$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft File: zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft (raw, json) Hash identifier: NJj2XOT5neQgZbPpO3AwRgqj9RJA7WOIpirR9c5ML2s= Subject key identifier: C8:B0:CD:77:D6:AA:83:61:32:B0:93:41:56:88:F2:3D:F4:D3:95:A4 Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77 Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277 Certificate serial: 01960340310CC4D8652868F00CE171192543 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft Manifest number: 0E3D Signing time: Sat 05 Apr 2025 00:01:00 +0000 Manifest this update: Sat 05 Apr 2025 00:01:00 +0000 Manifest next update: Sun 06 Apr 2025 00:01:00 +0000 Files and hashes: 1: 0vDMBCZWFOKh-q-XGUwu2Jr3z7Y.roa (hash: uWfrAsGA9zSBFRUppF4EGIbGfP7a2y+0eTMFReV79oU=) 2: 1-EH3zz14aNQaNvLk-kA5ObugP0M.roa (hash: AInhS8QzIu5+kTFM1AzSru0PxsCBAqGzcKM2yjycOYo=) 3: 4nM4rBv9VVZiBpLQiIbQsg6NSx0.roa (hash: pcYAXIo8mN5119CAEJXDu1uZ7LPPD2vqAMHmgIZuOWM=) 4: 9gWd_bF55nUFtzlptfQ-Ji7hQPI.roa (hash: xEiD+NeQMOim7hnrMiNX9H8tnd7mZQhnJ+lXAAgggm4=) 5: KH5q6_efsAJjbaCfus-hh1oZQWA.roa (hash: gjBnI4kxIIC3raOpuYMhEBykghBBy5koqMqm8N4fh5A=) 6: KnG8E7kezj3tf5epLozmTXTa310.roa (hash: DtT9ixAjwNWnGrRh0hq/H61cwW7Mp11Bc6qafI15X5M=) 7: NYD7kEkEPf-ABChHg559KWDxZM8.roa (hash: wEdTjLyasP6V7i4QrzN1J6SR98/Z10g1DKcaBU2r67I=) 8: aI-_oTt6aFi0rGtdpFFsZSUUhnk.roa (hash: ZpzPh7grr/BmAU1ND5+d/vIuS1VNGFc3sngZPWDtPBs=) 9: eL97ct3zq6TVsXqsm_lH3Bbmhag.roa (hash: lU3q1Bg78D4eXPO6TJ7nPcg82PdCzYKhbHO7kJienoQ=) 10: lSv4oHTtNY8TzLUjbRcqin21GM4.roa (hash: cWxkPQ7cLaDE94lvjvRa4rVit4z5KhiypB5wM4L+M6g=) 11: m1fv2wuNZrr8jBjk4GOP29n9uGg.roa (hash: kteVPpKzQdVFACZScgeUlas5Q589BNk8kwEszbWHglI=) 12: ppLoxUxyivEc3yWndu-pke-HgJs.roa (hash: xxTEUKme3aRveqdKSvTxmEaxTjRGb/uS7Dl8YoJIW9c=) 13: qiz-f9e8_qagVo454Qf-usEmhyI.roa (hash: 0k1gLPvcIoWvEOFBnscDSuywq30yMwZrPLJ7ynVOwEs=) 14: ruY7n1D9cAaf_aNsuAFKpSkEn90.roa (hash: iF7yWJ9yULuaJcnv62fja14BHo/HkbBE43s+ysMeZAE=) 15: y2fFeuZ4ALNmbxOF-TJC2ez9A_A.roa (hash: ZW4XWeHDbmOrkzP6lKA3E8FtGyPFeQqM41Y/X1LGTZg=) 16: zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl (hash: IckqUYuH77VQkU+eP8XklRZQ+E0Hl7uitb/qEowPwNw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 21:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:03:40:31:0c:c4:d8:65:28:68:f0:0c:e1:71:19:25:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277 Validity Not Before: Apr 5 00:01:00 2025 GMT Not After : Apr 6 00:01:00 2025 GMT Subject: CN=c8b0cd77d6aa836132b093415688f23df4d395a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e5:59:6d:d1:d4:b2:12:40:3e:8a:85:ee:6a: c4:d0:ed:af:93:e7:df:01:2e:72:a5:8a:9b:a1:4c: fc:cf:9f:27:1b:12:2d:a5:83:a3:22:61:cc:43:72: 36:ae:67:06:92:ce:23:d2:8b:e1:c0:f1:b2:2b:fb: 53:ea:a0:bd:02:fb:5b:dd:17:a8:a2:33:3d:3d:ff: d3:ca:53:61:45:7b:63:68:43:6e:4d:51:f5:c5:3c: 9a:08:da:50:e3:19:db:2f:06:20:98:2d:bb:95:41: d6:1d:cc:c9:af:8a:25:eb:23:f4:da:24:cc:61:29: 22:2f:4c:5b:f0:0f:0e:51:81:d3:f1:11:51:9d:18: 52:1b:2c:d5:db:1c:34:13:39:a6:f6:85:bd:a3:c4: 70:ac:ea:5d:e3:df:b6:93:1a:63:44:69:26:0d:6e: 3a:fe:4e:cf:8d:c6:34:21:a0:e6:c8:39:af:30:23: 3e:3d:dd:10:99:f8:86:3e:d7:01:d5:d9:5b:81:c9: eb:ff:33:52:92:23:11:4e:62:2d:6d:83:0d:5b:4f: fd:ce:c9:35:e7:b2:30:03:b4:50:96:31:24:5e:be: 36:c9:7b:80:34:a2:12:a5:e4:d9:e6:57:ed:ac:3a: 26:6d:87:a7:d1:97:16:24:30:ee:28:1d:0b:ce:10: a2:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:B0:CD:77:D6:AA:83:61:32:B0:93:41:56:88:F2:3D:F4:D3:95:A4 X509v3 Authority Key Identifier: keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:a7:0c:a5:ca:19:08:77:4c:91:88:fc:32:5c:c5:f6:4b:83: 6f:6a:39:35:ff:b2:89:5e:ac:84:12:59:2b:e1:00:23:d7:90: ef:25:28:bc:ec:ca:1c:ac:f9:bc:3f:76:f9:be:35:21:28:28: 79:09:a8:4c:e1:d8:ed:a5:8b:44:6d:95:be:ea:4f:f3:8a:4a: e7:6b:94:20:4b:76:51:a7:cc:e1:25:f7:12:98:dc:2c:e5:e1: 43:ea:7f:6b:59:79:38:a2:3c:f2:b2:c4:4e:39:a5:16:a6:95: 82:ad:14:91:b1:e0:91:23:2f:c9:ae:f9:a8:16:68:6e:34:0c: 0e:93:db:93:00:cc:ec:73:93:e4:37:ac:87:9c:2c:bd:30:0c: 5e:d3:5a:6b:13:9c:fd:51:42:c8:8e:82:1c:cc:66:35:e5:1b: 2f:31:9a:b1:b8:1a:e9:fd:01:46:1d:0f:55:d5:e1:39:f7:bd: 6d:78:42:a8:49:45:09:64:81:28:a3:10:ef:fd:fa:e8:30:a2: ef:1f:1d:37:ec:1d:32:2f:31:7d:75:47:98:c8:8e:3c:e8:3c: 8e:ca:c4:4d:e3:9f:f6:34:df:b8:6e:25:00:4b:2a:55:ce:57: c9:f6:9a:a8:86:63:8d:5b:d4:39:8f:1d:c8:30:b5:14:f8:a2: 50:4f:9a:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYDQDEMxNhlKGjwDOFxGSVDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYzVhZmU3NjliOTQzNDZlMWNkMzYyZWI4NWY4NzViMjNi MTcyNzcwHhcNMjUwNDA1MDAwMTAwWhcNMjUwNDA2MDAwMTAwWjAzMTEwLwYDVQQD EyhjOGIwY2Q3N2Q2YWE4MzYxMzJiMDkzNDE1Njg4ZjIzZGY0ZDM5NWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOVZbdHUshJAPoqF7mrE0O2vk+ff AS5ypYqboUz8z58nGxItpYOjImHMQ3I2rmcGks4j0ovhwPGyK/tT6qC9Avtb3Reo ojM9Pf/TylNhRXtjaENuTVH1xTyaCNpQ4xnbLwYgmC27lUHWHczJr4ol6yP02iTM YSkiL0xb8A8OUYHT8RFRnRhSGyzV2xw0Ezmm9oW9o8RwrOpd49+2kxpjRGkmDW46 /k7PjcY0IaDmyDmvMCM+Pd0QmfiGPtcB1dlbgcnr/zNSkiMRTmItbYMNW0/9zsk1 57IwA7RQljEkXr42yXuANKISpeTZ5lftrDombYen0ZcWJDDuKB0LzhCiFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMiwzXfWqoNhMrCTQVaI8j3005WkMB8GA1UdIwQY MBaAFM7Fr+dpuUNG4c02Lrhfh1sjsXJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQt MzMyNDdjOGUxYzFmLzEvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQtMzMyNDdjOGUxYzFm LzEvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaqcMpcoZ CHdMkYj8MlzF9kuDb2o5Nf+yiV6shBJZK+EAI9eQ7yUovOzKHKz5vD92+b41ISgo eQmoTOHY7aWLRG2VvupP84pK52uUIEt2UafM4SX3EpjcLOXhQ+p/a1l5OKI88rLE TjmlFqaVgq0UkbHgkSMvya75qBZobjQMDpPbkwDM7HOT5Desh5wsvTAMXtNaaxOc /VFCyI6CHMxmNeUbLzGasbga6f0BRh0PVdXhOfe9bXhCqElFCWSBKKMQ7/366DCi 7x8dN+wdMi8xfXVHmMiOPOg8jsrETeOf9jTfuG4lAEsqVc5XyfaaqIZjjVvUOY8d yDC1FPiiUE+agw== -----END CERTIFICATE-----Generated at Sat Apr 5 06:24:11 2025 by rpki-client