$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft File: DdRBw_-ugphCJJ6USwOFEIH02eA.mft (raw, json) Hash identifier: 49QWGYWP7YO08/tWeJ2OJGrHhPtJ+CUxquwPtN6uBRk= Subject key identifier: D1:C6:7F:A2:9D:F0:4F:4A:1C:B2:DF:68:45:13:D7:CE:6D:A8:59:98 Authority key identifier: 0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0 Certificate issuer: /CN=0dd441c3ffae829842249e944b03851081f4d9e0 Certificate serial: 0196729D30612ADD22BA9868B23AF160D876 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft Manifest number: 0D7A Signing time: Sat 26 Apr 2025 15:00:26 +0000 Manifest this update: Sat 26 Apr 2025 15:00:26 +0000 Manifest next update: Sun 27 Apr 2025 15:00:26 +0000 Files and hashes: 1: 1-16UNdr39GQR6WgTD6_itgdgXrc.roa (hash: zJk3e0ik342Ah/cCpBqTYO3BgJOewuzuYG0mEAa3aYU=) 2: 60kez5E8tU1qx0TTvLpwwOmqJPM.roa (hash: ooRDWi6UfD8+CXLZ4F0Bs69z57BBzf7Yu441rhOqEKs=) 3: 9bAJqgVHnvRdYInB5oZXujQ5XoQ.roa (hash: qWJO+gO+X6NUIcqwJsrxmMcrEAIF+s1Wskr1UuY7rv8=) 4: CECuYLKJKay-_DTUpRvjJ6e9Xok.roa (hash: Bww9jwaRvi6o6HabYuvr08y2yEYkanNlup4j1yRDv98=) 5: DdRBw_-ugphCJJ6USwOFEIH02eA.crl (hash: 6TlUaOCzFTY2qb8VLhVmWGcrtPa9RBs2k+vxRrWvqmA=) 6: I1TR6PkHLqcK9JhqQozTxA2F8dM.roa (hash: pz5C+r8mg2AZGBZBVvOWJslEqCo+j9NeWY7YNXwFyuM=) 7: isGhiPrIPc7CYukDYcPX4YgodMI.roa (hash: yF67JZGe1yAdufc/s5j5+72AF3mRhIY4Nwz+CqDvDoY=) 8: kwXEh1Xh-2K2CVYqtcC-AT6Gb_U.roa (hash: dIfLEvdyhBW74zPx42unz5ShPnUU/ehc/8slF8xgQRY=) 9: rd8NnydFpZY9VMF7rki6mDfX1OE.roa (hash: Fdl4wWRM/i0XUBMw6ya79MvwrhVDeixQdqpTA/MdgWc=) 10: ub-f3sQpeZFIR7bmv9inv38i9hc.roa (hash: d/wCuYvq40CEhT6+Gf00rW0og+1XZHNfdNwE4g4ibIk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 11:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:72:9d:30:61:2a:dd:22:ba:98:68:b2:3a:f1:60:d8:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dd441c3ffae829842249e944b03851081f4d9e0 Validity Not Before: Apr 26 15:00:26 2025 GMT Not After : Apr 27 15:00:26 2025 GMT Subject: CN=d1c67fa29df04f4a1cb2df684513d7ce6da85998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:88:f3:c7:0d:05:24:3f:8a:c0:2a:be:b1:2d: 41:40:5c:1a:14:2a:92:59:39:5c:dc:51:1f:f2:b8: 2e:09:5c:de:c8:f9:99:f2:ba:e5:e7:4c:29:c7:b3: 0b:71:70:63:70:16:3d:1d:b7:7b:57:87:0e:fa:ee: 4e:a4:08:9f:70:e8:93:17:42:e0:46:de:a4:94:3e: 72:aa:5d:20:21:48:60:6d:f1:e3:ff:76:fd:b9:98: ce:c9:b4:ac:cc:73:df:d6:97:d7:04:d4:29:08:2d: c4:b2:2f:6b:22:af:84:ef:c9:bd:42:dd:65:52:9a: 4e:12:59:b2:78:c4:5b:d7:ef:bb:ee:01:b1:25:3d: d2:a5:d8:86:8b:de:f7:17:f5:12:21:89:95:2c:e5: ae:c5:4e:6a:ac:e0:f6:2c:2b:6c:e9:53:6a:74:19: 92:27:43:94:51:a9:e1:8e:53:e3:6a:a8:af:3b:10: 7f:2b:f5:e4:21:36:75:b8:2f:ef:4c:8c:6e:8e:2b: ff:2e:0e:62:cf:bb:7c:bf:ce:45:a3:d0:5e:ec:13: 0b:78:13:96:4f:b7:92:8b:65:7f:82:a1:04:a2:94: 6b:2f:f0:08:85:82:99:17:ef:29:18:59:ee:1a:1a: cc:a4:0a:86:07:e6:cc:7a:7b:b4:24:ef:21:6a:66: 70:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:C6:7F:A2:9D:F0:4F:4A:1C:B2:DF:68:45:13:D7:CE:6D:A8:59:98 X509v3 Authority Key Identifier: keyid:0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:c6:49:4c:85:44:92:dc:92:7f:c1:2a:a1:21:e3:06:b8:d2: 61:27:f1:bc:f4:59:ea:85:6f:c9:e3:2e:de:cb:93:5a:fc:44: 5d:2b:a9:56:72:b3:df:e3:e2:2b:ea:10:37:13:80:23:8c:06: 61:55:17:f9:a5:71:24:ca:59:5d:24:bf:11:8d:5c:0f:5c:78: 16:98:ea:5a:5d:c1:82:d8:4b:74:6f:79:fe:f9:44:a6:be:fa: f5:c6:75:50:40:ba:e1:e5:4f:8b:6c:86:53:da:92:d8:01:56: c9:32:bd:ba:4f:0b:ca:ab:13:e1:3d:ee:4a:33:5a:80:c4:a4: 8c:41:ee:6e:a2:df:66:53:10:7f:62:b6:f4:30:b4:9f:4b:96: 56:9b:07:a9:60:ca:82:d4:62:1b:b0:12:43:ad:db:1d:0e:00: 98:bc:d2:c5:b3:55:b3:a6:2c:ae:c5:4b:52:21:f7:b6:f8:78: 9f:f5:b6:9e:3b:f2:f6:02:8a:b4:ed:da:4f:69:9f:03:b9:62: 06:e6:41:ee:c6:27:57:08:35:e4:65:7c:12:7e:57:7b:c6:74: c3:aa:95:5f:f8:3b:16:08:d3:07:f4:75:e5:54:61:ef:be:c5: de:7d:b8:96:ad:31:30:4d:74:df:18:df:0f:ee:7c:d7:da:96: 4a:f0:1f:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZynTBhKt0iuphosjrxYNh2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZDQ0MWMzZmZhZTgyOTg0MjI0OWU5NDRiMDM4NTEwODFm NGQ5ZTAwHhcNMjUwNDI2MTUwMDI2WhcNMjUwNDI3MTUwMDI2WjAzMTEwLwYDVQQD EyhkMWM2N2ZhMjlkZjA0ZjRhMWNiMmRmNjg0NTEzZDdjZTZkYTg1OTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIjzxw0FJD+KwCq+sS1BQFwaFCqS WTlc3FEf8rguCVzeyPmZ8rrl50wpx7MLcXBjcBY9Hbd7V4cO+u5OpAifcOiTF0Lg Rt6klD5yql0gIUhgbfHj/3b9uZjOybSszHPf1pfXBNQpCC3Esi9rIq+E78m9Qt1l UppOElmyeMRb1++77gGxJT3SpdiGi973F/USIYmVLOWuxU5qrOD2LCts6VNqdBmS J0OUUanhjlPjaqivOxB/K/XkITZ1uC/vTIxujiv/Lg5iz7t8v85Fo9Be7BMLeBOW T7eSi2V/gqEEopRrL/AIhYKZF+8pGFnuGhrMpAqGB+bMenu0JO8hamZw7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNHGf6Kd8E9KHLLfaEUT185tqFmYMB8GA1UdIwQY MBaAFA3UQcP/roKYQiSelEsDhRCB9NngMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMt ZTljOTEzMjgzNmZmLzEvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMtZTljOTEzMjgzNmZm LzEvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGMZJTIVE ktySf8EqoSHjBrjSYSfxvPRZ6oVvyeMu3suTWvxEXSupVnKz3+PiK+oQNxOAI4wG YVUX+aVxJMpZXSS/EY1cD1x4FpjqWl3BgthLdG95/vlEpr769cZ1UEC64eVPi2yG U9qS2AFWyTK9uk8LyqsT4T3uSjNagMSkjEHubqLfZlMQf2K29DC0n0uWVpsHqWDK gtRiG7ASQ63bHQ4AmLzSxbNVs6YsrsVLUiH3tvh4n/W2njvy9gKKtO3aT2mfA7li BuZB7sYnVwg15GV8En5Xe8Z0w6qVX/g7FgjTB/R15VRh777F3n24lq0xME103xjf D+5819qWSvAfaA== -----END CERTIFICATE-----Generated at Sat Apr 26 20:31:29 2025 by rpki-client