$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft File: 3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft (raw, json) Hash identifier: qwpN6CUNPOorPXbBDfMZtOiPR/vxOHYfBGvwkHA18pU= Subject key identifier: 28:D6:A1:41:2F:03:D8:DB:B6:63:3D:15:3E:AB:3B:CC:F7:1E:C3:57 Authority key identifier: DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20 Certificate issuer: /CN=dc5c532f3cd5e11e19feb19655d4f19926f02020 Certificate serial: 0196789F334AC0D74D7A3C1805983463A76E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft Manifest number: 033B Signing time: Sun 27 Apr 2025 19:00:21 +0000 Manifest this update: Sun 27 Apr 2025 19:00:21 +0000 Manifest next update: Mon 28 Apr 2025 19:00:21 +0000 Files and hashes: 1: 1-WZZnjR8DlZqLUibcRUcYzm0QDU.roa (hash: /lrkBjM9dGMr6D7JGPVc5syjsFBtCzanEGLfhb4dKM0=) 2: 3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl (hash: PtOHOzD4JIaQ1LNrQETaz6VZX9h+bB3eTZe+ijHkeoE=) 3: 3jZyUpaNiuxwzYQ21tChGVq7yOY.roa (hash: rlRJ/UNIhVQKGyw4Wr/cDFs+VO81jRk6SUephZD3g4o=) 4: 5khyx2A9d0Q0e3huYGosj5KCOlo.roa (hash: m/iIxHfeWDlWWpGAIqzgFb7iOcTekZb0i9Y2aBX+dy4=) 5: 7cUCY2EysYK09Y_F1tsMsp_B8MU.roa (hash: el4sZWuoJZOOcj14KO5Yq16IPPIz+c0KckgEteIx4YM=) 6: ILbeank0F3xhLsgBl0NZfpBZFig.roa (hash: 8RlSwtQK5lhGbhOtyX4cacpgfYuG3exGirW2aa5+FLI=) 7: KBQWtgPCMeq_IbONzoF64FnlzwE.roa (hash: EZ3seNeYjAQFpAfGwhXlV+Wya2vQO7lfYcVB84EkqA4=) 8: PBiom43THD1F1SBGVmDFN9WwnMo.roa (hash: EVRLL8Mxobz8XRwc26H2JAHWkuwMiYakvll8d/79CJQ=) 9: TnqWiZSrJP5FZLgDlXk-iaFi5k8.roa (hash: 8gjKeaSL9Im1mKl/CKczQDSLzI2OEBo3YD5qQoY5RT0=) 10: VXGu7cRy3TUPyfgbIf2vopAF1Lc.roa (hash: 40vRMPsPFPCFnDUP/ikEgH9v+gi1iVOQkLoxtLSkOqE=) 11: ZaSQVTZm2f4ebc71HIkhrpqqsuk.roa (hash: X8/L0T6q0bM6s++7u2MQIu4RlHWQNdJcKAvE7bH3VP4=) 12: jldP_NkgEKrLmFaYQtB6TuhGzRs.roa (hash: Cz3xmiLxKccg4wAv608JqhvYxIHIutFBcyhT8Ond0Zs=) 13: oQk2rT9-TmTMiTawX34MBI0QTrc.roa (hash: 6J7fvMBzz5wnq8Q655iOLvmHY5jKT0LznvTL3IrQ8Xw=) 14: unsmmkYBpbXrCubGO7XS6N7I7QM.roa (hash: /TaQOoUPP+hWic0pvVLJBHflkZLzIc8T4AFkDEL7yKk=) 15: w9Z-5nLehvUlBeOI2h5dSoEBLSw.roa (hash: dyC69X2s5yoLrmCLq7pBQHExLj0vbp1A/uwW5wlqEug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 16:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:78:9f:33:4a:c0:d7:4d:7a:3c:18:05:98:34:63:a7:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc5c532f3cd5e11e19feb19655d4f19926f02020 Validity Not Before: Apr 27 19:00:21 2025 GMT Not After : Apr 28 19:00:21 2025 GMT Subject: CN=28d6a1412f03d8dbb6633d153eab3bccf71ec357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:9f:0c:41:48:bb:d6:eb:3a:61:f0:e0:f9:38: ae:f0:7f:ca:24:4c:4c:56:a1:73:6a:a3:5e:9a:7e: 37:d3:47:d4:60:e3:bf:e3:42:04:f7:73:0a:03:37: f0:1c:b2:ad:87:ff:97:8a:87:6e:3a:e7:6b:24:ca: 47:99:32:3e:ed:ad:84:b4:4f:ff:60:78:54:33:5f: 2b:09:af:60:69:2e:13:79:a2:f1:8b:c5:c6:73:41: 24:ea:59:b9:01:d5:0b:41:28:0b:e6:04:44:54:3d: 8e:dc:6a:77:fa:d2:24:97:d0:d3:90:1a:63:8a:0a: dd:f7:81:ab:23:91:7d:c2:4c:78:53:4e:1e:dd:63: 75:23:63:76:57:86:3f:0d:35:1e:12:0b:c3:a6:20: 7c:81:48:aa:1a:e5:e3:70:c4:ba:3c:86:1b:54:b9: da:2a:2e:51:37:65:ba:ae:3b:24:42:a9:b1:d7:f1: d7:f4:2a:f9:85:1d:0b:dc:d2:e1:a5:15:9a:e4:cd: af:9b:81:54:3b:f6:50:de:a9:71:39:ec:f7:c8:74: dd:c6:74:64:eb:b1:3b:09:3f:af:6e:d3:70:10:b2: c6:16:71:f7:fe:77:df:1c:e5:89:50:09:c0:4a:d0: 4a:c2:33:34:29:c3:af:2f:69:74:e4:fb:e3:25:00: fa:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:D6:A1:41:2F:03:D8:DB:B6:63:3D:15:3E:AB:3B:CC:F7:1E:C3:57 X509v3 Authority Key Identifier: keyid:DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:87:e0:73:80:b6:11:a9:b0:50:95:b8:60:fc:a0:ae:20:46: 85:63:34:06:36:87:dd:ec:e3:71:78:32:21:98:19:c0:c8:50: 54:94:75:73:08:8e:12:60:92:3a:04:b9:bb:35:99:75:43:3a: eb:9c:3b:d6:28:a9:d8:a4:97:e8:91:31:52:37:13:95:9b:d9: a7:d5:c3:2d:1e:7a:cf:3f:d3:a4:83:4d:66:21:7a:b2:88:d0: 8c:3d:cc:c2:69:f2:ba:ad:d2:4c:e1:d5:75:5c:e8:62:6c:11: b0:81:09:01:f1:5d:8a:e6:d8:05:8a:a0:fd:23:9a:09:7a:d4: e4:11:83:17:31:4d:7a:55:77:13:50:c5:52:56:3e:bd:2e:20: 39:42:19:e1:67:7e:01:52:94:44:4b:55:a5:d4:5a:77:a9:38: b0:e0:c0:21:92:e8:95:ca:05:2b:db:83:62:00:f7:e7:0b:97: 10:20:2d:7a:d0:99:04:cf:e7:35:e6:a8:6b:39:50:20:90:7c: 47:ed:92:9e:5f:65:ea:1b:3e:13:d2:06:ad:fd:47:26:a2:24: db:22:b4:fc:a9:da:4d:a2:0b:ba:9f:e6:d2:06:95:d8:cd:fd: 19:48:d4:3b:35:76:a3:d4:6f:18:02:5e:53:05:b7:1c:38:ba: a3:9d:80:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ4nzNKwNdNejwYBZg0Y6duMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNWM1MzJmM2NkNWUxMWUxOWZlYjE5NjU1ZDRmMTk5MjZm MDIwMjAwHhcNMjUwNDI3MTkwMDIxWhcNMjUwNDI4MTkwMDIxWjAzMTEwLwYDVQQD EygyOGQ2YTE0MTJmMDNkOGRiYjY2MzNkMTUzZWFiM2JjY2Y3MWVjMzU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZ8MQUi71us6YfDg+Tiu8H/KJExM VqFzaqNemn4300fUYOO/40IE93MKAzfwHLKth/+XioduOudrJMpHmTI+7a2EtE// YHhUM18rCa9gaS4TeaLxi8XGc0Ek6lm5AdULQSgL5gREVD2O3Gp3+tIkl9DTkBpj igrd94GrI5F9wkx4U04e3WN1I2N2V4Y/DTUeEgvDpiB8gUiqGuXjcMS6PIYbVLna Ki5RN2W6rjskQqmx1/HX9Cr5hR0L3NLhpRWa5M2vm4FUO/ZQ3qlxOez3yHTdxnRk 67E7CT+vbtNwELLGFnH3/nffHOWJUAnAStBKwjM0KcOvL2l05PvjJQD6/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCjWoUEvA9jbtmM9FT6rO8z3HsNXMB8GA1UdIwQY MBaAFNxcUy881eEeGf6xllXU8Zkm8CAgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEt NGI2YzFjZjlmZTRmLzEvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEtNGI2YzFjZjlmZTRm LzEvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZYfgc4C2 EamwUJW4YPygriBGhWM0BjaH3ezjcXgyIZgZwMhQVJR1cwiOEmCSOgS5uzWZdUM6 65w71iip2KSX6JExUjcTlZvZp9XDLR56zz/TpINNZiF6sojQjD3Mwmnyuq3STOHV dVzoYmwRsIEJAfFdiubYBYqg/SOaCXrU5BGDFzFNelV3E1DFUlY+vS4gOUIZ4Wd+ AVKUREtVpdRad6k4sODAIZLolcoFK9uDYgD35wuXECAtetCZBM/nNeaoazlQIJB8 R+2Snl9l6hs+E9IGrf1HJqIk2yK0/KnaTaILup/m0gaV2M39GUjUOzV2o9RvGAJe UwW3HDi6o52Ajg== -----END CERTIFICATE-----Generated at Mon Apr 28 01:05:18 2025 by rpki-client