$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft File: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft (raw, json) Hash identifier: 3U20AuPkWkN0+ALnYHUERqu2w3YKxsZ5r8vn2wKHfmo= Subject key identifier: B8:FF:55:01:36:AA:31:76:54:47:7C:5A:20:16:72:F4:C7:AD:AB:BF Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Certificate serial: 0196029BDD1A992562B560EA0085BD899FEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft Manifest number: 0D15 Signing time: Fri 04 Apr 2025 21:01:31 +0000 Manifest this update: Fri 04 Apr 2025 21:01:31 +0000 Manifest next update: Sat 05 Apr 2025 21:01:31 +0000 Files and hashes: 1: 1333qp73ruq7A2nSo9kOVQ7ZzE0.roa (hash: JX94IngnG5jgwt/Et193zGmN4IyvZ77gInsz4D23C18=) 2: 72ompPbzpmnzneIjTtp_bgxv8to.roa (hash: aazsmeYdXGvcDu68YTmlm+z5hJVBvjGJrpJeAcUoELg=) 3: 89lMNrhD2F5x0Ke_v2bBXPEQYgU.roa (hash: K5oebEL4UYGbpI6omznf50HWdMyeoL9B3ezd2prsxV4=) 4: E_3-qae-50qWA7R56c8VnNml0ZU.roa (hash: nkgMixGbN46lHgT97kcU8QjXRmEi7iabVPw78zf1uq4=) 5: EoqOLJZzdQ3i-M95BH6ZqX7Pq-o.roa (hash: a3yd5mlm4a54YbLPpH0dQXH+MNyJ+T7A5cQjTmvitXU=) 6: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl (hash: 4dIpsxu6wZd575Fv3M5E7fJopF21tdzhxDJ+tq6+HUY=) 7: J8otkOOOFhMQcKskyfSet45vpaA.roa (hash: OKOZ6+uREzTIvRtmYWOfCPq5FGMam+EbPwErDVD6eGc=) 8: dPBOUNuMluSVUVsbkWd3r_lebgU.roa (hash: pOELbtPhwT+Xz573ShVJg/36cMfG9CcY6YmD29hT1jk=) 9: h4WPx1Sgez5mjA1QOYWXTeKaf6I.roa (hash: j0LdK7x2Tf65HMuHIG0cj+mnli0iJ+gVK8H+vxjuT5g=) 10: m6IyPWEEbbAvvvSNw5JH6euTQ7A.roa (hash: 06SutFrXFPpCbXeexyGeEPlk43CPE0aY99qdVjAphr0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 19:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:02:9b:dd:1a:99:25:62:b5:60:ea:00:85:bd:89:9f:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Validity Not Before: Apr 4 21:01:31 2025 GMT Not After : Apr 5 21:01:31 2025 GMT Subject: CN=b8ff550136aa317654477c5a201672f4c7adabbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ab:63:00:65:96:02:26:c4:9b:e6:bb:0b:56: 03:88:ee:06:94:02:88:46:93:84:4d:08:77:37:1a: 78:9b:ea:f5:9a:da:37:94:69:5c:34:c2:f5:79:74: df:3a:c1:ff:7a:fb:ac:9c:f1:b3:c8:e6:98:86:b4: c6:f2:a4:d9:e2:82:e9:e9:4c:1e:1d:75:17:e8:40: 42:2f:ef:1c:44:ca:c2:a4:1a:2a:ef:78:0e:cf:59: 7c:f1:9d:85:32:4e:22:25:70:b7:cd:49:8d:ca:53: 90:51:f8:33:54:cc:ba:5c:3d:7e:e8:72:90:8e:14: 92:17:d1:7d:fb:b8:dc:17:fe:c4:09:74:88:fc:cd: a2:f8:cd:64:af:f9:40:cc:ff:cf:5f:6c:3a:c0:94: 83:1b:17:6e:d3:6b:5f:de:89:47:e8:7f:cb:5c:79: 12:8d:c6:f5:71:ea:db:4a:55:7d:1f:85:9b:1a:c9: 95:20:8c:92:9c:54:5c:6c:90:0a:ed:0d:d7:4b:0c: f6:f7:9f:24:4c:e4:51:e1:88:a8:90:46:86:94:20: 62:94:71:94:cb:66:d9:3a:fd:7a:a4:d5:be:a7:5e: 64:ae:7e:a8:a9:07:2c:d9:92:1a:01:ad:df:a3:f1: 30:d5:7d:c5:40:8b:d0:49:e8:09:1c:a5:91:ac:9f: 98:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:FF:55:01:36:AA:31:76:54:47:7C:5A:20:16:72:F4:C7:AD:AB:BF X509v3 Authority Key Identifier: keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:f3:ee:75:13:b0:69:54:ce:42:ae:6d:34:65:dc:06:43:8b: 39:21:47:9c:f6:71:59:7a:03:c9:85:5c:8f:44:17:00:57:67: 17:f2:7e:a8:d1:a7:b0:ad:cf:c2:03:37:0e:84:a8:da:88:49: d6:23:5a:af:65:f8:25:32:99:a5:1d:e9:de:53:b3:42:35:99: ab:ee:b6:00:8b:03:bd:15:da:90:28:8a:c6:82:39:e6:98:f4: dc:b3:1a:da:bb:0e:33:a0:2c:98:ae:83:4f:e8:88:17:af:92: 1c:fe:50:20:29:0c:67:fe:fb:7f:cd:71:89:5c:4a:7e:31:c2: b6:1d:f7:c0:83:23:3d:6b:0a:42:0c:cb:b4:9d:23:52:81:4a: 0a:db:b9:6d:8c:d5:3b:9a:47:11:41:b3:21:2e:67:b2:b5:97: ae:d5:2e:93:d4:a0:0d:d1:4c:24:44:1f:58:83:f3:e9:ca:1f: d4:04:96:b6:72:9b:ef:76:89:e7:9d:47:41:57:2c:a3:5b:63: 50:e8:ef:6f:55:9a:c2:91:64:47:01:ad:fd:a9:07:88:f1:03: 54:b1:2c:8b:db:5a:81:1f:8b:c7:67:53:6a:ef:bc:69:b5:63: 01:ab:12:79:07:c0:b9:2d:8e:a3:ff:d4:d2:60:f8:4c:01:dc: 9f:c8:41:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYCm90amSVitWDqAIW9iZ/rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhN2YwMzZlMjU5MjM5MWZiNDVhM2RkMzNjYWYwYjA3OTU2 OTczY2YwHhcNMjUwNDA0MjEwMTMxWhcNMjUwNDA1MjEwMTMxWjAzMTEwLwYDVQQD EyhiOGZmNTUwMTM2YWEzMTc2NTQ0NzdjNWEyMDE2NzJmNGM3YWRhYmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKtjAGWWAibEm+a7C1YDiO4GlAKI RpOETQh3Nxp4m+r1mto3lGlcNML1eXTfOsH/evusnPGzyOaYhrTG8qTZ4oLp6Uwe HXUX6EBCL+8cRMrCpBoq73gOz1l88Z2FMk4iJXC3zUmNylOQUfgzVMy6XD1+6HKQ jhSSF9F9+7jcF/7ECXSI/M2i+M1kr/lAzP/PX2w6wJSDGxdu02tf3olH6H/LXHkS jcb1cerbSlV9H4WbGsmVIIySnFRcbJAK7Q3XSwz2958kTORR4YiokEaGlCBilHGU y2bZOv16pNW+p15krn6oqQcs2ZIaAa3fo/Ew1X3FQIvQSegJHKWRrJ+YWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLj/VQE2qjF2VEd8WiAWcvTHrau/MB8GA1UdIwQY MBaAFBp/A24lkjkftFo90zyvCweVaXPPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2It MzQwZDYyNWM2ZGJhLzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2ItMzQwZDYyNWM2ZGJh LzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArPPudROw aVTOQq5tNGXcBkOLOSFHnPZxWXoDyYVcj0QXAFdnF/J+qNGnsK3PwgM3DoSo2ohJ 1iNar2X4JTKZpR3p3lOzQjWZq+62AIsDvRXakCiKxoI55pj03LMa2rsOM6AsmK6D T+iIF6+SHP5QICkMZ/77f81xiVxKfjHCth33wIMjPWsKQgzLtJ0jUoFKCtu5bYzV O5pHEUGzIS5nsrWXrtUuk9SgDdFMJEQfWIPz6cof1ASWtnKb73aJ551HQVcso1tj UOjvb1WawpFkRwGt/akHiPEDVLEsi9tagR+Lx2dTau+8abVjAasSeQfAuS2Oo//U 0mD4TAHcn8hBvA== -----END CERTIFICATE-----Generated at Sat Apr 5 02:30:23 2025 by rpki-client