$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft File: P-3YXB7Mtf9LqTARenMpCZwP8us.mft (raw, json) Hash identifier: /3kXW3yY9obSMsMsr1G300TAs4b4fQGbyCK0008v5Xs= Subject key identifier: 44:8F:0C:4B:CE:6E:27:EA:47:34:37:AE:65:E2:68:28:83:D7:D4:16 Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb Certificate serial: 01967D20C4B82919D614C30BE6F342D93A65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft Manifest number: 1537 Signing time: Mon 28 Apr 2025 16:00:21 +0000 Manifest this update: Mon 28 Apr 2025 16:00:21 +0000 Manifest next update: Tue 29 Apr 2025 16:00:21 +0000 Files and hashes: 1: 4SyAKG9FRt1gAFJy5VgH5PwxTRA.roa (hash: jTSIiH7dSb5EybAsEY+n22bAiKvGllq/AuPJ12+ncpM=) 2: BPvvMmPw0v2RXdpWWHfCuRUXY28.roa (hash: xZBsJjBvf0lTF+79AIT0zRbookilcef0qHIZ5VPCKjo=) 3: BZv8sGCcNALUX5pRivC_EjiidAY.roa (hash: h2vpw3fwMWMbbCOrxK6C72hr7+aeGxdeLm1OT0QOTJY=) 4: DGiTictajwWlIqV1Y3gB4SABHrM.roa (hash: Id5c1uksWgHuNXSqMulTJtxTXfw1/TAJk3AEd7b9YRQ=) 5: DHzoXC9jTOUwsYaE5s06DMtz-Us.roa (hash: QoXl4TxQ9Fr8NXV1UyM90LlQ7WV+Ci4+lUpduZFb8Vs=) 6: Mk65rzu_RkrceH34hYZR24Obsg0.roa (hash: rTzdbjg2prHl5GqIGFCWtd1Ib91ETCuwTrOfSPbAKbI=) 7: P-3YXB7Mtf9LqTARenMpCZwP8us.crl (hash: iyI5bi6w3OiJVtywgvozpredHm8dKhPTc4Q5YX2DEUY=) 8: Q7Kremg5Fgj0SfkKKXdi8FJc68I.roa (hash: wwhqLnVWip/tEomt2waPsqqsK0Xf41SfYznp1QkJ0BM=) 9: VB2zjyzRbVcAI7qwybUzZhlXV-U.roa (hash: cbrJc/4RT0HiKhNiv2HtCVB5MjAEHV6aPZtCJF7/HaM=) 10: fScTC-RTAL4AeGIUFDXeFWgxNOU.roa (hash: LpQDvJVc9hMoS+6x9uoQSz8d+i8pdM/6GrU1p5QPkoU=) 11: gjV1b6nl-2sIdV0OViEWc13VOgw.roa (hash: YJxg+E5odCH0e5CDjaGL8I+42oC/IlpXfOKgoo/xCo4=) 12: i_vdOGwxPt-bikrKCsCq4vU6o1Y.roa (hash: Oi88txSdII7ssSiwm/zvR3/xE/bpdarLSDiFGBrNlqs=) 13: jLM5t3eg01fijHX5BZDxTUjpEGU.roa (hash: zlqEOh5qlKElj+/BR3gY6unzfRt8ygL6XM3lywwcPBU=) 14: mv1h37MzImfXhXtotGH2l6nUD-c.roa (hash: jma1UU++sReZAO/OYU5m4FrNNXuoRuTByWXR/ZHh5qk=) 15: pPSUgW-kch1wzV-mL74GjoJRYas.roa (hash: 14IsY2Pcu5B3SjJ5ycOJDXddH4w35As15arfEbi1nXc=) 16: sVq7ykDogd7cCsDF--hBK9DnjT4.roa (hash: yntzoQcvzBrX+tVilVNDQYJnh1oAW90RlNAXUQi35Kc=) 17: yUsdU2ULQpT4CaBLrnJG--v6B4k.roa (hash: nFPDGUe2wiSsXpmHy1xpSDCHB5E3thvkbalz4PA2+qg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Apr 2025 15:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:7d:20:c4:b8:29:19:d6:14:c3:0b:e6:f3:42:d9:3a:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb Validity Not Before: Apr 28 16:00:21 2025 GMT Not After : Apr 29 16:00:21 2025 GMT Subject: CN=448f0c4bce6e27ea473437ae65e2682883d7d416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:77:14:02:98:12:9c:21:bd:51:f1:cf:1a:8b: a1:a2:3c:0e:10:8d:22:fd:0d:0c:fe:8f:b8:b7:5e: 86:b6:0d:0d:ce:73:4f:0b:bb:de:88:ed:f1:ab:38: 6a:fd:b2:61:73:b6:f0:e0:f4:0e:28:d1:55:16:14: a1:a9:48:5f:fd:1f:96:4b:ab:7b:b2:08:15:cf:d4: c2:71:67:66:55:bb:16:37:ab:ae:30:1c:50:25:dc: 64:b5:7c:b3:6e:81:ed:4b:fb:81:03:d3:f1:fd:17: 4a:92:c7:b3:36:4c:3c:73:9e:63:8a:aa:30:c6:c6: ff:2b:4d:33:f2:fb:5a:b3:a3:f3:1d:82:9f:e4:63: 38:f2:5f:70:ad:e9:82:09:18:07:69:b1:f9:46:ac: ee:45:84:83:26:67:45:00:60:41:62:87:dd:1b:94: ec:58:2b:5b:be:b8:fd:ef:86:61:cd:c9:8f:f7:52: 9e:1f:b1:8c:e2:31:53:3a:ca:2b:b7:2f:67:7c:5b: 57:78:2d:0c:56:21:69:76:70:87:2f:59:85:39:24: fe:a9:c8:00:b0:5d:cd:03:e4:43:61:2c:f6:d5:81: cf:0b:da:d8:97:02:9a:7e:0e:ae:1c:b4:26:9d:1e: 0a:22:a4:0f:14:14:bb:29:a2:f9:a4:8d:c8:6b:60: 0a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:8F:0C:4B:CE:6E:27:EA:47:34:37:AE:65:E2:68:28:83:D7:D4:16 X509v3 Authority Key Identifier: keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:6f:f0:48:f7:73:25:7f:c9:6f:a4:5b:b2:dd:4d:fd:76:70: 2f:85:39:f1:56:cc:11:52:46:4a:f0:2e:e1:bc:23:5a:c4:68: c9:7c:26:68:52:60:f0:97:2f:ed:46:95:e0:d9:fc:0d:d7:8a: 7d:55:97:2d:29:6c:e9:61:ca:7b:9b:9c:6c:00:11:1b:55:03: 45:f6:02:97:14:37:21:91:40:35:c2:84:69:d2:23:e7:17:92: 66:f0:79:e6:80:0e:e5:8f:70:c2:bc:d3:39:69:2f:0d:f3:62: 17:95:57:16:6a:f9:a1:1c:65:0d:46:16:64:07:16:6c:92:80: 2a:26:02:7c:7d:9f:59:b7:b5:fa:0d:00:35:c4:2b:84:37:1e: cd:b9:41:d7:a9:3a:33:11:b7:e9:55:80:ac:83:cd:60:07:1f: f5:5a:e4:04:53:72:5b:57:62:69:d1:5c:b8:77:c6:20:17:67: df:5e:cc:fa:53:c7:3c:4e:33:2d:09:a1:5a:cb:49:33:4b:ba: d8:60:57:73:f0:e4:52:80:22:3c:81:23:d9:7f:50:cc:81:16: bf:ad:1b:1c:d1:01:a6:54:40:5d:10:5e:57:2f:48:08:99:f6: c9:51:20:27:91:e0:55:39:6a:a6:2c:c6:a8:1a:d6:e7:3e:1e: 3a:b9:55:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ9IMS4KRnWFMML5vNC2TplMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw ZmYyZWIwHhcNMjUwNDI4MTYwMDIxWhcNMjUwNDI5MTYwMDIxWjAzMTEwLwYDVQQD Eyg0NDhmMGM0YmNlNmUyN2VhNDczNDM3YWU2NWUyNjgyODgzZDdkNDE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXcUApgSnCG9UfHPGouhojwOEI0i /Q0M/o+4t16Gtg0NznNPC7veiO3xqzhq/bJhc7bw4PQOKNFVFhShqUhf/R+WS6t7 sggVz9TCcWdmVbsWN6uuMBxQJdxktXyzboHtS/uBA9Px/RdKksezNkw8c55jiqow xsb/K00z8vtas6PzHYKf5GM48l9wremCCRgHabH5RqzuRYSDJmdFAGBBYofdG5Ts WCtbvrj974ZhzcmP91KeH7GM4jFTOsorty9nfFtXeC0MViFpdnCHL1mFOST+qcgA sF3NA+RDYSz21YHPC9rYlwKafg6uHLQmnR4KIqQPFBS7KaL5pI3Ia2AKDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFESPDEvObifqRzQ3rmXiaCiD19QWMB8GA1UdIwQY MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt ZTJiNTI3NzI4ZTk2LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2 LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF2/wSPdz JX/Jb6Rbst1N/XZwL4U58VbMEVJGSvAu4bwjWsRoyXwmaFJg8Jcv7UaV4Nn8DdeK fVWXLSls6WHKe5ucbAARG1UDRfYClxQ3IZFANcKEadIj5xeSZvB55oAO5Y9wwrzT OWkvDfNiF5VXFmr5oRxlDUYWZAcWbJKAKiYCfH2fWbe1+g0ANcQrhDcezblB16k6 MxG36VWArIPNYAcf9VrkBFNyW1diadFcuHfGIBdn317M+lPHPE4zLQmhWstJM0u6 2GBXc/DkUoAiPIEj2X9QzIEWv60bHNEBplRAXRBeVy9ICJn2yVEgJ5HgVTlqpizG qBrW5z4eOrlVgA== -----END CERTIFICATE-----Generated at Tue Apr 29 00:33:27 2025 by rpki-client