$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft File: mGihmSu4A33egdDIzcBpX87hfCc.mft (raw, json) Hash identifier: J/MXP36QQpWh1+xNfcFPvDk9WytlREyUrrX3jdSAZbY= Subject key identifier: 4E:52:BE:57:4B:4E:0B:DE:1E:F2:68:24:66:DE:24:34:F2:7B:50:EA Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27 Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27 Certificate serial: 0196722F71C44445E8C55FB364D958D0951E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft Manifest number: 0F11 Signing time: Sat 26 Apr 2025 13:00:34 +0000 Manifest this update: Sat 26 Apr 2025 13:00:34 +0000 Manifest next update: Sun 27 Apr 2025 13:00:34 +0000 Files and hashes: 1: 9_JhIw-bjUbjcsXjaRSJlNBXD-s.roa (hash: Hm59eKak2mRBLnGzAb7+vw2g+CNCplTmTg9aukFT0JE=) 2: Cm5DqrbsctqFvXQRRyRwNPG00IY.roa (hash: O06PA3Ks3knW3J57m8lSN/Hv9kQ6nHGAf+goTnk1j04=) 3: FPzxN2ymmUH78y5haV0PaZXdLVY.roa (hash: DdUQ7lpUro6lEFuSiN9fKQg9b9UllNMKrwO6ynxkjos=) 4: JPO6PlbO7T2lxOXw7VKbRM2Ge5Q.roa (hash: kV6T9GvL2JmIx9RKefMlHDbvnYr8DiGL3xFPvQ3Jx8U=) 5: JfmWtf32dZhRVwJQ1ZtKQrQQAfg.roa (hash: ucBbFh4z7Smi+4uRRA6FLN/GqDjNQS+yFNEoMPGwvug=) 6: VQJlRnI_FsEKIbEWGLyhLwP0NtM.roa (hash: onaEyOz4ocmnu3HOOu4gakiggdji6MdLGBGGPS11inY=) 7: ZBv1VZ75Z-edNoZRcvYjkb7NpN8.roa (hash: WTUxj+sidK096ykp4PAhTaXWq6bYZtjXmE5iUhcAutU=) 8: a0GKpzKa2l-eFBlKQIWeWorMYWE.roa (hash: ToDMarZPFqTg+Vik2NKe1VnAgzMIR0HHOC5Xh17RUK0=) 9: aEXJ-GLDzjyP60FhTQdWJ8Fvt7E.roa (hash: 0YpF7CPYi6PyoAg9TvQlat07FWQyIu8cHA137q7nQSc=) 10: bmd97yvzsY5Yo2HfnEE_aGsiLVw.roa (hash: rBbiHBTIds8AVFd6SWdPqBeLyfTxB+l6zirCVR5u1u4=) 11: mGihmSu4A33egdDIzcBpX87hfCc.crl (hash: 4vjCiQb5lxD6WTUqboO2jONmeDZKJDFuwbogMTqPjS0=) 12: pygxQHbvGZKVLzuvUJnRE055Ymk.roa (hash: jTpMpBKEIx8o2FyniDrKdnhuTZAZvNKL8hZwfmfGnMs=) 13: qYL6kaPJ2b0Ev5p7Oziqiiv4qTc.roa (hash: WBI5DwkHHee0G2mSopIcnWotDs7K8/Lvby/GArK324A=) 14: vY3Y3etrniGVDWVqa-wGwlb4wOM.roa (hash: 3iBpAllkx0+u9qLlhBtBBscqzISkhr+UuWv9+CbK7ew=) 15: yQafrAusZTwTPZBFL3M0qrFQZ04.roa (hash: Bj+Dm5K+2i3MwGi4viuLKNvUn9KDeSK+/ogiA8Pwh18=) 16: zsat_Kz6NAhfzEasx4a9lQm7pnc.roa (hash: iKI5HEcwbfP2kx1h4h3ET7Ssp+IpbRLbrY2f8G6eDr4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 11:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:72:2f:71:c4:44:45:e8:c5:5f:b3:64:d9:58:d0:95:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27 Validity Not Before: Apr 26 13:00:34 2025 GMT Not After : Apr 27 13:00:34 2025 GMT Subject: CN=4e52be574b4e0bde1ef2682466de2434f27b50ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7e:1c:0e:49:21:82:02:e5:dc:aa:8c:98:93: 8b:76:cb:3d:8c:de:f7:00:8e:89:db:08:e5:b8:24: 32:48:97:1e:ca:b0:90:42:c5:b7:70:16:b8:a3:0f: 52:f1:3c:bf:a0:72:09:1f:68:e9:a9:24:70:f1:84: 76:17:7d:d9:4a:85:0a:d6:75:07:ad:eb:4c:1f:14: 1e:b2:7e:06:2a:6b:83:44:08:ab:af:fe:ed:39:e4: 21:1c:9a:26:70:08:6d:1f:25:03:c2:18:60:52:62: 75:bd:1b:d8:77:e4:51:be:ef:0f:9c:3c:27:9a:50: fb:01:b6:72:2f:a1:aa:c0:49:72:6b:40:fe:34:49: e3:f0:0d:3c:2d:57:32:a2:d4:10:68:5d:77:c4:4a: 02:98:a1:f0:ab:76:58:58:f1:90:52:00:1a:e5:a5: ff:af:03:df:fb:a1:77:28:c6:26:f8:54:82:7b:17: 24:61:a6:01:6f:5c:fa:b7:ad:e4:cd:23:bd:6b:d2: 6f:15:ef:ff:fe:19:77:7c:40:7e:de:fc:1d:65:bc: 37:df:44:bd:3e:bb:63:ae:cb:dc:7c:93:bc:cd:74: a8:09:7a:c1:cb:53:09:b1:44:bf:a0:f4:60:70:54: 6f:ac:45:8b:45:f1:cf:91:bf:c5:2e:95:06:3a:44: 4c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:52:BE:57:4B:4E:0B:DE:1E:F2:68:24:66:DE:24:34:F2:7B:50:EA X509v3 Authority Key Identifier: keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:75:9a:5f:c4:3d:f5:0b:fd:1e:10:b7:2b:79:70:18:99:24: 43:a8:28:62:51:bd:74:10:cd:dc:2f:ec:b0:c7:56:6c:96:a8: 8c:3c:58:95:61:7c:e4:b0:53:0a:5f:1a:31:b8:e4:7d:71:7b: 3b:4c:f7:70:13:c0:6e:16:d7:7e:35:f9:ef:67:d7:81:72:17: 3d:b2:ab:b1:9b:91:3d:65:d6:87:6e:62:92:14:9d:dc:ab:e7: 89:49:60:e4:55:81:34:45:96:8f:e3:0a:4b:01:32:b8:ba:a6: 39:0a:9f:e2:ea:54:b3:e5:75:33:3b:27:e4:04:ef:7c:19:73: f8:8f:9f:3f:94:8b:fe:ad:01:75:f5:88:bf:f7:34:78:23:13: fe:9b:77:5c:5f:1a:3b:25:18:c2:d2:6e:96:ce:45:63:90:c3: 48:4d:e9:6e:64:24:2f:28:02:bd:af:60:9a:ef:86:a7:01:fe: 46:8b:bb:21:83:56:82:18:b2:8e:34:ed:67:a5:c5:65:09:b8: c8:00:c5:8d:a2:52:00:08:1c:7b:f0:82:b9:a2:56:90:22:9b: 95:b3:35:50:7f:a7:70:f1:67:a4:0f:b8:79:32:bd:6f:be:c5: d1:4b:cf:69:90:6e:23:02:cc:75:02:d4:aa:ea:01:5d:c3:95: 14:a2:0d:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZyL3HEREXoxV+zZNlY0JUeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NjhhMTk5MmJiODAzN2RkZTgxZDBjOGNkYzA2OTVmY2Vl MTdjMjcwHhcNMjUwNDI2MTMwMDM0WhcNMjUwNDI3MTMwMDM0WjAzMTEwLwYDVQQD Eyg0ZTUyYmU1NzRiNGUwYmRlMWVmMjY4MjQ2NmRlMjQzNGYyN2I1MGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqn4cDkkhggLl3KqMmJOLdss9jN73 AI6J2wjluCQySJceyrCQQsW3cBa4ow9S8Ty/oHIJH2jpqSRw8YR2F33ZSoUK1nUH retMHxQesn4GKmuDRAirr/7tOeQhHJomcAhtHyUDwhhgUmJ1vRvYd+RRvu8PnDwn mlD7AbZyL6GqwElya0D+NEnj8A08LVcyotQQaF13xEoCmKHwq3ZYWPGQUgAa5aX/ rwPf+6F3KMYm+FSCexckYaYBb1z6t63kzSO9a9JvFe///hl3fEB+3vwdZbw330S9 PrtjrsvcfJO8zXSoCXrBy1MJsUS/oPRgcFRvrEWLRfHPkb/FLpUGOkRM4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE5SvldLTgveHvJoJGbeJDTye1DqMB8GA1UdIwQY MBaAFJhooZkruAN93oHQyM3AaV/O4XwnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2It ZDc4ZDU2MzFkN2Y2LzEvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2ItZDc4ZDU2MzFkN2Y2 LzEvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv3WaX8Q9 9Qv9HhC3K3lwGJkkQ6goYlG9dBDN3C/ssMdWbJaojDxYlWF85LBTCl8aMbjkfXF7 O0z3cBPAbhbXfjX572fXgXIXPbKrsZuRPWXWh25ikhSd3KvniUlg5FWBNEWWj+MK SwEyuLqmOQqf4upUs+V1Mzsn5ATvfBlz+I+fP5SL/q0BdfWIv/c0eCMT/pt3XF8a OyUYwtJuls5FY5DDSE3pbmQkLygCva9gmu+GpwH+Rou7IYNWghiyjjTtZ6XFZQm4 yADFjaJSAAgce/CCuaJWkCKblbM1UH+ncPFnpA+4eTK9b77F0UvPaZBuIwLMdQLU quoBXcOVFKIN1A== -----END CERTIFICATE-----Generated at Sat Apr 26 20:49:54 2025 by rpki-client