$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft File: DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft (raw, json) Hash identifier: dyFimN4mep69Oii961ELlrunyuNmKtK9eJ9PIm5ruvo= Subject key identifier: 6F:7C:0A:8A:D7:4E:07:4A:68:A8:29:2F:75:43:BE:51:AC:90:6A:85 Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 Certificate issuer: /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Certificate serial: 019606AF3681DA1EB8815AA846DD70110390 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft Manifest number: 0EA1 Signing time: Sat 05 Apr 2025 16:01:08 +0000 Manifest this update: Sat 05 Apr 2025 16:01:08 +0000 Manifest next update: Sun 06 Apr 2025 16:01:08 +0000 Files and hashes: 1: 7K3k7b_VuVXreG4TZPCJYqZfF3E.roa (hash: Mlmhkf4jbq89VKvIVk+oiVN1ePN2hRV3HnX2uto8WJU=) 2: BrLyoPvlUaso46lX0KWb5vFGmM0.roa (hash: xL+T2GI69dhAcv4plVUHvDhKIEwvfeKCIn8Shgjm/i0=) 3: DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl (hash: JizpV6hn72kseibRxsWlQCTYx3i+ogf3jNNPoIdk7mc=) 4: ItkPtexNahvw3tDr3_bT8GEZfr8.roa (hash: SJn0U88NMdBnAS7glQzEzO/4h8XGSEZsIoQuSFWE8lQ=) 5: KPsZP5UxbVlCpzRsbOBIhy6z_pQ.roa (hash: kVAhbMyWoKA5VWa5Rhx+mEjaq4dPTfBEWmIzltLf7OA=) 6: O4hsLYqHDHOc5YtrhKrxfVw253c.roa (hash: ftP8M0zBEeWH13FQ0ROC4yQQqu5d0hiLyMqOEpuSB2s=) 7: S8NNzpYJ5i63QJglA0hS6lNTgN4.roa (hash: oQMGxS6aGqOdLfZr8vkFFrUapKMk/UebkSM9HMDYXqs=) 8: XHlN3RpeQmFr0S8d8kRmm2_r9Gw.roa (hash: 2CQIDqSJfPO5Zu/OEOhrMlJ6AbMdAt7LicT/EFEbIc8=) 9: XtPC-hLseHu-oNHb7iMp78D7fDc.roa (hash: hosi2cp2sXp7OezBXmUWbVNJewXZGC35mZTjc3/DqAc=) 10: bqCIwVZ2XpZx_IfIj7dYA8wJreY.roa (hash: i6u6U6/gyOnTl0MAd6o9UqfZD0C1nlK3nCbIBUXXrK4=) 11: qU-FNtg0qY4hJwKQMawgQqk-7hk.roa (hash: 13slz4AHZrhhHtsx3wRRPE08jfCa/LuOzvkrn3vV24A=) 12: rCxYI5Tulv7y1jiwSQxGMLIrGN8.roa (hash: +s5/7hhcPvTnv+J/E+7TIW4jm9Ttlavmle1UeAYMmYQ=) 13: ub_wuD6GrLRSFxkzvOcZq4Jo0u8.roa (hash: 7Un/Y+Kg84yVZqoJNW9xKfwZcI8pk00diQSKoBsgLzQ=) 14: wO5DmrwTSoyl76lHsJA2t5qAs9I.roa (hash: gFeojWx3JdvkiLn4u4KpLVd5bJnsp8Sl11CkVIEvvlw=) 15: yV5VAilxWOh0of_wXNotAN0Ules.roa (hash: okzmmgBoCtu74qSYeftTIK3U3j25WujMDAESaACQXMQ=) 16: zEVJ0_wf_uy6-Ifr09xIfyn08R0.roa (hash: Mx0lPSY3hw6TgVNilrBT17dSIAN0s4FyHxEYjNAbcQI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:06:af:36:81:da:1e:b8:81:5a:a8:46:dd:70:11:03:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Validity Not Before: Apr 5 16:01:08 2025 GMT Not After : Apr 6 16:01:08 2025 GMT Subject: CN=6f7c0a8ad74e074a68a8292f7543be51ac906a85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5c:a0:98:dd:2a:29:a0:b7:18:00:c0:7e:f3: 88:9e:43:87:b5:2c:2d:39:7a:b2:13:69:0e:4f:e1: a6:90:08:50:17:c7:f4:92:41:a2:9b:c3:63:a8:f6: 1d:8e:ba:7c:74:9a:0f:67:8b:2e:75:30:a4:11:01: 19:6e:85:d0:79:ec:8c:21:73:dc:67:a8:9c:27:8d: ae:a1:e8:e4:c3:f0:c1:2a:6e:61:45:25:11:33:47: 7d:54:b9:0a:e4:b1:f3:2a:46:d5:51:30:9e:a1:e0: 3c:f9:62:da:93:20:3f:35:d5:9e:2f:92:6d:b2:8d: 6e:fe:71:f0:6d:eb:50:13:7f:d1:06:93:7e:14:68: 58:39:81:2c:ed:0b:e4:39:47:50:0c:fa:1e:87:fe: ab:3b:71:4a:49:29:b8:08:14:d9:2a:21:2f:56:6e: f8:97:11:bc:ad:1e:03:83:f8:a1:68:5e:8a:6a:4f: 04:e1:5f:76:f8:d2:85:2e:a4:1b:ea:07:1a:d4:ea: 19:bc:a6:d2:34:30:a4:33:e0:fb:06:a2:44:cd:70: bc:fd:e6:d8:16:66:3b:32:4b:c2:3d:51:b5:01:3e: 44:04:e0:c2:d9:ac:c9:2e:92:fe:0c:94:29:b2:5b: 38:a8:d4:b8:22:65:09:97:1a:2f:cf:48:26:5a:dc: 11:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:7C:0A:8A:D7:4E:07:4A:68:A8:29:2F:75:43:BE:51:AC:90:6A:85 X509v3 Authority Key Identifier: keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:98:c0:62:b4:0d:21:09:c3:00:2b:0f:90:01:cb:5c:ed:53: ee:00:81:a1:64:fd:07:f9:d6:5e:69:c7:96:eb:2b:93:33:38: 4c:77:a9:ac:7e:88:37:23:18:5a:56:d1:55:35:96:b6:ff:9c: 39:b7:0d:d2:81:d7:e1:64:13:75:f0:d5:be:cd:19:d2:bc:0e: a4:ba:0e:01:87:bd:5c:d9:c2:37:80:87:91:58:ff:6f:47:4b: 18:65:ae:14:a5:e9:60:66:e5:0e:48:3c:1c:89:5e:0f:d9:c1: 80:2e:8b:68:5b:8f:f1:7d:bb:40:33:aa:d3:d2:c3:e9:4a:9d: 6b:53:51:8b:b2:2c:4a:e8:f6:16:27:1e:59:ed:72:d3:11:d3: c7:38:09:71:33:b6:52:d1:7c:ba:a5:68:3e:bf:69:62:3f:ba: 34:e2:d8:40:52:36:d0:00:cb:4b:ad:73:ce:4b:4c:70:e8:c2: a9:13:a2:59:8a:25:06:25:8d:b8:9e:eb:61:b3:cd:5b:d3:3a: 06:73:ae:b9:2f:06:29:07:68:b9:32:37:44:f0:40:ec:5a:56: 94:0f:03:31:89:1f:25:23:69:12:60:f1:4f:0e:8a:a2:81:1e: 0c:00:24:45:d2:6a:ca:35:e2:e1:e7:d8:72:22:39:ae:bf:19: 42:52:0a:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYGrzaB2h64gVqoRt1wEQOQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkYjY3YzVjN2ZhN2ZlMjQ5MmVlYzM3Y2Y0Mjc2NDJiNzFk NDI1YjAwHhcNMjUwNDA1MTYwMTA4WhcNMjUwNDA2MTYwMTA4WjAzMTEwLwYDVQQD Eyg2ZjdjMGE4YWQ3NGUwNzRhNjhhODI5MmY3NTQzYmU1MWFjOTA2YTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1ygmN0qKaC3GADAfvOInkOHtSwt OXqyE2kOT+GmkAhQF8f0kkGim8NjqPYdjrp8dJoPZ4sudTCkEQEZboXQeeyMIXPc Z6icJ42uoejkw/DBKm5hRSURM0d9VLkK5LHzKkbVUTCeoeA8+WLakyA/NdWeL5Jt so1u/nHwbetQE3/RBpN+FGhYOYEs7QvkOUdQDPoeh/6rO3FKSSm4CBTZKiEvVm74 lxG8rR4Dg/ihaF6Kak8E4V92+NKFLqQb6gca1OoZvKbSNDCkM+D7BqJEzXC8/ebY FmY7MkvCPVG1AT5EBODC2azJLpL+DJQpsls4qNS4ImUJlxovz0gmWtwR/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG98CorXTgdKaKgpL3VDvlGskGqFMB8GA1UdIwQY MBaAFA22fFx/p/4kku7DfPQnZCtx1CWwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjkt YjAzZGY5OTZlNDgxLzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjktYjAzZGY5OTZlNDgx LzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfJjAYrQN IQnDACsPkAHLXO1T7gCBoWT9B/nWXmnHlusrkzM4THeprH6INyMYWlbRVTWWtv+c ObcN0oHX4WQTdfDVvs0Z0rwOpLoOAYe9XNnCN4CHkVj/b0dLGGWuFKXpYGblDkg8 HIleD9nBgC6LaFuP8X27QDOq09LD6Uqda1NRi7IsSuj2FiceWe1y0xHTxzgJcTO2 UtF8uqVoPr9pYj+6NOLYQFI20ADLS61zzktMcOjCqROiWYolBiWNuJ7rYbPNW9M6 BnOuuS8GKQdouTI3RPBA7FpWlA8DMYkfJSNpEmDxTw6KooEeDAAkRdJqyjXi4efY ciI5rr8ZQlIK5w== -----END CERTIFICATE-----Generated at Sat Apr 5 22:31:28 2025 by rpki-client