$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft File: pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft (raw, json) Hash identifier: 7eQOb/fnXhmUHNEFX3tISQ9H1wZOND/Ic0bWoBB2o98= Subject key identifier: 85:18:AB:D3:A3:53:7F:E0:0A:57:6A:9A:8E:9B:6A:4B:D2:94:F6:3B Authority key identifier: A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60 Certificate issuer: /CN=a608db43964b6986ec740f0b5e33f627589ac560 Certificate serial: 019637D20711DDE62C5386AA40D304431B84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft Manifest number: 14F4 Signing time: Tue 15 Apr 2025 05:00:33 +0000 Manifest this update: Tue 15 Apr 2025 05:00:33 +0000 Manifest next update: Wed 16 Apr 2025 05:00:33 +0000 Files and hashes: 1: I3mgQ157a_bF2dTxc-vf7pMJtM4.roa (hash: 7UAHNapwwX16Slile1RjKMtt2nkeBVUncM7zwsYLT8w=) 2: MHgro3rXC3LA-ZCKp8QuaVCuDNM.roa (hash: sXYt7ycXFJCXAbuucaVo5/ccp47LCDa9LjtriRMFWXQ=) 3: PBXMgqYnsJA87BxLSTiMQaCiTQM.roa (hash: wzJgz/i9pbuBUkW2cHLEeF8EDXUdrOLSSMmRBwjvuyY=) 4: W9Inx9ixKUML_LOXnUHyVFrXNZE.roa (hash: Hce+QeLL7wTflcLdNV6AIKOI7Oh5vFKC0Lzm+giAD4k=) 5: aXYA7UmSga-uAKN3mA-MrcLvQNw.roa (hash: A6mLEC8I6HDPu8tLJ0OvOtzb6OIQimg3DdB4KG2uaDU=) 6: ci5DKE54eT5iN_nAPc-7X1GldFI.roa (hash: XQ0NDtKbc4dG/tVRbQc3pC1EJxNFS1iSTeQJD2B3KrE=) 7: gGa9g3xm-WUrWGnZqfKZudqy63U.roa (hash: gMhH5wVZGQUaR4GjDTcIjxc58KL7jUF42zUcWUMJNmY=) 8: hK0B_1bjDs4SgkjuewwBu_Hyp1Q.roa (hash: P1SdgqhUGccV0nstYPHl8zR8nqe1TrQ9TkFifIcHjeo=) 9: pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl (hash: SFcBuz/smcTzSFoGKZviBI1rMprQpqDOiIUtJgAW6Rg=) 10: rWecwzOy_r05COuEiZl4KWht5j4.roa (hash: APFZzX7MSHk1ET0fGFHAZgyisv5z2ZfhR0L4cxUpeKo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 15 Apr 2025 23:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:37:d2:07:11:dd:e6:2c:53:86:aa:40:d3:04:43:1b:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a608db43964b6986ec740f0b5e33f627589ac560 Validity Not Before: Apr 15 05:00:33 2025 GMT Not After : Apr 16 05:00:33 2025 GMT Subject: CN=8518abd3a3537fe00a576a9a8e9b6a4bd294f63b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:05:98:e5:2b:74:03:00:7a:b0:6e:97:c7:d1: e1:71:6f:b3:b8:0c:de:98:48:77:af:64:8d:89:75: d9:55:65:51:4f:2d:82:d5:5b:eb:c7:cd:94:b0:87: 8b:f0:a2:7a:1b:15:90:6c:13:9b:30:62:75:4e:44: f4:76:d3:74:0f:ff:ff:15:e0:8a:84:13:4a:43:c0: 3d:46:a3:6e:51:bc:08:52:f2:54:81:68:9f:8d:11: 65:dd:7b:fa:94:7b:74:a2:16:b1:6b:5c:5e:a7:80: e0:e3:00:fa:9b:7b:4f:75:f3:1d:a8:b5:2c:6b:a0: 75:07:5d:13:2f:7a:63:58:b1:c8:a8:4e:bb:d6:a5: a8:37:3d:2a:99:6f:5a:ba:e8:c0:44:66:33:85:75: 0e:e2:5b:2d:01:90:99:4c:19:fc:d4:23:bd:a8:ce: 84:09:49:d8:1a:3c:3c:71:7b:d1:93:a3:51:03:7a: 1f:5f:fc:c1:46:df:2a:73:6e:36:81:52:b1:c1:0e: e4:3f:9c:a0:ca:d8:30:f9:b8:ca:36:d8:ab:e7:4e: e8:7e:5c:52:b3:89:c6:27:e3:aa:d0:64:5e:8a:fd: 2f:b7:eb:81:8b:27:32:fa:58:da:a3:b7:c8:39:fa: f9:9c:0c:b5:9a:d0:97:d7:b3:3e:8e:d3:1a:34:27: 15:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:18:AB:D3:A3:53:7F:E0:0A:57:6A:9A:8E:9B:6A:4B:D2:94:F6:3B X509v3 Authority Key Identifier: keyid:A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:89:da:0c:22:b4:89:26:c6:3d:7b:ed:c7:ac:1f:42:89:96: 7b:f1:5b:7f:72:43:c1:f7:a5:8b:a6:ab:e7:71:fc:ee:5a:ab: 7e:34:1f:9c:1e:b4:a2:5b:8a:a7:73:68:2b:56:68:64:06:db: 52:e6:62:1e:47:6d:8b:3a:91:2a:67:ec:30:73:41:b6:9d:c2: 30:a8:23:ed:88:db:a5:a0:e9:ae:a0:bb:91:f4:04:ea:19:a2: 5b:55:33:6c:4a:09:ad:1e:c0:24:7f:eb:6a:d6:b3:27:72:e6: 25:20:92:79:e6:4b:13:ab:a2:d6:13:a7:97:c1:4f:bc:a3:b9: 28:d5:49:dc:ce:43:13:1c:64:1c:f7:e3:6b:16:f0:ec:c7:b0: 2d:3d:a0:52:b2:b4:a6:20:71:c4:b0:b8:46:7f:20:78:76:16: 04:03:84:ad:bf:46:39:38:8b:5d:f8:a1:4a:2d:2d:17:e0:6d: 52:c8:0b:08:7c:15:1c:71:47:38:e1:22:89:11:2c:ae:ed:5a: 0a:d0:ea:aa:9d:f1:db:32:d7:ef:01:91:d2:6a:fc:ca:a2:df: b3:43:aa:a3:d3:c1:f6:f9:16:ec:19:1d:23:d3:da:21:c0:cb: 1c:c7:e6:5d:43:8a:3a:ba:03:2f:6b:b2:f1:fa:a2:9d:5a:8c: 22:74:eb:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZY30gcR3eYsU4aqQNMEQxuEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MDhkYjQzOTY0YjY5ODZlYzc0MGYwYjVlMzNmNjI3NTg5 YWM1NjAwHhcNMjUwNDE1MDUwMDMzWhcNMjUwNDE2MDUwMDMzWjAzMTEwLwYDVQQD Eyg4NTE4YWJkM2EzNTM3ZmUwMGE1NzZhOWE4ZTliNmE0YmQyOTRmNjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwWY5St0AwB6sG6Xx9HhcW+zuAze mEh3r2SNiXXZVWVRTy2C1Vvrx82UsIeL8KJ6GxWQbBObMGJ1TkT0dtN0D///FeCK hBNKQ8A9RqNuUbwIUvJUgWifjRFl3Xv6lHt0ohaxa1xep4Dg4wD6m3tPdfMdqLUs a6B1B10TL3pjWLHIqE671qWoNz0qmW9auujARGYzhXUO4lstAZCZTBn81CO9qM6E CUnYGjw8cXvRk6NRA3ofX/zBRt8qc242gVKxwQ7kP5ygytgw+bjKNtir507oflxS s4nGJ+Oq0GReiv0vt+uBiycy+ljao7fIOfr5nAy1mtCX17M+jtMaNCcVEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIUYq9OjU3/gCldqmo6bakvSlPY7MB8GA1UdIwQY MBaAFKYI20OWS2mG7HQPC14z9idYmsVgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGdqYlE1WkxhWWJzZEE4TFhqUDJKMWlheFdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi81MDAxNTAtMTU1MS00N2RlLWI1MDQt ZDY0NjgzY2VlMTZmLzEvcGdqYlE1WkxhWWJzZEE4TFhqUDJKMWlheFdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi81MDAxNTAtMTU1MS00N2RlLWI1MDQtZDY0NjgzY2VlMTZm LzEvcGdqYlE1WkxhWWJzZEE4TFhqUDJKMWlheFdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASonaDCK0 iSbGPXvtx6wfQomWe/Fbf3JDwfeli6ar53H87lqrfjQfnB60oluKp3NoK1ZoZAbb UuZiHkdtizqRKmfsMHNBtp3CMKgj7YjbpaDprqC7kfQE6hmiW1UzbEoJrR7AJH/r atazJ3LmJSCSeeZLE6ui1hOnl8FPvKO5KNVJ3M5DExxkHPfjaxbw7MewLT2gUrK0 piBxxLC4Rn8geHYWBAOErb9GOTiLXfihSi0tF+BtUsgLCHwVHHFHOOEiiREsru1a CtDqqp3x2zLX7wGR0mr8yqLfs0Oqo9PB9vkW7BkdI9PaIcDLHMfmXUOKOroDL2uy 8fqinVqMInTrIQ== -----END CERTIFICATE-----Generated at Tue Apr 15 08:04:11 2025 by rpki-client