$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft File: Kb4C3qCghumID1ZMhocrvFl8xnI.mft (raw, json) Hash identifier: Rk/dU3VgXt3vkQW0THk37RMINYJ5odMTOEIebHUBI/E= Subject key identifier: 8F:41:07:C0:C1:02:C8:8E:68:32:2B:46:9C:21:E1:71:36:04:5F:FB Authority key identifier: 29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72 Certificate issuer: /CN=29be02dea0a086e9880f564c86872bbc597cc672 Certificate serial: 01962BCE6CBF060FA510FE2FA8F3C068E003 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft Manifest number: 12D9 Signing time: Sat 12 Apr 2025 21:01:10 +0000 Manifest this update: Sat 12 Apr 2025 21:01:10 +0000 Manifest next update: Sun 13 Apr 2025 21:01:10 +0000 Files and hashes: 1: 6KpBI63kEhQRzmhRvVQxSFsUBTI.roa (hash: Ckcyw44N8h4Yete0VsDquepnFPzly6G4UPrg1n68+p4=) 2: Bl50d2SW5pMGbeTLnaL144PRWUQ.roa (hash: bI5Yiq9+r3/RdML3fweIl1fiyaU2NaLiJvR9z1M6k50=) 3: Kb4C3qCghumID1ZMhocrvFl8xnI.crl (hash: XP38hKSkctUNYmYyBNuAspVRk0tzxnyXmTJ5pfcgRdc=) 4: MLMPGj8H9Pi_UwBtlTfByiigjfM.roa (hash: pC0aw2jiKroOvxcRGHKOge3OdR3RFQ8raECTuPmJMXM=) 5: OHP3S03u5tMHflzGMFoSd5vTyZk.roa (hash: nGDY1zJo3dHSTN2PJe0pXCx8heywXO+QdXtgHJbEB2A=) 6: RZnwVTO26PBx3a68dhxrN-N2_9U.roa (hash: 2uzv1j/fxffpUq8amOpURgwfPrkNCx7YPSsxO/BHSJk=) 7: XkZDM_8IFwDF5TaEYGBCOeA1rnY.roa (hash: wJ3Nd2iWllTHLJTwVq5JnkwdVdkkialVRVjZAGjLaUA=) 8: aB7sKw4yBEcglwqSevB86YJRj7Y.roa (hash: PH14Cm3gVr59rgH3FX69SJ0GUOOG1kpk0YkBDPc5P9M=) 9: j1JcZG88WoDJIAs0TuxaORvfLro.roa (hash: yIeCKxXutjytoAiiGxkiUBSn0Vk24wB2GDbKm+IJthI=) 10: nwUsD1fndRShZT-s5ssppnOFmiI.roa (hash: 5Gw61qVpay4Kz2GbqbYja1rnv6svDc1Ma6KW2KgO/Fk=) 11: zphCyxB7JvvZfrdVh3qU9-FSl5c.roa (hash: PYY+kdRiBf7TYzIHyOP800eu0rdgwqkk9pHLsntWJR8=) 12: zvPA1UGui-igyOCxkJMwtvZ5S28.roa (hash: /AfKz5TxnkzdqXaxQMADqDtWb4d/fIp2oXqMIKdkCNA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 13 Apr 2025 18:34:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:2b:ce:6c:bf:06:0f:a5:10:fe:2f:a8:f3:c0:68:e0:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29be02dea0a086e9880f564c86872bbc597cc672 Validity Not Before: Apr 12 21:01:10 2025 GMT Not After : Apr 13 21:01:10 2025 GMT Subject: CN=8f4107c0c102c88e68322b469c21e17136045ffb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3b:e4:c7:f9:25:c4:27:95:de:d8:4b:27:3d: 5a:b8:7d:17:f6:00:d9:20:d1:fa:ee:30:30:4e:75: 59:7e:2a:46:a1:df:07:e6:cd:aa:c9:f8:91:38:b3: 24:5a:42:03:5d:d2:b1:b7:b5:39:ee:c9:35:ac:e0: a7:b7:28:51:57:ca:3d:e9:5c:7f:a6:c8:8f:6b:7a: e0:0b:0a:fd:a4:bd:2f:7c:bb:88:ee:e5:dc:7b:60: 71:28:8c:5d:ee:8d:e7:05:76:bc:72:55:4b:c1:eb: 31:1d:e8:66:9c:6e:79:af:be:cd:19:fc:f3:23:77: 58:df:2d:05:91:f3:d8:30:d6:08:58:90:a8:3c:05: fc:a2:32:0e:e0:92:0c:d4:d2:e7:7d:0d:68:24:cb: e0:7d:42:8d:4e:4f:a8:70:07:37:02:0f:c8:18:b0: e5:36:f2:cb:a3:60:28:e1:0c:31:ba:6c:e5:0f:a4: ae:77:fb:76:3d:17:17:f6:92:c3:39:6c:b0:3c:3d: 13:ac:d8:c7:c3:e6:93:eb:67:ca:87:b2:da:03:29: 81:69:32:e7:7b:2c:5f:f8:21:e3:ac:9d:52:28:f4: 25:87:62:df:38:63:fe:11:27:9f:c0:f3:d5:da:42: 34:94:08:be:0c:78:1a:60:7c:bf:be:c3:71:1f:3a: 95:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:41:07:C0:C1:02:C8:8E:68:32:2B:46:9C:21:E1:71:36:04:5F:FB X509v3 Authority Key Identifier: keyid:29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:31:a6:40:f1:7d:cc:f9:d6:cf:c8:05:a0:82:3b:1d:c4:90: 18:ed:3c:59:94:c1:9a:32:10:01:ee:73:d4:88:70:1d:05:9e: af:d4:1a:61:27:05:b4:30:2f:3c:00:ae:40:f4:a0:df:a8:6e: e4:6e:83:30:dc:7f:f8:39:3d:60:49:a2:04:70:3a:a3:b4:dd: 88:00:ca:a7:94:e4:e3:c0:9e:6f:63:b6:09:43:36:87:08:6c: 6f:d6:cc:9b:a7:f4:6e:65:b6:33:ca:cc:9d:9d:ec:fe:69:51: 6b:7d:8f:6c:e5:98:e8:df:dc:85:fc:68:25:72:e2:11:b3:d3: 45:c8:fd:e5:54:ae:b0:a8:9d:f6:f9:6d:fd:1d:cc:64:06:dc: 7c:2b:46:2b:bb:35:fb:60:55:11:9a:2d:62:5e:5a:11:e0:52: 5a:78:f4:a3:27:4d:b5:cd:2d:0d:51:77:d9:ac:1b:4c:53:bc: 4b:03:42:90:9d:21:08:13:ac:d6:ca:b1:1b:7e:b1:73:67:e9: 4f:f0:02:63:64:8f:15:2c:94:4a:ac:68:34:2a:70:93:d7:39: ff:48:51:da:51:d9:6e:6e:dc:18:0d:17:af:5b:fe:57:b3:45: de:83:8c:04:af:a6:0f:c3:66:03:21:4a:db:63:13:4a:10:28: fb:de:e9:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYrzmy/Bg+lEP4vqPPAaOADMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YmUwMmRlYTBhMDg2ZTk4ODBmNTY0Yzg2ODcyYmJjNTk3 Y2M2NzIwHhcNMjUwNDEyMjEwMTEwWhcNMjUwNDEzMjEwMTEwWjAzMTEwLwYDVQQD Eyg4ZjQxMDdjMGMxMDJjODhlNjgzMjJiNDY5YzIxZTE3MTM2MDQ1ZmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjvkx/klxCeV3thLJz1auH0X9gDZ INH67jAwTnVZfipGod8H5s2qyfiROLMkWkIDXdKxt7U57sk1rOCntyhRV8o96Vx/ psiPa3rgCwr9pL0vfLuI7uXce2BxKIxd7o3nBXa8clVLwesxHehmnG55r77NGfzz I3dY3y0FkfPYMNYIWJCoPAX8ojIO4JIM1NLnfQ1oJMvgfUKNTk+ocAc3Ag/IGLDl NvLLo2Ao4QwxumzlD6Sud/t2PRcX9pLDOWywPD0TrNjHw+aT62fKh7LaAymBaTLn eyxf+CHjrJ1SKPQlh2LfOGP+ESefwPPV2kI0lAi+DHgaYHy/vsNxHzqVtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI9BB8DBAsiOaDIrRpwh4XE2BF/7MB8GA1UdIwQY MBaAFCm+At6goIbpiA9WTIaHK7xZfMZyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9lYTFjZmYtYWU4Zi00NzE5LTg5YjMt MDAzYTE1NjhiZjNmLzEvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9lYTFjZmYtYWU4Zi00NzE5LTg5YjMtMDAzYTE1NjhiZjNm LzEvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlzGmQPF9 zPnWz8gFoII7HcSQGO08WZTBmjIQAe5z1IhwHQWer9QaYScFtDAvPACuQPSg36hu 5G6DMNx/+Dk9YEmiBHA6o7TdiADKp5Tk48Ceb2O2CUM2hwhsb9bMm6f0bmW2M8rM nZ3s/mlRa32PbOWY6N/chfxoJXLiEbPTRcj95VSusKid9vlt/R3MZAbcfCtGK7s1 +2BVEZotYl5aEeBSWnj0oydNtc0tDVF32awbTFO8SwNCkJ0hCBOs1sqxG36xc2fp T/ACY2SPFSyUSqxoNCpwk9c5/0hR2lHZbm7cGA0Xr1v+V7NF3oOMBK+mD8NmAyFK 22MTShAo+97pHw== -----END CERTIFICATE-----Generated at Sun Apr 13 04:06:08 2025 by rpki-client