$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft File: _4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft (raw, json) Hash identifier: fPyJVMvuHoX/20z4EW/kGalOfvX7ES+zmL8Y92r4Kec= Subject key identifier: A5:34:48:C1:5E:B9:36:BA:1F:0F:FD:FB:F8:05:00:F0:99:F7:D9:25 Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86 Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986 Certificate serial: 0196037713FE180D4A469FAC62CF88591E62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft Manifest number: 1514 Signing time: Sat 05 Apr 2025 01:00:57 +0000 Manifest this update: Sat 05 Apr 2025 01:00:57 +0000 Manifest next update: Sun 06 Apr 2025 01:00:57 +0000 Files and hashes: 1: 1-qG54akf4ZK4Vn2nJAtq8qKMB-M.roa (hash: +KrvgwuNM4eT5l98LWe/CjZjFxSOKRz6fj1mSGz0IgM=) 2: 7_xHvFH9z1lTBMmCYCZyfOMLpCE.roa (hash: Dy9Ep1VuSlW1UwNypkd8T87oMpJakHz3KhMW+QvcJps=) 3: 8JVDAVLNFauwqQaVfnt2Vbf7qyM.roa (hash: v8PEoTepb8SY5IPZDmMyByiGGEsM8VZnFBHuEpMHhf8=) 4: GYDa6uF4PXtvgFCZif9U8DfyJhs.roa (hash: x9pM/mAY2BLb1r8R45XN3qmt1Gw8vPBkNTNsNDjS6Jk=) 5: ISiMd8SOBUmeZ3l9pfTrNrRMVZ4.roa (hash: jX1VL1H9HdYzBbWtVwBVZy9/vxHTwytZF8IGlvhq3Yc=) 6: JXUpuOiDJbpAQ6wJyegYg23uwQY.roa (hash: IcXnbwWR3QdHkuBHHjMtVeQKCG9JaMJJR88n+O+Lv4g=) 7: Kn5AOeIvqDj0QyY0a6gvSVOYK04.roa (hash: /7QM63bFC+CBTXnuyFwX9/7nQ/C+RhIxyYwX13EXYS0=) 8: LL7AEgR132RnJITVXb1v0I3LCyw.roa (hash: gwRFxp3BgZCfzCqdNDK/XuHwvvhdYQt+5LD2lZsPRaU=) 9: NaXmOsDpDUrJU-L3cR4MsoyMUQA.roa (hash: dVVNZQbSo8+6scs7Gd+Q59/WTz4n0kcfFCZ13Y+qz7s=) 10: UryH-7kbyXWUJTfxmD8_iKhQToA.roa (hash: 9X1VOT+y467gWK0X8aw0s4QPOjoJGbo5qGz+HUSG1OM=) 11: V4iFmGmpuX9vmwKfCIL4MHq3iJo.roa (hash: I7wr4UYfNx1god3F0V72adpmlcw8clHUqo883JUOo54=) 12: XR-_EEDwF8zWqFnUJesI7P4suXw.roa (hash: 5Fp6z6r3AdWNjIT316J/wStOBp8ELRHvRNd1XNc9tso=) 13: ZtIB391wA96ODwULxOuaUb3zKjw.roa (hash: iYFjXUPN6915L3avwAU1BHDz24hStz0uZXCywgYk214=) 14: _4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl (hash: 2qCrW07cxnfoRtIYkUU3uLP2ZIGLrS0w5++74cLhJTM=) 15: bke-YJ-tbDLGpp3kvZGH2TLdlOI.roa (hash: NXBX9RHNDwlq1k9iub5dxUrFv5q8FjUTbkNsfuh2Uzo=) 16: bloAk3yeA7RnUogV_JT9EWIP-hM.roa (hash: 2fE3VucaSZiB1/IjzEIuOiCkE2iec+1KGKY3worRZJI=) 17: bzmfxm3S5hbe6Gaa6wvgeLEiaNA.roa (hash: Ar56s14Axf0ioHIstHBEGHX85IVOcRUFRcIehjO4vNI=) 18: fLQjwPFcSiNzGnABv3wcIsBu4Zc.roa (hash: fne6Mo/RPgJpx4rqAp26rw7ey3jXHPvd71VT3Sh+OPE=) 19: iUM8bJHwQ48CpEg1dQgbuZoF2F8.roa (hash: FAU/hqJaw9dZlVsB9TPc90NTrKoL6yNGJeYIXg92yTQ=) 20: mphDesgjK6Onr5y6IZPMTWlrP-U.roa (hash: ilbmBxOIagqo/tPLQF0wDgYFEpCdkEK/5ye43lns6Ks=) 21: o5FfsyY8uPlw7vxZiArINnpfYQ4.roa (hash: 8fYUUuL1jUUHxudyw5FjfTDD1VxmkrgHLHMkAP13QCE=) 22: pN1QTddIk2qdFe_mOVuHdGmP3Z4.roa (hash: CywtU84R198uQ8xF6BjJqnsNgApLacLlntN4HmgGHZM=) 23: rE9cybiH6oB4mGa5EHSN9cceqWE.roa (hash: YG48gdDn/SUyc3i/+XHJ5HagqvRplqEN/up/vYOmvBI=) 24: uYzA14o4SLgVDIUH1V-hG4krcmM.roa (hash: AAmmFasdZzQbOIJJuAxM6M66jvg5N0KdzbSbTAsq2+w=) 25: waIdBiyQcZY5S3UHlSgYjhWy3yA.roa (hash: B01bIchSEkzdF5UX/NW8F0eHIFCkAlYI9AyRAZwvgUg=) 26: yphDYCojIc0PisUPqGFzcSpaHr4.roa (hash: kueA64oPFnuqfOUJ8KFf+GceWa+kI7exnedP73+jI8A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Apr 2025 01:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:03:77:13:fe:18:0d:4a:46:9f:ac:62:cf:88:59:1e:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986 Validity Not Before: Apr 5 01:00:57 2025 GMT Not After : Apr 6 01:00:57 2025 GMT Subject: CN=a53448c15eb936ba1f0ffdfbf80500f099f7d925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2e:3d:ad:b4:68:a6:85:8f:4f:26:79:11:ed: 43:0a:7d:57:e6:66:83:f9:ea:ee:a7:9c:e2:78:0a: 85:bd:10:c2:67:86:a1:0d:de:15:be:f9:cf:4a:36: d7:f3:4f:c1:10:fa:84:f9:1d:40:f0:b9:41:1c:72: d2:9b:6b:10:ae:02:7d:29:50:db:46:84:e6:62:f9: 66:c9:68:76:38:a0:10:22:22:5c:e1:34:fd:54:45: b8:89:fc:d7:09:a4:c5:f1:fa:4b:00:4a:d3:d4:74: 51:8a:7a:26:a7:1d:56:8e:8c:a8:35:94:7a:6b:ee: 00:9d:47:8b:32:a6:4f:e8:fa:ad:7b:30:ee:d0:a2: 8d:ba:8d:9a:68:ca:07:0b:43:48:ff:e5:f2:08:b2: d1:ab:69:3e:a4:a4:62:dc:8e:96:7e:0d:0f:6e:99: 9a:58:a8:b7:02:95:5f:45:c1:dc:9e:8f:0a:38:94: d0:f7:24:7a:bc:6e:d9:ab:fe:21:59:4f:2a:9f:ba: 5b:ff:b2:0a:a5:d3:84:74:9b:b0:4c:2c:b1:2c:9f: 0e:57:4e:09:d6:46:28:39:7e:80:e9:84:39:6a:35: 4f:37:d1:5e:c1:e2:3e:28:3c:fc:19:8c:9b:10:40: 3a:6f:29:68:47:e6:a4:7c:93:8d:08:b5:dd:af:c4: 58:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:34:48:C1:5E:B9:36:BA:1F:0F:FD:FB:F8:05:00:F0:99:F7:D9:25 X509v3 Authority Key Identifier: keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:2e:ff:8c:41:9f:c4:eb:4e:23:84:20:99:4e:c4:fc:c3:c7: 25:88:46:10:9c:db:f7:27:70:1c:8d:f5:98:74:31:36:a8:43: ba:3c:86:13:0d:50:5b:33:24:ec:50:d5:2b:d1:68:31:06:a3: 0f:91:02:56:c4:6b:d7:28:aa:2f:e0:f0:ad:fa:85:7d:09:6f: f0:68:d8:9c:db:cb:de:ad:b0:27:74:7d:7d:ab:46:14:86:aa: ce:6e:4c:d4:f7:47:be:de:5e:01:52:65:23:7d:83:af:d4:39: a3:ef:f1:a1:1c:62:e1:5d:6f:0e:1c:49:5f:9c:67:55:b8:0b: a9:9f:99:3a:d8:d1:f0:4c:f6:23:88:a2:3b:13:30:db:34:96: 90:77:8d:e2:42:cc:ef:93:2f:24:23:07:13:77:c5:d1:9e:49: 5c:ee:52:6e:8e:de:8b:c9:07:39:2f:df:23:24:b6:56:43:df: db:62:7d:ff:34:92:aa:14:5c:b8:f2:e4:d9:c4:81:e2:74:3c: a3:21:9e:22:df:b7:bb:7c:2b:50:ad:19:b8:20:3a:1f:74:26: 8a:bf:3e:61:e8:a9:48:ba:e5:ef:d5:8f:24:7b:d2:31:14:2a: 38:3c:2e:96:96:0f:54:ba:68:7e:e4:19:7f:17:fc:08:30:1d: da:cc:ee:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYDdxP+GA1KRp+sYs+IWR5iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmODIzMDlhNjgxNDY3OGFkNzJlM2YzMWE0ZmUwMjcyZjQw YmQ5ODYwHhcNMjUwNDA1MDEwMDU3WhcNMjUwNDA2MDEwMDU3WjAzMTEwLwYDVQQD EyhhNTM0NDhjMTVlYjkzNmJhMWYwZmZkZmJmODA1MDBmMDk5ZjdkOTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAti49rbRopoWPTyZ5Ee1DCn1X5maD +erup5zieAqFvRDCZ4ahDd4VvvnPSjbX80/BEPqE+R1A8LlBHHLSm2sQrgJ9KVDb RoTmYvlmyWh2OKAQIiJc4TT9VEW4ifzXCaTF8fpLAErT1HRRinompx1WjoyoNZR6 a+4AnUeLMqZP6PqtezDu0KKNuo2aaMoHC0NI/+XyCLLRq2k+pKRi3I6Wfg0Pbpma WKi3ApVfRcHcno8KOJTQ9yR6vG7Zq/4hWU8qn7pb/7IKpdOEdJuwTCyxLJ8OV04J 1kYoOX6A6YQ5ajVPN9FeweI+KDz8GYybEEA6byloR+akfJONCLXdr8RYNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKU0SMFeuTa6Hw/9+/gFAPCZ99klMB8GA1UdIwQY MBaAFP+CMJpoFGeK1y4/MaT+AnL0C9mGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTkt ZjUyNTgxNjQwMmJkLzEvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTktZjUyNTgxNjQwMmJk LzEvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADS7/jEGf xOtOI4QgmU7E/MPHJYhGEJzb9ydwHI31mHQxNqhDujyGEw1QWzMk7FDVK9FoMQaj D5ECVsRr1yiqL+DwrfqFfQlv8GjYnNvL3q2wJ3R9fatGFIaqzm5M1PdHvt5eAVJl I32Dr9Q5o+/xoRxi4V1vDhxJX5xnVbgLqZ+ZOtjR8Ez2I4iiOxMw2zSWkHeN4kLM 75MvJCMHE3fF0Z5JXO5Sbo7ei8kHOS/fIyS2VkPf22J9/zSSqhRcuPLk2cSB4nQ8 oyGeIt+3u3wrUK0ZuCA6H3Qmir8+YeipSLrl79WPJHvSMRQqODwulpYPVLpofuQZ fxf8CDAd2szu2Q== -----END CERTIFICATE-----Generated at Sat Apr 5 07:31:37 2025 by rpki-client