$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft File: 0d4STg-K2059lXbOrjJfZo3SJLE.mft (raw, json) Hash identifier: QE1jCBu5qHtRKrifVwz6CZoQH4UVBuYNX24skk9r1Bs= Subject key identifier: 83:0E:FD:AC:90:00:64:D3:56:EC:AE:99:AD:E4:15:75:3B:A7:7D:C0 Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1 Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1 Certificate serial: 019671F89AC33D19609E6608798433C5C608 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft Manifest number: 102C Signing time: Sat 26 Apr 2025 12:00:40 +0000 Manifest this update: Sat 26 Apr 2025 12:00:40 +0000 Manifest next update: Sun 27 Apr 2025 12:00:40 +0000 Files and hashes: 1: 0d4STg-K2059lXbOrjJfZo3SJLE.crl (hash: 9OOkw0OiAUE18IMj30QHiXWm2ICd0Vs2uAKBr4Ygu/U=) 2: 173-Kv1jDbMWH-4jzzP9yAxk8zA.roa (hash: RAtumuE7sBDLlYGFZheJtE3TDChYxfxrc7dviHDr/Y8=) 3: 21R7B0PZj4S2nfPcu6UWFcUKPgw.roa (hash: qB6ZX383pt5nIhJxyHETDpwIazDIAavubmmD8LzTgMY=) 4: 6caVUV-TGB9bU55p1ya71OWBwvg.roa (hash: c0tRExOUVeBF8+Pq6PhYarD4KHj6+N7f0p/w2jdUK80=) 5: NAlGVYpV8OEmdD2nIMiqn334k0M.roa (hash: XrkbVPgrR7sOnmYGzDR8m+MZN8NJUZRQwjZqOHkM5b8=) 6: dNqRqY6tmtgccI8cx_uJ4tWqiZA.roa (hash: g+K2hBhsL/swaozLRy4ek/JzzpG8kCplNhlD1lsyOeY=) 7: dm3YzK1xAmi2Sk5h8a3Khi5LGPM.roa (hash: p3jFvRhnZ5PWDigF+fLcdkZKduSSZASiccn7Ico+UoY=) 8: g8zmfO2HPSEN8YUDrAkY2r7Nlqw.roa (hash: uAg57JMTD8oD+ghOOtfACvdQoLeAHc5YjQ/CuCFoViY=) 9: hacEV-MoLT8z9KwMPWss3cGE7Ak.roa (hash: /ljDI2bMRna9vPYEiWkrDiOeR+IfW8BnSxXE9Vp7xXE=) 10: odu_cE6nPid9mTtdeynLn3Tm0LI.roa (hash: t/tnuabvUXprLV1nfI7C0+QM/zgYQu0v/clGVZKqTgc=) 11: qnoXcobTtJZawYccy6q_j_ktEjQ.roa (hash: YgqRq2TALdrM9up57j8hrsz1UPh0HBnD1px4pxGN8rs=) 12: xiZp6eivWb7x_d9W-WC8kwhVWsI.roa (hash: GvxU73beqXLMBxGmaGGngexgQ65uQMfsvmeuizGIl8o=) 13: yv08EH90nRPgnJ4aLVioWHP74iI.roa (hash: wfa+cbtIfXj/VcabZ84otkiskAuSmrS6+55fqOkIL+o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 11:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:71:f8:9a:c3:3d:19:60:9e:66:08:79:84:33:c5:c6:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1 Validity Not Before: Apr 26 12:00:40 2025 GMT Not After : Apr 27 12:00:40 2025 GMT Subject: CN=830efdac900064d356ecae99ade415753ba77dc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b4:2d:e8:7a:5b:5d:f2:22:db:48:66:6d:3a: 3b:41:70:7b:6b:d7:15:15:1b:09:4d:1e:b8:ca:bb: 09:95:58:21:2f:5f:fc:cf:13:8e:00:58:7a:4a:02: 8b:7d:fb:38:52:dd:88:c0:05:29:d7:6c:6e:a4:1d: b9:b9:2c:c3:4d:71:e4:83:51:1a:9f:7e:37:30:e4: 40:d3:71:92:e2:c4:4e:b6:9b:94:d7:42:0f:25:c0: 07:1c:13:9e:61:6f:92:b5:84:ab:c5:3f:9e:7e:b0: 0d:f7:79:f8:cb:0f:06:71:93:17:ce:d5:92:d7:91: 03:e2:19:55:cc:7f:90:9f:9a:c9:a8:f7:32:36:00: 99:71:0c:0d:4f:88:2d:ac:dd:3f:29:42:d9:b2:42: a7:9c:c2:d7:78:49:b9:06:53:27:af:d3:6f:c7:f1: e6:94:d8:7a:b2:95:2b:c0:b9:41:d7:8b:ff:63:25: 68:d4:00:a0:59:85:e2:3b:17:4a:8e:50:94:53:59: 28:f1:7e:f8:86:c2:d9:60:81:9b:bc:45:f9:b4:27: cf:b5:76:a6:29:20:f0:45:14:bd:b9:9b:73:df:c4: c4:54:bf:ba:4a:6f:f8:f7:cf:bb:0c:e2:64:f2:22: 95:9e:e4:8f:59:0d:9b:5b:4c:e8:57:a9:65:34:f4: d4:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:0E:FD:AC:90:00:64:D3:56:EC:AE:99:AD:E4:15:75:3B:A7:7D:C0 X509v3 Authority Key Identifier: keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:6c:4d:77:a0:45:6c:bb:fd:ab:cc:4e:a6:46:ab:14:74:c8: e0:c8:79:36:5a:ed:b5:0a:11:3b:df:b4:b7:e8:8e:04:f2:89: c6:cd:d0:90:ac:53:29:52:39:eb:76:e2:a9:4f:4d:cf:df:b4: b5:81:20:7e:48:9a:b7:57:31:b7:55:db:83:5e:02:3c:15:01: 65:4f:77:a5:34:51:eb:e7:a4:f7:ad:4a:dc:0c:55:e9:10:e4: 76:87:1e:e1:84:d7:88:c2:a4:78:29:97:25:8a:d2:0e:87:ee: db:b4:46:30:cb:91:1c:66:a5:09:fb:17:1e:14:55:37:9d:6f: 52:d3:bb:1f:45:75:e7:e1:a1:f3:8f:5c:f6:74:d8:7a:7d:51: db:e9:19:9c:d8:ab:16:24:64:d4:6a:e1:96:f7:ba:6d:e3:1a: 9e:e2:d1:4c:b2:69:a4:55:03:74:20:49:24:f1:ee:2a:ae:ed: f3:ad:d7:5e:94:68:5c:b0:90:f7:6a:51:14:46:8d:10:2a:f3: 4c:26:0a:24:34:48:d4:9a:ec:09:cd:a9:31:01:30:9e:b9:af: 35:96:38:b6:13:0e:d3:53:ca:c3:09:6f:41:45:15:ec:5a:34: e8:ff:12:36:07:1b:9e:de:af:14:86:8b:18:1e:e0:da:6a:b9: 27:d0:37:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZx+JrDPRlgnmYIeYQzxcYIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxZGUxMjRlMGY4YWRiNGU3ZDk1NzZjZWFlMzI1ZjY2OGRk MjI0YjEwHhcNMjUwNDI2MTIwMDQwWhcNMjUwNDI3MTIwMDQwWjAzMTEwLwYDVQQD Eyg4MzBlZmRhYzkwMDA2NGQzNTZlY2FlOTlhZGU0MTU3NTNiYTc3ZGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLQt6HpbXfIi20hmbTo7QXB7a9cV FRsJTR64yrsJlVghL1/8zxOOAFh6SgKLffs4Ut2IwAUp12xupB25uSzDTXHkg1Ea n343MORA03GS4sROtpuU10IPJcAHHBOeYW+StYSrxT+efrAN93n4yw8GcZMXztWS 15ED4hlVzH+Qn5rJqPcyNgCZcQwNT4gtrN0/KULZskKnnMLXeEm5BlMnr9Nvx/Hm lNh6spUrwLlB14v/YyVo1ACgWYXiOxdKjlCUU1ko8X74hsLZYIGbvEX5tCfPtXam KSDwRRS9uZtz38TEVL+6Sm/498+7DOJk8iKVnuSPWQ2bW0zoV6llNPTUFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIMO/ayQAGTTVuyuma3kFXU7p33AMB8GA1UdIwQY MBaAFNHeEk4PittOfZV2zq4yX2aN0iSxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9hYmUxMzQtMDA5My00NjUyLTkwNTct NGY0YzliMzQzZTkwLzEvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9hYmUxMzQtMDA5My00NjUyLTkwNTctNGY0YzliMzQzZTkw LzEvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnmxNd6BF bLv9q8xOpkarFHTI4Mh5NlrttQoRO9+0t+iOBPKJxs3QkKxTKVI563biqU9Nz9+0 tYEgfkiat1cxt1Xbg14CPBUBZU93pTRR6+ek961K3AxV6RDkdoce4YTXiMKkeCmX JYrSDofu27RGMMuRHGalCfsXHhRVN51vUtO7H0V15+Gh849c9nTYen1R2+kZnNir FiRk1Grhlve6beManuLRTLJppFUDdCBJJPHuKq7t863XXpRoXLCQ92pRFEaNECrz TCYKJDRI1JrsCc2pMQEwnrmvNZY4thMO01PKwwlvQUUV7Fo06P8SNgcbnt6vFIaL GB7g2mq5J9A3kg== -----END CERTIFICATE-----Generated at Sat Apr 26 19:32:58 2025 by rpki-client