$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft File: bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft (raw, json) Hash identifier: AX9zy6z1QEqisOB3ZktZdpdMq7Sevn8AC7vgu3Om5pM= Subject key identifier: 92:70:F2:34:5D:E3:CD:CC:B2:D1:26:F1:A2:48:0B:70:47:1D:5C:6F Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a Certificate serial: 01960CE86CB12BF2990CC2E37F2647F5A777 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft Manifest number: 14FF Signing time: Sun 06 Apr 2025 21:01:20 +0000 Manifest this update: Sun 06 Apr 2025 21:01:20 +0000 Manifest next update: Mon 07 Apr 2025 21:01:20 +0000 Files and hashes: 1: 7RXnmyyS3vqekKTRLkrMbY5ssG0.roa (hash: 5Q0A5wPbh7lrti5wuMW3vt3LYhzQCaz/8+ZNglrRt+4=) 2: AJM-6Zm39xTWDgtragWJQRfYqM8.roa (hash: VMj18TvJaA2yJmPMgPMt6hsb7JE59Ed9FEylWh2nn3U=) 3: CIMTUhMyX5nrRkW9-NJAEdf1yN0.roa (hash: 5crkiuXzCNa5bqRqNmR9eqwI0/iv0HxGyv4mp2t+4Gw=) 4: IH1zUC4OOlIB_Mr6qjQXl2F0Vlc.roa (hash: dPAXcm2P60IEnITN5GrAYeu9AnPzKXC8WqlmWD19l6I=) 5: KysPyy3rGx_m7A5cK-CTgrfvkkY.roa (hash: Ux+CfAdmdalkF7u5OrFPbE5dAnhmV1Nwopl6cnUfpKY=) 6: Zm2JfyTeERhBzYDvk2afv74vdbg.roa (hash: DReIJihceDuNN6dZJ5Ov64xgQFbw1n7eH/LcP0/n+IA=) 7: a9cqclGBd-sGM1DVbQMIle_rrqQ.roa (hash: LplY8V5whPCnMZSvGvrepAJoVMqSl1G+Bnp+LI/C1eU=) 8: bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl (hash: bcOfTRat4QVEnghaPRPpstOt0D+OavD80hwhVxh7iB8=) 9: ceaRqIb_9jwjOB9HUZXtk4XW0N8.roa (hash: eHVzXLml0UyyfUhLhyyY4cTxdGZl4YcMu0PqzYEvlZQ=) 10: tGl_oVEvMu4RFTKmUhxguGv0x7g.roa (hash: PRe0KxLn8TbTqjw2TmvSuGH/Q6PyqmSXeZcJLI07VdI=) 11: yjOVe9P9QCIOVlHjC2af6d5hY-c.roa (hash: nPJ2ri+28FWisJhJn6NbOyOwuKF7rYFdzWnbklaw+3E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 07 Apr 2025 16:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:0c:e8:6c:b1:2b:f2:99:0c:c2:e3:7f:26:47:f5:a7:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a Validity Not Before: Apr 6 21:01:20 2025 GMT Not After : Apr 7 21:01:20 2025 GMT Subject: CN=9270f2345de3cdccb2d126f1a2480b70471d5c6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e5:6e:30:68:cc:1b:9e:16:d5:88:8a:c7:f3: ea:a2:0e:6b:cd:8f:26:f9:18:0b:14:08:96:22:c4: b5:e4:d8:c3:76:16:38:82:62:54:d8:c3:e0:b9:1b: 28:29:60:33:f1:5c:4e:db:db:32:26:1c:ae:54:ae: b2:be:c0:2a:ce:84:cf:83:53:a5:9a:bb:6b:ba:21: 01:a2:52:26:e2:0a:7a:7b:81:ee:da:c3:89:67:f5: b0:1f:28:1a:2b:b7:e0:5a:09:3c:20:aa:73:32:82: 29:7b:da:74:27:36:2d:b8:1a:9c:c1:40:46:31:99: 90:63:b0:8a:93:9b:51:fa:0c:10:dd:11:29:5d:1a: b5:b6:0b:ca:55:70:a2:bc:c7:8d:a2:d3:f5:90:a9: a8:4a:ae:14:43:52:40:e8:f1:3e:c7:06:7a:a5:86: 2c:01:36:a8:d4:8d:2a:23:0b:06:c9:1f:cb:10:39: d2:e7:b3:5f:7e:8d:df:fc:a3:6c:40:0c:d1:84:e5: ac:5a:c6:a0:0a:c4:ff:5c:a0:61:c9:03:6e:1c:3d: 05:2a:95:50:8b:d4:9d:bc:ba:1a:c5:5e:d9:27:cf: e6:26:f8:fa:41:23:f3:a1:9f:7d:02:e9:30:0e:cb: dd:f8:0b:d3:ee:00:38:e6:ba:45:cd:77:e5:22:64: 13:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:70:F2:34:5D:E3:CD:CC:B2:D1:26:F1:A2:48:0B:70:47:1D:5C:6F X509v3 Authority Key Identifier: keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:ac:53:78:43:00:b9:ab:16:f0:99:0c:09:44:4f:52:e6:85: c8:23:b1:01:6a:69:ae:9c:f5:2f:7a:db:07:66:58:51:d8:00: be:4a:c6:86:f0:57:ca:34:7c:3e:0c:55:ab:87:9e:2e:9b:db: 24:47:b7:25:7d:bb:c0:1c:5f:30:19:75:60:1f:4c:bd:cc:e8: 50:a0:1c:a8:1d:e0:58:94:ce:1c:ab:07:46:ad:0e:b4:06:55: 73:13:58:d0:52:cd:78:e2:41:5f:5c:ad:8a:35:00:a3:01:3a: a0:eb:0a:ca:a3:ed:79:c7:e7:c4:1c:c1:93:f8:a9:f8:cc:c7: 7e:45:e2:4b:70:7c:71:cc:7d:2d:39:05:65:54:de:0b:d0:cd: 30:3d:45:d0:ba:7e:7b:09:f8:cd:c8:e5:e4:ca:e8:46:d2:5c: ad:87:1e:a7:98:cc:98:50:97:aa:71:52:12:59:b5:76:e5:89: 7e:82:5e:da:bf:ca:12:a5:83:d6:61:1b:33:5a:b2:1d:14:a9: b6:21:33:49:21:40:de:7b:62:11:3f:83:3d:75:65:6d:ee:19: 31:01:af:e5:a2:ad:b9:eb:11:a7:19:12:bc:19:fb:c6:68:8e: 43:85:94:bb:f8:88:b9:85:81:e2:91:e8:8c:c6:40:e4:0f:45: fa:42:41:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYM6GyxK/KZDMLjfyZH9ad3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNjlkYTQ0YWUwNjdmYzFhOThhNWY2ZjA1ZjEyZTU0NWQw ZmM2MmEwHhcNMjUwNDA2MjEwMTIwWhcNMjUwNDA3MjEwMTIwWjAzMTEwLwYDVQQD Eyg5MjcwZjIzNDVkZTNjZGNjYjJkMTI2ZjFhMjQ4MGI3MDQ3MWQ1YzZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuVuMGjMG54W1YiKx/Pqog5rzY8m +RgLFAiWIsS15NjDdhY4gmJU2MPguRsoKWAz8VxO29syJhyuVK6yvsAqzoTPg1Ol mrtruiEBolIm4gp6e4Hu2sOJZ/WwHygaK7fgWgk8IKpzMoIpe9p0JzYtuBqcwUBG MZmQY7CKk5tR+gwQ3REpXRq1tgvKVXCivMeNotP1kKmoSq4UQ1JA6PE+xwZ6pYYs ATao1I0qIwsGyR/LEDnS57Nffo3f/KNsQAzRhOWsWsagCsT/XKBhyQNuHD0FKpVQ i9SdvLoaxV7ZJ8/mJvj6QSPzoZ99AukwDsvd+AvT7gA45rpFzXflImQTHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJJw8jRd483MstEm8aJIC3BHHVxvMB8GA1UdIwQY MBaAFG1p2kSuBn/BqYpfbwXxLlRdD8YqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iMWE4MmEtNDkwZi00M2ZiLTk4NmUt MjYxNzBkYTRhMGIxLzEvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9iMWE4MmEtNDkwZi00M2ZiLTk4NmUtMjYxNzBkYTRhMGIx LzEvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZKxTeEMA uasW8JkMCURPUuaFyCOxAWpprpz1L3rbB2ZYUdgAvkrGhvBXyjR8PgxVq4eeLpvb JEe3JX27wBxfMBl1YB9MvczoUKAcqB3gWJTOHKsHRq0OtAZVcxNY0FLNeOJBX1yt ijUAowE6oOsKyqPtecfnxBzBk/ip+MzHfkXiS3B8ccx9LTkFZVTeC9DNMD1F0Lp+ ewn4zcjl5MroRtJcrYcep5jMmFCXqnFSElm1duWJfoJe2r/KEqWD1mEbM1qyHRSp tiEzSSFA3ntiET+DPXVlbe4ZMQGv5aKtuesRpxkSvBn7xmiOQ4WUu/iIuYWB4pHo jMZA5A9F+kJBSQ== -----END CERTIFICATE-----Generated at Sun Apr 6 23:48:28 2025 by rpki-client