$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft File: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft (raw, json) Hash identifier: o4C2lbpY9QZ4GJ9TCPxM085rqZsFLjVQ01ME/DMb2lM= Subject key identifier: A2:EC:AE:61:FE:0E:9E:CB:9C:19:2E:F1:B1:1D:B4:63:71:45:C8:D7 Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Certificate serial: 01962ECF4E3525FC8259D41EAD8388288160 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft Manifest number: 1513 Signing time: Sun 13 Apr 2025 11:00:59 +0000 Manifest this update: Sun 13 Apr 2025 11:00:59 +0000 Manifest next update: Mon 14 Apr 2025 11:00:59 +0000 Files and hashes: 1: 5oD2HNqgzG_qOcF_21G9KLy5e2Y.roa (hash: RmXZv+Vqe5cI4h6ljtkED0qwtDL54/1oOSvgcLZr5dM=) 2: 6H0jPgZ40-qSdMrUIpXtjHxd2VA.roa (hash: bKX7Wm+km5brNebStx9trC9lQWDSYN+gli61DR2OFCc=) 3: 75sT-nwUqhGJrktdH6EqWa-q1mo.roa (hash: R1QtO6OQwY7O/dWJMCnCSA9mjsQZb+aGyr2mwiCWXM0=) 4: Bk5EEDboiWzloYLSbIprmQyOumI.roa (hash: Leabib+pYR396O62ZqXXAQ9RyIVRB2I7VcCKzRGI0Zw=) 5: FRe6auZzcSOVPtZ6Q5yvjDHlzS0.roa (hash: 2NaXdTlzJjkR6eXsQNd9ul22Iz8k3jyPNXeVsKS/++A=) 6: GEXA_gDFN_UI9pmu8MV3voaPJJw.roa (hash: dqAjGTOppVUexxUhNJnZSDJjjUoQVnH9/+S3XNxYfss=) 7: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl (hash: 9mEy0eFjywy6Vj11dztqqNcs1TFShDVp7npBUqTFA38=) 8: J0mrTDoDAe4tdcNY4ZTx8ruuu9g.roa (hash: SdkYwpw3qIRaB5VQaHi9AMXoPRVnXFJoZo9ChQzY2P8=) 9: QKd9v1TqhiMsVLAcOxJ22eYxs_g.roa (hash: HKu0bw+bkfxh/NhVSCdqzBjjysK0/agU+8z7cijegyY=) 10: WKhjscqZWdN-nuM8dfIBcstyH14.roa (hash: khUF0nyoDvCPGxtlsBxOqPz0aIco2pUZJy9sOWQaHzM=) 11: qMUUhW1iC-XMKPgcY2-u4nUNHXY.roa (hash: 8IGWcOXBDlPGcQOckJ+GtmlbDYmD6/HkpFAja/aKolM=) 12: tV8pY2AaFoThs7aSR_rVRKM4uZ8.roa (hash: 5JEjFQnGCc8ZZH1Nis0Dk3OW+MkzIr5bBwteIscBMNg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 14 Apr 2025 11:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:2e:cf:4e:35:25:fc:82:59:d4:1e:ad:83:88:28:81:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Validity Not Before: Apr 13 11:00:59 2025 GMT Not After : Apr 14 11:00:59 2025 GMT Subject: CN=a2ecae61fe0e9ecb9c192ef1b11db4637145c8d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:af:cf:4f:ca:5e:67:58:9d:ab:21:79:34:58: 53:79:7b:a1:55:b8:06:67:f1:78:06:5e:9d:e2:6c: 65:b5:01:9b:ed:11:66:73:d5:2f:05:84:90:00:de: 46:42:1e:e1:cc:61:ca:70:4c:27:ad:a8:23:2b:b3: 4b:f7:a5:25:c3:af:6a:bc:c6:99:31:7e:b7:e0:fc: f4:ad:91:2b:92:be:c1:c3:c7:d8:d8:38:f2:5e:a8: 4c:10:31:f1:8a:26:c5:87:37:d9:f6:67:a8:14:b5: ca:e4:1d:eb:0c:41:b8:f1:42:65:3d:b9:ec:87:c1: 33:20:48:24:7f:5d:d6:8a:30:69:b4:a8:57:d8:c0: 59:79:00:7b:de:b3:72:d1:52:30:84:c6:1e:22:d0: e0:f2:7e:31:35:d3:bb:69:5f:f5:c4:e5:eb:83:7b: 79:de:ac:25:9e:89:68:76:66:2f:1b:f1:38:fe:c7: 96:9e:5e:34:98:00:78:d0:2f:b6:89:53:e6:99:b1: ec:61:31:3c:08:66:74:c2:10:02:99:13:74:f0:91: 78:a6:19:e4:fb:b9:50:ac:49:c2:26:67:04:d9:0c: 93:01:18:05:d9:1e:cf:0b:02:59:ab:ab:5b:9d:7a: e5:fe:f8:87:76:9e:b6:0c:9f:d1:1e:74:2b:b4:67: c4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:EC:AE:61:FE:0E:9E:CB:9C:19:2E:F1:B1:1D:B4:63:71:45:C8:D7 X509v3 Authority Key Identifier: keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:d8:5c:98:43:08:50:95:f4:7d:33:a2:e8:06:e8:2f:c7:ef: 94:97:d6:b0:fe:ff:3f:07:90:b1:1a:ae:49:ff:54:9a:5a:0d: 05:81:8e:b7:27:47:d8:28:a6:ab:4a:db:e9:1a:1c:83:6c:5e: 2b:c2:89:ae:1c:6c:69:4a:03:85:6d:b0:81:19:fe:e8:f8:9d: 14:9c:f5:62:c0:57:49:5d:d3:9a:b6:1f:fb:e3:ce:d4:30:7f: 9e:58:bc:9d:eb:1e:d5:0c:39:c4:b1:4f:e4:9f:53:de:f3:9e: 2a:80:d5:02:1f:ec:51:2a:d2:ff:4b:a6:8e:0f:a2:9f:7d:6b: b6:df:65:a3:25:7c:e9:4e:2e:93:b8:33:2b:d5:fd:46:71:43: 5d:e3:21:62:5a:59:5b:8d:07:d3:a8:7e:48:a7:0c:32:cd:45: 45:21:33:1b:f3:42:6f:9a:61:50:8d:f9:6d:a9:23:8a:49:d1: 88:8d:35:5d:35:62:0b:7d:77:cd:5f:68:4e:7a:46:cc:37:46: 46:f6:10:c7:31:7d:7d:8b:4c:82:a9:1d:39:ea:d4:39:92:a2: 11:8a:75:bf:09:76:83:91:3b:ba:6b:d9:4c:fe:1e:ad:78:51: 2f:5f:32:be:23:02:a5:b8:86:5c:ed:25:9d:c1:44:a2:a1:30: bb:4b:9f:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYuz041JfyCWdQerYOIKIFgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNjgxMzhkNGVjMmVhNTFjYWNlZjA5ZmYxMDU4YTM3MGE1 YmUxOTAwHhcNMjUwNDEzMTEwMDU5WhcNMjUwNDE0MTEwMDU5WjAzMTEwLwYDVQQD EyhhMmVjYWU2MWZlMGU5ZWNiOWMxOTJlZjFiMTFkYjQ2MzcxNDVjOGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7q/PT8peZ1idqyF5NFhTeXuhVbgG Z/F4Bl6d4mxltQGb7RFmc9UvBYSQAN5GQh7hzGHKcEwnragjK7NL96Ulw69qvMaZ MX634Pz0rZErkr7Bw8fY2DjyXqhMEDHxiibFhzfZ9meoFLXK5B3rDEG48UJlPbns h8EzIEgkf13WijBptKhX2MBZeQB73rNy0VIwhMYeItDg8n4xNdO7aV/1xOXrg3t5 3qwlnolodmYvG/E4/seWnl40mAB40C+2iVPmmbHsYTE8CGZ0whACmRN08JF4phnk +7lQrEnCJmcE2QyTARgF2R7PCwJZq6tbnXrl/viHdp62DJ/RHnQrtGfEoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKLsrmH+Dp7LnBku8bEdtGNxRcjXMB8GA1UdIwQY MBaAFB9oE41OwupRys7wn/EFijcKW+GQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgt NjA4NTY0ODM5ZmQwLzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgtNjA4NTY0ODM5ZmQw LzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPNhcmEMI UJX0fTOi6AboL8fvlJfWsP7/PweQsRquSf9UmloNBYGOtydH2Cimq0rb6Rocg2xe K8KJrhxsaUoDhW2wgRn+6PidFJz1YsBXSV3TmrYf++PO1DB/nli8nese1Qw5xLFP 5J9T3vOeKoDVAh/sUSrS/0umjg+in31rtt9loyV86U4uk7gzK9X9RnFDXeMhYlpZ W40H06h+SKcMMs1FRSEzG/NCb5phUI35bakjiknRiI01XTViC313zV9oTnpGzDdG RvYQxzF9fYtMgqkdOerUOZKiEYp1vwl2g5E7umvZTP4erXhRL18yviMCpbiGXO0l ncFEoqEwu0uf6g== -----END CERTIFICATE-----Generated at Sun Apr 13 20:43:10 2025 by rpki-client