$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.mft File: JgsrxFR3yB13TaoMKKtEt3S6CSA.mft (raw, json) Hash identifier: NblSsiS/n5D91kdUHCCqXi0zj2g9d3+EKuc/4S+irZA= Subject key identifier: BD:7D:92:CB:61:6A:EB:87:AE:AA:AA:DE:12:DA:69:59:8D:E3:AA:D9 Authority key identifier: 26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20 Certificate issuer: /CN=260b2bc45477c81d774daa0c28ab44b774ba0920 Certificate serial: 0196759E6BFCA6F36C1AFB218E7FDBE7B3BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.mft Manifest number: 0C77 Signing time: Sun 27 Apr 2025 05:00:38 +0000 Manifest this update: Sun 27 Apr 2025 05:00:38 +0000 Manifest next update: Mon 28 Apr 2025 05:00:38 +0000 Files and hashes: 1: 1-vjUFL9eUKNOH3DNHSKdRzXwLrc.roa (hash: E1OFkXJ2w0WBHM/2jJG2VFE7A0dOsn0uyLBEvDN92CY=) 2: 8lMp3upOjvKabeuPr8harlhhZMA.roa (hash: JfxQ8Tbw+NbKFbAKWvBY1hIKmCOOIiaKteB1BNHEjvw=) 3: 9Qp1lz6gdlmei4XDqjlb77aIr4c.roa (hash: /GHn25dkvuTMHnSPHF1/eiqXw/UVrF8KRTTdkWjQJCk=) 4: ElmmUi2BA5xfl3RGwKTnaLyhbiU.roa (hash: 7/HLb9yrgfenir+DMxSIjZmUv+UwMCuizDLWvP+aaNw=) 5: ISu3CKnG01278gAzZ5TXbh4oeZ0.roa (hash: lAZS+Ip4RMA6WRO3hHfnIY86tFVS0Vo5ipjWeb7di/A=) 6: JgsrxFR3yB13TaoMKKtEt3S6CSA.crl (hash: kCxk0hrBguv/+4hOyDkcTLnOfUL6BljJIY++12PwCxw=) 7: NP-nZYWNfLECtv0CKEzsF8IgDJw.roa (hash: qjjM+wtgH54DJzP+JxnpxKk4qde6Hf4P9ImKC020KxU=) 8: TiJ8h1qlcilwepecSwvXjw5DbUQ.roa (hash: i3FrVocCPmFO/RIdZF92/i/Jo2J9RsAjOqfHgmiRxmw=) 9: YLMZPsprpRxhmDT0WIbhqx6F--Y.roa (hash: tFoaXBl2VXqD6JFS6seQ88nt8uiv/guhHad/lARB2fE=) 10: csEf9syoFNTGaMlU5MhYUuOIBiQ.roa (hash: SLfRD5P3fO1tXNQj8q98v89NmGiqv9196LApLqBPnXA=) 11: dFDN-XA6JpGBZkHYDxNVO2s_Oxc.roa (hash: plia5S39nNrwcKNX4FNbwHslUWBBGI1jOUjcil+qN+0=) 12: en8nzWGtf10islE8QqdlR4YhdFI.roa (hash: U8OOoKnf7CTO1HtbX3OrrQUalNfVeLzf0c6wknYG0oc=) 13: pAFGuOmFiinmNtzDNIWAAHCBzL8.roa (hash: smnkSIWrC+aFHsjL39EpGOubWh1B5xY83hqBzhP60WM=) 14: sNX7m19Q4f93jZSLto3SXxcMlN0.roa (hash: 6kJ1u/k/CP7HU6lSzylQyIDCN0aXiAlRkfuNvpisAHg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.mft rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 02:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:75:9e:6b:fc:a6:f3:6c:1a:fb:21:8e:7f:db:e7:b3:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=260b2bc45477c81d774daa0c28ab44b774ba0920 Validity Not Before: Apr 27 05:00:38 2025 GMT Not After : Apr 28 05:00:38 2025 GMT Subject: CN=bd7d92cb616aeb87aeaaaade12da69598de3aad9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:74:15:d1:23:db:37:e8:14:9b:f6:e7:7f:c4: ab:0e:fc:a6:66:9d:4e:dd:87:88:77:85:b3:11:83: 64:a7:df:3b:eb:53:98:3f:53:f8:b7:d2:50:2a:36: 64:84:bd:80:3a:6a:35:19:ae:1d:66:d8:07:99:e1: 9b:1d:e2:da:90:7a:cc:c1:5e:5d:1a:ff:2e:95:9a: f9:ab:8e:df:3b:2f:5e:f9:f6:9b:35:b8:1b:24:3e: ce:38:00:1f:7e:91:60:3f:ba:29:30:54:5c:62:bc: f1:9b:d0:8e:f4:b8:c1:ed:eb:37:5f:b6:ae:27:f4: 5f:cf:c2:f0:33:bf:8d:f4:56:97:80:26:d3:cd:6e: 0c:82:0a:79:d8:14:8a:f1:97:97:0d:56:b5:e8:30: ff:70:85:3f:39:c3:0d:4d:94:92:a6:65:3f:6d:7d: f2:ac:f4:b4:bb:2f:0c:59:2b:da:a2:2c:75:ac:7e: 52:3b:1d:4f:81:92:cf:3f:d4:ee:00:ed:22:cd:71: db:76:25:0e:2c:9f:04:76:4a:67:57:dc:99:a3:85: e8:a4:27:b1:b2:55:d8:cb:36:03:09:aa:b5:de:70: 44:dc:85:f5:73:98:5e:87:8c:0e:3e:02:fd:57:c7: a7:f6:16:6f:3d:db:02:7a:95:62:3a:3f:74:66:7f: 04:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:7D:92:CB:61:6A:EB:87:AE:AA:AA:DE:12:DA:69:59:8D:E3:AA:D9 X509v3 Authority Key Identifier: keyid:26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:25:e8:1e:1f:e2:92:7a:a2:ce:64:29:9f:5f:41:d5:87:4b: 2d:a1:99:30:46:77:d3:88:dd:16:52:01:15:a6:26:8c:ee:a4: 44:fc:60:2c:70:03:76:fc:d4:48:3b:79:5d:f1:73:61:27:7a: c9:04:93:40:b2:9e:5f:8e:67:d1:94:d9:74:ae:23:ae:ad:66: 6b:1c:1d:0a:2f:da:2b:90:ac:c0:bc:f0:5f:a9:da:c7:be:42: b1:ce:cd:ae:78:4b:e7:1f:42:c0:c9:e0:c2:8a:3c:0f:6b:66: 2d:4f:1a:9d:2a:6b:83:b3:7b:e3:fb:77:6d:32:8e:ca:1d:b6: 4b:79:c8:43:4d:41:62:d4:20:51:80:77:4c:73:3a:fa:18:a3: e0:4a:66:d4:97:73:40:f2:9b:14:a2:8c:4f:d7:78:b8:5d:d7: 1a:9b:38:37:c6:99:94:c7:09:8d:dd:ef:89:07:4f:e0:a9:5e: 3d:fa:91:8c:53:a1:dc:60:77:55:e6:f1:80:e8:5b:cb:c4:96: fd:6d:9a:d8:8e:36:c4:31:71:ea:29:59:c2:44:9d:35:ec:02: c1:5a:23:3a:fc:40:a4:74:1d:a2:b8:51:54:9f:20:45:94:42: cd:4c:7e:21:24:ea:86:09:9a:59:f7:75:81:94:ed:8d:b0:84: f9:de:67:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ1nmv8pvNsGvshjn/b57O/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2MGIyYmM0NTQ3N2M4MWQ3NzRkYWEwYzI4YWI0NGI3NzRi YTA5MjAwHhcNMjUwNDI3MDUwMDM4WhcNMjUwNDI4MDUwMDM4WjAzMTEwLwYDVQQD EyhiZDdkOTJjYjYxNmFlYjg3YWVhYWFhZGUxMmRhNjk1OThkZTNhYWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXQV0SPbN+gUm/bnf8SrDvymZp1O 3YeId4WzEYNkp98761OYP1P4t9JQKjZkhL2AOmo1Ga4dZtgHmeGbHeLakHrMwV5d Gv8ulZr5q47fOy9e+fabNbgbJD7OOAAffpFgP7opMFRcYrzxm9CO9LjB7es3X7au J/Rfz8LwM7+N9FaXgCbTzW4Mggp52BSK8ZeXDVa16DD/cIU/OcMNTZSSpmU/bX3y rPS0uy8MWSvaoix1rH5SOx1PgZLPP9TuAO0izXHbdiUOLJ8EdkpnV9yZo4XopCex slXYyzYDCaq13nBE3IX1c5heh4wOPgL9V8en9hZvPdsCepViOj90Zn8EMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL19ksthauuHrqqq3hLaaVmN46rZMB8GA1UdIwQY MBaAFCYLK8RUd8gdd02qDCirRLd0ugkgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmdzcnhGUjN5QjEzVGFvTUtLdEV0M1M2Q1NBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83YjEyMDUtMzQ1MC00ZTkwLThiMTQt MTdlNjZjMWZkM2QxLzEvSmdzcnhGUjN5QjEzVGFvTUtLdEV0M1M2Q1NBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS83YjEyMDUtMzQ1MC00ZTkwLThiMTQtMTdlNjZjMWZkM2Qx LzEvSmdzcnhGUjN5QjEzVGFvTUtLdEV0M1M2Q1NBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADyXoHh/i knqizmQpn19B1YdLLaGZMEZ304jdFlIBFaYmjO6kRPxgLHADdvzUSDt5XfFzYSd6 yQSTQLKeX45n0ZTZdK4jrq1maxwdCi/aK5CswLzwX6nax75Csc7NrnhL5x9CwMng woo8D2tmLU8anSprg7N74/t3bTKOyh22S3nIQ01BYtQgUYB3THM6+hij4Epm1Jdz QPKbFKKMT9d4uF3XGps4N8aZlMcJjd3viQdP4KlePfqRjFOh3GB3VebxgOhby8SW /W2a2I42xDFx6ilZwkSdNewCwVojOvxApHQdorhRVJ8gRZRCzUx+ISTqhgmaWfd1 gZTtjbCE+d5nSg== -----END CERTIFICATE-----Generated at Sun Apr 27 06:36:36 2025 by rpki-client