$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft File: PYugpSxCEprx1PdD_rM7sUTUu1w.mft (raw, json) Hash identifier: HV08oEFVBduJ0iLrO8TcswiYBTGSiOmFvN0g9R1jjNE= Subject key identifier: E4:C9:86:C9:0B:5F:D4:22:33:DF:97:62:47:0F:7F:9E:E1:75:9E:3A Authority key identifier: 3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C Certificate issuer: /CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c Certificate serial: 0196120F6EBB5BDD1A8184528F6C3FFA01B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft Manifest number: 14E1 Signing time: Mon 07 Apr 2025 21:02:03 +0000 Manifest this update: Mon 07 Apr 2025 21:02:03 +0000 Manifest next update: Tue 08 Apr 2025 21:02:03 +0000 Files and hashes: 1: 9AkjaJRYRIOTmgf4F3gyV6pdFkQ.roa (hash: N1lZUtbJEJkRSUYDq/VJK4cR/RojBk8ALOORTw9wVk8=) 2: DUER2OIxuLfteK-5s9p125aHbHQ.roa (hash: MKxlsAlXCfnz4va2JwSTTtP5lv2QEgVXIYiD1U0P1iM=) 3: I5Dlj2iBXR78bV2NI4oXxT6DVcQ.roa (hash: pUPvPv3IMdPMN3mngjSRkbMNdszUqvQ/W+9CudZep1s=) 4: IKxEFfN_KNz819jDJF02u6P6vks.roa (hash: M1gfdLv0XPFzxrEqEMyJ47aUP/+uDTO64SIkdj54NaA=) 5: JcqV5Zbt-7BBvR25dnt58sZOVRw.roa (hash: Jyex6OZ5W2eO7E9m8v2xcJSNJuYcw9eBRYzL8fzsuKg=) 6: PYugpSxCEprx1PdD_rM7sUTUu1w.crl (hash: qknIyGlCN1heg1y28mvzsYDbBKkHySHb+F9a5uupkgU=) 7: QeFtXb_2Jy97mUDOpmxAN1O437Q.roa (hash: pGsLweLJqx/P4hTPUc5m5Veo+2vG7HsRtDbmA1rHXlQ=) 8: YPwqy-r5Ds6zjUqs83c9wSrz4Xo.roa (hash: /OBWcwiTOuByZ0CFtuxP3jPnYcDQxuxVogbCk4BaZIM=) 9: _z_sTvwtZQKHpvup9rFWqFFhFKY.roa (hash: JVM6qUA4ZtDkSX81zJfuU5jJmnu8pCK2PaUHasgHRME=) 10: kUvUMMUm6A2S-PsLFuOoxFGjL2g.roa (hash: 43KKo4hB/OsGlhMLYdFrQhlx6kBqniKw+U0iCAYg2Qg=) 11: pOvELxmVMCJOREXgcbJwYPWQcLY.roa (hash: 8NAO5qgs1zoQcDKNETGRxihZubfEYTFA3QAx7BgtdEo=) 12: stpJENpG1HfxaYzx679NTwZFpZY.roa (hash: EMcugxArWnP7J9sItxl3gZsFeM8qrAvUxjSeKkZ4oao=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 08 Apr 2025 14:28:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:12:0f:6e:bb:5b:dd:1a:81:84:52:8f:6c:3f:fa:01:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c Validity Not Before: Apr 7 21:02:03 2025 GMT Not After : Apr 8 21:02:03 2025 GMT Subject: CN=e4c986c90b5fd42233df9762470f7f9ee1759e3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:09:63:56:53:e6:eb:5b:67:76:f6:44:4f:a0: 88:e5:d1:ac:0c:4c:94:c4:18:21:6d:26:d4:3e:34: bc:0d:e9:54:25:65:e4:c6:a1:ee:69:e5:44:42:fe: 2c:cb:2f:8f:bd:03:1a:f7:de:fb:e8:3c:06:f3:37: cf:84:4c:3c:4b:44:05:5f:4c:32:c4:8f:56:7a:61: 65:14:27:00:54:76:35:3c:c8:09:2e:5f:fc:ab:d2: c5:87:3a:b7:8a:b4:6b:c6:6f:f8:35:bd:a1:f7:0e: 27:3e:56:d1:bf:02:ce:5d:98:5a:3e:0b:ec:c9:b5: 4c:45:f1:a7:4c:0f:1e:1e:fc:22:6e:8d:1f:20:92: 9b:a2:1e:68:83:56:01:1c:c8:a9:13:a7:35:19:f8: 0c:7f:bb:79:f9:c4:15:06:39:b1:3e:73:43:7b:63: 62:dc:47:93:5e:f5:b3:54:49:27:76:fc:0d:d1:23: 95:ae:1d:0e:cd:c7:f6:51:de:37:3d:4e:41:35:32: cc:17:27:16:b7:ef:bc:f1:a6:c5:2f:38:15:dd:1c: 84:1e:88:53:9a:05:04:bf:4b:91:54:e1:d4:50:8f: 43:98:cb:84:ae:48:de:e1:73:2b:d1:ab:c7:8a:30: 3b:4a:72:d1:b2:df:ab:8c:14:2f:d7:a7:86:37:73: c6:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:C9:86:C9:0B:5F:D4:22:33:DF:97:62:47:0F:7F:9E:E1:75:9E:3A X509v3 Authority Key Identifier: keyid:3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:82:57:66:6a:35:2a:44:23:04:0f:c7:6c:e0:3f:20:f8:87: 5b:cd:90:70:9b:91:88:c5:01:96:75:a5:5f:7d:2d:54:06:d0: 15:8a:3c:88:3c:9e:c7:03:7b:76:5b:cf:72:c7:7d:5f:a0:69: 1b:f6:95:ed:17:b4:0e:e7:3b:58:8c:e5:e7:ed:1f:9f:1b:3b: 3e:e8:61:47:86:bc:3d:a7:8a:35:ab:c4:1d:b8:d2:c9:68:79: ca:15:6b:8e:04:c3:66:dd:91:54:45:91:0e:16:26:ad:fa:62: 00:4d:39:8c:20:4e:73:fc:c8:a2:19:8b:d5:1b:28:65:47:77: 0f:e6:f3:bb:dd:32:78:71:64:aa:32:28:eb:2a:55:63:b4:44: cc:5e:a5:5b:4e:a7:98:e7:ed:84:cc:c9:65:17:e6:c3:b8:9a: bd:8d:db:28:48:9b:3e:35:f6:9d:09:64:23:9b:78:ce:00:c8: e8:8e:07:31:be:48:50:46:af:47:52:b1:fd:3d:bf:c7:ae:b5: c9:56:48:cd:9c:b2:f2:f0:d1:b5:fa:1f:ab:ae:05:06:e4:9a: 10:d6:10:6e:2e:6a:31:55:3f:1b:07:83:4f:9d:37:02:09:70: cf:9e:55:2b:91:34:ad:c9:d3:cf:60:3f:7d:5b:ef:a1:4b:1f: 1a:8c:aa:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYSD267W90agYRSj2w/+gG1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkOGJhMGE1MmM0MjEyOWFmMWQ0Zjc0M2ZlYjMzYmIxNDRk NGJiNWMwHhcNMjUwNDA3MjEwMjAzWhcNMjUwNDA4MjEwMjAzWjAzMTEwLwYDVQQD EyhlNGM5ODZjOTBiNWZkNDIyMzNkZjk3NjI0NzBmN2Y5ZWUxNzU5ZTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6AljVlPm61tndvZET6CI5dGsDEyU xBghbSbUPjS8DelUJWXkxqHuaeVEQv4syy+PvQMa99776DwG8zfPhEw8S0QFX0wy xI9WemFlFCcAVHY1PMgJLl/8q9LFhzq3irRrxm/4Nb2h9w4nPlbRvwLOXZhaPgvs ybVMRfGnTA8eHvwibo0fIJKboh5og1YBHMipE6c1GfgMf7t5+cQVBjmxPnNDe2Ni 3EeTXvWzVEkndvwN0SOVrh0Ozcf2Ud43PU5BNTLMFycWt++88abFLzgV3RyEHohT mgUEv0uRVOHUUI9DmMuErkje4XMr0avHijA7SnLRst+rjBQv16eGN3PG+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOTJhskLX9QiM9+XYkcPf57hdZ46MB8GA1UdIwQY MBaAFD2LoKUsQhKa8dT3Q/6zO7FE1LtcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMt YTU2ODM4NDRlNzkyLzEvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMtYTU2ODM4NDRlNzky LzEvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqYJXZmo1 KkQjBA/HbOA/IPiHW82QcJuRiMUBlnWlX30tVAbQFYo8iDyexwN7dlvPcsd9X6Bp G/aV7Re0Duc7WIzl5+0fnxs7PuhhR4a8PaeKNavEHbjSyWh5yhVrjgTDZt2RVEWR DhYmrfpiAE05jCBOc/zIohmL1RsoZUd3D+bzu90yeHFkqjIo6ypVY7REzF6lW06n mOfthMzJZRfmw7iavY3bKEibPjX2nQlkI5t4zgDI6I4HMb5IUEavR1Kx/T2/x661 yVZIzZyy8vDRtfofq64FBuSaENYQbi5qMVU/GweDT503Aglwz55VK5E0rcnTz2A/ fVvvoUsfGoyq3w== -----END CERTIFICATE-----Generated at Mon Apr 7 23:41:33 2025 by rpki-client