$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft File: I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft (raw, json) Hash identifier: 0MXZk9SER0iiDA7s+B2PdA/uPpKjHp385M3OiAWcTpo= Subject key identifier: 67:AA:1B:CD:7E:E8:A4:D7:D1:D5:52:9F:E3:26:22:D7:AF:10:77:BC Authority key identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 Certificate issuer: /CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Certificate serial: 019682108F87048A4A8A234D24D980F79017 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft Manifest number: 1240 Signing time: Tue 29 Apr 2025 15:00:45 +0000 Manifest this update: Tue 29 Apr 2025 15:00:45 +0000 Manifest next update: Wed 30 Apr 2025 15:00:45 +0000 Files and hashes: 1: 0qZlk63Gwo6PVve3R8hoNJeSalk.roa (hash: 9K8bAvhRQIcuHPJMwOdonfj+LysEV1qKdWBg1zShX+0=) 2: 1aR-_v953E36WGgYgibzeTBiCDE.roa (hash: FoIR2LSFc6nQ5Kqt0WYRr1Y8u7rsf9kyNtd6rG0B9zM=) 3: 2S36hALNEuA4FHD_a934872Co8w.roa (hash: 7vbdkC8QrVhET/DTmD2itapsbG53efZ5NYts2gI1WdE=) 4: Aqln2oXW1vmV-PUzF6Cd9Q8xD70.roa (hash: KUC6ZVgJ309wVObTlhs383nGmhCFSSEIPpt/KXrwLus=) 5: I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl (hash: hXkLZfLjE4iS2FM4monFIO8TWOTYXbCmWxgQsZZ3HAY=) 6: ZpGAbaG9iTc5mQjGkWx21egzJos.roa (hash: hVROdEr8DhK5izAOiu4sPZbk59hiOCePPc1b1fzj7Mc=) 7: aCwRSHVYBYpytuE1o9MjNgDXz9I.roa (hash: lR91pW0BeR+aoFpolYB6lJ9nl5KY3mWGfuxUgw4Zch4=) 8: hTDGmmn2FYXUzU7TBnMKhJwzgBA.roa (hash: 1eTmB0t+VZgY89Mes1TNlFqfs2UJeJff1ZjTxBLpw/g=) 9: jlKsVMX7wEteoIWfSN3Uc9eAuVQ.roa (hash: 5HOZUuYu7Rw+ksliSgplThO4PdfYnW2rqUfOLfK21mA=) 10: k8Tsh2igTKK0UWxKZTZKxjOauZg.roa (hash: 2YaWS9l2TW+UMAMDTk1uUSdz30uNtfJAEAiFghKc1/k=) 11: mdNDH8tOemdbUwlqRGs3hb1Hrm4.roa (hash: WKtl9/rCVdqattn0ipGNumFRIFTCx0VUypyRv/GA3Gw=) 12: uIweupJOqhNaFZ9FFVay5RTc__M.roa (hash: t7JJhUA0yW4Du8+W3we/rUkzjJyZFVBXiW73J3eZJK8=) 13: z1a3i0frazTQqXgXDMZwXIVumzA.roa (hash: 8QcYCFJ7DbfNpdlzOwLSm6hk+eQgt4rWp4xCUkBVN6Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Apr 2025 15:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:82:10:8f:87:04:8a:4a:8a:23:4d:24:d9:80:f7:90:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Validity Not Before: Apr 29 15:00:45 2025 GMT Not After : Apr 30 15:00:45 2025 GMT Subject: CN=67aa1bcd7ee8a4d7d1d5529fe32622d7af1077bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4f:36:cb:e8:da:86:25:de:35:28:03:43:67: 47:95:39:c4:c0:83:63:f1:ac:d9:c4:0e:f4:bc:b2: 25:e2:1e:81:c7:3b:9b:17:b4:76:0f:ea:dc:63:74: 6a:21:2d:b1:6a:11:8d:12:42:ed:f1:ad:1f:be:f5: a7:06:72:4f:b4:56:5e:0f:42:c0:77:dd:9f:f7:e9: 10:72:82:1d:1d:a6:b6:be:eb:b8:35:3a:1b:90:e9: 04:83:97:c8:93:8d:98:f4:87:f4:08:85:02:66:7f: 69:d4:e7:f2:70:c4:67:d0:3a:56:6a:bd:7d:77:37: 9c:86:62:f3:8b:45:eb:31:db:7e:43:d0:22:5b:6e: cc:31:55:1a:62:06:e5:1f:8f:f6:a8:15:10:4d:3b: 2e:98:16:1f:eb:cb:86:1d:f5:9e:06:a5:c4:d4:f4: ee:67:1a:0e:58:db:5a:ff:49:fd:7a:dc:36:04:b8: f7:b8:26:0f:e4:8b:32:76:a2:b4:ef:94:e0:71:24: 97:dd:a4:b4:be:af:36:22:59:06:ce:8b:0e:de:7f: 50:a4:6b:93:ac:c6:af:15:12:3d:7f:76:56:1b:f9: 8d:ee:6d:42:93:60:89:03:7f:52:13:59:b0:73:eb: 02:1d:c3:be:5c:db:32:13:d5:55:3f:d7:f1:4c:a8: 7d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:AA:1B:CD:7E:E8:A4:D7:D1:D5:52:9F:E3:26:22:D7:AF:10:77:BC X509v3 Authority Key Identifier: keyid:23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:62:38:9b:12:c4:4f:cb:6c:e8:92:6a:59:f7:66:6e:12:f8: a3:2c:85:0b:bd:87:f8:38:5a:6a:ff:c1:59:5a:d8:b2:df:99: 2b:62:60:23:f0:66:6f:17:c9:eb:86:2a:1c:7e:10:40:a6:9c: 7b:ce:ef:5f:b1:de:fc:49:f7:0a:b3:f9:7b:37:98:f3:03:ba: 48:84:a7:91:8f:4e:35:af:f4:65:97:fd:90:70:be:ca:1f:b2: ea:32:b2:59:e7:e1:35:dd:a2:59:a6:02:c1:f8:8e:9e:69:46: ae:bc:03:65:53:46:86:10:6e:14:79:1d:0b:b9:7f:89:81:87: ba:ab:bc:08:cc:07:2a:d6:9f:ea:9a:74:35:e6:2e:9b:93:a1: 0d:6a:8c:db:a3:bc:83:b1:c1:39:af:59:e4:1a:7c:1a:4e:fb: ae:99:62:5f:2e:f9:e2:78:20:d9:39:2f:25:af:f7:cf:97:f8: 87:a0:4c:18:bb:6d:ad:e1:0b:30:6e:73:af:20:bc:f4:c6:cb: 8b:f3:ff:23:cb:b9:23:f7:1a:5b:5f:f0:14:0b:c5:af:6b:cf: 18:37:2a:c3:ad:f4:ea:8e:95:ad:ea:f5:e1:80:83:4d:6d:4f: 68:3a:6c:40:1e:19:a2:fd:57:63:ec:f0:85:e9:a1:41:60:43: c1:65:a2:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZaCEI+HBIpKiiNNJNmA95AXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZTNkOTJiZmUxNjYxOWNhNTAwYzAzMjY3ZWZmYTlhYTdj YTBjNDcwHhcNMjUwNDI5MTUwMDQ1WhcNMjUwNDMwMTUwMDQ1WjAzMTEwLwYDVQQD Eyg2N2FhMWJjZDdlZThhNGQ3ZDFkNTUyOWZlMzI2MjJkN2FmMTA3N2JjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuE82y+jahiXeNSgDQ2dHlTnEwINj 8azZxA70vLIl4h6BxzubF7R2D+rcY3RqIS2xahGNEkLt8a0fvvWnBnJPtFZeD0LA d92f9+kQcoIdHaa2vuu4NTobkOkEg5fIk42Y9If0CIUCZn9p1OfycMRn0DpWar19 dzechmLzi0XrMdt+Q9AiW27MMVUaYgblH4/2qBUQTTsumBYf68uGHfWeBqXE1PTu ZxoOWNta/0n9etw2BLj3uCYP5IsydqK075TgcSSX3aS0vq82IlkGzosO3n9QpGuT rMavFRI9f3ZWG/mN7m1Ck2CJA39SE1mwc+sCHcO+XNsyE9VVP9fxTKh9SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGeqG81+6KTX0dVSn+MmItevEHe8MB8GA1UdIwQY MBaAFCPj2Sv+FmGcpQDAMmfv+pqnygxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYt ZjFiZjBjMzNhOTA4LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYtZjFiZjBjMzNhOTA4 LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUWI4mxLE T8ts6JJqWfdmbhL4oyyFC72H+Dhaav/BWVrYst+ZK2JgI/BmbxfJ64YqHH4QQKac e87vX7He/En3CrP5ezeY8wO6SISnkY9ONa/0ZZf9kHC+yh+y6jKyWefhNd2iWaYC wfiOnmlGrrwDZVNGhhBuFHkdC7l/iYGHuqu8CMwHKtaf6pp0NeYum5OhDWqM26O8 g7HBOa9Z5Bp8Gk77rpliXy754ngg2TkvJa/3z5f4h6BMGLttreELMG5zryC89MbL i/P/I8u5I/caW1/wFAvFr2vPGDcqw6306o6Vrer14YCDTW1PaDpsQB4Zov1XY+zw hemhQWBDwWWi9A== -----END CERTIFICATE-----Generated at Tue Apr 29 22:20:30 2025 by rpki-client