$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft File: vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft (raw, json) Hash identifier: JOCZGqfEa8md5rKmjBWsszoWMx0b6uhcIwozStgOvvM= Subject key identifier: 9D:98:A1:5F:D2:8A:CA:6A:DA:39:E7:91:1F:7E:3E:5D:9F:95:16:37 Authority key identifier: BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C Certificate issuer: /CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c Certificate serial: 0196846C7AAD94FFF17713D6F4078EC59FD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft Manifest number: 1226 Signing time: Wed 30 Apr 2025 02:00:23 +0000 Manifest this update: Wed 30 Apr 2025 02:00:23 +0000 Manifest next update: Thu 01 May 2025 02:00:23 +0000 Files and hashes: 1: 8Fk9kDKNu_wHTuVpwQ1FTDYEEUM.roa (hash: R9lk1OKBJor+p6Fk8Cm9760Y52YkNlkiK4HwLBjauEw=) 2: LCMzGb8KK1XAn7ueElCREh4ehR0.roa (hash: 9Gw2b+IOeGIlGw5y7XNoxgCnQ7hXETrnIXJowIYGjqA=) 3: LShVVLJCwZTpOQVpRu4BHXCMY5o.roa (hash: qOW5Q7zU6W8XRrp7RUj6wZmvzkpmHb4NVAohhcOeaxY=) 4: bmuOfACYZiZOnCTz9ES9s06c_ac.roa (hash: kxF+XBYjW7ExfLjJidwuYPma+i/t1erJy7+ooTz+eSY=) 5: dqSVfYV4r9M8RMZopTNsSTKHeIY.roa (hash: XrN+1wwdRwyX8n7r+VHCtW4D45jLjIPlWVhNaBZnVwQ=) 6: h9mNIwplN3HJblv2au9Os6COmfk.roa (hash: MUN1yxszebSMcti0G9u7TeXrwfcHsFyRaIzpQnCM9XQ=) 7: mUZj0w-uWUstpfqo5cH06vK19uA.roa (hash: MzyNzzDoUFyK/QZw2a/+HQPhRLTClRfb/mdHjVRhByQ=) 8: r0mTEa6qt-IyELm4t03iQrSQvaU.roa (hash: 5O0ZRSkH9lwLC8LUcZsdLUDFOU7u/lNlnWwcFjFATOs=) 9: rHoYFPQ0T9Hef-z6s-pJ7i0yyQo.roa (hash: xQJ9yww4YSKaaEyQBdYXA5up0iEVqjr/At6e2xJMUB8=) 10: vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl (hash: x9IUA86I6HH2XDfYIcSQdo1/ixaBPR0SNlZwviiG760=) 11: vfYaTtc4brt0Ov1kx9oCUOHIJXI.roa (hash: eB+hXGbiqW76z1VHwcXpM+YfyI+lZHNYCy9KL7CJ5lM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 May 2025 00:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:84:6c:7a:ad:94:ff:f1:77:13:d6:f4:07:8e:c5:9f:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c Validity Not Before: Apr 30 02:00:23 2025 GMT Not After : May 1 02:00:23 2025 GMT Subject: CN=9d98a15fd28aca6ada39e7911f7e3e5d9f951637 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:97:08:54:53:ab:79:d3:56:d4:02:e7:8e:3b: a2:04:91:d2:71:28:d0:35:26:4b:3b:3b:b4:e1:21: 8f:37:87:b7:b6:33:f9:5b:88:63:4d:b7:3a:f4:da: 1b:12:e1:1a:cb:96:51:d7:9b:c0:25:51:e6:c4:44: 44:12:53:1b:a6:94:08:2d:a8:8e:b7:ef:10:a8:c0: 8e:ea:36:7f:7f:1e:e3:a6:c0:36:87:4c:e6:30:98: f2:86:a7:9f:43:b3:c4:86:46:bf:28:2e:19:1c:06: 0a:9a:b8:2a:a6:0f:7b:9e:d8:b6:83:04:1f:fe:93: 70:79:14:ef:2d:79:4c:cf:de:fe:77:6b:36:db:c9: 41:03:68:3a:32:ab:de:93:96:59:0d:00:34:6c:89: 74:fc:67:95:05:c3:4f:83:a0:0c:ee:19:4c:21:05: d3:42:b5:8e:37:21:1c:e9:83:f7:4b:8a:99:33:ba: 58:71:4c:71:e3:de:10:95:66:88:e7:4a:72:57:35: c7:b9:98:26:c0:bd:e0:d2:da:c9:7f:97:82:31:d6: 89:f9:28:bb:83:8d:7a:7e:1f:e8:2f:c6:3b:e5:6a: 78:74:c4:44:a5:e6:c0:fd:1e:6b:67:b9:d5:25:bf: 6c:a3:fd:0b:04:f9:91:f3:31:60:41:ab:92:a9:8c: fc:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:98:A1:5F:D2:8A:CA:6A:DA:39:E7:91:1F:7E:3E:5D:9F:95:16:37 X509v3 Authority Key Identifier: keyid:BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:d4:f1:b7:d2:7a:6c:93:11:fd:8b:8f:8e:2b:b8:00:57:06: 4b:f4:9c:cb:5e:a3:bb:1b:bc:67:b2:bb:1d:e0:55:69:e9:c0: 64:af:c0:82:00:7e:6c:94:6e:3e:a1:d5:56:05:81:15:21:8a: ea:e1:c3:b9:f2:53:51:7d:a9:f6:8c:25:39:ab:b3:af:ea:5d: 6b:03:03:04:7d:32:89:fd:eb:d2:d9:45:1a:70:61:9c:6e:da: 0e:d1:c2:51:81:75:fb:7b:60:9a:6e:b6:37:ab:3c:61:c6:03: 6f:4a:fc:10:c6:be:01:c3:19:11:ae:c3:f9:dd:a7:4f:4c:90: 04:5f:b9:d5:0e:bd:51:42:34:86:5b:c2:28:19:e3:f4:f3:df: d3:12:ed:23:aa:7a:6b:92:cc:02:b5:8a:f7:16:b3:7c:b6:f1: 3a:bc:0b:a3:01:6a:11:62:f2:79:25:98:4c:9d:1a:de:6f:12: 84:ac:e8:16:c2:74:87:08:05:25:83:dc:af:21:f5:df:08:e1: 24:eb:76:87:94:32:e0:4e:3d:8b:e4:75:fb:b3:6f:7d:8f:03: ec:b0:73:2a:18:b7:98:19:ff:cc:f4:ee:81:24:e9:f7:fb:f0: 45:c4:1e:8d:35:55:5d:31:70:f0:54:cc:7a:e4:03:b0:e8:00: 83:4a:1c:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZaEbHqtlP/xdxPW9AeOxZ/WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNDcwM2UwOGNhMGQ2YTMxMGNiYzY0M2ZmY2IzMDdmZjZj ZGM2NWMwHhcNMjUwNDMwMDIwMDIzWhcNMjUwNTAxMDIwMDIzWjAzMTEwLwYDVQQD Eyg5ZDk4YTE1ZmQyOGFjYTZhZGEzOWU3OTExZjdlM2U1ZDlmOTUxNjM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZcIVFOredNW1ALnjjuiBJHScSjQ NSZLOzu04SGPN4e3tjP5W4hjTbc69NobEuEay5ZR15vAJVHmxEREElMbppQILaiO t+8QqMCO6jZ/fx7jpsA2h0zmMJjyhqefQ7PEhka/KC4ZHAYKmrgqpg97nti2gwQf /pNweRTvLXlMz97+d2s228lBA2g6Mqvek5ZZDQA0bIl0/GeVBcNPg6AM7hlMIQXT QrWONyEc6YP3S4qZM7pYcUxx494QlWaI50pyVzXHuZgmwL3g0trJf5eCMdaJ+Si7 g416fh/oL8Y75Wp4dMREpebA/R5rZ7nVJb9so/0LBPmR8zFgQauSqYz8+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ2YoV/Sispq2jnnkR9+Pl2flRY3MB8GA1UdIwQY MBaAFLxHA+CMoNajEMvGQ//LMH/2zcZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84NjNiYTAtMDQ3Ni00M2Q3LThiZTct NjZlZGEyMjhmZWM3LzEvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy84NjNiYTAtMDQ3Ni00M2Q3LThiZTctNjZlZGEyMjhmZWM3 LzEvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAtTxt9J6 bJMR/YuPjiu4AFcGS/Scy16juxu8Z7K7HeBVaenAZK/AggB+bJRuPqHVVgWBFSGK 6uHDufJTUX2p9owlOauzr+pdawMDBH0yif3r0tlFGnBhnG7aDtHCUYF1+3tgmm62 N6s8YcYDb0r8EMa+AcMZEa7D+d2nT0yQBF+51Q69UUI0hlvCKBnj9PPf0xLtI6p6 a5LMArWK9xazfLbxOrwLowFqEWLyeSWYTJ0a3m8ShKzoFsJ0hwgFJYPcryH13wjh JOt2h5Qy4E49i+R1+7NvfY8D7LBzKhi3mBn/zPTugSTp9/vwRcQejTVVXTFw8FTM euQDsOgAg0oc8g== -----END CERTIFICATE-----Generated at Wed Apr 30 05:38:34 2025 by rpki-client