$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft File: VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft (raw, json) Hash identifier: ZwjEtFMrgatuRO1CizXY6DdyxQzIAMycdxjk0ZiNfDE= Subject key identifier: 83:72:AE:1F:E8:BA:48:D1:FB:DC:D4:4C:46:8E:F1:5C:78:60:BA:EE Authority key identifier: 55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED Certificate issuer: /CN=55fad96dd05af8c2d26192c841131f2f97459fed Certificate serial: 0194BAF22B5FF9E5FD9EBD0A8C472C177D38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft Manifest number: 1435 Signing time: Fri 31 Jan 2025 06:00:20 +0000 Manifest this update: Fri 31 Jan 2025 06:00:20 +0000 Manifest next update: Sat 01 Feb 2025 06:00:20 +0000 Files and hashes: 1: 6fy-RpF2xj4bRR9VT9bQ_Fryj8A.roa (hash: +fjUuan9mhMoL5J+xbDDTtsP2e+9iZNf2Q6jWOsGO/g=) 2: B2guzqJ0c1c1SQ3CcIbZxFBJLXQ.roa (hash: 55A03hHw140PM0KCnI5wADrRDcpuUYgxTN0Hby4pUXI=) 3: GDhDJ-2zjU0GkRTxU28X9ngeRHc.roa (hash: o2yqsnKawfThSJXCRUMbs0Smm+L29A8WJUtnBaTxbug=) 4: GcZeqFRM3Vo0APvxkyx_MnzPveU.roa (hash: a4xzh+76qyVv2r1JqzdGIwl68kZYtgkEbksxJPUpquk=) 5: HDILnjmhtcEJk46AQcpCMkCLoA8.roa (hash: RKyE3trmJiGqNtjuvNCycAFA3dGIi6wfCWONyfSdxXk=) 6: OzvEZ_7o6iiEemTYYUh3uPS2kS0.roa (hash: olMlYCsvO4RycaUkfHVORoJbVkzPaXULWZ1VzqkkPLI=) 7: VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl (hash: vpJLq55k3E2o6fxtrQoM743t3HNfFnG7k+H6sEt9f50=) 8: X8OOCxFmHvFVmgVaORuTFl7bqwA.roa (hash: 8QmTqC1KGhreGJsiTB4YVXTsChzMFM1fgstpYcqi2wU=) 9: _XmPllT7ofYCPa4yLDSVV52Pl3k.roa (hash: bV+K4k+usRA15bCwnB7mW9jVhJg2loiLSbzbXFY6zLY=) 10: kGlBTt5x7KU-txz2Om5dyRKUTdQ.roa (hash: gRmjPVyQTg22cTzCYFSGaaZzVv3Ajzi1EkEgtKCYrRY=) 11: zC5qQAr1NH8TWMnKZTFLrXEquxw.roa (hash: p9nwz/HJCgnc5FZXpmGWtTKanzU2+2yGdiNXNP6y+Q0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 01 Feb 2025 06:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:ba:f2:2b:5f:f9:e5:fd:9e:bd:0a:8c:47:2c:17:7d:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55fad96dd05af8c2d26192c841131f2f97459fed Validity Not Before: Jan 31 06:00:20 2025 GMT Not After : Feb 1 06:00:20 2025 GMT Subject: CN=8372ae1fe8ba48d1fbdcd44c468ef15c7860baee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8c:4f:21:59:8a:e3:84:d7:42:7c:88:e2:04: ba:97:6e:4a:08:b3:72:27:99:b5:30:68:0d:d8:0e: 5a:5d:45:c3:59:b2:d1:fb:f5:42:df:bb:26:15:24: 08:93:58:2e:b7:8f:1f:54:2f:30:d6:53:6f:97:70: 71:b2:be:c5:e5:97:33:94:3c:95:c9:95:5e:16:15: 18:df:90:5b:14:cc:5b:b0:9f:a8:2e:99:5b:90:8c: 5b:f2:26:20:bb:0e:4a:98:c4:a3:a0:38:4e:ae:df: 4e:94:3c:ec:65:d1:72:c1:a0:9d:8f:ea:f7:3b:f2: 42:5f:44:2d:49:eb:c7:db:b5:f1:c2:a5:eb:a2:7d: 74:08:72:c7:a0:4c:42:4e:85:36:1a:aa:ad:fd:e9: 8e:2b:8c:4c:20:8f:0a:54:f0:bb:46:56:0e:89:79: a8:09:d4:25:bf:b2:48:e6:72:2c:e1:4e:d1:c4:15: a2:47:5a:82:f6:e9:43:16:82:79:66:1d:48:d7:a1: ab:35:74:42:27:0f:d5:67:ef:34:aa:f7:67:29:c3: bd:07:7e:31:56:bc:4d:a8:d2:da:a1:a5:dd:de:87: c4:3b:a4:98:97:e6:70:1b:81:a0:26:92:fb:e7:1a: 6b:a5:cd:b0:1b:3c:d3:51:dd:04:33:a8:d4:3a:42: 48:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:72:AE:1F:E8:BA:48:D1:FB:DC:D4:4C:46:8E:F1:5C:78:60:BA:EE X509v3 Authority Key Identifier: keyid:55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:36:6a:b8:5f:ae:c9:f1:83:ea:e5:36:f9:2e:3b:57:c5:e5: 98:c4:e3:61:07:c6:26:65:1d:9e:2c:e4:83:ae:63:df:6a:e6: 43:f1:cb:df:61:24:a3:f3:f6:65:7e:99:b3:06:c6:5e:a0:5b: 54:fc:06:f5:19:57:0b:9f:bb:39:3a:e9:f6:b1:80:c3:7f:ec: 58:d1:16:1e:b5:61:fe:b5:b7:c8:01:86:e5:0c:e1:8b:2c:23: 0a:c3:2e:b3:4e:74:90:1a:64:8d:f7:14:65:5c:7f:c8:ff:71: a2:b9:ff:78:2d:97:ee:72:3d:c1:99:3d:87:2d:aa:c2:cf:d9: 44:9a:55:d9:4b:f3:39:bb:0b:70:7f:e8:6d:76:26:a4:f7:c5: 59:09:1a:46:26:42:84:96:20:c3:07:4e:c2:a3:cb:fe:d2:e2: b6:d5:a7:19:de:a8:c6:f4:c7:ac:c8:5b:50:ab:5f:53:3f:2e: 59:5b:35:77:1b:bd:7a:a0:91:cf:5d:a7:90:1b:02:54:22:86: 37:2e:0f:8c:79:74:80:a8:51:02:1b:f2:c0:28:a6:4f:d3:73: 62:55:1e:49:48:e1:fb:88:d6:7a:65:45:a1:ee:b1:f2:de:d8: bd:fc:76:f7:7d:e7:c1:b2:62:8e:fc:9f:77:b0:d4:17:2a:69: 02:5f:78:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZS68itf+eX9nr0KjEcsF304MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1ZmFkOTZkZDA1YWY4YzJkMjYxOTJjODQxMTMxZjJmOTc0 NTlmZWQwHhcNMjUwMTMxMDYwMDIwWhcNMjUwMjAxMDYwMDIwWjAzMTEwLwYDVQQD Eyg4MzcyYWUxZmU4YmE0OGQxZmJkY2Q0NGM0NjhlZjE1Yzc4NjBiYWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoxPIVmK44TXQnyI4gS6l25KCLNy J5m1MGgN2A5aXUXDWbLR+/VC37smFSQIk1gut48fVC8w1lNvl3Bxsr7F5ZczlDyV yZVeFhUY35BbFMxbsJ+oLplbkIxb8iYguw5KmMSjoDhOrt9OlDzsZdFywaCdj+r3 O/JCX0QtSevH27XxwqXron10CHLHoExCToU2Gqqt/emOK4xMII8KVPC7RlYOiXmo CdQlv7JI5nIs4U7RxBWiR1qC9ulDFoJ5Zh1I16GrNXRCJw/VZ+80qvdnKcO9B34x VrxNqNLaoaXd3ofEO6SYl+ZwG4GgJpL75xprpc2wGzzTUd0EM6jUOkJIJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFINyrh/oukjR+9zUTEaO8Vx4YLruMB8GA1UdIwQY MBaAFFX62W3QWvjC0mGSyEETHy+XRZ/tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmZyWmJkQmEtTUxTWVpMSVFSTWZMNWRGbi0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zMGU1ODItNDQ0OC00OTUyLTk0YTAt MzBmZjJjODNmMDAxLzEvVmZyWmJkQmEtTUxTWVpMSVFSTWZMNWRGbi0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8zMGU1ODItNDQ0OC00OTUyLTk0YTAtMzBmZjJjODNmMDAx LzEvVmZyWmJkQmEtTUxTWVpMSVFSTWZMNWRGbi0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAITZquF+u yfGD6uU2+S47V8XlmMTjYQfGJmUdnizkg65j32rmQ/HL32Eko/P2ZX6ZswbGXqBb VPwG9RlXC5+7OTrp9rGAw3/sWNEWHrVh/rW3yAGG5QzhiywjCsMus050kBpkjfcU ZVx/yP9xorn/eC2X7nI9wZk9hy2qws/ZRJpV2UvzObsLcH/obXYmpPfFWQkaRiZC hJYgwwdOwqPL/tLittWnGd6oxvTHrMhbUKtfUz8uWVs1dxu9eqCRz12nkBsCVCKG Ny4PjHl0gKhRAhvywCimT9NzYlUeSUjh+4jWemVFoe6x8t7Yvfx2933nwbJijvyf d7DUFyppAl94UA== -----END CERTIFICATE-----Generated at Fri Jan 31 15:34:19 2025 by rpki-client on console-fra.rpki-client.org