$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft File: qFMQ9QMTeuizXU8yn0bwad1wOBU.mft (raw, json) Hash identifier: nZ5wsorPjFjlzo7J0UD2hp9dv7w3DZWEQFmgNPE+MDI= Subject key identifier: 72:C3:76:28:70:EF:EB:45:CD:E0:FB:29:8C:FC:AD:BB:34:25:F2:9B Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815 Certificate serial: 01960A8BECA9F1FD64CD14457B0730658A5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft Manifest number: 0CCB Signing time: Sun 06 Apr 2025 10:01:04 +0000 Manifest this update: Sun 06 Apr 2025 10:01:04 +0000 Manifest next update: Mon 07 Apr 2025 10:01:04 +0000 Files and hashes: 1: 45oKWJWNSoyMzWD0Kk8sRqagqHc.roa (hash: ZRiap7KBK/6F7WwTwhZKaIQBo6dyCPRAgO2PzUDFBBs=) 2: ATNXl5sMuCCQNc30c9l_cm0TcNw.roa (hash: JR8hJ7ucTtgcsP6vKnL9nV/ionD4rfzPRQrpuXEnEks=) 3: CFPX1ri2j5dVasAGgzMnoT-cOt4.roa (hash: XuiBdXxA9M8XJCfAqglXHp2+4b0MLMP/9FYtw4ETJG4=) 4: QRHTKN_AxXjbmDKFt4ozafbZWOw.roa (hash: vK+wvCTtBc+xdfzjCzcAglHcT6Ag6mWapdojkB+Av7Q=) 5: RzmJFM1w4lcKb-cMMQHxwOVwaGg.roa (hash: QwnOv7xt3IWs1L0a2mkMv12V+qGgnpTK/xFmjuXt76M=) 6: cD5IUm-EGBa-Vh255QRP5iyEl_s.roa (hash: /lOTEa3bqElIJJFu5D/6AmLfH6GyOP4ijF9uzNdORv0=) 7: eIw0eh3YEP-bYNeQocOrQeNT9Ho.roa (hash: BiNAvK+4yaYNt1bYkWd7/mgIyoOzJmL05f+bYFpnKTI=) 8: f8ajHMTtlNrrsyJRSeSaLdkgL4w.roa (hash: OG8Xhrawq0hNB4vX2mJ90g91tXyh7BGHjkXzp23NXFs=) 9: gHLoJSwOR2fIlfZQ84ZVB1QOa-c.roa (hash: SKoZJ8pTow2YG7a9sBl0MU1xTakkCXEyJHhzGygBuek=) 10: lrunxs8EBQWo1LhIzQdrw-3rbsE.roa (hash: 6Uc4XQPRY3dYjqUXjx+dcG63Gain6LYn70AV0wZhR+o=) 11: qFMQ9QMTeuizXU8yn0bwad1wOBU.crl (hash: l7G1NIHgA3TJu9870YNj/aZM4Avr036kbQYWdD4B5k0=) 12: qLwaQHbpLKR-VOFMsqI1Dr-brZQ.roa (hash: zu206w/6uZIZGZL13CES5xmLYzoUTsD6JgpbCtCYgq4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 07 Apr 2025 07:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:0a:8b:ec:a9:f1:fd:64:cd:14:45:7b:07:30:65:8a:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815 Validity Not Before: Apr 6 10:01:04 2025 GMT Not After : Apr 7 10:01:04 2025 GMT Subject: CN=72c3762870efeb45cde0fb298cfcadbb3425f29b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:47:3a:b6:46:79:18:fa:29:af:ab:cc:40:d8: af:b3:2b:42:f0:c4:c4:7d:81:4c:23:67:b2:7d:58: f6:22:89:71:08:a5:79:de:cb:65:aa:c1:3b:6b:8b: ef:79:82:0e:de:17:c8:63:26:2b:d0:4f:b2:d2:f1: 41:58:17:03:58:39:59:b9:a5:47:4b:78:69:6d:41: e0:5a:a6:9d:8f:4a:ad:de:55:aa:53:5f:fa:61:e2: 6c:85:67:e8:9f:62:c8:dc:0c:84:a4:a7:58:b0:f5: 27:8e:8d:49:5a:73:df:dd:22:73:ed:c3:52:7e:10: 30:39:37:a6:ca:44:23:84:61:e4:69:f1:05:0e:4e: cc:79:f9:12:d2:02:13:a3:b7:5c:56:a7:af:09:b9: 20:e2:a3:58:d3:39:b9:74:db:43:7f:2d:de:2b:51: 34:78:7c:39:47:85:9b:06:23:5e:18:92:bb:a8:a3: 00:ca:47:ff:c0:94:15:77:8b:e1:7d:89:1c:c3:b0: 81:5f:a6:3c:bc:2d:f8:f3:fd:83:6e:1c:e2:fa:7c: 26:54:36:c7:df:a3:37:19:11:b1:2e:12:12:a5:af: 20:46:9c:0d:13:eb:48:bc:b1:b7:d6:f1:da:03:aa: fb:29:a3:84:a4:a2:38:53:44:18:81:d6:e7:45:2a: 98:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:C3:76:28:70:EF:EB:45:CD:E0:FB:29:8C:FC:AD:BB:34:25:F2:9B X509v3 Authority Key Identifier: keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:a9:f6:59:5a:1c:47:9d:42:dc:2a:d6:5c:b6:ca:b7:76:13: 51:20:ee:7f:72:51:4e:3f:52:19:50:1c:48:0d:5d:be:38:55: a8:b3:4f:02:25:86:a8:71:49:fc:55:71:7c:2e:b6:72:5b:bb: e2:22:23:76:36:8d:57:a4:11:3b:3e:b7:96:c5:67:a1:61:ab: 65:4a:a0:dd:ed:ba:5b:9b:8f:f3:6f:b0:cc:3c:d5:32:ff:1c: 76:91:88:32:64:41:8b:b6:66:64:0f:9a:b6:d5:fd:8c:6c:d6: 9f:1e:9e:2e:7b:75:58:36:2a:95:0a:79:8d:1d:9e:64:d8:58: 3b:97:80:c2:cb:86:b8:11:3c:cb:c5:b4:7f:19:f8:4d:58:ad: 0e:91:aa:70:0a:dc:f9:9d:19:79:5f:36:aa:99:f3:de:8f:d2: 92:8c:02:2b:2d:b8:6f:06:82:3b:fe:92:5d:de:23:90:b4:d7: a5:48:19:ba:db:eb:36:8f:45:e2:2e:2a:7e:cc:8b:ee:57:45: ca:cf:22:6a:65:cb:4e:38:da:f5:c1:d3:e6:8f:bd:87:59:8d: cb:10:7c:0e:81:75:18:9a:a9:b6:ef:cf:58:b5:ea:e4:ea:c8: 2e:41:ee:71:3b:c5:a5:d2:ef:6d:76:28:a7:c9:25:9d:58:99: ee:5e:de:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYKi+yp8f1kzRRFewcwZYpbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NTMxMGY1MDMxMzdhZThiMzVkNGYzMjlmNDZmMDY5ZGQ3 MDM4MTUwHhcNMjUwNDA2MTAwMTA0WhcNMjUwNDA3MTAwMTA0WjAzMTEwLwYDVQQD Eyg3MmMzNzYyODcwZWZlYjQ1Y2RlMGZiMjk4Y2ZjYWRiYjM0MjVmMjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEc6tkZ5GPopr6vMQNivsytC8MTE fYFMI2eyfVj2IolxCKV53stlqsE7a4vveYIO3hfIYyYr0E+y0vFBWBcDWDlZuaVH S3hpbUHgWqadj0qt3lWqU1/6YeJshWfon2LI3AyEpKdYsPUnjo1JWnPf3SJz7cNS fhAwOTemykQjhGHkafEFDk7MefkS0gITo7dcVqevCbkg4qNY0zm5dNtDfy3eK1E0 eHw5R4WbBiNeGJK7qKMAykf/wJQVd4vhfYkcw7CBX6Y8vC348/2Dbhzi+nwmVDbH 36M3GRGxLhISpa8gRpwNE+tIvLG31vHaA6r7KaOEpKI4U0QYgdbnRSqY7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHLDdihw7+tFzeD7KYz8rbs0JfKbMB8GA1UdIwQY MBaAFKhTEPUDE3ros11PMp9G8GndcDgVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYt MzAxODlhNWE0ZWJhLzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYtMzAxODlhNWE0ZWJh LzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfqn2WVoc R51C3CrWXLbKt3YTUSDuf3JRTj9SGVAcSA1dvjhVqLNPAiWGqHFJ/FVxfC62clu7 4iIjdjaNV6QROz63lsVnoWGrZUqg3e26W5uP82+wzDzVMv8cdpGIMmRBi7ZmZA+a ttX9jGzWnx6eLnt1WDYqlQp5jR2eZNhYO5eAwsuGuBE8y8W0fxn4TVitDpGqcArc +Z0ZeV82qpnz3o/SkowCKy24bwaCO/6SXd4jkLTXpUgZutvrNo9F4i4qfsyL7ldF ys8iamXLTjja9cHT5o+9h1mNyxB8DoF1GJqptu/PWLXq5OrILkHucTvFpdLvbXYo p8klnViZ7l7eUg== -----END CERTIFICATE-----Generated at Sun Apr 6 12:45:55 2025 by rpki-client