$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft File: bqtTZAsJMZJLc_dgklhFFQpszKU.mft (raw, json) Hash identifier: RY1IFW6c3qpcJOpDTey3xKc421allMoYy4LtOGcZ0Q4= Subject key identifier: C8:59:77:ED:52:09:A3:7E:77:98:8E:0D:9A:2D:0C:76:BE:DC:D3:87 Authority key identifier: 6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5 Certificate issuer: /CN=6eab53640b0931924b73f760925845150a6ccca5 Certificate serial: 01967D2132D82A786DD90A49884120225C64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft Manifest number: 1233 Signing time: Mon 28 Apr 2025 16:00:49 +0000 Manifest this update: Mon 28 Apr 2025 16:00:49 +0000 Manifest next update: Tue 29 Apr 2025 16:00:49 +0000 Files and hashes: 1: 8XP3ZgnWsREYJBKcesUxqlAiBzw.roa (hash: 93nQXtqveQCPNFB8WMMDnrZZqMqXxfvNqmfuaH03fA0=) 2: 8pTSByKVza64jkbt4hbsEAO28Po.roa (hash: IzdhXMkwThfgAeGPav6gn/KwCRJU1NuroumbqzfO91Y=) 3: CxyrKhIU4wUjCyyDEEHiNFsAVKo.roa (hash: r2NmcWhzLqIMUTXKUcVkr9QimRuBHkQkM5CtC3DIO3o=) 4: Hue0K_1DeFYDqJy6zcHqeoZ0mR4.roa (hash: JxkXhvESVr0gpJ5A+RwjR+mj0QCHmZARXbAtOttPvl4=) 5: SkYEMyHTHbyT6JuzWYh18fPiI9c.roa (hash: FukE0hqzUf5c2DeRumeIUjq12YCt/dC1j5vfYlFcAyo=) 6: TF6vPvFxs5WUrrHSqmKpxsQvB18.roa (hash: skdmvC6iLpguLmAUBf5CQp9okNf5/hjKRW8eNCLvcbU=) 7: UCwT6CL5WW3mYzoKNlTk2SOU8IA.roa (hash: N87SKU9+C8nd7bvGxIGpUOdKdK4qImbFhv+zWkYw2Wc=) 8: X4Z-v2DjsEUNaJu74fV0VmppsH4.roa (hash: k4XLe4zYKZ+4ca/ODa7pVIqXxRj2X5fNogYmHGTYuzM=) 9: bqtTZAsJMZJLc_dgklhFFQpszKU.crl (hash: /QHf54MUsx/n491lgdiHAY8sNjGxDU4kCOmV9um2RGk=) 10: hq7jtf5ICa4EJEy0wPEdH54LMsQ.roa (hash: hQZHACaQ0GwdOVsEe6YRTXBBd0Cnu1k3R9qsNp1994s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Apr 2025 15:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:7d:21:32:d8:2a:78:6d:d9:0a:49:88:41:20:22:5c:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eab53640b0931924b73f760925845150a6ccca5 Validity Not Before: Apr 28 16:00:49 2025 GMT Not After : Apr 29 16:00:49 2025 GMT Subject: CN=c85977ed5209a37e77988e0d9a2d0c76bedcd387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8a:a0:db:2b:ba:8b:e5:66:d9:0b:5d:00:7b: 46:99:71:e9:3d:d8:8c:81:53:bf:d0:c9:ac:27:1e: fe:10:5e:46:dc:55:75:7c:68:3f:09:36:d5:b8:df: f7:6e:c1:79:e6:97:22:49:a7:8f:e4:a1:09:6c:d3: 29:67:4d:64:0f:e4:e6:87:9c:58:68:d0:d9:0c:4c: c8:e9:5c:71:9d:93:88:04:aa:50:ec:fb:aa:bf:14: f5:86:77:fe:59:54:71:cf:3b:3f:50:71:44:5e:9c: 6f:81:42:8c:21:c2:4d:e2:b5:0a:dd:18:59:82:da: a6:8b:6c:6f:34:00:58:ea:55:5c:e6:0f:c7:d0:b0: 8c:9d:76:2b:c0:5c:7a:89:b5:7a:84:97:1a:a1:35: a7:91:b6:0d:10:a8:a6:c3:06:21:c7:fa:52:5c:eb: 79:90:e6:56:1b:e2:3b:4d:64:f2:d7:d2:32:b5:4f: 1a:fb:1c:6d:9b:31:41:6a:bf:cb:6d:20:3c:6b:4a: c1:63:24:7c:38:4e:ba:39:66:82:ee:e0:53:c9:0c: e8:24:f7:d5:11:d5:14:6c:4b:08:97:a7:80:8a:73: be:2a:b8:3c:27:63:c7:1b:cf:fc:7e:8c:60:c3:d0: 9a:57:9f:bb:5d:06:ff:2b:6b:e5:a5:6e:02:7b:77: 64:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:59:77:ED:52:09:A3:7E:77:98:8E:0D:9A:2D:0C:76:BE:DC:D3:87 X509v3 Authority Key Identifier: keyid:6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:21:c8:da:da:81:51:66:5c:10:0c:94:8a:9b:c5:05:43:24: 8f:bc:7a:c3:71:a3:d2:47:41:d5:57:3e:0f:bc:17:ef:cc:5c: 4f:d4:f1:90:67:ba:9c:42:55:8b:fa:1e:43:d2:0e:fe:bf:72: 66:f1:ca:55:a0:b0:52:db:7c:ce:18:70:fc:b2:50:52:14:1a: 00:60:7b:54:b1:89:02:d2:7c:f8:53:c3:7a:ee:e9:48:c4:88: 16:06:f0:e2:18:07:7d:c6:bf:6e:d6:72:df:8a:f5:39:3d:b2: 38:e0:6f:dc:b6:6c:fe:d8:d3:b0:70:5e:f1:7c:a4:56:51:82: c9:0e:3d:1c:24:f1:ce:b0:6d:bb:19:73:9f:31:1d:67:9c:32: 63:77:69:eb:06:64:49:03:1e:17:94:72:ef:ef:35:ac:49:71: 6c:bd:8a:5c:cf:68:6c:63:60:b7:87:81:4b:e8:84:37:4d:af: f3:59:35:7c:2b:b9:52:2e:9c:4c:ea:06:7d:b1:ed:69:34:0e: 09:35:ff:e2:31:4c:13:96:34:2d:77:d6:01:d0:8c:6f:15:60: d3:55:66:3d:6f:67:f5:bd:43:10:a8:43:b7:8c:7b:4d:72:ec: d5:c6:d7:5a:be:f7:06:96:be:a1:6e:4f:f7:e0:4c:31:3d:a7: f7:e3:87:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ9ITLYKnht2QpJiEEgIlxkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlYWI1MzY0MGIwOTMxOTI0YjczZjc2MDkyNTg0NTE1MGE2 Y2NjYTUwHhcNMjUwNDI4MTYwMDQ5WhcNMjUwNDI5MTYwMDQ5WjAzMTEwLwYDVQQD EyhjODU5NzdlZDUyMDlhMzdlNzc5ODhlMGQ5YTJkMGM3NmJlZGNkMzg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroqg2yu6i+Vm2QtdAHtGmXHpPdiM gVO/0MmsJx7+EF5G3FV1fGg/CTbVuN/3bsF55pciSaeP5KEJbNMpZ01kD+Tmh5xY aNDZDEzI6VxxnZOIBKpQ7PuqvxT1hnf+WVRxzzs/UHFEXpxvgUKMIcJN4rUK3RhZ gtqmi2xvNABY6lVc5g/H0LCMnXYrwFx6ibV6hJcaoTWnkbYNEKimwwYhx/pSXOt5 kOZWG+I7TWTy19IytU8a+xxtmzFBar/LbSA8a0rBYyR8OE66OWaC7uBTyQzoJPfV EdUUbEsIl6eAinO+Krg8J2PHG8/8foxgw9CaV5+7XQb/K2vlpW4Ce3dkAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMhZd+1SCaN+d5iODZotDHa+3NOHMB8GA1UdIwQY MBaAFG6rU2QLCTGSS3P3YJJYRRUKbMylMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yYTM4ZTYtMjk0ZS00ZmEzLWE1YTAt NTMwNDYzMjM5NTFmLzEvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8yYTM4ZTYtMjk0ZS00ZmEzLWE1YTAtNTMwNDYzMjM5NTFm LzEvYnF0VFpBc0pNWkpMY19kZ2tsaEZGUXBzektVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALSHI2tqB UWZcEAyUipvFBUMkj7x6w3Gj0kdB1Vc+D7wX78xcT9TxkGe6nEJVi/oeQ9IO/r9y ZvHKVaCwUtt8zhhw/LJQUhQaAGB7VLGJAtJ8+FPDeu7pSMSIFgbw4hgHfca/btZy 34r1OT2yOOBv3LZs/tjTsHBe8XykVlGCyQ49HCTxzrBtuxlznzEdZ5wyY3dp6wZk SQMeF5Ry7+81rElxbL2KXM9obGNgt4eBS+iEN02v81k1fCu5Ui6cTOoGfbHtaTQO CTX/4jFME5Y0LXfWAdCMbxVg01VmPW9n9b1DEKhDt4x7TXLs1cbXWr73Bpa+oW5P 9+BMMT2n9+OH+g== -----END CERTIFICATE-----Generated at Mon Apr 28 19:27:31 2025 by rpki-client