$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft File: BbHRPC4m4SeGJGpexMW-pphksg8.mft (raw, json) Hash identifier: GaijWf1aIDICzRus+OAtzELZOQKOgAZhFj+8TlapCas= Subject key identifier: C1:94:5E:D2:45:97:2D:58:29:23:74:9A:F8:54:EF:61:D6:BD:68:6D Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f Certificate serial: 019608D4484E6506D521685C6EF76B1E81DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft Manifest number: 15CB Signing time: Sun 06 Apr 2025 02:00:51 +0000 Manifest this update: Sun 06 Apr 2025 02:00:51 +0000 Manifest next update: Mon 07 Apr 2025 02:00:51 +0000 Files and hashes: 1: 05Tg0UTrs2bglsb4atVMOsvRYS0.roa (hash: VhJZRocRnbLToarK8Wb3G47273juDPcLT4qOnhmDcBI=) 2: 1UUsByoEofzjEeiAmIAz-WfMDBU.roa (hash: /7lgakegoy05PQfBI5+T4clOyf4KsMTGCdFLL/29XDY=) 3: 5QoLvq-WQhi5T97Feko4QBKbJJw.roa (hash: 7I36hNQka2fyL1Q374RiVWWXD4L+NmzEsqbBYn/pLlM=) 4: 6MJLp_dcMYXwk9RiE3DAAxY4oSw.roa (hash: iMyO6h7kJ4PGNfYetznIkMIkkeZszd0XbN1GelrAgSQ=) 5: 6NDDKTXIzRZHe_ehTDWU_WHQrJE.roa (hash: JW5KsBQslWl7UMV/MlFKqi9hwR7KoSJt1apypxuQJ5Y=) 6: 7qByDki_pKXz-mNnSCgIXHS1XaM.roa (hash: LGUK2l5AC67T1BEV+gQvM8QIjOAp9/K6aMTWDWsKeLc=) 7: BbHRPC4m4SeGJGpexMW-pphksg8.crl (hash: Xr9MWMCqLU3K8qViaanEBE+G5pYXojUG5AwZ9lYNftQ=) 8: DgTpLrRRquHSXvxiLZB-Fh9YeG4.roa (hash: DlQDXNMbatjiry2Z/1lohQ5Y3aQ3whRLmr2gMIHuKEk=) 9: OGaXmBMfcWvZ6ltHdLZ9jEV9lOE.roa (hash: eJOYvtDNe3FhBqS6Vln19RuplvlaDGsRE5/7K05uBUA=) 10: PsG0AtBemY9a4yDfPpt9i4Kr2GY.roa (hash: sBzY2h3ELjAXI6xknFWXGyJRwY7PSfLmEfEaa7NAk3M=) 11: TGoRKnPJi8w2mb-huIb9J65xjBo.roa (hash: ePazxEN5ghQaWUW2X4iM0oyeSePfu0C9ZykGzy3wrTA=) 12: TWE2GQbK5ZzsTrZP_-cvHhqi5o4.roa (hash: Ukt/h+lTDs0ybwVVqLmtBTv2gykUegHHPF+gzdqT32U=) 13: UUpwIiVcqDAAnpr6ilJo-OXFSZk.roa (hash: pd9P0IlgabDMIpT9nXZW5tJdWZ7mt1qbF+E2T8hCSg0=) 14: hj8L9GkvIvtNkKP3RDq4IS6qH84.roa (hash: Bkn5aqxtoPsMfsZ5PI8rL7/trWBK1cuaEqeQuBeWvM0=) 15: mMmotuD0TZKdicQDfZ6Z_N35ZqI.roa (hash: 07jH3RAfwMd/hMMXiDE+Mo4JGAXBcfNHakucWyLpJhk=) 16: ptXbX8Zqa-anm64RYPO3MNfDgCc.roa (hash: X1KaAT7AfL8kdySxiP0OJr7eJjZG/di68v2W2Al5EUw=) 17: te211TKQz2Pk8IALmy95oPDOlAo.roa (hash: 6m2ob5nsGlLuQ9RcRXpg5CWRSsEUhhwU4klUczhb2D4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 07 Apr 2025 02:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:08:d4:48:4e:65:06:d5:21:68:5c:6e:f7:6b:1e:81:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f Validity Not Before: Apr 6 02:00:51 2025 GMT Not After : Apr 7 02:00:51 2025 GMT Subject: CN=c1945ed245972d582923749af854ef61d6bd686d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f7:d3:b6:1c:f0:3a:6c:26:b7:f8:65:4e:f5: ad:8d:1c:eb:b4:a7:b0:0f:bc:32:41:8c:b7:b7:c9: ec:c8:21:95:d6:14:34:5e:37:fc:92:59:0e:01:b3: d8:bd:01:c4:31:18:f1:74:8e:e8:4c:9c:5e:8e:80: 13:a9:32:7d:bd:ca:a4:12:dd:27:cf:1e:92:89:ab: 86:c4:10:0f:c8:4f:03:18:e0:b6:80:dc:23:1a:c0: 07:be:13:18:27:fc:03:25:81:e9:b3:66:f9:65:52: f1:88:79:1f:06:12:7c:c0:20:dc:77:4d:df:4e:e9: a7:87:46:d6:46:c6:bd:a2:ee:4e:e2:86:ed:95:22: 28:2f:21:64:65:45:51:47:93:fa:94:53:a8:95:85: f0:63:87:95:85:40:71:2d:7c:51:f5:31:df:0a:f5: e6:3a:28:b8:04:28:d6:eb:ce:f1:af:ef:71:0a:69: c9:02:f9:1d:01:0c:25:76:c9:c3:50:be:69:b8:88: 3b:e9:94:62:b9:06:d2:15:68:9f:8d:c7:04:5b:dc: 69:b1:76:26:9e:dc:ab:9a:51:f6:06:0c:3f:0d:c0: 80:b5:4f:0a:d2:25:3a:d7:b2:c4:b6:67:bd:df:83: 5e:29:2e:cf:93:04:7f:7c:1b:f9:70:35:07:c6:6f: 94:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:94:5E:D2:45:97:2D:58:29:23:74:9A:F8:54:EF:61:D6:BD:68:6D X509v3 Authority Key Identifier: keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:c4:c9:ac:86:92:3a:67:0f:48:94:4c:fd:91:21:6e:b4:3c: 99:07:f6:53:be:2d:30:19:7a:68:2d:2b:ea:d1:77:ec:c6:93: 1d:13:35:14:f0:8e:2d:1e:5f:f5:f3:f7:c3:dd:b6:ae:74:87: c6:48:67:a9:fe:ad:24:65:7a:67:cb:7d:ab:d1:c6:de:67:22: 4d:26:07:78:5e:9c:b0:02:a0:61:0c:8f:bb:3d:a4:ba:7c:2d: d8:a9:f4:04:30:e8:b4:f3:97:9c:60:93:fa:4d:70:a0:04:2c: bc:13:cb:28:2a:58:43:66:dc:c5:29:52:f5:21:e2:b5:a7:2f: 2e:56:e9:94:fb:c6:9e:be:9e:a5:00:6a:a2:0d:4f:83:e6:fb: 8e:85:ed:6e:a9:3c:0c:9d:fa:56:e0:25:d3:3f:ac:39:14:a8: 86:fd:57:fa:f3:95:ac:23:c3:9c:68:0a:62:f2:40:e6:84:66: a3:05:96:d8:a4:ab:45:c4:e8:71:e0:0f:46:14:a6:e7:4b:75: a7:cc:77:18:c3:cd:32:a4:b0:0c:82:6e:2f:52:cb:13:e5:46: e1:79:3c:15:40:da:df:fb:1f:2c:7b:06:d9:ad:ea:27:4a:d7: 89:dc:69:77:32:08:58:6b:f7:82:b3:8f:76:6f:d4:37:6e:ca: 29:93:60:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYI1EhOZQbVIWhcbvdrHoHdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1YjFkMTNjMmUyNmUxMjc4NjI0NmE1ZWM0YzViZWE2OTg2 NGIyMGYwHhcNMjUwNDA2MDIwMDUxWhcNMjUwNDA3MDIwMDUxWjAzMTEwLwYDVQQD EyhjMTk0NWVkMjQ1OTcyZDU4MjkyMzc0OWFmODU0ZWY2MWQ2YmQ2ODZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvfTthzwOmwmt/hlTvWtjRzrtKew D7wyQYy3t8nsyCGV1hQ0Xjf8klkOAbPYvQHEMRjxdI7oTJxejoATqTJ9vcqkEt0n zx6SiauGxBAPyE8DGOC2gNwjGsAHvhMYJ/wDJYHps2b5ZVLxiHkfBhJ8wCDcd03f Tumnh0bWRsa9ou5O4obtlSIoLyFkZUVRR5P6lFOolYXwY4eVhUBxLXxR9THfCvXm Oii4BCjW687xr+9xCmnJAvkdAQwldsnDUL5puIg76ZRiuQbSFWifjccEW9xpsXYm ntyrmlH2Bgw/DcCAtU8K0iU617LEtme934NeKS7PkwR/fBv5cDUHxm+UkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMGUXtJFly1YKSN0mvhU72HWvWhtMB8GA1UdIwQY MBaAFAWx0TwuJuEnhiRqXsTFvqaYZLIPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjct NDkwNTI0M2JjODI4LzEvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjctNDkwNTI0M2JjODI4 LzEvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASMTJrIaS OmcPSJRM/ZEhbrQ8mQf2U74tMBl6aC0r6tF37MaTHRM1FPCOLR5f9fP3w922rnSH xkhnqf6tJGV6Z8t9q9HG3mciTSYHeF6csAKgYQyPuz2kunwt2Kn0BDDotPOXnGCT +k1woAQsvBPLKCpYQ2bcxSlS9SHitacvLlbplPvGnr6epQBqog1Pg+b7joXtbqk8 DJ36VuAl0z+sORSohv1X+vOVrCPDnGgKYvJA5oRmowWW2KSrRcToceAPRhSm50t1 p8x3GMPNMqSwDIJuL1LLE+VG4Xk8FUDa3/sfLHsG2a3qJ0rXidxpdzIIWGv3grOP dm/UN27KKZNgfQ== -----END CERTIFICATE-----Generated at Sun Apr 6 09:43:17 2025 by rpki-client