$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft File: 7E-wYalCbk-yiF2CKGdXKhtYpMA.mft (raw, json) Hash identifier: LKrzkqvvD9c/lo4VJD+atAYVkCuA/7pMo8FySJ9YVP0= Subject key identifier: 10:2C:74:06:A5:49:D4:E6:09:33:1F:41:0C:8B:A5:75:25:13:29:29 Authority key identifier: EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0 Certificate issuer: /CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0 Certificate serial: 0196789F20D2C304C0EAB0DCF34D2529BB4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft Manifest number: 152E Signing time: Sun 27 Apr 2025 19:00:16 +0000 Manifest this update: Sun 27 Apr 2025 19:00:16 +0000 Manifest next update: Mon 28 Apr 2025 19:00:16 +0000 Files and hashes: 1: 7E-wYalCbk-yiF2CKGdXKhtYpMA.crl (hash: gmEuISEh+APOl0l93OSeklRMe9c3GscaBHVvbR14a8A=) 2: GEPdl2OUeL05DmzNrEcRVPqqDx4.roa (hash: cS7ko6IsOhid7OeMb3wmb0UyLO3IwFElsJZGiNuQYl4=) 3: O4G8Oy8WXn03ntoUxCRHejsTASA.roa (hash: +xEpXad5VkxTIKpDB4MRGFxb/Xqo2YExKflblesjHtU=) 4: ObT7tYrwBXFRyjbdmNfMJqZI2Ac.roa (hash: d6dwZMctMoLW/PwYpxpTj6NAHKpbh3tEazNMZcoj5WA=) 5: PHFVTcG4KZjwKJOE7_73HHVKLFs.roa (hash: WE0SQ9SvcesHSizaa+Bf2w3NFhcVw1y/r+SFqq3s8Og=) 6: RQrFYttaYZP7w79BBGpHWoy0Vf8.roa (hash: +Cg1kkFKtdIbI/uOI/tqhmwLFs4Hzpn4OanpQq8QmfU=) 7: U179jHYVg_Z0xMvsOH7RWHRV0JY.roa (hash: qAq8gQtVLON1xEsw96nwghWB+2IEvnYNGoYOTtsqD5E=) 8: _F5MVfF5fNE4gJHS7bTOuaP33x0.roa (hash: glFPm7n2DIuS97xAP2QYuEIRa9RXcbN9tpa+7lEYHOU=) 9: fakXDMo3zyIUclESUX9dWmYL5TA.roa (hash: IcVzCrlp60ik4ciNebwcS9dD7bdLcMNXOEwcfbEsKXU=) 10: xz8xILYuPCJsOo5-xxPZe0m8iY0.roa (hash: Nym9WSsF7iPFJyaeeaq8rTQr459/3AIDriLd5s5IRiI=) 11: yKEdpqHdvo91vC0Mmh0XBWCJyPs.roa (hash: pz0PLVuo+mNtiFiglr7TH4jCIgorFqRrLuJoPAyhrKw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 19:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:78:9f:20:d2:c3:04:c0:ea:b0:dc:f3:4d:25:29:bb:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0 Validity Not Before: Apr 27 19:00:16 2025 GMT Not After : Apr 28 19:00:16 2025 GMT Subject: CN=102c7406a549d4e609331f410c8ba57525132929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a9:21:f9:4b:24:e3:90:93:78:64:cb:ed:5f: 24:ad:73:80:f2:12:3a:b2:d5:32:24:42:d8:5f:81: 04:cd:82:13:2a:9a:52:24:29:b2:32:7f:d7:9a:98: 38:63:75:75:7d:2f:70:38:cc:c5:5b:e4:03:74:45: 99:e0:94:43:9f:12:2d:9c:c4:8a:6b:2c:5e:81:d2: 02:d0:42:0c:ae:d6:55:89:87:23:c7:b6:8c:d0:96: 3f:df:7d:55:48:27:a9:94:4f:07:8a:de:02:8e:ea: e0:d9:1e:07:7b:0a:a2:b7:5a:ef:43:ea:85:c1:e1: cf:f3:7f:34:27:b0:79:ee:3e:37:76:70:35:5b:b0: 3d:e8:4d:16:f0:80:69:66:68:6a:10:c0:8e:0e:23: 20:3b:10:8f:c6:bc:2b:f7:82:94:81:f4:f1:e5:b3: f2:ee:98:f7:ce:93:6f:dc:20:60:0b:4a:26:5c:ff: 3e:7a:d1:7b:a0:1a:7b:52:2d:9f:80:29:42:9d:85: b7:f7:6c:ab:02:0c:ad:be:05:a3:5b:59:95:5b:12: 9a:5a:83:3a:ce:98:51:c5:ed:f9:81:51:af:6d:69: b3:9a:49:b1:cd:13:dc:21:33:c6:e7:b3:ae:21:19: b4:34:4f:d4:9f:30:31:e4:2d:13:7a:f5:54:bf:72: 99:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:2C:74:06:A5:49:D4:E6:09:33:1F:41:0C:8B:A5:75:25:13:29:29 X509v3 Authority Key Identifier: keyid:EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:e6:24:6e:34:16:88:f1:31:63:49:f5:97:91:3f:5b:e3:78: e4:82:ff:7e:0a:2b:fd:ef:d2:1d:6e:06:97:b8:dc:7f:f8:3c: 77:2a:bd:cf:6e:09:95:c4:13:16:54:58:71:3e:b5:77:6c:39: 02:31:ba:b8:6f:35:ef:83:18:c1:12:45:b4:78:b1:6d:1c:19: f4:09:e7:c9:13:61:bb:22:8c:a0:79:82:83:e8:bf:04:b5:20: 31:f8:fb:ea:32:d0:71:f9:3f:c2:b4:b0:17:c8:87:07:f8:9e: ba:d5:2e:c7:7d:31:b0:ee:71:21:1a:9c:17:31:4f:93:3c:c9: 2e:a6:b3:e4:ca:8a:04:e9:f3:db:54:1a:4f:c6:f6:fc:c7:1c: 1d:52:60:b0:6f:eb:86:11:f0:f7:5a:f2:67:8e:a6:29:56:e0: 63:4a:1d:ed:66:6a:69:b0:55:4f:15:38:5c:4f:76:c4:ff:a9: 5d:e2:cc:40:45:46:73:3e:c9:ad:ca:a5:79:46:41:bb:3c:fe: bd:3e:9c:79:5c:6f:8c:a0:88:d0:d1:35:3a:0a:96:96:39:05: fb:91:d6:20:ff:f9:1f:43:dc:fb:85:d4:6a:62:ed:01:d4:78: fb:c7:6c:f4:e2:63:60:db:d7:f9:39:a8:d6:a3:bf:21:44:19: 66:98:85:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ4nyDSwwTA6rDc800lKbtPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNGZiMDYxYTk0MjZlNGZiMjg4NWQ4MjI4Njc1NzJhMWI1 OGE0YzAwHhcNMjUwNDI3MTkwMDE2WhcNMjUwNDI4MTkwMDE2WjAzMTEwLwYDVQQD EygxMDJjNzQwNmE1NDlkNGU2MDkzMzFmNDEwYzhiYTU3NTI1MTMyOTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6kh+Usk45CTeGTL7V8krXOA8hI6 stUyJELYX4EEzYITKppSJCmyMn/Xmpg4Y3V1fS9wOMzFW+QDdEWZ4JRDnxItnMSK ayxegdIC0EIMrtZViYcjx7aM0JY/331VSCeplE8Hit4Cjurg2R4Hewqit1rvQ+qF weHP8380J7B57j43dnA1W7A96E0W8IBpZmhqEMCODiMgOxCPxrwr94KUgfTx5bPy 7pj3zpNv3CBgC0omXP8+etF7oBp7Ui2fgClCnYW392yrAgytvgWjW1mVWxKaWoM6 zphRxe35gVGvbWmzmkmxzRPcITPG57OuIRm0NE/UnzAx5C0TevVUv3KZnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBAsdAalSdTmCTMfQQyLpXUlEykpMB8GA1UdIwQY MBaAFOxPsGGpQm5PsohdgihnVyobWKTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0Utd1lhbENiay15aUYyQ0tHZFhLaHRZcE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi83YmMzYWItZDliNi00YWU0LWJjZDEt Y2U1NzE1MDY5NWE5LzEvN0Utd1lhbENiay15aUYyQ0tHZFhLaHRZcE1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi83YmMzYWItZDliNi00YWU0LWJjZDEtY2U1NzE1MDY5NWE5 LzEvN0Utd1lhbENiay15aUYyQ0tHZFhLaHRZcE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU+YkbjQW iPExY0n1l5E/W+N45IL/fgor/e/SHW4Gl7jcf/g8dyq9z24JlcQTFlRYcT61d2w5 AjG6uG8174MYwRJFtHixbRwZ9AnnyRNhuyKMoHmCg+i/BLUgMfj76jLQcfk/wrSw F8iHB/ieutUux30xsO5xIRqcFzFPkzzJLqaz5MqKBOnz21QaT8b2/MccHVJgsG/r hhHw91ryZ46mKVbgY0od7WZqabBVTxU4XE92xP+pXeLMQEVGcz7JrcqleUZBuzz+ vT6ceVxvjKCI0NE1OgqWljkF+5HWIP/5H0Pc+4XUamLtAdR4+8ds9OJjYNvX+Tmo 1qO/IUQZZpiFrA== -----END CERTIFICATE-----Generated at Mon Apr 28 04:46:24 2025 by rpki-client