$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft File: pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft (raw, json) Hash identifier: z+rDkw5a+uXMwqGDOhxE3xQedFNklzy3LhJosfaKRBI= Subject key identifier: 89:2A:ED:7D:8F:8A:AF:07:07:58:28:6F:49:90:C0:85:AF:62:1C:11 Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6 Certificate issuer: /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6 Certificate serial: 019638ADBFA6AA1B84D1453EF6A193615BA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft Manifest number: 14F3 Signing time: Tue 15 Apr 2025 09:00:32 +0000 Manifest this update: Tue 15 Apr 2025 09:00:32 +0000 Manifest next update: Wed 16 Apr 2025 09:00:32 +0000 Files and hashes: 1: 2HkBnlanOdUzmWf9Hl_U6GG-UuE.roa (hash: 1Wufa6HiHvWpFQaG3Xl8fTsSYIf48lD7RqqgQlltU14=) 2: 5WrJ_uE8kyfBBg-3rwJlJ6xmp_8.roa (hash: akdPzsnTgH7KtcZBNqPU1osdDy68HWzdp9bPm2mowoQ=) 3: BNK50FDIwLul7LRBqtaICEr9khw.roa (hash: ShN2ExZBctzcXHciSMYpuLHy7sMW4gajHqdp4SmGKwY=) 4: Igsn8_GzxEpyZvyNiTStn1VsWkE.roa (hash: cE10F5ee4Fxy6sxZfixjPiEnOAJr26pMrzQhtmiwXq0=) 5: KkXUwS_4I3ayhd69cP94FHMIKt8.roa (hash: LxyBIOit8HMNZzSJZEvDwuJO4yhxg3p4QU3YOVadKu8=) 6: NkCEdq2ndobm6VmDQa-IZfuAZDY.roa (hash: qOcbuXOI6PfGqV0fypc3sx8Dz5dzMIOt/A/FbNV5s0s=) 7: VO04moXAuIXDmP-FmAZqJ4sbq3E.roa (hash: 1XK9VHT2ZgrrEZxAyHMR/9/4dzcq7U5D/O87NBOUp3A=) 8: YUWzsfvcGYX0_uMBwsz_UtSEvoQ.roa (hash: I2+ZceVVB5u+gR2ocAD4lll8BHqWUKoQ7I2fsyabCm4=) 9: cPX1rLru3EhLpPPW1MnKD3WDdJU.roa (hash: FlPB3PisSixKS60KrufI9cZqpGdplL3+VEjQPrfxXDw=) 10: dP7R-pLAHJv2fxQ8stLMnaNCaIU.roa (hash: ttCIQ6x9upS1QYi3S99yjmOdJpA4nSRRgEVZ9+6A5jo=) 11: gMOwF2mtPRPPpZ-NEq9tmTPMYvM.roa (hash: 9I06ya03N63sQNTiVWhF2hYWAac083jSJyEUOO+Wtd8=) 12: kC3rNl_UHdn-CNb6aCHsLrxS98Q.roa (hash: 1HQePVd4oj57DlYrJg866ZwBO3ttz1hacWXVoenAvOE=) 13: nf8wv6xh5ICDlagRQQtQeDyX7AI.roa (hash: IeriVdC3WPiFlh9qajSZSa5F78gurX6jx9EVck9sDTQ=) 14: pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl (hash: gudmsJthfxnoiVgihED3wK5QqOYDTNiiIDwPW615scc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 16 Apr 2025 08:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:38:ad:bf:a6:aa:1b:84:d1:45:3e:f6:a1:93:61:5b:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6 Validity Not Before: Apr 15 09:00:32 2025 GMT Not After : Apr 16 09:00:32 2025 GMT Subject: CN=892aed7d8f8aaf070758286f4990c085af621c11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:31:db:38:91:19:ed:be:bb:63:e1:b1:9b:da: 3b:6c:f4:0d:e4:fd:04:28:ba:a7:1d:b1:5a:91:f4: f9:6b:74:ce:ce:5a:97:96:93:fd:f8:39:5f:b3:e9: 9d:72:78:ee:93:97:00:cc:42:0a:4f:a0:7d:be:59: b4:ae:5e:f0:b6:c6:5c:8f:f9:16:0c:1c:08:40:57: ad:d6:80:9e:23:67:da:a9:b3:4e:57:83:65:b4:8e: a9:b7:53:b9:96:2a:22:60:ae:86:92:a1:25:49:4e: 26:f9:c4:1b:13:fd:3c:2c:41:c0:8a:93:70:a9:f1: ea:6a:99:86:c4:90:75:8a:6b:d6:de:f1:82:c7:41: ac:b4:de:15:20:d2:da:39:f5:b0:c1:bf:f4:32:89: 38:a3:fd:b3:60:a0:99:cc:fc:22:f3:89:d8:a6:61: 69:07:72:f1:1a:f0:59:75:3f:a1:86:71:97:d1:ec: 8f:1f:0a:0f:72:4a:f1:4b:8e:ed:82:4a:77:bc:06: 4d:45:35:e7:c0:63:37:e0:d6:0d:45:ce:78:24:24: 0a:55:b4:ce:94:85:be:09:cd:b3:c5:0f:72:f5:8f: d5:80:3b:14:41:a6:e6:1c:9f:6d:e0:69:0d:d6:76: d5:9c:d4:a8:94:0a:e4:aa:63:24:87:0f:f1:cb:8f: b1:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:2A:ED:7D:8F:8A:AF:07:07:58:28:6F:49:90:C0:85:AF:62:1C:11 X509v3 Authority Key Identifier: keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:e3:5a:3a:40:7f:58:38:f9:7c:f9:26:1f:c7:16:71:ec:e1: 39:4a:d0:92:5c:6e:a2:8f:7b:55:2d:fd:bc:11:93:e5:57:1c: c9:12:fe:e2:51:0a:f2:41:09:34:10:0c:85:14:9f:d6:7c:b0: ba:cc:28:54:9e:b5:58:ca:14:d6:22:fe:d8:8b:ab:47:e2:66: f1:87:cf:2f:48:f1:6f:9d:1c:76:ac:ea:35:d0:5b:18:f2:58: 27:72:a4:48:a1:62:b1:25:21:a7:2b:d1:e2:f0:4e:38:c4:98: 18:62:de:1b:63:2a:63:99:b7:d0:91:db:17:6e:dc:bd:97:e8: c3:bc:d1:b9:89:70:9f:f5:3a:ed:c3:87:86:6f:99:1e:40:9d: 42:51:09:08:5d:4b:8e:1a:14:19:0e:73:0c:6b:67:24:6f:24: 03:eb:3d:ae:fb:c2:86:c4:45:2a:71:d7:5c:26:d1:08:50:29: 6d:db:73:57:b2:e7:d1:3f:76:4b:3d:c2:eb:80:87:6b:db:a8: 0f:60:13:b4:13:89:fd:98:b3:2f:ff:5e:d8:84:e1:a7:4e:71: f9:e8:7f:1f:74:45:b1:6f:b6:c8:00:53:5f:2d:de:9a:bd:95: 7f:51:af:36:9d:6d:63:3a:92:c7:83:43:f3:d3:4d:b1:34:9d: fb:f8:fc:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZY4rb+mqhuE0UU+9qGTYVunMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YmNjMTJhZmE0ZjA1NzM5ZjQ1ZjYwNWUyMjFjNjRjM2Mw ZDJlZDYwHhcNMjUwNDE1MDkwMDMyWhcNMjUwNDE2MDkwMDMyWjAzMTEwLwYDVQQD Eyg4OTJhZWQ3ZDhmOGFhZjA3MDc1ODI4NmY0OTkwYzA4NWFmNjIxYzExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDHbOJEZ7b67Y+Gxm9o7bPQN5P0E KLqnHbFakfT5a3TOzlqXlpP9+Dlfs+mdcnjuk5cAzEIKT6B9vlm0rl7wtsZcj/kW DBwIQFet1oCeI2faqbNOV4NltI6pt1O5lioiYK6GkqElSU4m+cQbE/08LEHAipNw qfHqapmGxJB1imvW3vGCx0GstN4VINLaOfWwwb/0Mok4o/2zYKCZzPwi84nYpmFp B3LxGvBZdT+hhnGX0eyPHwoPckrxS47tgkp3vAZNRTXnwGM34NYNRc54JCQKVbTO lIW+Cc2zxQ9y9Y/VgDsUQabmHJ9t4GkN1nbVnNSolArkqmMkhw/xy4+x+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIkq7X2Piq8HB1gob0mQwIWvYhwRMB8GA1UdIwQY MBaAFKS8wSr6TwVzn0X2BeIhxkw8DS7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9iYjE0MGEtMmEyMS00ZjVmLWJkY2Mt ODhiMDE2YmJkNTgxLzEvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9iYjE0MGEtMmEyMS00ZjVmLWJkY2MtODhiMDE2YmJkNTgx LzEvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATONaOkB/ WDj5fPkmH8cWcezhOUrQklxuoo97VS39vBGT5VccyRL+4lEK8kEJNBAMhRSf1nyw uswoVJ61WMoU1iL+2IurR+Jm8YfPL0jxb50cdqzqNdBbGPJYJ3KkSKFisSUhpyvR 4vBOOMSYGGLeG2MqY5m30JHbF27cvZfow7zRuYlwn/U67cOHhm+ZHkCdQlEJCF1L jhoUGQ5zDGtnJG8kA+s9rvvChsRFKnHXXCbRCFApbdtzV7Ln0T92Sz3C64CHa9uo D2ATtBOJ/ZizL/9e2IThp05x+eh/H3RFsW+2yABTXy3emr2Vf1GvNp1tYzqSx4ND 89NNsTSd+/j88w== -----END CERTIFICATE-----Generated at Tue Apr 15 12:01:59 2025 by rpki-client