$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.mft File: dTm3oSNBeqcZMllGqong8wqwygk.mft (raw, json) Hash identifier: ZhxRM/hHP7QXKGn+MPh0teFrFeVrzLGva7j0q0uX5t0= Subject key identifier: 71:EA:58:AB:51:B8:33:67:79:70:4E:FB:08:A7:89:19:3A:D7:FA:DD Authority key identifier: 75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09 Certificate issuer: /CN=7539b7a123417aa719325946aa89e0f30ab0ca09 Certificate serial: 019642FA90E03B921E0F10F30C7B741F40B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.mft Manifest number: 1503 Signing time: Thu 17 Apr 2025 09:00:39 +0000 Manifest this update: Thu 17 Apr 2025 09:00:39 +0000 Manifest next update: Fri 18 Apr 2025 09:00:39 +0000 Files and hashes: 1: 6DEouzxjjNK_68sFR-t4CPN-SS8.roa (hash: Oi8D+F91F2i7lr20xSQLbZgZOtgMLQbrK5SvQlzaitc=) 2: GcwznvOYgf-O_ItmFmcLriyXzrs.roa (hash: GxJFlw75s4yOkIPA50toNBLYc/0teNDfXWriesa0E04=) 3: LYviAp3PxmjO3NYT62eUwATXCDA.roa (hash: cNgFyZaC7ifnpFT8pGCK7760nWd6v3gVDQo7PYoFJbc=) 4: MEvLBKznYJtmItKD78ssXi4mzoQ.roa (hash: pEF4lHoNxgZxriIYsg2W9oGgnigGshpc2ELBfuOnvBk=) 5: QL3J5aUF7REcuSuGJkHRh-T_Mlk.roa (hash: NRo/K62fCGXaYZyQldEoQlP95+Ec/K3+eWLflyYVYMA=) 6: Saq3VYHlza0IcEZF1whMhjsSAlA.roa (hash: iAqLC/j/inixhiy0KGKP177bZAzmIcZH/0FDe0WAUeQ=) 7: VOSDfxHvYjtBiBTe909ZadJMtPA.roa (hash: dQcuzaMdOD+0BiceMsluO5RG0GYGErSY43MYPGJaOdo=) 8: VVGAKlexZnslyaxsj979p9-1tLc.roa (hash: zSg/YLF7G2TzXt0TnTqPgj/B+dgWPQfBczFUSMDRTig=) 9: YWpo66YDW4G278af10SMQAtiOHo.roa (hash: Y9X0J6r0SDlIe4fmcLli4bcOvBDBEcbJdPc8zKihBto=) 10: dTm3oSNBeqcZMllGqong8wqwygk.crl (hash: IqYwBKW4mpQrms8BZjAXbDMYgyzL1W0MhhAbe++z0Jo=) 11: jiri3_1wYxUytGVauPuF_p1QcDE.roa (hash: pAKnIcLWyugWirmmWEvyvb0vortDg2AUGgIHTvMYhkg=) 12: kV6R2Ovdk9Hj-oCFXECnloFy2r4.roa (hash: PiaTCFnxlB3VR92lDDt5EbEtyX7/8S00PG5z/8wHps0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.mft rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 18 Apr 2025 07:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:42:fa:90:e0:3b:92:1e:0f:10:f3:0c:7b:74:1f:40:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7539b7a123417aa719325946aa89e0f30ab0ca09 Validity Not Before: Apr 17 09:00:39 2025 GMT Not After : Apr 18 09:00:39 2025 GMT Subject: CN=71ea58ab51b8336779704efb08a789193ad7fadd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d1:0f:2d:03:c4:ab:5e:17:df:e5:f9:ae:e6: 14:3b:24:c9:72:ab:55:ef:20:fd:95:ba:9a:ff:0e: 95:06:28:0f:3d:ad:e3:99:c6:e9:56:99:dc:a8:8d: 77:75:6c:b1:bf:3a:bb:29:cd:5e:af:3d:95:e8:39: 95:78:6f:23:23:48:bb:aa:ce:17:97:92:e9:bd:52: a0:c6:a4:b6:38:38:62:e0:e1:a1:6a:a7:52:b9:c2: 30:1d:0b:bc:4e:07:10:f1:7f:63:9e:19:ab:0d:1e: 74:27:7b:77:51:a8:82:78:21:2b:1d:5a:21:f9:80: 59:27:bd:b2:d3:88:a9:6d:bf:09:01:f4:4c:f8:10: 7c:12:22:85:a3:34:db:28:d3:81:50:d5:74:0f:d1: ea:70:4b:71:a1:d6:26:b3:40:33:a5:e6:a5:df:46: cd:d3:1d:e0:9a:32:e6:30:76:ef:0d:51:e6:fb:32: de:ef:70:d8:c1:b5:fc:40:64:10:fd:62:76:db:67: fb:86:dd:f6:66:05:52:4c:41:af:ce:96:28:a2:57: 9d:f7:7b:c6:61:54:84:45:22:1b:94:5f:73:8b:17: d7:e7:8c:58:27:11:48:ac:f9:43:ca:ad:4a:9c:ff: 2c:79:80:db:ff:12:3d:c2:02:3f:b0:57:f2:82:11: 43:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:EA:58:AB:51:B8:33:67:79:70:4E:FB:08:A7:89:19:3A:D7:FA:DD X509v3 Authority Key Identifier: keyid:75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:b5:24:fe:58:f8:a5:ca:23:a4:18:7b:87:a6:70:3f:7e:8b: 17:8e:ff:44:0d:59:f7:a9:e9:6e:61:1d:3f:ba:1e:74:e5:53: ae:96:0a:59:3d:6a:fb:8a:f8:60:83:21:74:5e:68:84:38:f8: a3:1e:c7:c8:49:8f:2c:8e:b9:5b:43:8f:4d:78:a7:85:10:ec: b4:1d:72:e6:9a:ca:dc:2c:e3:c1:42:3d:0b:6a:56:43:9a:c2: a8:04:bb:36:13:bd:7a:2e:9b:fb:bc:c2:51:34:35:cd:fc:d0: c3:49:a3:f9:91:4a:89:5f:a0:8e:27:c9:bb:41:c9:a5:09:2a: 38:f2:c3:cc:cd:73:b8:06:ec:aa:d0:08:e9:1d:2e:fa:c6:c4: 56:74:15:59:72:cb:d0:f2:8f:b9:42:94:45:d1:9b:d3:cf:93: c8:ff:be:6e:6c:2f:2b:4d:16:4b:83:b1:c9:4c:a8:3d:8d:5c: 21:14:e4:13:49:e3:dc:a4:46:70:52:b6:fb:32:84:fa:66:29: 6f:9c:2e:1e:96:fa:ea:2c:8f:18:8e:36:ae:fa:2e:83:13:9a: 3c:97:1e:c1:ce:53:e3:36:8f:2d:fe:f9:b5:5a:e1:07:26:a8: 13:79:a9:cd:f6:f2:2e:cb:a5:c4:f5:ee:21:ea:71:3f:09:cc: 1a:ec:42:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZC+pDgO5IeDxDzDHt0H0C5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MzliN2ExMjM0MTdhYTcxOTMyNTk0NmFhODllMGYzMGFi MGNhMDkwHhcNMjUwNDE3MDkwMDM5WhcNMjUwNDE4MDkwMDM5WjAzMTEwLwYDVQQD Eyg3MWVhNThhYjUxYjgzMzY3Nzk3MDRlZmIwOGE3ODkxOTNhZDdmYWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtEPLQPEq14X3+X5ruYUOyTJcqtV 7yD9lbqa/w6VBigPPa3jmcbpVpncqI13dWyxvzq7Kc1erz2V6DmVeG8jI0i7qs4X l5LpvVKgxqS2ODhi4OGhaqdSucIwHQu8TgcQ8X9jnhmrDR50J3t3UaiCeCErHVoh +YBZJ72y04ipbb8JAfRM+BB8EiKFozTbKNOBUNV0D9HqcEtxodYms0Azpeal30bN 0x3gmjLmMHbvDVHm+zLe73DYwbX8QGQQ/WJ222f7ht32ZgVSTEGvzpYooled93vG YVSERSIblF9zixfX54xYJxFIrPlDyq1KnP8seYDb/xI9wgI/sFfyghFDywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHHqWKtRuDNneXBO+winiRk61/rdMB8GA1UdIwQY MBaAFHU5t6EjQXqnGTJZRqqJ4PMKsMoJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFRtM29TTkJlcWNaTWxsR3Fvbmc4d3F3eWdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi84MDdlZDUtNTBiMy00ZTVmLTkzNjct NWI1ZTMzY2U3MGFkLzEvZFRtM29TTkJlcWNaTWxsR3Fvbmc4d3F3eWdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi84MDdlZDUtNTBiMy00ZTVmLTkzNjctNWI1ZTMzY2U3MGFk LzEvZFRtM29TTkJlcWNaTWxsR3Fvbmc4d3F3eWdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa7Uk/lj4 pcojpBh7h6ZwP36LF47/RA1Z96npbmEdP7oedOVTrpYKWT1q+4r4YIMhdF5ohDj4 ox7HyEmPLI65W0OPTXinhRDstB1y5prK3CzjwUI9C2pWQ5rCqAS7NhO9ei6b+7zC UTQ1zfzQw0mj+ZFKiV+gjifJu0HJpQkqOPLDzM1zuAbsqtAI6R0u+sbEVnQVWXLL 0PKPuUKURdGb08+TyP++bmwvK00WS4OxyUyoPY1cIRTkE0nj3KRGcFK2+zKE+mYp b5wuHpb66iyPGI42rvougxOaPJcewc5T4zaPLf75tVrhByaoE3mpzfbyLsulxPXu IepxPwnMGuxCOg== -----END CERTIFICATE-----Generated at Thu Apr 17 18:27:24 2025 by rpki-client