$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft File: 6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft (raw, json) Hash identifier: rdPVtnbSNx31jsyQ/oOh0yAvVFT8vep+uvUF91eC/t0= Subject key identifier: 4E:9E:3D:B4:5D:6B:BB:DC:AD:BB:A0:69:A0:B0:95:F0:D7:ED:DE:1E Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98 Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98 Certificate serial: 01960EA03830B91B85BD263384987A26597A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft Manifest number: 3F Signing time: Mon 07 Apr 2025 05:01:43 +0000 Manifest this update: Mon 07 Apr 2025 05:01:43 +0000 Manifest next update: Tue 08 Apr 2025 05:01:43 +0000 Files and hashes: 1: 6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl (hash: ZpVB73yDbG/4WHcHP8l2X8JwNYSytg9nq6jrYu9Wcno=) 2: D2lTuKkaihmC2cT7NERa5qSvcd4.roa (hash: RpB2FyxyA/hsoWo7OmImdgwSwJYzZl/vHUqeUb6pNT4=) 3: GzCf6eer-0KJGSOeGO_GMefOjZo.roa (hash: JaQqkGT/EuzyZjXMN8QEs56lhsj8e8xWE4PqIQSZNSY=) 4: Hqc62MqaiR1ENBvYXYbBphPGFN0.roa (hash: 4i8o9r31Hh5HW+0+aK2z52UE4F0xdqPSMZVRQXOPULo=) 5: K8JAHLn3KSgfA6BNl7r1JS984KI.roa (hash: LSiwfsQXMGZVIf1O+jJBxpxI9iVl0ERczCYHt8w0SU8=) 6: LrhN4oYSKiTh8G0upF9-sbL8vNw.roa (hash: ZHZWzvwh1ced3ccwuBDiUqK6cHiuqcXgScCLZ6103I4=) 7: MGKJpERDE2jnyWueLH30KtbVtvg.roa (hash: 1ThnV+vZEowhnC8JJvBU7EgcOXPtpnTjvVoY61XcB6A=) 8: VmIiz7Cnwt8QdQZXsSuJ63A6JhE.roa (hash: VRDLvebsgzN2IopaBRSitbLUQukOe2HbgDWn6E5mzfg=) 9: WMdxeCDdDNwc6ymADw8SdQ5SXqE.roa (hash: PgvSeWtg+mLsxBE/P2tTl00AaGi2pSNp8OAj3D57rx0=) 10: ntpBaRwHShDbrLZ5pbZfArqQspA.roa (hash: 2Y+EwOeNgS+qK9hzRLLOCEoXJCepKfijfXi8Vyoba10=) 11: nytPIUYQ48QhDLlfVIi6pB18SwQ.roa (hash: 3LFgebPoNXiMAwsZ07ED/DZ73Cy6wJRysoaaEC5cNnA=) 12: tPH78P19OMyg8GNH0L_VBBgKycE.roa (hash: lwoKVsQS8cNkbPndBQpdH6UBk/fM9ynr6BdoedkZHAM=) 13: v5gv7oTWjIuVa1Yqf7whGc0SKGg.roa (hash: iWPDt7P0zADL3HzbERUHmzurGxkuTYnzNn29hWm+GdY=) 14: vYFd8PA0YadUvoZOf5GnUFTlGKg.roa (hash: LwvSvFPd1tZvuor2quDZg75Xtv6mx5QL0g9reG8ijGQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:0e:a0:38:30:b9:1b:85:bd:26:33:84:98:7a:26:59:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98 Validity Not Before: Apr 7 05:01:43 2025 GMT Not After : Apr 8 05:01:43 2025 GMT Subject: CN=4e9e3db45d6bbbdcadbba069a0b095f0d7edde1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:38:cb:57:5c:e2:ba:0c:2c:08:e4:cc:5c:c2: 8d:ad:04:84:18:ff:fd:aa:55:18:f4:c5:9c:ba:b7: bd:71:1e:ca:7b:4e:99:70:ce:9f:2c:78:99:6f:65: 92:25:94:d9:69:4f:f7:cf:03:25:52:30:14:c3:57: 00:de:88:d5:5b:b6:72:9a:9f:2e:de:2b:ab:39:8d: 79:e6:8b:00:82:18:0a:dc:3e:d5:ef:1f:6c:26:84: 82:71:06:71:14:e8:0e:5f:42:81:0e:ac:37:a4:42: eb:86:47:9e:f1:24:32:fa:88:25:ea:71:6e:0b:7c: eb:9f:3a:6c:fc:57:b6:be:6a:e8:78:2a:e7:53:e6: a7:bd:f3:3a:3d:15:f0:1a:29:26:d6:16:bc:bd:62: 45:3d:f8:07:5f:f9:ff:33:94:c2:af:b0:4f:00:58: 3a:e3:e4:50:31:df:b7:9d:44:1c:5f:f3:8d:04:1b: 7c:33:1e:a7:00:d3:6a:58:1a:1f:f5:df:4e:a8:24: b8:c5:ef:ca:a8:b8:0a:63:3e:2c:48:a4:39:00:2f: 04:01:24:ab:13:df:cf:b7:5d:e0:6f:4a:30:c9:be: ae:36:3b:77:10:f7:aa:27:06:8b:d7:09:e8:54:a3: d3:0b:36:6e:42:2a:bd:97:ba:c5:31:3f:51:c5:6c: c6:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:9E:3D:B4:5D:6B:BB:DC:AD:BB:A0:69:A0:B0:95:F0:D7:ED:DE:1E X509v3 Authority Key Identifier: keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:1f:bc:36:aa:20:a0:0a:71:b6:02:d7:6f:f4:ca:07:fb:de: 1f:f1:67:93:9d:ae:43:eb:16:17:6f:5d:0b:32:e0:79:21:de: 13:34:83:d3:74:d9:e9:05:e8:2e:07:61:94:ec:fc:d4:48:90: 2f:7a:4a:e4:3e:b9:af:d9:2d:ef:f3:9f:0d:67:06:6e:07:41: 56:e3:03:58:be:c5:b1:2b:40:c7:ff:fd:98:18:b7:4c:99:5b: f5:05:6a:14:c4:a5:a0:72:5b:7b:22:e5:4e:da:cc:09:7d:98: 5c:9e:55:0a:85:b7:92:f9:c3:91:50:47:7d:82:d7:52:42:47: ba:dd:fd:13:d2:cf:70:0c:51:ae:72:ac:d6:2b:8f:b8:0b:d9: 53:2c:a8:7c:ca:d1:ba:a7:fe:ae:87:c4:42:70:79:bb:fc:7c: 15:df:97:d5:1a:6b:68:8d:b6:7f:d1:14:89:be:5a:b5:05:80: 5b:b5:e4:50:f4:8e:ed:b1:25:e9:24:e9:2a:2d:7f:42:f8:8a: 58:1f:fd:af:3d:d9:31:d1:63:ad:52:c0:72:02:e1:00:91:98: 14:4f:78:36:ad:40:0e:58:70:b9:20:c9:d8:e4:dd:9c:97:11: d1:29:8c:d3:6f:ef:8b:6b:d9:7b:96:ec:c2:33:53:c5:10:fc: ac:58:89:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYOoDgwuRuFvSYzhJh6Jll6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViMzQ5YWYyYWYxMTEzNjFiMjlmY2ZlZjJlMDQzZDViZTc1 ZTNmOTgwHhcNMjUwNDA3MDUwMTQzWhcNMjUwNDA4MDUwMTQzWjAzMTEwLwYDVQQD Eyg0ZTllM2RiNDVkNmJiYmRjYWRiYmEwNjlhMGIwOTVmMGQ3ZWRkZTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjjLV1ziugwsCOTMXMKNrQSEGP/9 qlUY9MWcure9cR7Ke06ZcM6fLHiZb2WSJZTZaU/3zwMlUjAUw1cA3ojVW7Zymp8u 3iurOY155osAghgK3D7V7x9sJoSCcQZxFOgOX0KBDqw3pELrhkee8SQy+ogl6nFu C3zrnzps/Fe2vmroeCrnU+anvfM6PRXwGikm1ha8vWJFPfgHX/n/M5TCr7BPAFg6 4+RQMd+3nUQcX/ONBBt8Mx6nANNqWBof9d9OqCS4xe/KqLgKYz4sSKQ5AC8EASSr E9/Pt13gb0owyb6uNjt3EPeqJwaL1wnoVKPTCzZuQiq9l7rFMT9RxWzGuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE6ePbRda7vcrbugaaCwlfDX7d4eMB8GA1UdIwQY MBaAFOs0mvKvERNhsp/P7y4EPVvnXj+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgt OWNkNjYyYmM4MzIwLzEvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgtOWNkNjYyYmM4MzIw LzEvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyB+8Nqog oApxtgLXb/TKB/veH/Fnk52uQ+sWF29dCzLgeSHeEzSD03TZ6QXoLgdhlOz81EiQ L3pK5D65r9kt7/OfDWcGbgdBVuMDWL7FsStAx//9mBi3TJlb9QVqFMSloHJbeyLl TtrMCX2YXJ5VCoW3kvnDkVBHfYLXUkJHut39E9LPcAxRrnKs1iuPuAvZUyyofMrR uqf+rofEQnB5u/x8Fd+X1RpraI22f9EUib5atQWAW7XkUPSO7bEl6STpKi1/QviK WB/9rz3ZMdFjrVLAcgLhAJGYFE94Nq1ADlhwuSDJ2OTdnJcR0SmM02/vi2vZe5bs wjNTxRD8rFiJsg== -----END CERTIFICATE-----Generated at Mon Apr 7 07:06:57 2025 by rpki-client