$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft File: ORnyrZFYS6_wRnRHusj7l40fndM.mft (raw, json) Hash identifier: eewZ5lz+LbOyTmq+m2zum/gi7mUerVkrTjFEb8FJJq0= Subject key identifier: 2D:51:2A:56:1B:52:0F:9D:3F:18:DA:D3:A3:A3:DE:A7:68:72:03:2A Authority key identifier: 39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3 Certificate issuer: /CN=3919f2ad91584baff0467447bac8fb978d1f9dd3 Certificate serial: 019647E9DDF404A7B98C177ED30FFA9B6C76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft Manifest number: 151C Signing time: Fri 18 Apr 2025 08:00:31 +0000 Manifest this update: Fri 18 Apr 2025 08:00:31 +0000 Manifest next update: Sat 19 Apr 2025 08:00:31 +0000 Files and hashes: 1: 3Xkfgsy5F0IowNcy1PedAB3Q6w0.roa (hash: iyJL5cuUJjZvE75tBtKfcWvyK2dmPiVKM7BX3wZGQos=) 2: 4EDvDSCIPe0YYvYx7Str0IpAPeM.roa (hash: A9xeZgyOfSqqIMRvaPEIhp5b1RhtdrlitB+v147UkT4=) 3: 5pue0s9j8lhdVuO6m6E92d4GwDU.roa (hash: CSkd5pFYexGISl0uc2qVJpocMMmmGw3Zguf0ypv5Owk=) 4: ORnyrZFYS6_wRnRHusj7l40fndM.crl (hash: FEfElW0uJObtO6AiC0GKeJVXLcv9lGh7Er2TpgtnBYQ=) 5: UfCPGY0KJE6274iAqACixLj9Gmw.roa (hash: DEe7CtPUt0XEDknWoFEE8OaasnbG+ag0I4mAzR/inaE=) 6: WBerlCoyvzWnSx7AM9uVxy9XUro.roa (hash: FyOYZU8Lcu6m3tCIEh8spxjddiJiAmITHkAJjSq/GW0=) 7: hWosbOoApl7V_Bhpe5UlA20sERA.roa (hash: PkJmNJ/LtXuQwtW6f6gFggLl9YMZJgAspupTTJw2DD0=) 8: m-oD5AGGiKc-qI8F9BHOsqfUhwQ.roa (hash: ZivLa2r1rkIhgA7nnzvSrie3rkSLQvNS6UhWQpi2o50=) 9: r4CnQQx_zbdBDGpIsGGdqEuowRg.roa (hash: Cf3KdUglzAXq3AND0kUcTnVm0D52NG4w3f87gIFdSQg=) 10: uot90FkBP8Y3Y-x6-7brjjoB-rU.roa (hash: 0JXXSAl/uFfrD7KxeCsCoDWgeiNKlIuga4IDFWQXH2c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Apr 2025 08:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:47:e9:dd:f4:04:a7:b9:8c:17:7e:d3:0f:fa:9b:6c:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3919f2ad91584baff0467447bac8fb978d1f9dd3 Validity Not Before: Apr 18 08:00:31 2025 GMT Not After : Apr 19 08:00:31 2025 GMT Subject: CN=2d512a561b520f9d3f18dad3a3a3dea76872032a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:3d:ed:c0:fe:5c:74:da:c5:72:37:8b:7a:bc: 46:98:6e:7e:35:c2:b7:62:49:a4:64:f2:44:71:c1: 14:7f:bc:ad:69:14:da:1c:15:7b:c8:c1:13:cd:d8: e2:93:44:1b:fb:29:d8:8c:c0:f5:81:e9:f7:2b:c8: 0c:95:90:84:c6:3c:cf:74:84:3d:37:cb:24:34:66: a1:a5:5a:79:b2:6e:7f:92:9a:6a:f3:d2:30:95:2e: f9:9f:3f:2a:56:42:48:c5:07:45:4e:ec:a9:9a:61: bd:63:e1:75:ee:52:af:a7:43:f5:50:82:1b:88:8f: 68:ab:33:36:45:fc:b5:57:86:e6:4d:54:82:2b:10: bc:d5:03:97:e6:38:36:9c:46:7b:2c:39:8f:06:90: cd:fc:64:13:b1:1d:02:28:37:76:c1:68:21:2a:8c: f9:ee:7a:89:e5:51:01:3c:ed:f2:58:f5:86:37:0c: 9a:88:4a:56:e1:4d:c0:86:21:52:e1:9f:9a:d6:83: 6f:6e:75:d8:1d:a4:c1:6f:c4:88:30:43:f6:70:e1: 5d:a0:fc:f2:4c:89:1d:76:1e:b0:0b:8c:84:fd:e7: 50:26:21:26:07:c8:6f:76:be:eb:6c:a6:4f:68:ca: 96:49:2d:e0:87:b0:d6:eb:e4:22:e2:35:bf:85:76: 0c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:51:2A:56:1B:52:0F:9D:3F:18:DA:D3:A3:A3:DE:A7:68:72:03:2A X509v3 Authority Key Identifier: keyid:39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:c0:e9:75:95:87:17:54:2c:22:d5:34:ab:31:ae:d3:ed:b9: 92:7b:40:93:23:7e:b2:7b:f1:ba:1b:b8:ac:37:19:6e:88:66: 1a:a0:e2:e2:44:81:1e:f3:25:71:c9:3a:09:7c:ea:bb:5e:36: fa:d4:21:a5:59:27:23:d8:cb:09:89:d7:1a:43:5b:cd:60:ca: 82:c3:aa:bd:c5:59:72:65:ee:3a:8e:89:de:46:f9:dc:ff:c8: 92:29:7f:29:28:60:1a:76:59:c0:d2:a7:5d:12:97:5b:89:66: e7:3a:34:f7:05:74:e3:45:ba:24:8b:f8:d6:ef:c3:95:4b:88: 21:b3:ba:b4:85:74:87:de:20:c4:9f:91:c7:b1:bc:92:b7:19: 32:c9:f5:9f:4f:02:45:89:92:69:7e:5a:d0:4e:fe:76:c9:41: ea:0d:48:6a:92:2c:13:a8:37:6a:7f:3e:a4:7b:c3:50:eb:13: 35:db:0d:4b:9d:24:fc:66:db:bd:12:25:03:8d:91:88:b4:f3: 55:df:ec:59:6c:54:99:62:b1:ae:0c:f9:7f:ac:f1:7c:6d:63: 9e:3b:75:12:ad:36:a3:c9:91:b0:0b:6b:ef:82:bb:cf:d7:dd: cb:c3:1a:3e:f5:9f:70:3e:89:03:d3:ff:31:6c:87:a9:7b:6a: 43:fa:eb:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZH6d30BKe5jBd+0w/6m2x2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MTlmMmFkOTE1ODRiYWZmMDQ2NzQ0N2JhYzhmYjk3OGQx ZjlkZDMwHhcNMjUwNDE4MDgwMDMxWhcNMjUwNDE5MDgwMDMxWjAzMTEwLwYDVQQD EygyZDUxMmE1NjFiNTIwZjlkM2YxOGRhZDNhM2EzZGVhNzY4NzIwMzJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2T3twP5cdNrFcjeLerxGmG5+NcK3 YkmkZPJEccEUf7ytaRTaHBV7yMETzdjik0Qb+ynYjMD1gen3K8gMlZCExjzPdIQ9 N8skNGahpVp5sm5/kppq89IwlS75nz8qVkJIxQdFTuypmmG9Y+F17lKvp0P1UIIb iI9oqzM2Rfy1V4bmTVSCKxC81QOX5jg2nEZ7LDmPBpDN/GQTsR0CKDd2wWghKoz5 7nqJ5VEBPO3yWPWGNwyaiEpW4U3AhiFS4Z+a1oNvbnXYHaTBb8SIMEP2cOFdoPzy TIkddh6wC4yE/edQJiEmB8hvdr7rbKZPaMqWSS3gh7DW6+Qi4jW/hXYMEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC1RKlYbUg+dPxja06Oj3qdocgMqMB8GA1UdIwQY MBaAFDkZ8q2RWEuv8EZ0R7rI+5eNH53TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85MTE4ZTItYWU3NC00YzI0LWE3NzUt MzJhYTY3MzFjMjkxLzEvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS85MTE4ZTItYWU3NC00YzI0LWE3NzUtMzJhYTY3MzFjMjkx LzEvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMcDpdZWH F1QsItU0qzGu0+25kntAkyN+snvxuhu4rDcZbohmGqDi4kSBHvMlcck6CXzqu142 +tQhpVknI9jLCYnXGkNbzWDKgsOqvcVZcmXuOo6J3kb53P/Ikil/KShgGnZZwNKn XRKXW4lm5zo09wV040W6JIv41u/DlUuIIbO6tIV0h94gxJ+Rx7G8krcZMsn1n08C RYmSaX5a0E7+dslB6g1IapIsE6g3an8+pHvDUOsTNdsNS50k/GbbvRIlA42RiLTz Vd/sWWxUmWKxrgz5f6zxfG1jnjt1Eq02o8mRsAtr74K7z9fdy8MaPvWfcD6JA9P/ MWyHqXtqQ/rrjw== -----END CERTIFICATE-----Generated at Fri Apr 18 15:05:03 2025 by rpki-client