$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft File: Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft (raw, json) Hash identifier: UKfbi9CP2EY6v+qtCDKvk5X7Uct2YJG5zf3AS32sKUc= Subject key identifier: 0F:59:69:70:0A:33:8D:88:E1:8E:6D:7F:E4:3E:29:F7:F8:69:E3:45 Authority key identifier: 65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 Certificate issuer: /CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Certificate serial: 01963B77987DAA6E8E65EBF589F11DB31DD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft Manifest number: 14FE Signing time: Tue 15 Apr 2025 22:00:15 +0000 Manifest this update: Tue 15 Apr 2025 22:00:15 +0000 Manifest next update: Wed 16 Apr 2025 22:00:15 +0000 Files and hashes: 1: 3LyGnKUrtS-bd3Yu3eH07LtQYR8.roa (hash: 5NomKYbD4FvnokbGtOTNPOIwbgTTBvKVyFQCl7SiC8k=) 2: 9OAY-jOw3emNDTJkwHz_aLBHU-o.roa (hash: Ah56S4YsKlRsIR5ZtCQAkBkQPPjwEJPdV91cqnHgQHo=) 3: D3HyRH4gt8I3AVc_11aVtLDHXXs.roa (hash: LthCRx/kLSoC/Gm2fuPju175Bc+44KoK1FGNtCDpOFQ=) 4: JdgLX_rDpFXbn3g6ck-3xVrnTaU.roa (hash: TOSlGfMktZDLi6DZuPyngZmNUQUQKAMWa3FBKS2yrIU=) 5: PFJiD8MLfnakL2mkAANmOoeHGUU.roa (hash: a0vpttSq3cgxQGvU/dz1eOxNhQQQu/dzUi1jCTAXGlI=) 6: RVJ3nIJEBcWZXpWb3MnSUCFA2iY.roa (hash: M8lbfWsAGSkoDl5BWQQZtTG7pQkMrZk5UuquwmgmkYY=) 7: XlUV47Af6RgAqHn9dKADpSmWXow.roa (hash: DZ3ovpHgXP4fdA9+Ev+RMAFLM7kbC/ZH4RHrYqXrnFs=) 8: Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl (hash: Oo31eXt4tU5JuQLgDA9znqpRf0KGrKvGArAKb/bXuN0=) 9: Zf59mhwN1S3gDhITine9rGoU1mI.roa (hash: ItAmoJjJI8759vV0N2ep7BAGBNMWntj11jBxYRrpcMA=) 10: qSRUcx1mNfKDgalh8O503kQbSt8.roa (hash: +4A/h9qJjo7DqqpmkiX09AgpoyXjjM+9hCnj8Lt2uqI=) 11: r6uPDA9vlEWT9sYoVFzM7GHgFa8.roa (hash: t27IhHRMBSQR6oORXFY/8Mn45oNpwsdletkYrs42U2g=) 12: u8s9HEkKaDRnfwCA4Fp1WEQGANU.roa (hash: D38pH0rgh3xNzyToMjwZsTzhvLlwYeEp9O/fE2rpcks=) 13: zNNg038UFfEY9NFH791kAGkTEyQ.roa (hash: DPthEHZwIWuER39PoW1q82KX77P15O59a2/uPQsrelg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 16 Apr 2025 15:22:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:3b:77:98:7d:aa:6e:8e:65:eb:f5:89:f1:1d:b3:1d:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Validity Not Before: Apr 15 22:00:15 2025 GMT Not After : Apr 16 22:00:15 2025 GMT Subject: CN=0f5969700a338d88e18e6d7fe43e29f7f869e345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:11:18:a5:ec:67:7d:b0:b1:25:3b:b7:b3:5a: 7b:73:fd:61:5f:2d:8d:aa:1d:b9:a1:0b:51:cd:bf: e4:1b:2f:b5:8b:b5:a8:ee:18:cc:48:00:97:cf:5e: 4c:06:2c:95:52:16:c8:28:78:8d:47:ed:db:cc:89: 67:7a:8d:d4:3e:85:ce:77:0b:e6:f9:1e:7d:04:2d: f5:e5:c4:87:f0:df:cc:b0:c1:22:08:c8:f8:6e:fe: 28:87:36:cd:62:0a:43:51:fc:60:4c:9d:44:f4:4e: 55:8f:11:9f:4c:16:6f:73:ee:3b:7e:21:0b:ba:cf: 8d:45:01:9c:6e:02:45:ce:ef:24:4e:58:db:42:83: 15:52:35:85:59:c9:26:9a:67:33:32:e6:16:e1:bd: e3:d6:c4:8a:0f:58:13:c3:9f:57:d2:90:14:94:64: 4b:f8:04:90:ca:1f:54:67:c8:f1:2c:e8:ec:da:ed: 74:46:79:02:b6:71:73:af:92:6e:9b:f1:e3:f0:ad: 46:40:3e:7a:50:87:23:84:eb:fa:1c:b6:4b:6d:18: 44:cf:16:09:1d:bf:52:d2:0a:62:3c:ed:35:58:bf: 1e:27:51:1b:57:e6:02:22:1d:c9:04:8b:73:7c:59: 90:b7:b6:1d:88:59:14:1b:7d:bd:98:12:e8:e3:5c: b8:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:59:69:70:0A:33:8D:88:E1:8E:6D:7F:E4:3E:29:F7:F8:69:E3:45 X509v3 Authority Key Identifier: keyid:65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:ed:0d:a3:43:c4:4b:1d:0b:54:59:c7:21:36:26:b2:5b:27: 7c:db:b1:99:37:d9:4b:f4:36:9d:29:d6:23:8a:5a:64:52:2d: 90:2d:8f:a6:51:65:56:29:3a:cf:e6:b6:b1:25:c0:47:14:f7: b6:fe:ff:d6:66:c6:4e:d7:6c:5d:7f:55:1c:b5:3c:ac:dd:2c: 7a:63:5b:00:6f:c0:3e:48:be:f4:45:64:c4:8f:c3:21:6c:fa: 34:ed:7b:91:5d:bf:b1:32:db:cf:0d:16:ef:a5:4c:24:63:77: 59:e1:ff:c3:87:dd:e8:cb:d4:44:73:88:6a:f8:56:40:fb:2f: 90:6c:20:57:eb:23:1c:a3:1e:78:b7:ff:53:c0:58:ff:3f:dc: 9b:c7:f7:6d:54:00:2e:7f:3b:b5:85:f2:81:92:47:e3:78:83: ae:f1:72:b6:54:f6:9b:3b:ea:a9:0c:8d:af:f0:15:26:b4:03: f9:36:e6:40:b3:99:b8:61:10:ec:9a:90:5f:fa:99:a6:2f:80: dc:97:c1:c5:76:2d:b6:51:78:35:a9:84:2d:70:54:d1:b8:30: 87:fe:10:be:31:0d:9a:6c:c9:f4:35:a2:4d:63:ba:d8:57:e9: 56:6a:69:3a:6e:ca:8c:de:e3:59:6a:df:6c:68:b5:66:68:e9: 9a:0e:77:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZY7d5h9qm6OZev1ifEdsx3WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YmRjZmY3N2JmMDYwZDVkYTEyZGU0NWUyMDcyZTFjZmY0 NTYwYTcwHhcNMjUwNDE1MjIwMDE1WhcNMjUwNDE2MjIwMDE1WjAzMTEwLwYDVQQD EygwZjU5Njk3MDBhMzM4ZDg4ZTE4ZTZkN2ZlNDNlMjlmN2Y4NjllMzQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBEYpexnfbCxJTu3s1p7c/1hXy2N qh25oQtRzb/kGy+1i7Wo7hjMSACXz15MBiyVUhbIKHiNR+3bzIlneo3UPoXOdwvm +R59BC315cSH8N/MsMEiCMj4bv4ohzbNYgpDUfxgTJ1E9E5VjxGfTBZvc+47fiEL us+NRQGcbgJFzu8kTljbQoMVUjWFWckmmmczMuYW4b3j1sSKD1gTw59X0pAUlGRL +ASQyh9UZ8jxLOjs2u10RnkCtnFzr5Jum/Hj8K1GQD56UIcjhOv6HLZLbRhEzxYJ Hb9S0gpiPO01WL8eJ1EbV+YCIh3JBItzfFmQt7YdiFkUG329mBLo41y4IQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA9ZaXAKM42I4Y5tf+Q+Kff4aeNFMB8GA1UdIwQY MBaAFGW9z/d78GDV2hLeReIHLhz/RWCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYt ZDcwY2Q5N2Y0ODU3LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYtZDcwY2Q5N2Y0ODU3 LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWu0No0PE Sx0LVFnHITYmslsnfNuxmTfZS/Q2nSnWI4paZFItkC2PplFlVik6z+a2sSXARxT3 tv7/1mbGTtdsXX9VHLU8rN0semNbAG/APki+9EVkxI/DIWz6NO17kV2/sTLbzw0W 76VMJGN3WeH/w4fd6MvURHOIavhWQPsvkGwgV+sjHKMeeLf/U8BY/z/cm8f3bVQA Ln87tYXygZJH43iDrvFytlT2mzvqqQyNr/AVJrQD+TbmQLOZuGEQ7JqQX/qZpi+A 3JfBxXYttlF4NamELXBU0bgwh/4QvjENmmzJ9DWiTWO62FfpVmppOm7KjN7jWWrf bGi1Zmjpmg53vg== -----END CERTIFICATE-----Generated at Wed Apr 16 00:17:02 2025 by rpki-client