$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft File: DJDDVuKGT0OJSFdENVXYtcA1KBk.mft (raw, json) Hash identifier: 05gJK1osB8PnPSjuhP7rG0ktBIdy0+Q7NX7w72uTBDY= Subject key identifier: 4B:C0:88:EA:87:D5:24:E6:5C:DF:4D:AE:4D:EA:03:EE:AB:3A:5E:40 Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819 Certificate serial: 01964AEB10248D4F3CA647C74AA8DE2B76E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft Manifest number: 150F Signing time: Fri 18 Apr 2025 22:00:41 +0000 Manifest this update: Fri 18 Apr 2025 22:00:41 +0000 Manifest next update: Sat 19 Apr 2025 22:00:41 +0000 Files and hashes: 1: 7Pzqe98aO4BoBrbjEM8VyT6sS1M.roa (hash: njNZ21C9pluyh9z/aL31IWofBM1v+N+fPmyvHPndCq0=) 2: 90MmzVO4MvLdyb-AJQYr53vSOsE.roa (hash: 5J/pNqbP4sJI9fRD38vzW+V+FYiLCJKVNSYkNzbkDm4=) 3: 9GHN6GSMWh16APWbnq7wDsfKnn8.roa (hash: JH6A2KPyYk6kU9S+YXzBoAozjZCx1I1/FQIb22szn8c=) 4: A3yiMnUOTAMIYvHymHxcRRdl3pQ.roa (hash: stXGsXMD+FrQyZX4g7row6To+DPm5GuY/8GYAAv5+hY=) 5: DJDDVuKGT0OJSFdENVXYtcA1KBk.crl (hash: 3xGqrvONlOK1m5a3LGCI3zVH/RuFm56Y1rTGyYm3eik=) 6: QQRJC_YG8r-4Cm4-FiDTcyGseMs.roa (hash: v9L1LzSv9+QS9AJyAVCgrR0utN6Qk2ha4KHx/OIWRBY=) 7: Rtm2eqjMuokQbFDH0uOZXue46j0.roa (hash: i+SxWKbKu33HD+1YPJSxFNXcAddtYFx5sKVQShwTd24=) 8: _eU7wK7pdUxRG2CXsHdjbv2SOXc.roa (hash: ZAIXppKunQur0KGtFLAbnwIeXUabVYHwA+qIIq12IRo=) 9: aTMRrwo9_4SayQ9D7LTyaVFK_Xc.roa (hash: +IcvkZ/Lt7dooQvX8ekK5PfLV+YRr5hiDK4PBIh/lAA=) 10: cObImnIoQoiLVyP9x--GVap2GkM.roa (hash: bO+Q27weBg0SDz9xPqlXo6tY9cdxQ8Yt4y7PlrRbjHY=) 11: fYrpElZs1NsSNrkwEfo6WNxBdRU.roa (hash: w1Z5VCOxpqbNZVNnJiTQLVLUsMOtA4kiHusU/VADD9E=) 12: rytOjYktSxYttWQbNzKnWNHr8kE.roa (hash: yLxz3XA2NehPKva17aTVpf9d8xx7CPICWNJXYP6IG3U=) 13: wz4Rxi2T5RISNbtekZKZj5gg7co.roa (hash: ZkBZlEwEIE4xANMo9oJsaqTSQA+2tjjnLN93XVxIic4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Apr 2025 19:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:4a:eb:10:24:8d:4f:3c:a6:47:c7:4a:a8:de:2b:76:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819 Validity Not Before: Apr 18 22:00:41 2025 GMT Not After : Apr 19 22:00:41 2025 GMT Subject: CN=4bc088ea87d524e65cdf4dae4dea03eeab3a5e40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b2:f9:46:ad:bc:af:c2:27:2d:89:a2:8b:32: 6e:79:50:30:52:5e:c6:cd:cc:b6:24:1d:97:e5:d6: 78:d0:9d:0d:65:5d:a9:b4:8c:b0:e7:70:fe:e4:eb: 0a:f1:e9:2f:11:3f:95:b8:83:ec:fe:ce:05:bb:0b: d7:44:40:b1:c4:b8:8c:f9:a5:15:03:3f:ef:90:d1: 46:8c:a9:06:1e:b0:f8:bc:34:59:70:bc:d8:39:44: 6e:8f:4f:8c:be:e7:66:54:56:3b:2e:4d:1f:b8:a6: f8:27:51:90:6a:07:86:79:b6:29:a9:e2:72:6f:21: 88:82:e1:5a:41:5c:31:a9:6d:7c:1d:0d:af:cf:e8: 75:f8:ef:9b:ee:38:89:40:81:81:29:f6:c8:4b:29: e3:fb:0a:92:26:8c:e6:65:b3:17:c5:04:2b:cc:3d: 42:3b:77:5b:a0:21:2d:74:1b:07:af:b9:cb:00:36: 72:de:d7:10:79:7d:2d:45:91:0e:89:36:1a:ed:a7: e9:d4:2b:4b:ff:65:11:13:bd:98:98:f1:2e:5d:4a: 31:8f:3f:c5:58:16:3b:43:f9:91:af:e4:56:c7:c0: 31:bd:72:65:e7:dc:ea:8c:c2:bb:2e:7d:2e:2a:2a: 33:bf:6b:71:30:c7:65:b4:1a:06:d5:fd:ac:4d:4b: d8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:C0:88:EA:87:D5:24:E6:5C:DF:4D:AE:4D:EA:03:EE:AB:3A:5E:40 X509v3 Authority Key Identifier: keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:10:a0:2c:43:f5:6b:a9:c8:7b:87:17:0a:dc:d5:3b:01:6b: 88:7e:6b:97:ac:63:3f:e1:7a:4e:c0:4e:55:ba:ab:97:fc:42: 29:48:e3:ff:a6:0c:2c:fc:92:ff:1a:1e:9e:af:00:a8:37:0c: 30:c2:e4:a5:5e:80:d5:af:34:f1:8a:02:9a:f8:d9:7b:ac:72: 98:c4:ff:17:71:2e:04:07:1d:df:0b:d4:3a:70:a6:68:70:8b: ab:fc:ea:27:ec:5b:9e:04:34:f7:4c:6b:55:d1:05:c3:c0:b9: a8:76:70:3b:9a:6f:ef:89:e6:c9:28:45:bc:e2:c1:90:4c:ea: 0d:79:1d:a1:66:6b:d6:af:14:97:53:90:15:3c:bd:e6:af:13: b9:24:1c:8c:d2:f8:e5:70:09:95:c9:37:4e:30:8d:c7:3f:73: 26:58:3b:83:a1:23:b5:12:84:c4:12:c7:a4:65:fb:93:84:c8: 0e:05:da:10:f2:f1:1e:ea:c5:ed:e2:24:28:bc:7a:57:d3:5e: 30:ba:42:16:76:d5:9d:d1:d6:03:1a:99:35:14:6d:2d:ce:90: 44:54:d8:65:c4:16:46:bf:10:3b:c9:9b:05:12:97:83:b1:a7: d7:3b:78:90:40:53:6a:cf:9a:c4:6d:31:93:38:33:b8:26:da: 94:6d:3e:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZK6xAkjU88pkfHSqjeK3boMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjOTBjMzU2ZTI4NjRmNDM4OTQ4NTc0NDM1NTVkOGI1YzAz NTI4MTkwHhcNMjUwNDE4MjIwMDQxWhcNMjUwNDE5MjIwMDQxWjAzMTEwLwYDVQQD Eyg0YmMwODhlYTg3ZDUyNGU2NWNkZjRkYWU0ZGVhMDNlZWFiM2E1ZTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrL5Rq28r8InLYmiizJueVAwUl7G zcy2JB2X5dZ40J0NZV2ptIyw53D+5OsK8ekvET+VuIPs/s4FuwvXRECxxLiM+aUV Az/vkNFGjKkGHrD4vDRZcLzYOURuj0+MvudmVFY7Lk0fuKb4J1GQageGebYpqeJy byGIguFaQVwxqW18HQ2vz+h1+O+b7jiJQIGBKfbISynj+wqSJozmZbMXxQQrzD1C O3dboCEtdBsHr7nLADZy3tcQeX0tRZEOiTYa7afp1CtL/2URE72YmPEuXUoxjz/F WBY7Q/mRr+RWx8AxvXJl59zqjMK7Ln0uKiozv2txMMdltBoG1f2sTUvYDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEvAiOqH1STmXN9Nrk3qA+6rOl5AMB8GA1UdIwQY MBaAFAyQw1bihk9DiUhXRDVV2LXANSgZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDct ZTM3OTlhZGU5ZGZlLzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDctZTM3OTlhZGU5ZGZl LzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAShCgLEP1 a6nIe4cXCtzVOwFriH5rl6xjP+F6TsBOVbqrl/xCKUjj/6YMLPyS/xoenq8AqDcM MMLkpV6A1a808YoCmvjZe6xymMT/F3EuBAcd3wvUOnCmaHCLq/zqJ+xbngQ090xr VdEFw8C5qHZwO5pv74nmyShFvOLBkEzqDXkdoWZr1q8Ul1OQFTy95q8TuSQcjNL4 5XAJlck3TjCNxz9zJlg7g6EjtRKExBLHpGX7k4TIDgXaEPLxHurF7eIkKLx6V9Ne MLpCFnbVndHWAxqZNRRtLc6QRFTYZcQWRr8QO8mbBRKXg7Gn1zt4kEBTas+axG0x kzgzuCbalG0+LQ== -----END CERTIFICATE-----Generated at Sat Apr 19 01:48:23 2025 by rpki-client