$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft File: 4FdMKHjWtTYTm4lfCMnG2xjhKps.mft (raw, json) Hash identifier: hd1lXD0//9pIa43vkgWo8pz462QYcoD4etlSfIj01BU= Subject key identifier: A1:44:C4:29:12:0C:16:DA:C4:AA:C9:8A:98:6C:4A:5F:31:DD:F1:95 Authority key identifier: E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B Certificate issuer: /CN=e0574c2878d6b536139b895f08c9c6db18e12a9b Certificate serial: 01964030231B60CDBE3BC27C56CE77A2DF32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft Manifest number: 14FA Signing time: Wed 16 Apr 2025 20:00:18 +0000 Manifest this update: Wed 16 Apr 2025 20:00:18 +0000 Manifest next update: Thu 17 Apr 2025 20:00:18 +0000 Files and hashes: 1: 4FdMKHjWtTYTm4lfCMnG2xjhKps.crl (hash: 4GLkRPXqJ+8Ar2PgUMWXXRjYe02iWE6f+JR2hE6k1gM=) 2: F5_lNgEgzfWoE5_Cqsta810GUD8.roa (hash: iFMsbMYL1gucfU8DYPuCeVZjMtj1pfRR/WALBk/WmbI=) 3: GPk2iBuHJkhE3vpf7v6PEKywv7w.roa (hash: GWqOVJmjwk1Pn1GbnWABjMV1e5ehhhP81Lyr4q/ji2E=) 4: LNUfeHuP7gnY_85aOJlr0qSJEMQ.roa (hash: YoOtP+EHXOmT+ABly+3o3H4KeOBEs5xmQuWc5ATMUTk=) 5: OflCzXga8ucfjVqp9uUhh7zK_qM.roa (hash: tJ4j/9WnUQafTpRcoYrdjgTWc0yGFpsicsnou7Bw3VU=) 6: SwP1NYlZc5jbDBXXeMNl1hjy1LA.roa (hash: DMSgzACIbB/JZuNfMaMP2kCv3jA/gmECBXJyT4DQzwk=) 7: W6KxeoLPp69-NZgXYljCkgfMzmI.roa (hash: WWTdkNcNGcm7BbXaoCx/steftEF6zzmySvzLX5r6lpM=) 8: aAP3usYXoFfJgmCfE8_VSaJGbTU.roa (hash: x6wsw/R7hONUKg46ARfXmJgysd6wAhjXDI0EDejXv3A=) 9: iOtyAgFkq9KjDryYtxSf-6c3wlc.roa (hash: Kj30r5ul8bTH9OFgdr0KBvhjQH9UprffsicG1Hxoghk=) 10: neNovPYO-axYs7BVt_2UaW47DHE.roa (hash: VFy1CggRIr9nSFzCxAMfyeQiCZ7oJT6RZEpYe7bsLMw=) 11: uGW4wsIIh4UfRdPgdZPrknwT0_s.roa (hash: DewiqU6mTjj3HeFVXlyQsAjNkoAtpsCRp10m8FffrLA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 17 Apr 2025 20:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:40:30:23:1b:60:cd:be:3b:c2:7c:56:ce:77:a2:df:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0574c2878d6b536139b895f08c9c6db18e12a9b Validity Not Before: Apr 16 20:00:18 2025 GMT Not After : Apr 17 20:00:18 2025 GMT Subject: CN=a144c429120c16dac4aac98a986c4a5f31ddf195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:69:6b:d4:9d:3a:6c:bf:38:a8:f4:85:79:1e: 7e:63:6a:54:ca:f2:16:71:91:90:1a:58:74:98:61: 26:56:de:82:55:1e:cd:cf:ab:ae:bc:75:bf:a4:61: 5e:1e:82:ec:68:f0:27:5a:8f:7a:67:c2:55:53:30: 53:a8:3f:78:b8:f1:e7:ba:90:ec:8a:3e:94:69:6c: b5:3f:f1:a4:52:62:3c:f8:ca:2c:4b:39:9f:aa:23: 8b:cb:b9:c9:67:87:b1:58:02:38:17:cd:23:f1:2f: 10:1d:24:40:8d:ed:06:fb:b9:b3:7d:50:40:b1:94: 84:d3:94:c2:bc:53:f8:0e:4d:83:6b:e7:94:cf:ef: 2c:cc:63:cf:15:ed:57:68:f3:51:d9:0b:37:65:64: 4d:09:73:29:0e:82:10:d5:47:e7:9f:bf:c4:bd:83: c2:2b:4c:0a:bd:bc:93:05:e3:96:46:5f:05:c3:f2: 0c:61:6a:46:a6:92:83:1f:ef:30:70:04:42:62:42: 30:9e:1c:71:ef:87:d7:aa:83:3e:8d:f5:42:ae:ce: 1e:05:28:20:b9:4c:4c:db:da:6d:e2:d8:58:bc:2a: c0:40:01:4f:bd:be:3d:5a:d6:4e:17:02:86:da:8e: 39:35:3c:59:f7:12:aa:50:b8:25:67:86:07:14:d9: df:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:44:C4:29:12:0C:16:DA:C4:AA:C9:8A:98:6C:4A:5F:31:DD:F1:95 X509v3 Authority Key Identifier: keyid:E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:06:c4:04:25:9e:16:16:91:ab:33:32:57:4c:7a:83:80:32: 06:9a:86:41:44:00:cd:8c:02:c0:11:da:8d:a7:46:44:36:dc: 38:7f:8f:ab:aa:73:af:b9:dd:ca:0a:11:e1:f2:4c:48:4d:76: bc:1e:31:52:e0:58:f6:b2:c0:80:2b:62:16:c0:b0:56:8d:fe: d5:9c:fb:d7:5b:fa:80:90:2c:41:0e:6f:f4:ad:80:e9:9c:72: 39:19:e1:41:9b:52:03:87:a4:aa:80:57:d0:5c:e5:a4:47:56: 5a:6c:90:88:eb:ea:40:2c:ae:8b:48:8f:df:c6:41:e5:8e:14: 95:4f:35:b7:f8:d2:85:7c:0b:58:dd:65:46:40:d9:db:17:19: 98:d2:ac:6a:e1:a4:d6:70:ea:d5:ec:7f:93:3b:70:46:22:3d: 75:72:38:68:e0:fd:fb:32:d5:d1:e1:13:19:d3:6c:fa:a1:dd: a1:42:ff:e0:0b:68:56:d8:8a:11:d7:78:87:8a:16:a9:12:1b: fe:55:0c:cb:65:a0:18:0a:0a:09:46:d0:07:73:2b:1e:7e:e9: c0:35:cd:75:53:0c:1d:15:1c:b1:4c:2b:82:8b:66:d4:ff:11: a4:37:e9:be:98:c1:f4:0a:7a:a0:0a:2c:79:f5:5b:68:e7:6b: 77:3b:2d:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZAMCMbYM2+O8J8Vs53ot8yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwNTc0YzI4NzhkNmI1MzYxMzliODk1ZjA4YzljNmRiMThl MTJhOWIwHhcNMjUwNDE2MjAwMDE4WhcNMjUwNDE3MjAwMDE4WjAzMTEwLwYDVQQD EyhhMTQ0YzQyOTEyMGMxNmRhYzRhYWM5OGE5ODZjNGE1ZjMxZGRmMTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2lr1J06bL84qPSFeR5+Y2pUyvIW cZGQGlh0mGEmVt6CVR7Nz6uuvHW/pGFeHoLsaPAnWo96Z8JVUzBTqD94uPHnupDs ij6UaWy1P/GkUmI8+MosSzmfqiOLy7nJZ4exWAI4F80j8S8QHSRAje0G+7mzfVBA sZSE05TCvFP4Dk2Da+eUz+8szGPPFe1XaPNR2Qs3ZWRNCXMpDoIQ1Ufnn7/EvYPC K0wKvbyTBeOWRl8Fw/IMYWpGppKDH+8wcARCYkIwnhxx74fXqoM+jfVCrs4eBSgg uUxM29pt4thYvCrAQAFPvb49WtZOFwKG2o45NTxZ9xKqULglZ4YHFNnfuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKFExCkSDBbaxKrJiphsSl8x3fGVMB8GA1UdIwQY MBaAFOBXTCh41rU2E5uJXwjJxtsY4SqbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEZkTUtIald0VFlUbTRsZkNNbkcyeGpoS3BzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8yOGQ2MDAtYTg2OS00YWIxLTliMmUt NDQ2MDE5OTY2YTE5LzEvNEZkTUtIald0VFlUbTRsZkNNbkcyeGpoS3BzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8yOGQ2MDAtYTg2OS00YWIxLTliMmUtNDQ2MDE5OTY2YTE5 LzEvNEZkTUtIald0VFlUbTRsZkNNbkcyeGpoS3BzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOAbEBCWe FhaRqzMyV0x6g4AyBpqGQUQAzYwCwBHajadGRDbcOH+Pq6pzr7ndygoR4fJMSE12 vB4xUuBY9rLAgCtiFsCwVo3+1Zz711v6gJAsQQ5v9K2A6ZxyORnhQZtSA4ekqoBX 0FzlpEdWWmyQiOvqQCyui0iP38ZB5Y4UlU81t/jShXwLWN1lRkDZ2xcZmNKsauGk 1nDq1ex/kztwRiI9dXI4aOD9+zLV0eETGdNs+qHdoUL/4AtoVtiKEdd4h4oWqRIb /lUMy2WgGAoKCUbQB3MrHn7pwDXNdVMMHRUcsUwrgotm1P8RpDfpvpjB9Ap6oAos efVbaOdrdzstug== -----END CERTIFICATE-----Generated at Thu Apr 17 05:27:08 2025 by rpki-client