$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft File: 1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft (raw, json) Hash identifier: KNJzdi7oDZb4vF+C6FOXFtunxU6nlgzkI6khK5U/+qI= Subject key identifier: 11:97:D8:5B:2D:FF:EA:C5:CF:72:7A:2B:FA:72:5E:9B:9B:EA:A1:24 Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C Certificate issuer: /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c Certificate serial: 01960F7B866B230921A3F07936FFDC06889D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft Manifest number: 14F1 Signing time: Mon 07 Apr 2025 09:01:15 +0000 Manifest this update: Mon 07 Apr 2025 09:01:15 +0000 Manifest next update: Tue 08 Apr 2025 09:01:15 +0000 Files and hashes: 1: 0OeAqS6vX3gO6vvCqqj93y9hg-0.roa (hash: 4e6GVSZZmDnDLgJOl3djtnEbqT5lDhaJq4dAZ/qU/lk=) 2: 1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl (hash: O8Ta6hW8ducr5SvmDLxJR5eAmFQTAJPwGu2abkYa134=) 3: D6tj7JT1P0jiEOVSthEhCTE5wmk.roa (hash: uOBUARGoP6eXuPcaSTgozIdLNVRwgpXpaylajpzEpjY=) 4: IHhv8_mZDx6A2j-F31Pdu0k8CrY.roa (hash: STtIVy8Sw+YzG++4aOUBuN18lGWUI/cMQ7xzdEE/ceE=) 5: LrhxRNeyx_23QLWa5vtG1ZBXoY0.roa (hash: /kvdZiHdgr3LrYazf+YoZJL5PqLcDvAeE/KjO0/IEmY=) 6: NBa1UmmcofJztBL8pTAUTjZFH0k.roa (hash: 86hIGHbzSCBjbpNQmq5AwTHYQV5MFxXejgndiQ6r1LA=) 7: VO1QZo2vfxheLbeFL1rejYxNYBI.roa (hash: FCnZcb/OtfouViKRapPfAgcT5IF02/4Osl8N+1EzEnE=) 8: Wc2-UHBTfF-XHLzgQS0SwCmvlB0.roa (hash: 7aSWc04NFLdsEACjlaycXN0TGgVCRx18P8RZa+kCQIU=) 9: cUk9gF1NAvXhh8uQPdgOvohfLq4.roa (hash: kUG38NhhNKk78iTPsGRqnyUiXKkoTEwb6ImAUIs7EvU=) 10: eXcQTJbrXozTeKAzDqeuNqeJXS8.roa (hash: BgZU2yDI43+qdgAmRyguF06tz72w3j3d1e5R8Nv35Sw=) 11: h_wKw8soWFxgRuHS6A95s-ovjqU.roa (hash: c4ZYt7Tyz12qMO6YCVjf1T39qDV6z2Th7V8r47Jgtdg=) 12: m1zGjpaqVIfs0FT9TFYnVV0Yqug.roa (hash: 2qoTzI6foljMw6Ah++0pgV/FdR6MO3DvTBVmA5i5Ook=) 13: pVMgUdSHj0nlaCG6yBmxCGoOV48.roa (hash: iYu6/b1RnNkG7/TqQe3ysX2HEttIbsgucDRlivFMstY=) 14: udVjWjtCw8-mpprcmzafPsXqAEg.roa (hash: 4jYyql/ul3ChaZUGCo2qkL0DtI4tuS2kYKNXsqMrYh4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:0f:7b:86:6b:23:09:21:a3:f0:79:36:ff:dc:06:88:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c Validity Not Before: Apr 7 09:01:15 2025 GMT Not After : Apr 8 09:01:15 2025 GMT Subject: CN=1197d85b2dffeac5cf727a2bfa725e9b9beaa124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e2:e5:9a:bf:6d:02:e5:0d:cf:c6:3d:b8:55: 6b:24:1b:db:ec:d0:54:1c:e4:64:bc:4b:98:d3:ec: 8d:ac:55:4c:3a:ec:ec:b5:13:1b:e4:23:10:d7:e8: 8a:5d:bc:bb:32:56:2d:bc:eb:03:07:32:ac:0a:7d: 49:a5:95:e6:32:dc:18:1c:51:0c:68:cb:01:5c:a2: ba:3d:2a:e9:c3:27:97:e4:6f:c7:1a:33:01:40:66: f1:63:c8:b7:41:7c:28:9c:dd:46:54:e4:3f:65:ec: 44:1a:d8:b0:9b:bf:12:26:18:49:d3:63:72:b2:b9: dc:22:60:6d:ee:6f:ff:b9:36:98:1a:6b:48:b2:99: 22:38:77:dd:1e:8d:3f:9e:52:85:ea:54:a4:82:fb: 79:18:e0:5c:16:07:ea:cb:49:ad:8e:2a:7f:f6:9f: ab:63:f8:32:a3:8a:aa:c9:34:09:9c:db:71:d1:62: 25:19:0f:38:81:20:9f:be:4c:60:e2:67:90:9d:f9: 7b:0e:01:92:bc:c8:fd:71:e7:e0:35:c6:54:d7:7a: 8c:9a:2f:e3:79:9f:c2:9e:82:ea:30:d2:e1:5d:20: a2:04:59:28:1a:2d:4d:e8:e9:35:ab:9c:82:71:b4: 7f:b9:64:ba:5e:81:ff:eb:1d:97:c6:c9:9e:c3:49: f7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:97:D8:5B:2D:FF:EA:C5:CF:72:7A:2B:FA:72:5E:9B:9B:EA:A1:24 X509v3 Authority Key Identifier: keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:a1:2b:c5:7f:21:d8:8e:b9:1d:73:4c:df:52:10:00:b9:64: 75:b5:be:26:5f:99:03:15:ef:1b:79:f1:cf:ad:e7:c0:80:ed: e7:e6:8f:53:65:00:6d:87:7b:03:1c:d5:ac:99:03:50:83:2f: 40:7d:e5:d6:70:af:49:e5:b2:60:ce:08:04:fc:c8:94:3c:f0: a5:ec:2b:ec:41:70:8b:6e:07:1f:8c:63:34:f5:41:ba:2f:13: 62:03:c1:58:48:a2:70:56:41:95:ec:c0:90:68:13:8f:52:3c: df:2a:d2:0b:37:b7:9f:8f:a5:d9:e1:63:74:a1:31:47:39:ec: 45:a4:d0:c4:67:0b:e1:84:95:db:de:5d:0d:8f:2a:c7:ce:f8: f3:4c:5e:a5:5b:d3:64:2e:ae:c9:47:4e:61:cd:d2:a0:8c:f6: 24:e4:36:d0:71:0e:b9:13:50:ea:78:ec:90:9c:2c:cb:67:e5: fa:e7:3b:14:36:35:ac:dc:e4:c8:e9:54:d9:df:10:04:c5:55: bb:c5:e0:77:5b:7a:f6:d7:a5:e6:12:d8:97:85:57:d7:8e:4e: 6d:b5:32:fd:e7:a4:37:bd:e0:1c:65:a4:da:2c:a6:3a:38:de: 24:29:e3:b4:e9:e8:b6:5e:aa:68:ad:8a:e6:b9:87:05:3a:dd: a7:a0:3a:16 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZYPe4ZrIwkho/B5Nv/cBoidMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhY2NiYjcyYWE5ODg0YTViZjhkMGU3NTc0MDRhMTdlNWUy MzMyMmMwHhcNMjUwNDA3MDkwMTE1WhcNMjUwNDA4MDkwMTE1WjAzMTEwLwYDVQQD EygxMTk3ZDg1YjJkZmZlYWM1Y2Y3MjdhMmJmYTcyNWU5YjliZWFhMTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+Llmr9tAuUNz8Y9uFVrJBvb7NBU HORkvEuY0+yNrFVMOuzstRMb5CMQ1+iKXby7MlYtvOsDBzKsCn1JpZXmMtwYHFEM aMsBXKK6PSrpwyeX5G/HGjMBQGbxY8i3QXwonN1GVOQ/ZexEGtiwm78SJhhJ02Ny srncImBt7m//uTaYGmtIspkiOHfdHo0/nlKF6lSkgvt5GOBcFgfqy0mtjip/9p+r Y/gyo4qqyTQJnNtx0WIlGQ84gSCfvkxg4meQnfl7DgGSvMj9cefgNcZU13qMmi/j eZ/CnoLqMNLhXSCiBFkoGi1N6Ok1q5yCcbR/uWS6XoH/6x2Xxsmew0n3+wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFBGX2Fst/+rFz3J6K/pyXpub6qEkMB8GA1UdIwQY MBaAFPrMu3KqmISlv40OdXQEoX5eIzIsMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1zeTdjcXFZaEtXX2pRNTFkQVNoZmw0ak1pdy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTMvZThjYjQ0LWE5NTQtNDY3Mi1iOWE0 LWE0OWU1YzY2MzNiZC8xLzEtc3k3Y3FxWWhLV19qUTUxZEFTaGZsNGpNaXcubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzUzL2U4Y2I0NC1hOTU0LTQ2NzItYjlhNC1hNDllNWM2NjMz YmQvMS8xLXN5N2NxcVloS1dfalE1MWRBU2hmbDRqTWl3LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYKEr xX8h2I65HXNM31IQALlkdbW+Jl+ZAxXvG3nxz63nwIDt5+aPU2UAbYd7AxzVrJkD UIMvQH3l1nCvSeWyYM4IBPzIlDzwpewr7EFwi24HH4xjNPVBui8TYgPBWEiicFZB lezAkGgTj1I83yrSCze3n4+l2eFjdKExRznsRaTQxGcL4YSV295dDY8qx87480xe pVvTZC6uyUdOYc3SoIz2JOQ20HEOuRNQ6njskJwsy2fl+uc7FDY1rNzkyOlU2d8Q BMVVu8Xgd1t69tel5hLYl4VX145ObbUy/eekN73gHGWk2iymOjjeJCnjtOnotl6q aK2K5rmHBTrdp6A6Fg== -----END CERTIFICATE-----Generated at Mon Apr 7 10:50:57 2025 by rpki-client