$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft File: Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft (raw, json) Hash identifier: p4VPdoy3gZmu98W1E/oSBJUKPyahPxqjNp8+KZW/MrI= Subject key identifier: C6:29:74:29:6E:E2:69:0E:79:B2:61:B5:20:19:16:77:E6:28:9A:FD Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65 Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65 Certificate serial: 0196729D46F86E82DEF01DC6BD0A0E5BEEF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft Manifest number: 0863 Signing time: Sat 26 Apr 2025 15:00:32 +0000 Manifest this update: Sat 26 Apr 2025 15:00:32 +0000 Manifest next update: Sun 27 Apr 2025 15:00:32 +0000 Files and hashes: 1: 0UnS-IxSrSbJu0LMwZGgrlOMQaY.roa (hash: RlE1mBt+QrDUuTHvHAH0++Dmsi2Z+uRQ/Byv5g9xWBY=) 2: 1-MsC5JIxdLnLZFyHuf6RgL5WGhc.roa (hash: pKBlmn1z+pps27wu7UmvO8rAolauod4xSkZZnJ9W1vs=) 3: 2pvIQqdrnc-BOV2vOiV82aU9KnE.roa (hash: JAA8g6YNbUGTGs3DmgxNRM+sH++rPd6SoVFBQv/ksXw=) 4: 5iTlOOubPJODXH7vsUI7Wpq0ba8.roa (hash: VCwAilQGOK0VnPyRzIvdM0YYC7WGdN3kdeSa5Bw3IAA=) 5: FMB-bLkFzuyKrNP2ugJeFR5FvcA.roa (hash: b4QarnLE9DJEtGHI3hEpn5pxBgsxCwePllqAAi4lx4c=) 6: RkzLHfWs_BL956tVkCeC3dIaNec.roa (hash: wKD0RAlNUVNkdZZ5vl809Igsg9tUDfvk8Sh/yVsSt8s=) 7: U-0XoRYDV1K8NeLT79sQu_iy4t8.roa (hash: QAJ2fJtDmsN9XNVxW3a/dJEvqFcETnDiO1SCagG2pSk=) 8: X9nzYcXU9EgIVl_7ZZWxlGNl4g4.roa (hash: wL/WH3TZ58EyBKIgJ0ej+sAXqdnuotdQ0gWq1xiVtwU=) 9: Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl (hash: tPwfZBmr7UTz51pH7eiGmjIoRX8rRUhsRM6OmSdnXPo=) 10: aQ7JsCHnSB2G4dfY_3yHXhj3Wo8.roa (hash: jc74/wQHOsinC7epcPYWAUkOMi5kreIozg0B86UPDDA=) 11: a_6EfM_eUhmEh3H7meW3ObA4-Go.roa (hash: NcCAQGLpBENo3heEl3G42fQyl7X50upMygvTrvmVy/A=) 12: bXxx-llWekyrtBewA8UESiAygSk.roa (hash: CVAUCXJbLgxcc/u+sDImVr2cGi4Am9sXCXZAdGDnVHY=) 13: k5l5N8zUJFbRVARzXWppNt0fQCM.roa (hash: zKULduF69ToQv+uBgCJ/ZXvwjNpnYAReEcGPQFoBV8Y=) 14: lO_bhdVoi0rApHqZUYrR4e0dET0.roa (hash: L6ri99HTG/n8zl4aG6bBJmgMqEKOzJ8HTJ12NQEy2Ow=) 15: yH-qgMAP1a-ONlIbLyS-3YiA-v8.roa (hash: 5ALF18aBSR3V/0UBc56QwyH3CpaKIq6eI34/1+3sXLg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 11:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:72:9d:46:f8:6e:82:de:f0:1d:c6:bd:0a:0e:5b:ee:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67499595a65aab0b53768def08091e31061e9e65 Validity Not Before: Apr 26 15:00:32 2025 GMT Not After : Apr 27 15:00:32 2025 GMT Subject: CN=c62974296ee2690e79b261b520191677e6289afd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c7:78:39:f4:3e:0c:e8:39:e9:1a:5e:0c:46: a2:a9:8b:ca:a9:b2:87:e7:f3:b4:3e:64:da:ae:30: b0:e4:c1:00:d6:b9:1a:a2:d2:05:3d:0c:c1:dd:75: 23:3d:2d:9b:ec:ea:49:fe:ae:e8:c4:5f:a5:a0:33: 08:15:2c:ca:b7:e3:ff:b0:08:3b:f8:56:43:4c:68: 41:09:b8:64:59:1f:cd:79:c6:7e:84:74:61:15:4d: e8:a5:a1:5f:33:95:16:a0:96:ad:ea:b6:56:b9:7d: 59:e4:3f:e6:9b:07:99:8e:12:15:16:3b:46:1e:20: fd:a9:b8:b7:38:13:5a:e1:18:da:b1:7e:86:b2:ef: 29:7f:eb:52:2b:c7:59:49:bb:a5:c0:3c:db:0c:21: d3:9e:ce:13:be:77:0f:e4:c4:db:c7:85:c7:9b:ed: b6:ef:d8:c5:81:fc:11:5b:a8:f0:71:ac:a1:e4:5b: 80:f2:91:1b:b5:fb:ff:2f:aa:2c:ee:04:48:f5:ca: f9:37:c1:74:99:89:c3:4d:1c:b6:10:48:05:34:88: 2d:14:d2:24:f8:23:4e:0b:17:95:02:72:2f:67:5d: 27:3a:f5:4e:0a:d1:2d:2d:5d:b4:05:5f:5c:26:42: 1d:98:59:ef:83:d0:71:3a:d3:59:e7:c7:0e:26:ac: ac:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:29:74:29:6E:E2:69:0E:79:B2:61:B5:20:19:16:77:E6:28:9A:FD X509v3 Authority Key Identifier: keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:4d:76:41:44:af:91:8c:aa:90:a3:89:28:d2:54:43:b6:c8: 94:9e:04:74:89:5b:76:0a:d3:77:3e:5d:0b:9f:7e:86:1e:ae: 19:95:3c:34:7e:37:9f:75:ec:7a:c7:2e:8d:0b:34:4b:8d:03: 11:8e:49:d1:dd:37:0d:0d:b3:a2:42:c9:b0:13:47:c5:9e:71: a7:97:7b:6a:73:fe:df:7f:5c:03:33:14:44:9f:29:b9:d2:b1: be:3d:a1:26:74:36:67:0d:e4:b4:89:02:04:77:52:e4:17:7c: b1:4d:82:f7:d8:cd:f5:6e:f3:a0:59:83:be:30:d9:b9:52:54: f0:0d:fa:df:1e:f6:f0:21:e5:c9:5a:c0:ff:28:db:cb:61:66: 0f:48:34:97:af:2b:9b:b1:ed:3b:0f:14:4f:79:d3:45:98:00: 7c:d4:75:9a:b9:44:cd:a3:b6:93:64:71:0e:99:f1:27:ba:24: 9b:e3:cd:ac:60:b6:f7:f8:73:77:29:8f:b9:b8:7e:90:76:c7: 56:20:2f:ce:7a:cf:6b:c4:ea:80:92:0d:6f:c7:5c:dd:4e:02: 58:7a:84:86:ca:49:16:b4:76:63:d9:1d:1e:87:5f:a1:36:69: 10:08:8d:15:37:1c:ea:72:c0:f1:69:98:01:1d:aa:2d:ee:e4: 67:4d:0a:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZynUb4boLe8B3GvQoOW+70MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NDk5NTk1YTY1YWFiMGI1Mzc2OGRlZjA4MDkxZTMxMDYx ZTllNjUwHhcNMjUwNDI2MTUwMDMyWhcNMjUwNDI3MTUwMDMyWjAzMTEwLwYDVQQD EyhjNjI5NzQyOTZlZTI2OTBlNzliMjYxYjUyMDE5MTY3N2U2Mjg5YWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8d4OfQ+DOg56RpeDEaiqYvKqbKH 5/O0PmTarjCw5MEA1rkaotIFPQzB3XUjPS2b7OpJ/q7oxF+loDMIFSzKt+P/sAg7 +FZDTGhBCbhkWR/NecZ+hHRhFU3opaFfM5UWoJat6rZWuX1Z5D/mmweZjhIVFjtG HiD9qbi3OBNa4RjasX6Gsu8pf+tSK8dZSbulwDzbDCHTns4TvncP5MTbx4XHm+22 79jFgfwRW6jwcayh5FuA8pEbtfv/L6os7gRI9cr5N8F0mYnDTRy2EEgFNIgtFNIk +CNOCxeVAnIvZ10nOvVOCtEtLV20BV9cJkIdmFnvg9BxOtNZ58cOJqysdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMYpdClu4mkOebJhtSAZFnfmKJr9MB8GA1UdIwQY MBaAFGdJlZWmWqsLU3aN7wgJHjEGHp5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTct MzU1MDgwNDE2NTJkLzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTctMzU1MDgwNDE2NTJk LzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa012QUSv kYyqkKOJKNJUQ7bIlJ4EdIlbdgrTdz5dC59+hh6uGZU8NH43n3XsescujQs0S40D EY5J0d03DQ2zokLJsBNHxZ5xp5d7anP+339cAzMURJ8pudKxvj2hJnQ2Zw3ktIkC BHdS5Bd8sU2C99jN9W7zoFmDvjDZuVJU8A363x728CHlyVrA/yjby2FmD0g0l68r m7HtOw8UT3nTRZgAfNR1mrlEzaO2k2RxDpnxJ7okm+PNrGC29/hzdymPubh+kHbH ViAvznrPa8TqgJINb8dc3U4CWHqEhspJFrR2Y9kdHodfoTZpEAiNFTcc6nLA8WmY AR2qLe7kZ00K6Q== -----END CERTIFICATE-----Generated at Sat Apr 26 19:27:50 2025 by rpki-client