$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft File: 1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft (raw, json) Hash identifier: oXMF1LmW9Q4HtAHFxAmdIvhSlurv1H4ln0mIqhR4RsM= Subject key identifier: 69:F3:47:EE:E4:84:40:F5:DB:6D:D6:AA:45:CC:CB:3B:37:16:26:63 Authority key identifier: F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A Certificate issuer: /CN=f82554a856a422b061ae64c577630f91d408cd4a Certificate serial: 019674F9A9603CE5A7AF6E1B1BBCAB0FFF50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft Manifest number: 1513 Signing time: Sun 27 Apr 2025 02:00:40 +0000 Manifest this update: Sun 27 Apr 2025 02:00:40 +0000 Manifest next update: Mon 28 Apr 2025 02:00:40 +0000 Files and hashes: 1: 1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl (hash: Qv5sjRI9QDwnnheAxwqT6P7M/Zkbc1ejqff27CPf6Dg=) 2: 8yyknMa8Qa7eji2_-25NgjHMwAs.roa (hash: 6EA1L4yNjiFkAAM6t2iZAA7ze8SV3lMCUhKNPg3vBUQ=) 3: 9QjCjG8fGXKK3KT9GGHW6MAVJzE.roa (hash: fSpz8n2jWyy0I2DDmxohRpaljlrP9nL5ZtLGzLKYuXU=) 4: H7En3yY1mH2yRYS167HpwA6AL5Q.roa (hash: FPJfC/52NavOyoGt4vZ9gio4MoEgpYKiZrTtURDieXE=) 5: K4UoliAJDnPT2oq72AyXanTYwdo.roa (hash: +5dNWwnlyTnn33FOhd8BsjDiWGBw/K7XK9sbIa7ROKQ=) 6: WjTYhnjd8JZNKcEGGyvScBW7ujg.roa (hash: xm9/rrII6hlVm8eUope1QTZ7F33LVLrGkQUEXzf0iIk=) 7: aWWA3-Hs7ng_GCTHIDmwQ5Rjbdg.roa (hash: isC8RltnKP3pjrz7ZvAls/aB0WZTll6Skvt9xKP3UkI=) 8: fPjaiW_RQVaw1K0jco_QmLpGo5s.roa (hash: agQGyFSnSoUI1Vx0MTRN/i+hHcE0hyBre8ShGUX7keA=) 9: sERIvqHcZj2yU32m6o5QSyQReME.roa (hash: cfxbkVfwNX0hfImDTJjGC48Jbi/ZuYY11AKoePEqH8k=) 10: zTLxL4slk5kZQfWpH_PY-TD7nNM.roa (hash: tzDHOIgeKhCjAOTBNpSwMn6WduYNfsmvzrDJbeHe5/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 02:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:74:f9:a9:60:3c:e5:a7:af:6e:1b:1b:bc:ab:0f:ff:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f82554a856a422b061ae64c577630f91d408cd4a Validity Not Before: Apr 27 02:00:40 2025 GMT Not After : Apr 28 02:00:40 2025 GMT Subject: CN=69f347eee48440f5db6dd6aa45cccb3b37162663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:10:b2:f8:5d:cc:bb:d3:35:ad:5f:73:08:9d: 91:21:da:0d:22:40:dd:02:c3:b1:0d:4a:c0:08:19: 0d:29:79:cf:d7:8c:8c:27:cc:1d:a9:78:fa:bd:1a: b4:fc:ef:e0:2a:3e:8a:0e:be:dd:0d:fe:c4:db:63: 28:3f:97:70:77:39:88:aa:f4:2e:ce:75:62:fc:47: 71:82:8e:ae:62:c6:26:01:08:a1:e5:e6:69:75:b2: 07:b3:aa:1c:59:d6:bd:2f:ba:85:aa:dd:fc:6f:a5: 1c:ab:56:b2:74:40:06:11:81:cb:2a:7b:a4:9d:fb: 3a:3b:26:7c:5e:20:bc:27:04:15:59:35:a8:2b:4e: 3a:4b:77:65:ba:42:e7:f7:03:74:80:2a:69:49:48: f2:4f:be:b6:cb:54:36:51:1c:9c:38:20:6a:67:2b: 97:bc:bd:8d:23:04:99:db:6c:66:f3:8a:04:22:16: 0a:a8:e0:27:12:45:ae:39:4b:fb:71:53:41:b6:b6: a1:75:c3:fc:c6:21:ec:f8:e9:e2:37:ed:6b:d6:6d: de:8e:ca:ef:fb:0b:03:a2:48:eb:12:3d:c0:2f:68: 9a:0b:9b:a3:34:ae:4e:67:d7:48:d7:89:27:7a:04: 8c:68:3a:d0:e3:f6:a9:3a:5b:8f:b6:e5:6d:31:be: 2b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:F3:47:EE:E4:84:40:F5:DB:6D:D6:AA:45:CC:CB:3B:37:16:26:63 X509v3 Authority Key Identifier: keyid:F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:66:ec:df:96:71:d4:32:68:a5:29:94:93:6c:d0:25:45:96: 05:b1:0d:5b:65:44:d6:79:45:7d:cb:3d:7e:a9:7f:27:11:59: d9:e1:a2:9f:12:28:3e:af:ad:86:f9:83:55:6b:69:56:4a:49: 23:03:73:04:63:78:c3:f0:c9:56:a2:11:9c:9f:dc:06:4f:aa: 31:cd:66:b6:d8:de:d6:9c:26:d0:d7:8b:07:c6:fc:53:ad:dc: e9:80:a8:de:79:2f:c6:91:ce:e5:74:23:39:3f:16:af:54:43: 80:dc:0f:4a:2b:96:9e:3b:75:b3:b5:f4:06:bc:b7:e6:23:25: db:aa:7e:74:c6:f0:21:c2:f0:1f:c1:b9:5f:c5:69:fa:58:93: 72:17:0f:0d:dc:d4:7c:91:97:ef:26:5a:f8:e1:54:60:a6:de: 60:41:83:af:3a:ee:eb:29:7a:a1:d1:80:8c:86:01:55:c2:87: 94:21:6e:63:4f:5d:f2:1b:d7:4b:56:73:30:58:3d:b5:1f:2c: 35:29:7d:78:1e:0e:b9:14:a7:f4:9d:ef:63:84:29:c8:01:2a: 8a:ba:c3:4b:c1:e7:0f:57:4d:8d:87:84:bf:0f:3a:06:46:92: 8b:9c:d4:61:3f:d9:0f:8d:98:c6:12:76:7d:c6:4d:c2:e8:ca: dc:df:17:73 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZZ0+algPOWnr24bG7yrD/9QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MjU1NGE4NTZhNDIyYjA2MWFlNjRjNTc3NjMwZjkxZDQw OGNkNGEwHhcNMjUwNDI3MDIwMDQwWhcNMjUwNDI4MDIwMDQwWjAzMTEwLwYDVQQD Eyg2OWYzNDdlZWU0ODQ0MGY1ZGI2ZGQ2YWE0NWNjY2IzYjM3MTYyNjYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BCy+F3Mu9M1rV9zCJ2RIdoNIkDd AsOxDUrACBkNKXnP14yMJ8wdqXj6vRq0/O/gKj6KDr7dDf7E22MoP5dwdzmIqvQu znVi/Edxgo6uYsYmAQih5eZpdbIHs6ocWda9L7qFqt38b6Ucq1aydEAGEYHLKnuk nfs6OyZ8XiC8JwQVWTWoK046S3dlukLn9wN0gCppSUjyT762y1Q2URycOCBqZyuX vL2NIwSZ22xm84oEIhYKqOAnEkWuOUv7cVNBtrahdcP8xiHs+OniN+1r1m3ejsrv +wsDokjrEj3AL2iaC5ujNK5OZ9dI14knegSMaDrQ4/apOluPtuVtMb4rRwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFGnzR+7khED1223WqkXMyzs3FiZjMB8GA1UdIwQY MBaAFPglVKhWpCKwYa5kxXdjD5HUCM1KMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1DVlVxRmFrSXJCaHJtVEZkMk1Qa2RRSXpVby5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvOTQzN2EyLTA3ZTYtNGU2YS1hYTNm LTk2NWQ2ZDYwM2JmYS8xLzEtQ1ZVcUZha0lyQmhybVRGZDJNUGtkUUl6VW8ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzRmLzk0MzdhMi0wN2U2LTRlNmEtYWEzZi05NjVkNmQ2MDNi ZmEvMS8xLUNWVXFGYWtJckJocm1URmQyTVBrZFFJelVvLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEmbs 35Zx1DJopSmUk2zQJUWWBbENW2VE1nlFfcs9fql/JxFZ2eGinxIoPq+thvmDVWtp VkpJIwNzBGN4w/DJVqIRnJ/cBk+qMc1mttje1pwm0NeLB8b8U63c6YCo3nkvxpHO 5XQjOT8Wr1RDgNwPSiuWnjt1s7X0Bry35iMl26p+dMbwIcLwH8G5X8Vp+liTchcP DdzUfJGX7yZa+OFUYKbeYEGDrzru6yl6odGAjIYBVcKHlCFuY09d8hvXS1ZzMFg9 tR8sNSl9eB4OuRSn9J3vY4QpyAEqirrDS8HnD1dNjYeEvw86BkaSi5zUYT/ZD42Y xhJ2fcZNwujK3N8Xcw== -----END CERTIFICATE-----Generated at Sun Apr 27 12:13:02 2025 by rpki-client