$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft File: p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft (raw, json) Hash identifier: 8VRwgK7x5cQmlEs6+hzXP51b6icyG7gu3Vex2zSNVHA= Subject key identifier: 98:38:48:17:A8:90:F0:C1:BC:1D:BD:4F:13:F3:77:56:91:BB:64:49 Authority key identifier: A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA Certificate issuer: /CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba Certificate serial: 01967567BE781E1ED742E45CB34E4F024A24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft Manifest number: 1527 Signing time: Sun 27 Apr 2025 04:00:55 +0000 Manifest this update: Sun 27 Apr 2025 04:00:55 +0000 Manifest next update: Mon 28 Apr 2025 04:00:55 +0000 Files and hashes: 1: HG0sxwCI7w4fkh8VU0N2fcVMuLU.roa (hash: 1EixzIypMSg7Afd2h1TllH/pBszhQ8LEEsFtCe9BNAQ=) 2: SF9inl-Z2UBEp7L7rHoMTP2o47I.roa (hash: OJPpBVtZqLTjhkxtA0o0cIzlBYqPE/6vDiaXNk1Wf6s=) 3: V9THiIVArSnZ1H4kkTxosx3Tvz4.roa (hash: lUYBTWUgXaqtzw8eN2t3fS8dCvHHrGYo2Uz5MEjddRY=) 4: YkO14vUX3HHLD5m73eeF94u-z9Y.roa (hash: myJ7UTUt7mcT9gjy0mgRP7jrD85IU3fMUws/RpMjTT4=) 5: bTtf1_C9R2Bt4xdvshIG3OCVSD0.roa (hash: Z47R6cDRJGZAaj0MeG+895zHqKHcV33MIM2W9d4hC9E=) 6: c-pova8C1uulibxroeJZUgkQnv8.roa (hash: OvhwnSV+pVkr5UA9RfkEZJQ3n/9Mm7Ihqgy3rKhknz8=) 7: cdiLy2n18Y-vOIkFViZGUd7RsKM.roa (hash: /+RvQbcmllMNKfEXhyM/QGFxvrK6kosbr0fHB6H8FyU=) 8: dVPbIRfsnF_eS0blJ9Y7zNoUs7k.roa (hash: ShygWBXCmOMXv5YpTJlMJ5UYglgVh9DDoGkuss6YEGo=) 9: obNE3NdMVlCy0XPf9mK-g4oa9eg.roa (hash: 7NjsanTWQOoFeSktyUJvcMuLG2S6+z5IgmOffiI6238=) 10: p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl (hash: +gCQBxlNAukNKUAssOd4JjVEdDwwY66jb9oKbDYADwY=) 11: un7p1oX6IuixEnJw52S1lgp4k0A.roa (hash: zhKv5DC0Mh83opPQLWP9MGfrzkdDgqEhOQ8/1xd2cZA=) 12: vXPdTshBqnn4ghgMByB7XXaLYRA.roa (hash: f07bhqR7ZOptfaHvf20BCw3ge0IxK37mw/76h6jHsI0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 04:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:75:67:be:78:1e:1e:d7:42:e4:5c:b3:4e:4f:02:4a:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba Validity Not Before: Apr 27 04:00:55 2025 GMT Not After : Apr 28 04:00:55 2025 GMT Subject: CN=98384817a890f0c1bc1dbd4f13f3775691bb6449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:36:b9:1d:21:6c:12:3b:79:27:49:93:ad:14: 57:92:67:f7:bb:77:98:5f:83:a5:90:c7:3e:3e:ec: a9:35:48:01:03:a0:c7:9d:ae:57:a2:f2:84:99:81: 74:60:cb:a4:85:a8:6e:a6:b4:8d:25:8e:4e:46:73: 95:27:20:c9:19:6b:46:35:4f:a6:c3:7b:8e:50:4b: 82:4a:a6:6f:69:f1:14:f0:1d:26:34:6f:2c:03:4f: 0d:e4:e1:02:be:06:94:58:a6:97:91:30:96:81:40: 58:11:61:a9:84:fe:e8:0c:16:62:ef:fa:4c:b4:36: 63:f3:69:b8:83:95:5a:2e:aa:4d:d4:cb:a0:20:9c: ea:6e:7e:a7:da:d8:1d:f6:72:84:b7:75:d3:36:cb: ac:5d:13:16:fc:b0:0a:68:34:5b:2f:41:f2:f8:5b: 57:9f:cf:1a:31:e9:5c:cd:2b:1c:61:2c:57:b7:45: 47:84:d3:d9:67:1d:e1:85:66:90:2f:1f:36:19:ee: bf:5e:70:c3:3b:42:34:fe:81:20:25:37:8d:dd:7e: ef:39:21:00:dd:dc:66:e3:85:e9:68:b8:1a:06:d4: 53:3a:9c:5f:6b:a5:5f:92:38:71:e9:cd:c0:57:43: 47:2f:8d:56:9b:1c:88:cb:07:e5:dd:1d:3e:b0:41: cc:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:38:48:17:A8:90:F0:C1:BC:1D:BD:4F:13:F3:77:56:91:BB:64:49 X509v3 Authority Key Identifier: keyid:A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:1e:88:a4:5a:20:6b:ca:0e:03:bb:7c:87:4a:3f:ff:aa:f7: d6:69:ac:cf:ac:9f:9d:a8:f9:2e:0f:5d:14:96:d7:28:15:6a: f1:76:cc:7f:56:de:6f:ba:6b:39:7d:4e:94:07:84:68:bd:a3: e2:df:eb:2a:11:36:20:e9:c6:10:d6:35:ff:08:50:06:7b:d7: 1e:9f:6e:8d:13:3e:76:e3:b4:e8:b4:e1:95:fe:ef:f9:1c:26: e1:58:c9:88:7a:34:06:5d:02:4f:a6:7e:e5:8f:a9:2a:fa:aa: a1:8d:d0:05:d1:c7:74:14:a2:0e:a5:8b:0a:e2:03:b0:66:1a: 07:71:66:9f:fd:41:52:6a:68:4b:70:ea:78:de:75:49:d9:d9: 96:c6:42:73:71:9e:5f:a4:a0:b3:40:2a:e8:5f:a4:a0:19:1c: c9:88:b4:0b:07:eb:0c:87:ef:07:9d:4f:50:49:3b:5d:5a:98: 52:ea:65:3f:61:32:c6:e3:99:4b:9a:c9:2e:e0:d3:cd:60:56: 04:08:a1:6f:24:d5:49:9d:ed:b9:00:2f:eb:3e:49:f5:8d:78: 17:69:ba:3c:39:63:9b:af:f4:67:2d:db:81:13:c8:15:3f:68: 1e:b5:b3:26:ad:5f:75:af:65:ca:59:43:2d:b6:f8:a4:82:8d: 0c:a1:3d:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ1Z754Hh7XQuRcs05PAkokMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZWUxODJkOWM0M2E1Y2U3MDY4ZGZkOWJhN2FhOGVkOTBl NWUwYmEwHhcNMjUwNDI3MDQwMDU1WhcNMjUwNDI4MDQwMDU1WjAzMTEwLwYDVQQD Eyg5ODM4NDgxN2E4OTBmMGMxYmMxZGJkNGYxM2YzNzc1NjkxYmI2NDQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArza5HSFsEjt5J0mTrRRXkmf3u3eY X4OlkMc+PuypNUgBA6DHna5XovKEmYF0YMukhahuprSNJY5ORnOVJyDJGWtGNU+m w3uOUEuCSqZvafEU8B0mNG8sA08N5OECvgaUWKaXkTCWgUBYEWGphP7oDBZi7/pM tDZj82m4g5VaLqpN1MugIJzqbn6n2tgd9nKEt3XTNsusXRMW/LAKaDRbL0Hy+FtX n88aMelczSscYSxXt0VHhNPZZx3hhWaQLx82Ge6/XnDDO0I0/oEgJTeN3X7vOSEA 3dxm44XpaLgaBtRTOpxfa6Vfkjhx6c3AV0NHL41WmxyIywfl3R0+sEHMfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJg4SBeokPDBvB29TxPzd1aRu2RJMB8GA1UdIwQY MBaAFKfuGC2cQ6XOcGjf2bp6qO2Q5eC6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcC00WUxaeERwYzV3YU5fWnVucW83WkRsNExvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9kYWI0MjAtMGRlMy00MzIxLTljMDkt NmI1ZjY4NTIyYTdkLzEvcC00WUxaeERwYzV3YU5fWnVucW83WkRsNExvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9kYWI0MjAtMGRlMy00MzIxLTljMDktNmI1ZjY4NTIyYTdk LzEvcC00WUxaeERwYzV3YU5fWnVucW83WkRsNExvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvR6IpFog a8oOA7t8h0o//6r31mmsz6yfnaj5Lg9dFJbXKBVq8XbMf1beb7prOX1OlAeEaL2j 4t/rKhE2IOnGENY1/whQBnvXHp9ujRM+duO06LThlf7v+Rwm4VjJiHo0Bl0CT6Z+ 5Y+pKvqqoY3QBdHHdBSiDqWLCuIDsGYaB3Fmn/1BUmpoS3DqeN51SdnZlsZCc3Ge X6Sgs0Aq6F+koBkcyYi0CwfrDIfvB51PUEk7XVqYUuplP2EyxuOZS5rJLuDTzWBW BAihbyTVSZ3tuQAv6z5J9Y14F2m6PDljm6/0Zy3bgRPIFT9oHrWzJq1fda9lyllD Lbb4pIKNDKE9RQ== -----END CERTIFICATE-----Generated at Sun Apr 27 10:37:43 2025 by rpki-client