$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft File: h74JMJcJfERX_1qj5Yk8jBVDJhI.mft (raw, json) Hash identifier: m7mFGhmojQbjJdcaiAB4wzCOX80goqhuxHtqje/aCMw= Subject key identifier: 85:7F:82:7F:75:66:0C:E1:80:FA:79:E5:68:2D:09:20:7F:65:1E:C3 Authority key identifier: 87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12 Certificate issuer: /CN=87be093097097c4457ff5aa3e5893c8c15432612 Certificate serial: 0196748C4B40793514AF0AC095AFA86A4B2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft Manifest number: 119E Signing time: Sun 27 Apr 2025 00:01:13 +0000 Manifest this update: Sun 27 Apr 2025 00:01:13 +0000 Manifest next update: Mon 28 Apr 2025 00:01:13 +0000 Files and hashes: 1: 58EBygRjdS7517jE8ijFSPfVOH4.roa (hash: 7YP7WUOPsrK23qXejFg0a6c2K8s3GbzwWCeuhRLXrr4=) 2: 6gQb_YrXJIkOy1ffV5AywwaDFKA.roa (hash: YBUcx/W2YYWfTW+ZfLh5vpIiC6jkcxCKGBt0nojo2Ok=) 3: CjTW9-CUmuY1lxZ8OqndS2FXSrY.roa (hash: 9DQ0LnRbHYpMYq+dl7Z0Jfv0Jx2DrmotGXluT5sxbiI=) 4: UYD_ol6L79u8glgaI6wKUZit3aI.roa (hash: Gf9BtC+mpY9FQr0OFj9WV8BSFzyS8ChMq/mXIibBTC4=) 5: YxuPih3fAlXVoEE31gDs9iD2i1w.roa (hash: x8butTOJLg1TuADmdhNJfjqeOtty4tQbuYOKyeZNAJI=) 6: cgfWhp9nnNlIFwxwBmM9ufcXLT8.roa (hash: d9o/0tEnmxkRdMrExtvCAvZnhgV08vpjue2h9xSnd5M=) 7: h74JMJcJfERX_1qj5Yk8jBVDJhI.crl (hash: bn7hzpmn81FiIRhdPxYD6gvFJLbqJUUd1qV89Z3aFas=) 8: jS9AN5oD9gr_onzGTzL8xf4_tCg.roa (hash: L5WRngdm8hXH1GtO9dblNyDW24uvtXBx7hO8Cv9i3R8=) 9: l73XbGk7c4j4MjyLCnCZ2AhSa5g.roa (hash: zN4KADzvP9RDaA1coLbTnlm7K8otMtISf3HRhyFdP4I=) 10: zDYhvUbelcRpqpslUbRSgUjh_fg.roa (hash: oMqhUHMRnzSTRY98vl61orkGgfrk9poSjKlRD++vvbQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:74:8c:4b:40:79:35:14:af:0a:c0:95:af:a8:6a:4b:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87be093097097c4457ff5aa3e5893c8c15432612 Validity Not Before: Apr 27 00:01:13 2025 GMT Not After : Apr 28 00:01:13 2025 GMT Subject: CN=857f827f75660ce180fa79e5682d09207f651ec3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:bd:f0:dc:1c:64:ce:68:a1:7a:98:96:aa:14: 56:ae:df:7e:fc:5d:c1:89:6d:06:fe:71:20:3f:2b: 97:dc:5f:a3:78:33:ba:da:e7:2a:c1:c4:bc:8e:97: 89:96:55:01:36:d1:19:88:6b:c1:67:f9:af:6e:ac: fc:ab:f1:ff:65:aa:a5:e7:98:1f:20:ca:fa:3e:2f: 6e:0a:30:d2:47:d4:43:67:fa:b1:90:73:ba:80:54: 44:49:19:6c:af:e9:5b:be:dc:70:27:26:82:83:e6: e5:21:64:50:26:b4:a6:b7:d0:73:a8:f4:32:6c:49: 9e:00:ba:85:64:d9:03:46:d7:be:a4:29:e7:67:13: fa:4a:e3:9f:9e:e8:01:96:82:97:85:de:4e:f5:5f: 34:16:dc:4f:cb:80:99:7c:1f:78:d3:9b:5e:24:e6: 42:25:65:5e:d0:d1:f3:b1:ab:6f:2c:cc:6a:84:09: 8b:7a:6a:84:ed:b5:8f:43:67:59:c1:00:50:ad:44: 56:68:32:34:86:79:20:29:6a:60:c8:30:8e:0a:ed: 08:97:7d:14:f0:05:f7:13:86:3b:6c:ce:6f:50:f4: 41:64:34:a1:54:c3:93:52:6a:93:d6:53:e3:c1:8d: 6e:76:c0:ba:17:8e:2b:e2:2b:6f:2a:19:75:5a:74: ce:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:7F:82:7F:75:66:0C:E1:80:FA:79:E5:68:2D:09:20:7F:65:1E:C3 X509v3 Authority Key Identifier: keyid:87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:2e:7d:af:36:1b:60:1b:d8:b1:d4:9d:27:47:2f:bb:a3:88: b3:27:49:6f:2c:38:49:3a:2e:e5:ba:8c:47:0f:cb:69:b3:39: 2b:39:87:4b:90:ab:98:2a:4a:ca:00:d2:47:f1:1c:89:3a:51: 96:46:76:f3:05:3f:e2:cb:bb:01:43:27:87:8c:a6:b6:48:d1: ad:e1:6f:cd:65:88:22:70:6c:49:29:b1:0a:73:d1:33:24:15: 0e:00:0c:e4:9a:da:5e:92:2d:f9:0e:16:cd:c4:c3:c0:85:a2: f4:b5:83:4c:8a:11:83:72:03:90:c6:ad:22:7a:63:09:eb:a4: 22:4a:ec:6e:eb:6d:66:65:bc:ed:c7:cc:b4:38:7a:70:74:c0: 0d:0f:3d:7f:8e:de:4a:87:d9:44:8d:f8:c5:87:60:89:e7:18: 66:31:84:9e:ea:14:b7:0e:b6:cd:4f:74:b6:ea:eb:5e:17:5a: 60:b5:a2:6d:b1:47:28:7c:1e:7d:48:a5:6e:01:bd:55:8d:28: 1d:db:10:2a:0f:c6:f0:7d:d4:8d:51:93:14:02:a5:8b:a1:4e: 58:87:d9:a6:dc:01:49:1b:cd:89:75:30:95:d5:2d:93:35:1d: 42:4d:13:f5:e0:53:ed:a5:13:b7:60:4b:05:ae:55:8c:75:56: 8c:80:a3:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ0jEtAeTUUrwrAla+oaksvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3YmUwOTMwOTcwOTdjNDQ1N2ZmNWFhM2U1ODkzYzhjMTU0 MzI2MTIwHhcNMjUwNDI3MDAwMTEzWhcNMjUwNDI4MDAwMTEzWjAzMTEwLwYDVQQD Eyg4NTdmODI3Zjc1NjYwY2UxODBmYTc5ZTU2ODJkMDkyMDdmNjUxZWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnL3w3BxkzmihepiWqhRWrt9+/F3B iW0G/nEgPyuX3F+jeDO62ucqwcS8jpeJllUBNtEZiGvBZ/mvbqz8q/H/Zaql55gf IMr6Pi9uCjDSR9RDZ/qxkHO6gFRESRlsr+lbvtxwJyaCg+blIWRQJrSmt9BzqPQy bEmeALqFZNkDRte+pCnnZxP6SuOfnugBloKXhd5O9V80FtxPy4CZfB9405teJOZC JWVe0NHzsatvLMxqhAmLemqE7bWPQ2dZwQBQrURWaDI0hnkgKWpgyDCOCu0Il30U 8AX3E4Y7bM5vUPRBZDShVMOTUmqT1lPjwY1udsC6F44r4itvKhl1WnTOWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIV/gn91ZgzhgPp55WgtCSB/ZR7DMB8GA1UdIwQY MBaAFIe+CTCXCXxEV/9ao+WJPIwVQyYSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDc0Sk1KY0pmRVJYXzFxajVZazhqQlZESmhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jYzhmNGEtNGMwMi00MDRiLThkOTMt MmNkZTY1ZjMxMTJhLzEvaDc0Sk1KY0pmRVJYXzFxajVZazhqQlZESmhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jYzhmNGEtNGMwMi00MDRiLThkOTMtMmNkZTY1ZjMxMTJh LzEvaDc0Sk1KY0pmRVJYXzFxajVZazhqQlZESmhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaC59rzYb YBvYsdSdJ0cvu6OIsydJbyw4STou5bqMRw/LabM5KzmHS5CrmCpKygDSR/EciTpR lkZ28wU/4su7AUMnh4ymtkjRreFvzWWIInBsSSmxCnPRMyQVDgAM5JraXpIt+Q4W zcTDwIWi9LWDTIoRg3IDkMatInpjCeukIkrsbuttZmW87cfMtDh6cHTADQ89f47e SofZRI34xYdgiecYZjGEnuoUtw62zU90turrXhdaYLWibbFHKHwefUilbgG9VY0o HdsQKg/G8H3UjVGTFAKli6FOWIfZptwBSRvNiXUwldUtkzUdQk0T9eBT7aUTt2BL Ba5VjHVWjICjaA== -----END CERTIFICATE-----Generated at Sun Apr 27 05:42:32 2025 by rpki-client