$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft File: cG06u7R4t07yre-bt8QzbjQRHVE.mft (raw, json) Hash identifier: mWk3E7DMinGpD6uNMwGiu158P9JkF+MEMFjvDTBuUzQ= Subject key identifier: 11:88:C8:6D:03:04:B1:09:EC:04:A5:60:87:00:3D:C2:90:D4:2C:3E Authority key identifier: 70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51 Certificate issuer: /CN=706d3abbb478b74ef2adef9bb7c4336e34111d51 Certificate serial: 019672D3FD618F7ACB9D8F7395D6BBBB8289 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft Manifest number: 0EF3 Signing time: Sat 26 Apr 2025 16:00:17 +0000 Manifest this update: Sat 26 Apr 2025 16:00:17 +0000 Manifest next update: Sun 27 Apr 2025 16:00:17 +0000 Files and hashes: 1: 1-DdA-do2aUnfFDViNUxhUDqFzbE.roa (hash: BKYK/ZWsPHxxlNPF0PEHOjs0OjsXKAGuBICEBJN+sBU=) 2: KDjWBtfUWmvzACa57cUDNtkrdUA.roa (hash: /glLy7mZaGaTX2OWyQgPV2Cf31NNes0oBZbekJoIYok=) 3: PquNLopkqyd1FPkE6lVSuFZAhHk.roa (hash: cueg/ECXevtubCCHF8NReS6so4hgNR13sPfAmLWyFN8=) 4: SKahOuz63VxzF7gsfLLtP4-dwsQ.roa (hash: tgpfEWxbjIJhXJgvlYzjtjMs+efIHb2DWjDR4Pl22YM=) 5: cG06u7R4t07yre-bt8QzbjQRHVE.crl (hash: MpFijQTCZdAn0Db/3Ywh3s0Gilky4SRzqtOMOTefn04=) 6: dj7XdZh5KETFPQnDms3UxXnRXC4.roa (hash: EpSZ3YEAtJm35+lis2XvA9ik+aj1Kz53yBaF/oXDmdQ=) 7: mx_lz5ePGWdFvRNKMpVlzKIOYgA.roa (hash: g9PhpMZ1NQ6VmU7t7tiyo0S5wdLyY0k3bkBy2uqD7Q8=) 8: nq4bzy4h6lHvAq7WfQfvLT3Lcxs.roa (hash: AUW0hCwolQea98JTwSo4ol+MpnG7tQ7XKxKB7k262zg=) 9: pnzGJ4U9axy4lLwZnaehAwpRVaQ.roa (hash: rLQUf7uZTpB79YDcuBoB9yRmzU3aEUgIa9XP7frMy3M=) 10: rIEcC1yrrtWRE_-aC4aiNaHlF0w.roa (hash: RIIBfBGrMJNxseu/gjjvLy+xu6nPcaesVv59+v9lv30=) 11: wF16Isbo0PTlUouJULLf9fQs6Jw.roa (hash: ujnMHiwDZPQLz7IHlGLCJr2Hydzywx1acJmP/oG/nU8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 11:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:72:d3:fd:61:8f:7a:cb:9d:8f:73:95:d6:bb:bb:82:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=706d3abbb478b74ef2adef9bb7c4336e34111d51 Validity Not Before: Apr 26 16:00:17 2025 GMT Not After : Apr 27 16:00:17 2025 GMT Subject: CN=1188c86d0304b109ec04a56087003dc290d42c3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:18:28:bb:32:6e:89:0c:47:df:a1:e9:ac:40: 65:fc:f1:f9:d4:8b:cd:9d:24:47:98:da:19:46:76: 2c:cb:20:9e:13:4d:f0:91:40:86:f9:44:c7:bf:ea: e3:02:60:15:ed:49:d1:fb:80:af:30:1f:83:6b:41: 24:79:f4:69:ad:7a:d0:80:71:9a:a5:44:97:aa:07: 73:7e:0c:e8:40:19:4e:8d:a3:73:6f:fc:77:4d:3a: c5:43:62:c0:26:c7:0e:7d:0a:ac:95:48:ea:78:20: 9f:e9:7d:81:93:83:10:c7:77:17:68:f7:02:de:27: 24:3e:7e:46:ab:21:5a:c1:4f:b2:1c:ba:9a:71:11: ef:4f:b2:29:79:38:3b:84:28:10:d2:14:95:00:7e: ed:64:6b:94:58:3e:44:8c:b2:48:77:58:b0:e0:18: c5:fd:b9:3b:dc:7e:a1:08:d9:da:60:d3:82:d2:1c: be:d1:74:d8:36:ef:36:97:47:d4:50:40:fe:98:ce: a7:4a:c4:1c:24:32:64:46:bb:e3:11:c3:fc:c3:3f: 95:3c:a4:8b:88:3e:cb:a2:b0:bc:40:7f:9a:9f:f0: 74:e0:9b:44:ab:3b:a7:9c:55:95:c7:1c:42:b8:c8: 07:f9:03:bc:8c:ed:2c:06:9b:ff:fb:44:6b:f5:6e: d0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:88:C8:6D:03:04:B1:09:EC:04:A5:60:87:00:3D:C2:90:D4:2C:3E X509v3 Authority Key Identifier: keyid:70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:e2:ad:d2:d2:cc:df:20:26:1a:f5:b4:47:df:27:b1:7b:fd: 0d:d9:d6:b2:c0:d9:70:f4:4e:3f:96:f8:28:11:e3:97:69:49: 5d:65:89:4e:0d:dd:95:20:9d:98:52:b1:20:c9:b2:ea:cb:31: a3:2e:d5:cc:ae:0e:a3:99:c0:28:d3:15:00:72:e2:b8:ff:a8: 2f:eb:77:61:be:14:c4:f6:55:86:3e:d8:ab:4d:76:79:0c:15: 9c:65:8e:3f:40:1d:dc:f0:af:d3:fb:72:14:98:fd:95:eb:d6: 08:75:99:e2:72:de:7f:22:41:c9:45:2a:bb:0a:c0:d6:ad:65: bb:41:7c:4b:8a:9c:2d:21:e5:c7:55:f8:52:e3:d4:7f:4d:65: 94:35:a1:7d:e9:cf:d3:99:91:23:98:c8:16:13:21:48:10:b4: 60:67:58:75:a0:67:45:f8:01:80:0a:5d:b8:e8:0a:40:45:11: cf:c3:7e:7d:37:c0:35:e6:dd:2b:ad:3e:81:ec:f9:ff:c5:6b: 42:e2:93:25:7d:c6:33:a5:b5:5b:1c:20:3c:c0:7d:a1:77:3d: e7:9b:fe:73:fd:9f:ed:5b:bc:f5:1e:dd:c1:b6:d9:48:5c:05: a9:62:2c:95:06:42:d5:3e:76:ac:b7:71:cd:46:e5:68:02:43: fa:02:e0:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZy0/1hj3rLnY9zlda7u4KJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNmQzYWJiYjQ3OGI3NGVmMmFkZWY5YmI3YzQzMzZlMzQx MTFkNTEwHhcNMjUwNDI2MTYwMDE3WhcNMjUwNDI3MTYwMDE3WjAzMTEwLwYDVQQD EygxMTg4Yzg2ZDAzMDRiMTA5ZWMwNGE1NjA4NzAwM2RjMjkwZDQyYzNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRgouzJuiQxH36HprEBl/PH51IvN nSRHmNoZRnYsyyCeE03wkUCG+UTHv+rjAmAV7UnR+4CvMB+Da0EkefRprXrQgHGa pUSXqgdzfgzoQBlOjaNzb/x3TTrFQ2LAJscOfQqslUjqeCCf6X2Bk4MQx3cXaPcC 3ickPn5GqyFawU+yHLqacRHvT7IpeTg7hCgQ0hSVAH7tZGuUWD5EjLJId1iw4BjF /bk73H6hCNnaYNOC0hy+0XTYNu82l0fUUED+mM6nSsQcJDJkRrvjEcP8wz+VPKSL iD7LorC8QH+an/B04JtEqzunnFWVxxxCuMgH+QO8jO0sBpv/+0Rr9W7QbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBGIyG0DBLEJ7ASlYIcAPcKQ1Cw+MB8GA1UdIwQY MBaAFHBtOru0eLdO8q3vm7fEM240ER1RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0cwNnU3UjR0MDd5cmUtYnQ4UXpialFSSFZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wYzZmNDctNDcxMy00NDcxLWIwOGYt YTQyMTNjOTNmMWY3LzEvY0cwNnU3UjR0MDd5cmUtYnQ4UXpialFSSFZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy8wYzZmNDctNDcxMy00NDcxLWIwOGYtYTQyMTNjOTNmMWY3 LzEvY0cwNnU3UjR0MDd5cmUtYnQ4UXpialFSSFZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMeKt0tLM 3yAmGvW0R98nsXv9DdnWssDZcPROP5b4KBHjl2lJXWWJTg3dlSCdmFKxIMmy6ssx oy7VzK4Oo5nAKNMVAHLiuP+oL+t3Yb4UxPZVhj7Yq012eQwVnGWOP0Ad3PCv0/ty FJj9levWCHWZ4nLefyJByUUquwrA1q1lu0F8S4qcLSHlx1X4UuPUf01llDWhfenP 05mRI5jIFhMhSBC0YGdYdaBnRfgBgApduOgKQEURz8N+fTfANebdK60+gez5/8Vr QuKTJX3GM6W1WxwgPMB9oXc955v+c/2f7Vu89R7dwbbZSFwFqWIslQZC1T52rLdx zUblaAJD+gLgrA== -----END CERTIFICATE-----Generated at Sat Apr 26 19:53:59 2025 by rpki-client