$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft File: uw1OhZN7eg8nEFTShhTyk01OpQA.mft (raw, json) Hash identifier: 3kHBShuOeDmRuMBPWb4t3usrptmflaoi5iwxvSMGmBk= Subject key identifier: 3B:8C:28:29:75:65:66:93:70:10:18:90:87:B1:32:78:0F:5B:BD:4F Authority key identifier: BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00 Certificate issuer: /CN=bb0d4e85937b7a0f271054d28614f2934d4ea500 Certificate serial: 019670E5CEB6CD404A53606F36D778E00525 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft Manifest number: 1526 Signing time: Sat 26 Apr 2025 07:00:30 +0000 Manifest this update: Sat 26 Apr 2025 07:00:30 +0000 Manifest next update: Sun 27 Apr 2025 07:00:30 +0000 Files and hashes: 1: 3RRxCGORhxJUfcVq4tpq0XZragY.roa (hash: y6TouJV1sDEJ98HnKmVFWXfBdYGdQF1hzAEK2639To8=) 2: GYodMieh8Gfbfq2hLI5KhvEaFHY.roa (hash: CZAsAUa04Szvy+CPZOLDpgA58sS4VlmBo7Rcp6UE57A=) 3: JkWwBURcFGhQXBTXcyXYeBLRT88.roa (hash: nL/v19wxGJvKXuA4YZlDQPHgwxgDJO16wPSvgDXWLog=) 4: LjPTtXACZzIXUrAHmmcGaTSoJX0.roa (hash: hU58ToAOVO8bZ1ShSsstYoflDj5E/scFC015sKbb9KM=) 5: NQcZZcex_ckVBDVfUO9h5l4bn_0.roa (hash: sFlT0ZyQmXGdOwtr2nIXrN6+TeuiCTpZ+teimAOiato=) 6: SC-XsxdAgu2J1rxvQLaYfHoW1SE.roa (hash: 5FD3bfkZCZGPoE+1Wlr2La0Az/eQkkz+JwW46jnyGyE=) 7: ZWty-mG4ns1IWiuKTeqfUnMX6z0.roa (hash: Fdt1PMb3TrWbP6jCMcLY62qFNJsdx5gYRel9cuxCKcY=) 8: anCAVFrU6QU0WXm-Tf9Rgd2lCjk.roa (hash: o4eJwkX3D001t3lWuQpnvXZPwiotWwCUXp0dU8d6pBU=) 9: jHTP33yl1wRqWX8GtFt4mY-Ujqk.roa (hash: ZmeIR/HiMPo2cRoFPWUYH8GvupvDGcgqNg9sL2L7rpM=) 10: uw1OhZN7eg8nEFTShhTyk01OpQA.crl (hash: D3UCWJcLC3d5yLTd6bt/kle4LmgfMlMerVka+T/VuQ8=) 11: zDiDdQidrsVi9EGom3KTj1C2EMU.roa (hash: gTHzGIwoR29tUryXTFuhCmFlurDWmdDpwhItmXV0euE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:70:e5:ce:b6:cd:40:4a:53:60:6f:36:d7:78:e0:05:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb0d4e85937b7a0f271054d28614f2934d4ea500 Validity Not Before: Apr 26 07:00:30 2025 GMT Not After : Apr 27 07:00:30 2025 GMT Subject: CN=3b8c2829756566937010189087b132780f5bbd4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e1:d3:41:e1:cb:2c:e4:85:c9:cb:ce:c4:0e: 6b:8a:75:2c:12:e5:dd:60:28:7d:77:97:8d:ab:a9: 89:87:99:de:51:37:c8:f6:b5:34:ce:e3:ab:40:f1: e4:ee:52:54:c0:a1:32:ad:90:5e:5a:08:dd:bb:d4: 0a:39:05:b1:00:5d:14:8c:b3:ac:eb:e6:60:ad:73: 49:ba:92:73:08:f2:dc:2d:55:96:5a:5e:ad:0d:e2: d1:bc:94:b1:04:c1:76:7f:b0:44:07:9b:5d:39:66: 22:51:67:54:c1:fb:fe:e4:a9:a4:5d:59:6e:a2:42: 6b:92:db:b4:48:f2:46:ac:eb:7d:f6:3a:89:da:c3: 48:00:9b:b2:fc:82:f4:a8:c2:c1:34:a8:8b:07:6e: 20:87:16:ea:b1:37:e9:cf:9f:f9:23:75:df:b7:b9: 67:6b:80:a6:60:2f:2f:87:78:b5:95:a8:ed:37:9c: 30:a6:81:67:b1:a3:f8:05:11:a6:0a:45:87:ba:3a: 2a:f6:75:7b:28:92:8a:b4:5d:af:0e:a5:a0:3a:0c: 04:81:fe:04:9a:3c:db:a3:96:82:5a:cb:95:80:65: 6d:8e:a1:cb:34:1b:7a:c8:a4:2a:66:63:76:39:5d: 8f:8e:b9:06:a8:92:1d:f5:ed:bb:62:34:29:a5:b5: c8:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:8C:28:29:75:65:66:93:70:10:18:90:87:B1:32:78:0F:5B:BD:4F X509v3 Authority Key Identifier: keyid:BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:d9:1f:19:f8:56:4b:3e:8d:ca:64:40:7f:99:98:cb:3a:91: 0f:d6:d5:60:fe:6d:95:a5:47:af:19:98:62:14:45:d7:10:d0: f6:d6:72:ca:12:0e:c9:7b:13:dd:1e:04:ef:f3:49:94:58:62: 71:de:0b:b6:39:33:c9:c2:04:ea:89:d9:b8:a5:9b:58:a4:f5: 8d:12:52:e4:93:5c:7e:94:55:3a:75:92:a5:75:1d:6b:26:1c: a9:97:e9:b3:5c:de:c7:c8:2e:ba:b8:b5:ee:75:c5:7a:df:2d: dc:ed:90:a6:5d:6c:45:56:da:3e:49:98:dc:49:60:b7:7c:59: c4:d5:72:f7:24:48:bc:63:85:37:f1:73:b3:3b:c9:98:d0:2f: 7f:18:f5:8c:2d:d0:01:a4:f9:17:25:e4:bc:15:a2:64:78:8d: 96:09:51:97:8a:4b:ca:54:08:9b:ca:c5:45:64:f7:44:02:1a: 1c:4d:fb:44:9e:72:78:55:45:a6:f8:16:14:40:b4:f6:08:4e: f8:cf:b4:05:27:01:81:4f:76:f4:ce:d9:32:e6:3c:3d:a3:58: 58:2c:5d:a3:85:a2:cb:1f:b0:92:0e:09:f4:90:f5:7c:fa:bb: 58:8f:db:1e:54:15:42:24:c4:79:67:0e:cc:c9:59:c4:1a:51: 70:ac:ab:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZw5c62zUBKU2BvNtd44AUlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiMGQ0ZTg1OTM3YjdhMGYyNzEwNTRkMjg2MTRmMjkzNGQ0 ZWE1MDAwHhcNMjUwNDI2MDcwMDMwWhcNMjUwNDI3MDcwMDMwWjAzMTEwLwYDVQQD EygzYjhjMjgyOTc1NjU2NjkzNzAxMDE4OTA4N2IxMzI3ODBmNWJiZDRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eHTQeHLLOSFycvOxA5rinUsEuXd YCh9d5eNq6mJh5neUTfI9rU0zuOrQPHk7lJUwKEyrZBeWgjdu9QKOQWxAF0UjLOs 6+ZgrXNJupJzCPLcLVWWWl6tDeLRvJSxBMF2f7BEB5tdOWYiUWdUwfv+5KmkXVlu okJrktu0SPJGrOt99jqJ2sNIAJuy/IL0qMLBNKiLB24ghxbqsTfpz5/5I3Xft7ln a4CmYC8vh3i1lajtN5wwpoFnsaP4BRGmCkWHujoq9nV7KJKKtF2vDqWgOgwEgf4E mjzbo5aCWsuVgGVtjqHLNBt6yKQqZmN2OV2PjrkGqJId9e27YjQppbXIoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDuMKCl1ZWaTcBAYkIexMngPW71PMB8GA1UdIwQY MBaAFLsNToWTe3oPJxBU0oYU8pNNTqUAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXcxT2haTjdlZzhuRUZUU2hoVHlrMDFPcFFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9kMTc1MjctY2Y5OC00ZDM3LTg2NmYt OGU5Yjk4YTk5Y2RiLzEvdXcxT2haTjdlZzhuRUZUU2hoVHlrMDFPcFFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9kMTc1MjctY2Y5OC00ZDM3LTg2NmYtOGU5Yjk4YTk5Y2Ri LzEvdXcxT2haTjdlZzhuRUZUU2hoVHlrMDFPcFFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS9kfGfhW Sz6NymRAf5mYyzqRD9bVYP5tlaVHrxmYYhRF1xDQ9tZyyhIOyXsT3R4E7/NJlFhi cd4LtjkzycIE6onZuKWbWKT1jRJS5JNcfpRVOnWSpXUdayYcqZfps1zex8guuri1 7nXFet8t3O2Qpl1sRVbaPkmY3Elgt3xZxNVy9yRIvGOFN/FzszvJmNAvfxj1jC3Q AaT5FyXkvBWiZHiNlglRl4pLylQIm8rFRWT3RAIaHE37RJ5yeFVFpvgWFEC09ghO +M+0BScBgU929M7ZMuY8PaNYWCxdo4Wiyx+wkg4J9JD1fPq7WI/bHlQVQiTEeWcO zMlZxBpRcKyrYw== -----END CERTIFICATE-----Generated at Sat Apr 26 16:08:16 2025 by rpki-client