$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft File: 1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft (raw, json) Hash identifier: A+wL5ul3dhL4lNjBnT0J60WTMJ7t1ibgi0ssLI5POQQ= Subject key identifier: 76:44:62:3D:FE:C7:7C:DF:0F:EF:79:15:DC:B8:ED:D0:D8:D4:C6:E0 Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C Certificate issuer: /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c Certificate serial: 019671F880F7E89037ABA1273C0F270F21F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft Manifest number: 1524 Signing time: Sat 26 Apr 2025 12:00:33 +0000 Manifest this update: Sat 26 Apr 2025 12:00:33 +0000 Manifest next update: Sun 27 Apr 2025 12:00:33 +0000 Files and hashes: 1: 0OeAqS6vX3gO6vvCqqj93y9hg-0.roa (hash: 4e6GVSZZmDnDLgJOl3djtnEbqT5lDhaJq4dAZ/qU/lk=) 2: 1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl (hash: GmQDTQEAAxS5uKiS1ivizNkr4zE7Pf+r0L8YW8xwlCo=) 3: D6tj7JT1P0jiEOVSthEhCTE5wmk.roa (hash: uOBUARGoP6eXuPcaSTgozIdLNVRwgpXpaylajpzEpjY=) 4: IHhv8_mZDx6A2j-F31Pdu0k8CrY.roa (hash: STtIVy8Sw+YzG++4aOUBuN18lGWUI/cMQ7xzdEE/ceE=) 5: LrhxRNeyx_23QLWa5vtG1ZBXoY0.roa (hash: /kvdZiHdgr3LrYazf+YoZJL5PqLcDvAeE/KjO0/IEmY=) 6: NBa1UmmcofJztBL8pTAUTjZFH0k.roa (hash: 86hIGHbzSCBjbpNQmq5AwTHYQV5MFxXejgndiQ6r1LA=) 7: VO1QZo2vfxheLbeFL1rejYxNYBI.roa (hash: FCnZcb/OtfouViKRapPfAgcT5IF02/4Osl8N+1EzEnE=) 8: Wc2-UHBTfF-XHLzgQS0SwCmvlB0.roa (hash: 7aSWc04NFLdsEACjlaycXN0TGgVCRx18P8RZa+kCQIU=) 9: cUk9gF1NAvXhh8uQPdgOvohfLq4.roa (hash: kUG38NhhNKk78iTPsGRqnyUiXKkoTEwb6ImAUIs7EvU=) 10: eXcQTJbrXozTeKAzDqeuNqeJXS8.roa (hash: BgZU2yDI43+qdgAmRyguF06tz72w3j3d1e5R8Nv35Sw=) 11: h_wKw8soWFxgRuHS6A95s-ovjqU.roa (hash: c4ZYt7Tyz12qMO6YCVjf1T39qDV6z2Th7V8r47Jgtdg=) 12: m1zGjpaqVIfs0FT9TFYnVV0Yqug.roa (hash: 2qoTzI6foljMw6Ah++0pgV/FdR6MO3DvTBVmA5i5Ook=) 13: pVMgUdSHj0nlaCG6yBmxCGoOV48.roa (hash: iYu6/b1RnNkG7/TqQe3ysX2HEttIbsgucDRlivFMstY=) 14: udVjWjtCw8-mpprcmzafPsXqAEg.roa (hash: 4jYyql/ul3ChaZUGCo2qkL0DtI4tuS2kYKNXsqMrYh4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 11:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:71:f8:80:f7:e8:90:37:ab:a1:27:3c:0f:27:0f:21:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c Validity Not Before: Apr 26 12:00:33 2025 GMT Not After : Apr 27 12:00:33 2025 GMT Subject: CN=7644623dfec77cdf0fef7915dcb8edd0d8d4c6e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:06:3f:4b:e9:66:d6:3b:2a:8e:1f:dd:72:41: c7:8d:74:e6:62:68:d5:5b:22:47:2e:d0:05:93:84: dd:1a:6f:79:32:21:ce:c4:f7:00:4c:58:01:37:5d: 21:bb:99:5c:44:6f:09:e4:85:28:83:5f:bb:ac:cb: 71:24:9f:e5:18:2c:2b:44:04:e0:e2:b9:3e:aa:cb: 65:2e:3b:b1:59:6b:fc:f3:f4:37:2c:12:9f:9a:11: ca:0d:89:cf:11:90:50:b1:5e:86:7b:e8:1b:53:d9: 61:8d:b8:09:69:74:69:2b:d5:56:ff:5f:49:f1:a1: 26:7b:14:a0:2f:dd:4d:ac:1c:63:30:13:fc:d3:7d: ac:90:fd:2f:96:e2:bc:9a:0d:85:3f:1d:d6:99:6f: 68:61:25:76:e6:fd:55:c6:8d:9d:67:bc:dd:ae:a9: 6b:ed:66:fd:62:68:98:02:4c:ca:36:71:7d:57:4f: e7:19:02:d9:92:46:7b:20:77:66:a4:61:1e:2d:36: 68:af:0d:87:94:9e:f9:d4:32:84:ea:b9:6f:3e:1c: 29:9f:99:84:69:19:20:d8:23:4d:c8:b5:98:dd:86: 3b:9b:fa:f2:f6:51:35:06:90:14:09:0f:9b:a6:e6: 78:3f:33:67:6e:ef:79:23:e0:56:00:a7:7e:a4:a4: db:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:44:62:3D:FE:C7:7C:DF:0F:EF:79:15:DC:B8:ED:D0:D8:D4:C6:E0 X509v3 Authority Key Identifier: keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:60:45:0a:26:dc:2d:d6:10:d3:50:35:41:98:0f:c3:b3:84: 65:8d:16:01:15:64:ff:e5:b7:4d:f7:1e:a0:63:3b:4c:2a:f6: 81:09:7d:c8:b3:40:28:a5:91:85:b6:52:8b:8a:69:5b:d9:b7: 8a:9f:28:4f:78:b3:53:d4:c6:64:41:21:24:01:a1:79:10:52: da:bc:51:c2:e9:b7:98:04:f9:19:9e:53:ca:98:2d:ad:00:59: 7d:a9:42:88:95:dd:c6:49:86:48:8f:5f:42:2a:d7:cf:20:3b: b2:be:b2:8b:a7:f1:83:6a:1c:3f:47:79:21:cf:83:42:ae:a1: 00:42:a3:f2:e2:ee:03:bd:b4:50:d6:7b:fd:e7:73:99:39:7e: b9:37:00:67:3d:d1:77:6b:b4:5a:02:4c:4f:18:94:b2:0f:a0: cc:a9:f4:94:d8:8d:bc:f5:42:20:a7:06:78:01:d0:69:40:65: 3e:ef:4e:8b:d5:71:9c:b6:1c:fc:97:31:d4:2c:0f:66:a1:e8: 28:33:0f:54:34:49:8e:0a:9b:3e:ed:f1:99:da:62:a4:da:da: 58:c2:0d:e6:cf:07:7e:97:1b:04:d7:47:e6:39:bc:7c:6e:e6: 18:a9:43:0a:15:7b:75:00:01:f6:e6:29:96:2f:58:34:5d:ab: 84:e5:3a:31 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZZx+ID36JA3q6EnPA8nDyH0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhY2NiYjcyYWE5ODg0YTViZjhkMGU3NTc0MDRhMTdlNWUy MzMyMmMwHhcNMjUwNDI2MTIwMDMzWhcNMjUwNDI3MTIwMDMzWjAzMTEwLwYDVQQD Eyg3NjQ0NjIzZGZlYzc3Y2RmMGZlZjc5MTVkY2I4ZWRkMGQ4ZDRjNmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAY/S+lm1jsqjh/dckHHjXTmYmjV WyJHLtAFk4TdGm95MiHOxPcATFgBN10hu5lcRG8J5IUog1+7rMtxJJ/lGCwrRATg 4rk+qstlLjuxWWv88/Q3LBKfmhHKDYnPEZBQsV6Ge+gbU9lhjbgJaXRpK9VW/19J 8aEmexSgL91NrBxjMBP8032skP0vluK8mg2FPx3WmW9oYSV25v1Vxo2dZ7zdrqlr 7Wb9YmiYAkzKNnF9V0/nGQLZkkZ7IHdmpGEeLTZorw2HlJ751DKE6rlvPhwpn5mE aRkg2CNNyLWY3YY7m/ry9lE1BpAUCQ+bpuZ4PzNnbu95I+BWAKd+pKTbAQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFHZEYj3+x3zfD+95Fdy47dDY1MbgMB8GA1UdIwQY MBaAFPrMu3KqmISlv40OdXQEoX5eIzIsMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1zeTdjcXFZaEtXX2pRNTFkQVNoZmw0ak1pdy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTMvZThjYjQ0LWE5NTQtNDY3Mi1iOWE0 LWE0OWU1YzY2MzNiZC8xLzEtc3k3Y3FxWWhLV19qUTUxZEFTaGZsNGpNaXcubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzUzL2U4Y2I0NC1hOTU0LTQ2NzItYjlhNC1hNDllNWM2NjMz YmQvMS8xLXN5N2NxcVloS1dfalE1MWRBU2hmbDRqTWl3LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAimBF CibcLdYQ01A1QZgPw7OEZY0WARVk/+W3TfceoGM7TCr2gQl9yLNAKKWRhbZSi4pp W9m3ip8oT3izU9TGZEEhJAGheRBS2rxRwum3mAT5GZ5TypgtrQBZfalCiJXdxkmG SI9fQirXzyA7sr6yi6fxg2ocP0d5Ic+DQq6hAEKj8uLuA720UNZ7/edzmTl+uTcA Zz3Rd2u0WgJMTxiUsg+gzKn0lNiNvPVCIKcGeAHQaUBlPu9Oi9VxnLYc/Jcx1CwP ZqHoKDMPVDRJjgqbPu3xmdpipNraWMIN5s8HfpcbBNdH5jm8fG7mGKlDChV7dQAB 9uYpli9YNF2rhOU6MQ== -----END CERTIFICATE-----Generated at Sat Apr 26 19:27:57 2025 by rpki-client