$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft File: bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft (raw, json) Hash identifier: g9+f00z6txd6r34wN4rCyGEIH+RwU1XbFJ0mB5svqg4= Subject key identifier: 3E:EE:45:5D:76:B6:49:63:ED:4F:EA:A5:B2:B9:C7:79:72:55:9E:41 Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35 Certificate issuer: /CN=6d088cef28e02af7d00f297816c55f8e3c43d535 Certificate serial: 019676E7FCA42F6994F58B4365957F4797C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft Manifest number: 0812 Signing time: Sun 27 Apr 2025 11:00:37 +0000 Manifest this update: Sun 27 Apr 2025 11:00:37 +0000 Manifest next update: Mon 28 Apr 2025 11:00:37 +0000 Files and hashes: 1: EEK5h733GgwCs0WLVpqLrGo9ZG0.roa (hash: N2crl3QJ7UnqksAKF6ONENjAw+MlaZ++wJWtHpcZCCo=) 2: EeRJfPRF7a3wwh-vbetINiCYobw.roa (hash: OhoqMaZazc1P2Azp0jTNViTiYycEgII0m+//TdrzOFM=) 3: J8OV6sWb08R90TMyBueJQSzBQfs.roa (hash: kHoZa6hyYf5NS9P0kFkvBZ2kHqlOD6SQE3IhW/5skoU=) 4: L-zAQKQylAwMOWOD8KogBSnuStI.roa (hash: BIslxPlAV+Qa2N9u4A+l71nINfewXHqfB8ShkpyQ/fE=) 5: Tr2lFtVHl_6azdLf4MhlzHjBXeI.roa (hash: TNlarbzWV21tOljiHNGKSTQFIJSJA906zY/LVf//P2c=) 6: URtx2Qs2hmoNbexNjDCH87s_d7U.roa (hash: aGVY4s+OAba7NfmkmxPvmFp/W9HemkPnjycLftzsaqw=) 7: X2rACUC1DNfg5wWXCDcFu7ZLgEw.roa (hash: g7h8t2fvA2uFR3cdj4CAvCvbd9J1/DKm+OiMSTwzs84=) 8: aEYrq5OTszYCkrQCOg6UNIZ4ixg.roa (hash: NnX8w21s85sec40Tib0/WU4IMC7GCNy++WkrtuMHZBQ=) 9: b9VdPpDdBNcdj9AHIrIZzSw6ufI.roa (hash: CbCURFE9hdZB2JAB/+EmF2z3GhY68Qqk8qinRoqy/Rw=) 10: bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl (hash: XBuWdHRrktZUrJLVAxVOvwduCDPh9LSbDvBntyyMuBU=) 11: iDTqLQGlZf0o0g616HIqRtwNiYs.roa (hash: TywFJSy0+ByfjWm+cngApzau6nnLlHrdsw/oJofNjeY=) 12: ppb7zwfGhsGHXV4qIGbEGzExlww.roa (hash: rrX4uS4Q47f8xCuszkUdxiXV8rHUapmYAN7FcML9vnU=) 13: rQMc8tlbD24MLedawDrFjbFwrbU.roa (hash: 96Ec+H4X1QQDrOAwkuHuDNv0NdIpnRkAMRD5A4fFZtA=) 14: tryiJsr_1C6Wl6lmV6_fRxv9JpU.roa (hash: p0acgkVQIk/SEvXPYgI9n2gjSFwqTpydiov8yUCFYeQ=) 15: yc556VZRN51TX5Opo32pMpmaqyc.roa (hash: JUEUgIf6cuFn4ydX3ZXU1bMUG5S/hNysKafNtqmmPcs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 11:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:76:e7:fc:a4:2f:69:94:f5:8b:43:65:95:7f:47:97:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535 Validity Not Before: Apr 27 11:00:37 2025 GMT Not After : Apr 28 11:00:37 2025 GMT Subject: CN=3eee455d76b64963ed4feaa5b2b9c77972559e41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:77:41:5e:a4:8b:87:d4:03:0d:e9:1d:7b:d2: 5c:36:e0:89:7e:9e:82:95:f8:d6:13:f1:24:b0:99: 1e:ec:f6:a1:c0:18:d9:7a:fd:9a:16:b8:78:ed:3f: b8:57:e0:96:2c:71:3b:9e:4e:04:a4:ea:eb:b6:6b: 61:fb:7a:2d:43:36:70:0a:6e:c8:a6:66:4d:fc:f3: 37:bb:21:38:bd:bf:38:ae:f3:0e:29:7b:a4:6b:f3: b4:cc:be:7f:5e:e4:ea:a0:14:1d:1a:8a:4c:c9:55: 67:46:e3:e9:29:09:83:23:b0:1d:78:3d:d8:3f:b2: 70:5f:b8:ff:f9:dd:1c:87:82:c7:95:e1:84:6d:86: 4f:1f:e9:fc:fd:47:b9:d4:96:49:d9:d7:34:0c:09: 54:82:42:1b:1a:a8:6d:ba:fe:c6:77:74:84:ea:43: b5:a1:3f:43:1d:88:9f:6a:95:4d:83:be:90:04:4b: e7:8b:b0:86:c8:ec:b5:d8:62:3a:82:74:e9:b0:14: 96:88:7b:1c:ee:d7:5d:92:31:17:4b:0d:d8:f8:a8: 72:23:b5:e4:4e:b4:b1:3c:36:ae:83:ea:84:87:25: ce:db:d8:9a:0a:96:93:a5:ea:0c:23:5d:2b:a3:e2: f7:8a:85:d0:01:5b:7f:41:dc:9c:e6:a6:67:df:c7: 2b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:EE:45:5D:76:B6:49:63:ED:4F:EA:A5:B2:B9:C7:79:72:55:9E:41 X509v3 Authority Key Identifier: keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:07:35:b0:55:df:0e:6e:43:a9:5e:5d:98:82:77:f5:5b:54: 39:2a:ac:d4:61:fa:10:d4:1a:50:d8:ea:d0:e7:39:68:b5:b7: 74:a8:83:c3:b1:91:5b:84:ad:ec:f0:94:da:95:d2:d2:8d:b6: b0:14:99:04:20:f7:2e:61:b7:75:ed:e4:97:91:74:aa:b8:07: f1:b3:16:23:c5:f9:e6:50:c2:9c:ad:b0:b7:17:1a:b5:ff:ff: 6a:2b:03:5f:3a:20:b9:e5:fa:f5:a0:a0:6b:9b:58:a4:f9:ab: f0:d6:22:6e:7c:26:ac:0b:95:0d:5a:81:ad:d1:6f:5e:7c:0c: ed:38:d2:80:30:65:08:99:b4:01:12:66:b8:04:5a:b5:e9:b9: 1d:7f:ac:16:79:a3:29:e5:fa:f7:0b:8e:f0:35:43:4b:91:d8: ea:eb:b4:66:1c:fb:dd:79:ed:42:ab:92:50:56:c1:3b:4d:ba: e2:a9:7b:57:38:cc:e5:e0:ed:4b:d1:eb:8b:e5:bf:76:02:fd: 36:e9:02:8c:01:a3:cc:ea:05:4a:7b:69:d4:4f:1a:2e:14:c6: 99:f0:b8:74:60:58:6e:96:bd:75:4b:38:9c:dc:8a:01:5c:dc: c1:a6:7a:34:e3:b2:28:1c:25:39:fc:96:48:26:66:5e:a6:0e: 26:7d:c4:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ25/ykL2mU9YtDZZV/R5fEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMDg4Y2VmMjhlMDJhZjdkMDBmMjk3ODE2YzU1ZjhlM2M0 M2Q1MzUwHhcNMjUwNDI3MTEwMDM3WhcNMjUwNDI4MTEwMDM3WjAzMTEwLwYDVQQD EygzZWVlNDU1ZDc2YjY0OTYzZWQ0ZmVhYTViMmI5Yzc3OTcyNTU5ZTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA83dBXqSLh9QDDekde9JcNuCJfp6C lfjWE/EksJke7PahwBjZev2aFrh47T+4V+CWLHE7nk4EpOrrtmth+3otQzZwCm7I pmZN/PM3uyE4vb84rvMOKXuka/O0zL5/XuTqoBQdGopMyVVnRuPpKQmDI7AdeD3Y P7JwX7j/+d0ch4LHleGEbYZPH+n8/Ue51JZJ2dc0DAlUgkIbGqhtuv7Gd3SE6kO1 oT9DHYifapVNg76QBEvni7CGyOy12GI6gnTpsBSWiHsc7tddkjEXSw3Y+KhyI7Xk TrSxPDaug+qEhyXO29iaCpaTpeoMI10ro+L3ioXQAVt/Qdyc5qZn38crAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD7uRV12tklj7U/qpbK5x3lyVZ5BMB8GA1UdIwQY MBaAFG0IjO8o4Cr30A8peBbFX448Q9U1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYt ZmVlOGVhZjczYjBkLzEvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9kNTdhNjQtYmQzMi00YzkxLWJlMDYtZmVlOGVhZjczYjBk LzEvYlFpTTd5amdLdmZRRHlsNEZzVmZqanhEMVRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGQc1sFXf Dm5DqV5dmIJ39VtUOSqs1GH6ENQaUNjq0Oc5aLW3dKiDw7GRW4St7PCU2pXS0o22 sBSZBCD3LmG3de3kl5F0qrgH8bMWI8X55lDCnK2wtxcatf//aisDXzogueX69aCg a5tYpPmr8NYibnwmrAuVDVqBrdFvXnwM7TjSgDBlCJm0ARJmuARatem5HX+sFnmj KeX69wuO8DVDS5HY6uu0Zhz73XntQquSUFbBO0264ql7VzjM5eDtS9Hri+W/dgL9 NukCjAGjzOoFSntp1E8aLhTGmfC4dGBYbpa9dUs4nNyKAVzcwaZ6NOOyKBwlOfyW SCZmXqYOJn3E0Q== -----END CERTIFICATE-----Generated at Sun Apr 27 19:31:26 2025 by rpki-client