$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft File: _2mO6y5J_LX5xlqZhXrynOBmQdk.mft (raw, json) Hash identifier: STOsowSzkBQI+S6ES7dCFWnkLKH57NSH8Z+M4UNf8Io= Subject key identifier: EC:B4:35:A0:F9:AE:93:F7:28:51:8C:76:3E:C6:A2:5A:E6:A6:5E:9A Authority key identifier: FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9 Certificate issuer: /CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9 Certificate serial: 019679442509975ECD740BF9173A4ABFD672 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft Manifest number: 151B Signing time: Sun 27 Apr 2025 22:00:31 +0000 Manifest this update: Sun 27 Apr 2025 22:00:31 +0000 Manifest next update: Mon 28 Apr 2025 22:00:31 +0000 Files and hashes: 1: 0nspkNZBD4AF3c6BuZHawbNEn4s.roa (hash: uIJdsMvT5D3zL8bAjl80cE2Pwz5BnxnpyFyZ11QSq50=) 2: 54-UEvGfxV4WPcy4WxLxIFxxE-U.roa (hash: ojna0RnGjI7OjDPWs+roB1Amf6WKyl5pMZi5IPEPWP8=) 3: 5Tf-mqxbzy7qofAM2dNl7l1t3mU.roa (hash: 6mVr252OaOJiHsmGk/+j0aXnhIUGcpjMKQ+02iLXgcA=) 4: HIpztZT__B_f9n2gN6auamR5pIU.roa (hash: rJY52okWB1TeezbKU/iuTbv7tjIWb1W5p6bbeWIcdzo=) 5: LuyH1oX8EXWypVZ7iAaDpvRYVVc.roa (hash: PwqXxZGK4PUOy9TXRGdRnGJ0Q9f2SZmolPNVfAk0WgM=) 6: NkdsfBqVz48X5H2Y1WQJSu8vlt4.roa (hash: tuiwHFcQQ4SB/tCeR0sJ8nBN9XREzDRoO1cXDj6kEqo=) 7: UjPxDMGW7lYqCuTCh7JHOA6hizY.roa (hash: ANkRdXMj6bkHEGkvb/XWLCpMoxX6nYg0dbetuBTbz8U=) 8: VYdiSMUQLdDbmv2P361VJTQ4iNw.roa (hash: aDG5V9Cf1wVZyIYvSKFbOdVZC2nfBzKtFvetSMNMeeM=) 9: _2mO6y5J_LX5xlqZhXrynOBmQdk.crl (hash: /nLgvTG5dVs9O7mNUD6uFCKoYbS3dVakJjfdtAbq6Bs=) 10: jqfbqOe3Dnj2fXOhZ9LOHypCFAI.roa (hash: /x0Hcf4qFuhf8+J5QzDuB3C52+I2nDMc1dbR/JkR1Cw=) 11: meQ5SBMnqJBkFHe-JOcEGhCsKFY.roa (hash: TMc5toGudrJJLzHO6dJLOGc8MvIeTEaZ3Nzvom9Ftsw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 22:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:79:44:25:09:97:5e:cd:74:0b:f9:17:3a:4a:bf:d6:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9 Validity Not Before: Apr 27 22:00:31 2025 GMT Not After : Apr 28 22:00:31 2025 GMT Subject: CN=ecb435a0f9ae93f728518c763ec6a25ae6a65e9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4f:02:ee:72:86:90:dc:c2:cb:15:3d:8f:c3: a4:e5:c6:2d:97:0d:aa:15:e1:c7:c5:71:55:ba:ab: 6f:f1:47:96:16:de:f6:42:01:9c:99:43:13:6d:67: 70:56:9b:6a:25:a0:b1:de:c7:df:d2:f1:8e:8a:df: d5:bf:cf:c4:28:b2:e2:c1:00:b5:ee:80:a2:08:cd: 0a:9d:e5:e7:a0:93:f3:82:dc:48:da:0c:bc:5c:ec: b5:b5:08:38:73:47:5f:cb:fc:6f:94:76:03:ca:ea: ab:fc:b1:15:11:1b:9f:32:2a:36:f9:82:9a:94:d8: c3:73:49:98:f0:72:9a:73:b0:c4:16:1c:af:91:79: 48:0d:48:44:2a:54:87:6f:45:5a:77:b6:cc:00:fb: f1:5a:ab:9c:d4:36:ab:bc:9f:96:01:41:d5:47:40: bf:60:f1:55:22:b2:d1:97:69:a8:7e:4d:a4:e5:c0: 3c:4c:31:cc:4c:14:2a:15:45:fb:6a:88:6d:9a:ca: b6:dd:58:4c:fb:af:de:ad:c4:d1:70:7a:08:20:2a: 98:5e:e3:42:c5:fc:8d:a4:39:35:94:f8:ad:44:a8: 4e:8f:b2:c3:6e:c3:4f:e6:c3:43:c2:e3:c2:cb:2c: aa:fd:c2:75:e6:b2:ce:9e:a5:68:a5:ea:c0:5b:14: 92:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:B4:35:A0:F9:AE:93:F7:28:51:8C:76:3E:C6:A2:5A:E6:A6:5E:9A X509v3 Authority Key Identifier: keyid:FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:66:ec:19:06:0a:16:f1:bf:43:91:21:d7:57:a4:48:74:7d: 22:a4:b1:ce:70:bd:cc:f1:80:9e:6c:34:b0:1c:3b:8b:2c:b4: da:7f:b7:a8:1f:8f:2d:dc:ff:1f:f7:8d:50:35:7f:0e:ee:a3: f6:75:af:dd:66:f1:90:86:ef:50:f7:1b:dc:c9:3b:69:a4:0e: ef:33:38:ca:72:46:3c:5d:26:b2:a9:7f:c3:5f:17:19:74:cc: ba:93:2f:e4:58:42:9c:7f:48:f2:7d:5b:af:3e:1c:92:e9:f6: d7:a6:75:f6:3b:63:eb:e1:93:a7:9a:d5:fc:21:dc:f7:6c:d8: 7a:99:e3:38:fa:6b:1b:b2:ff:57:2f:dc:3b:6a:3c:83:94:20: fe:71:fc:0e:1c:f3:bb:a2:82:de:a6:b0:0e:7e:12:f6:9e:a9: 79:e4:29:1f:cb:92:43:5c:6d:d2:76:d7:07:fe:e6:f5:ee:f9: 5b:e7:d4:1b:db:81:56:6b:f7:30:18:7a:5a:d2:fe:4b:83:57: 56:7f:84:3d:ee:cf:65:80:5f:4c:29:0e:46:91:b1:94:76:ba: ab:24:72:72:e6:a7:71:7a:60:53:73:7f:1c:11:f9:1c:2f:1a: 00:c6:53:a1:e0:79:f7:73:e5:b0:8b:8b:4b:f0:ee:55:4c:8c: 27:3e:40:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ5RCUJl17NdAv5FzpKv9ZyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNjk4ZWViMmU0OWZjYjVmOWM2NWE5OTg1N2FmMjljZTA2 NjQxZDkwHhcNMjUwNDI3MjIwMDMxWhcNMjUwNDI4MjIwMDMxWjAzMTEwLwYDVQQD EyhlY2I0MzVhMGY5YWU5M2Y3Mjg1MThjNzYzZWM2YTI1YWU2YTY1ZTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsU8C7nKGkNzCyxU9j8Ok5cYtlw2q FeHHxXFVuqtv8UeWFt72QgGcmUMTbWdwVptqJaCx3sff0vGOit/Vv8/EKLLiwQC1 7oCiCM0KneXnoJPzgtxI2gy8XOy1tQg4c0dfy/xvlHYDyuqr/LEVERufMio2+YKa lNjDc0mY8HKac7DEFhyvkXlIDUhEKlSHb0Vad7bMAPvxWquc1DarvJ+WAUHVR0C/ YPFVIrLRl2mofk2k5cA8TDHMTBQqFUX7aohtmsq23VhM+6/ercTRcHoIICqYXuNC xfyNpDk1lPitRKhOj7LDbsNP5sNDwuPCyyyq/cJ15rLOnqVoperAWxSS8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOy0NaD5rpP3KFGMdj7Golrmpl6aMB8GA1UdIwQY MBaAFP9pjusuSfy1+cZamYV68pzgZkHZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4Mzkt NTdjZDY4ZDljYjRlLzEvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4MzktNTdjZDY4ZDljYjRl LzEvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlGbsGQYK FvG/Q5Eh11ekSHR9IqSxznC9zPGAnmw0sBw7iyy02n+3qB+PLdz/H/eNUDV/Du6j 9nWv3WbxkIbvUPcb3Mk7aaQO7zM4ynJGPF0msql/w18XGXTMupMv5FhCnH9I8n1b rz4ckun216Z19jtj6+GTp5rV/CHc92zYepnjOPprG7L/Vy/cO2o8g5Qg/nH8Dhzz u6KC3qawDn4S9p6peeQpH8uSQ1xt0nbXB/7m9e75W+fUG9uBVmv3MBh6WtL+S4NX Vn+EPe7PZYBfTCkORpGxlHa6qyRycuancXpgU3N/HBH5HC8aAMZToeB593PlsIuL S/DuVUyMJz5A9A== -----END CERTIFICATE-----Generated at Mon Apr 28 06:51:17 2025 by rpki-client