$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft File: Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft (raw, json) Hash identifier: qnReXoBGcXr6CJ5K8EMaZWxjF52cc4KkBHPgpeyPTnM= Subject key identifier: B8:44:CD:13:F4:FD:54:31:4E:5B:11:A9:B4:44:5A:E2:F2:52:BA:B9 Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69 Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69 Certificate serial: 019610C537DF675EC499518DDC07D0B0C7B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft Manifest number: 0F1D Signing time: Mon 07 Apr 2025 15:01:22 +0000 Manifest this update: Mon 07 Apr 2025 15:01:22 +0000 Manifest next update: Tue 08 Apr 2025 15:01:22 +0000 Files and hashes: 1: B1Q4xWffdUN7zPjy1sq3Dtrabr0.roa (hash: XSRbcDFmD2SBWhC9QVnlq9zNA7EtDeg2/jCNqGJ6Vow=) 2: G5aSz4shLC5EKgp2SbNK-UcpZls.roa (hash: ao0JJHFk2t7w93DBJFTmDX4+D2u79wITuPAaWZsRu74=) 3: Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl (hash: O2oyrQM9RD87zVHhkK9OeTEiR0s4h1MC54fSfMq5usM=) 4: J-jYbkHcU08sfslJpHJcwTM3ehc.roa (hash: jbuWwS0NdmUW31cs0jkODoZKeIDKRJImFm8tQFXzCko=) 5: L1-u_c8bf1dD8B9bOmVv5ISG07A.roa (hash: 8ADBgqsPooQCw6j27xrWL3GwvCIYr1+OMS53T44MMtQ=) 6: OwdGZ1AgjDFGCReMkA1z7YNmB6U.roa (hash: Bb/ivuP+adqpzsV0MXjT8YP9ajM7ZwSlLveu3KhabUo=) 7: VHuw9bCvd_xbchW3ciS0PDWXw_w.roa (hash: gsE8OKW+/bE0pDGpsJc+2dHPUTMKwzSWKQdDcL2OGGQ=) 8: Vi5NHh9PeiZKSedITFgsgmiPCmI.roa (hash: p7I/BG2g25UPrgXDvJH/MAw3MvHjYcpWdRge+ekzCdI=) 9: YPCVZfdLkRnpwRWt5j9ECFmQgkw.roa (hash: hjB0AgE/bEo2D0PnqWgeOepZ8iy64G1fbs2WbSURiyc=) 10: ZDwPo4eEroHvW0Q-cNvO-pGgd80.roa (hash: MhXd3/42bxWERGmNkex/8mTYhYeR1LhuzyC3QmH77TY=) 11: h9060_GP774mLO77LC6My7l_Iqk.roa (hash: xCF+i+qRMr0iOa+aUqi0JjRA0FfOBaa6KB7RH+xl9to=) 12: lUv8OjHUlBMekakzg-j5fQ_XiFg.roa (hash: f+p/zRgG0RQsMdZYacDCMc3D+9sgqRofkU4BGtH4uqk=) 13: w5dYOa54vKNEPegbP1ILAe4B70k.roa (hash: UG3Pt6aB2V/te9hBV8WZU509/953v6ZJ4S6EVvmx5A0=) 14: wMNls6aGPElAO-q1J1yhX2YjyMw.roa (hash: T5LNkfUUjSqO9ZymGqQoAIJA3aG+G/WQ2mWR/OBaa5g=) 15: wkc9yBg4lPDGjCfaJZRjyFM7mB0.roa (hash: qUIFrqdAEDEN9kEv6WmzzdSEX+yB2KZ5WLQVyM2U4m0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 08 Apr 2025 14:28:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:10:c5:37:df:67:5e:c4:99:51:8d:dc:07:d0:b0:c7:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69 Validity Not Before: Apr 7 15:01:22 2025 GMT Not After : Apr 8 15:01:22 2025 GMT Subject: CN=b844cd13f4fd54314e5b11a9b4445ae2f252bab9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a2:de:9f:90:2c:fd:2e:56:ca:cc:e1:4d:8d: 06:b0:4b:59:3f:57:ab:6d:1f:95:b4:3d:0a:12:bb: 1c:9a:cc:32:cc:51:af:1e:2a:42:31:51:c2:95:fa: d6:9e:18:39:99:bd:02:c9:f2:71:0e:18:73:70:15: 8c:c2:3f:c4:94:ef:96:0b:5b:4e:6a:d1:55:a3:bb: 9f:38:61:9a:2c:ed:7a:9a:2f:a0:87:8e:22:22:4d: 92:ed:bc:da:2a:59:31:9d:45:ce:4e:79:3a:39:2e: 60:26:c2:7b:42:14:53:22:2f:c0:bb:fd:bd:6a:0e: 4e:04:37:88:e7:41:b3:2a:64:69:46:89:05:0e:7b: e6:d8:f0:1d:85:13:36:b5:18:8c:ec:9c:ee:62:10: ff:3c:0c:4f:dc:56:8f:1f:30:ba:2f:e8:93:ba:f4: 19:c1:63:33:5b:9f:7d:77:90:22:e5:51:a3:84:b0: 8c:76:4c:e0:af:40:d5:9e:dc:4e:96:8a:7b:18:54: ae:e7:03:f4:e8:a2:39:a5:8f:c1:7d:5f:a7:b8:c5: 69:96:1d:36:56:92:ca:ad:58:3e:74:b1:64:80:aa: f1:e6:2f:b6:a5:40:66:bc:55:bc:9f:18:e5:53:8b: 75:63:12:fe:87:65:51:42:4c:26:55:e6:db:d5:fe: 0a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:44:CD:13:F4:FD:54:31:4E:5B:11:A9:B4:44:5A:E2:F2:52:BA:B9 X509v3 Authority Key Identifier: keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:b4:c6:11:83:eb:06:c7:fa:32:e7:dc:37:81:b8:76:5f:6d: ae:82:89:ee:e4:84:e7:24:b6:12:55:f8:06:8c:12:7f:ef:63: 7b:12:0b:ed:7b:bd:6e:c1:6e:ea:1a:a6:a8:f4:8a:f1:2f:45: 5d:e9:e1:02:85:09:8d:c4:b5:e6:ec:96:7c:e4:5c:f9:ff:3a: dc:09:df:da:e2:f9:9d:29:b7:54:00:45:26:37:04:95:d8:34: a5:bf:3d:20:42:f6:de:f5:e7:60:2a:53:81:c7:27:bb:c8:8b: 54:0b:40:a6:a5:14:fd:fa:7a:42:08:23:71:0d:cf:cc:3e:cf: bc:2c:ed:90:df:15:d7:45:1d:2a:46:25:f8:36:7d:2d:ba:5f: 2d:76:db:ed:ed:a5:32:96:92:93:a9:22:b3:56:b9:6d:d5:87: 4e:e5:91:50:69:ef:9d:8a:0f:5f:b3:89:bb:5e:93:f1:19:64: 27:a2:d6:4b:d1:f6:31:64:21:6a:4f:83:a6:af:7e:ab:3f:3e: 5c:ea:8b:21:2c:52:0c:86:fe:70:60:d6:2a:d0:48:c4:e3:e3: 08:1d:78:55:20:f1:5c:24:ec:a2:42:8a:72:6d:db:b8:c4:74: ba:35:61:3b:a6:e6:31:c7:78:07:b0:5e:48:53:d3:4b:3c:af: 11:ed:48:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYQxTffZ17EmVGN3AfQsMewMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlOWZkYzdmYjM5ZWJiYmVkNGVlNTRmNzAzZDNhYzYxNTNk ZGVlNjkwHhcNMjUwNDA3MTUwMTIyWhcNMjUwNDA4MTUwMTIyWjAzMTEwLwYDVQQD EyhiODQ0Y2QxM2Y0ZmQ1NDMxNGU1YjExYTliNDQ0NWFlMmYyNTJiYWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaLen5As/S5WyszhTY0GsEtZP1er bR+VtD0KErscmswyzFGvHipCMVHClfrWnhg5mb0CyfJxDhhzcBWMwj/ElO+WC1tO atFVo7ufOGGaLO16mi+gh44iIk2S7bzaKlkxnUXOTnk6OS5gJsJ7QhRTIi/Au/29 ag5OBDeI50GzKmRpRokFDnvm2PAdhRM2tRiM7JzuYhD/PAxP3FaPHzC6L+iTuvQZ wWMzW599d5Ai5VGjhLCMdkzgr0DVntxOlop7GFSu5wP06KI5pY/BfV+nuMVplh02 VpLKrVg+dLFkgKrx5i+2pUBmvFW8nxjlU4t1YxL+h2VRQkwmVebb1f4KVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLhEzRP0/VQxTlsRqbREWuLyUrq5MB8GA1UdIwQY MBaAFB6f3H+znru+1O5U9wPTrGFT3e5pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgt NjkxZmY1YjQ0YjAxLzEvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgtNjkxZmY1YjQ0YjAx LzEvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlLTGEYPr Bsf6MufcN4G4dl9troKJ7uSE5yS2ElX4BowSf+9jexIL7Xu9bsFu6hqmqPSK8S9F XenhAoUJjcS15uyWfORc+f863Anf2uL5nSm3VABFJjcEldg0pb89IEL23vXnYCpT gccnu8iLVAtApqUU/fp6QggjcQ3PzD7PvCztkN8V10UdKkYl+DZ9LbpfLXbb7e2l MpaSk6kis1a5bdWHTuWRUGnvnYoPX7OJu16T8RlkJ6LWS9H2MWQhak+Dpq9+qz8+ XOqLISxSDIb+cGDWKtBIxOPjCB14VSDxXCTsokKKcm3buMR0ujVhO6bmMcd4B7Be SFPTSzyvEe1IVQ== -----END CERTIFICATE-----Generated at Mon Apr 7 19:55:35 2025 by rpki-client