$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft File: zMR43ZzNYWL4JIisb8UMIdNp8qA.mft (raw, json) Hash identifier: I01I4WbP+3IoP0poyXtgCFF8N0+pFwLgTOjPIRSh7/k= Subject key identifier: A9:02:71:18:6B:EF:52:9B:3C:B3:DE:61:F7:A2:ED:60:3B:7B:7C:E9 Authority key identifier: CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0 Certificate issuer: /CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0 Certificate serial: 01960E3196B3CBF7A038FAF63B20456C1916 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft Manifest number: 14E3 Signing time: Mon 07 Apr 2025 03:00:52 +0000 Manifest this update: Mon 07 Apr 2025 03:00:52 +0000 Manifest next update: Tue 08 Apr 2025 03:00:52 +0000 Files and hashes: 1: 6ve9ZdOx9-Jbfmi44W3M8-3fyYA.roa (hash: dVVun+kF/7beMen84cbPjTHH6kjQfKs3AUC1Xd2wQ2A=) 2: J2wVE-ysPom5E_5lF4tJldYNa-0.roa (hash: oUIFr0+ZyYlkYGUaUpe52i+2V6CsiaUkgkNDD+7+LeQ=) 3: UKCOK-W3ox3wQ-_xQp6Nu_DwCz4.roa (hash: gPrsrWnRzFL4kuQaY4M1gIUFgKd8cdPjv6qajYb7JnQ=) 4: YwzWinKJc46_U8FICjJOYyamFbE.roa (hash: 6RpEEVsTkHPSo1dAN1+8+s2LqtjPnGEmS34LuQumwbI=) 5: a5CofPxS02DnAUUS9BR-MfOlQu4.roa (hash: LylucOp1UfCFOp+5ipOtc4LcLveZAw9S3wnaBKPFnAA=) 6: aTxnMurrHnoJZlgUyPTNHT4Ir8Q.roa (hash: HeEFk1qtIJz6ps6s2w4DpyvOfJGSvhT8ioiircXVR2o=) 7: c_P4sr3Opke1mWU78BvJMlMDps8.roa (hash: epdNIDM+10/qxHg1G8njFcHs1LoWUpUQmmausYhNxGY=) 8: iI8DgizVWpbEfLLZJw23cwOMtao.roa (hash: gWEZpZ6NinOCicsU6XwwO/9pb7/TViv+n+2ETM0yooY=) 9: p1mSMR7xN9m1jztS6WxG27UANcc.roa (hash: 4Bmm+a1YgG6FugC5k/i8MnSCpfdQHkbijQGY6Yl+j+g=) 10: sYAfD4BV-6irRlKQSwMoXHjm0Mc.roa (hash: T1/WiR0D/YUKPRxlOtYq/pfY4c0SddtxyI4tXYaUGdg=) 11: wZigKiFSFg2jf4ybn-aNCM9AUoc.roa (hash: 7ZXKjf9bxY5hwxObMzg74iYfXa92Z7QeLKS7Y869myY=) 12: xuKZJebXbxs55nxOb7ZrfE7zGKE.roa (hash: Jt/lG0DwTTw8LOe3o8IYDXO60+0YpLwITYi+cEFQ4h0=) 13: zMR43ZzNYWL4JIisb8UMIdNp8qA.crl (hash: /8RuHbBjdIb/+OhHiXO89CN+G3fVDCf8DTNIpusY2ns=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:0e:31:96:b3:cb:f7:a0:38:fa:f6:3b:20:45:6c:19:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0 Validity Not Before: Apr 7 03:00:52 2025 GMT Not After : Apr 8 03:00:52 2025 GMT Subject: CN=a90271186bef529b3cb3de61f7a2ed603b7b7ce9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c6:6f:a4:83:fe:17:1e:6d:8a:cb:a2:d8:98: ab:e7:90:47:d9:80:43:51:8f:cf:3d:ec:66:6e:be: 05:f0:dc:ab:6f:44:fd:71:55:27:76:c4:49:c0:c5: 0d:e6:c7:d8:4b:43:5c:6c:f5:8d:3c:b5:d3:96:18: eb:b3:dd:07:f4:a9:b1:f9:1a:02:d8:d4:c9:ec:81: c7:db:de:55:e3:a0:08:71:14:e3:af:94:c8:b8:db: 0c:16:d3:18:92:95:fc:19:1d:c0:44:84:56:d0:b6: 05:a2:6a:f4:11:90:41:21:3e:08:8d:10:d3:2d:af: 18:ba:12:44:1d:ee:64:12:29:fd:e8:c7:d1:46:be: fa:be:0d:11:4f:54:1a:42:cb:d9:4a:db:29:82:6d: d7:5c:97:45:4e:cf:7d:f2:c5:c7:98:1b:0b:50:0f: 2d:d6:69:a5:cb:d5:cc:a7:30:91:53:d1:7f:36:a0: ec:5a:78:0d:0e:4f:47:5a:19:3d:ed:5b:eb:5b:91: 50:e5:95:f3:ac:73:6b:92:d3:cf:59:83:40:46:34: e8:b0:99:e8:f7:84:01:df:43:39:99:5d:41:5e:11: 93:46:4b:bc:cd:93:d6:44:83:2a:8a:bd:d8:d1:af: ef:38:fc:0b:7f:c4:3e:a5:21:89:53:ed:df:de:3f: 3b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:02:71:18:6B:EF:52:9B:3C:B3:DE:61:F7:A2:ED:60:3B:7B:7C:E9 X509v3 Authority Key Identifier: keyid:CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:61:bb:91:55:63:16:0e:ea:6b:ce:bf:14:91:e8:46:83:43: 4f:9a:36:e0:bf:fe:91:64:a0:d8:4d:9c:44:f5:23:9d:72:5b: 10:aa:2f:1a:7a:0c:c1:1a:28:20:20:21:80:02:19:cb:e2:94: 16:09:51:2f:8b:0c:fe:c8:55:00:e3:a6:d5:0a:12:e6:ed:83: b4:c4:f6:6a:8f:6a:6c:04:dd:2f:08:c2:2a:b0:1e:2d:a7:44: 09:72:9b:38:bd:b6:8f:1b:88:d2:00:ff:99:21:33:38:df:ee: 81:c2:66:62:59:e8:60:d1:49:e9:44:47:df:7d:5d:5d:fd:8f: 0a:55:f1:93:10:ba:14:ab:6d:f8:d6:f3:89:b0:ca:70:1a:1e: 20:3d:76:18:89:21:e6:ae:b2:f6:3d:6f:f9:f7:d1:cd:b4:c1: d0:f7:ac:83:f4:54:dd:e3:56:cd:1c:60:59:9a:4c:30:24:d0: c6:9a:90:84:f3:16:77:d8:7a:2e:06:30:5a:b4:a7:61:5c:38: 90:89:b1:87:a8:3c:7e:cc:bc:1d:3c:69:eb:d3:56:2f:8c:94: 6d:9d:03:e2:5b:d4:24:5b:c1:da:de:99:2e:b7:65:95:bc:aa: 56:e8:61:9c:74:f3:2e:31:20:6d:4b:97:8c:4f:6a:68:45:01: ea:d2:3f:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYOMZazy/egOPr2OyBFbBkWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjYzQ3OGRkOWNjZDYxNjJmODI0ODhhYzZmYzUwYzIxZDM2 OWYyYTAwHhcNMjUwNDA3MDMwMDUyWhcNMjUwNDA4MDMwMDUyWjAzMTEwLwYDVQQD EyhhOTAyNzExODZiZWY1MjliM2NiM2RlNjFmN2EyZWQ2MDNiN2I3Y2U5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMZvpIP+Fx5tisui2Jir55BH2YBD UY/PPexmbr4F8Nyrb0T9cVUndsRJwMUN5sfYS0NcbPWNPLXTlhjrs90H9Kmx+RoC 2NTJ7IHH295V46AIcRTjr5TIuNsMFtMYkpX8GR3ARIRW0LYFomr0EZBBIT4IjRDT La8YuhJEHe5kEin96MfRRr76vg0RT1QaQsvZStspgm3XXJdFTs998sXHmBsLUA8t 1mmly9XMpzCRU9F/NqDsWngNDk9HWhk97VvrW5FQ5ZXzrHNrktPPWYNARjTosJno 94QB30M5mV1BXhGTRku8zZPWRIMqir3Y0a/vOPwLf8Q+pSGJU+3f3j87JQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKkCcRhr71KbPLPeYfei7WA7e3zpMB8GA1UdIwQY MBaAFMzEeN2czWFi+CSIrG/FDCHTafKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUt NDI4NTk5ODM5MmQzLzEvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUtNDI4NTk5ODM5MmQz LzEvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGmG7kVVj Fg7qa86/FJHoRoNDT5o24L/+kWSg2E2cRPUjnXJbEKovGnoMwRooICAhgAIZy+KU FglRL4sM/shVAOOm1QoS5u2DtMT2ao9qbATdLwjCKrAeLadECXKbOL22jxuI0gD/ mSEzON/ugcJmYlnoYNFJ6URH331dXf2PClXxkxC6FKtt+NbzibDKcBoeID12GIkh 5q6y9j1v+ffRzbTB0Pesg/RU3eNWzRxgWZpMMCTQxpqQhPMWd9h6LgYwWrSnYVw4 kImxh6g8fsy8HTxp69NWL4yUbZ0D4lvUJFvB2t6ZLrdllbyqVuhhnHTzLjEgbUuX jE9qaEUB6tI/Dw== -----END CERTIFICATE-----Generated at Mon Apr 7 10:11:01 2025 by rpki-client