$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft File: BnHcx6msc1HHHgvCJ4z0X9Agri4.mft (raw, json) Hash identifier: FJ2S19DR5N1mFy27v9rcqD98euPSwb6Nf7Q3HVKi7iw= Subject key identifier: 41:17:3E:97:43:52:57:76:70:BF:B8:0E:D3:EA:7C:FE:44:0A:1F:8B Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Certificate serial: 0196041CEB3851EA2987B5966D6F0F8A3149 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft Manifest number: 1010 Signing time: Sat 05 Apr 2025 04:02:06 +0000 Manifest this update: Sat 05 Apr 2025 04:02:06 +0000 Manifest next update: Sun 06 Apr 2025 04:02:06 +0000 Files and hashes: 1: 28rk6vVEaThskl5Oz8cUwJzvyPE.roa (hash: YmQ0Kx60sH8MZc89x92SrjX+sCOw13xB0G1V7AXRvnw=) 2: 4ltCuuM_GdOVrMzVXdtZZcpOj5g.roa (hash: cl1NwgdIll6nhRsIy37XQTOEGpdXa4qboW4bfYa6e4Y=) 3: 55XpT8JVeIBju-68Fcr8TNvgCpo.roa (hash: 9CRwGbgIPnA9qI/QPIhe8quXTNF+qApSb8yHJkvqMSI=) 4: B4xuVBeDw_ZFdgBfYNzvFE9Xdoo.roa (hash: uEBgOj1wL/lZxabuAzXGGt9tXkgNmy0WBweEZQ8DMa4=) 5: BTm3OMQjY7f4flmyBZ1O5fiBDxs.roa (hash: biLT4JhrLwf2X8ChjWAfH7u0E229MvoO7NLFEuPFfwM=) 6: BnHcx6msc1HHHgvCJ4z0X9Agri4.crl (hash: /kmjkMkDbWDOof2kxHd16oCgKb4WtoXKDqoeAEeNjP4=) 7: Eu5ZsQqQeJfYHY48JMNVq2GojQw.roa (hash: RyO7jNMDWKyv2IbJbupinMFdx7ljQWfBhlh2R8wW870=) 8: HjFfMDZe0_j75P0QAuTvF3KTwzg.roa (hash: OtfHduNahKNFpUULCSt63uebd9KTua27CepM0fJCd6c=) 9: K_EJriKArevlzfQZbolNDBtx8oo.roa (hash: 6w0sGv73nByWKd1Uamo+uAderKU68u5gHX69ydcFrwY=) 10: MZC0ct0Xstv22HLBnvUeWGBv83E.roa (hash: htp3HHZJT8KbtGdttjdWwv8CIeJ5zxP/H9XYr6UcMA8=) 11: ZEf9ahzTXSgn1CBsHK_EzzAv_DA.roa (hash: 8A0ZbBwJVxe/mI3qDF06TbRtLu8mKb/RfAg0IkfL6lA=) 12: cm8GtcTHwoYStisNyga9gSVGLUU.roa (hash: v40FCmdUz2OM9eR6s3YOOpZt+uxDnzYy59kW+69A10A=) 13: cpQDuCQS_PmKGa6mRrggJump5IQ.roa (hash: pejGEaNqW754xgC8ojt2JY5OjOdgLVYVhBOgK3JEQ/g=) 14: eSlIjU--zzeljHxDb7Lmc0oTcr0.roa (hash: 29lnhAvQJG6lXbXS0KcxL34Q9L1+10qH6WOklcnahZ4=) 15: gLTyoT53I5lI2-lkOJJIfUKtbTI.roa (hash: 12uR9b0I8gzTcAnLqYhZOre02X+/fR86aQPixtWQtWI=) 16: hM4RUMXGkSsGKGeXFlPc5WdVja8.roa (hash: +27OhfsKET5J+JAUfDDgfUlvTDk8tRsjQoV0ueuKdsc=) 17: i5GppiHBLQmwOIDk0BFsCJHp2Fk.roa (hash: yjCNT9c5vaPwsaCe9fT0EpKbcmfr4jqgrLJp2CjaPGI=) 18: iWm57G_OhEZoZtm420opEVVmjwk.roa (hash: tplvQrByHA3nV7i/oHw26AKWQE0TqsWHR752F20xeg8=) 19: jOP869WZ6qv1K_02Bnny1yhOvWo.roa (hash: LNfdvwnFCrboSjtcQ9oPTixma8vlfw2VPXVW2ZobI5A=) 20: yD2EAHhhP8hq4VfBKVVVwQXGm8g.roa (hash: fqkI7jEwCktKLRqg81PTNjutJnwaIjHZG9rVSFusY9o=) 21: yX38jt3vI8i36FvJ3E_-UlmiSxQ.roa (hash: stQu9DFDxjZu1F/qyBAVnzlmn5IHuu+7EIChhkt6oKg=) 22: yxRSfxGFcJIa8ffdbZ9g0mH-Fb4.roa (hash: FFxtXSJ+YpMD3iO7sAPHCzivau9+E52vsrOXY8IAZow=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 21:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:04:1c:eb:38:51:ea:29:87:b5:96:6d:6f:0f:8a:31:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e Validity Not Before: Apr 5 04:02:06 2025 GMT Not After : Apr 6 04:02:06 2025 GMT Subject: CN=41173e974352577670bfb80ed3ea7cfe440a1f8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d3:0a:ea:e2:e4:86:48:25:67:5d:07:74:82: 78:21:f1:36:e9:cb:f2:e3:78:75:8e:47:d8:14:96: aa:28:fa:43:8c:fe:28:e5:4c:99:cb:82:80:f0:cb: 4f:89:6e:88:aa:62:7f:9d:ac:20:95:69:12:48:8f: 4f:10:67:4e:75:97:1d:0f:f9:f4:ec:65:ee:3b:ac: bd:75:17:bd:00:fd:14:23:8f:c9:a8:4e:ba:fa:b4: 9d:d1:bd:c1:ac:4f:d9:d3:a1:06:ae:fe:ca:7f:59: b2:2b:45:4b:87:28:87:5d:48:33:d6:4a:b7:fd:1f: 1e:18:04:10:f5:8b:ca:18:d5:2e:d8:bb:88:4f:cd: da:78:60:de:ea:9b:41:bc:8b:64:13:64:39:b3:b2: 81:60:62:aa:08:75:47:a9:b4:df:0f:84:9a:8f:cc: 1f:a9:9a:0d:5a:3f:37:93:44:45:fb:27:fd:2e:f0: 05:c4:7b:b1:21:11:6d:fe:7e:31:a2:09:54:1e:1f: f2:7e:34:47:a8:59:00:51:e9:c9:2a:2c:41:85:bb: 9e:73:cb:af:bc:10:c0:32:01:45:a1:8d:91:5e:86: 34:85:33:7e:a7:41:85:f7:33:0d:08:63:9c:b9:32: e4:09:a7:36:2c:95:6b:e5:bd:75:62:bf:ad:af:f6: 5f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:17:3E:97:43:52:57:76:70:BF:B8:0E:D3:EA:7C:FE:44:0A:1F:8B X509v3 Authority Key Identifier: keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:bd:f9:4a:a9:90:0e:67:a4:3b:26:41:54:b6:0c:60:49:25: a0:8d:fb:55:c4:ac:fc:88:0c:47:0b:c5:b2:3e:5a:a2:1f:cf: 64:0e:2b:6b:01:79:71:2f:c4:d0:78:80:75:27:ba:8c:87:cd: 23:9c:2c:72:ad:42:df:d8:15:a7:61:43:5d:c6:dd:5c:61:ab: d9:7e:eb:bf:7d:07:08:d7:05:13:b5:82:23:e3:64:1c:b4:0b: 64:0f:db:ee:f7:f2:ac:3e:d6:5d:77:3c:5d:00:3f:f3:9c:06: ff:c9:a2:48:ff:89:0b:17:e8:95:a3:1f:75:a8:fe:25:10:d6: c2:4a:bb:29:1c:39:9e:23:0a:15:ae:a3:59:ff:c6:d8:26:10: 3f:2e:2e:45:2d:fd:dd:bc:69:e2:3b:03:3e:f6:ce:74:4a:d8: da:98:b1:28:82:34:6c:ea:e9:99:c5:d2:b5:6a:70:30:19:63: ed:a4:80:29:d7:67:cc:1b:35:2b:c1:91:d3:29:de:0a:00:f7: bb:22:68:eb:85:75:5e:83:f8:49:2b:5a:e3:9e:62:8b:a9:59: 29:52:95:7a:cd:fa:cf:a6:d3:11:83:fc:19:11:30:c6:88:2a: 68:75:13:94:48:fe:6c:01:ba:89:dd:0d:bc:87:54:79:d7:c5: 73:12:3f:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYEHOs4Ueoph7WWbW8PijFJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy MGFlMmUwHhcNMjUwNDA1MDQwMjA2WhcNMjUwNDA2MDQwMjA2WjAzMTEwLwYDVQQD Eyg0MTE3M2U5NzQzNTI1Nzc2NzBiZmI4MGVkM2VhN2NmZTQ0MGExZjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dMK6uLkhkglZ10HdIJ4IfE26cvy 43h1jkfYFJaqKPpDjP4o5UyZy4KA8MtPiW6IqmJ/nawglWkSSI9PEGdOdZcdD/n0 7GXuO6y9dRe9AP0UI4/JqE66+rSd0b3BrE/Z06EGrv7Kf1myK0VLhyiHXUgz1kq3 /R8eGAQQ9YvKGNUu2LuIT83aeGDe6ptBvItkE2Q5s7KBYGKqCHVHqbTfD4Saj8wf qZoNWj83k0RF+yf9LvAFxHuxIRFt/n4xoglUHh/yfjRHqFkAUenJKixBhbuec8uv vBDAMgFFoY2RXoY0hTN+p0GF9zMNCGOcuTLkCac2LJVr5b11Yr+tr/ZfmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEEXPpdDUld2cL+4DtPqfP5ECh+LMB8GA1UdIwQY MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt MWRkZWM0Y2NlMjRjLzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM735SqmQ DmekOyZBVLYMYEkloI37VcSs/IgMRwvFsj5aoh/PZA4rawF5cS/E0HiAdSe6jIfN I5wscq1C39gVp2FDXcbdXGGr2X7rv30HCNcFE7WCI+NkHLQLZA/b7vfyrD7WXXc8 XQA/85wG/8miSP+JCxfolaMfdaj+JRDWwkq7KRw5niMKFa6jWf/G2CYQPy4uRS39 3bxp4jsDPvbOdErY2pixKII0bOrpmcXStWpwMBlj7aSAKddnzBs1K8GR0yneCgD3 uyJo64V1XoP4SSta455ii6lZKVKVes36z6bTEYP8GREwxogqaHUTlEj+bAG6id0N vIdUedfFcxI/dA== -----END CERTIFICATE-----Generated at Sat Apr 5 06:23:02 2025 by rpki-client