$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft File: MH2IfALgfJ5HTR-OIQScqmzj-9M.mft (raw, json) Hash identifier: tIpKYetG23qexCMQzI7IF7t6qGO6IfKnxAkRW4X9vbM= Subject key identifier: 02:56:AD:9D:29:D8:AE:57:8B:B4:50:7B:33:A5:EB:D5:31:F7:94:65 Authority key identifier: 30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3 Certificate issuer: /CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3 Certificate serial: 01967DFC82E064FD21979D074C2CE3693511 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft Manifest number: 1516 Signing time: Mon 28 Apr 2025 20:00:22 +0000 Manifest this update: Mon 28 Apr 2025 20:00:22 +0000 Manifest next update: Tue 29 Apr 2025 20:00:22 +0000 Files and hashes: 1: Go3D60IftVT7kBobBk8HTq_r6wY.roa (hash: /aH1VuqUtHMC947Kt5tr1ajHSrdHN60XTYZiPes2dOU=) 2: JKKr0NwqKrBRfO9-TNMA6fKjebU.roa (hash: +prVLn/SSNSb/SQ4BmX9heAxTyq0XNrqnNVcVb/zNYQ=) 3: MH2IfALgfJ5HTR-OIQScqmzj-9M.crl (hash: ZqpZanqDdzSBr36f+b/xfuoDA91AzUvO4Oc1J+ZLJ6g=) 4: OrdWNePRO-azuf-x7WJ0gNqkZc8.roa (hash: ehZsJBwER/Ak+kPEJiQOXw5pziTKWHwzzGUWq4oZM/c=) 5: Q3_mv-tF2Z1EHDZHaZk8mJMN1bk.roa (hash: oXSPeYLnMI9gMBulzyR8eDJwfmPdLhgYhc4vqS0U/tE=) 6: S2TXSI-3n25IfgGnM4uuJwml268.roa (hash: DAgFF4qJxC/k8JOz+sB1Q1cvXx4PDaouIru4SXZXgbU=) 7: UJuJe34B0guqTgOl--QOCgSYvZE.roa (hash: c2O3pbkk6z+NjOLR47vzvdpTF+ZJKIik+rzOAO3mk2Y=) 8: bR8kj_c2TPqFFFMT255K3OTqBTI.roa (hash: mIG3JTVdQTlKmcdrQlCtE5KtfNee8F1irJglkfAd6/0=) 9: e_JO57HIUgxnL2zZw_SZRKtvz2k.roa (hash: kYzJL9upOKUtQTqnQ+rXijBf3P483K+T+FEi6SAaLE0=) 10: iF74lchyYH7faRXUXMHNpR_TrWc.roa (hash: 7HXWZbOcLR6YZsq3MaREkcOeGbzmuGmdyIo3eOGAB/M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Apr 2025 15:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:7d:fc:82:e0:64:fd:21:97:9d:07:4c:2c:e3:69:35:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3 Validity Not Before: Apr 28 20:00:22 2025 GMT Not After : Apr 29 20:00:22 2025 GMT Subject: CN=0256ad9d29d8ae578bb4507b33a5ebd531f79465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:04:95:d2:3f:e6:ac:44:2d:12:ea:1c:f8:d4: 61:37:21:5e:a6:b5:de:b7:74:38:9d:24:43:a1:2c: ea:b3:5b:02:25:e0:99:90:3e:01:28:ab:92:e7:de: 3f:a4:9b:b1:74:e0:01:8b:2c:ed:9b:2d:b1:a3:eb: fa:0d:3b:b7:34:0e:f1:07:8f:c7:f0:d0:82:b4:2f: 2c:e3:fd:b7:06:e5:aa:9d:46:a3:6f:6b:43:c2:ae: e5:80:e7:05:89:16:28:57:95:20:74:0a:bd:41:1d: 5b:45:0a:b3:92:e3:2e:16:79:a3:66:54:cd:df:f3: c4:3d:45:9e:a8:38:14:23:71:8a:9f:01:2a:8a:56: c0:0c:55:d8:8b:33:17:46:ee:06:fd:c0:b0:86:e1: 73:73:46:2c:40:ab:11:f8:62:b9:27:bf:86:46:7c: 1b:93:6d:b0:d1:4c:5c:6e:c2:03:75:67:91:44:cf: 8d:17:e7:1e:29:4d:2f:24:18:23:e2:96:fc:b8:81: 9e:ba:64:1f:da:dc:de:08:08:91:e3:79:c7:56:bd: d4:46:15:82:70:f9:53:87:fe:d9:5a:31:be:cc:0f: 2f:bf:fa:50:3f:c8:29:b2:cc:b2:45:fa:fb:01:42: 60:a4:12:c8:3b:b0:86:74:e3:e5:2f:0c:79:b8:69: 42:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:56:AD:9D:29:D8:AE:57:8B:B4:50:7B:33:A5:EB:D5:31:F7:94:65 X509v3 Authority Key Identifier: keyid:30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:ba:1d:3e:4c:8d:67:c0:98:01:98:f2:46:ec:c5:f9:5e:73: fb:55:09:e7:97:b0:b6:d7:dd:66:62:43:98:a2:8c:80:3f:b3: 0d:b2:34:f4:27:20:3f:2b:33:bc:53:5a:ea:50:1b:e7:07:69: 84:f1:f1:69:2c:97:08:e3:f9:b5:e7:75:81:1f:53:b4:14:55: 10:08:9b:8d:78:78:40:0c:ab:ed:a0:91:bc:ee:97:f9:46:c4: 70:58:ec:c2:49:58:6b:fa:da:ec:d3:6b:23:bc:78:27:63:d4: 26:ad:31:99:e0:44:bd:46:f3:11:13:e6:68:9d:42:16:88:e0: b9:0e:62:9c:b5:bb:bd:29:42:43:14:2a:bf:0e:3c:da:7b:54: 96:b5:a0:0d:85:c0:a3:f8:88:6c:89:60:eb:df:63:50:0c:d2: 12:c9:92:15:ae:c9:d3:69:af:ec:cd:42:1c:8d:bd:0c:a9:fa: 56:6d:c8:b3:8c:e5:f7:3f:03:aa:80:f6:46:fa:54:9e:6b:52: 6a:54:01:a6:dc:4e:2e:19:19:09:c9:47:fa:db:b7:23:9e:0d: 4e:39:45:4c:ba:30:a5:ff:56:0b:b2:59:cb:8b:8a:7f:26:b4: 16:2b:53:30:9f:22:f3:19:4d:39:6b:6a:f8:7d:46:3d:01:9e: 0f:79:07:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ9/ILgZP0hl50HTCzjaTURMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwN2Q4ODdjMDJlMDdjOWU0NzRkMWY4ZTIxMDQ5Y2FhNmNl M2ZiZDMwHhcNMjUwNDI4MjAwMDIyWhcNMjUwNDI5MjAwMDIyWjAzMTEwLwYDVQQD EygwMjU2YWQ5ZDI5ZDhhZTU3OGJiNDUwN2IzM2E1ZWJkNTMxZjc5NDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyASV0j/mrEQtEuoc+NRhNyFeprXe t3Q4nSRDoSzqs1sCJeCZkD4BKKuS594/pJuxdOABiyztmy2xo+v6DTu3NA7xB4/H 8NCCtC8s4/23BuWqnUajb2tDwq7lgOcFiRYoV5UgdAq9QR1bRQqzkuMuFnmjZlTN 3/PEPUWeqDgUI3GKnwEqilbADFXYizMXRu4G/cCwhuFzc0YsQKsR+GK5J7+GRnwb k22w0UxcbsIDdWeRRM+NF+ceKU0vJBgj4pb8uIGeumQf2tzeCAiR43nHVr3URhWC cPlTh/7ZWjG+zA8vv/pQP8gpssyyRfr7AUJgpBLIO7CGdOPlLwx5uGlCZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAJWrZ0p2K5Xi7RQezOl69Ux95RlMB8GA1UdIwQY MBaAFDB9iHwC4HyeR00fjiEEnKps4/vTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9iMjBkODMtNjEyYy00YjYyLTk3YTMt MWE1ZTVmMTkxYmZhLzEvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9iMjBkODMtNjEyYy00YjYyLTk3YTMtMWE1ZTVmMTkxYmZh LzEvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASbodPkyN Z8CYAZjyRuzF+V5z+1UJ55ewttfdZmJDmKKMgD+zDbI09CcgPyszvFNa6lAb5wdp hPHxaSyXCOP5ted1gR9TtBRVEAibjXh4QAyr7aCRvO6X+UbEcFjswklYa/ra7NNr I7x4J2PUJq0xmeBEvUbzERPmaJ1CFojguQ5inLW7vSlCQxQqvw482ntUlrWgDYXA o/iIbIlg699jUAzSEsmSFa7J02mv7M1CHI29DKn6Vm3Is4zl9z8DqoD2RvpUnmtS alQBptxOLhkZCclH+tu3I54NTjlFTLowpf9WC7JZy4uKfya0FitTMJ8i8xlNOWtq +H1GPQGeD3kHYQ== -----END CERTIFICATE-----Generated at Tue Apr 29 00:34:35 2025 by rpki-client