$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft File: I0tUsRmns-_xUwhbcxVQfNhROg8.mft (raw, json) Hash identifier: D4UWccLBq7nBglAOnwoUWIiACSQwQjNk+a3N6eTQIWw= Subject key identifier: 38:F0:08:8A:61:DF:D5:0A:F9:3F:B9:43:4F:20:7F:EF:9C:69:5C:A2 Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f Certificate serial: 0196722FB30A6A9EEDAFAB27A6A73A34A66A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft Manifest number: 0B4D Signing time: Sat 26 Apr 2025 13:00:50 +0000 Manifest this update: Sat 26 Apr 2025 13:00:50 +0000 Manifest next update: Sun 27 Apr 2025 13:00:50 +0000 Files and hashes: 1: 2tV1T5SBsSkKar1qXX5FYlQ_B9Q.roa (hash: mGLI3Jd52qgMG50087Vl0ag+Rgi85Yfd8348tK3nJlQ=) 2: 9CjEL92KVQbBIKjAH6PWgI9d9kA.roa (hash: CxlINazLO+svbCxijVW6/kRGdkNG420xQ9K3jp5I7bo=) 3: 9Q-K0yA0D9jdkGXn7ifhVh2hLe4.roa (hash: BhOE66QanPWqjjysyWqBU6hcSToV2kkgkpmWedK9Plo=) 4: BKpPZ6YhMA786wWelQvZ2FdIeg0.roa (hash: CY94cVx1ALq/cp1lEiwu3JzO7Vk53LXHozpiwU2ifHA=) 5: Gg5xBTPmG5wIfgvjDfofedqUN2I.roa (hash: 44BexOUoVzM2f1vahHLSGVHdqnL6HKMPG3ed5PmM4sw=) 6: I0tUsRmns-_xUwhbcxVQfNhROg8.crl (hash: pMLV8igZeL2laFht5jZd33ldI3EAl7oEOsty9yQoP2g=) 7: KfWHlYFQnzVI2dPuoiLZqsly00A.roa (hash: hXW7e+AyYxT2PE5t8wRUT3atz/+WaH8gt4XQgdBp/mU=) 8: LtctFlc4GRCf3PIlxO5Sz70Upcc.roa (hash: 9oaNZGvrfQP+yRIBwwcg5U7jui8/sOP7Dz6ZLTuPIgM=) 9: LxwAd59gPAFiSwQsp6U5bWHTUIA.roa (hash: sV/jv6UM3eB6Fepo8zmoDeIxV8A3Cp94EBt2zbiu7+M=) 10: M73NPvrSZwGhIOTA9SbUvHl1x90.roa (hash: ijksxiMRPCxOAqaVav7odzv/IiE5tQUZQM4rRqWGT00=) 11: P4Ngmm4fscIJdjrtcZXwEWC6af0.roa (hash: Dgr4uE36WEf5Xw9kH8tw5qMQ+ewLeqeUvdPupgorbKg=) 12: gspg21PC-Bi6SGHc2DwZhP3SxPE.roa (hash: za152yl/mt+IWnj6LxRFIHIPMleLO2z2bWoNpUAX6js=) 13: nppvTips8XGcmj9VgC_a0xkLzT8.roa (hash: +FXbEH/4T1tplmkgWcOzmoIVkqvQhGApNb34NJo2CWU=) 14: o99Nup4psTKMh8kJYocwkh14uKQ.roa (hash: lhz5Qy+hcNJDmky6RtlI26JguzX0YUJj3nMqDKA0YLM=) 15: xBeaVJYrqyxsJyBEwJgsxIF9If8.roa (hash: DlqRMUr9VXZf6onKCEDA/e64PLwtCRuMp+QIX3GytzU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 11:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:72:2f:b3:0a:6a:9e:ed:af:ab:27:a6:a7:3a:34:a6:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f Validity Not Before: Apr 26 13:00:50 2025 GMT Not After : Apr 27 13:00:50 2025 GMT Subject: CN=38f0088a61dfd50af93fb9434f207fef9c695ca2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e7:3d:94:b8:5e:63:30:ee:84:30:d3:40:61: 98:e1:29:f3:13:bc:f5:72:b2:07:f9:47:54:90:c0: a1:3c:8f:15:6f:b8:99:c4:fe:6d:88:ed:81:60:79: ac:f8:a3:01:67:54:38:85:89:07:b4:69:de:63:29: 80:f9:90:18:99:5a:9b:7b:15:a6:57:8f:29:5c:8d: 59:73:eb:a8:f0:f4:05:bf:38:98:11:e6:97:4e:fd: 96:f7:c0:f0:98:0e:22:91:6d:53:ac:1e:0f:e8:28: ab:06:e5:94:12:c6:83:c8:54:0d:a5:78:b2:ce:4f: 0c:d7:ec:e3:d4:62:e0:b1:57:8d:02:71:5e:28:e1: db:0b:d4:a0:2e:5c:c7:64:30:9d:be:c9:cc:fd:c6: 82:69:ec:12:1b:db:e6:3a:9c:90:10:23:9a:3c:ba: 27:ad:18:05:9f:80:26:b6:dd:f6:4b:93:8f:47:b5: 5f:59:9d:49:2c:26:44:72:9f:86:ce:a9:0f:4f:68: 1d:a8:76:c2:b9:36:3c:0c:3e:93:7b:f6:b1:fc:d1: 4a:37:ee:1f:04:69:13:7f:bb:59:6c:aa:ab:1e:49: 41:dc:76:1f:00:0c:11:5e:60:22:b0:3c:3b:6e:2d: ec:21:c2:51:da:ec:f6:95:77:84:af:8c:ac:19:32: 1d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:F0:08:8A:61:DF:D5:0A:F9:3F:B9:43:4F:20:7F:EF:9C:69:5C:A2 X509v3 Authority Key Identifier: keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:cf:c2:94:19:75:a7:c5:e8:58:2a:61:c5:0b:48:63:be:70: 27:5b:20:ec:04:fc:4c:42:c4:f0:29:94:97:48:cc:33:ea:06: 7d:dc:ce:f2:16:68:f2:a7:5a:05:a3:56:34:18:68:85:de:60: d2:c9:95:23:88:60:7e:d0:cf:a7:ac:f5:f5:34:ef:47:e6:8b: a6:83:54:3c:1f:8c:54:c7:a3:86:22:d1:68:41:67:46:f1:00: 1e:e9:1e:44:6a:e0:ee:f4:bf:f3:1f:14:66:46:61:01:6f:63: 71:12:85:b8:92:a3:66:bb:a1:f3:9d:04:f4:af:54:3a:2e:3a: 6c:4e:a2:22:6e:53:e9:f6:db:3a:c0:9b:49:e0:11:62:b9:fc: 19:1d:4f:05:41:c8:61:0c:2d:72:fb:41:e4:1d:e0:ff:ab:e1: 83:0f:c8:75:f3:bf:b9:1a:f8:2a:03:43:3f:9b:a5:68:55:1a: 02:d0:89:17:33:e5:8f:84:1a:ec:db:88:07:74:2c:6d:ee:7e: 00:9e:d8:7c:56:61:a1:9f:da:f4:82:9e:71:eb:2c:6d:ab:7d: 35:85:4a:f9:81:04:e4:64:0a:ec:4e:65:a0:31:83:12:2e:a4: 12:03:59:77:ec:7c:58:2e:ea:85:57:1d:dc:f2:ed:9f:d5:32: 9b:ca:0c:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZyL7MKap7tr6snpqc6NKZqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNGI1NGIxMTlhN2IzZWZmMTUzMDg1YjczMTU1MDdjZDg1 MTNhMGYwHhcNMjUwNDI2MTMwMDUwWhcNMjUwNDI3MTMwMDUwWjAzMTEwLwYDVQQD EygzOGYwMDg4YTYxZGZkNTBhZjkzZmI5NDM0ZjIwN2ZlZjljNjk1Y2EyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+c9lLheYzDuhDDTQGGY4SnzE7z1 crIH+UdUkMChPI8Vb7iZxP5tiO2BYHms+KMBZ1Q4hYkHtGneYymA+ZAYmVqbexWm V48pXI1Zc+uo8PQFvziYEeaXTv2W98DwmA4ikW1TrB4P6CirBuWUEsaDyFQNpXiy zk8M1+zj1GLgsVeNAnFeKOHbC9SgLlzHZDCdvsnM/caCaewSG9vmOpyQECOaPLon rRgFn4Amtt32S5OPR7VfWZ1JLCZEcp+GzqkPT2gdqHbCuTY8DD6Te/ax/NFKN+4f BGkTf7tZbKqrHklB3HYfAAwRXmAisDw7bi3sIcJR2uz2lXeEr4ysGTIdfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDjwCIph39UK+T+5Q08gf++caVyiMB8GA1UdIwQY MBaAFCNLVLEZp7Pv8VMIW3MVUHzYUToPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQt MWQyMWQxYmNlM2ZlLzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQtMWQyMWQxYmNlM2Zl LzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC8/ClBl1 p8XoWCphxQtIY75wJ1sg7AT8TELE8CmUl0jMM+oGfdzO8hZo8qdaBaNWNBhohd5g 0smVI4hgftDPp6z19TTvR+aLpoNUPB+MVMejhiLRaEFnRvEAHukeRGrg7vS/8x8U ZkZhAW9jcRKFuJKjZruh850E9K9UOi46bE6iIm5T6fbbOsCbSeARYrn8GR1PBUHI YQwtcvtB5B3g/6vhgw/IdfO/uRr4KgNDP5ulaFUaAtCJFzPlj4Qa7NuIB3Qsbe5+ AJ7YfFZhoZ/a9IKecessbat9NYVK+YEE5GQK7E5loDGDEi6kEgNZd+x8WC7qhVcd 3PLtn9Uym8oMsw== -----END CERTIFICATE-----Generated at Sat Apr 26 20:27:04 2025 by rpki-client