$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft File: jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft (raw, json) Hash identifier: 9gOMHfMw3M0/25JLMWaiVkr24haqfToDq733/IV41lM= Subject key identifier: F6:6C:1B:FB:AB:1B:1A:F2:94:A1:B1:D7:DE:64:99:DE:A7:48:64:95 Authority key identifier: 8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24 Certificate issuer: /CN=8e626c909eb4951154bcee8221e43951b4257624 Certificate serial: 01967F0F8EE32B54BD5057B8EEEC9BD9A66E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft Manifest number: 0DFA Signing time: Tue 29 Apr 2025 01:00:48 +0000 Manifest this update: Tue 29 Apr 2025 01:00:48 +0000 Manifest next update: Wed 30 Apr 2025 01:00:48 +0000 Files and hashes: 1: 0JcOAjVYzD7ATTRTY6zM_FW7ibk.roa (hash: ae6zh695aCdxOBAb92vW9Mqs/ewqcDH7wayEClXo5lU=) 2: 1-Y2dKMtSX_HHImXALZ9Ywq-mBt0.roa (hash: 7qyTbmtwccyXrpltxd1wqJPnd+/MFLmBgiiCsu8AQkU=) 3: 2QTRX3rMARDGeCqwmM0inJSU1I8.roa (hash: JqKkV8sJ2151XjqigefJVjz+CjQivqO6Q6p2fwfafME=) 4: 7UYDYjcK9QG1kAzAVdRISMcK0fw.roa (hash: sob5MfrYBgiKx+YfOtoKRqwcLnr1PeTeNg0kII/WuRY=) 5: 9fRtydBjgnhbFaykZOo5uuxjF38.roa (hash: RH3Om+bNuUzjZrbi9dURSTYAb514YDgcJdJj7pg2lZE=) 6: EY7ogwruZGSD63obEpUnqn0nkuo.roa (hash: eHBlu7ijObgowuU+joBjfNNXkGVZmY2eT3u/EnffphU=) 7: HJWy01pqJrtg2Vo5SudbPdEEkd4.roa (hash: Vr6k9Sg54f+U5YuclxncYArpuGy+CEnoAy/c+X99oH4=) 8: IYKB-HSEiCq4O7HvrSnxClTqE4I.roa (hash: HbfqesX7Z3CjfGeH5MdNYm5FcZQ54JXRPRk/orWo/qA=) 9: PT8j9eHtg5ttD87ZTwg2GzdumEg.roa (hash: 6rQ85ph5sdL+xNggsMfKZpzXGn+sK3MhYgm3m97nS/I=) 10: ZlUjZQcl9nR0SUVxsgzMhtk30HU.roa (hash: RueFoN4i6RiouAbfwEgZPqUPq4WVTXhPv6TjG8c7n5M=) 11: _K57y8dAfTW_4za5nQ1yw_fKnZI.roa (hash: Rymw72FXGoLgMvCj/WyEf1Es/Ms+t2XEE94XwkN2BgM=) 12: aAifBze_JXbbUHJNy418NFONnUo.roa (hash: rLLARXHfwNDLekNJ80A4f1i0LwTr3pN9Pr1HKxuL2t0=) 13: fyVTS8KnNLJLAvMPXFhguHqf8wg.roa (hash: rK8pnbIqXHxeMFgFBrhTIo/gwpafsDBMMFa/tGIcB3c=) 14: g6TYrOiqfeY_zc4wZ63S9GaTHtA.roa (hash: McFJsvyZf/CJB69UHaeJLyOzFI33CZnDxz9asvMb9+k=) 15: hiMcEIjHUWN5FsB7VlVyAr5izXE.roa (hash: 6yVp6mlnWSD0tIxqmD2GQ7svu30uQXkMfzEBlI3SWXo=) 16: jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl (hash: GohtObE0RENA+WIHy5ocKfhMyiTZGdyrgZrLSphQCEE=) 17: mXX0pAjU5w8oM8Kw23jhrgx4Wvk.roa (hash: sc8dapOFwgxs0Xrg6eWIDXxwfzY184TsGMxeq92yyGI=) 18: o0ZwaYj89qD05J13n0pZ23X4IIA.roa (hash: Y8iKBwsONnOxQpFezT8Qy8hc9RHNcwVnuvC+XOuLtNY=) 19: ySGM40xeAZyu32ERIMnkJoio4hw.roa (hash: w5mMTd2fQSF1PurNOaDTdU1aGhD+Vitko+NZO/EWYYQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:7f:0f:8e:e3:2b:54:bd:50:57:b8:ee:ec:9b:d9:a6:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e626c909eb4951154bcee8221e43951b4257624 Validity Not Before: Apr 29 01:00:48 2025 GMT Not After : Apr 30 01:00:48 2025 GMT Subject: CN=f66c1bfbab1b1af294a1b1d7de6499dea7486495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2c:e9:92:ea:ad:b0:aa:bb:0e:53:33:32:80: 22:2d:69:24:b4:68:30:f6:04:96:bb:f8:cd:97:5b: 4d:0f:6b:46:af:d3:79:88:6d:0d:20:75:08:f5:1e: 57:55:a5:9b:f6:62:da:7f:27:d6:ab:e5:25:ff:a1: 89:53:f5:8c:1e:d7:4a:ad:01:a7:9b:60:af:90:6b: 73:ca:8a:10:83:b1:de:4d:ec:5c:25:73:28:e6:50: e4:78:35:04:5e:e0:8b:90:fe:bb:ba:79:bc:7f:5e: de:2c:72:e1:3b:d8:5d:2d:ee:a8:23:e8:81:37:62: 5d:75:a3:19:f6:12:de:a4:f5:aa:a1:44:de:b0:11: 19:3d:9f:54:3b:ae:c3:43:4d:db:29:76:fd:03:91: 07:52:60:b7:f3:2e:7e:b0:05:1f:62:e6:2c:05:4f: 0c:1c:f4:c9:f3:04:38:85:55:51:8a:e2:2f:3c:2f: a5:cf:71:09:85:10:22:0c:51:c6:e5:58:79:8a:99: f2:88:aa:97:a2:f2:2e:e2:b0:6f:d9:e5:0f:4a:fb: 9e:f2:df:83:f9:06:f9:4b:77:88:06:8d:b9:3e:1a: 06:cb:c2:e1:d0:4d:42:68:6f:53:f4:9c:de:81:eb: a0:11:7f:4a:43:d1:d9:5b:1a:95:78:3f:b5:db:97: e4:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:6C:1B:FB:AB:1B:1A:F2:94:A1:B1:D7:DE:64:99:DE:A7:48:64:95 X509v3 Authority Key Identifier: keyid:8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:79:9f:9e:3b:12:d2:98:73:e6:72:f3:a8:4e:30:b5:6b:d4: 38:65:28:2c:87:fa:a4:12:3f:d7:db:7a:73:14:88:2e:f0:58: 85:6f:93:67:e9:77:3d:a5:8d:76:8e:09:5f:a3:e0:b1:c7:a5: 25:b7:ad:1e:38:ff:4d:46:f7:78:cf:eb:ba:6e:8f:58:96:28: 2d:eb:3b:59:74:01:52:14:15:a0:5d:a3:b2:5d:47:5e:ac:a9: 09:71:cd:f7:4f:d9:ec:4c:06:7f:a1:9f:cb:11:93:26:c3:87: 6d:ee:64:ba:ea:cd:94:6f:6b:07:b4:2b:d6:e7:dc:c5:7f:29: fa:59:f7:39:c4:bc:bb:1f:90:ad:02:9d:ab:9d:9e:8c:34:08: 14:d2:b4:5a:e4:57:e4:21:92:d5:b3:81:f3:84:8e:4b:cf:8b: 32:39:8c:73:a3:f0:eb:27:36:47:1e:d2:5f:77:f5:aa:df:7e: c3:30:54:f1:dc:72:05:87:55:60:bf:a6:de:26:ef:5e:9b:f3: 37:50:e9:15:ec:52:24:ee:7b:27:25:03:13:dc:f7:83:92:40: 54:d6:4f:40:b5:29:d0:ce:f5:d7:4a:60:ac:af:cc:84:f3:13: a9:82:6e:45:dd:dd:51:4e:27:bc:06:73:d0:a6:02:1b:93:5e: 1e:c8:b6:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ/D47jK1S9UFe47uyb2aZuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNjI2YzkwOWViNDk1MTE1NGJjZWU4MjIxZTQzOTUxYjQy NTc2MjQwHhcNMjUwNDI5MDEwMDQ4WhcNMjUwNDMwMDEwMDQ4WjAzMTEwLwYDVQQD EyhmNjZjMWJmYmFiMWIxYWYyOTRhMWIxZDdkZTY0OTlkZWE3NDg2NDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSzpkuqtsKq7DlMzMoAiLWkktGgw 9gSWu/jNl1tND2tGr9N5iG0NIHUI9R5XVaWb9mLafyfWq+Ul/6GJU/WMHtdKrQGn m2CvkGtzyooQg7HeTexcJXMo5lDkeDUEXuCLkP67unm8f17eLHLhO9hdLe6oI+iB N2JddaMZ9hLepPWqoUTesBEZPZ9UO67DQ03bKXb9A5EHUmC38y5+sAUfYuYsBU8M HPTJ8wQ4hVVRiuIvPC+lz3EJhRAiDFHG5Vh5ipnyiKqXovIu4rBv2eUPSvue8t+D +Qb5S3eIBo25PhoGy8Lh0E1CaG9T9JzegeugEX9KQ9HZWxqVeD+125fkIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPZsG/urGxrylKGx195kmd6nSGSVMB8GA1UdIwQY MBaAFI5ibJCetJURVLzugiHkOVG0JXYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam1Kc2tKNjBsUkZVdk82Q0llUTVVYlFsZGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9mZTQyNjYtN2Y1NC00ZmIzLWI4MTAt ZTk3ZDFkMDIyMGFmLzEvam1Kc2tKNjBsUkZVdk82Q0llUTVVYlFsZGlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9mZTQyNjYtN2Y1NC00ZmIzLWI4MTAtZTk3ZDFkMDIyMGFm LzEvam1Kc2tKNjBsUkZVdk82Q0llUTVVYlFsZGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOHmfnjsS 0phz5nLzqE4wtWvUOGUoLIf6pBI/19t6cxSILvBYhW+TZ+l3PaWNdo4JX6Pgscel JbetHjj/TUb3eM/rum6PWJYoLes7WXQBUhQVoF2jsl1HXqypCXHN90/Z7EwGf6Gf yxGTJsOHbe5kuurNlG9rB7Qr1ufcxX8p+ln3OcS8ux+QrQKdq52ejDQIFNK0WuRX 5CGS1bOB84SOS8+LMjmMc6Pw6yc2Rx7SX3f1qt9+wzBU8dxyBYdVYL+m3ibvXpvz N1DpFexSJO57JyUDE9z3g5JAVNZPQLUp0M7110pgrK/MhPMTqYJuRd3dUU4nvAZz 0KYCG5NeHsi20g== -----END CERTIFICATE-----Generated at Tue Apr 29 07:49:05 2025 by rpki-client