$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft File: jzgYVUpRgI7vuCnsdGWjIi8nASM.mft (raw, json) Hash identifier: 56r2ZirrsSOY9IxjkDF4/0i/SMmYVR5azJ3V/WIyvjY= Subject key identifier: F1:18:A9:89:DF:32:77:9F:3D:34:A7:4F:A9:4E:04:63:48:15:AF:13 Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23 Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123 Certificate serial: 019674F9C034C040D8DFF15C18288989A5BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft Manifest number: 1547 Signing time: Sun 27 Apr 2025 02:00:46 +0000 Manifest this update: Sun 27 Apr 2025 02:00:46 +0000 Manifest next update: Mon 28 Apr 2025 02:00:46 +0000 Files and hashes: 1: 1-d5l7iEM0a18LhX1EyGB8md8n8M.roa (hash: 501zHAdTFZeEcvr80KDCfqteaSP9iBPoj2GeSoFGK4o=) 2: 1pbl9lLrLHSegTR5aMKg_vc70Uo.roa (hash: JuIlY/C1ag+dEHYXDzz9ICIcinIRd2dm1piPpM/bPQE=) 3: 3zrOYfPwdwhMIYtIoDWyzk7SucA.roa (hash: ruw9KhAohiZRqx+LW+C5lr9bjBdHC4VDTTsxeERmgZg=) 4: D9naFu6VO2lwpjmohULxFpHf9o0.roa (hash: /QUuvgGaHE+yk+5fnp+5qSsx9OmsxECFhKZjRSqaWdE=) 5: Dhmm9E4z9IDgJopzgLGmxrHdNQ4.roa (hash: B8DLE1dNxG4G5fXZ02aNrPdB4JUf1oXnLm020cY0Ang=) 6: Fex3ntehhk9YD9UIIrzJwNM9wrw.roa (hash: sq3dolfBoZQI4X41dAgCq7RgYZJhMoyQLMqp5TWhC2I=) 7: VjpJTcOg3A5jj9MR_Jf-2rC27FI.roa (hash: j+JKcPjYq1zl0l4R0plKeTXWGQoSZJuEOufZw9GSsFY=) 8: YW1hjZcECO_e-0edVIPSxYfb76o.roa (hash: Z7Jb+7gEawQrZdP5rGn/EP9zISP8MR7q05pqJZYy5UQ=) 9: Yf4EPkmLCRMBoZZIyHDnCPRPVEI.roa (hash: ttyqpkkqQzqqS+yO4BIrD80NvM4sA9JzqnD08LyFADk=) 10: dXcSjT8XLHwaAMrJxhlYycEZesc.roa (hash: vJl3MVsCu53wiiS+S6cF6AaFBwg//wkLirqkCxUkMcU=) 11: djNEYQKUqckFK1iM46DyL8t42d0.roa (hash: NQBuvCxVnkGQRlXPk53EZOQo+ABbplgx2/ODuq1jN3M=) 12: f-F8l0cH9l2JC8CaYCu5zkEyyRY.roa (hash: ySgIqgk7JZDlXDIu42q8Lk8iY2QRZnL5gTXIvXblACQ=) 13: f7g9WoNm-2HicP4eAC6c6FDXbfw.roa (hash: zw4AKABwEHT1G3SslViMu4vYgw9q/wbL5miIJACFbLo=) 14: gvygCJRNiZjAzFCHzFEh-Jvn8p4.roa (hash: GokX4+GYxsZuRoER2H3W827pg8jM7a0dfuDGYTpJcug=) 15: jzgYVUpRgI7vuCnsdGWjIi8nASM.crl (hash: Y/4FD/ootkw8KRQdWX/vrsqxd0Xe3ktpKoyUahfjr/w=) 16: l4eCCyQbqnmNaWzCsO-CTHaJLBQ.roa (hash: +can2V5bGbRV5XkaQEn6m/2qdSAnNySkBwlFd9kA+2w=) 17: mfw9rN7s0JH2LVr_IrLTwFMFT7k.roa (hash: Fl3Qq4SjgxhY/P+3EJokj3AAPC+i2wSth+OMzYo5JiY=) 18: sHn49Wbb5PrrjUwnaQqlFkCVe1w.roa (hash: Js/zXcmF6Rja4dKWo6EIhgWUvKjRGSk5unEUfI1hOIs=) 19: xQd5W4e4PnDjglCYlz04ippgCtY.roa (hash: Tau6wHDOULjCaWttAcL4vrdDPhetrZL68pVWIATRLJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 02:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:74:f9:c0:34:c0:40:d8:df:f1:5c:18:28:89:89:a5:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123 Validity Not Before: Apr 27 02:00:46 2025 GMT Not After : Apr 28 02:00:46 2025 GMT Subject: CN=f118a989df32779f3d34a74fa94e04634815af13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ea:df:dc:7a:a3:26:df:20:d8:af:d5:e2:30: 5e:96:95:2b:36:72:1d:b5:24:00:0a:b9:4f:64:1a: 49:e1:8a:f6:b0:a3:43:c4:6c:11:47:8e:f7:02:08: b2:cd:9f:c4:7b:f7:98:1d:76:9b:e1:fa:13:e0:c8: 92:73:29:27:a9:31:08:51:33:8c:74:e1:69:aa:67: b7:43:28:a1:f8:85:50:c2:22:6a:14:3b:1e:a5:b3: be:7e:08:10:b6:f3:f3:d2:b3:47:15:fd:65:cd:ae: 7e:f2:a8:c6:1d:2d:57:d1:2a:7b:55:1f:f9:7e:88: ff:d7:7f:8e:a8:a6:8f:b1:fc:1b:63:89:85:b7:cd: f5:75:9e:6b:d8:35:d6:85:f7:56:ea:42:20:19:ec: b9:6f:5d:bc:14:23:0f:33:d3:f7:88:30:48:4d:0a: d5:c2:ce:19:cc:18:c6:f3:b3:64:80:67:be:64:b7: da:16:a3:b4:e1:73:ff:7d:f6:46:87:8c:c3:e4:8e: 1c:25:71:a7:51:b1:b8:1c:d2:7a:77:a7:08:ed:bf: de:95:c8:be:83:22:6e:69:56:d4:13:00:7b:88:61: 96:84:92:17:2e:ff:58:d5:7f:15:a6:74:aa:13:0f: 78:c4:fa:fd:77:ca:cd:a7:21:76:7c:45:c2:22:0f: f1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:18:A9:89:DF:32:77:9F:3D:34:A7:4F:A9:4E:04:63:48:15:AF:13 X509v3 Authority Key Identifier: keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:ae:9b:77:1d:bb:4a:ed:33:77:a4:6a:f8:1b:46:a4:73:a4: 7d:5b:24:6e:b5:ce:c7:04:3b:f6:24:62:15:36:cc:f4:af:6a: 00:54:b8:93:18:cc:d2:34:16:9c:28:c9:4f:aa:d2:8e:dc:ab: cd:8a:08:9f:3e:85:f8:71:7d:9d:6b:c2:bd:f6:1c:35:91:db: df:f0:76:6e:7a:ab:33:38:cc:44:1c:25:a9:0d:87:8c:8f:73: e3:c3:71:76:c4:83:ec:55:13:f4:4c:c3:71:e5:49:bb:26:93: 86:0b:7c:0a:23:e9:8e:ae:56:df:e2:d9:c2:28:c2:fa:7c:4e: 34:60:c2:31:c0:ec:f6:e3:3e:fc:5c:11:52:ee:56:78:ab:f8: a7:99:71:af:6d:51:26:1c:eb:e3:71:5f:d7:6f:8f:eb:95:5b: 3f:b7:e4:2f:85:f1:47:97:9c:3d:49:65:91:ee:52:42:85:59: 38:70:b1:cf:fd:50:63:76:cd:a3:06:78:12:7e:3b:55:69:7e: bb:a4:c6:b0:54:d8:9b:ec:05:0a:97:15:4e:bd:67:f3:4e:20: f4:0a:e9:89:29:8f:e2:5c:6a:f4:35:48:00:f1:a8:90:8c:a0: 37:4d:13:12:b1:8d:3c:59:8a:f4:94:b5:82:39:fc:8d:2e:47: 7a:30:3c:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ0+cA0wEDY3/FcGCiJiaW7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMzgxODU1NGE1MTgwOGVlZmI4MjllYzc0NjVhMzIyMmYy NzAxMjMwHhcNMjUwNDI3MDIwMDQ2WhcNMjUwNDI4MDIwMDQ2WjAzMTEwLwYDVQQD EyhmMTE4YTk4OWRmMzI3NzlmM2QzNGE3NGZhOTRlMDQ2MzQ4MTVhZjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+rf3HqjJt8g2K/V4jBelpUrNnId tSQACrlPZBpJ4Yr2sKNDxGwRR473AgiyzZ/Ee/eYHXab4foT4MiScyknqTEIUTOM dOFpqme3Qyih+IVQwiJqFDsepbO+fggQtvPz0rNHFf1lza5+8qjGHS1X0Sp7VR/5 foj/13+OqKaPsfwbY4mFt831dZ5r2DXWhfdW6kIgGey5b128FCMPM9P3iDBITQrV ws4ZzBjG87NkgGe+ZLfaFqO04XP/ffZGh4zD5I4cJXGnUbG4HNJ6d6cI7b/elci+ gyJuaVbUEwB7iGGWhJIXLv9Y1X8VpnSqEw94xPr9d8rNpyF2fEXCIg/x7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPEYqYnfMnefPTSnT6lOBGNIFa8TMB8GA1UdIwQY MBaAFI84GFVKUYCO77gp7HRloyIvJwEjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgt YmZiNGJhMzBlNDVhLzEvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgtYmZiNGJhMzBlNDVh LzEvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADa6bdx27 Su0zd6Rq+BtGpHOkfVskbrXOxwQ79iRiFTbM9K9qAFS4kxjM0jQWnCjJT6rSjtyr zYoInz6F+HF9nWvCvfYcNZHb3/B2bnqrMzjMRBwlqQ2HjI9z48NxdsSD7FUT9EzD ceVJuyaThgt8CiPpjq5W3+LZwijC+nxONGDCMcDs9uM+/FwRUu5WeKv4p5lxr21R Jhzr43Ff12+P65VbP7fkL4XxR5ecPUllke5SQoVZOHCxz/1QY3bNowZ4En47VWl+ u6TGsFTYm+wFCpcVTr1n804g9ArpiSmP4lxq9DVIAPGokIygN00TErGNPFmK9JS1 gjn8jS5HejA8HQ== -----END CERTIFICATE-----Generated at Sun Apr 27 08:48:05 2025 by rpki-client