$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft File: F7UEL8INm6sWduCa9_8bpb-trnU.mft (raw, json) Hash identifier: fJQgR8sDpjlSvSzHMB/iroRPCUlsp8xW9bOgnCTnHrI= Subject key identifier: 28:FA:1B:ED:B7:2E:BC:67:28:8F:F6:95:03:8E:E8:37:B0:23:23:1F Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75 Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75 Certificate serial: 019609E747022C429E943DC94BD68BEC5673 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft Manifest number: 0E42 Signing time: Sun 06 Apr 2025 07:01:13 +0000 Manifest this update: Sun 06 Apr 2025 07:01:13 +0000 Manifest next update: Mon 07 Apr 2025 07:01:13 +0000 Files and hashes: 1: 5bIFsErhPSlmM37nhrp-eU9l5Y4.roa (hash: W0LEviwE6sQ3/HTSMFGMNopeuLD+ieboT1WS/XkZF1E=) 2: 7rGZ7Kn81ZZ9VKoeH0eLU-kXt9M.roa (hash: wbrR267hltnIltfZnIqap+bK1X+30aRn2vIaMwlZYl0=) 3: 8B9wa-TamsFPX-b9Sjwq2JWmpu0.roa (hash: mYWGy6vPQqUonSl/lzSA7r99GqgJfzuS4OhPL383spw=) 4: A39EZrrDrXLk3J8BZLUN7wQ6C50.roa (hash: Ark/uTgt37FRO8Utnxml8XHzzu9fwVEDGjmOjqbxT4E=) 5: Chb74JL8JJmMbGzdCWsV1I9XTHM.roa (hash: uqlIkNtybKQGK6oYFgs8Gcl/3LifaWUOWXgUOaIWjq4=) 6: F7UEL8INm6sWduCa9_8bpb-trnU.crl (hash: nITMj51gtv0zWQj9IuXMMVQpZr6I73+d0D60ZKWqvLM=) 7: H-wI8WViyvhQ58migChLNEMEYb4.roa (hash: 55jO9FPLyHdmA0ZhDHMAOcwTS+Ma+ZmiF+DkbWOEkzk=) 8: JY2Qbmj2mgX3KDG39J6yIxJr0tc.roa (hash: 1KGhpD1HwCPZtP8VkVF45re3cg2JKrviwS59Vb+WzQ4=) 9: N2B1iU0YSzB2x_40oFW-BcBZpSE.roa (hash: 3Bt9biLCnw654O83mAV6T9k7ZnWMTrPShbMbJlnWNIs=) 10: QnOCtXAVmX13ibu9GQu1nSs9w-k.roa (hash: 2ja4/uzYhdT+ao7xdjqgdrp8HFOJkvXcfpdXCeeEDmY=) 11: YRRXPoENpmdtt6jCnuMjG8rrikY.roa (hash: DbDzgUZdi2jed/+3x8UofBswoXpqS+WPTmkA9M7K92c=) 12: bA2-1nnLbrWRGqFV2afM2bzGsYs.roa (hash: FCcUA1F21qdmoEMQzczm0l/NGWKzFMZ3eCmf0F/+Cd0=) 13: blSvVBOfQQX8HPgRw9s7J2WaT7U.roa (hash: vl3RTDfDlA0AmENRkgmM8JLJlNA1WYfzNQBSFmihkQU=) 14: xZC_xBRdyqTElb8rKCSQViw1QQk.roa (hash: Am0BFTFCqKQ+R9vTI46rJ2D1DFX8Hh5BkVmp7WNJvlQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 07 Apr 2025 07:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:09:e7:47:02:2c:42:9e:94:3d:c9:4b:d6:8b:ec:56:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75 Validity Not Before: Apr 6 07:01:13 2025 GMT Not After : Apr 7 07:01:13 2025 GMT Subject: CN=28fa1bedb72ebc67288ff695038ee837b023231f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:27:6e:e9:d8:1e:02:c3:cf:83:17:a9:0f:97: ff:e4:9e:07:6a:e8:dd:a4:f5:5c:4f:e6:f3:7a:02: b8:fc:c7:f6:d3:e2:09:4f:6e:2a:21:25:04:72:d0: 18:d8:9a:6c:d0:1e:16:e8:ef:44:3e:c8:f3:c3:e4: 19:e7:70:69:19:7a:73:51:bd:d4:47:12:6e:43:28: 6c:ce:44:5c:b7:63:c9:1f:3f:6b:64:18:89:f5:40: c3:db:fd:58:79:3d:ad:78:9f:b9:3c:c5:eb:3e:5c: 56:33:74:5c:7e:fb:53:c7:f4:54:b3:2f:d2:12:c7: 61:7e:85:a9:d7:cc:0f:c5:74:57:c2:de:4d:bd:b8: 7c:01:81:42:cc:dd:fa:5d:f0:25:d8:bd:f4:d5:00: c5:1c:34:b6:c4:68:1b:c6:a2:a2:19:42:14:a4:d4: 89:01:a5:b0:0d:a1:85:ad:23:d9:b6:99:d5:c8:b9: 30:a5:9e:d5:3f:23:e2:04:af:6c:9f:70:4a:a3:81: c8:10:9a:5d:04:c4:12:9e:bc:e9:29:04:20:7f:0e: 8b:c8:0d:d2:45:b2:2e:2d:dc:8c:45:9f:b3:19:54: b9:15:0a:59:59:28:3b:17:59:2c:13:02:56:65:af: 8e:3b:bb:15:55:b7:d6:79:ec:f2:67:d9:85:84:b9: 2a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:FA:1B:ED:B7:2E:BC:67:28:8F:F6:95:03:8E:E8:37:B0:23:23:1F X509v3 Authority Key Identifier: keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:0c:07:23:17:b6:4a:02:7d:7a:a6:cf:67:6e:88:42:b6:71: be:4c:14:8e:bc:87:14:1d:46:91:45:ba:4d:56:38:83:dd:09: ea:a0:84:c3:d9:53:01:44:0d:9c:bd:a9:cd:57:d8:dd:da:05: 07:3f:c8:00:02:26:e2:94:c8:f3:d1:30:91:54:cd:b2:3d:e1: 7b:e8:73:6b:a2:57:e0:c1:28:ad:ce:ca:90:f1:ae:cb:9c:68: 6b:cf:ce:fc:a3:f0:3f:4f:94:ae:e7:88:bd:d1:35:5e:15:d0: a8:5e:69:fe:fe:8b:c7:4c:1a:2a:d0:09:20:75:0d:93:9b:bc: 87:b8:ec:fc:b2:88:21:c7:29:f8:f5:d0:99:f9:8f:f3:4b:7d: 71:cb:a0:d4:c9:75:84:01:9e:db:da:5a:a1:5a:27:58:46:29: 54:05:3c:3a:39:b6:44:dc:4d:9f:31:dc:eb:f4:78:3d:3d:ca: 75:09:41:97:13:56:5d:d9:9d:c5:43:5e:1a:05:03:25:5e:67: 7e:f3:76:54:15:b5:60:6f:64:85:cd:b2:b4:74:c9:72:64:e7: de:22:b6:a3:95:dc:ee:28:36:db:8e:00:16:45:9e:8a:a4:b7: 26:fa:5a:29:5b:eb:48:27:5b:9b:43:71:36:fd:6c:b2:66:eb: e8:f8:58:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYJ50cCLEKelD3JS9aL7FZzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3YjUwNDJmYzIwZDliYWIxNjc2ZTA5YWY3ZmYxYmE1YmZh ZGFlNzUwHhcNMjUwNDA2MDcwMTEzWhcNMjUwNDA3MDcwMTEzWjAzMTEwLwYDVQQD EygyOGZhMWJlZGI3MmViYzY3Mjg4ZmY2OTUwMzhlZTgzN2IwMjMyMzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCdu6dgeAsPPgxepD5f/5J4Haujd pPVcT+bzegK4/Mf20+IJT24qISUEctAY2Jps0B4W6O9EPsjzw+QZ53BpGXpzUb3U RxJuQyhszkRct2PJHz9rZBiJ9UDD2/1YeT2teJ+5PMXrPlxWM3RcfvtTx/RUsy/S EsdhfoWp18wPxXRXwt5Nvbh8AYFCzN36XfAl2L301QDFHDS2xGgbxqKiGUIUpNSJ AaWwDaGFrSPZtpnVyLkwpZ7VPyPiBK9sn3BKo4HIEJpdBMQSnrzpKQQgfw6LyA3S RbIuLdyMRZ+zGVS5FQpZWSg7F1ksEwJWZa+OO7sVVbfWeezyZ9mFhLkqWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCj6G+23LrxnKI/2lQOO6DewIyMfMB8GA1UdIwQY MBaAFBe1BC/CDZurFnbgmvf/G6W/ra51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQt YmM2Nzk0ZTk1ZTVhLzEvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQtYmM2Nzk0ZTk1ZTVh LzEvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoAwHIxe2 SgJ9eqbPZ26IQrZxvkwUjryHFB1GkUW6TVY4g90J6qCEw9lTAUQNnL2pzVfY3doF Bz/IAAIm4pTI89EwkVTNsj3he+hza6JX4MEorc7KkPGuy5xoa8/O/KPwP0+UrueI vdE1XhXQqF5p/v6Lx0waKtAJIHUNk5u8h7js/LKIIccp+PXQmfmP80t9ccug1Ml1 hAGe29paoVonWEYpVAU8Ojm2RNxNnzHc6/R4PT3KdQlBlxNWXdmdxUNeGgUDJV5n fvN2VBW1YG9khc2ytHTJcmTn3iK2o5Xc7ig2244AFkWeiqS3JvpaKVvrSCdbm0Nx Nv1ssmbr6PhYRA== -----END CERTIFICATE-----Generated at Sun Apr 6 13:27:00 2025 by rpki-client