$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft File: mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft (raw, json) Hash identifier: 2MduzdGzYpmnYW/WdueryGyrj0krSH8Zl470h0t4RaI= Subject key identifier: D2:80:47:CB:32:DD:A0:F1:68:05:0A:EE:A0:AA:12:54:2E:61:2A:C4 Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Certificate serial: 019602D2655A8DE3AA0FF9814C3A768F2769 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft Manifest number: 159F Signing time: Fri 04 Apr 2025 22:01:04 +0000 Manifest this update: Fri 04 Apr 2025 22:01:04 +0000 Manifest next update: Sat 05 Apr 2025 22:01:04 +0000 Files and hashes: 1: 1-W8fXv0jttdWKlzJAXVxxYtpRug.roa (hash: gpIh638+Fcd1tAei50b0+8GVpPlev9wrd/g4gdASdjg=) 2: 1UWB6DiO5XdV3re-o8rnuoqA6Ms.roa (hash: acQwekWVQZ/8nvJFITjzBnRus/D8fEtyc11Q6KELe7w=) 3: 21_l98tMuuHtah8-s1GQ4s9w80o.roa (hash: kBh4jdwY3MGZ4Pq8reV1XfNIfs+7zVu2WLUGJ+5lgvc=) 4: 4w30D5KawwaEKeLXCLppZs-985Y.roa (hash: D2Lwmoer5qGID/4i5fsaA6M5CcgJmrhikqoV9diBlTk=) 5: AuT9nlfLKJ1gIaVQjBN9Y0SEgi4.roa (hash: gzl+VGH+LhUpf0+hpq0htMH2Ue1zH66lXU2TNoTBN5Q=) 6: Brhkd2-auvvZmCyvxy5ORhHeQ6E.roa (hash: g8WF2m4nW9TPwqD2pE0ddCjVXs1fr0m/MHPrZ/Qj2HI=) 7: GvKIQgl1iO-dugbsKuhw7FNxuHs.roa (hash: TqaFs/yLAnRS9/gxois1dNbWL2jGhaiFgXhDothuXww=) 8: IrnlAQa6M1A96HHiDasRUfVGqbQ.roa (hash: xgq5FcKSqvltS9tf8414o9TbLoeW+VIxwonV5uaPruw=) 9: LOKrZEDDVhVnSlJWlOLgQ5nPcM0.roa (hash: 2CeUB6HU9O6IboYshEwLG/p+jYhiKQ64ZtA5Y3idzrs=) 10: LbbsmkI3GqawDuN3XH6acheMxPw.roa (hash: BqWA3SYDAKLfoYVuIlyCld31iNDXkXCl/KtIv69jNUw=) 11: OOYkNDqqDn1Unj3M-yrjf_S9VlU.roa (hash: oCGvjVeC4FC9ueufaA6bhsrNhxHd2pd306IA0XGXLfs=) 12: QJvPeNzFvPANqEbfkIc8-3zDQLs.roa (hash: felyBGjLHZhYiBLtOS5vAZwi9iqRNucwfxHrWgkMpWA=) 13: SWbtiDhJekAGKrMxaIr0DPXQOzg.roa (hash: xUg9JN0E8iV/LnVbnu54/5qiJiwqupilOIRHtpvUcCQ=) 14: UlqMdzKNjKKz7GVAWhNQ0GeC6iE.roa (hash: vyjrNuYYOAehZPhyITO+Q5uPp2e1fJC2nVGYypgHEhg=) 15: azJgsmdTDF3ELk-I19mAROWoKeE.roa (hash: oh/dgWtIFhqfW7S9fR3cOqTRk0csYkiTH2ALt2aoNhQ=) 16: eChAGDbdQGMbx-CgEa8ktTddF6A.roa (hash: WaY78nyI3A8kBY4pFd0TG8ZJI0s+NCkhF+OV6SV5Crw=) 17: gN00iWVZ4X9ImdixtPXeB88eR_k.roa (hash: DPVgneYPbYS00UaxJyd5C7zkqYJRRcPWgn4xBTn6bHk=) 18: gnHztlWIUEkbfP_VpJDgy1aZ-q8.roa (hash: 8IEq5Il4ymKT0XR1RNf3aEeBm7YPqbccSq4VWhr/cXU=) 19: mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl (hash: oQn+eJmCiQYQm3jwIUsL1D+Z4vA7CoAXZ+Ig1sePaiI=) 20: owD2F5PTIfIuOH1ResHlD6bHqfw.roa (hash: FwwD5nwDxuakINFZYh01TzvwO9abW6HL7q42RgazHtQ=) 21: pw9MMHu4I_q20ErkI6FpxJnYad8.roa (hash: gcYhl/VRF/ZVc9aRAoUmbSNZlprjgXafqdNbEJQUSG8=) 22: s5Ai9g5eYYL8Bgx7ZWiTovq-xxE.roa (hash: BtApyhPvW43mqLBFeRPcKdPRw6DTk5KYzme6TZtVXns=) 23: sW7iMiWbwjQZ4JTr9eqMstrH0fY.roa (hash: fl3fF4gUVsev8QdVZnLOIu5u/5rzRWGxzrZRrAPXabs=) 24: tdG4gwbiCDTl2DZU4EFrqi-57Fc.roa (hash: HXWAwqtUcnHFWl+ei5dmWCUQV5Bz5IiYmO9iAB6ydxI=) 25: tknXucZVczrziUt3TxZyyd4zoHE.roa (hash: fZyhy1ZEHV3i0UcIge+cXPVVDI4sNT1gqHZeXRDeWAc=) 26: w23_TR4dcsNa31LTX8HVMLWRN_w.roa (hash: rfdkH9NAgBWGbrUS8/d8Rmrz5XY4u8KepKOXwjiNknw=) 27: wC6DsFwXeb5eGnIgBiuuCnh9et4.roa (hash: sGsXZWDl7SypOrlv+5/efuocDxm8kzfpm5Fu/6yQLrA=) 28: wWRDfWHup1u0k3UjICPfUYIPuSY.roa (hash: yzH1M2v1GGWQRBkb4bWaRfefbh3n4eH1xoy+GhWge5A=) 29: wYxMdXSUEDjU1Cv3_j8xQDvi1yg.roa (hash: WyaQu0KrdFh/xZS6g5xHvbw77OL9Wai9qSXwo4Oty1g=) 30: xeXsIqRyNQ8tCJjLiS_SWkibat0.roa (hash: JByqNQHgtIum6mQVh/2h0Z7sUMkRsbp23RZvkf78Q8U=) 31: yEes5OnD4YkYUSA14kYt4AMBnSY.roa (hash: Fze/BIPFJAZjpwYmyAHhonKL78kHjYkgdApjhVIqeos=) 32: zA8L3Jvv9SEACC4CD6D8SPMP2Sk.roa (hash: Tngvw9PMaTEzEGc2VaqgRFM8azKZIG82ga5hio7GHN8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 19:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:02:d2:65:5a:8d:e3:aa:0f:f9:81:4c:3a:76:8f:27:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Validity Not Before: Apr 4 22:01:04 2025 GMT Not After : Apr 5 22:01:04 2025 GMT Subject: CN=d28047cb32dda0f168050aeea0aa12542e612ac4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:08:36:a4:c0:36:d8:e7:31:2a:8a:eb:91:aa: 74:8b:aa:11:88:6f:7e:e0:72:8d:bd:df:c2:df:1c: d1:bd:b3:d2:67:06:4b:2b:5f:e3:8f:e7:15:7b:53: 23:67:b9:75:2e:c9:d2:66:f6:78:cc:2b:0c:a0:a4: 5e:47:56:7c:b5:55:bd:7e:98:16:b3:a0:b6:d5:19: 16:7c:72:68:13:bd:7a:1d:19:a6:54:7f:bf:eb:e4: 61:c9:f1:ee:48:70:5f:4a:a5:e9:0c:65:ad:09:95: 92:6e:80:ad:2d:73:5e:78:e2:95:c0:c2:94:6c:70: c1:65:cd:c6:da:25:06:df:69:f1:3c:6f:90:66:f8: cc:19:21:ce:da:cf:23:38:20:37:68:a4:9f:04:0e: 07:6d:b0:67:ce:5a:9a:78:f2:3d:3e:fe:40:0c:88: 2f:c6:29:83:84:c5:a2:56:5a:73:b3:4e:99:b7:ee: 65:11:a7:dd:4f:c8:25:c8:1a:e7:cf:13:79:4c:59: 55:2c:f0:46:c4:03:7d:7e:ff:36:ae:70:b6:ae:3c: be:0e:c6:b9:a3:f5:32:e5:fb:d8:5b:d9:ea:f7:12: 30:80:17:f4:75:22:43:4d:94:28:51:f9:ab:e8:23: 05:41:12:67:cc:b8:2c:e8:ba:8f:aa:c7:3d:e5:0e: 28:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:80:47:CB:32:DD:A0:F1:68:05:0A:EE:A0:AA:12:54:2E:61:2A:C4 X509v3 Authority Key Identifier: keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:8b:9f:35:46:7c:8a:22:05:35:a2:e0:9c:a5:75:9a:27:7f: 2b:7d:76:f3:0c:c4:7c:47:79:11:35:25:c6:77:dd:89:37:22: 64:ef:d0:c3:66:62:cc:fb:9c:d2:06:9f:38:00:fa:ce:95:f6: de:15:23:e4:dc:5e:df:40:92:01:dd:fa:49:0b:b7:8b:b2:d7: e2:10:f0:d6:1f:6e:de:ba:ec:ef:b0:5f:db:15:b3:2d:0c:c2: 70:b3:d2:85:55:e6:8a:43:05:40:5a:cd:f8:b8:bf:0e:7e:2e: 8d:c7:12:be:56:88:31:57:3f:0e:de:12:c7:db:f0:61:ee:0c: 74:88:c8:8c:26:d4:21:6f:73:eb:ea:9b:27:28:ec:bd:fe:f4: d4:72:95:33:7f:2b:77:31:c0:f4:9b:67:c1:ee:6e:a4:9e:54: 52:fa:5d:fa:f0:e6:8a:1d:57:c8:fe:fa:f4:30:68:ba:d1:01: c7:ed:e2:3e:b7:6c:0d:48:6e:47:c5:a1:09:ff:f7:9b:a1:74: 28:21:5a:2c:e3:ed:df:57:31:6c:5b:5a:54:3f:4e:e8:41:1f: 6b:28:d6:47:ec:4e:24:0e:0e:8b:5a:6f:00:ab:69:71:96:02: ee:bc:9e:8d:be:2e:4d:a6:76:04:6e:30:c2:96:44:35:75:57: ce:25:ae:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYC0mVajeOqD/mBTDp2jydpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk OGRhYmUwHhcNMjUwNDA0MjIwMTA0WhcNMjUwNDA1MjIwMTA0WjAzMTEwLwYDVQQD EyhkMjgwNDdjYjMyZGRhMGYxNjgwNTBhZWVhMGFhMTI1NDJlNjEyYWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQg2pMA22OcxKorrkap0i6oRiG9+ 4HKNvd/C3xzRvbPSZwZLK1/jj+cVe1MjZ7l1LsnSZvZ4zCsMoKReR1Z8tVW9fpgW s6C21RkWfHJoE716HRmmVH+/6+RhyfHuSHBfSqXpDGWtCZWSboCtLXNeeOKVwMKU bHDBZc3G2iUG32nxPG+QZvjMGSHO2s8jOCA3aKSfBA4HbbBnzlqaePI9Pv5ADIgv ximDhMWiVlpzs06Zt+5lEafdT8glyBrnzxN5TFlVLPBGxAN9fv82rnC2rjy+Dsa5 o/Uy5fvYW9nq9xIwgBf0dSJDTZQoUfmr6CMFQRJnzLgs6LqPqsc95Q4oowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNKAR8sy3aDxaAUK7qCqElQuYSrEMB8GA1UdIwQY MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt ODJhZDE0NTU1ZWFhLzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfIufNUZ8 iiIFNaLgnKV1mid/K3128wzEfEd5ETUlxnfdiTciZO/Qw2ZizPuc0gafOAD6zpX2 3hUj5Nxe30CSAd36SQu3i7LX4hDw1h9u3rrs77Bf2xWzLQzCcLPShVXmikMFQFrN +Li/Dn4ujccSvlaIMVc/Dt4Sx9vwYe4MdIjIjCbUIW9z6+qbJyjsvf701HKVM38r dzHA9Jtnwe5upJ5UUvpd+vDmih1XyP769DBoutEBx+3iPrdsDUhuR8WhCf/3m6F0 KCFaLOPt31cxbFtaVD9O6EEfayjWR+xOJA4Oi1pvAKtpcZYC7ryejb4uTaZ2BG4w wpZENXVXziWu9Q== -----END CERTIFICATE-----Generated at Sat Apr 5 04:36:42 2025 by rpki-client