$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft File: KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft (raw, json) Hash identifier: mHOm/wGdPXBLAQY11mJ8g1x8FbtVUUstbK6GjPIQLVM= Subject key identifier: 58:9D:35:B8:68:1E:1E:0F:1F:E7:E1:B6:31:D4:96:D2:FB:DB:EF:21 Authority key identifier: 29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8 Certificate issuer: /CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8 Certificate serial: 01958C60EA37E2B607B87111CBC5A9CFCCA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft Manifest number: 0971 Signing time: Wed 12 Mar 2025 22:01:56 +0000 Manifest this update: Wed 12 Mar 2025 22:01:56 +0000 Manifest next update: Thu 13 Mar 2025 22:01:56 +0000 Files and hashes: 1: FV9U3Yv2I7_2992_Tu4mBiIQFlI.roa (hash: /WpBV6VXQYMepV5lfUa4zJ1OtPuJRJ1gNT7mbz//kPY=) 2: IvOVPi4Jk0LAA7IyC_lBmoedUPk.roa (hash: iVbMNdqQVbnDfCnhCbcyzkADBiETtoTlj0kjeIAta6w=) 3: J6V38H8YoI17U_6ZK87Tdnr9D6E.roa (hash: raWkVSI8/jwN4Seiq8VvscBLScbGAuD9ueNsJNFPab0=) 4: KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl (hash: g1dpgzLCPnr2l3dzqxIBHVsiKyiFb6pEgmw1kGgQI+s=) 5: T16pm2MQEAUE2FMbSssYLk6CkTk.roa (hash: 7uW7JXvNCvoGIxe5Z6TwqqTVQIqIp/L1A4jFvTPd0mc=) 6: UbPhv_LAVA0rwKgmHrLcoG4Owqg.roa (hash: FNzQh/BeexAfdXsFTyP2FKgRjYQQ55iXr7qpb2vEEQQ=) 7: VJKr8K21Xfen5uk1xCfGFVJrqNs.roa (hash: kXpjzIlwN+Gv44HIvCkq7vJ72G9g6c72ZjdAcBJOo5Y=) 8: WL2g552SMTFxlVreLBfVq6mZ70g.roa (hash: fT4vchM9u9UmPGHFe3vcWQVFsOy6XCvUN9jsOGCnnzk=) 9: _54CIVi2Yw4yngdpfKbMO07oyqo.roa (hash: TM5Ay2NTiDiELYyiOeCmFyJPSSpITIxR/LNxTfFDHDg=) 10: ozTUlRS2BP8xxCFNOquOdzTJVac.roa (hash: l1UJXUEegLYZKNp2zf9niVjLEqjlu26RHLObHLwCBJI=) 11: tBypEuD8_6LGvghrSbHbTC7iVgU.roa (hash: XOS8vBivruT/FLYxxS0etrQ1c1DImhE/euhY8wg9G6s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 13 Mar 2025 19:14:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:95:8c:60:ea:37:e2:b6:07:b8:71:11:cb:c5:a9:cf:cc:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8 Validity Not Before: Mar 12 22:01:56 2025 GMT Not After : Mar 13 22:01:56 2025 GMT Subject: CN=589d35b8681e1e0f1fe7e1b631d496d2fbdbef21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:90:9c:43:33:fc:ec:c4:1a:ad:18:ca:d3:32: 40:57:51:69:08:a6:5b:ea:e9:25:b0:86:05:4b:b4: b6:05:c8:8b:c0:c8:ba:41:fc:e8:e8:2b:97:15:6b: 77:d0:c3:35:52:74:3c:4f:25:bc:d4:85:1f:af:8b: 52:6f:20:03:f1:f7:3b:e4:5e:9e:db:36:ae:84:73: 76:7c:f1:d3:90:3d:de:7d:97:d1:b0:64:57:c0:b4: bc:d6:d6:eb:1d:63:1c:2e:8a:5e:97:52:b6:2c:67: 17:1f:d0:94:01:bf:f1:b4:69:9a:94:ec:f0:f4:1e: 63:73:7f:18:23:6f:7d:2f:55:2e:2f:43:b4:f5:04: 07:c0:a7:d6:fc:c1:1d:b2:df:fe:e4:a7:dc:37:21: fe:03:ff:28:0c:c6:01:29:8a:03:b0:7c:d7:4e:4b: f0:16:07:80:74:66:f3:a2:38:0b:1e:38:c9:9f:d4: ee:d9:20:ab:42:2a:00:5e:13:9f:01:9f:84:9f:68: ec:33:0c:b4:be:20:5c:2a:30:c7:e3:d3:db:2b:58: b5:a1:44:5d:0f:9e:9d:f8:33:09:65:83:57:0f:55: 43:d6:0e:2e:cb:18:84:e4:73:70:37:6d:7e:57:69: 52:3d:2e:7c:1e:08:ba:02:3b:0f:e0:9e:14:57:c2: 61:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:9D:35:B8:68:1E:1E:0F:1F:E7:E1:B6:31:D4:96:D2:FB:DB:EF:21 X509v3 Authority Key Identifier: keyid:29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:31:5a:c1:d3:10:dc:da:d9:fe:4c:84:bf:5b:64:f5:7c:7f: 57:e3:56:db:14:41:98:a6:d3:3a:bc:35:19:ef:1f:df:be:c7: 59:2a:30:63:f3:68:44:55:68:6e:2a:d7:3c:cd:33:e1:99:78: 70:e9:5f:db:df:7c:30:96:11:14:1a:8c:6f:1e:a8:42:a7:31: fe:a3:78:e4:cc:73:0c:c6:3d:97:d2:b8:dc:a5:0f:ff:fa:9d: ad:3e:63:be:33:d7:d1:8d:bc:1e:6b:84:5d:f9:3e:62:13:bf: 45:97:a6:8b:7c:6a:4d:4c:1b:79:3b:ed:46:0f:12:cc:b4:c8: 27:a1:15:68:12:42:4c:ec:64:78:ac:71:29:91:aa:83:f0:41: ab:b6:82:14:79:2b:54:ba:fa:be:13:88:fb:01:e9:ba:4d:1d: 8f:12:f6:89:7a:a3:2d:48:4c:9c:85:01:65:c3:c8:71:0e:a0: 2d:d8:6d:ea:93:21:f9:ce:7e:c8:3f:19:f3:76:59:81:50:0a: 40:8c:17:36:25:20:e3:d6:6d:e4:75:a1:5d:50:0d:e5:c0:54: 07:44:f6:e6:e4:23:c6:12:bc:9d:a0:90:bf:e5:31:a1:f6:77: f7:e1:e5:dc:49:33:a7:58:04:57:0e:13:7f:2a:9b:65:b3:f6: 6c:91:c3:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZWMYOo34rYHuHERy8Wpz8yoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YTk5NjRlMGNkMzVmYjM2NzU3ZTU2NTNmZmE3NjI2YWM1 ZGVlZTgwHhcNMjUwMzEyMjIwMTU2WhcNMjUwMzEzMjIwMTU2WjAzMTEwLwYDVQQD Eyg1ODlkMzViODY4MWUxZTBmMWZlN2UxYjYzMWQ0OTZkMmZiZGJlZjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZCcQzP87MQarRjK0zJAV1FpCKZb 6uklsIYFS7S2BciLwMi6Qfzo6CuXFWt30MM1UnQ8TyW81IUfr4tSbyAD8fc75F6e 2zauhHN2fPHTkD3efZfRsGRXwLS81tbrHWMcLopel1K2LGcXH9CUAb/xtGmalOzw 9B5jc38YI299L1UuL0O09QQHwKfW/MEdst/+5KfcNyH+A/8oDMYBKYoDsHzXTkvw FgeAdGbzojgLHjjJn9Tu2SCrQioAXhOfAZ+En2jsMwy0viBcKjDH49PbK1i1oURd D56d+DMJZYNXD1VD1g4uyxiE5HNwN21+V2lSPS58Hgi6AjsP4J4UV8Jh/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFidNbhoHh4PH+fhtjHUltL72+8hMB8GA1UdIwQY MBaAFCmplk4M01+zZ1flZT/6diasXe7oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2FtV1RnelRYN05uVi1WbFBfcDJKcXhkN3VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8yMTQwNjMtZjg4Zi00OTU4LWFlNTIt ZDliNTMzZjdmYmMzLzEvS2FtV1RnelRYN05uVi1WbFBfcDJKcXhkN3VnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy8yMTQwNjMtZjg4Zi00OTU4LWFlNTItZDliNTMzZjdmYmMz LzEvS2FtV1RnelRYN05uVi1WbFBfcDJKcXhkN3VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKDFawdMQ 3NrZ/kyEv1tk9Xx/V+NW2xRBmKbTOrw1Ge8f377HWSowY/NoRFVobirXPM0z4Zl4 cOlf2998MJYRFBqMbx6oQqcx/qN45MxzDMY9l9K43KUP//qdrT5jvjPX0Y28HmuE Xfk+YhO/RZemi3xqTUwbeTvtRg8SzLTIJ6EVaBJCTOxkeKxxKZGqg/BBq7aCFHkr VLr6vhOI+wHpuk0djxL2iXqjLUhMnIUBZcPIcQ6gLdht6pMh+c5+yD8Z83ZZgVAK QIwXNiUg49Zt5HWhXVAN5cBUB0T25uQjxhK8naCQv+UxofZ39+Hl3Ekzp1gEVw4T fyqbZbP2bJHDLg== -----END CERTIFICATE-----Generated at Thu Mar 13 02:24:56 2025 by rpki-client