:ec:11:8d:f0:4c:9e:f1:f7:2b:82:31:67:33:1c: 60:43:4f:a8:54:6e:e2:44:59:32:3e:5a:93:ba:51: 26:a0:d7:8f:4e:66:b6:a0:7f:48:e1:7f:ee:93:02: d8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:2A:56:8E:DF:F1:90:4C:B2:91:D7:52:3D:91:5F:BB:E1:F1:9B:86 X509v3 Authority Key Identifier: keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:b6:80:50:43:f3:0d:10:75:ac:b8:20:16:a4:b8:88:39:9a: 9a:c8:85:23:5c:6e:2d:cd:ec:c0:f1:63:92:76:4f:09:eb:3b: 8b:17:63:ea:57:b4:65:89:e3:07:42:06:8d:4d:86:69:97:87: d4:89:4d:bc:55:86:20:6e:30:63:c4:87:9b:a3:5e:26:c1:4c: a3:ca:74:d6:93:e6:15:a6:9a:65:a5:9f:e7:2a:bf:89:8e:3f: f2:bc:e6:59:2a:e1:07:1c:16:55:bb:82:16:57:aa:05:cd:8e: ff:c3:85:8d:f8:ca:35:22:ce:ab:5b:14:5f:cb:d1:58:21:92: 6b:7f:ca:aa:13:f2:31:3a:28:59:9f:04:7e:aa:f2:c5:ce:c9: bf:d7:82:7f:7b:23:47:b7:5f:7a:08:a4:8c:5a:b8:78:cd:8d: 1e:ac:fc:14:85:14:25:81:cd:37:a4:c7:53:39:4c:02:8d:f5: 62:56:d3:c3:c9:2b:5b:63:dc:f5:78:b8:5b:49:7e:6d:f8:e3: 1e:f1:db:21:82:8d:b8:fe:af:52:5c:a2:3e:7c:45:b1:7a:b3: 98:5b:89:75:09:d5:46:2c:0d:d4:04:bc:12:54:5e:17:e4:c4: d7:9e:8b:09:8f:ff:dc:18:dc:e0:5d:8c:6e:14:54:57:fc:ea: 7a:2a:67:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZFICkc+01lHX3MQ1Nm28jHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMzgxODU1NGE1MTgwOGVlZmI4MjllYzc0NjVhMzIyMmYy NzAxMjMwHhcNMjUwNDE3MTkwMDU3WhcNMjUwNDE4MTkwMDU3WjAzMTEwLwYDVQQD Eyg2MTJhNTY4ZWRmZjE5MDRjYjI5MWQ3NTIzZDkxNWZiYmUxZjE5Yjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZkqfYGNWaFLvtKieTLBBhvHneBf +mMirHmBw9D3mDhd9nBIqjWY2gNuaEahxgS9R/roUvukzdaJKtIIJEottpbqILhh z3R6tdkhmjtfxWu2MgP8BT7FsoVqwImnllp1p6DmhCnerHh9Kvp/oQ9cUHDk5/zD tjc/BN2LkMFDGlu6crfOK7aYb9EsS1q+2A0TH9w3XdpyO3Y0Xsy2bqyDQDfdufjK N54VIEwY+DVV+fQVtfgKhAP+BABEN2O9U4x7kltPMDU9UYeFtmWuRZWdqFtI7BGN 8Eye8fcrgjFnMxxgQ0+oVG7iRFkyPlqTulEmoNePTma2oH9I4X/ukwLYnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGEqVo7f8ZBMspHXUj2RX7vh8ZuGMB8GA1UdIwQY MBaAFI84GFVKUYCO77gp7HRloyIvJwEjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgt YmZiNGJhMzBlNDVhLzEvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgtYmZiNGJhMzBlNDVh LzEvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANraAUEPz DRB1rLggFqS4iDmamsiFI1xuLc3swPFjknZPCes7ixdj6le0ZYnjB0IGjU2GaZeH 1IlNvFWGIG4wY8SHm6NeJsFMo8p01pPmFaaaZaWf5yq/iY4/8rzmWSrhBxwWVbuC FleqBc2O/8OFjfjKNSLOq1sUX8vRWCGSa3/KqhPyMTooWZ8Efqryxc7Jv9eCf3sj R7dfegikjFq4eM2NHqz8FIUUJYHNN6THUzlMAo31YlbTw8krW2Pc9Xi4W0l+bfjj HvHbIYKNuP6vUlyiPnxFsXqzmFuJdQnVRiwN1AS8ElReF+TE156LCY//3Bjc4F2M bhRUV/zqeipnPw== -----END CERTIFICATE-----Generated at Fri Apr 18 00:53:56 2025 by rpki-client