$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft File: RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft (raw, json) Hash identifier: CcxHFPy5kn0an1bpNKGRF1OaGaHWKcfBj7cNHL/Ttpk= Subject key identifier: C5:0F:51:38:54:4A:49:AD:F4:E4:39:55:0D:18:18:89:E3:49:7F:7C Authority key identifier: 45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2 Certificate issuer: /CN=458d12f095053c35876b88b47685d6435421fcf2 Certificate serial: 01967F0F909C132EE2E1186F20D148E5750C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft Manifest number: 1521 Signing time: Tue 29 Apr 2025 01:00:48 +0000 Manifest this update: Tue 29 Apr 2025 01:00:48 +0000 Manifest next update: Wed 30 Apr 2025 01:00:48 +0000 Files and hashes: 1: 0bSG1GbQSr3JP2M9BW2A6zWEmWQ.roa (hash: m8/KEzPrRo4PqG3DFfILeyvmSqlK6Zrphut5P8ccG8c=) 2: 9lwL98-HDVBrZzYLRCpSdOAFXpo.roa (hash: Za/9eX9VNb3FiSxJk6MAE/CpFGWxRO5mjghE1elRivc=) 3: B0iUIhkwv2ZZdyXRyu9yUh7Z61o.roa (hash: F6O6OkDRyyyGqFimHsLztSYsh0AUNFPNkRW3jSPwvEw=) 4: I1EoUAseUd3MHO-sI_txqICBiwc.roa (hash: khM+HdjIw9WozXCqEk/wtCOtMrpNfxWXErjSXn8BT5M=) 5: KQ7nGqqdl8DwDw35UdDbOJPZhfY.roa (hash: 8pIf1gsysAeCO62ayw5k2bU+b1g8t0mrR6+zNCtTibQ=) 6: LS_oKjOyENRZwn9y786G7x_fDEc.roa (hash: qwrjawF9Z67WE+ivjm8mPIl3xqaLReHxca9+SNnwKPE=) 7: Pvub5ztTS47f0XG6tBZE9ngX8Rw.roa (hash: euQ5dqT6xwCfoTsPu9P7kfQ9UGdbPzkkEJWSyFwCBTw=) 8: RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl (hash: +M6N+jVjHDlY9TKOlBOKJbdjTdiW0IUK1ikPBAKRypw=) 9: lqxGizsVmZbvi7xpd3yzs2I4ILw.roa (hash: aTi4SECMvkjegR9/FyzL9HTmeGkM0AsiVgyipWCsYrY=) 10: sFnlwbiQ75y8_114DKwn3kP_iWc.roa (hash: dkHr9wKemXLLSQfaJK2+kCvWwELtA6u+nMBynz2rXgQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:7f:0f:90:9c:13:2e:e2:e1:18:6f:20:d1:48:e5:75:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458d12f095053c35876b88b47685d6435421fcf2 Validity Not Before: Apr 29 01:00:48 2025 GMT Not After : Apr 30 01:00:48 2025 GMT Subject: CN=c50f5138544a49adf4e439550d181889e3497f7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:14:56:12:c8:0f:d3:1c:0e:ac:d7:67:e1:c0: 0b:f7:fc:65:cf:0b:31:7c:b0:c9:d9:60:89:99:14: f4:5f:6a:e8:9f:42:bc:72:29:4a:83:df:8f:5b:23: 00:ca:8a:63:5e:24:28:7f:0a:f3:2d:08:bc:6d:6d: e3:cd:9e:9e:fb:4f:98:46:d8:71:ff:64:fb:e4:ff: 44:70:d7:11:ce:1e:87:7d:60:2c:8d:41:8c:40:26: 61:64:6b:75:48:c6:20:fa:70:48:2e:b4:cd:f2:00: 71:60:62:e5:07:75:e3:00:26:e7:35:d0:85:e1:64: ae:5a:ad:d9:95:0a:f0:0c:6f:6f:76:c5:a8:ad:4c: f9:05:9f:ce:f5:c1:2c:75:28:9b:43:66:b7:2c:25: 97:e5:5c:c0:d6:30:57:df:8e:f7:5b:07:43:ab:56: 85:31:0a:1b:c9:a2:80:6f:50:68:b4:f1:7d:e4:d1: c3:14:2e:73:52:27:bd:a9:f4:1c:47:53:b0:8e:2f: 95:42:f2:5d:ea:5c:21:82:64:1c:f8:ed:12:9a:75: 65:5c:e3:a9:4f:51:5e:7b:b9:8e:e8:90:27:60:3d: 8f:15:9b:2e:54:10:35:9d:47:fb:5b:b6:b7:fc:e4: 5b:da:f8:55:21:0b:5c:de:ac:7a:aa:65:ed:76:d7: 47:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:0F:51:38:54:4A:49:AD:F4:E4:39:55:0D:18:18:89:E3:49:7F:7C X509v3 Authority Key Identifier: keyid:45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:f6:09:ac:e8:e3:20:5e:b1:cc:b3:28:54:c8:0a:1c:7f:19: fa:bb:29:01:a2:e3:0b:6d:68:a8:04:2c:62:dd:6d:cd:bd:13: 93:e3:60:40:22:5e:0f:1c:17:62:81:58:9e:4a:90:85:a6:cd: ce:39:5f:4a:71:fc:71:5f:4e:53:35:3f:ca:c3:61:33:e4:9a: 2d:ab:8f:96:ec:b3:03:89:0e:ad:7c:8b:36:59:85:41:f9:fe: 29:ca:32:64:96:32:93:34:aa:12:6c:38:48:b2:e6:92:0f:38: b9:c8:16:20:64:f8:f8:49:77:9b:c7:e0:9d:76:57:f7:29:c8: 2d:4d:b9:c5:74:04:35:4d:f0:64:ac:65:0e:48:70:a0:da:e5: 53:b2:33:c1:79:11:b7:41:ed:90:74:a8:65:ed:3b:62:16:d4: 3f:4d:58:94:75:1a:92:41:ba:ae:56:c6:56:a3:12:40:e9:03: d2:c1:14:b9:ec:75:01:bf:95:6f:8a:a9:29:48:7f:da:24:54: 8f:f0:05:98:39:ce:fb:96:0a:75:f5:d9:38:21:94:64:c3:6f: 80:83:49:43:db:49:b9:9e:16:99:6d:d2:77:7d:55:65:7a:66: cf:5b:50:75:bd:1a:6c:bf:c0:a9:bc:1f:cd:d4:a6:55:54:67: a8:97:8e:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ/D5CcEy7i4RhvINFI5XUMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OGQxMmYwOTUwNTNjMzU4NzZiODhiNDc2ODVkNjQzNTQy MWZjZjIwHhcNMjUwNDI5MDEwMDQ4WhcNMjUwNDMwMDEwMDQ4WjAzMTEwLwYDVQQD EyhjNTBmNTEzODU0NGE0OWFkZjRlNDM5NTUwZDE4MTg4OWUzNDk3ZjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBRWEsgP0xwOrNdn4cAL9/xlzwsx fLDJ2WCJmRT0X2ron0K8cilKg9+PWyMAyopjXiQofwrzLQi8bW3jzZ6e+0+YRthx /2T75P9EcNcRzh6HfWAsjUGMQCZhZGt1SMYg+nBILrTN8gBxYGLlB3XjACbnNdCF 4WSuWq3ZlQrwDG9vdsWorUz5BZ/O9cEsdSibQ2a3LCWX5VzA1jBX3473WwdDq1aF MQobyaKAb1BotPF95NHDFC5zUie9qfQcR1Owji+VQvJd6lwhgmQc+O0SmnVlXOOp T1Fee7mO6JAnYD2PFZsuVBA1nUf7W7a3/ORb2vhVIQtc3qx6qmXtdtdHrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMUPUThUSkmt9OQ5VQ0YGInjSX98MB8GA1UdIwQY MBaAFEWNEvCVBTw1h2uItHaF1kNUIfzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83Y2VjYzctZjYzZC00M2ZjLWIyMTkt Mzk1NTk1OWVhZjgxLzEvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS83Y2VjYzctZjYzZC00M2ZjLWIyMTktMzk1NTk1OWVhZjgx LzEvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALvYJrOjj IF6xzLMoVMgKHH8Z+rspAaLjC21oqAQsYt1tzb0Tk+NgQCJeDxwXYoFYnkqQhabN zjlfSnH8cV9OUzU/ysNhM+SaLauPluyzA4kOrXyLNlmFQfn+KcoyZJYykzSqEmw4 SLLmkg84ucgWIGT4+El3m8fgnXZX9ynILU25xXQENU3wZKxlDkhwoNrlU7IzwXkR t0HtkHSoZe07YhbUP01YlHUakkG6rlbGVqMSQOkD0sEUuex1Ab+Vb4qpKUh/2iRU j/AFmDnO+5YKdfXZOCGUZMNvgINJQ9tJuZ4WmW3Sd31VZXpmz1tQdb0abL/Aqbwf zdSmVVRnqJeO4g== -----END CERTIFICATE-----Generated at Tue Apr 29 07:27:22 2025 by rpki-client