$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft File: 1g9F98xLaR_UoxwfHAtPYF13pu8.mft (raw, json) Hash identifier: SbgiWHLD9psgSuH67ZbAKFn3pWJMnt0tu7pD6n2rLRs= Subject key identifier: 23:52:95:4A:05:8F:CC:28:3B:6B:ED:61:FD:77:5C:88:8C:2F:3E:1F Authority key identifier: D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF Certificate issuer: /CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef Certificate serial: 01960F44880483B6DF78F4D9445469E3ECD8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft Manifest number: 14E3 Signing time: Mon 07 Apr 2025 08:01:11 +0000 Manifest this update: Mon 07 Apr 2025 08:01:11 +0000 Manifest next update: Tue 08 Apr 2025 08:01:11 +0000 Files and hashes: 1: 1g9F98xLaR_UoxwfHAtPYF13pu8.crl (hash: 3bQ+p/jfj/R/tFqdbroDwWglM/UdsEWpmNHB9cRMKDk=) 2: GMAT5cnP7VsDriW3_zL3dmojRH8.roa (hash: 9OZgqMWwoj0IlbvwNkLekurnPx7RT1aRlKGSPHOL6N4=) 3: IoE67Ac0pXcZcF9gBBC8VKka1vE.roa (hash: kt4XWZcgrYkLHsaAC2c2z5iyqyhmqC0zJwGvhSrnQ3E=) 4: MnG_2GzorHPsXNp5Vum7-rUjReY.roa (hash: D3z8cv+XlClqN6b2gc/ybPBfC33Ewbb6orbavaJ/jxk=) 5: PPMANDrLvF7lVgznicSOoAT3-3U.roa (hash: goEhx/poAjkzaQRi2RGACZSEuEQ6nJJ0p5PoSp7o6bo=) 6: b5u0PP2LUmpbpNJ4qAdIl3s9IjI.roa (hash: 4ZbWUTDO0hiozFSxacFGW2XCjTl1RPjd3yDPIUYji9M=) 7: jfxb2BR-CQiCSpU8DpDydbDz1b0.roa (hash: fObbuEbq3/zFmHWpgeQlp5JFopCYl+4GEGdq5exW77c=) 8: rrmPFSxVt5xEtowDvlnYGvxrH3s.roa (hash: mhHuydqllyBkMxNXx9HLabM7W+Fte6mEhiiQe0n8fRA=) 9: th1p5jE1fl21GfKXyCflURpVpo0.roa (hash: w4pXoPCT9slYbdDvFiyPewBrsldI3f9m6umM8Wv0SkE=) 10: viBgIC4abJYY7C__L2VefsiYSYI.roa (hash: r+Hi34v0Qt4A/ODVfo4uFHb77CXM38aMXnF2F0o4IcY=) 11: xNr5I0Wokl-j2aBAEkjZmpNRVng.roa (hash: epmYMuuR7FlxzNy/fvLKPn2AzgVlFDZhQf7tXXleECM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 08 Apr 2025 08:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:0f:44:88:04:83:b6:df:78:f4:d9:44:54:69:e3:ec:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef Validity Not Before: Apr 7 08:01:11 2025 GMT Not After : Apr 8 08:01:11 2025 GMT Subject: CN=2352954a058fcc283b6bed61fd775c888c2f3e1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3f:59:43:38:87:53:d4:b1:87:69:ef:62:77: 98:01:ff:d1:7c:1c:7b:51:fc:50:ce:75:ae:d3:0a: 9e:42:74:15:b0:0e:89:89:0d:6d:75:6d:6d:1d:4a: 7a:4e:d4:14:eb:d6:db:c2:2b:22:63:d8:85:d0:59: 30:f8:8b:19:31:1a:02:68:0a:0c:b2:b5:e2:bd:bd: 51:cb:52:db:60:3c:80:67:eb:80:45:a9:30:10:e2: 8a:08:a2:3b:95:36:5e:91:92:59:57:2b:79:21:f8: 34:6d:ad:84:5c:58:31:d6:32:d9:8a:9e:d9:2f:14: c8:d5:5b:4d:01:90:68:d4:7e:b6:63:a4:d6:d1:c3: 69:e3:d2:b8:f9:a8:bb:6d:37:e6:75:b2:90:2b:bd: c5:9c:be:f3:49:af:ef:57:32:c6:00:71:75:6c:ce: 76:0c:ac:63:45:b3:1f:4e:d7:d7:ec:17:63:fb:bf: 70:00:64:46:0e:a0:41:13:c1:19:a6:ea:c3:3c:15: cf:a7:1a:fb:8e:8f:ac:ca:c1:b0:3a:d1:3a:a0:12: d8:d5:92:d8:04:53:50:c6:dc:26:df:03:9f:4c:0a: 92:15:3f:e5:57:d4:78:74:3b:bc:42:dd:ab:3e:92: 83:7f:54:2a:41:18:6e:10:05:3d:c7:ce:6a:a1:4c: 53:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:52:95:4A:05:8F:CC:28:3B:6B:ED:61:FD:77:5C:88:8C:2F:3E:1F X509v3 Authority Key Identifier: keyid:D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:b5:a5:92:ee:4d:db:9c:98:88:b4:28:e2:e2:70:6c:c3:6e: bb:d8:8d:50:fe:82:2b:09:6c:f5:a8:2a:6d:3f:23:82:b3:ef: e1:97:8a:b2:30:7b:3f:8b:73:54:c4:ba:0f:a1:c7:bc:e5:44: 24:c4:78:b4:95:1b:0c:0a:d9:23:e1:4d:0c:a0:49:60:38:ab: 22:60:2a:77:d7:0d:4d:00:d2:11:56:5b:0c:c1:8d:66:66:0b: f6:ee:55:82:27:9d:46:ff:81:77:7b:80:8d:3d:bb:4f:33:dc: 99:30:66:c5:63:b0:84:20:b6:5c:10:9f:17:a1:26:bc:5f:de: 1b:54:00:d0:f2:f0:cb:0f:7c:bb:8a:d0:d5:e2:1e:b7:5c:42: ef:db:3e:be:a1:29:08:16:98:d0:c9:f2:ff:41:e5:6e:0c:ab: 04:cf:90:6f:09:d1:3e:50:b2:6c:fb:8b:50:ab:a4:2e:36:a7: 62:11:ee:a1:72:ba:54:38:a9:2b:fe:b7:72:e2:1c:6d:6c:0d: 78:77:78:31:ae:d8:e1:5a:4e:35:e9:62:58:f6:91:ca:16:77: 32:44:4f:41:24:17:37:98:78:e2:80:61:1b:c7:4b:e4:88:24: 9d:ea:a0:d5:4d:b6:be:34:13:be:30:56:15:4c:09:7e:c0:78: 29:e4:e5:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYPRIgEg7bfePTZRFRp4+zYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MGY0NWY3Y2M0YjY5MWZkNGEzMWMxZjFjMGI0ZjYwNWQ3 N2E2ZWYwHhcNMjUwNDA3MDgwMTExWhcNMjUwNDA4MDgwMTExWjAzMTEwLwYDVQQD EygyMzUyOTU0YTA1OGZjYzI4M2I2YmVkNjFmZDc3NWM4ODhjMmYzZTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApj9ZQziHU9Sxh2nvYneYAf/RfBx7 UfxQznWu0wqeQnQVsA6JiQ1tdW1tHUp6TtQU69bbwisiY9iF0Fkw+IsZMRoCaAoM srXivb1Ry1LbYDyAZ+uARakwEOKKCKI7lTZekZJZVyt5Ifg0ba2EXFgx1jLZip7Z LxTI1VtNAZBo1H62Y6TW0cNp49K4+ai7bTfmdbKQK73FnL7zSa/vVzLGAHF1bM52 DKxjRbMfTtfX7Bdj+79wAGRGDqBBE8EZpurDPBXPpxr7jo+sysGwOtE6oBLY1ZLY BFNQxtwm3wOfTAqSFT/lV9R4dDu8Qt2rPpKDf1QqQRhuEAU9x85qoUxT/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCNSlUoFj8woO2vtYf13XIiMLz4fMB8GA1UdIwQY MBaAFNYPRffMS2kf1KMcHxwLT2Bdd6bvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hZDMwNDQtY2RjZS00NmNmLTkyYzkt YTk1NGQwNTM5OTRhLzEvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9hZDMwNDQtY2RjZS00NmNmLTkyYzktYTk1NGQwNTM5OTRh LzEvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARLWlku5N 25yYiLQo4uJwbMNuu9iNUP6CKwls9agqbT8jgrPv4ZeKsjB7P4tzVMS6D6HHvOVE JMR4tJUbDArZI+FNDKBJYDirImAqd9cNTQDSEVZbDMGNZmYL9u5VgiedRv+Bd3uA jT27TzPcmTBmxWOwhCC2XBCfF6EmvF/eG1QA0PLwyw98u4rQ1eIet1xC79s+vqEp CBaY0Mny/0HlbgyrBM+QbwnRPlCybPuLUKukLjanYhHuoXK6VDipK/63cuIcbWwN eHd4Ma7Y4VpONeliWPaRyhZ3MkRPQSQXN5h44oBhG8dL5Igkneqg1U22vjQTvjBW FUwJfsB4KeTldg== -----END CERTIFICATE-----Generated at Mon Apr 7 15:24:03 2025 by rpki-client