$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft File: BztMEkjEvPIrBXffypsU2QY8KMA.mft (raw, json) Hash identifier: JNqZB8tJfyAK+Qh65JVRcFUudJXuJ7DSlE5+8cL7xps= Subject key identifier: C7:2F:20:3B:46:22:28:A5:E4:9B:88:54:E6:55:19:C8:5E:85:49:C2 Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0 Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0 Certificate serial: 01967AFBBDBDEEBB1C6791C556A61A25E3FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft Manifest number: 135A Signing time: Mon 28 Apr 2025 06:00:40 +0000 Manifest this update: Mon 28 Apr 2025 06:00:40 +0000 Manifest next update: Tue 29 Apr 2025 06:00:40 +0000 Files and hashes: 1: 1-9kyTG57lW5pauShjAbSgqx7ELA.roa (hash: yqYBQ/TJzQNk1+uZ7N56AeKifi1WJfBnexFUg+0LLyM=) 2: 2yA59QtsMWk9pMkqZsRhCUNRv5s.roa (hash: 3lhj+8t7WakD0taOb/n8+n5eS8DbEqnleZ93py5eK2o=) 3: 3g3144t54HGRa28h02Xw83J7Clc.roa (hash: XX+LOOOsUzF/wHBB2Iscv3ZSGgGpMaFj5N2D9xm/JPo=) 4: 5Mam-Pg9a629tSWFczaVxFg4D58.roa (hash: uI87FyR3KvBIESOCI6aSMEI2WoHQnyL7wu0aXhj5lC4=) 5: 5QprB05ll1uYCquytR4n1W116WM.roa (hash: kOFqQKS/OdPIqYk3rxYLUDVI5uzIqTlMZr9WxgzKLwM=) 6: 6sSkl7UX1wQmJbbfGMATKxJXY54.roa (hash: IeSF56cYT3VKQor9+nTqChrxam+t4/ky7I5rJ/pHZBg=) 7: B0TfHkEyVnbd2N0e6k2tgOD6_wI.roa (hash: Urqkg7JIHNdsGel84r9NTaWTAKTT4SDTb2BONLXGY8w=) 8: BztMEkjEvPIrBXffypsU2QY8KMA.crl (hash: IsdE293Yt3MCvIMrwQtA2pA5zuiSr/0RqB18NsOHxb4=) 9: DbZqiucLKtXg_tnHgCLsTj7slY8.roa (hash: Y3nl2lYy9DUM+ulrcRJHTjNNQpfHThzYB54J4kpUdvc=) 10: HWormeP5NTMFg9cNiU120qWb8MM.roa (hash: 3Vx0k4vPLIVcmX2N61XugSe2WGxKb/dBPzzUHtK6wl4=) 11: KV367d6Zsc-zqT-odrHl0DYDJsM.roa (hash: FKc2KZrRBCocDmqxqhbBguDKolkUjxKD7WOeyPk9toM=) 12: MG8qxofm6sprGoo3pg2W2uS6nP0.roa (hash: 3jnaDmSAZ0hSDFvLhpqI+24V0FGhfiyi2bRTiEuSPjo=) 13: OvLWFjuaplvFw74T90MVoTJyQPI.roa (hash: xOJfcV9Hwg2qFldj+To5nN+byTUn4DfMWX3s515MpgU=) 14: VrEU9PE5EfCqbrb7nZMyqxga0y4.roa (hash: pCI3583YgOq3CB+JSxU25k69djgvqQV7uPOrhj4rCz8=) 15: Wc305TLcG6ipi4YG3pmtocQiH2Q.roa (hash: bIpc1gyDbj8Co03okk2diagetshwMOgbtSapVHm51GU=) 16: aTytGUXYEIGxtGOF3WUFFC8JcwQ.roa (hash: Vs+sK7xqct09FIQXh0SoHFV8Yu6CjDQxZx7xtJlTgNE=) 17: ek3EtDyVxedBXi4kaK3trrMaJmg.roa (hash: /bg27e+bXjbGnL2ey015MY0hFpRmcorpPjjRaoCBolE=) 18: exNBWzsJdV3aicSdEIBpUGacx74.roa (hash: 6hKpyXwmjMPvF2uI11MjVhC+6m0ZJvy5FnDNsSRaDUA=) 19: fNC7ZXZ-1ULFrWkO8J5UybYfGTI.roa (hash: JakG1+wEwBj7MRAmGKQKU//mA0wgIrSo6KrQr/NJN9Q=) 20: fuKyxGw_5UKeL4AWKKV3APO-jXs.roa (hash: 1i6kDmcAC1XA98X8VCsAJMMtYyeOaBwcuGwbyAjYXgY=) 21: j84LLRjxqovhQ1f-Vo1W8Ggomrg.roa (hash: lE8VSDD6OngPZMSO0N6X5XYw09YDfgl2syZ7P/y5Ujc=) 22: lnMedtsWp-bgx_qGux0u4Jemg6Y.roa (hash: fvofVrcDHJL/VFOzoV5reTZHNKsWHRjL9AAzUyIF6RA=) 23: lnfSRPIjJ_rnv2rA9LFnWqyasxU.roa (hash: 6y5/RH+pWSVtrPaN0CjFr8pkFmjDA1Ymsw/HEzVgX0w=) 24: lydOFdT2ZB4VXyRnspFs-1TL_6A.roa (hash: 8itP19agssSYawEYfpGuFEww3nKwbJHsZKc1MH8kG3s=) 25: nsOvbjb1TNSx2u7BUmQra8F8iNU.roa (hash: y2lXY8swYsJj5FkjF0M5Xak7JQxiOHB7809PchjSzjM=) 26: q9EzhRak9A-maSvUjMGlPsmVdWk.roa (hash: fhhhD7VzymISsohMui+Cyx0H2ETVK9ly9iR82236g+Q=) 27: qLO5cj38BRyYdeH-rfctS6n9M7U.roa (hash: aMShn4FXdnTufUpyHOP7ThkTMbndZL+QIAZz0lq4l0Y=) 28: vMuPv15czUN3TyQjsF6vfToUN84.roa (hash: z4fYQjlVjkuFyievVhhGkwXvN23Mi1wn1+WiCtl5UkU=) 29: xJs9bo-w5TvWpljc1sQfqueBbtQ.roa (hash: TAtPCmil9M2Rr0khwcHfGhF81jVdFJvO7+4kHsp/Iv8=) 30: yikB75qCLmOR70Lyl75i3suSq54.roa (hash: 6RAQHbYTc4wjn8qsz3QMR9klg79Q+jkBfTxmlxzlVAA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Apr 2025 06:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:7a:fb:bd:bd:ee:bb:1c:67:91:c5:56:a6:1a:25:e3:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0 Validity Not Before: Apr 28 06:00:40 2025 GMT Not After : Apr 29 06:00:40 2025 GMT Subject: CN=c72f203b462228a5e49b8854e65519c85e8549c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:88:e8:70:1c:83:41:ec:97:74:c1:e0:47:39: c9:2b:52:45:f6:aa:7c:a3:c7:1a:24:20:99:a5:e2: 8a:4c:71:99:59:4d:48:83:e4:3b:9d:4d:9c:99:81: e1:b7:32:bc:79:bd:7a:a4:ba:d9:18:ff:b8:b8:16: 23:c1:64:b0:60:db:40:55:14:95:d6:11:3d:b8:d2: 65:fa:e7:61:6c:14:e1:99:26:83:fb:8a:b5:a5:da: ea:d4:45:d9:f8:da:cf:d6:3b:8a:d8:36:54:2f:70: fe:6e:63:99:ce:b8:b2:31:8c:a8:e8:ff:58:22:48: 28:98:0b:ef:27:95:92:ee:36:c2:64:61:4b:05:e2: eb:97:bf:a0:78:72:80:d1:19:79:16:3f:96:e0:ce: 40:2c:8f:b7:64:71:a7:c2:3f:bf:ce:9c:83:3d:5a: 8b:77:51:9c:27:3b:b8:ad:77:f1:c0:96:0b:bc:c3: 18:02:d4:b4:cc:65:64:c6:68:c9:99:65:3c:91:da: 79:34:d9:72:35:b3:3a:9d:7b:e7:7f:7d:51:ce:a2: 31:15:0a:14:59:cb:a5:3f:90:06:e7:73:a5:89:63: 63:80:ba:08:c1:99:69:1d:ff:ef:20:1d:0e:48:1e: c5:c0:58:23:6d:92:3a:b3:9c:c1:c7:2e:84:dd:2a: 0c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:2F:20:3B:46:22:28:A5:E4:9B:88:54:E6:55:19:C8:5E:85:49:C2 X509v3 Authority Key Identifier: keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:8e:2a:05:a6:5b:93:6e:27:e7:d6:91:82:59:32:00:d7:db: 55:d7:4d:aa:8a:0b:ca:58:21:64:3c:db:1c:59:9d:58:60:d0: a2:78:2b:72:69:ee:15:c6:c3:09:70:09:f7:0b:ef:4f:ca:3d: 32:13:04:46:dc:96:f9:24:5c:64:84:e9:35:1a:38:22:1b:1b: b5:ea:1a:eb:b9:39:e8:37:54:a4:d7:35:38:b2:ab:d1:86:ad: 25:32:ef:5a:be:f8:b0:3d:a1:9e:fe:84:77:68:56:fd:e7:ed: 40:cb:6e:05:cf:f5:fe:45:7a:f1:76:85:3a:d7:41:57:fe:8b: db:8e:f8:af:c2:58:be:0b:c6:2c:11:3e:0e:b7:83:a9:25:4f: 1c:7a:f8:3f:dc:05:79:bd:34:d7:62:eb:09:b9:ce:00:8f:5e: 24:e6:f6:e7:12:59:f0:c0:73:2c:48:88:29:d8:4c:33:c1:30: 10:77:2b:28:e1:3f:01:f1:bc:de:11:c2:67:4a:b0:3f:cf:22: 9a:b8:f0:09:c4:ff:21:5a:7b:88:4e:c7:86:a8:69:25:13:89: ae:ec:e2:b5:8f:56:d2:87:f3:45:6c:4b:c0:77:98:58:2f:e0: a1:13:f3:c0:f7:5f:c8:fa:15:ce:36:92:04:d6:96:2b:51:a6: 1c:e3:60:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ6+7297rscZ5HFVqYaJeP8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3M2I0YzEyNDhjNGJjZjIyYjA1NzdkZmNhOWIxNGQ5MDYz YzI4YzAwHhcNMjUwNDI4MDYwMDQwWhcNMjUwNDI5MDYwMDQwWjAzMTEwLwYDVQQD EyhjNzJmMjAzYjQ2MjIyOGE1ZTQ5Yjg4NTRlNjU1MTljODVlODU0OWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA84jocByDQeyXdMHgRznJK1JF9qp8 o8caJCCZpeKKTHGZWU1Ig+Q7nU2cmYHhtzK8eb16pLrZGP+4uBYjwWSwYNtAVRSV 1hE9uNJl+udhbBThmSaD+4q1pdrq1EXZ+NrP1juK2DZUL3D+bmOZzriyMYyo6P9Y IkgomAvvJ5WS7jbCZGFLBeLrl7+geHKA0Rl5Fj+W4M5ALI+3ZHGnwj+/zpyDPVqL d1GcJzu4rXfxwJYLvMMYAtS0zGVkxmjJmWU8kdp5NNlyNbM6nXvnf31RzqIxFQoU WculP5AG53OliWNjgLoIwZlpHf/vIB0OSB7FwFgjbZI6s5zBxy6E3SoMxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMcvIDtGIiil5JuIVOZVGchehUnCMB8GA1UdIwQY MBaAFAc7TBJIxLzyKwV338qbFNkGPCjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQt YThkMzYxY2U2NGFhLzEvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQtYThkMzYxY2U2NGFh LzEvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEY4qBaZb k24n59aRglkyANfbVddNqooLylghZDzbHFmdWGDQongrcmnuFcbDCXAJ9wvvT8o9 MhMERtyW+SRcZITpNRo4Ihsbteoa67k56DdUpNc1OLKr0YatJTLvWr74sD2hnv6E d2hW/eftQMtuBc/1/kV68XaFOtdBV/6L2474r8JYvgvGLBE+DreDqSVPHHr4P9wF eb0012LrCbnOAI9eJOb25xJZ8MBzLEiIKdhMM8EwEHcrKOE/AfG83hHCZ0qwP88i mrjwCcT/IVp7iE7HhqhpJROJruzitY9W0ofzRWxLwHeYWC/goRPzwPdfyPoVzjaS BNaWK1GmHONg3w== -----END CERTIFICATE-----Generated at Mon Apr 28 10:37:38 2025 by rpki-client