$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft File: CR7HzPD6dh7Zm8WnqewNDusL8FU.mft (raw, json) Hash identifier: KHpk/bhbaAMQxB9pfXn5EpB1RKQGLu7KSsLeSagTXos= Subject key identifier: 9B:EB:5E:EF:91:C0:83:10:FF:68:57:8B:35:09:77:FB:EC:58:70:DE Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55 Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055 Certificate serial: 0194BBCE692F75716FAF9732FAB2D2144EA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft Manifest number: 0DBC Signing time: Fri 31 Jan 2025 10:00:54 +0000 Manifest this update: Fri 31 Jan 2025 10:00:54 +0000 Manifest next update: Sat 01 Feb 2025 10:00:54 +0000 Files and hashes: 1: 4Tm0PZUUIE0UeZZBqtv7lryYo-U.roa (hash: 0NIbs8VY7e4Rgbfid5jxPayxl5Z49peq9M37VuuCheQ=) 2: 6SIE7lIPAfETfqeGKwz9qsqTDpo.roa (hash: baJLkGQNPC/ayO1BdamNx0wTnQsH1JjYTd+EvvvO47U=) 3: 9haWDNChiBmFmCkJOJQFvuH-IMI.roa (hash: +8RvV3XWl90X5W8zvgbYpA7irxF7XdHRCQ7iO5l8i3I=) 4: B5NGdVBBF38v7I807spD9rlndCk.roa (hash: Ij2UQybHDi9rCMOEdxuL3uK0WnnQkl2pfO/6vc3aPyM=) 5: CR7HzPD6dh7Zm8WnqewNDusL8FU.crl (hash: 2g8ojw8eGt1MnYdq0K/1tjpv3KzyM6ch0aNNc0gD2QY=) 6: FQ1fyKPygaKMA0RO4f6CduPvtvc.roa (hash: lzwP4qMpNiWxW7aSlJWREjQf86IjGnj+JOXt2cmXfZg=) 7: L2H6UwduWaJxFicdgN2P7eBtiHA.roa (hash: P4+4JbqGYS4bGYqfrHMMZckY8WsOqty8P+Ix09bzckQ=) 8: MiY_UqV9XxTUP--p5MMXKEdvpoA.roa (hash: cejTZWCl258xJNR53TSPL/OafZfqazlim61BbS6tvNE=) 9: THvQYIa2SprhVvWK5-tWknfJY9w.roa (hash: 5zmsJFBP7NnBZaNurwDsUUuS1oMZV7G7pUdzHmeMsEI=) 10: _2x-4OGJJSoKcxtXyC5heNpC1Lk.roa (hash: vkhFS/TDoPtaxHhXWGchXfwiYEYa7shcVneeg8uj/S8=) 11: cBFi45ZytFKgnNo2imsLe1_V7q8.roa (hash: r9FtBlSO2l8QxP7DU1HrwjHWsN6WkSKa/BKGiXhnmRk=) 12: chc7NZYTY8TAAm4omvxtyabyq7Y.roa (hash: D4ml84hX/IF5k6NvrzKJg2mEZ4TzfgqpdYCT4BEMOzQ=) 13: hhzSm6GjX7s3vRc-UjvW8KahBO0.roa (hash: Ee9hXcXaMVLm37/p4g8p7BURdDDaz2FT+WhXrMvmGFM=) 14: n_WB6SZ68VM4KdzVshEcwS_GODA.roa (hash: g86C8+1qc1536HiOZ0rellkiddIHz2/Li7cRoS3toW8=) 15: vel8G0_GwQFflB8Mgko4kMTZKps.roa (hash: rEt+VHHycH8jAHwOJN7GUU5Y5p8vUpqH1HAPUwtitdw=) 16: xBZNSEvhDpAM1D0pY3qScT-0BUc.roa (hash: DvZnOP9131lTN6eFpOmfx2mnihzdQJETBW3zsjhHDtU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 01 Feb 2025 10:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:bb:ce:69:2f:75:71:6f:af:97:32:fa:b2:d2:14:4e:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055 Validity Not Before: Jan 31 10:00:54 2025 GMT Not After : Feb 1 10:00:54 2025 GMT Subject: CN=9beb5eef91c08310ff68578b350977fbec5870de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:da:d1:45:5b:fd:4d:f3:df:5e:4d:63:26:1a: c8:1d:d2:a6:2b:15:8d:cc:d1:ca:b7:8c:cc:70:83: d3:74:a9:e1:23:dd:2d:f4:e0:0e:99:b4:26:e4:4d: b3:da:26:8e:03:49:51:90:fd:28:d6:e2:65:cf:e8: 15:f4:e1:fd:2f:f3:ed:33:b8:ed:d7:32:9a:fc:d4: 04:2b:8a:27:61:37:56:61:1d:48:04:58:93:b8:30: 0c:81:14:c5:8f:b9:1f:0b:9d:eb:ca:4e:ff:12:d6: 1f:16:83:d2:da:49:a7:9d:ee:ad:41:6d:d4:5f:5f: 57:15:63:1e:92:bc:36:1e:8b:92:60:53:0b:15:a4: 8c:33:b4:02:53:ce:57:53:ee:56:50:ed:b8:85:3c: 76:0c:04:f1:f0:d5:53:97:c1:dc:fe:62:04:23:42: 4d:a7:08:e4:7f:d8:37:65:78:f4:91:42:91:f3:f9: c9:b4:e0:5e:14:28:61:4c:36:ad:44:65:cd:ba:c0: 20:92:13:b6:42:70:63:df:d0:a1:4b:bc:3c:e8:87: 88:9d:26:87:fb:6d:2a:53:7f:09:2c:a8:49:13:d2: 11:85:e1:68:a3:37:aa:2f:86:73:1e:eb:f0:c8:80: 4f:6d:c3:84:8f:70:17:39:7b:64:dc:6b:e5:b8:0f: 7a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:EB:5E:EF:91:C0:83:10:FF:68:57:8B:35:09:77:FB:EC:58:70:DE X509v3 Authority Key Identifier: keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:3b:3a:b7:73:c7:16:3d:7e:ad:99:ce:70:17:3c:e6:bd:cf: 52:c9:6b:51:a7:d6:db:9a:04:98:df:3a:96:14:50:c7:fa:c6: 13:10:70:9c:37:83:02:bb:c5:3a:32:b9:f7:42:09:7e:ad:cc: e2:f2:c6:5a:cf:55:1e:e6:f1:c7:08:e2:a0:25:98:2b:37:15: 35:12:88:8c:ba:72:28:d9:ee:67:65:44:8f:fe:98:3c:79:f3: 1a:47:04:81:3c:7d:ef:eb:16:a1:f3:3b:d7:f6:09:ee:90:c8: 67:b2:3b:cc:79:ec:05:cc:69:da:bf:c6:38:dd:c7:d4:6d:db: c2:9e:64:56:12:49:ca:5e:02:ba:b3:87:3f:38:ed:e3:05:c3: 86:2b:1e:2c:9c:53:ca:61:e4:53:a3:f7:48:dd:59:e2:e6:82: 94:ed:85:99:c9:7f:ac:41:cf:76:56:b5:e4:0d:28:8f:18:16: 74:f3:30:d5:19:b6:64:19:4f:7f:01:50:41:b1:ef:f9:c8:04: 22:72:5c:9b:f7:53:fa:dc:92:dc:73:99:fd:44:01:f8:79:26: 89:24:10:ea:99:6c:56:57:ba:64:96:c7:7a:3d:bd:ba:78:36: 50:01:46:21:a6:79:42:a0:f3:6f:1b:84:10:d5:d5:f4:44:fe: c3:4c:ce:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZS7zmkvdXFvr5cy+rLSFE6oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MWVjN2NjZjBmYTc2MWVkOTliYzVhN2E5ZWMwZDBlZWIw YmYwNTUwHhcNMjUwMTMxMTAwMDU0WhcNMjUwMjAxMTAwMDU0WjAzMTEwLwYDVQQD Eyg5YmViNWVlZjkxYzA4MzEwZmY2ODU3OGIzNTA5NzdmYmVjNTg3MGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9rRRVv9TfPfXk1jJhrIHdKmKxWN zNHKt4zMcIPTdKnhI90t9OAOmbQm5E2z2iaOA0lRkP0o1uJlz+gV9OH9L/PtM7jt 1zKa/NQEK4onYTdWYR1IBFiTuDAMgRTFj7kfC53ryk7/EtYfFoPS2kmnne6tQW3U X19XFWMekrw2HouSYFMLFaSMM7QCU85XU+5WUO24hTx2DATx8NVTl8Hc/mIEI0JN pwjkf9g3ZXj0kUKR8/nJtOBeFChhTDatRGXNusAgkhO2QnBj39ChS7w86IeInSaH +20qU38JLKhJE9IRheFoozeqL4ZzHuvwyIBPbcOEj3AXOXtk3GvluA96KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJvrXu+RwIMQ/2hXizUJd/vsWHDeMB8GA1UdIwQY MBaAFAkex8zw+nYe2ZvFp6nsDQ7rC/BVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQt NDVjZmM4NTdkZGRkLzEvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQtNDVjZmM4NTdkZGRk LzEvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAezs6t3PH Fj1+rZnOcBc85r3PUslrUafW25oEmN86lhRQx/rGExBwnDeDArvFOjK590IJfq3M 4vLGWs9VHubxxwjioCWYKzcVNRKIjLpyKNnuZ2VEj/6YPHnzGkcEgTx97+sWofM7 1/YJ7pDIZ7I7zHnsBcxp2r/GON3H1G3bwp5kVhJJyl4CurOHPzjt4wXDhiseLJxT ymHkU6P3SN1Z4uaClO2Fmcl/rEHPdla15A0ojxgWdPMw1Rm2ZBlPfwFQQbHv+cgE InJcm/dT+tyS3HOZ/UQB+HkmiSQQ6plsVle6ZJbHej29ung2UAFGIaZ5QqDzbxuE ENXV9ET+w0zObw== -----END CERTIFICATE-----Generated at Fri Jan 31 15:30:31 2025 by rpki-client on console-fra.rpki-client.org