$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft File: Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft (raw, json) Hash identifier: ywjD/1+6WSr9SocV4aRO4tHthKwbKmwqjdrwBdPbxQE= Subject key identifier: 4B:29:5B:7B:C2:F7:D3:6D:C8:C6:45:E5:E5:2B:61:7F:73:6E:6C:7B Authority key identifier: 67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A Certificate issuer: /CN=67b5b02dc401666ee045ab90cc88817fe09d706a Certificate serial: 019617A26B19CF0ACBC90FEF83520745E0B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft Manifest number: 1201 Signing time: Tue 08 Apr 2025 23:00:42 +0000 Manifest this update: Tue 08 Apr 2025 23:00:42 +0000 Manifest next update: Wed 09 Apr 2025 23:00:42 +0000 Files and hashes: 1: 2hV2Eva-Yq0Tj6R_zRma3IFAz5U.roa (hash: xaAXokmFBA+GIkC2gCBEPvYGMsKwjG9cFEwuB3Zkoqw=) 2: 4oZpWhHQdsEGzW6wCtl385GDGM0.roa (hash: i8otdhvYSjXciV4VrIVQtTbFNyFY6CYqCyIN7nHX4Fk=) 3: CnW3qR_oIITaOQij9dhtcxmI3Ew.roa (hash: c6jiCaV7kJAiM633jZnJHCKNng9Erj/W/XlTBj+QRpY=) 4: DHALUAN5tK6vdZdATqkw-W3Rehs.roa (hash: 7l9RAeo7N/jmnp2dP2Muv9E6xCL1r9O+gLOg/k2Fq2s=) 5: Q4p-qYS2sgvt0GJ7uYJPvsOIkIg.roa (hash: j/H5JWeQ0CkSOjcFdGwjX75ybxoyKIcMgX/vQel3jRk=) 6: Tt5lRvCR59EmvIm9nWpxifL8PvQ.roa (hash: K94v285TvMOOo7AcPioAGeK/gkVuCpfkO4FQfselq2s=) 7: Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl (hash: 5NObM7rW0p5PMnilSaFUx6gCfT7YUoHvpvJVjK+Lu34=) 8: _K0BWZ_stZe84EL_peOxUFKFCCY.roa (hash: 6JiOQ185PalZ+aky+RRHmp+1NLMR68q9NXdXomLIHN8=) 9: k7Uhxcf1dLyLbabkMZGt9dayq9s.roa (hash: gFVryfVaKzHzs9H28hxg6aO05RnxqjKmSXgUNR+b4kg=) 10: kIbghkBOfoXjY46mtdWaD6ECFzI.roa (hash: 0pGxzPrydHhKJZ3AyBjYXBgg0KwtH0VaWuahmKMYYJY=) 11: n-1P-bnNMbfHyYOOBdFHAhTQeeU.roa (hash: VCctCwWgn1+jYqEkjhICyTVDTXkxSrSucpTbDGLkOEU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 09 Apr 2025 22:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:17:a2:6b:19:cf:0a:cb:c9:0f:ef:83:52:07:45:e0:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67b5b02dc401666ee045ab90cc88817fe09d706a Validity Not Before: Apr 8 23:00:42 2025 GMT Not After : Apr 9 23:00:42 2025 GMT Subject: CN=4b295b7bc2f7d36dc8c645e5e52b617f736e6c7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:bb:84:80:a3:ec:05:1b:28:8a:41:58:6a:2b: e0:a6:0a:fc:66:ed:4e:68:f8:8a:95:46:9f:86:7c: f7:88:62:0d:91:0f:a5:3e:03:41:3d:45:57:e7:2d: f1:69:28:8f:a5:b3:1e:bd:9a:17:d4:a0:d9:6f:2c: 56:53:ec:46:f7:37:93:b5:58:fe:b7:3b:47:a2:1b: de:1e:b7:e0:c0:9f:ed:33:9d:5f:4e:b0:5d:f3:7c: 26:c0:3b:5d:f9:8f:85:a7:1b:12:9b:28:90:e1:49: f9:e2:c3:cd:2d:e2:36:72:9f:17:ee:ac:33:42:69: da:46:c9:01:fc:58:fc:66:e5:b2:b7:68:fe:15:4c: ea:eb:8b:e8:d7:8d:e0:6e:3f:b7:2c:d1:f0:51:4b: aa:b7:95:45:06:16:88:fe:d2:cb:4d:49:1d:30:74: 3d:02:01:65:c3:67:ba:72:b3:ff:d3:ba:84:0a:f7: 12:37:48:cc:a8:df:cd:a0:ff:07:9b:47:77:b0:67: 40:cd:6c:cc:3b:85:a6:6d:71:70:91:f6:cf:7c:7e: c9:9c:fd:e0:fb:39:21:4b:d7:a5:fa:b2:3e:47:11: 68:25:3c:11:7a:1e:71:76:78:82:80:3b:b8:50:2b: f6:82:31:10:55:7d:5c:70:f6:f1:0b:8d:d6:11:7a: d8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:29:5B:7B:C2:F7:D3:6D:C8:C6:45:E5:E5:2B:61:7F:73:6E:6C:7B X509v3 Authority Key Identifier: keyid:67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:5f:86:6d:18:dc:05:b9:dd:5c:74:eb:6b:70:2f:da:12:14: 53:66:94:65:57:c7:c3:50:81:91:93:7f:35:0e:89:ca:e7:18: 6f:b5:67:3c:b6:15:6e:d1:7c:bd:d3:56:99:13:c0:d8:8f:85: 67:3d:ec:4c:1b:c1:2a:52:74:cf:05:5a:aa:31:35:12:75:31: 1b:a5:4a:2b:66:aa:de:fb:1b:27:6f:9f:bb:c1:30:8c:01:c6: 87:7a:96:b3:39:83:d3:d7:e6:63:64:c1:aa:b7:aa:7e:d8:16: af:a1:18:22:15:ff:63:9d:0b:72:fc:e9:e6:13:12:b3:a7:b1: 94:67:0c:dc:a0:b7:a6:c0:8b:f7:bd:1e:8e:2a:0b:ea:77:aa: 61:fc:3d:4a:91:3d:c3:a9:9c:ff:f1:0e:82:50:b0:e0:ba:4f: cb:ae:a9:ba:f1:68:80:f1:80:4e:93:52:19:ef:70:2e:44:a3: 57:e4:c9:cd:97:fe:44:74:88:62:c9:ab:dd:a5:23:7e:a7:e8: ba:f3:18:d6:d9:ec:f4:32:00:d5:8f:93:85:5b:bd:80:37:41: ca:a8:a6:6d:60:c5:ae:7f:bc:48:32:48:7d:4b:c6:fc:ba:e7: 64:ce:a0:65:ad:e0:7f:ab:80:6d:46:50:b1:a1:4b:e7:5b:e2: 8c:3c:bb:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYXomsZzwrLyQ/vg1IHReC3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3YjViMDJkYzQwMTY2NmVlMDQ1YWI5MGNjODg4MTdmZTA5 ZDcwNmEwHhcNMjUwNDA4MjMwMDQyWhcNMjUwNDA5MjMwMDQyWjAzMTEwLwYDVQQD Eyg0YjI5NWI3YmMyZjdkMzZkYzhjNjQ1ZTVlNTJiNjE3ZjczNmU2YzdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LuEgKPsBRsoikFYaivgpgr8Zu1O aPiKlUafhnz3iGINkQ+lPgNBPUVX5y3xaSiPpbMevZoX1KDZbyxWU+xG9zeTtVj+ tztHohveHrfgwJ/tM51fTrBd83wmwDtd+Y+FpxsSmyiQ4Un54sPNLeI2cp8X7qwz QmnaRskB/Fj8ZuWyt2j+FUzq64vo143gbj+3LNHwUUuqt5VFBhaI/tLLTUkdMHQ9 AgFlw2e6crP/07qECvcSN0jMqN/NoP8Hm0d3sGdAzWzMO4WmbXFwkfbPfH7JnP3g +zkhS9el+rI+RxFoJTwReh5xdniCgDu4UCv2gjEQVX1ccPbxC43WEXrYzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEspW3vC99NtyMZF5eUrYX9zbmx7MB8GA1UdIwQY MBaAFGe1sC3EAWZu4EWrkMyIgX/gnXBqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjdXd0xjUUJabTdnUmF1UXpJaUJmLUNkY0dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82NGEzZGUtODEyYS00YWNlLTgxNGQt YjVkODg4YWRmZDM3LzEvWjdXd0xjUUJabTdnUmF1UXpJaUJmLUNkY0dvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82NGEzZGUtODEyYS00YWNlLTgxNGQtYjVkODg4YWRmZDM3 LzEvWjdXd0xjUUJabTdnUmF1UXpJaUJmLUNkY0dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPV+GbRjc BbndXHTra3Av2hIUU2aUZVfHw1CBkZN/NQ6JyucYb7VnPLYVbtF8vdNWmRPA2I+F Zz3sTBvBKlJ0zwVaqjE1EnUxG6VKK2aq3vsbJ2+fu8EwjAHGh3qWszmD09fmY2TB qreqftgWr6EYIhX/Y50Lcvzp5hMSs6exlGcM3KC3psCL970ejioL6neqYfw9SpE9 w6mc//EOglCw4LpPy66puvFogPGATpNSGe9wLkSjV+TJzZf+RHSIYsmr3aUjfqfo uvMY1tns9DIA1Y+ThVu9gDdByqimbWDFrn+8SDJIfUvG/LrnZM6gZa3gf6uAbUZQ saFL51vijDy7fw== -----END CERTIFICATE-----Generated at Wed Apr 9 05:29:56 2025 by rpki-client