$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft File: 09VvB74YTLpS9v3ASegRTSYWwyo.mft (raw, json) Hash identifier: PNY1ZaAnUI+ymOtE7VtIXJTIdD4vMlTmJnMuoUPW2cg= Subject key identifier: 0F:94:93:08:4B:5C:01:FE:A8:CF:44:BE:5F:B4:71:68:BD:A9:37:8C Authority key identifier: D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A Certificate issuer: /CN=d3d56f07be184cba52f6fdc049e8114d2616c32a Certificate serial: 01963E791036848B5A41D462B580BEA7B829 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft Manifest number: 14F8 Signing time: Wed 16 Apr 2025 12:00:43 +0000 Manifest this update: Wed 16 Apr 2025 12:00:43 +0000 Manifest next update: Thu 17 Apr 2025 12:00:43 +0000 Files and hashes: 1: 09VvB74YTLpS9v3ASegRTSYWwyo.crl (hash: 8jpPTaP5gaijLv/cwQferzgqeG1qtOBUXt4XZPTt2PM=) 2: 4c68WXa89S9GaEZ3betWtfOynEI.roa (hash: fVAp1PUxEqPq1PXw46ujCE/Pw+4uzGlNeTIsndTtQ4g=) 3: 7kfcYNNoB5VB3-_80xlsWN3weyk.roa (hash: 1wJop1mQ6qBQDepGqT5ANO4tx0iRC5GqiIyWQqeZxiY=) 4: KidN7PJCXFwqwby4fVpHaeAhpFY.roa (hash: rFMoYmqrD8lR5TajeeUqUicyuRT28K2jKIN4IFZHnsU=) 5: Q0hrJvd7i8cfM3L6pUxrhnE1ZtE.roa (hash: hvO0OTnIGIVunaf7/zvrYJ2CBHE0j5nUl5E6OrK/DUM=) 6: RIPl0ZcnNzCRnoJoRMQdo7FatJo.roa (hash: V51bdAbDUbCCdG4ap1IngeKOzNBFdbTp51TPAvBkqrE=) 7: WgHSs4gRde9Esu_hc-x9rRmkPIU.roa (hash: +VkjckdDEgGwECvmTIytXqs9Few6AaepnvobAqBXX3M=) 8: eKmkaw2M8tueZ_tzxfDI9F6CNcc.roa (hash: fg34CUb41rhu+065E2VZ9qaIx2X2iqQ2jxGQO4GwQe4=) 9: pq2QS5SBDS3pAxrbz1jylBKYb1c.roa (hash: kdt9b8eHxviCcBXo3alD6ToqY7JvOLmYwFiRPu6twu8=) 10: tpxzfABwHA4uTKjODgtKlvT10t8.roa (hash: /uiIY+OMfjw8MyTKZlNYbS4i9kHVxO0uNCEe4Op3YPE=) 11: xz6DVtU3-Ra9kwVQS1hT5B1NgIk.roa (hash: L6obqobAUv8Kf3w8kISkegiNvXZC3M7YbdVJnQVDNRA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 17 Apr 2025 12:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:3e:79:10:36:84:8b:5a:41:d4:62:b5:80:be:a7:b8:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3d56f07be184cba52f6fdc049e8114d2616c32a Validity Not Before: Apr 16 12:00:43 2025 GMT Not After : Apr 17 12:00:43 2025 GMT Subject: CN=0f9493084b5c01fea8cf44be5fb47168bda9378c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0b:81:48:a1:c9:05:a0:f8:35:0b:fb:27:e3: 88:80:7e:28:4a:39:ff:40:b8:c2:db:b3:35:bf:b3: b1:7b:7b:bd:28:8d:fd:56:59:24:f1:ab:1a:31:1d: 9f:22:9c:78:c5:33:fc:f3:e8:d2:7e:71:05:8e:fc: 95:81:03:81:eb:71:13:0f:98:43:c9:b8:ec:ab:a4: 4d:9c:41:2a:d6:dc:f1:ed:f5:58:7d:39:03:d7:b9: 3b:fa:35:ef:6e:a6:1f:d5:9f:9c:88:32:52:c8:38: e0:c1:70:ee:8f:68:a2:c4:7c:28:61:40:6d:55:c4: 8f:d4:39:4c:f1:c5:80:aa:08:2c:aa:c1:46:87:5e: 12:29:9b:6a:df:22:3f:d0:ad:5f:42:2c:ba:7b:60: 20:08:c4:8b:52:c1:72:1b:92:bb:4a:a8:83:e4:cc: d4:59:2c:e6:9b:f2:28:af:56:19:2e:48:8d:99:9d: 98:c3:1f:c3:14:81:6a:51:85:b4:a3:62:9e:bb:33: 64:7c:a0:31:da:01:36:20:86:73:f2:d3:0e:1f:8a: 13:f1:4a:0a:63:0a:66:0c:20:72:9b:aa:8b:01:7e: 10:7a:e1:1a:5e:90:b9:b2:6a:99:10:33:8f:3b:0a: ba:06:05:6d:11:a8:d3:32:d2:36:35:d1:7b:cc:81: 0d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:94:93:08:4B:5C:01:FE:A8:CF:44:BE:5F:B4:71:68:BD:A9:37:8C X509v3 Authority Key Identifier: keyid:D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:63:3a:18:63:db:91:20:05:54:c7:9d:c2:75:2e:ce:c5:16: ce:51:51:fd:89:fc:56:9f:f4:4c:f8:dc:16:d3:95:0b:ce:12: dd:ef:0e:0e:c6:8f:c8:7d:6b:bc:7a:c0:c2:2c:8d:d7:f4:c3: 9c:c1:b0:16:61:98:46:c8:f9:1f:89:6b:b0:56:40:47:41:9d: 28:4b:c0:48:fb:4f:ce:fc:18:94:51:5f:bd:af:ff:ae:71:08: 2a:68:78:21:ef:f3:38:c4:ca:a8:1a:38:48:04:26:9a:30:22: ae:10:40:62:6f:29:84:23:32:e0:86:8a:f1:85:2f:7b:2b:ad: 44:ec:2e:69:6c:2c:59:c3:ae:3a:ba:62:c0:a0:f9:5b:3c:fd: e6:a2:1d:7f:69:c0:4a:fc:33:2f:7d:09:8e:d2:f9:0f:f1:ee: fa:d5:5f:c2:df:25:b5:5a:a5:9b:d5:e8:c3:89:5d:a8:c4:b2: 53:43:82:3d:1e:ff:ef:d4:41:50:8f:01:68:d6:93:d7:d9:6e: 65:6a:c4:ae:07:d4:01:4a:1b:5a:77:6d:36:59:39:c6:81:32: 79:65:78:ed:9e:9a:87:4f:75:99:be:5e:79:18:55:bf:1a:49: 3e:21:2e:64:a0:b3:dc:2c:ea:dc:e7:1e:19:b0:f9:d4:4a:15: cc:16:aa:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZY+eRA2hItaQdRitYC+p7gpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZDU2ZjA3YmUxODRjYmE1MmY2ZmRjMDQ5ZTgxMTRkMjYx NmMzMmEwHhcNMjUwNDE2MTIwMDQzWhcNMjUwNDE3MTIwMDQzWjAzMTEwLwYDVQQD EygwZjk0OTMwODRiNWMwMWZlYThjZjQ0YmU1ZmI0NzE2OGJkYTkzNzhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAuBSKHJBaD4NQv7J+OIgH4oSjn/ QLjC27M1v7Oxe3u9KI39Vlkk8asaMR2fIpx4xTP88+jSfnEFjvyVgQOB63ETD5hD ybjsq6RNnEEq1tzx7fVYfTkD17k7+jXvbqYf1Z+ciDJSyDjgwXDuj2iixHwoYUBt VcSP1DlM8cWAqggsqsFGh14SKZtq3yI/0K1fQiy6e2AgCMSLUsFyG5K7SqiD5MzU WSzmm/Ior1YZLkiNmZ2Ywx/DFIFqUYW0o2KeuzNkfKAx2gE2IIZz8tMOH4oT8UoK YwpmDCBym6qLAX4QeuEaXpC5smqZEDOPOwq6BgVtEajTMtI2NdF7zIENEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA+UkwhLXAH+qM9Evl+0cWi9qTeMMB8GA1UdIwQY MBaAFNPVbwe+GEy6Uvb9wEnoEU0mFsMqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYt MWIwNmQxYzcwNGMxLzEvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYtMWIwNmQxYzcwNGMx LzEvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo2M6GGPb kSAFVMedwnUuzsUWzlFR/Yn8Vp/0TPjcFtOVC84S3e8ODsaPyH1rvHrAwiyN1/TD nMGwFmGYRsj5H4lrsFZAR0GdKEvASPtPzvwYlFFfva//rnEIKmh4Ie/zOMTKqBo4 SAQmmjAirhBAYm8phCMy4IaK8YUveyutROwuaWwsWcOuOrpiwKD5Wzz95qIdf2nA SvwzL30JjtL5D/Hu+tVfwt8ltVqlm9Xow4ldqMSyU0OCPR7/79RBUI8BaNaT19lu ZWrErgfUAUobWndtNlk5xoEyeWV47Z6ah091mb5eeRhVvxpJPiEuZKCz3Czq3Oce GbD51EoVzBaq4g== -----END CERTIFICATE-----Generated at Wed Apr 16 17:29:43 2025 by rpki-client