$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft File: jRHLAV35uqthIo27zhfdTgDmPBM.mft (raw, json) Hash identifier: enZtCdK1CN4UXVb0f+98Lipqkf8T5qufrfLQiCq+oNA= Subject key identifier: A1:54:36:CB:38:F9:E1:53:04:9B:C4:7D:E1:72:2C:56:9E:CA:4C:8F Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13 Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13 Certificate serial: 019671C242D316B568EBBA1B06E959FEEF89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft Manifest number: 14AC Signing time: Sat 26 Apr 2025 11:01:18 +0000 Manifest this update: Sat 26 Apr 2025 11:01:18 +0000 Manifest next update: Sun 27 Apr 2025 11:01:18 +0000 Files and hashes: 1: A3slZgyg9eemzONzeM4ZjQZOkQA.roa (hash: X0hOJW7H3OQv8gNe/Scffw0tX7rp3lfITg3c2bDp62I=) 2: Dyi32KlOskocQHPe6FUF7ELQs5U.roa (hash: D3EF+UreJY6p0ckzuksgWXVvYetF6sITxKDGv/w2L0k=) 3: FJEFcX2c3QiytgwJXtBXdfXF7AQ.roa (hash: wDOQFjMrdpmJOwUI55qSC810FFGrsaY4QPcOoJKWykM=) 4: G_noKzntiWHLaHSdta1FputJESM.roa (hash: 76HBYH18Q5+wfRzE5ydGp21BC62rcsuS2tSvCzBrWp8=) 5: K9IKE8UzWzIlRqgdm5DBscj4DXI.roa (hash: TmNOvsKyJxclTHoJrrP+Wz2lJl3QKp06vZRtwf2Wkwo=) 6: Orf0-crrS-m0d2xw75OekVLRhcU.roa (hash: NyC6YqKt0FNmC1unp3jevt47/gr2Ss5dzqvXJGD2AjU=) 7: THZGRo10wjMlm6DbRUy7KjrwfkM.roa (hash: 9FjGohVB5WEFkwBSNZEgEcooaudVJnnxxDK2Jy9/LgI=) 8: VmEKVuU_uT-v34QUxuvTEoMoaug.roa (hash: lCfgs7Wts05rdP9N+OaYxsLVxOabAGR5SUtGArrm95M=) 9: Vxz_brs8mMP8pyfBjMG6SqLCoLA.roa (hash: InPdcQtGkZTGLva52kv6ADnfkbCulTXgK4jOcLs8G7M=) 10: Xmin5XG-kRl49Vt7ZEcTgSLDhDM.roa (hash: DHMC7YXYfDSAA2x6JnOvMwJT1zdpAymlypp6F1bKmgY=) 11: Yfzph1m23vmbClyvIoORpS1CW-E.roa (hash: SuwU2G9eYZ/n+GS6xB/GEsh3UziEYPdyi1WD5kRpjAo=) 12: _vcj5hH5PQmqE-mf4-B7kcWGpfg.roa (hash: ReLlnYnzQbiQ5Pk/0fIjBSPY1fpdoMBMJpSnkiSreWk=) 13: jRHLAV35uqthIo27zhfdTgDmPBM.crl (hash: w8vwLo5tbuv1btDWvhQgqy0/fzicJoaP0Rjp19hswWA=) 14: mwm5rC4rfoUfkUGj1keywZQhhGw.roa (hash: dDwtNYt9WubuetSqef0LQakniH0rgBVhQK32OI1f1fU=) 15: nyxtNnWsxM3-5IIVvMZ44cQVEYU.roa (hash: ub8VtVKtgWVEPS0rlKsjT0ZjeuiFnfLTw/tC6ZpW/Vo=) 16: v5kzcztD_Zc4DwbwnN4YfKR9YoA.roa (hash: 33e8kQ++AVlCN79vtcp+1+C+oGUNBxplYHYOGaRMl58=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 11:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:71:c2:42:d3:16:b5:68:eb:ba:1b:06:e9:59:fe:ef:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13 Validity Not Before: Apr 26 11:01:18 2025 GMT Not After : Apr 27 11:01:18 2025 GMT Subject: CN=a15436cb38f9e153049bc47de1722c569eca4c8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:79:a8:43:8b:19:3f:a7:61:a3:2f:af:c1:9a: 5d:d0:09:b7:a3:f0:bb:ba:7b:e1:bb:bb:85:cc:0c: 25:0f:07:5b:45:90:d7:8f:1e:85:e3:0a:be:5e:b2: 49:03:be:b4:ef:17:a6:4b:3f:a1:96:3b:47:2d:d4: 67:e0:f2:cb:fb:e0:75:65:08:64:8c:e6:81:00:ae: 9a:ed:34:8b:87:48:34:ef:70:39:6f:bb:5a:8a:e7: d4:73:d3:10:0a:89:9d:63:65:b7:57:d2:34:2e:60: 6b:18:e7:76:f7:a7:93:b9:bf:2f:d4:f5:3e:7b:6e: 94:75:d8:6d:02:97:fb:21:57:f5:0f:c4:b6:c6:d5: 3d:0b:12:b8:3f:60:a9:2a:63:4e:b1:40:17:fa:0b: 3d:4c:ca:28:dd:63:81:73:1f:3a:35:4b:8d:d7:c8: 6d:80:81:b1:5b:9d:e3:65:68:75:5d:ef:d1:d2:6f: 56:81:be:2e:53:8b:80:49:c0:88:70:04:56:9e:d5: ec:34:09:f9:4e:25:1e:03:15:1f:64:bd:63:59:31: ee:08:aa:00:b8:af:f3:12:2c:ec:b9:8f:d0:8c:9b: ce:3f:b8:27:5c:40:2c:b4:7e:98:30:27:3f:cd:bc: 80:e2:ee:b8:10:7a:1d:ab:22:6a:e5:b5:5b:00:58: a7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:54:36:CB:38:F9:E1:53:04:9B:C4:7D:E1:72:2C:56:9E:CA:4C:8F X509v3 Authority Key Identifier: keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:d9:0b:5a:05:9f:14:0a:84:95:ab:b7:40:84:86:f7:76:bb: 36:16:de:12:33:02:c2:9e:c7:0d:b1:99:58:d2:5b:a1:a8:41: 2e:9e:47:bb:60:d2:c0:ac:16:a2:02:f1:41:2a:c6:2c:39:d7: 4f:cf:1e:86:11:36:99:27:28:5b:ee:ce:a8:6c:1f:79:8d:24: 80:5c:25:af:19:36:1d:43:11:75:65:18:96:3f:63:c6:a4:e0: f3:7b:d3:90:59:ce:13:76:8a:53:f9:77:3b:b3:64:13:24:ed: f0:b1:f0:a1:14:fb:3f:fe:76:6f:dd:1c:60:f9:47:22:cb:14: e8:01:de:7e:cf:ec:18:a0:57:52:87:be:e5:21:0d:75:7c:2d: d3:67:e7:f1:0c:0f:5c:24:4a:b8:ae:01:2b:7c:8c:44:7c:0e: 8b:58:7d:e0:43:17:9e:7e:ed:2f:77:e5:5d:d0:d1:9a:23:a2: 23:75:c7:f3:f9:60:7f:1c:30:c8:d7:ec:79:79:a4:1a:c7:41: 27:b9:5d:01:a9:7b:45:92:18:19:bf:5f:9d:00:f3:f4:36:fe: 5f:96:23:58:89:6c:27:8d:ae:a5:41:9d:dc:64:b5:7f:8e:58: 9e:0e:2c:58:b9:5d:0c:24:6d:d6:de:83:8a:ef:69:fd:58:aa: 66:36:d2:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZxwkLTFrVo67obBulZ/u+JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMTFjYjAxNWRmOWJhYWI2MTIyOGRiYmNlMTdkZDRlMDBl NjNjMTMwHhcNMjUwNDI2MTEwMTE4WhcNMjUwNDI3MTEwMTE4WjAzMTEwLwYDVQQD EyhhMTU0MzZjYjM4ZjllMTUzMDQ5YmM0N2RlMTcyMmM1NjllY2E0YzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXmoQ4sZP6dhoy+vwZpd0Am3o/C7 unvhu7uFzAwlDwdbRZDXjx6F4wq+XrJJA7607xemSz+hljtHLdRn4PLL++B1ZQhk jOaBAK6a7TSLh0g073A5b7taiufUc9MQComdY2W3V9I0LmBrGOd296eTub8v1PU+ e26UddhtApf7IVf1D8S2xtU9CxK4P2CpKmNOsUAX+gs9TMoo3WOBcx86NUuN18ht gIGxW53jZWh1Xe/R0m9Wgb4uU4uAScCIcARWntXsNAn5TiUeAxUfZL1jWTHuCKoA uK/zEizsuY/QjJvOP7gnXEAstH6YMCc/zbyA4u64EHodqyJq5bVbAFin5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKFUNss4+eFTBJvEfeFyLFaeykyPMB8GA1UdIwQY MBaAFI0RywFd+bqrYSKNu84X3U4A5jwTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEt YmE3NzFmZmQyNjljLzEvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEtYmE3NzFmZmQyNjlj LzEvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPNkLWgWf FAqElau3QISG93a7NhbeEjMCwp7HDbGZWNJboahBLp5Hu2DSwKwWogLxQSrGLDnX T88ehhE2mScoW+7OqGwfeY0kgFwlrxk2HUMRdWUYlj9jxqTg83vTkFnOE3aKU/l3 O7NkEyTt8LHwoRT7P/52b90cYPlHIssU6AHefs/sGKBXUoe+5SENdXwt02fn8QwP XCRKuK4BK3yMRHwOi1h94EMXnn7tL3flXdDRmiOiI3XH8/lgfxwwyNfseXmkGsdB J7ldAal7RZIYGb9fnQDz9Db+X5YjWIlsJ42upUGd3GS1f45Yng4sWLldDCRt1t6D iu9p/ViqZjbSxg== -----END CERTIFICATE-----Generated at Sat Apr 26 19:59:20 2025 by rpki-client