$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft File: vfrSPhHPDSSkd1lOugn5msxvH_8.mft (raw, json) Hash identifier: tlaN2XlKr4uYTZyhH6nVwkVnOOOBZSoIlr5VciWlLhQ= Subject key identifier: A8:20:FE:6C:CB:25:40:5E:C0:7C:3F:09:FF:46:42:F9:9E:E7:DE:CF Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF Certificate issuer: /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff Certificate serial: 0194C3BE49031C8A029D52797302A4BA87A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft Manifest number: 1447 Signing time: Sat 01 Feb 2025 23:00:15 +0000 Manifest this update: Sat 01 Feb 2025 23:00:15 +0000 Manifest next update: Sun 02 Feb 2025 23:00:15 +0000 Files and hashes: 1: 7Vkvdbayc332rXjpZRZWSGICr9o.roa (hash: c2d+Gemnxb33gPT3zp010Rv8xRrTu4fPuzgqiaR1Sy0=) 2: 7vjowzcPet99DpSwRMSRoDCwwzU.roa (hash: X+UxdfFDiClGq5vQ6ru5h4wKAEV+wpHwdLPZ+uKZ1dI=) 3: KfRiG75Zh2R61TN_EiWqTHilwGw.roa (hash: gxYuIp9SWq+RPkQf6rEJ0hDaifl2E9IqGvk00j77Wec=) 4: KrWr-uxPx9ROkw1dMPy0luW9rHI.roa (hash: wAvc90Nk+tLmXZJ7T3uA3J3ZDaVOAEjfbFhLJlJ5p7c=) 5: W6ybVPAGTpEsw7meUuR6P0SBWi0.roa (hash: Pk0B2oz1VW/tzo+fvfG4VG2dc2avAQtB88TgpiGpr1s=) 6: _l-kXEP7uNjKBXPQ_iDyaiai-0s.roa (hash: yKpSNSngqAM/eyMmWKP/S33qgMa9todToBwJi00eda0=) 7: e5O39jLwx-J5_GwekaRwgr2d2RE.roa (hash: HUk8Z3Nkmb3qkmakGlU4y4u1qV2j7sm1wiYlhVDlC1I=) 8: fL3fAtFLchxlzuCc2GY65y6LmZ0.roa (hash: XRZwhdg6OIZelMOuq2OiZcg4UiZ6j5YXWUKJ7b9dB2A=) 9: jVxo0eRrcP2pgqEM2o5yJCaDJF8.roa (hash: 16iXvR9xhaKTmRi0zkcfcRjJRbOmgMjKBuv8xrJfUx4=) 10: lVRxioxScoDE7zhaCYNE7hVti4o.roa (hash: 2SOb+vjF9aw2d+xYqFyVysIAXg1nOJ/HsxNH3uvPjjc=) 11: oFZG6FuqcB6CEgUjG9AbuL9dAS0.roa (hash: UZD/yf7XHoNO7JDGnUu+XcMvM0jiJ1W2cL6Q6ekzwvE=) 12: rzIhKyyjXlSGxIVHnVv7j-nWQ4A.roa (hash: wyAyy8rxCcwgCB+QLmatxIedkc9CxRz+G4M60YbCHcQ=) 13: tiIoys09kmXMH3pj0eYY3jB6F7o.roa (hash: /BFY3lyPkgwMGI6Yoxtr7ZIkhvJMoAS7umXiaAeUjKk=) 14: vfrSPhHPDSSkd1lOugn5msxvH_8.crl (hash: vjuD1SGLK+DG4sAerkIn8upi44PYsDEnwIvDksp3rgY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 02 Feb 2025 23:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:c3:be:49:03:1c:8a:02:9d:52:79:73:02:a4:ba:87:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff Validity Not Before: Feb 1 23:00:15 2025 GMT Not After : Feb 2 23:00:15 2025 GMT Subject: CN=a820fe6ccb25405ec07c3f09ff4642f99ee7decf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:32:80:71:9e:08:e2:c7:ae:84:a9:40:5a:f9: 49:0c:79:21:87:eb:86:bf:62:c8:3e:ba:9f:d2:fc: db:57:c9:ec:ac:63:5b:87:c3:9a:ce:76:16:12:13: fb:57:15:af:17:5c:b6:5c:19:3b:c4:a2:a5:e3:fc: 0c:3c:f5:28:e6:fa:0c:10:f0:1f:8c:ec:27:01:84: db:a7:bc:94:aa:b1:14:c3:22:20:b4:0e:ac:86:e3: 44:42:2f:2d:f0:24:b5:7a:64:fe:03:62:a6:d8:1a: 93:5f:49:8a:72:90:84:66:65:43:84:98:29:0e:29: b2:d6:8e:8c:ae:3b:cb:09:6f:7c:7d:ac:1d:f5:55: f5:66:67:19:08:59:06:21:bd:b3:9f:62:76:2b:d9: 65:f6:bb:86:95:5d:b0:8f:e7:38:0d:28:f8:2b:02: 17:c9:21:84:da:8a:85:cb:55:62:d3:23:94:e0:a5: 10:4d:e9:c6:ec:64:04:a0:5e:48:fb:03:91:d6:7d: d5:8e:3a:e4:4c:73:da:e1:6f:f2:df:bd:17:d2:89: 8c:9e:84:6c:b3:e9:2a:8a:7f:b2:8f:f6:a3:41:2a: d3:32:fc:d9:0e:2b:a1:a7:ab:b4:ba:0d:e4:ac:b3: 45:26:75:96:8f:ae:b4:07:23:b1:76:f3:67:d2:1c: d3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:20:FE:6C:CB:25:40:5E:C0:7C:3F:09:FF:46:42:F9:9E:E7:DE:CF X509v3 Authority Key Identifier: keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:d5:87:32:dd:56:15:33:d1:cd:27:c5:43:66:f5:51:52:9f: 5c:92:a2:68:5d:58:a7:86:87:29:8c:ac:c3:bf:45:02:f7:ff: 5d:95:97:30:ef:ce:99:0d:27:df:70:ab:a9:8b:4a:ba:2e:6a: 51:88:f6:49:0f:9e:b2:f3:8a:7c:0e:3b:0b:8d:7c:fa:99:74: ac:21:92:e5:40:d4:dd:e5:a0:ce:6d:35:01:27:f1:94:0f:cf: 83:af:fb:0f:25:94:05:1f:a9:9a:9d:a6:b4:95:88:7c:d8:5c: e7:b4:e0:22:9e:71:72:ab:56:97:d9:0c:26:87:c5:44:7e:30: 6d:1b:db:c1:d4:be:02:06:22:4f:bf:10:3a:73:48:74:e5:a8: 46:e1:de:f9:a8:8c:f4:18:95:65:17:3f:65:4f:ef:f7:b6:71: 35:12:ab:2c:88:3b:80:29:5d:2c:35:bd:28:8d:cb:d5:81:7c: 7e:30:cd:eb:aa:4a:a3:4a:b8:0b:dc:0a:24:22:80:aa:0d:d2: bd:f6:a4:a6:6e:17:ff:68:2b:59:0f:b2:5a:c4:5f:29:f6:d4: 9b:7f:14:31:48:c7:7f:4d:96:7b:ac:c1:2a:09:91:b7:ac:72: dd:0b:65:cb:95:b5:33:1c:1f:c8:ce:3e:6b:23:a9:ab:e4:03: ba:c9:ff:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZTDvkkDHIoCnVJ5cwKkuoejMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZmFkMjNlMTFjZjBkMjRhNDc3NTk0ZWJhMDlmOTlhY2M2 ZjFmZmYwHhcNMjUwMjAxMjMwMDE1WhcNMjUwMjAyMjMwMDE1WjAzMTEwLwYDVQQD EyhhODIwZmU2Y2NiMjU0MDVlYzA3YzNmMDlmZjQ2NDJmOTllZTdkZWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTKAcZ4I4seuhKlAWvlJDHkhh+uG v2LIPrqf0vzbV8nsrGNbh8OaznYWEhP7VxWvF1y2XBk7xKKl4/wMPPUo5voMEPAf jOwnAYTbp7yUqrEUwyIgtA6shuNEQi8t8CS1emT+A2Km2BqTX0mKcpCEZmVDhJgp Dimy1o6MrjvLCW98fawd9VX1ZmcZCFkGIb2zn2J2K9ll9ruGlV2wj+c4DSj4KwIX ySGE2oqFy1Vi0yOU4KUQTenG7GQEoF5I+wOR1n3VjjrkTHPa4W/y370X0omMnoRs s+kqin+yj/ajQSrTMvzZDiuhp6u0ug3krLNFJnWWj660ByOxdvNn0hzTNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKgg/mzLJUBewHw/Cf9GQvme597PMB8GA1UdIwQY MBaAFL360j4Rzw0kpHdZTroJ+ZrMbx//MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9lMjUyMzktNmFiMC00OTE5LWE3NmEt NGY0ZTcxZTMyMDg0LzEvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9lMjUyMzktNmFiMC00OTE5LWE3NmEtNGY0ZTcxZTMyMDg0 LzEvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVtWHMt1W FTPRzSfFQ2b1UVKfXJKiaF1Yp4aHKYysw79FAvf/XZWXMO/OmQ0n33CrqYtKui5q UYj2SQ+esvOKfA47C418+pl0rCGS5UDU3eWgzm01ASfxlA/Pg6/7DyWUBR+pmp2m tJWIfNhc57TgIp5xcqtWl9kMJofFRH4wbRvbwdS+AgYiT78QOnNIdOWoRuHe+aiM 9BiVZRc/ZU/v97ZxNRKrLIg7gCldLDW9KI3L1YF8fjDN66pKo0q4C9wKJCKAqg3S vfakpm4X/2grWQ+yWsRfKfbUm38UMUjHf02We6zBKgmRt6xy3Qtly5W1MxwfyM4+ ayOpq+QDusn/nA== -----END CERTIFICATE-----Generated at Sun Feb 2 06:49:17 2025 by rpki-client