$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft File: HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft (raw, json) Hash identifier: NsCmLRGVMn7Tx9AZdYZOf5D+BQ5nBMR8ePFyzHYS2lI= Subject key identifier: 57:AC:E1:F5:A0:E9:06:33:7B:FD:BF:78:25:E5:3C:03:74:51:75:E9 Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4 Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4 Certificate serial: 019602D2C5DBFD5417E5D23D3109C1980A12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft Manifest number: 0B09 Signing time: Fri 04 Apr 2025 22:01:29 +0000 Manifest this update: Fri 04 Apr 2025 22:01:29 +0000 Manifest next update: Sat 05 Apr 2025 22:01:29 +0000 Files and hashes: 1: 2yzVxzG7uQe2LVhqlP7Tr3E5Ua8.roa (hash: 7WmY5HJWFY2WSRPe8rY9sHCgMMOeO2KLl6zSMuuSa3k=) 2: 41KfX_Y_l3obaaifL_VXYX9C75I.roa (hash: HdDv3ctJ+KCXQbyKBrrnPyV39Hz7jBQlcs4svNP6Pj8=) 3: 5yN22ahrdAN1NXIIN6NZ1jhN7Jg.roa (hash: j0qMcGfpFNrPYWDQOmrLH7ZMvqbrcA5XzAeaKGehsQA=) 4: 8EQPiSjQEYby_XgXqAmaDuC4v4s.roa (hash: 8d10+B2y/tYDuhscsgeyLhd3jc337orMULwx5SPapmY=) 5: CyHt2lul2yFB2vphDcbjVVDd0_U.roa (hash: JNcXechkkf1ykatJDUp1TccloQQ5dXsydSsy6hR4Mcw=) 6: HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl (hash: NviDofjcZIPAOEZLQMrpbQslTiFUS0i/nUVG7cNgEXg=) 7: HxQPVTCiHIEZEvZuDoFbWMCKkq0.roa (hash: gUjH3fV/xGXEx9RSjByHdu4FqtAvEWS+pJpQ7nPwfHM=) 8: I_uguIxF_BMEoyGLoIURMKuvuX4.roa (hash: 8eCD2dZaEAtY0Dv9hMHZwLlo808FjJsySBHzoOCHK7Q=) 9: JljJiSWFuhVdyGXatEB9x9JdnZk.roa (hash: jAkIP+k6idLyICi/ICZpuqWo5Ubp27FQJ+EpWgBEDeU=) 10: QECshKhyym3U39W11wvqgySCjwE.roa (hash: aX5d7QpOhGIPJ4lMxrEQ7G2+ORViErZX+IKTs8thiL8=) 11: Td7-gr7AtOPDcR0ZhgnTmyO5YI8.roa (hash: +hdVG502dIScaQFz0PoYhaUclSIYyjDWLYsqIgeT0KA=) 12: UmjABTUr0Zb4pHIrxaH4BnUZZBw.roa (hash: 5WOS1og+TrtZTsHliThud8m2Aj8cNpDdBDap4VqTPRc=) 13: ZLpoyTREbTFQSrueNjcvwhc4UVM.roa (hash: znxYwYux+1zAcRv+r+9X6VGpZLk/JOsk2KAl4CWZVu4=) 14: d3pxfpSAdMX5-xYmVFQaOfvLDSg.roa (hash: NLZDZC6DgJ7PomVCUoylLvrMZJUUP5EGmw8tlYepepc=) 15: gl18mKpO2JmUfkGnm0eQydlc6tI.roa (hash: OH9VSaC9xrFx/iWwi8X6+CuDn8+UvNS7uG5JY4B0Oao=) 16: jB-z6tU49eCpdLJATgE8Ex9roFU.roa (hash: i061JOQcxN7EcQaNeqtPKLXeQ2gYUgXTC3ZwpyVqD5g=) 17: q_nlZkVqMlecgYlyALwoNvlv0GU.roa (hash: XWj99O5UU/Tl9hJ/AXU1UIfYkTkR0RwVzYKv59mEUos=) 18: vP2xgKPjxexBd9elzajYP9djzSw.roa (hash: 666wkPXnB8va+FhTZzHDfJzrl43782Zx7uG28Yjj0ck=) 19: xa0pQq-tzXZJ9qWqDGQiLSuJe2Q.roa (hash: HXMP1GMDjDTbIw4GEhYV4aHqEPGVTAftKR+Yt5JJrQE=) 20: zAGkvZDi5GKm7RaT5qRHQq9Y3aI.roa (hash: b/4EVy5mQO5WrpROE6epbzPlL80tDYlW6g0ZerhEzvo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 19:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:02:d2:c5:db:fd:54:17:e5:d2:3d:31:09:c1:98:0a:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4 Validity Not Before: Apr 4 22:01:29 2025 GMT Not After : Apr 5 22:01:29 2025 GMT Subject: CN=57ace1f5a0e906337bfdbf7825e53c03745175e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7d:d1:c6:00:3a:da:fc:7b:20:57:73:d9:c0: 6d:8f:75:e7:ec:d4:b0:6c:da:71:a6:e8:25:ae:19: 35:ae:79:c8:65:24:01:a6:48:98:e9:c4:8d:90:e9: cb:37:a5:71:45:f7:16:eb:a1:11:f5:c4:0c:21:7a: 15:3d:a8:db:fb:1d:0a:9a:b4:de:d4:b4:da:74:7f: e7:fd:ec:98:22:f9:d3:3c:8d:b0:15:79:db:4b:05: e9:d9:7e:d6:bd:96:05:03:ad:5e:2b:9c:20:8e:81: 32:fa:51:2b:02:f8:74:22:81:9c:47:70:fe:39:8e: cf:8e:b7:a7:c0:c4:c8:3a:cb:fe:c6:5e:bb:7c:3a: d8:f2:22:25:d9:98:35:c1:9a:f1:46:25:61:9c:70: c9:e2:ab:68:0f:7a:6c:49:99:9f:08:96:c6:c0:d5: e6:8f:a6:b6:f3:77:ec:91:39:33:8e:91:c4:34:9d: 24:fe:f6:d9:08:64:38:86:e4:0d:35:0f:09:96:b4: ef:5d:de:4b:25:bc:57:f4:d6:e0:b8:0e:24:a1:37: 4e:20:e1:28:6d:ca:d0:09:13:58:92:3d:ed:aa:bd: 10:92:aa:44:68:46:5d:90:63:82:a1:c8:8e:84:f5: 70:3e:f7:2d:29:dc:03:35:11:b1:01:a7:e8:bf:13: 18:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:AC:E1:F5:A0:E9:06:33:7B:FD:BF:78:25:E5:3C:03:74:51:75:E9 X509v3 Authority Key Identifier: keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:c9:f7:73:43:64:a3:6a:30:34:33:87:4d:fc:f9:90:b2:b5: bf:93:85:8f:57:08:1f:6e:eb:b8:2c:bf:1f:bc:f7:c3:3e:ac: 1c:ba:88:1f:72:5c:e2:ce:a7:05:51:fd:f4:c6:b4:c4:e0:26: 1a:a8:af:f6:54:7c:c1:47:49:1b:80:76:0f:10:42:fb:74:1c: b6:e0:78:31:a8:3d:55:13:18:67:e5:e6:bc:63:a4:83:da:8c: b5:0b:14:76:56:a5:e6:7a:30:50:22:5e:f5:cd:af:c5:59:b1: 89:6e:5e:a4:5c:58:89:c8:6f:17:ca:f6:cc:69:93:c2:28:2c: 04:c0:0b:b5:02:f3:02:a2:06:95:2c:2e:2a:7b:87:d9:29:cb: 0b:1f:2d:2b:0e:82:ce:c5:00:35:6a:68:22:e3:6d:f5:4c:ed: 63:51:cf:5f:3b:cf:6e:fc:c8:71:37:41:30:b0:a6:8f:d9:a7: a7:91:51:bc:e9:db:12:55:0d:e8:65:72:b9:7d:66:d2:67:62: 46:e6:05:01:d9:8b:ba:ae:00:db:dd:17:1e:8e:2b:61:92:6d: b1:c8:57:61:b3:67:da:a9:10:cc:bb:92:f2:3a:48:61:6f:f7: d5:cf:53:af:29:9f:f9:dc:74:d6:72:9a:1d:11:6d:a6:09:ca: e8:15:78:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYC0sXb/VQX5dI9MQnBmAoSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNWIzMzQ5NjU3ODg3OTRkNmYxNDdhMmYwMDRkMTNiZTMy NTdkYzQwHhcNMjUwNDA0MjIwMTI5WhcNMjUwNDA1MjIwMTI5WjAzMTEwLwYDVQQD Eyg1N2FjZTFmNWEwZTkwNjMzN2JmZGJmNzgyNWU1M2MwMzc0NTE3NWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl33RxgA62vx7IFdz2cBtj3Xn7NSw bNpxpuglrhk1rnnIZSQBpkiY6cSNkOnLN6VxRfcW66ER9cQMIXoVPajb+x0KmrTe 1LTadH/n/eyYIvnTPI2wFXnbSwXp2X7WvZYFA61eK5wgjoEy+lErAvh0IoGcR3D+ OY7PjrenwMTIOsv+xl67fDrY8iIl2Zg1wZrxRiVhnHDJ4qtoD3psSZmfCJbGwNXm j6a283fskTkzjpHENJ0k/vbZCGQ4huQNNQ8JlrTvXd5LJbxX9NbguA4koTdOIOEo bcrQCRNYkj3tqr0QkqpEaEZdkGOCociOhPVwPvctKdwDNRGxAafovxMYjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFes4fWg6QYze/2/eCXlPAN0UXXpMB8GA1UdIwQY MBaAFB5bM0lleIeU1vFHovAE0TvjJX3EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDIt OTk5MGUyZDllYWZlLzEvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDItOTk5MGUyZDllYWZl LzEvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEcn3c0Nk o2owNDOHTfz5kLK1v5OFj1cIH27ruCy/H7z3wz6sHLqIH3Jc4s6nBVH99Ma0xOAm Gqiv9lR8wUdJG4B2DxBC+3QctuB4Mag9VRMYZ+XmvGOkg9qMtQsUdlal5nowUCJe 9c2vxVmxiW5epFxYichvF8r2zGmTwigsBMALtQLzAqIGlSwuKnuH2SnLCx8tKw6C zsUANWpoIuNt9UztY1HPXzvPbvzIcTdBMLCmj9mnp5FRvOnbElUN6GVyuX1m0mdi RuYFAdmLuq4A290XHo4rYZJtschXYbNn2qkQzLuS8jpIYW/31c9Trymf+dx01nKa HRFtpgnK6BV4Ug== -----END CERTIFICATE-----Generated at Sat Apr 5 01:15:06 2025 by rpki-client