$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft File: _zFJJHOnjG_p9Tn5-n0iUlYKK34.mft (raw, json) Hash identifier: i4ImKJztfwTTEwMi0Oz5gAPH7uIGlUcq16LkyKfjoKo= Subject key identifier: E8:41:CF:2E:08:42:B0:A8:EB:44:33:A9:BA:96:C7:88:53:7E:86:B4 Authority key identifier: FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E Certificate issuer: /CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e Certificate serial: 01964FDB1B39ACC9024BB33CBCEDC1225B6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft Manifest number: 14C0 Signing time: Sat 19 Apr 2025 21:01:21 +0000 Manifest this update: Sat 19 Apr 2025 21:01:21 +0000 Manifest next update: Sun 20 Apr 2025 21:01:21 +0000 Files and hashes: 1: 9qi9h0f9RsAWpZuFc_s4Cmk2M0A.roa (hash: b6ycNMYfYTSq+8wwlth6XhXq2jeSDZcud5rVJF56Fyg=) 2: D-zKhuWPkxLy8zaYbK0D0Frw7ec.roa (hash: w8bSqTQlhfxtATfQh4eWS/eZa2u3cEwYUnWnj6COmyg=) 3: F_cRK7_FuJ1SOPF-eStGPWamodQ.roa (hash: bwgPCaYQdCUVOLDgCvOHRKGxaq7IRtIbjKPrwDwOiGI=) 4: JaFKfYKslg0WUVhBG8hHu6LqTvw.roa (hash: 4GgDdTVxQxqewTP0EOz1RIPWIQ2EEWazgc1qxopxzyA=) 5: NiD2SDjoMC5kCqhJ0LqUs7rzMnw.roa (hash: 9+KHXzf6QQ6hX/XBCMhmaRntprEYELpBh7Oa+Qw01T4=) 6: U6O4fPn6akIpWmgc4yJT0O6kLpo.roa (hash: yofA2VyhfSO3CESlgcLfFamVAKarRdUA7fzOcVSh6T0=) 7: _zFJJHOnjG_p9Tn5-n0iUlYKK34.crl (hash: S6RSYHNkrkOwTeDjuD1lnZPW6kKDHN8QWqqMlj/ZjR4=) 8: ktD6AyHksOCblKN9a3qVRt27m9o.roa (hash: V5QNEtlJtM9vZYXeCjRbhyFbWnet1Vj6bUBis/VvlnY=) 9: u3VJR1_M7JzYx842qLGTM0en5V0.roa (hash: qbP/xDwKS1NUr1YSZhW1L+ZrVrT39XIk/W4+EAm8kOI=) 10: y4Nw6VYuIuUZOv6I685fKqZhbWQ.roa (hash: JM0RAslsFdrhEKUBmY+ywDM/Jo6q24Igd7pWLFOkC9Q=) 11: y59FYS6lZrG-f16cItpm531MOXQ.roa (hash: m/cQn2JcKJOMV46aRM88IL5ucBeWO1CQAwW+N3Yj5A4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 20 Apr 2025 21:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:4f:db:1b:39:ac:c9:02:4b:b3:3c:bc:ed:c1:22:5b:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e Validity Not Before: Apr 19 21:01:21 2025 GMT Not After : Apr 20 21:01:21 2025 GMT Subject: CN=e841cf2e0842b0a8eb4433a9ba96c788537e86b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ab:a9:ed:b9:c5:95:6b:fb:d1:8b:8c:f3:01: ba:d6:14:e3:f1:3c:ad:19:10:ee:f8:49:8a:7d:d3: cf:8a:9c:1d:a4:cb:eb:40:2f:c5:9b:1d:0b:13:4d: d5:e6:78:e8:99:3f:e0:c4:d9:76:22:20:18:69:19: 61:c8:d9:9e:38:53:72:49:5b:ba:cd:0b:d2:fb:37: 56:de:9d:2d:e5:9f:c8:b1:6f:52:95:80:d6:98:07: 90:17:31:cb:05:98:ba:39:b3:34:3b:3c:79:9f:99: ad:23:a5:01:f2:5a:5c:ea:94:38:ba:a5:81:4e:13: 1e:af:a6:f0:fe:8b:a2:2b:9b:77:8a:bb:68:6c:5d: e5:25:9e:c9:bc:be:52:e9:73:3f:08:7b:cd:6b:d5: 74:57:29:5b:28:18:3c:38:9c:a4:72:bf:a1:b6:5b: c1:f4:6f:0c:d1:4b:62:0f:fe:e3:c6:5c:e6:14:58: f7:80:c6:91:10:7c:56:eb:40:71:45:3f:da:e4:39: 49:d5:02:3c:c7:12:94:d7:0c:47:21:03:4d:db:1d: 2f:92:3d:cc:f8:d2:06:5d:84:89:f0:3e:1c:84:34: d6:7a:61:18:0d:b3:50:3c:d7:1f:ba:3f:ca:7e:55: c7:12:de:7f:e2:85:ea:4d:56:a6:0b:2a:8c:e8:db: dc:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:41:CF:2E:08:42:B0:A8:EB:44:33:A9:BA:96:C7:88:53:7E:86:B4 X509v3 Authority Key Identifier: keyid:FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:ea:e9:fc:60:ff:11:47:4d:f7:bd:80:b8:8a:71:15:de:1f: 08:4f:c1:6c:9b:f9:d7:9d:a3:4d:8c:7d:93:11:98:2d:d4:e2: e1:cf:03:cd:38:c9:9e:1c:fe:03:14:67:a7:75:a0:9c:4f:31: 0a:01:83:c6:58:59:55:8d:fd:bb:88:0b:8d:16:37:6a:ed:e7: 83:51:ff:71:67:42:fa:cc:ed:b9:8c:83:90:e7:b3:a1:b9:e2: 5c:46:6c:b2:76:12:75:05:e2:bb:65:a0:26:96:13:5e:20:34: 17:1c:b6:2e:e6:97:35:56:98:24:5d:2f:62:5d:ce:ec:d4:a6: 68:51:a1:9d:0f:3c:3f:88:51:83:46:5f:04:93:89:a4:b4:76: bc:05:9a:41:ba:40:58:d0:83:5a:b6:55:fa:c8:cf:50:2a:8d: 19:a2:a4:39:1e:92:80:c4:3d:86:b8:67:d1:3e:79:f5:f1:a7: 99:cc:70:a8:4a:92:b0:b7:be:dc:c3:ed:b7:27:1a:f5:5f:e3: 88:43:c6:bf:bb:09:2e:e0:9a:4e:9d:b0:21:49:db:2e:c0:2e: 11:97:00:f1:76:67:ca:9a:f8:06:17:08:a5:87:6b:23:3e:ab: e3:81:8c:ec:24:87:fe:5b:36:3e:83:95:ae:21:ba:c9:01:8d: 53:f5:5a:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZP2xs5rMkCS7M8vO3BIltrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMzE0OTI0NzNhNzhjNmZlOWY1MzlmOWZhN2QyMjUyNTYw YTJiN2UwHhcNMjUwNDE5MjEwMTIxWhcNMjUwNDIwMjEwMTIxWjAzMTEwLwYDVQQD EyhlODQxY2YyZTA4NDJiMGE4ZWI0NDMzYTliYTk2Yzc4ODUzN2U4NmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqup7bnFlWv70YuM8wG61hTj8Tyt GRDu+EmKfdPPipwdpMvrQC/Fmx0LE03V5njomT/gxNl2IiAYaRlhyNmeOFNySVu6 zQvS+zdW3p0t5Z/IsW9SlYDWmAeQFzHLBZi6ObM0Ozx5n5mtI6UB8lpc6pQ4uqWB ThMer6bw/ouiK5t3irtobF3lJZ7JvL5S6XM/CHvNa9V0VylbKBg8OJykcr+htlvB 9G8M0UtiD/7jxlzmFFj3gMaREHxW60BxRT/a5DlJ1QI8xxKU1wxHIQNN2x0vkj3M +NIGXYSJ8D4chDTWemEYDbNQPNcfuj/KflXHEt5/4oXqTVamCyqM6Nvc2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOhBzy4IQrCo60QzqbqWx4hTfoa0MB8GA1UdIwQY MBaAFP8xSSRzp4xv6fU5+fp9IlJWCit+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDct NzNmZDNiYzE5YWE3LzEvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDctNzNmZDNiYzE5YWE3 LzEvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWOrp/GD/ EUdN972AuIpxFd4fCE/BbJv5152jTYx9kxGYLdTi4c8DzTjJnhz+AxRnp3WgnE8x CgGDxlhZVY39u4gLjRY3au3ng1H/cWdC+sztuYyDkOezobniXEZssnYSdQXiu2Wg JpYTXiA0Fxy2LuaXNVaYJF0vYl3O7NSmaFGhnQ88P4hRg0ZfBJOJpLR2vAWaQbpA WNCDWrZV+sjPUCqNGaKkOR6SgMQ9hrhn0T559fGnmcxwqEqSsLe+3MPttyca9V/j iEPGv7sJLuCaTp2wIUnbLsAuEZcA8XZnypr4BhcIpYdrIz6r44GM7CSH/ls2PoOV riG6yQGNU/VaQA== -----END CERTIFICATE-----Generated at Sun Apr 20 04:11:18 2025 by rpki-client