$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft File: I0tUsRmns-_xUwhbcxVQfNhROg8.mft (raw, json) Hash identifier: 8yx5p7oPjqBkzWgCjax/LO5QBq/X0GZqYtOTcORfFtU= Subject key identifier: 9E:73:B0:16:D6:8A:6B:36:9B:09:64:B2:F3:A6:5D:ED:6C:50:4D:FD Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f Certificate serial: 019643D60C0A55DF99916BC33E14707BA5A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft Manifest number: 0B35 Signing time: Thu 17 Apr 2025 13:00:23 +0000 Manifest this update: Thu 17 Apr 2025 13:00:23 +0000 Manifest next update: Fri 18 Apr 2025 13:00:23 +0000 Files and hashes: 1: 2tV1T5SBsSkKar1qXX5FYlQ_B9Q.roa (hash: mGLI3Jd52qgMG50087Vl0ag+Rgi85Yfd8348tK3nJlQ=) 2: 9CjEL92KVQbBIKjAH6PWgI9d9kA.roa (hash: CxlINazLO+svbCxijVW6/kRGdkNG420xQ9K3jp5I7bo=) 3: 9Q-K0yA0D9jdkGXn7ifhVh2hLe4.roa (hash: BhOE66QanPWqjjysyWqBU6hcSToV2kkgkpmWedK9Plo=) 4: BKpPZ6YhMA786wWelQvZ2FdIeg0.roa (hash: CY94cVx1ALq/cp1lEiwu3JzO7Vk53LXHozpiwU2ifHA=) 5: Gg5xBTPmG5wIfgvjDfofedqUN2I.roa (hash: 44BexOUoVzM2f1vahHLSGVHdqnL6HKMPG3ed5PmM4sw=) 6: I0tUsRmns-_xUwhbcxVQfNhROg8.crl (hash: nEjf1ttmM7OKXnxqT7CGptoriuWjusUnsjS48QeNg+0=) 7: KfWHlYFQnzVI2dPuoiLZqsly00A.roa (hash: hXW7e+AyYxT2PE5t8wRUT3atz/+WaH8gt4XQgdBp/mU=) 8: LtctFlc4GRCf3PIlxO5Sz70Upcc.roa (hash: 9oaNZGvrfQP+yRIBwwcg5U7jui8/sOP7Dz6ZLTuPIgM=) 9: LxwAd59gPAFiSwQsp6U5bWHTUIA.roa (hash: sV/jv6UM3eB6Fepo8zmoDeIxV8A3Cp94EBt2zbiu7+M=) 10: M73NPvrSZwGhIOTA9SbUvHl1x90.roa (hash: ijksxiMRPCxOAqaVav7odzv/IiE5tQUZQM4rRqWGT00=) 11: P4Ngmm4fscIJdjrtcZXwEWC6af0.roa (hash: Dgr4uE36WEf5Xw9kH8tw5qMQ+ewLeqeUvdPupgorbKg=) 12: gspg21PC-Bi6SGHc2DwZhP3SxPE.roa (hash: za152yl/mt+IWnj6LxRFIHIPMleLO2z2bWoNpUAX6js=) 13: nppvTips8XGcmj9VgC_a0xkLzT8.roa (hash: +FXbEH/4T1tplmkgWcOzmoIVkqvQhGApNb34NJo2CWU=) 14: o99Nup4psTKMh8kJYocwkh14uKQ.roa (hash: lhz5Qy+hcNJDmky6RtlI26JguzX0YUJj3nMqDKA0YLM=) 15: xBeaVJYrqyxsJyBEwJgsxIF9If8.roa (hash: DlqRMUr9VXZf6onKCEDA/e64PLwtCRuMp+QIX3GytzU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 18 Apr 2025 07:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:43:d6:0c:0a:55:df:99:91:6b:c3:3e:14:70:7b:a5:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f Validity Not Before: Apr 17 13:00:23 2025 GMT Not After : Apr 18 13:00:23 2025 GMT Subject: CN=9e73b016d68a6b369b0964b2f3a65ded6c504dfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a0:73:14:94:ef:56:52:90:fd:0d:cd:15:02: 30:75:38:13:9c:44:b6:81:ad:e6:cb:87:0d:4a:23: 7d:7d:b2:c5:a2:84:67:33:0c:7c:69:ee:37:06:27: 90:b1:1b:a6:23:6a:0b:7e:6b:e1:86:a7:38:76:21: 8b:6c:21:27:16:b0:a2:37:f5:62:27:85:e1:06:56: 43:1e:e4:d8:ea:69:6c:4d:8d:e5:57:b9:25:0c:39: 9f:3d:43:16:c6:71:ae:6f:0f:cf:c0:90:09:1d:55: 7c:56:ac:f5:cf:d6:87:33:20:71:3a:e6:72:4a:8d: a8:3b:60:8d:6e:f6:ac:21:78:3f:af:c4:09:84:ac: 1f:4c:98:b6:dc:c4:26:5a:a6:1c:6d:92:67:3e:a8: 77:2d:75:a2:b2:35:fa:3d:4a:96:85:e8:93:ce:05: bb:18:dd:39:be:57:09:a7:7b:01:bd:c3:af:5f:90: be:79:ea:06:fa:ba:70:17:b0:a6:92:ea:c8:75:71: 37:61:b1:95:13:a5:92:40:c6:61:c9:7f:1a:19:79: a3:a5:4d:2b:44:84:d3:86:03:7c:e5:2a:6d:0c:5e: f4:46:c1:eb:a5:df:6f:db:bf:24:8a:28:fc:3e:af: 78:84:21:56:7b:44:e0:8b:c0:9c:7e:30:83:f7:55: a5:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:73:B0:16:D6:8A:6B:36:9B:09:64:B2:F3:A6:5D:ED:6C:50:4D:FD X509v3 Authority Key Identifier: keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:e1:c8:00:83:49:bf:a5:dc:b6:16:35:fb:f2:cc:e7:31:1c: 5b:57:e7:96:ea:a1:62:52:4d:9f:77:c2:2c:ca:d6:74:69:cd: 62:64:53:b1:bd:27:a0:5e:f6:d6:eb:78:27:df:fc:40:20:dc: 7a:85:c9:7a:7a:97:02:5b:73:8a:6c:d4:8c:d8:e3:4e:c6:1f: 45:fb:00:54:36:3a:09:c4:87:ce:b7:83:c8:9f:e0:f5:16:cb: 7f:49:bf:38:75:7d:b0:6d:5d:8c:9b:88:e6:6d:da:7f:48:6c: 63:dd:6e:de:a6:9f:92:54:5a:11:83:b3:72:de:dd:4c:68:47: d9:a6:e9:32:4b:de:b1:c7:96:7e:e2:1c:67:09:14:bd:f4:5e: 37:a9:eb:81:23:11:29:97:0b:b8:dc:87:33:f9:b8:a8:fa:00: 6a:53:4c:e2:e9:80:d6:fb:50:c8:c7:3d:20:ed:db:7d:c4:23: c4:0f:4c:43:83:f9:1e:b0:1b:24:cd:c7:5c:46:a8:9e:2c:63: 1b:b5:c2:f4:19:79:3e:3d:ac:37:06:47:9d:08:46:50:6e:77: bd:58:4f:73:0c:3f:1b:8f:cb:cf:80:65:50:0a:b3:bc:45:46: d5:e8:7b:93:99:62:d8:13:0b:ab:fe:90:4e:fa:79:cf:18:9d: 2d:d3:f2:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZD1gwKVd+ZkWvDPhRwe6WoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNGI1NGIxMTlhN2IzZWZmMTUzMDg1YjczMTU1MDdjZDg1 MTNhMGYwHhcNMjUwNDE3MTMwMDIzWhcNMjUwNDE4MTMwMDIzWjAzMTEwLwYDVQQD Eyg5ZTczYjAxNmQ2OGE2YjM2OWIwOTY0YjJmM2E2NWRlZDZjNTA0ZGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaBzFJTvVlKQ/Q3NFQIwdTgTnES2 ga3my4cNSiN9fbLFooRnMwx8ae43BieQsRumI2oLfmvhhqc4diGLbCEnFrCiN/Vi J4XhBlZDHuTY6mlsTY3lV7klDDmfPUMWxnGubw/PwJAJHVV8Vqz1z9aHMyBxOuZy So2oO2CNbvasIXg/r8QJhKwfTJi23MQmWqYcbZJnPqh3LXWisjX6PUqWheiTzgW7 GN05vlcJp3sBvcOvX5C+eeoG+rpwF7CmkurIdXE3YbGVE6WSQMZhyX8aGXmjpU0r RITThgN85SptDF70RsHrpd9v278kiij8Pq94hCFWe0Tgi8CcfjCD91WlOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ5zsBbWims2mwlksvOmXe1sUE39MB8GA1UdIwQY MBaAFCNLVLEZp7Pv8VMIW3MVUHzYUToPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQt MWQyMWQxYmNlM2ZlLzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQtMWQyMWQxYmNlM2Zl LzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg+HIAINJ v6XcthY1+/LM5zEcW1fnluqhYlJNn3fCLMrWdGnNYmRTsb0noF721ut4J9/8QCDc eoXJenqXAltzimzUjNjjTsYfRfsAVDY6CcSHzreDyJ/g9RbLf0m/OHV9sG1djJuI 5m3af0hsY91u3qafklRaEYOzct7dTGhH2abpMkvesceWfuIcZwkUvfReN6nrgSMR KZcLuNyHM/m4qPoAalNM4umA1vtQyMc9IO3bfcQjxA9MQ4P5HrAbJM3HXEaonixj G7XC9Bl5Pj2sNwZHnQhGUG53vVhPcww/G4/Lz4BlUAqzvEVG1eh7k5li2BMLq/6Q Tvp5zxidLdPyHg== -----END CERTIFICATE-----Generated at Thu Apr 17 16:47:15 2025 by rpki-client