$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft File: AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft (raw, json) Hash identifier: vrO/jgRIFkJKpeNU2XKzcz+zMavOlTgUtHEAzboCwBY= Subject key identifier: 7F:90:E7:91:8E:40:71:32:AE:34:D5:B5:EB:54:57:68:66:58:89:E5 Authority key identifier: 01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64 Certificate issuer: /CN=01626ffd800eafa336bdf343141f03f7c393c364 Certificate serial: 0196176C206781F88E02651B30341D8F735D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft Manifest number: 121B Signing time: Tue 08 Apr 2025 22:01:24 +0000 Manifest this update: Tue 08 Apr 2025 22:01:24 +0000 Manifest next update: Wed 09 Apr 2025 22:01:24 +0000 Files and hashes: 1: 5f4jHn1pLp9_czy0P6q4mWQPuaQ.roa (hash: 3KM64Cf6ndit+2Kg00oB3Tn7DU/3A/UJsq/nZfbmrTw=) 2: AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl (hash: 1fF9LPVzTGN+1xqT1CO7qwwO/KG9wK83fxxSKUJ+ti8=) 3: DOQPFseUooqpRadfc9Jx4JU6a5w.roa (hash: XAqWMnzc6s03+/9ahgtWZZS99wqgCO9uHPxIAengots=) 4: Ep-3jBGiCSjbfZmDyjrtZ9Nng1I.roa (hash: NajPxoAcjesnTcDv1zpn6hZ+gPmYV6LMmmyjTY+zm1Y=) 5: HUhMVW-ldLEfTap6Snf3A4DJkEU.roa (hash: BWPDA7ah1ktjRpynxF0766anW0jKmETqpySALyHpL1I=) 6: KQ6n4tDni3AIbl89TiA9LShR5J4.roa (hash: eJSTrL5nCsUccTE0LUUEIBRIdvXEaKFzbIAwyimw6Ls=) 7: OrF2xG8avuxGrpmOXZN3cT6uOd4.roa (hash: 6sBq02Bpl0iKdz4R0G8yzMetYTxfTK9ZttAM0+HPHcY=) 8: TlLzQFaA8VlRrAgPC7RAijqNra0.roa (hash: SoMB+UVUymjveuF3MvkPc6BzZ0mDzrz28rZ+mOfkhhw=) 9: VOYB184l4I5HKOOxR4bYnxvGzZs.roa (hash: mdiqaccT7rJ4NJ3jvspjR5ZxSCjb6Tgu2CjLTSJb1Us=) 10: Zd2TIy3J3EGY8gRTx2VctwWafNA.roa (hash: jSPU+Ktlv17KDLnxr4WS4KGPoqym5KTNrXt7UU3beYs=) 11: at_SsqmuruHw3U3ih5ZvkPERAo4.roa (hash: qgllsDkXSoqmopmK6Nvv+gOUGdbl9WK4/RlYS45trQE=) 12: mr-HNjr6kVeCJqK27hiMeoGu7wo.roa (hash: 2cCwRolIlWawdY4pJgJJRXgW9VztAAcC6pZFSIFR/7s=) 13: zkX0tVSTFsoyaxd_5uUsOhnJd-4.roa (hash: +7/YlZRCmdBXU3YPbp3jELJ7uYVAAvsXumfUvYl8oRk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 09 Apr 2025 22:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:17:6c:20:67:81:f8:8e:02:65:1b:30:34:1d:8f:73:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01626ffd800eafa336bdf343141f03f7c393c364 Validity Not Before: Apr 8 22:01:24 2025 GMT Not After : Apr 9 22:01:24 2025 GMT Subject: CN=7f90e7918e407132ae34d5b5eb545768665889e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:89:6e:37:0c:f9:57:6f:b7:78:58:e5:f5:ef: b1:67:14:c9:13:5b:ba:ea:c3:b0:be:e3:f6:7c:e8: e3:b9:32:8a:85:fb:09:aa:8b:05:d1:14:1f:34:13: ed:6a:6e:84:b5:bb:15:09:0b:15:10:5d:50:d4:cb: 1a:36:1c:7e:0b:ec:85:42:d8:58:67:2b:23:4b:86: ba:f3:b6:22:81:28:1c:cf:10:c5:e2:a4:45:02:15: b4:7e:eb:e9:02:a5:fe:af:0d:7c:f1:59:2b:1d:5f: a1:97:38:9e:ba:67:42:b1:19:cb:8b:2c:38:27:d7: fd:e1:1f:7e:e7:08:f6:c6:15:49:93:dc:42:c9:ce: 4c:52:a9:7f:a6:8a:36:70:d0:e8:5a:1c:45:59:73: 8a:01:62:72:db:79:dd:4c:7b:10:71:35:45:5c:e7: ba:d4:58:45:6c:70:7b:f8:92:b7:4f:9d:9c:48:0e: 7b:d3:c6:be:8c:2e:74:97:12:a3:b1:34:6f:af:bd: 92:e4:7a:00:36:4b:b2:9c:9d:1d:43:97:d8:46:93: 6c:89:08:55:c5:b3:cd:b1:01:c5:12:9e:32:9b:7a: 56:73:ed:f4:18:07:c4:a0:1a:82:23:73:b0:6a:30: f7:c8:f4:84:eb:01:98:fd:3c:2f:47:47:8f:a4:d8: cc:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:90:E7:91:8E:40:71:32:AE:34:D5:B5:EB:54:57:68:66:58:89:E5 X509v3 Authority Key Identifier: keyid:01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:94:b2:b9:e4:ca:94:4a:3a:2c:65:db:27:02:0c:e1:87:9d: 11:82:74:ff:71:4f:17:35:09:cb:60:72:22:db:46:11:85:fe: 9a:f9:6c:78:f2:ff:19:74:d0:46:48:e9:eb:56:c4:ed:70:52: 4b:5e:d5:e2:cd:f3:71:6a:cc:d3:f5:0e:a1:6c:88:7c:9f:b3: 29:8b:40:bf:35:29:6f:7b:da:2a:6f:79:15:ec:c3:f5:05:f0: 9a:c4:c1:b3:e8:29:19:1c:be:d4:ed:60:4f:a7:34:fe:a4:b6: 0e:31:c5:c8:f2:2b:ec:03:89:d3:e8:96:e4:2b:27:bc:a3:4d: b9:58:15:80:24:0d:9f:29:1b:12:42:5b:1e:e3:4c:bb:e7:fa: 0e:38:bf:b4:b3:ab:e6:07:10:dd:80:a9:86:a8:a2:82:bc:2f: 86:5e:d1:b6:32:ea:7c:3f:e2:0d:09:57:b5:e3:e6:c5:6b:57: ff:b2:d8:94:53:3a:21:25:4c:a5:e4:62:d8:a4:4e:ef:80:0e: 74:0a:9e:56:2a:ba:d0:0c:64:d5:52:22:9f:10:ea:8d:d6:d1: bd:72:77:70:a5:20:65:6c:b7:93:2a:20:99:11:0c:07:16:6c: ac:3c:f1:19:9b:77:3d:f8:a2:ad:c4:e1:a0:24:5d:e8:ac:a7: f4:93:9b:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYXbCBngfiOAmUbMDQdj3NdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNjI2ZmZkODAwZWFmYTMzNmJkZjM0MzE0MWYwM2Y3YzM5 M2MzNjQwHhcNMjUwNDA4MjIwMTI0WhcNMjUwNDA5MjIwMTI0WjAzMTEwLwYDVQQD Eyg3ZjkwZTc5MThlNDA3MTMyYWUzNGQ1YjVlYjU0NTc2ODY2NTg4OWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIluNwz5V2+3eFjl9e+xZxTJE1u6 6sOwvuP2fOjjuTKKhfsJqosF0RQfNBPtam6EtbsVCQsVEF1Q1MsaNhx+C+yFQthY ZysjS4a687YigSgczxDF4qRFAhW0fuvpAqX+rw188VkrHV+hlzieumdCsRnLiyw4 J9f94R9+5wj2xhVJk9xCyc5MUql/poo2cNDoWhxFWXOKAWJy23ndTHsQcTVFXOe6 1FhFbHB7+JK3T52cSA5708a+jC50lxKjsTRvr72S5HoANkuynJ0dQ5fYRpNsiQhV xbPNsQHFEp4ym3pWc+30GAfEoBqCI3OwajD3yPSE6wGY/TwvR0ePpNjMMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH+Q55GOQHEyrjTVtetUV2hmWInlMB8GA1UdIwQY MBaAFAFib/2ADq+jNr3zQxQfA/fDk8NkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVdKdl9ZQU9yNk0ydmZOREZCOEQ5OE9UdzJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jNGU1YTAtODIxOS00ZmY5LTgyODct MWY0YmVhMjNlNGM3LzEvQVdKdl9ZQU9yNk0ydmZOREZCOEQ5OE9UdzJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9jNGU1YTAtODIxOS00ZmY5LTgyODctMWY0YmVhMjNlNGM3 LzEvQVdKdl9ZQU9yNk0ydmZOREZCOEQ5OE9UdzJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe5SyueTK lEo6LGXbJwIM4YedEYJ0/3FPFzUJy2ByIttGEYX+mvlsePL/GXTQRkjp61bE7XBS S17V4s3zcWrM0/UOoWyIfJ+zKYtAvzUpb3vaKm95FezD9QXwmsTBs+gpGRy+1O1g T6c0/qS2DjHFyPIr7AOJ0+iW5CsnvKNNuVgVgCQNnykbEkJbHuNMu+f6Dji/tLOr 5gcQ3YCphqiigrwvhl7RtjLqfD/iDQlXtePmxWtX/7LYlFM6ISVMpeRi2KRO74AO dAqeViq60Axk1VIinxDqjdbRvXJ3cKUgZWy3kyogmREMBxZsrDzxGZt3PfiircTh oCRd6Kyn9JObpw== -----END CERTIFICATE-----Generated at Wed Apr 9 00:45:28 2025 by rpki-client