$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft File: R3avt0-tW68KYYC0lRDYuEl9-NM.mft (raw, json) Hash identifier: 7H/dcWDUcGtqQzeYxox4i9nOai0/IJtz4Y3e8rBETS4= Subject key identifier: 9E:DB:FB:DE:BF:F4:96:9D:E9:10:FC:E7:EA:E4:FF:9C:3E:EA:E3:8E Authority key identifier: 47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3 Certificate issuer: /CN=4776afb74fad5baf0a6180b49510d8b8497df8d3 Certificate serial: 01963CC1CD29C6CA860A2B4BDE7B983C64AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft Manifest number: 14F2 Signing time: Wed 16 Apr 2025 04:00:55 +0000 Manifest this update: Wed 16 Apr 2025 04:00:55 +0000 Manifest next update: Thu 17 Apr 2025 04:00:55 +0000 Files and hashes: 1: 1h855CNEVOjEfeY3xJdnjH3udfA.roa (hash: LnReL4xvvQZDIPnpuzGkg0WHy3mNK+PRykuvMTviVRU=) 2: 9TPdAIfPUajUjs2DsbC3GN5w1mM.roa (hash: f998uOYMTFD5RySwHTrfZLXT9MQqC7DQiOZI706CLv0=) 3: BjNcWgFCcgba03gZ00Wn0vEqj3g.roa (hash: U/XRsHv7C+f9dXk91I1pC9Y4HNFCH0uKUdMuFoDViRQ=) 4: BrfY4YW_yXK06U0eOLt-LobfjzY.roa (hash: Hv6+aEBXmMC9XH4TQkng0p4jntb620WSOaHbhPCP9JQ=) 5: Cw1uuAeUBhAelOLTm4Dk1iRffEA.roa (hash: z7x5PkssyE32f3g9waLhPt3Hl1C8H5f4Iw04pNNOOB8=) 6: EcRwtilhZy6tNswg6gPS5OkvUlQ.roa (hash: qBDPjWgpNJxholOTWxrJUnO/kRkTjC8UXjWmpsN+tAc=) 7: R3avt0-tW68KYYC0lRDYuEl9-NM.crl (hash: alhuFYWo8FzfAXihOSBPccZGnyCEZnLI/byjlwv6+6k=) 8: T8_EmiMUPF83zSf_CWDX1W5xQ1k.roa (hash: d6CAaY4KcSFvMEPDFQGYRUngwvkhFj6iBm1RzRLZ++4=) 9: WUYHmqFyP61kI6BD9sMT7KF9l-U.roa (hash: xFiWBHTwLfZ5M8eQEBathNKsbTc1PcIqXDpV9YTX3G8=) 10: g5kj0c5gIcfXvJMBxVW2-IvShUI.roa (hash: CKgIE1v8ZknTa0F780Va3Q+BXidD3R6HaKXYmqUb3wg=) 11: kKoWp4Lx502DAZ2dTiIEcojnfao.roa (hash: wbMVZciEXcbsx0EhcS9t8+gUwRDnIiXLOoH2KSH13m8=) 12: m0urSftBhVugiQE6mFeNiCtZVI8.roa (hash: xOqBMnBvPEbbfCmZX1QX9FuTGPEracGRpzNmhAwuxVM=) 13: p9BRYnl3EKm9TTth6amvuszGxmw.roa (hash: RclXNVeUwytI6eicBVcxuy79LLzQjb8L+50PtV/MwdU=) 14: rq0QSGPYNrEzw6-22i_TjD_5ytM.roa (hash: GZherMDntzrMQ22JN8aWo0GpEMJ9AqPJdM6Y8aGsT1I=) 15: tWTx91zKwnMqo4ymab78lMSrAv8.roa (hash: ueVp+aZdHi8wvh5xrtibgRIouCvFn7uQziD4gJ74yO0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 17 Apr 2025 02:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:3c:c1:cd:29:c6:ca:86:0a:2b:4b:de:7b:98:3c:64:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4776afb74fad5baf0a6180b49510d8b8497df8d3 Validity Not Before: Apr 16 04:00:55 2025 GMT Not After : Apr 17 04:00:55 2025 GMT Subject: CN=9edbfbdebff4969de910fce7eae4ff9c3eeae38e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0a:e6:a7:76:82:1c:25:d9:8f:44:6d:16:00: 5d:22:41:d5:d2:88:68:17:6b:f5:76:44:0c:26:c8: 0e:2a:84:3d:db:70:6e:6b:08:10:d7:b8:99:9f:25: 9a:78:36:73:fb:76:49:0d:74:6e:a8:75:66:e3:11: 9d:21:37:42:c5:fc:20:b6:ea:69:03:93:8d:73:42: 1b:7d:50:18:8e:92:f5:ea:8c:42:e0:a6:4c:73:0e: e1:b3:d1:d6:4b:69:1e:19:93:9d:88:96:6b:a4:be: 7b:52:3d:96:01:e9:7e:51:af:71:a5:ca:4b:89:ef: 91:c4:44:57:ed:39:e2:27:da:78:8b:c8:e3:41:5e: cf:f7:3a:8f:59:3b:af:4d:9c:e5:1a:08:5f:85:9b: 1e:4c:19:28:d5:ec:3b:f0:22:fe:7c:10:c3:bf:1e: e0:96:7a:8d:52:e8:12:30:bc:11:50:ac:a7:a6:db: 49:ac:a7:6d:6b:a0:4f:d6:54:14:65:1e:87:db:cb: fa:23:52:71:2d:2a:b2:b1:07:e2:e9:f9:5c:95:60: 75:a7:1d:57:7b:75:7d:0a:49:6f:49:99:36:d3:e1: 2f:8a:22:b3:05:68:a4:92:5a:13:b4:36:b8:8d:10: c0:60:16:00:4f:ad:ad:75:d9:62:f9:7b:61:1c:ab: 8c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:DB:FB:DE:BF:F4:96:9D:E9:10:FC:E7:EA:E4:FF:9C:3E:EA:E3:8E X509v3 Authority Key Identifier: keyid:47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:3a:f9:cb:d5:b0:71:19:3c:68:4b:cb:9b:5e:c0:79:df:a5: 2a:ae:51:41:ba:59:ca:8e:66:8c:8f:7e:97:ab:2f:5d:62:71: c8:d7:49:ae:66:36:b8:71:e6:5b:34:db:74:94:69:54:83:b9: 9f:ad:93:86:1f:bc:21:94:de:1b:9a:ba:73:90:56:9a:b6:fa: 41:88:87:7b:e5:d0:fa:31:86:cd:6e:cd:68:c2:1f:34:f2:f8: d2:1d:63:ad:b9:b4:05:78:f6:42:df:69:63:f0:c9:d5:c3:7c: cf:e1:80:24:bb:54:e7:4d:13:75:5c:87:d9:11:28:5a:bc:84: 89:88:9a:ec:66:6d:95:c4:02:5a:c0:7a:1a:6d:bc:94:24:37: 11:73:ee:7e:c5:c7:a8:b6:a9:01:25:81:1e:e5:33:36:c9:88: 16:be:7f:91:91:99:69:4a:8e:a1:bf:55:91:30:b5:2e:23:d5: ee:39:bf:a3:c0:cf:7f:88:46:04:df:fa:81:2a:86:d5:5c:a7: 63:b9:0d:e6:09:c5:27:78:a0:14:d7:1b:a3:db:1c:0a:b8:4f: 91:70:cc:e1:67:a7:e2:a8:1e:37:c5:7b:c9:69:54:2b:2b:d3: 58:a0:25:19:15:ca:15:06:be:07:d4:ec:49:b4:91:e0:4b:b4: 33:d3:17:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZY8wc0pxsqGCitL3nuYPGSrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NzZhZmI3NGZhZDViYWYwYTYxODBiNDk1MTBkOGI4NDk3 ZGY4ZDMwHhcNMjUwNDE2MDQwMDU1WhcNMjUwNDE3MDQwMDU1WjAzMTEwLwYDVQQD Eyg5ZWRiZmJkZWJmZjQ5NjlkZTkxMGZjZTdlYWU0ZmY5YzNlZWFlMzhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqArmp3aCHCXZj0RtFgBdIkHV0oho F2v1dkQMJsgOKoQ923BuawgQ17iZnyWaeDZz+3ZJDXRuqHVm4xGdITdCxfwgtupp A5ONc0IbfVAYjpL16oxC4KZMcw7hs9HWS2keGZOdiJZrpL57Uj2WAel+Ua9xpcpL ie+RxERX7TniJ9p4i8jjQV7P9zqPWTuvTZzlGghfhZseTBko1ew78CL+fBDDvx7g lnqNUugSMLwRUKynpttJrKdta6BP1lQUZR6H28v6I1JxLSqysQfi6flclWB1px1X e3V9CklvSZk20+EviiKzBWikkloTtDa4jRDAYBYAT62tddli+XthHKuMIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ7b+96/9Jad6RD85+rk/5w+6uOOMB8GA1UdIwQY MBaAFEd2r7dPrVuvCmGAtJUQ2LhJffjTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mNzFjYzItYjcxZC00NjY4LTg2NjEt MDUzOGU5NWYzZjEyLzEvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9mNzFjYzItYjcxZC00NjY4LTg2NjEtMDUzOGU5NWYzZjEy LzEvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADzr5y9Ww cRk8aEvLm17Aed+lKq5RQbpZyo5mjI9+l6svXWJxyNdJrmY2uHHmWzTbdJRpVIO5 n62Thh+8IZTeG5q6c5BWmrb6QYiHe+XQ+jGGzW7NaMIfNPL40h1jrbm0BXj2Qt9p Y/DJ1cN8z+GAJLtU500TdVyH2REoWryEiYia7GZtlcQCWsB6Gm28lCQ3EXPufsXH qLapASWBHuUzNsmIFr5/kZGZaUqOob9VkTC1LiPV7jm/o8DPf4hGBN/6gSqG1Vyn Y7kN5gnFJ3igFNcbo9scCrhPkXDM4Wen4qgeN8V7yWlUKyvTWKAlGRXKFQa+B9Ts SbSR4Eu0M9MX3Q== -----END CERTIFICATE-----Generated at Wed Apr 16 08:10:14 2025 by rpki-client