$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft File: CnMngF3yD7XB1vTokHR0PK6ySvc.mft (raw, json) Hash identifier: oXyAeZz9wUOkqkLaNNUbRyerAU+P4H8pmCpXxvH6R1E= Subject key identifier: 88:07:81:E8:88:FF:B9:54:18:20:AB:02:AE:6F:52:B0:B0:C7:93:57 Authority key identifier: 0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 Certificate issuer: /CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Certificate serial: 019682108786801C8996C2B0B3850C1A2FD8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft Manifest number: 1527 Signing time: Tue 29 Apr 2025 15:00:43 +0000 Manifest this update: Tue 29 Apr 2025 15:00:43 +0000 Manifest next update: Wed 30 Apr 2025 15:00:43 +0000 Files and hashes: 1: 3cfolha5-Y-keIgl3j-ukMRu5nQ.roa (hash: BQrU5Phy/xAtort4zjZjH8gAv4mg2agVu08FECKFlvU=) 2: CQxWaB1OicMMrqXCoQ0fopCoxdU.roa (hash: WjfHWnkqbfHKaqxUShNyRq++rhQwjg3tNVjy17YQNc4=) 3: CnMngF3yD7XB1vTokHR0PK6ySvc.crl (hash: Qi3n3rZ045K94/oRaf5LsXuisLeayyVX15ccqY+BKn8=) 4: GopMrpyToOz7hTEn02tSlWTChNc.roa (hash: PWyNZm9NNDQb4vDrYexwTILfoeBvuqO0/ZesnD+rBMg=) 5: Zla6xxqlwjD5HGAN16Pzo29Tijg.roa (hash: XT7/Z4sfo6kElFtdLFq3BhRYhs4vxj89ZfDzgHu8Ge4=) 6: eeob2ee4lfFzOOMEsHvp08f6qTk.roa (hash: 0B+jfajS9x0UOg+XsVtGs3LZcCLSBc/7t9eJKjvj4DM=) 7: hnMtsx259zWb5DPTAskFt19vieA.roa (hash: IS/K0LmABWhq/hUi5ijfbnkS8QGQcUBWRW0f7gTisD4=) 8: izRl0EDK4B0qzWxxkTnsFaQUD9I.roa (hash: deGltujGMo6zRw49YCgwFhp3rs4UuELASdCXPlgWHmM=) 9: tbMl7oFKXcbypI4zCPH3_DIQ3z4.roa (hash: woX9zsT33PUAbbfirUNyi4tkHILBBLskTh8l2Lf5sLU=) 10: ydOhopDpEgxJrzwZy5o2ywKpW8w.roa (hash: cGNA9jtDwM6OD4vlqV4K4uD26uy/JQnhTPG3oY/YMmA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Apr 2025 15:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:82:10:87:86:80:1c:89:96:c2:b0:b3:85:0c:1a:2f:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Validity Not Before: Apr 29 15:00:43 2025 GMT Not After : Apr 30 15:00:43 2025 GMT Subject: CN=880781e888ffb9541820ab02ae6f52b0b0c79357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ec:ad:4d:6a:cf:12:de:d4:8e:cc:9b:30:f1: 9b:8a:4f:fe:f6:e8:86:7b:e2:8f:07:93:d5:fd:3b: 71:58:ac:90:d9:c9:21:34:9b:2b:7d:44:6b:41:f4: 3e:66:8a:30:41:04:b3:3a:d2:40:a5:f4:6d:fd:88: 8e:7e:21:b3:24:54:bf:2b:db:16:c0:fd:2f:10:50: 3d:aa:4e:7d:cc:73:6a:8c:cc:77:a9:f5:ff:c0:46: dd:bd:c5:25:32:fb:c2:f8:74:14:a4:c5:d7:8f:63: 2d:e4:64:3b:74:e8:bd:6b:e2:b4:d8:27:4f:93:63: 1e:24:9e:91:cc:da:97:4d:d3:ea:27:19:58:4b:1e: 45:86:06:14:ff:ab:c6:4d:42:b5:81:d8:8b:32:a1: c9:ec:5c:5b:20:ee:cc:29:96:f2:58:a1:67:e6:09: ea:13:5e:11:f2:a8:38:3c:a5:6a:3e:d8:bb:41:33: 0f:87:57:70:87:7e:ff:8e:55:62:4b:8e:62:36:2b: 49:00:29:54:30:88:4f:da:6e:c2:e6:77:b4:74:20: cc:5c:3e:4e:ba:34:5c:39:26:1f:df:06:16:fc:1a: a8:70:c0:0e:d3:e4:02:85:c1:58:e1:d5:6c:5c:16: ac:05:99:e7:00:97:fe:c8:af:bf:01:01:85:ba:2f: 5d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:07:81:E8:88:FF:B9:54:18:20:AB:02:AE:6F:52:B0:B0:C7:93:57 X509v3 Authority Key Identifier: keyid:0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:ac:69:b1:75:34:c4:e4:f3:6e:55:75:bb:2a:69:5f:5c:d8: 29:cc:5d:31:33:f5:a1:f7:70:96:b8:7b:1f:c7:94:5b:17:12: 6b:95:35:a3:36:50:30:22:98:dd:e8:97:5f:c3:03:bb:8c:29: 58:84:fe:a6:1e:10:13:86:88:c3:79:3e:a6:d8:5c:29:35:e3: 5a:c9:1e:02:10:1e:b9:3e:b1:3c:c4:5d:82:cc:5a:56:9b:aa: 8f:c4:70:95:dc:03:56:d0:cb:13:e2:27:70:84:2d:02:34:96: d1:ca:1e:11:5c:2e:c0:ef:9f:2e:aa:2f:60:17:6d:53:a3:9e: c4:db:c6:cc:88:ca:63:34:90:31:a6:d3:52:d0:36:77:f4:e2: 50:2a:78:2a:79:9a:e0:cd:d4:95:9e:f8:a1:ac:f0:4f:af:a6: ba:41:c0:ad:f4:3e:0b:5a:3d:37:bf:9f:07:25:29:07:d2:36: ab:bc:f0:a9:95:cf:70:ac:7c:91:8d:d6:0f:05:3b:c0:91:e9: 99:61:a8:da:6e:1f:67:6f:e1:7c:c1:c1:fd:d4:c6:89:d0:1f: 4d:73:e1:82:b0:83:37:35:68:29:cf:c2:8b:2f:55:81:36:36: d4:f3:5a:28:4a:01:65:d6:86:50:85:78:7a:f2:19:11:e8:95: b4:ab:0d:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZaCEIeGgByJlsKws4UMGi/YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNzMyNzgwNWRmMjBmYjVjMWQ2ZjRlODkwNzQ3NDNjYWVi MjRhZjcwHhcNMjUwNDI5MTUwMDQzWhcNMjUwNDMwMTUwMDQzWjAzMTEwLwYDVQQD Eyg4ODA3ODFlODg4ZmZiOTU0MTgyMGFiMDJhZTZmNTJiMGIwYzc5MzU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOytTWrPEt7UjsybMPGbik/+9uiG e+KPB5PV/TtxWKyQ2ckhNJsrfURrQfQ+ZoowQQSzOtJApfRt/YiOfiGzJFS/K9sW wP0vEFA9qk59zHNqjMx3qfX/wEbdvcUlMvvC+HQUpMXXj2Mt5GQ7dOi9a+K02CdP k2MeJJ6RzNqXTdPqJxlYSx5FhgYU/6vGTUK1gdiLMqHJ7FxbIO7MKZbyWKFn5gnq E14R8qg4PKVqPti7QTMPh1dwh37/jlViS45iNitJAClUMIhP2m7C5ne0dCDMXD5O ujRcOSYf3wYW/BqocMAO0+QChcFY4dVsXBasBZnnAJf+yK+/AQGFui9dTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIgHgeiI/7lUGCCrAq5vUrCwx5NXMB8GA1UdIwQY MBaAFApzJ4Bd8g+1wdb06JB0dDyuskr3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEt MTBiYjQ1NzlkNTI4LzEvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEtMTBiYjQ1NzlkNTI4 LzEvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnKxpsXU0 xOTzblV1uyppX1zYKcxdMTP1ofdwlrh7H8eUWxcSa5U1ozZQMCKY3eiXX8MDu4wp WIT+ph4QE4aIw3k+pthcKTXjWskeAhAeuT6xPMRdgsxaVpuqj8RwldwDVtDLE+In cIQtAjSW0coeEVwuwO+fLqovYBdtU6OexNvGzIjKYzSQMabTUtA2d/TiUCp4Knma 4M3UlZ74oazwT6+mukHArfQ+C1o9N7+fByUpB9I2q7zwqZXPcKx8kY3WDwU7wJHp mWGo2m4fZ2/hfMHB/dTGidAfTXPhgrCDNzVoKc/Ciy9VgTY21PNaKEoBZdaGUIV4 evIZEeiVtKsNqg== -----END CERTIFICATE-----Generated at Wed Apr 30 00:08:41 2025 by rpki-client