$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft File: 4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft (raw, json) Hash identifier: 44xzB2jp2X2RrzlB4iKpVTg7DU0O0UCIYFU1mlUzBFU= Subject key identifier: 36:1D:E0:59:FB:EA:EB:F4:D7:60:76:87:BB:09:8E:CA:0E:2A:3F:3A Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Certificate serial: 0196835A13898DFF2EA76517158EA06AA3ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft Manifest number: 08DE Signing time: Tue 29 Apr 2025 21:00:40 +0000 Manifest this update: Tue 29 Apr 2025 21:00:40 +0000 Manifest next update: Wed 30 Apr 2025 21:00:40 +0000 Files and hashes: 1: 4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl (hash: gdIX8/ar6s+FWAtt/uiLXHxcdfL/352796GlUGKEz6Q=) 2: 5DnR59g0uDhlCeBnwu0_1-KUFeg.roa (hash: jAnqTMpaItG0GhBN/hjRVmkf1KAEsae1ohPc+vQL06Q=) 3: 8PxMQW8r6gNYx6cR3PMs2yrl5ew.roa (hash: GqHXtanVRqdO2QW4vR+6/WyxTi1dfx0DVX7E+ZRdtvU=) 4: DamwXsWqw-pNiIY7Y9gzUoz46SI.roa (hash: 1+3IDizWDcTViB++VKv1xbkAGlHPeiHczREvYVy1BEk=) 5: Dt-A1UKjqPAgnYkiz5oOF3KPif4.roa (hash: jW2Q0BDw92rsfiM8k0/wQ6GD7kmaBburgq62TnGU9aA=) 6: Kn_2eJGh3EcHDuB-OJ8l3E2w8hE.roa (hash: kQ83aGfbv2Iq481MBuTu7pjTHv3tFZPurvWLoY3PlVA=) 7: LAI14FhpOzU-rcfdJ6U9PG061Ec.roa (hash: avAt1L3mlV+2vo4CiZ8YrFs2RggnJV+Qj20+5tYBmII=) 8: LbrW0uU2svuMgCfEegCflkeiJNI.roa (hash: xicAKV+b+Rrkk93cgla0jRgvKkmUQRZcuO0wo+Vll1I=) 9: NH99_Parr6i87GqyKHm971OOvUA.roa (hash: ejRR3IxtFm+BdQE6JvQ7L16gCRkI9epYBVSx8aKoP8A=) 10: OOSnnzJCzwuc2Oreq9KoON2OJy4.roa (hash: 8ZWXugZrnN7Xp4F6Xn87sRk2TjB10Ze3ouSEvaxFbzM=) 11: Q820-mh3gTLx3r5yd43BKUrxxh8.roa (hash: koyxE8n/nkkyiE6UfVNmxydTa2BJ9VFKJe/4B3gcMPg=) 12: QRvqjOpbm1bsYYXVNYJCdsL2K9c.roa (hash: gbsaPykuhKfA/rXSneeYnuzsVzL0kGuorXD/sYaSjK8=) 13: STuoLQHHZBzK_Ldaz7xkxpSaBqY.roa (hash: ZzI62CUIffeXt6hPl33Fk7eNbx5SV7+e0g7j7C8NgSI=) 14: dPORcLPPy7vGPpK7YO0ZCdg3SLc.roa (hash: M8CeF8WcmPBFysMRz6rWQ9roOEfHfMbz/n6BV0QqyTM=) 15: ea2ONoTt3SySSjctEUa2mvxPlk0.roa (hash: aHDpbhU3poNDj7sgG29oLTuaOz779tw43LjPP8jq2GU=) 16: gPbim5HyI5_coGPfod5GORXHFJM.roa (hash: WqgzuFgOy6ZgR1XpLM/1W9uFliVDMHByx6+nWg3yG7Q=) 17: hV1kQUu8Pdq1hwLjpsPqwMqfj_U.roa (hash: N1eliwWO7Qtxwve5drBayNA7B9DMRJgSbxRNUu9dsfY=) 18: o1MTa_u6ng7YChqgqqMpF_EDHDo.roa (hash: medB94fc43SFhZiIXkS8L2CLIYdmUFnxbXmgm5u0RKM=) 19: pA-Fq_J6A5SNZJF98Uix7eSPlIg.roa (hash: 7lwAf6YG9+AyLk5HAGkoZYURCw6qLQhN2f3/kdNJO0w=) 20: v5F31cV6XBvE5243s4oHQBqQQDM.roa (hash: +2WzyiNTSNMZQ/+SFfQYAFWtFS/6Ce5PKrWiHjJlqng=) 21: xbbY79UbNbRYIgyXeBU4cy_zCmI.roa (hash: c0Ac2LrLggmLnLPt492ZZRPubOLwoYV4rcik5rRDaO0=) 22: zw1raLzJkOzuLdWVP5BWRU84p2o.roa (hash: XIzDwzNdh9cyZCy+DakAR8zEkFIdZM7IKTxs2TBKsWM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Apr 2025 21:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:83:5a:13:89:8d:ff:2e:a7:65:17:15:8e:a0:6a:a3:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Validity Not Before: Apr 29 21:00:40 2025 GMT Not After : Apr 30 21:00:40 2025 GMT Subject: CN=361de059fbeaebf4d7607687bb098eca0e2a3f3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d1:d6:1a:3d:3f:26:ec:ec:1b:2f:94:a3:ed: df:a7:02:bc:19:e3:34:6b:5e:3e:c2:12:08:0f:db: 90:6f:e7:83:48:48:04:be:56:0d:1d:df:ea:dd:81: 16:1f:c7:77:27:53:f7:9b:8a:7e:19:13:97:0c:5a: 96:78:3a:4b:09:71:2e:dc:1b:77:28:e2:42:93:2c: f1:28:e7:f9:ed:f9:8a:17:16:5e:2d:b7:b3:84:42: 30:73:6a:a4:6c:af:b7:c1:33:fe:e4:28:b2:55:16: 1b:09:cc:cf:eb:2e:f9:fc:4a:66:fe:d1:33:26:6d: 17:62:1b:39:3f:7e:19:24:4b:1f:d6:c5:fb:e8:c5: a9:87:13:e6:18:13:11:f9:02:41:7e:b1:c1:6e:64: 67:7a:87:66:bd:1d:6b:c7:56:54:88:f8:45:b2:59: 0f:fc:57:d8:ed:1b:a3:17:03:96:4b:f0:ec:38:54: 7b:6f:64:c8:8a:e5:11:75:01:b1:ef:cd:de:85:9e: b0:9b:20:27:c3:bd:0f:0b:1d:c6:c7:ac:86:80:cb: 98:4a:85:8a:99:bc:90:65:65:24:1d:c0:3f:15:a5: 4e:e2:80:02:3d:77:2a:ed:68:e9:0b:ee:82:37:69: ae:43:56:9d:b4:2c:6e:41:60:97:88:3e:13:8b:da: 58:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:1D:E0:59:FB:EA:EB:F4:D7:60:76:87:BB:09:8E:CA:0E:2A:3F:3A X509v3 Authority Key Identifier: keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:1a:76:18:f2:ec:a5:0e:1c:e5:6b:86:42:6f:01:15:75:4c: b0:2e:8f:a7:3f:fd:50:b2:e0:76:cc:24:10:91:97:4c:1d:99: 07:b5:57:a5:18:b8:88:bc:f5:d9:7a:3a:f3:6f:e8:01:4f:c2: b5:13:a2:9c:02:7a:40:41:ed:b1:7c:c1:0f:6a:5a:bf:47:6c: 26:a8:4f:05:61:08:0d:97:27:a5:b1:51:ad:ca:9c:b6:77:64: 5c:2a:1f:b0:97:cd:79:c7:06:3d:cc:d5:51:98:c8:e4:8a:20: c2:e2:3f:f8:d0:5c:c8:9f:5a:68:8d:dd:28:04:85:e9:35:85: 13:56:35:a1:d5:c2:94:e8:86:c3:3d:e4:c5:5b:30:5e:5e:89: a5:5d:c3:cb:3d:e4:d3:84:25:ce:87:17:04:76:42:54:9b:02: 88:df:44:e1:ab:22:46:bd:1e:f4:2c:18:25:ce:bb:43:4e:11: ae:ce:9f:08:03:cb:9c:fd:df:25:08:2d:e7:4a:8c:10:55:6a: 31:01:00:9d:98:b6:9e:b5:6f:47:fc:70:f4:19:f7:a2:58:ee: e7:04:02:28:22:77:5a:9f:3a:ac:2f:1c:7f:10:a9:b7:ee:d8: cc:b8:ee:f6:e0:0b:d0:c2:1c:2f:06:55:a0:93:d4:7c:90:c0: b0:d6:85:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZaDWhOJjf8up2UXFY6gaqPtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDViYjQwMTE4MGU1NWY1YzE2NWQ0NzkwOGRmZjRmZTI5 YTBkODYwHhcNMjUwNDI5MjEwMDQwWhcNMjUwNDMwMjEwMDQwWjAzMTEwLwYDVQQD EygzNjFkZTA1OWZiZWFlYmY0ZDc2MDc2ODdiYjA5OGVjYTBlMmEzZjNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9HWGj0/JuzsGy+Uo+3fpwK8GeM0 a14+whIID9uQb+eDSEgEvlYNHd/q3YEWH8d3J1P3m4p+GROXDFqWeDpLCXEu3Bt3 KOJCkyzxKOf57fmKFxZeLbezhEIwc2qkbK+3wTP+5CiyVRYbCczP6y75/Epm/tEz Jm0XYhs5P34ZJEsf1sX76MWphxPmGBMR+QJBfrHBbmRneodmvR1rx1ZUiPhFslkP /FfY7RujFwOWS/DsOFR7b2TIiuURdQGx783ehZ6wmyAnw70PCx3Gx6yGgMuYSoWK mbyQZWUkHcA/FaVO4oACPXcq7WjpC+6CN2muQ1adtCxuQWCXiD4Ti9pYcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDYd4Fn76uv012B2h7sJjsoOKj86MB8GA1UdIwQY MBaAFOLVu0ARgOVfXBZdR5CN/0/img2GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEt NDIxZTZiYzdlMmU4LzEvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEtNDIxZTZiYzdlMmU4 LzEvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGRp2GPLs pQ4c5WuGQm8BFXVMsC6Ppz/9ULLgdswkEJGXTB2ZB7VXpRi4iLz12Xo682/oAU/C tROinAJ6QEHtsXzBD2pav0dsJqhPBWEIDZcnpbFRrcqctndkXCofsJfNeccGPczV UZjI5IogwuI/+NBcyJ9aaI3dKASF6TWFE1Y1odXClOiGwz3kxVswXl6JpV3Dyz3k 04QlzocXBHZCVJsCiN9E4asiRr0e9CwYJc67Q04Rrs6fCAPLnP3fJQgt50qMEFVq MQEAnZi2nrVvR/xw9Bn3olju5wQCKCJ3Wp86rC8cfxCpt+7YzLju9uAL0MIcLwZV oJPUfJDAsNaFQA== -----END CERTIFICATE-----Generated at Wed Apr 30 06:52:27 2025 by rpki-client