$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft File: dOPDNpcglLGowT1BgWhX0Zejquk.mft (raw, json) Hash identifier: PssO/49ccDC0kdFGAF/p1fUtfwmloN5Brh380Gfsuds= Subject key identifier: 15:21:72:F6:C2:4D:17:FC:DF:65:50:E8:5B:BF:1C:6B:15:A9:96:39 Authority key identifier: 74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9 Certificate issuer: /CN=74e3c336972094b1a8c13d41816857d197a3aae9 Certificate serial: 019671C214365749E305810CFBACF065C31E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft Manifest number: 122A Signing time: Sat 26 Apr 2025 11:01:06 +0000 Manifest this update: Sat 26 Apr 2025 11:01:06 +0000 Manifest next update: Sun 27 Apr 2025 11:01:06 +0000 Files and hashes: 1: 05CufssDJG0pTAbK0ZW527iD2UU.roa (hash: BGjazq+URRQ8AjeY79SbxnXbTrLwkTMUsC+q970r9fs=) 2: 1jpCyAps9bajWpTTNjuuJqkvGNw.roa (hash: QdNF4dszmqN93C6OMT7lYcdmskEQt8kQtHTCFEeRLK4=) 3: B-IzhwSKXhHkz88nSETOGD9yRG4.roa (hash: YnLpp9fGmyMsduAjb3ebFR0Lsy/94n7A+dxRiyz9BXo=) 4: VJ6MDr9v2VTJjopln-NK2ojxFwc.roa (hash: aCjSF+Bt+cDnTvcdibhV9s05hQuvY9LCYp3eMrgD2Ks=) 5: YOcpXFVJRTJW2caFAPTppkNQBuk.roa (hash: bsMm8G8+2Vegzn+c1SqEObi1wuYbeOXaQ994ZEYf674=) 6: ZkXHXACPVBEyaSWAI4Y5TiQ0uXg.roa (hash: 7IrCQhHl7e+sxv1qd9FACB7rpVFTzzOf7CaAsOq9lEE=) 7: a1U9llCdwrEqU4GkcwBsuwGny80.roa (hash: x9+7kA4QQzpZS4+gdNTWeXV2Ehq7i5FwV0w3Ws0zS7A=) 8: bilxvgHa_ortWdZiJoCPu9q2EO4.roa (hash: l/1X47j3OP5z+Rp05LuTXjyl7yZpgOm/aXT90ziTHDc=) 9: btX-zAe_zEJQ3ltM7sZKTKWNtzU.roa (hash: FXQNguGpvehosedHQRjCf06rJkvh5KY35ySN2Wig1dE=) 10: dOPDNpcglLGowT1BgWhX0Zejquk.crl (hash: lhZThaL45yqewcAgAGQvizXNdPLlY/nc1z2B0H0uvbI=) 11: leLN7dUwqNQXTkicjPodaPNaHrA.roa (hash: /TZBYmyqPdbIBcWc+Ubi8mL2e3Sg1zgKUo/8XZMZsK8=) 12: ltEUPJ59iMmxTdNEYLGbM1Yq6jY.roa (hash: 4OyHOUV/gpG2mHKMCDQGjjKuCFHSFtOInlqympBF1Os=) 13: pzyfVcqGqM8oIh9yspKnplAOyo4.roa (hash: hsiUYyCYakxAYsQctvaT1faoOH457ARGeeeeMVZVUZk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 11:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:71:c2:14:36:57:49:e3:05:81:0c:fb:ac:f0:65:c3:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74e3c336972094b1a8c13d41816857d197a3aae9 Validity Not Before: Apr 26 11:01:06 2025 GMT Not After : Apr 27 11:01:06 2025 GMT Subject: CN=152172f6c24d17fcdf6550e85bbf1c6b15a99639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:60:be:02:de:80:ad:8f:29:40:87:7e:4e:49: 91:6a:00:8e:b1:14:cc:af:f7:f0:e5:9d:37:30:b9: e4:77:7f:76:65:d8:f1:a8:d6:85:a7:4f:78:c8:87: d2:31:8d:45:90:62:76:7c:f0:3a:fd:04:1e:1d:7e: 1e:64:96:87:6e:58:b8:a8:2e:b8:a5:8f:e1:31:c0: ea:4b:55:69:0a:a5:e6:f4:05:0c:2c:d4:b3:05:b1: fc:4e:a6:ea:48:70:dd:76:d0:df:af:32:f0:e7:94: 88:5c:e4:58:96:37:77:23:12:8d:83:a4:ef:a5:02: 18:c3:d1:e6:0b:cf:4e:40:b3:1f:ff:2b:1c:e0:b6: 05:f1:5b:14:6a:7f:7b:60:e3:b9:1c:bc:8c:6c:3e: 12:03:24:46:d0:30:48:60:a1:6b:d0:56:81:c6:74: a4:89:ca:29:ae:6a:63:7a:bd:fc:5d:e8:4c:92:a5: 30:10:09:37:0f:04:46:db:45:01:f9:50:a4:64:60: 04:13:5a:18:08:3b:04:9d:ad:0e:aa:e7:ad:e4:5f: f7:4c:22:65:be:ba:e6:28:95:f7:a1:a8:28:8b:d2: f0:9e:dd:0b:4e:22:7f:e8:30:56:7b:ce:fe:84:c1: c7:67:15:35:14:c0:6e:1c:5c:24:15:fe:da:1f:9c: ed:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:21:72:F6:C2:4D:17:FC:DF:65:50:E8:5B:BF:1C:6B:15:A9:96:39 X509v3 Authority Key Identifier: keyid:74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:73:c3:52:75:04:05:c3:ca:e1:47:fe:b8:5b:70:c1:11:15: 21:69:e9:a6:3c:0b:f3:1e:f2:e8:0e:3c:bc:37:25:bc:c6:4a: 8e:cc:a3:09:65:a6:96:3a:a0:57:b8:68:c0:b8:6e:cb:38:82: 74:7c:10:44:85:5b:92:21:d1:9e:74:3e:73:07:09:9b:f6:ef: ad:31:46:b3:96:77:b4:e1:5f:bf:39:c2:09:d5:49:a9:ec:f6: 17:eb:a4:cd:63:a9:10:03:d0:26:1b:7c:3c:28:e4:2c:1f:2d: 7c:0a:3c:40:1f:73:d7:25:03:94:14:aa:2a:5b:df:ae:e9:5d: 0b:64:6e:ff:f1:92:56:2d:01:3a:95:ad:c8:6c:cc:44:f7:94: 8f:25:62:f4:c8:5a:a4:13:dd:dd:06:77:66:b4:2a:66:a4:e9: 78:b8:42:72:9f:ed:88:b7:99:b6:a9:17:f2:45:48:a8:8e:f2: c1:c7:03:be:bd:98:ba:b5:72:79:8e:d9:67:b3:89:e1:cc:9f: 2c:32:37:cb:e9:05:2d:91:ed:d5:a0:03:6b:fa:74:d3:34:17: 78:bf:9a:e1:a0:90:d7:07:b3:5b:49:d9:ee:4b:8c:8f:6c:0d: 3b:02:45:33:f2:42:02:4a:bc:b1:52:a4:33:ee:df:cc:65:33: df:c5:d5:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZxwhQ2V0njBYEM+6zwZcMeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZTNjMzM2OTcyMDk0YjFhOGMxM2Q0MTgxNjg1N2QxOTdh M2FhZTkwHhcNMjUwNDI2MTEwMTA2WhcNMjUwNDI3MTEwMTA2WjAzMTEwLwYDVQQD EygxNTIxNzJmNmMyNGQxN2ZjZGY2NTUwZTg1YmJmMWM2YjE1YTk5NjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGC+At6ArY8pQId+TkmRagCOsRTM r/fw5Z03MLnkd392ZdjxqNaFp094yIfSMY1FkGJ2fPA6/QQeHX4eZJaHbli4qC64 pY/hMcDqS1VpCqXm9AUMLNSzBbH8TqbqSHDddtDfrzLw55SIXORYljd3IxKNg6Tv pQIYw9HmC89OQLMf/ysc4LYF8VsUan97YOO5HLyMbD4SAyRG0DBIYKFr0FaBxnSk icoprmpjer38XehMkqUwEAk3DwRG20UB+VCkZGAEE1oYCDsEna0Oquet5F/3TCJl vrrmKJX3oagoi9Lwnt0LTiJ/6DBWe87+hMHHZxU1FMBuHFwkFf7aH5zt8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBUhcvbCTRf832VQ6Fu/HGsVqZY5MB8GA1UdIwQY MBaAFHTjwzaXIJSxqME9QYFoV9GXo6rpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAt YTZjNDllYjI4Mjg3LzEvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAtYTZjNDllYjI4Mjg3 LzEvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoHPDUnUE BcPK4Uf+uFtwwREVIWnppjwL8x7y6A48vDclvMZKjsyjCWWmljqgV7howLhuyziC dHwQRIVbkiHRnnQ+cwcJm/bvrTFGs5Z3tOFfvznCCdVJqez2F+ukzWOpEAPQJht8 PCjkLB8tfAo8QB9z1yUDlBSqKlvfruldC2Ru//GSVi0BOpWtyGzMRPeUjyVi9Mha pBPd3QZ3ZrQqZqTpeLhCcp/tiLeZtqkX8kVIqI7ywccDvr2YurVyeY7ZZ7OJ4cyf LDI3y+kFLZHt1aADa/p00zQXeL+a4aCQ1wezW0nZ7kuMj2wNOwJFM/JCAkq8sVKk M+7fzGUz38XV0Q== -----END CERTIFICATE-----Generated at Sat Apr 26 17:59:12 2025 by rpki-client