$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft File: c_IQ8SmaHgrucdwdeeX7EgktMKk.mft (raw, json) Hash identifier: cdxUMHJ8Fcyz1zp0vgOyvK7wrrGWEL8NlfMKXVCya6s= Subject key identifier: A3:78:CF:28:B1:F0:1F:CD:D6:3A:FA:2D:92:58:66:9C:B0:33:41:63 Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9 Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9 Certificate serial: 019671539057E252D466F8F26814EB604E66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft Manifest number: 1532 Signing time: Sat 26 Apr 2025 09:00:23 +0000 Manifest this update: Sat 26 Apr 2025 09:00:23 +0000 Manifest next update: Sun 27 Apr 2025 09:00:23 +0000 Files and hashes: 1: H74wGZKnnU6XEP7nVKoqw4XaEjE.roa (hash: zhm555s3zw/KlbcjZuumbYd6+z6n6717Q/inEo++9C0=) 2: JFyb9vOEShiklCUE-xhXQcKys24.roa (hash: yRt2GvdxkvGMHkQaqbdXsuANeN2IU6ZvnsT36x7jpNo=) 3: KFKPGq8CDIQff00UekrfFEmWWU4.roa (hash: pndCMKJbI0Ffrf6VYH3lHviYtYItndyotazCLP7aZyE=) 4: Qr2_pZwtUuuXPoMfySpHp2LFCzA.roa (hash: OPOydN0anKEX6vc+TeAzqMc5Umz77lHhXvSZK8OXrNs=) 5: TLCOp8VQQYT-sDLZMkb_dNE0wJI.roa (hash: 8TF1RbnrjzrAYcRglOW5PIK7TmKRhUoFu7HvQr3ZHoA=) 6: XfGBei_fvFP0LcnT4xlGOunfSHY.roa (hash: ApG5cEMi+MNJR6ahm8kTy/uN64zS0fv0zRdzd/i6biA=) 7: ZrwHnbp0cmRv-8Aq-3dTrUs96b8.roa (hash: laG521bBX3KOp9w13a5/N7g1SD2gsHS2KdTqelNAv1g=) 8: c_IQ8SmaHgrucdwdeeX7EgktMKk.crl (hash: 3lORvq743x1DTBQkSlxlOjH6wANLiwMLL/+6RC3FiTw=) 9: h5UPb41WBJf3smLRT3WauyTJhZk.roa (hash: 7y7FascFoSESS5H+heHuGPqwY6CoIfeWFtJUfTaH8Lg=) 10: nT9Kl7qa4avyYi6PobndNFEx2JI.roa (hash: 4NhOocRVxQsq48Sjltw5zBhFh6NiUij1mxelAtmoUp0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 09:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:71:53:90:57:e2:52:d4:66:f8:f2:68:14:eb:60:4e:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9 Validity Not Before: Apr 26 09:00:23 2025 GMT Not After : Apr 27 09:00:23 2025 GMT Subject: CN=a378cf28b1f01fcdd63afa2d9258669cb0334163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:94:fc:c1:9d:cc:41:f0:5f:ad:c5:e4:4d:0a: 0d:56:71:b2:4a:b2:67:f0:3b:0f:e3:34:21:21:c4: 0e:41:61:6e:7b:e1:69:84:cd:00:38:b7:eb:f7:66: bc:be:24:87:a0:e1:d2:a2:00:12:e1:b2:cd:c3:ff: 82:fe:a4:01:b8:f4:8b:9d:32:64:e7:47:70:54:cd: e9:04:f8:d6:5d:73:0c:a8:aa:fc:43:79:3f:10:7c: 88:19:0a:53:bb:6a:e4:e1:30:83:18:2e:bb:19:db: 42:f5:6e:e1:a4:04:bc:47:ff:56:e2:42:53:fb:06: e4:dd:83:37:e2:e1:57:c5:46:39:83:f8:93:56:4e: b7:2d:45:7b:04:31:49:e4:18:b6:9e:88:4e:12:3a: f0:7c:20:5b:70:df:7c:27:5f:88:e3:bd:90:7f:4a: ea:dc:25:69:1b:65:87:ee:b2:ef:ad:a2:af:09:6f: 86:95:5f:a5:e6:05:28:ee:4c:c2:c1:03:91:5a:72: a2:20:23:39:59:23:fd:e7:54:31:c2:88:23:ed:db: 43:8a:ad:7d:36:28:a3:ce:b4:2c:8b:68:dd:3e:9c: c8:72:79:42:6b:84:a0:f1:5c:56:18:99:79:3b:56: f1:4d:27:df:16:f0:21:77:3a:8b:81:32:25:93:7a: 10:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:78:CF:28:B1:F0:1F:CD:D6:3A:FA:2D:92:58:66:9C:B0:33:41:63 X509v3 Authority Key Identifier: keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:31:3b:36:5e:52:5d:78:f5:e7:fd:1d:81:47:0e:64:f5:b1: 9a:21:eb:1a:9e:db:1f:3d:ec:99:ea:ca:8b:56:81:a1:eb:e6: 6e:90:fd:1d:99:3b:fd:31:11:86:c0:83:f8:73:b1:9a:b3:8c: e0:64:5c:be:fc:f7:67:7a:04:d9:da:ed:6d:07:79:57:06:83: 98:48:e0:26:bd:59:a7:8e:6a:ee:90:79:ba:6e:4a:c1:cc:ea: 02:bd:44:1a:90:69:0e:59:f9:80:ce:2c:f0:0b:e4:6f:ee:7a: e5:05:4c:41:69:ec:af:d9:25:64:9d:3b:ea:45:56:94:6e:81: 02:52:2f:8f:82:78:1c:64:1a:cb:47:ec:0b:78:77:81:4b:2e: ca:78:59:da:99:1c:39:fc:6e:92:1e:bc:b8:61:45:70:28:27: 39:7d:4c:61:fb:66:ee:a2:43:8a:66:79:2e:be:35:09:66:d1: 01:88:b4:eb:19:ee:5e:80:a5:86:ed:c3:5b:c8:c7:8e:a9:37: 41:79:48:c8:8e:1c:a9:f2:72:8e:18:7c:08:ec:11:4b:5e:a8: 77:40:1c:83:ff:32:5b:8d:7a:b1:7e:74:50:18:3d:50:96:b3: 76:c7:e3:73:b8:0d:c9:b7:64:26:b1:64:84:6a:c9:26:48:16: 15:cb:28:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZxU5BX4lLUZvjyaBTrYE5mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczZjIxMGYxMjk5YTFlMGFlZTcxZGMxZDc5ZTVmYjEyMDky ZDMwYTkwHhcNMjUwNDI2MDkwMDIzWhcNMjUwNDI3MDkwMDIzWjAzMTEwLwYDVQQD EyhhMzc4Y2YyOGIxZjAxZmNkZDYzYWZhMmQ5MjU4NjY5Y2IwMzM0MTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZT8wZ3MQfBfrcXkTQoNVnGySrJn 8DsP4zQhIcQOQWFue+FphM0AOLfr92a8viSHoOHSogAS4bLNw/+C/qQBuPSLnTJk 50dwVM3pBPjWXXMMqKr8Q3k/EHyIGQpTu2rk4TCDGC67GdtC9W7hpAS8R/9W4kJT +wbk3YM34uFXxUY5g/iTVk63LUV7BDFJ5Bi2nohOEjrwfCBbcN98J1+I472Qf0rq 3CVpG2WH7rLvraKvCW+GlV+l5gUo7kzCwQORWnKiICM5WSP951Qxwogj7dtDiq19 NiijzrQsi2jdPpzIcnlCa4Sg8VxWGJl5O1bxTSffFvAhdzqLgTIlk3oQrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKN4zyix8B/N1jr6LZJYZpywM0FjMB8GA1UdIwQY MBaAFHPyEPEpmh4K7nHcHXnl+xIJLTCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kYjFiNDgtMWNjNS00ODMzLTkzZDkt Yjk0NjQ3MThiYTM3LzEvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kYjFiNDgtMWNjNS00ODMzLTkzZDktYjk0NjQ3MThiYTM3 LzEvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADjE7Nl5S XXj15/0dgUcOZPWxmiHrGp7bHz3smerKi1aBoevmbpD9HZk7/TERhsCD+HOxmrOM 4GRcvvz3Z3oE2drtbQd5VwaDmEjgJr1Zp45q7pB5um5KwczqAr1EGpBpDln5gM4s 8Avkb+565QVMQWnsr9klZJ076kVWlG6BAlIvj4J4HGQay0fsC3h3gUsuynhZ2pkc Ofxukh68uGFFcCgnOX1MYftm7qJDimZ5Lr41CWbRAYi06xnuXoClhu3DW8jHjqk3 QXlIyI4cqfJyjhh8COwRS16od0Acg/8yW416sX50UBg9UJazdsfjc7gNybdkJrFk hGrJJkgWFcso5A== -----END CERTIFICATE-----Generated at Sat Apr 26 20:01:00 2025 by rpki-client