$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft File: BVFgW2dezk4PznF1rjGpP6gnK6Y.mft (raw, json) Hash identifier: YGwB+Yu7aAnlpU4ZqD2ZPEStL3MWdWvtbvU/006CAe0= Subject key identifier: 4B:C9:98:DD:D2:D4:95:32:57:7E:E2:35:1E:72:6B:BF:44:86:8C:DA Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6 Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6 Certificate serial: 01967BD851F43E79190F27E6314CCB18C778 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft Manifest number: 1544 Signing time: Mon 28 Apr 2025 10:01:36 +0000 Manifest this update: Mon 28 Apr 2025 10:01:36 +0000 Manifest next update: Tue 29 Apr 2025 10:01:36 +0000 Files and hashes: 1: 5t_gEPyzONNwmcX_6ew0Ih3Mk2Q.roa (hash: vkkst1UDRXFHGnw3oCIz/VahP4EJhU4cLye1AO0QLS0=) 2: B-VB7mD6d3yYH8PU8AgFih1fMDc.roa (hash: T5HGrFxvsUPySvUxTWFtkDKWgc+DSV2mLNavrR7oxEo=) 3: BVFgW2dezk4PznF1rjGpP6gnK6Y.crl (hash: HlGSMlLMK5FX9WTHhmrZLqmulpTKOQpW8dqyOf1Sxq0=) 4: FQTXSvb27ypAWeWR6u4PUk-NFzc.roa (hash: oVmw4Wr4zacFRrwMuuDV+itYXymrywavxqZKYRr/zHc=) 5: GIdtnYTfB_OfNmkj58C5zvwyoiY.roa (hash: mrolhVBCf9ezcIiNdke1ILuseOXCo3lGnZtCw7CJdqk=) 6: JIWScFv9Kksz3-WjVTMxXPLjiWo.roa (hash: 9Ejcda+LEF9Prza7a6M4k8Cqx+Jsocz8uwzratsGHfs=) 7: Ry99V7wdnB63QA0YiggryZhHU-U.roa (hash: mMBh91Bzq2gPCtQkwNpkOUuuvLHWXUK22LlIXX1xS/g=) 8: T2zf4MlLIMSvzzuDsJMAjIOyKkY.roa (hash: ueRz8nTweEwyQ4f6p4yvV8towA7SPGMkaN88JD99IhM=) 9: WTBCbSxb7h1w4Up4KNg9SZTnE6c.roa (hash: zGDl99MvN6NddN0ACg6xKrKwSNupTCXGaQXZUdGsWZY=) 10: Wgn-Z3i6lXU4mVGYn9zEOu2Y5uo.roa (hash: KDlQZdCuo/nIV3/PuDzNC2v7AGRYnk63vIIL7+xFyqo=) 11: ZNVBvSaI1BNlFT5y4meV0Zbgnzw.roa (hash: bWlw2kG0F8Yo+irCKVO4en+85QCKnglxRBdSlkv67r0=) 12: ZmV3RrHyNbdlPpXWHxyJNKlqz_0.roa (hash: duiYNAfkU9vNSfSeoTIVT6MoGsXF5yCoHKwjI4a3RZo=) 13: bLACyeWnCQUwWZqE5WZ_BrmQU6Y.roa (hash: uwoE5/d36cX/Ks6beQm+PxMT5NEUJYwmYJZfciGwpzU=) 14: lSQaQo1pT929AIuNEO-jfbBj_uI.roa (hash: aky/WPIxzMhPYRkj4RXOkjGc0PhL0aXcIKo/I7TPgXM=) 15: lmjGoIkmtRARzMHJ3Iv6xZvWT5U.roa (hash: D1V3yIkbb8Fb2YGAP6nceG/MedRCxNzvPEgyVbvAN7Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Apr 2025 08:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:7b:d8:51:f4:3e:79:19:0f:27:e6:31:4c:cb:18:c7:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6 Validity Not Before: Apr 28 10:01:36 2025 GMT Not After : Apr 29 10:01:36 2025 GMT Subject: CN=4bc998ddd2d49532577ee2351e726bbf44868cda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:96:8e:64:c1:d7:de:e3:2b:bd:a1:be:5f:ab: 8f:88:b7:a2:0a:a0:48:2a:59:1f:17:db:05:44:86: 8d:33:2a:97:87:49:ed:7f:75:e0:81:8c:67:cd:34: af:cc:f9:6d:59:97:2f:2a:6b:ef:69:1c:87:3f:6e: 11:04:b7:e1:e3:56:99:be:cc:52:52:cf:83:ed:7a: f0:52:7b:f7:65:89:ad:ce:e9:98:96:df:17:13:1c: e2:75:65:42:e1:2e:69:81:82:b2:d4:50:18:3e:5d: 00:92:e8:06:43:d1:53:d9:ec:19:4f:33:2e:2c:b6: 52:74:41:64:bd:5a:21:ab:ff:52:eb:72:26:55:ec: fd:de:4e:34:df:eb:8a:02:d9:4e:9b:41:f1:4f:35: 72:90:c5:4a:e5:34:bc:de:2e:05:a5:cd:52:d8:d8: b8:da:2f:59:e6:00:f0:ad:6d:dd:4d:7f:52:a4:c7: 07:3b:88:89:e1:7b:b7:07:aa:f5:01:4f:29:ef:dd: 88:ef:17:b9:84:06:ac:73:41:90:15:2c:45:c3:8d: 10:7d:97:01:96:48:b5:ea:8e:d7:ac:82:e9:9d:63: 4f:25:47:36:a6:aa:6e:ac:cd:18:24:c2:d4:03:4e: 1c:48:f5:d2:45:5b:5f:19:2e:1c:7a:1d:23:2f:14: 94:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:C9:98:DD:D2:D4:95:32:57:7E:E2:35:1E:72:6B:BF:44:86:8C:DA X509v3 Authority Key Identifier: keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:6c:d0:82:05:dc:6b:6a:77:f9:2a:6c:1c:2b:23:e8:e4:ca: ec:b2:61:7c:e5:15:45:26:ad:b3:76:57:42:a5:c1:94:4f:83: 55:45:ee:92:6b:01:91:e6:d2:27:23:82:54:5e:28:99:bf:7d: ad:24:d8:d4:fd:52:53:2d:c0:e4:47:2d:cc:08:c4:d0:46:82: aa:f0:55:7f:25:84:68:61:b0:9d:4c:60:6d:3d:be:70:65:50: 45:41:1c:b5:9b:89:b4:54:87:37:d6:f0:5e:16:35:fa:a5:a8: 82:21:10:81:18:e9:67:2f:28:2c:18:18:9b:d5:30:35:1a:f6: 39:74:17:d4:55:1e:31:7a:22:7b:72:e0:15:8d:62:c6:2b:2b: ab:b6:f1:28:60:b5:b6:38:8e:93:2b:ea:47:4c:a7:de:df:8d: f9:e5:83:fe:a5:4e:e5:00:82:6e:48:f7:79:9f:6e:11:f0:94: 19:97:dd:e8:a6:aa:dc:9b:64:53:ab:db:97:0e:45:f2:16:38: 54:3e:57:ac:d7:ae:c4:cd:06:1f:88:68:3b:6e:4b:9e:8c:b2: 91:08:12:f8:62:5e:25:be:17:76:c2:17:3f:fe:ec:de:2b:d7: ad:92:7d:99:ae:40:81:f5:58:4b:e6:3e:cf:9a:16:18:5a:f1: df:92:90:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ72FH0PnkZDyfmMUzLGMd4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NTE2MDViNjc1ZWNlNGUwZmNlNzE3NWFlMzFhOTNmYTgy NzJiYTYwHhcNMjUwNDI4MTAwMTM2WhcNMjUwNDI5MTAwMTM2WjAzMTEwLwYDVQQD Eyg0YmM5OThkZGQyZDQ5NTMyNTc3ZWUyMzUxZTcyNmJiZjQ0ODY4Y2RhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpaOZMHX3uMrvaG+X6uPiLeiCqBI KlkfF9sFRIaNMyqXh0ntf3XggYxnzTSvzPltWZcvKmvvaRyHP24RBLfh41aZvsxS Us+D7XrwUnv3ZYmtzumYlt8XExzidWVC4S5pgYKy1FAYPl0AkugGQ9FT2ewZTzMu LLZSdEFkvVohq/9S63ImVez93k403+uKAtlOm0HxTzVykMVK5TS83i4Fpc1S2Ni4 2i9Z5gDwrW3dTX9SpMcHO4iJ4Xu3B6r1AU8p792I7xe5hAasc0GQFSxFw40QfZcB lki16o7XrILpnWNPJUc2pqpurM0YJMLUA04cSPXSRVtfGS4ceh0jLxSUxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEvJmN3S1JUyV37iNR5ya79EhozaMB8GA1UdIwQY MBaAFAVRYFtnXs5OD85xda4xqT+oJyumMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEt MDc3OWY0OGVjZWEwLzEvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEtMDc3OWY0OGVjZWEw LzEvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJWzQggXc a2p3+SpsHCsj6OTK7LJhfOUVRSats3ZXQqXBlE+DVUXukmsBkebSJyOCVF4omb99 rSTY1P1SUy3A5EctzAjE0EaCqvBVfyWEaGGwnUxgbT2+cGVQRUEctZuJtFSHN9bw XhY1+qWogiEQgRjpZy8oLBgYm9UwNRr2OXQX1FUeMXoie3LgFY1ixisrq7bxKGC1 tjiOkyvqR0yn3t+N+eWD/qVO5QCCbkj3eZ9uEfCUGZfd6Kaq3JtkU6vblw5F8hY4 VD5XrNeuxM0GH4hoO25LnoyykQgS+GJeJb4XdsIXP/7s3ivXrZJ9ma5AgfVYS+Y+ z5oWGFrx35KQ2g== -----END CERTIFICATE-----Generated at Mon Apr 28 14:25:04 2025 by rpki-client