$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft File: zMR43ZzNYWL4JIisb8UMIdNp8qA.mft (raw, json) Hash identifier: Zj1lYhl6bcEZaIlwCPEQrn4LF6fmnawvjw6vBmwm3TM= Subject key identifier: DC:58:95:92:18:9D:B1:0D:7B:1D:A1:3C:45:F5:91:BB:71:B5:55:13 Authority key identifier: CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0 Certificate issuer: /CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0 Certificate serial: 0196748C241E86D8F0DB91F5B21014409F58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft Manifest number: 1518 Signing time: Sun 27 Apr 2025 00:01:03 +0000 Manifest this update: Sun 27 Apr 2025 00:01:03 +0000 Manifest next update: Mon 28 Apr 2025 00:01:03 +0000 Files and hashes: 1: 6ve9ZdOx9-Jbfmi44W3M8-3fyYA.roa (hash: dVVun+kF/7beMen84cbPjTHH6kjQfKs3AUC1Xd2wQ2A=) 2: J2wVE-ysPom5E_5lF4tJldYNa-0.roa (hash: oUIFr0+ZyYlkYGUaUpe52i+2V6CsiaUkgkNDD+7+LeQ=) 3: UKCOK-W3ox3wQ-_xQp6Nu_DwCz4.roa (hash: gPrsrWnRzFL4kuQaY4M1gIUFgKd8cdPjv6qajYb7JnQ=) 4: YwzWinKJc46_U8FICjJOYyamFbE.roa (hash: 6RpEEVsTkHPSo1dAN1+8+s2LqtjPnGEmS34LuQumwbI=) 5: a5CofPxS02DnAUUS9BR-MfOlQu4.roa (hash: LylucOp1UfCFOp+5ipOtc4LcLveZAw9S3wnaBKPFnAA=) 6: aTxnMurrHnoJZlgUyPTNHT4Ir8Q.roa (hash: HeEFk1qtIJz6ps6s2w4DpyvOfJGSvhT8ioiircXVR2o=) 7: c_P4sr3Opke1mWU78BvJMlMDps8.roa (hash: epdNIDM+10/qxHg1G8njFcHs1LoWUpUQmmausYhNxGY=) 8: iI8DgizVWpbEfLLZJw23cwOMtao.roa (hash: gWEZpZ6NinOCicsU6XwwO/9pb7/TViv+n+2ETM0yooY=) 9: p1mSMR7xN9m1jztS6WxG27UANcc.roa (hash: 4Bmm+a1YgG6FugC5k/i8MnSCpfdQHkbijQGY6Yl+j+g=) 10: sYAfD4BV-6irRlKQSwMoXHjm0Mc.roa (hash: T1/WiR0D/YUKPRxlOtYq/pfY4c0SddtxyI4tXYaUGdg=) 11: wZigKiFSFg2jf4ybn-aNCM9AUoc.roa (hash: 7ZXKjf9bxY5hwxObMzg74iYfXa92Z7QeLKS7Y869myY=) 12: xuKZJebXbxs55nxOb7ZrfE7zGKE.roa (hash: Jt/lG0DwTTw8LOe3o8IYDXO60+0YpLwITYi+cEFQ4h0=) 13: zMR43ZzNYWL4JIisb8UMIdNp8qA.crl (hash: ELXUtsg8n9vX/K690P6JbUlT9RV02d6/TrsUjTROb6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:74:8c:24:1e:86:d8:f0:db:91:f5:b2:10:14:40:9f:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0 Validity Not Before: Apr 27 00:01:03 2025 GMT Not After : Apr 28 00:01:03 2025 GMT Subject: CN=dc589592189db10d7b1da13c45f591bb71b55513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e0:85:a0:b4:2d:bf:9e:9c:2f:13:9d:bc:ad: 19:01:89:7e:a7:99:8f:ef:ec:1c:4f:57:b3:1f:d3: af:dd:3e:c8:8b:61:27:10:56:00:60:fa:97:4d:4d: a7:50:bd:5a:38:8a:fb:fb:29:8a:50:c4:a3:aa:42: 7c:57:7a:3a:60:49:6f:45:83:14:9a:40:62:8d:24: 11:84:5c:3b:3c:4f:0a:42:0d:6d:20:13:4a:24:76: 9b:a8:cd:79:39:a0:35:8e:c7:fc:8a:46:3f:0b:35: d1:c1:6a:11:c0:e1:96:f3:cf:ab:9d:12:2e:2f:7a: 75:91:6b:d3:f2:73:22:11:63:54:b9:45:c7:51:88: ad:5c:b4:86:4c:75:9d:94:54:a5:10:58:7c:81:07: 05:4a:94:d1:5c:5e:e6:a5:67:5a:ff:18:f9:a5:ad: 21:e1:0d:fe:26:8f:7f:bc:2c:11:9d:89:c7:b3:df: e8:ef:6b:80:3c:3b:bd:1c:03:9e:3e:02:48:3f:a8: f7:95:18:90:de:aa:5e:d3:e9:3c:bf:a8:cb:a9:8d: a4:4d:b6:ba:15:2c:53:0b:f7:c9:25:d3:78:c0:a1: 3a:4d:1e:c2:4f:fa:de:7f:5e:af:e5:fc:70:72:98: 2a:05:3f:23:de:82:7a:ea:02:29:16:7d:98:7d:45: 5d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:58:95:92:18:9D:B1:0D:7B:1D:A1:3C:45:F5:91:BB:71:B5:55:13 X509v3 Authority Key Identifier: keyid:CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:51:0b:1a:4b:d2:98:80:e1:c7:ab:6e:8e:a0:3f:60:f3:b9: 77:f2:21:9c:43:b2:a6:18:ee:54:23:a8:18:a4:a2:4f:8b:5f: 78:fe:40:b6:2c:a6:c4:c5:94:93:23:9d:06:33:8d:bf:22:20: f3:73:a3:42:fb:7b:01:31:4f:36:92:32:4e:58:12:09:3d:78: e3:b6:b7:70:e5:1e:d7:a2:97:c3:30:62:38:89:30:9f:76:b0: ef:7d:8c:94:48:61:ab:3f:cc:2b:e1:a5:14:19:3d:89:f8:e6: 98:2f:ec:04:ff:ac:13:a6:fb:72:68:88:a4:4f:85:54:97:5b: e2:5f:e7:ae:e9:80:35:03:c2:d8:81:35:0d:15:c8:59:68:a1: 33:8a:5c:82:39:09:94:91:26:71:33:2a:3b:c1:a2:b7:fc:6a: 02:27:44:93:e8:31:fb:24:1d:c5:33:e5:89:23:f8:67:aa:5c: ec:16:e6:c6:8e:4b:40:27:74:fb:13:d3:d1:49:16:2f:06:2a: 18:d7:6b:95:0d:e4:a4:00:a0:05:3a:e7:93:ca:68:58:60:43: ab:f9:8b:83:76:3a:fc:40:ec:36:9d:25:c7:3a:15:16:d3:1a: 02:bc:d9:c4:35:12:82:75:f2:bf:3a:c6:d3:d8:2d:cd:be:86: d1:e0:4e:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ0jCQehtjw25H1shAUQJ9YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjYzQ3OGRkOWNjZDYxNjJmODI0ODhhYzZmYzUwYzIxZDM2 OWYyYTAwHhcNMjUwNDI3MDAwMTAzWhcNMjUwNDI4MDAwMTAzWjAzMTEwLwYDVQQD EyhkYzU4OTU5MjE4OWRiMTBkN2IxZGExM2M0NWY1OTFiYjcxYjU1NTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeCFoLQtv56cLxOdvK0ZAYl+p5mP 7+wcT1ezH9Ov3T7Ii2EnEFYAYPqXTU2nUL1aOIr7+ymKUMSjqkJ8V3o6YElvRYMU mkBijSQRhFw7PE8KQg1tIBNKJHabqM15OaA1jsf8ikY/CzXRwWoRwOGW88+rnRIu L3p1kWvT8nMiEWNUuUXHUYitXLSGTHWdlFSlEFh8gQcFSpTRXF7mpWda/xj5pa0h 4Q3+Jo9/vCwRnYnHs9/o72uAPDu9HAOePgJIP6j3lRiQ3qpe0+k8v6jLqY2kTba6 FSxTC/fJJdN4wKE6TR7CT/ref16v5fxwcpgqBT8j3oJ66gIpFn2YfUVdaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNxYlZIYnbENex2hPEX1kbtxtVUTMB8GA1UdIwQY MBaAFMzEeN2czWFi+CSIrG/FDCHTafKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUt NDI4NTk5ODM5MmQzLzEvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUtNDI4NTk5ODM5MmQz LzEvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACFELGkvS mIDhx6tujqA/YPO5d/IhnEOyphjuVCOoGKSiT4tfeP5AtiymxMWUkyOdBjONvyIg 83OjQvt7ATFPNpIyTlgSCT1447a3cOUe16KXwzBiOIkwn3aw732MlEhhqz/MK+Gl FBk9ifjmmC/sBP+sE6b7cmiIpE+FVJdb4l/nrumANQPC2IE1DRXIWWihM4pcgjkJ lJEmcTMqO8Git/xqAidEk+gx+yQdxTPliSP4Z6pc7Bbmxo5LQCd0+xPT0UkWLwYq GNdrlQ3kpACgBTrnk8poWGBDq/mLg3Y6/EDsNp0lxzoVFtMaArzZxDUSgnXyvzrG 09gtzb6G0eBOTA== -----END CERTIFICATE-----Generated at Sun Apr 27 04:26:26 2025 by rpki-client