$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft File: C047O4QkIliGMULtOhl5LZfLvHQ.mft (raw, json) Hash identifier: tLZq6YsMVnAvrBNDKywmUw7E5gIYt3aFez2iG2zP5xU= Subject key identifier: 24:BF:72:E3:F5:58:76:D2:7D:C4:95:A1:AE:30:67:56:45:D4:83:3C Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Certificate serial: 019687DBE1A9EBDBF1496A936F5FAFC71E6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft Manifest number: 01DC Signing time: Wed 30 Apr 2025 18:00:56 +0000 Manifest this update: Wed 30 Apr 2025 18:00:56 +0000 Manifest next update: Thu 01 May 2025 18:00:56 +0000 Files and hashes: 1: 4EVIucA70gYtRBC_kvd8S_jO4G4.roa (hash: f24fNYbERcDJzGGGVxLcXRg46QfyX7NJWLWSxrMNmcw=) 2: 8Ea-ECQ4nO9Jjj-bMNDkrko4PoI.roa (hash: 5s3ZUOqG9C8dDa/J6xo03C1zVsvaDCu2fOUW+68glug=) 3: BEBIiS8kF8YsGnU_xtcNUlRLrD4.roa (hash: jOHIlKdvXIgJGWM14XmaB7UsAMXtqbb4a2RVgY2if5A=) 4: BjqTHtTtBtZx2Y5CozNWD3CEBt0.roa (hash: eW/XcbSH0tDYIAlNaQxhj837cfdUxkfKds65F/54mgM=) 5: C047O4QkIliGMULtOhl5LZfLvHQ.crl (hash: qQf9/QEA3XaCY8StEeSh2mivhZX3pW4HJ8c36Ev8Gmw=) 6: EvZmdpYLd03WERL_L0i0mrtj944.roa (hash: CV2qEuFjtfL/Sdsin89UXRGI8h47pjbkcQWbmiCWOHY=) 7: H49hyQPEQJXxJVi2iR8A2ADQ41U.roa (hash: eqi7i//uHcpOg1OfB0kupkpo9kTQKxZE6a6NNvU+Pyg=) 8: LWsi3KmW8bzkCxEOXVP0T6JNl74.roa (hash: ++a3kmsuF/zJu9wF6l25AqVnQ10r4JeQqeeIizqUJQ4=) 9: _sI3gk2hZDn41-4NfzG0rDsgjws.roa (hash: GJeNAr5zzIi7APfhQYD6zR5b4f6TKUkgkI8dhjWpt4s=) 10: b7g_AfGKRKl1uxe-BoiQM3sl0nw.roa (hash: Zf9ZuQPGxN3TX6S4uzmoIy9WChIwMZZm6ZNHezb6N+U=) 11: bCaBS4aQHjuaa_tTVMTRXq8OR_U.roa (hash: 7H4q9uVHSlMkwQO5xRA3Q4nmZoDkIn1SJmtZoSSXixQ=) 12: sbkxRvSrfQGNdpGANqUogURHroU.roa (hash: GVO8i7AC/aFii+I0dhy+QGbxHH4AqRNBV/o41DJJYK4=) 13: uSB4Q9lZ5N_vUTK7fY2jb9w2g4Y.roa (hash: br5Lt3idKAa3r0A/AYPd7r0VCPVHp7gxtlokiM1B+jU=) 14: uuTcIhmMVylXKoo0d8I18SaHjWU.roa (hash: a8ZKg1ASt06tQrhILg7SaB6+2r8ufbJSPrndEQoQ7X4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 May 2025 13:16:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:87:db:e1:a9:eb:db:f1:49:6a:93:6f:5f:af:c7:1e:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Validity Not Before: Apr 30 18:00:56 2025 GMT Not After : May 1 18:00:56 2025 GMT Subject: CN=24bf72e3f55876d27dc495a1ae30675645d4833c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b2:da:d3:b6:e1:fe:8e:73:4d:f8:76:43:ad: 1b:9f:98:e5:0c:43:f8:44:b7:df:63:96:b4:63:f6: d0:e6:5c:0f:d8:6c:26:d0:49:f5:86:ea:1c:fe:17: b7:ac:45:4b:09:62:54:c7:dc:39:a4:fc:37:4b:f4: d6:3f:8a:86:9d:52:19:17:c1:a0:c0:ce:e2:51:87: a4:a4:d4:e5:64:05:04:a7:db:1e:05:fe:58:63:39: 07:3a:3c:87:06:90:27:14:11:89:d8:d3:e3:eb:d4: 03:12:78:38:69:22:a2:77:55:19:d3:cb:91:98:b7: 7f:d3:c4:43:a9:eb:46:25:ae:dc:13:79:5d:c4:3a: 7f:84:fa:50:7a:5d:34:8f:31:3b:da:7d:42:15:d0: de:a0:b6:91:bf:8a:34:d1:fd:88:f8:f6:8b:41:dd: ce:c1:d6:9b:21:f8:a1:0e:ef:47:ae:44:9f:61:3f: 0a:70:40:af:0f:54:cd:36:0c:ea:2b:d2:dc:63:30: 76:85:3c:3f:83:21:b8:57:3c:92:f5:ff:99:ed:dd: cc:97:d6:23:ab:69:85:18:93:23:80:e9:6f:de:07: ab:71:07:e2:ef:94:46:e2:1b:aa:15:c3:6c:56:a5: 36:59:43:3d:be:bb:ba:e9:9c:fc:5b:3c:be:56:88: 9d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:BF:72:E3:F5:58:76:D2:7D:C4:95:A1:AE:30:67:56:45:D4:83:3C X509v3 Authority Key Identifier: keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:08:58:06:25:2d:fb:80:d2:c5:78:77:6e:a5:b4:18:48:9c: 23:ae:1e:87:56:d0:24:87:c3:c2:48:84:42:92:eb:a4:dd:1e: e2:c6:12:29:f4:b2:18:e4:a8:db:5c:7e:15:f3:24:65:d2:d8: 3c:11:39:52:f7:91:8e:37:c9:bf:84:5f:f5:45:b4:8e:de:f1: 5f:b3:b0:d8:82:6d:61:f8:73:69:92:22:91:47:0f:f8:ac:e1: 03:dd:1d:8c:96:96:f0:5e:26:a0:8d:5d:d6:77:b9:29:88:a6: 0c:0d:a0:03:ee:59:75:70:f2:ed:a2:8c:46:fd:d7:f8:7b:43: cd:97:93:70:92:d0:7c:6b:96:33:99:cd:3f:59:a6:41:a3:34: 8b:a4:c4:7b:e5:c9:a2:c8:62:e0:8d:e4:89:5c:e5:f1:1f:94: af:dc:b2:be:a4:30:5f:c6:2a:f3:1a:19:dd:a2:47:27:f0:33: 9b:31:ff:10:df:54:f5:38:3d:d3:6e:b4:12:52:d4:57:28:39: 92:f1:7f:cb:c4:16:e0:ff:ad:17:07:ef:02:a8:68:01:09:37: e1:e3:b2:12:27:06:23:1c:f8:e7:46:fd:1d:82:ce:b5:11:c4: 55:bf:ba:52:94:27:39:8e:d8:0e:7b:68:8b:31:e9:5f:af:9f: cb:d2:9c:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZaH2+Gp69vxSWqTb1+vxx5rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj YmJjNzQwHhcNMjUwNDMwMTgwMDU2WhcNMjUwNTAxMTgwMDU2WjAzMTEwLwYDVQQD EygyNGJmNzJlM2Y1NTg3NmQyN2RjNDk1YTFhZTMwNjc1NjQ1ZDQ4MzNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bLa07bh/o5zTfh2Q60bn5jlDEP4 RLffY5a0Y/bQ5lwP2Gwm0En1huoc/he3rEVLCWJUx9w5pPw3S/TWP4qGnVIZF8Gg wM7iUYekpNTlZAUEp9seBf5YYzkHOjyHBpAnFBGJ2NPj69QDEng4aSKid1UZ08uR mLd/08RDqetGJa7cE3ldxDp/hPpQel00jzE72n1CFdDeoLaRv4o00f2I+PaLQd3O wdabIfihDu9HrkSfYT8KcECvD1TNNgzqK9LcYzB2hTw/gyG4VzyS9f+Z7d3Ml9Yj q2mFGJMjgOlv3gercQfi75RG4huqFcNsVqU2WUM9vru66Zz8Wzy+VoidaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCS/cuP1WHbSfcSVoa4wZ1ZF1IM8MB8GA1UdIwQY MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt MTRkMjM4NTI3ODM1LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1 LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuwhYBiUt +4DSxXh3bqW0GEicI64eh1bQJIfDwkiEQpLrpN0e4sYSKfSyGOSo21x+FfMkZdLY PBE5UveRjjfJv4Rf9UW0jt7xX7Ow2IJtYfhzaZIikUcP+KzhA90djJaW8F4moI1d 1ne5KYimDA2gA+5ZdXDy7aKMRv3X+HtDzZeTcJLQfGuWM5nNP1mmQaM0i6TEe+XJ oshi4I3kiVzl8R+Ur9yyvqQwX8Yq8xoZ3aJHJ/AzmzH/EN9U9Tg90260ElLUVyg5 kvF/y8QW4P+tFwfvAqhoAQk34eOyEicGIxz450b9HYLOtRHEVb+6UpQnOY7YDnto izHpX6+fy9KcZA== -----END CERTIFICATE-----Generated at Wed Apr 30 19:51:17 2025 by rpki-client