$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft File: CoH-kFn2ggvBitWALy8fynfSVLc.mft (raw, json) Hash identifier: +zKKPRRfmAv2TbqkDVyYVat4hNvIKViKYVnNoCvT22k= Subject key identifier: 81:3D:8B:87:D5:F0:03:37:E1:BD:39:4E:EC:0A:B8:10:67:AD:BE:64 Authority key identifier: 0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7 Certificate issuer: /CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7 Certificate serial: 01962904A1DE877329BEA47A4AE4B5DD343F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft Manifest number: 0848 Signing time: Sat 12 Apr 2025 08:01:31 +0000 Manifest this update: Sat 12 Apr 2025 08:01:31 +0000 Manifest next update: Sun 13 Apr 2025 08:01:31 +0000 Files and hashes: 1: 31z7eSu8--35kebgOlCIABBeVf8.roa (hash: Bo6lIvIlV0RX6xhodzhO7tuvgscKOLMBcfTJSKlUYZw=) 2: 7pPLJaN3OTQBK8i-P4GOQNKJPho.roa (hash: HpLQLLrJKx/bS+zdiKUm5TCX+jRSuh5jVP1YSt/MOZY=) 3: CoH-kFn2ggvBitWALy8fynfSVLc.crl (hash: 7ZMnI2cqkYV6PGYTYvuwpWjYN6B8xPmYoFm2TovFGvQ=) 4: EacbpO8P-LkG-h50-C35fVYJXyI.roa (hash: btUaf5jDz02025fLzDlihBUOmr88cX2MxuDiHPb5dc4=) 5: FstRBv2kO53NDHW81Q9Mg07SWg4.roa (hash: +uStvYqgj5hn3d6BL0rwAnmTzIsGb1x7W+G4jAHTkdA=) 6: Gf8Y2t4y9XW51teYl9-IOJM-QkE.roa (hash: JzLxoz0gWXWBbhQLZinkEP2bb0OKmAdUFJyyBJ71KUI=) 7: N0ylFt5LVYNjTI-_TsSgO84trzU.roa (hash: FGN5RCpPLee+DVEx92LqF5VUyDDoLbxxrafkYHnOVZg=) 8: PEEbtcraLxJZAPZLAW5H_KDLDwQ.roa (hash: wU0HPJ884+fnbW1G1BaCynti9gWD3Sn+0YrIsJUp3ns=) 9: hLdZE5q1FOXSO44ZofCjRXN9z7I.roa (hash: CmOCZv7BugezIWG5ZPHeIaee5S3CP9UP9zRJfwRzazg=) 10: i1bI7bZVKfcJ9vCnWPYEzcCSqOc.roa (hash: I9SME80ARJLDqvqmW5BBXCvNlxHc4Su4PKuf6AZPdG4=) 11: n_d7GjbZ9YbYK045nkHL_lX76pM.roa (hash: L6McSAJwh8T7ZY3ArgurepjkJRDGFkS06sAchDylLyc=) 12: pW-Kl5UPWqu6KG3_J4t1h52HuR0.roa (hash: 0HOBimxzzdToQy38vYlAJbGZVaBtPNrg0qioOLxF/+Q=) 13: tlqKEYYvFMWYK-JPntFn1nyKI1U.roa (hash: /wIoPxgkbhHCyNQ8NB2J0bNqG5fb1wxitY8EONuXMt0=) 14: yFPiywRMEHaITt3TRPzJux8bzAU.roa (hash: WnTskmfJ1KLR7sA0SYoAyMqXx6u45IJAhh3f7ztydOk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 13 Apr 2025 05:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:29:04:a1:de:87:73:29:be:a4:7a:4a:e4:b5:dd:34:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7 Validity Not Before: Apr 12 08:01:31 2025 GMT Not After : Apr 13 08:01:31 2025 GMT Subject: CN=813d8b87d5f00337e1bd394eec0ab81067adbe64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c1:b0:ad:0d:86:06:1d:7c:c0:95:78:d4:72: c9:9d:5e:79:4b:8b:fc:86:c2:29:cb:47:0c:ed:7c: f2:24:43:c0:43:45:b0:75:a4:88:b7:9a:f3:93:3e: 83:8c:dc:cc:4f:b3:68:eb:56:04:72:a4:28:f1:f8: 2d:6c:9c:83:73:06:a8:3e:03:d0:98:7e:cb:2e:49: 3e:a7:0c:1e:9e:55:f3:14:a1:ac:6b:df:99:06:d8: 68:f6:f4:12:a8:b3:e8:b5:a2:fe:6c:59:b0:2b:5d: 12:a6:8d:22:57:03:3a:bd:32:4a:ca:47:07:d9:c5: c1:9b:a2:a1:5e:4a:cd:95:d0:ba:2f:96:81:38:59: c1:06:f7:9a:ff:e5:04:2e:17:94:12:a9:7e:6a:19: 4d:7f:5a:79:78:75:b9:6a:3c:f9:3f:13:e3:c2:77: 8b:2f:85:ba:7e:bf:0a:09:4e:31:7b:be:5b:02:02: 25:f3:09:49:79:15:c4:cd:57:b1:58:ef:72:27:fe: da:7a:c4:49:d6:d3:ba:17:6a:d0:25:2d:2d:e7:98: e3:17:2d:ec:e0:af:e8:ff:ca:48:75:67:66:eb:2d: aa:03:01:8f:57:df:19:26:41:85:f1:bd:fd:6e:c1: dd:d2:1e:ee:f5:c0:02:48:41:00:24:4b:0a:3e:df: 2b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:3D:8B:87:D5:F0:03:37:E1:BD:39:4E:EC:0A:B8:10:67:AD:BE:64 X509v3 Authority Key Identifier: keyid:0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:24:21:15:a0:6a:68:be:c2:5b:de:61:1b:63:c2:66:24:26: 24:c9:75:4b:af:95:61:16:99:ad:17:3f:17:12:9b:59:1f:88: c0:e7:04:2c:b1:5b:7c:f4:1e:9e:a0:e9:7f:54:6d:fc:85:50: 01:9c:c3:f2:7f:fb:d5:5e:56:02:84:85:b0:a9:42:b9:be:7b: 1a:5f:0f:e6:d5:96:17:06:d8:ed:fd:c3:48:b1:d6:e0:51:e4: 03:44:c4:ae:6c:2b:34:25:99:e4:a0:9a:0e:5b:11:37:c1:79: 84:60:be:02:a0:78:65:f6:69:5d:1d:c4:81:0c:77:d7:c9:8f: c0:7b:e3:34:1a:af:87:82:ee:16:01:99:00:11:4b:39:28:e8: 9b:56:c9:34:ab:85:67:d4:f1:d1:8b:58:c5:c5:e2:fc:54:06: ae:42:f3:92:49:61:f7:16:89:2f:0b:86:b5:92:1f:08:a1:fc: 8b:40:07:f9:a3:94:a1:e7:8f:1e:99:e6:0d:5c:cc:8c:c0:7b: 95:25:b2:13:51:4d:a6:ba:f6:63:b9:0b:63:eb:02:16:b5:7e: b9:31:e6:92:3a:41:1b:6f:54:66:b8:fa:4e:6d:97:9b:f1:39: f1:65:e3:08:69:97:1e:05:5e:85:a4:a3:e1:a3:27:07:2c:2f: b2:9e:7d:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYpBKHeh3MpvqR6SuS13TQ/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhODFmZTkwNTlmNjgyMGJjMThhZDU4MDJmMmYxZmNhNzdk MjU0YjcwHhcNMjUwNDEyMDgwMTMxWhcNMjUwNDEzMDgwMTMxWjAzMTEwLwYDVQQD Eyg4MTNkOGI4N2Q1ZjAwMzM3ZTFiZDM5NGVlYzBhYjgxMDY3YWRiZTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMGwrQ2GBh18wJV41HLJnV55S4v8 hsIpy0cM7XzyJEPAQ0WwdaSIt5rzkz6DjNzMT7No61YEcqQo8fgtbJyDcwaoPgPQ mH7LLkk+pwwenlXzFKGsa9+ZBtho9vQSqLPotaL+bFmwK10Spo0iVwM6vTJKykcH 2cXBm6KhXkrNldC6L5aBOFnBBvea/+UELheUEql+ahlNf1p5eHW5ajz5PxPjwneL L4W6fr8KCU4xe75bAgIl8wlJeRXEzVexWO9yJ/7aesRJ1tO6F2rQJS0t55jjFy3s 4K/o/8pIdWdm6y2qAwGPV98ZJkGF8b39bsHd0h7u9cACSEEAJEsKPt8rFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIE9i4fV8AM34b05TuwKuBBnrb5kMB8GA1UdIwQY MBaAFAqB/pBZ9oILwYrVgC8vH8p30lS3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgt YmYwNWFjYzgyYmQxLzEvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgtYmYwNWFjYzgyYmQx LzEvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYCQhFaBq aL7CW95hG2PCZiQmJMl1S6+VYRaZrRc/FxKbWR+IwOcELLFbfPQenqDpf1Rt/IVQ AZzD8n/71V5WAoSFsKlCub57Gl8P5tWWFwbY7f3DSLHW4FHkA0TErmwrNCWZ5KCa DlsRN8F5hGC+AqB4ZfZpXR3EgQx318mPwHvjNBqvh4LuFgGZABFLOSjom1bJNKuF Z9Tx0YtYxcXi/FQGrkLzkklh9xaJLwuGtZIfCKH8i0AH+aOUoeePHpnmDVzMjMB7 lSWyE1FNprr2Y7kLY+sCFrV+uTHmkjpBG29UZrj6Tm2Xm/E58WXjCGmXHgVehaSj 4aMnBywvsp599w== -----END CERTIFICATE-----Generated at Sat Apr 12 12:16:03 2025 by rpki-client