$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft File: pjvMbSX3R2-7PsM_bbw-nurZIhI.mft (raw, json) Hash identifier: Jpg1bagDs8Ny9qGRK4Om6alRKV54Imts7giCCSq8zfs= Subject key identifier: DD:B9:72:92:27:A8:91:F6:87:95:13:4D:63:0F:40:A5:9D:4E:83:71 Authority key identifier: A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12 Certificate issuer: /CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212 Certificate serial: 019673423EB95956A71BCDED05522C2B0672 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft Manifest number: 0869 Signing time: Sat 26 Apr 2025 18:00:43 +0000 Manifest this update: Sat 26 Apr 2025 18:00:43 +0000 Manifest next update: Sun 27 Apr 2025 18:00:43 +0000 Files and hashes: 1: 0zBZJP0kyDhay_FLZ4i5g9nbbPQ.roa (hash: RJngLSc8W5p+aB/9xeZPrMLETZYTrNhbKpYClU/cMKE=) 2: 5NFcVQOlS2SfRA9_dseHho-9-mc.roa (hash: swfI8aXvx2sxn3YOzxRnlDU7qvwOILHJAwX26Y3ztqI=) 3: 719PZLmeHqbujtRsKmvo5771XIo.roa (hash: bsKRuhzJIveVWiHQvKvv+dLt6oNf3d66tNY6ht9/C3A=) 4: 8WUQrdzKsEZUNzZ9k3E9ajfkd5s.roa (hash: Ixz0hSpVqJJ/oAfsncTGxOv3fHWBSaH9gBGjqTv8vpQ=) 5: FHXWFrj4nreKJjXTfDKCc6Y16Is.roa (hash: PfuW04ELrwKUUeQD8qGy+/BFhBo8C5J05OWPOUMFx5w=) 6: Ho4pDAaaconFe5cZ7ygze1a44Xo.roa (hash: 1pC6hpICFpbgfqlZn7adq2AVfLKO5t0AC5KWofkjFSE=) 7: Kd5CFoG07kPDgqUGQpHj24zQka8.roa (hash: +2s4BraFjLJP4x9hMH6DgHfMWVkWCLxuz2cF8ghToGs=) 8: NYJYw1BTKJV56akoY5ZQRJna-MA.roa (hash: brwHoHz9mi1vg8NUkbqZqqePDdu1Ej44xmauCwQ9Qac=) 9: _-FUjYz5pLdhL7MicJJ-uRt5LKI.roa (hash: FdRIrcXaoKNyd2lS+olFcjF6MT37TxwlG2cpQ0ijFig=) 10: pjvMbSX3R2-7PsM_bbw-nurZIhI.crl (hash: jdvYu4F/3x1Okb1EIiosaQTuvuC91k9jI1I1KDPzaXk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 17:20:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:73:42:3e:b9:59:56:a7:1b:cd:ed:05:52:2c:2b:06:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212 Validity Not Before: Apr 26 18:00:43 2025 GMT Not After : Apr 27 18:00:43 2025 GMT Subject: CN=ddb9729227a891f68795134d630f40a59d4e8371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:6c:20:b2:ca:6d:3c:4d:92:2b:bc:9c:9d:90: 9c:8e:ee:12:68:61:11:fc:30:ec:6d:4c:cb:f4:86: 9b:4e:0c:a9:21:6e:92:65:e1:97:c4:84:0c:51:bb: ef:69:a8:58:79:3f:29:92:3e:20:9b:8c:e2:a4:f7: a2:b9:ee:4d:5f:1c:5a:ed:d0:1f:de:9f:67:33:06: a4:fd:63:6e:6c:6c:bf:58:ce:27:34:6e:6a:7a:d0: eb:e2:a7:6d:34:44:67:92:0f:a9:c1:ba:cc:46:37: 95:21:4b:81:89:d0:cb:30:1b:48:9a:e8:d8:c6:30: fc:ac:77:58:e9:ec:41:a7:23:30:a1:c7:89:f0:81: 00:0b:5a:e1:75:88:27:5e:4e:33:3a:65:e1:12:0d: 57:77:bb:19:a4:49:99:2a:fd:2d:01:5f:e1:05:fc: 1b:7c:b0:a7:b0:50:92:e2:b9:64:c5:47:d4:48:92: 29:ea:4b:73:de:fd:39:da:34:60:41:c5:bd:dd:2f: b7:d7:a5:61:d3:f2:a1:0b:32:cd:9d:1e:9b:fc:f2: 5d:0f:d3:b4:21:e8:86:39:2d:95:c2:4a:46:39:53: ff:5c:c1:ce:5e:80:9d:52:bf:a5:9e:14:99:a1:77: e0:46:2d:8f:78:5d:34:f3:ce:75:87:6e:13:fb:94: aa:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:B9:72:92:27:A8:91:F6:87:95:13:4D:63:0F:40:A5:9D:4E:83:71 X509v3 Authority Key Identifier: keyid:A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:7a:cd:7f:c4:c9:79:04:b1:f2:8b:3a:48:68:0d:1c:be:ac: 81:bd:f0:bd:f3:71:05:ce:96:85:c0:bf:59:fe:bd:d7:54:69: 77:7d:0b:87:4f:a8:a6:a9:13:4d:2d:e3:2c:c0:a7:a0:e4:a9: fd:a6:86:9b:71:1e:ab:bf:ec:89:ed:19:3b:7b:44:f3:1a:f8: 4b:8f:6f:f9:89:0e:7b:1b:71:12:ce:fb:9e:7b:39:47:11:d2: 62:6b:e9:98:34:47:e3:41:07:10:7d:1d:15:05:33:22:b0:49: 9b:40:f9:50:fa:94:ce:d6:3f:71:6a:69:5e:9c:b2:7e:c8:0a: d9:3e:9d:a3:0b:d0:cc:98:8b:9a:5e:7c:26:f5:16:4a:06:31: 48:af:2d:d1:13:e7:e7:e5:d7:88:e9:d3:a5:b3:82:aa:3c:d6: c7:11:36:88:d4:a9:3e:41:9b:77:5c:3a:e5:0f:d8:89:6e:25: 4e:25:66:8b:c4:54:81:4e:80:67:81:5d:ae:9d:17:40:82:cd: ec:69:46:f5:49:b9:a9:03:a4:d6:97:f4:98:55:76:ce:7f:74: 8e:48:98:fe:e4:f3:c5:38:69:73:d2:31:e1:5c:15:bb:cd:12: c4:75:fb:66:2a:71:aa:d9:75:50:73:02:83:aa:80:a5:4a:f9: f9:25:83:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZzQj65WVanG83tBVIsKwZyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2M2JjYzZkMjVmNzQ3NmZiYjNlYzMzZjZkYmMzZTllZWFk OTIyMTIwHhcNMjUwNDI2MTgwMDQzWhcNMjUwNDI3MTgwMDQzWjAzMTEwLwYDVQQD EyhkZGI5NzI5MjI3YTg5MWY2ODc5NTEzNGQ2MzBmNDBhNTlkNGU4MzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWwgssptPE2SK7ycnZCcju4SaGER /DDsbUzL9IabTgypIW6SZeGXxIQMUbvvaahYeT8pkj4gm4zipPeiue5NXxxa7dAf 3p9nMwak/WNubGy/WM4nNG5qetDr4qdtNERnkg+pwbrMRjeVIUuBidDLMBtImujY xjD8rHdY6exBpyMwoceJ8IEAC1rhdYgnXk4zOmXhEg1Xd7sZpEmZKv0tAV/hBfwb fLCnsFCS4rlkxUfUSJIp6ktz3v052jRgQcW93S+316Vh0/KhCzLNnR6b/PJdD9O0 IeiGOS2VwkpGOVP/XMHOXoCdUr+lnhSZoXfgRi2PeF008851h24T+5Sq5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN25cpInqJH2h5UTTWMPQKWdToNxMB8GA1UdIwQY MBaAFKY7zG0l90dvuz7DP228Pp7q2SISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83NjhmZGItZDFiNS00YmVmLWJjYmQt NDkyNGZhMDAwYjdjLzEvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS83NjhmZGItZDFiNS00YmVmLWJjYmQtNDkyNGZhMDAwYjdj LzEvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFHrNf8TJ eQSx8os6SGgNHL6sgb3wvfNxBc6WhcC/Wf6911Rpd30Lh0+opqkTTS3jLMCnoOSp /aaGm3Eeq7/sie0ZO3tE8xr4S49v+YkOextxEs77nns5RxHSYmvpmDRH40EHEH0d FQUzIrBJm0D5UPqUztY/cWppXpyyfsgK2T6dowvQzJiLml58JvUWSgYxSK8t0RPn 5+XXiOnTpbOCqjzWxxE2iNSpPkGbd1w65Q/YiW4lTiVmi8RUgU6AZ4Fdrp0XQILN 7GlG9Um5qQOk1pf0mFV2zn90jkiY/uTzxThpc9Ix4VwVu80SxHX7Zipxqtl1UHMC g6qApUr5+SWDLg== -----END CERTIFICATE-----Generated at Sun Apr 27 02:53:31 2025 by rpki-client