$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft File: iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft (raw, json) Hash identifier: 0teGZeA4LQKU0M6w+GNi0nCsRus5QdMHRoX18OGpKMk= Subject key identifier: 76:78:0B:D8:AF:A8:90:34:68:D7:D4:65:26:A9:E3:1D:DE:81:CB:6A Authority key identifier: 89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08 Certificate issuer: /CN=896a82a725ed22bb46847ae568912078de25c108 Certificate serial: 019677C394613012D5397604A675619B7B93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft Manifest number: 151C Signing time: Sun 27 Apr 2025 15:00:28 +0000 Manifest this update: Sun 27 Apr 2025 15:00:28 +0000 Manifest next update: Mon 28 Apr 2025 15:00:28 +0000 Files and hashes: 1: 1DkWoYQm2CYL8NcPditLkUCz0lY.roa (hash: WyOC+C/qv1YH3uRFOHpvx69KEYldJQ9ngZYV7GVibxI=) 2: 6qHqGf1lu-fFKG9vb1_H15ADuJo.roa (hash: gDMApq50Y9wGQLSLp13vWrDWiuCmDUvoHVz6wC2AjEE=) 3: LSo0XxjpXr0DzXCFwSii4YX0VQQ.roa (hash: 2mkDU8WQtOKRRgS6azU91vya8dzOKN960jNf5zxA1Jo=) 4: YVY9nIlUnxzvYvUHcuswYdgv-5c.roa (hash: de7Nhke3BR4RbsVq7LgDRBaPDz0mhJShPdisp8UZut0=) 5: YaHy853da93BgH6RfguxUPJfVLo.roa (hash: 0j9KCyGYrKnVsUjih9K2QETrLLFsgZaBmann0nAUaSU=) 6: h5s-RrqHnVtybQpFRQ5VYLEm6yM.roa (hash: /wt/zGlyKyo5yBKQsxdlAjFg6RgIZkpoAWM7K7t2AFA=) 7: i98iWuWx9xAdmw4XlgpiqIeaPDc.roa (hash: MY1rX1+tnTwLEb12ND0xNO/b0/tTMkEcvxBSJaeKQVM=) 8: iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl (hash: FO50nbnLMNAPESRSGNBMEGaIvJfb2az/zQ0SXVJR8do=) 9: kA7t86VhHLfxpZem9_pfnrfA8Jw.roa (hash: JdzmdB6Yw1EEixYlbi2OlJNyDFF6uk/A+LWmVNqQ7XY=) 10: w9tecX0WpG6EBeEQV6lN7pOizZM.roa (hash: r56/6xcnyNBLy2vRf5p/uK/JECPQgO4M3DafNXdoW0g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:77:c3:94:61:30:12:d5:39:76:04:a6:75:61:9b:7b:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=896a82a725ed22bb46847ae568912078de25c108 Validity Not Before: Apr 27 15:00:28 2025 GMT Not After : Apr 28 15:00:28 2025 GMT Subject: CN=76780bd8afa8903468d7d46526a9e31dde81cb6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:55:7b:7e:86:48:78:06:46:c3:a7:48:bc:62: 2e:93:25:98:91:52:e1:af:d3:d6:86:d3:2a:c6:05: ed:a8:9d:5a:33:1a:dc:e7:3c:eb:04:a1:30:58:6c: 28:d4:fa:60:b8:3f:ff:13:36:6b:1e:85:09:cf:cf: fc:07:42:97:46:e7:4f:d8:5c:b9:72:ff:17:8d:28: 8a:60:0c:d7:19:76:76:35:97:de:05:61:ea:e9:54: 6c:a4:a3:80:a3:34:b1:3d:04:ac:21:45:e7:df:8a: 9a:fd:0a:7d:10:62:d6:c5:a9:74:b3:3e:dc:b5:0f: 71:8b:47:62:b2:fd:4e:1b:06:b3:bc:b2:a9:e1:53: 9d:de:0d:f8:f8:6f:a9:0c:91:9d:3b:cd:68:80:c5: 32:81:84:ee:ac:f8:40:f3:b5:8c:c9:ed:8c:f0:fb: ac:31:b7:05:96:b8:96:1e:cf:12:17:22:91:87:7d: 9e:0e:63:72:59:d7:f3:0d:0a:63:7b:5f:5f:1d:63: 2b:fa:1f:ed:be:2a:70:8b:e5:65:7f:d4:9d:45:57: 4d:ea:a3:f9:f7:34:f6:49:97:e7:44:50:19:b7:ba: 3a:b9:48:18:36:2a:cb:ea:04:62:ab:76:76:44:90: 57:9e:4c:04:9c:64:8c:9a:64:59:a2:39:88:2c:e2: 8f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:78:0B:D8:AF:A8:90:34:68:D7:D4:65:26:A9:E3:1D:DE:81:CB:6A X509v3 Authority Key Identifier: keyid:89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:7e:46:ed:b3:7b:a8:8d:27:57:40:1f:98:82:08:44:5e:3f: 4a:ab:26:22:f1:56:4b:1f:2b:02:42:c3:a3:10:d7:0a:fa:ad: 98:b0:49:fc:7d:52:f2:c2:4e:6e:da:19:07:1b:e6:13:d7:d1: 06:8f:41:f5:66:73:26:ff:c2:4b:52:92:24:61:f9:55:49:87: 30:1c:62:95:25:34:43:64:45:d1:a1:5f:89:5d:90:69:f4:4d: eb:6c:e8:58:6e:f5:61:12:5d:83:69:0c:76:db:84:9c:15:4d: eb:64:f5:a1:db:dd:86:b5:10:ca:73:e6:e6:f6:f8:02:69:9c: 1e:ab:61:46:cb:27:10:a4:4f:7d:28:ca:67:87:14:06:39:45: 95:92:51:05:24:0e:51:9f:96:18:1e:6b:19:73:68:32:a5:87: d4:aa:c2:a8:6c:5b:26:bb:39:ca:e4:ac:b4:a9:9a:33:ff:77: 80:94:c6:e7:a1:47:3f:b2:86:5c:c3:2c:9d:0e:56:bf:c4:10: 7f:a4:f1:d5:b0:ca:5f:da:5f:74:72:0d:43:68:29:f3:e0:15: c4:e7:e0:d9:f5:43:f9:7f:32:53:4e:a8:0c:08:b8:5e:b0:38: b1:5d:bc:c0:30:9c:cd:a7:c4:dd:d6:b5:b6:76:e7:04:a1:1b: d5:e1:cc:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ3w5RhMBLVOXYEpnVhm3uTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NmE4MmE3MjVlZDIyYmI0Njg0N2FlNTY4OTEyMDc4ZGUy NWMxMDgwHhcNMjUwNDI3MTUwMDI4WhcNMjUwNDI4MTUwMDI4WjAzMTEwLwYDVQQD Eyg3Njc4MGJkOGFmYTg5MDM0NjhkN2Q0NjUyNmE5ZTMxZGRlODFjYjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFV7foZIeAZGw6dIvGIukyWYkVLh r9PWhtMqxgXtqJ1aMxrc5zzrBKEwWGwo1PpguD//EzZrHoUJz8/8B0KXRudP2Fy5 cv8XjSiKYAzXGXZ2NZfeBWHq6VRspKOAozSxPQSsIUXn34qa/Qp9EGLWxal0sz7c tQ9xi0disv1OGwazvLKp4VOd3g34+G+pDJGdO81ogMUygYTurPhA87WMye2M8Pus MbcFlriWHs8SFyKRh32eDmNyWdfzDQpje19fHWMr+h/tvipwi+Vlf9SdRVdN6qP5 9zT2SZfnRFAZt7o6uUgYNirL6gRiq3Z2RJBXnkwEnGSMmmRZojmILOKP6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHZ4C9ivqJA0aNfUZSap4x3egctqMB8GA1UdIwQY MBaAFIlqgqcl7SK7RoR65WiRIHjeJcEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8zZmM4ZGEtMzUxNS00MzRkLTlmMGUt MDQwMTI3MTAyMjA5LzEvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8zZmM4ZGEtMzUxNS00MzRkLTlmMGUtMDQwMTI3MTAyMjA5 LzEvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA035G7bN7 qI0nV0AfmIIIRF4/SqsmIvFWSx8rAkLDoxDXCvqtmLBJ/H1S8sJObtoZBxvmE9fR Bo9B9WZzJv/CS1KSJGH5VUmHMBxilSU0Q2RF0aFfiV2QafRN62zoWG71YRJdg2kM dtuEnBVN62T1odvdhrUQynPm5vb4AmmcHqthRssnEKRPfSjKZ4cUBjlFlZJRBSQO UZ+WGB5rGXNoMqWH1KrCqGxbJrs5yuSstKmaM/93gJTG56FHP7KGXMMsnQ5Wv8QQ f6Tx1bDKX9pfdHINQ2gp8+AVxOfg2fVD+X8yU06oDAi4XrA4sV28wDCczafE3da1 tnbnBKEb1eHMvw== -----END CERTIFICATE-----Generated at Sun Apr 27 20:20:31 2025 by rpki-client