$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft File: h3e1s29m4TxDiMmTTaUHhWUV0HM.mft (raw, json) Hash identifier: n71KN9KtRWogOt9YT7lD1q/+zIiaf2cTptp4Zjx1Aho= Subject key identifier: E4:9A:42:08:CA:C4:73:00:27:43:E8:0F:E2:CD:57:32:7E:15:B2:B3 Authority key identifier: 87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73 Certificate issuer: /CN=8777b5b36f66e13c4388c9934da507856515d073 Certificate serial: 0196760C14C404A6434E3550E5599AE8C95C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft Manifest number: 151C Signing time: Sun 27 Apr 2025 07:00:25 +0000 Manifest this update: Sun 27 Apr 2025 07:00:25 +0000 Manifest next update: Mon 28 Apr 2025 07:00:25 +0000 Files and hashes: 1: A6JGXr1SyvHwPS6KzQQ8jkJldSU.roa (hash: VUYWyhNS6ep9E7uE71FApUlIqX9LiZIrh4n1ahAsDso=) 2: TWqw0MHPHKoktRTg5xIAtx78yEM.roa (hash: PUFyi4vEY3nAKmSSQP1jmjE/95RjFLcOq0y69mlpJOM=) 3: V8TNai625jKsZmcQ_WZGrCSKrE4.roa (hash: vysxGoIRN63RAVmh7o1GuXI9idOSf2H3bNvDZcwjEdY=) 4: e6_LhXTjf-f7BeHN6H1yNQzFGts.roa (hash: li+C+e/TyH8gT/zIILB28hzFIhULplGnnZiYiHV9ZRc=) 5: gSW8bbfsJ2jQqNlN9dZhEGJFXP8.roa (hash: vU4Z2mH5UQmCsli4v0J2JenJSa7jKRcKq2cUWRszffQ=) 6: h3e1s29m4TxDiMmTTaUHhWUV0HM.crl (hash: ZKuD5GDQRkMejFg1mH5tiTCsrv3tr2OtVlm/js/ioTE=) 7: i0jLZUHWlEbTjItngq0hMz6l6J0.roa (hash: +fs8xaq1rUOg67Y/1DC1FdTxOQepuB3UaDQqJ+epLzo=) 8: mYsvImsoUU3Ub9pNivjve1CZzdk.roa (hash: 6hty2hcbqDF/bBkU2gmepu7xCrLxFUdqyzgzAZcFQt8=) 9: mcMvNLDOLrmNQ78kKv9_JRA7DZE.roa (hash: VPPZszck1h4O1z0bSD4PbxyUsa9F/mGv1ZkFIvAMZag=) 10: rIHZb_5Mc64A87xwROb5WoKPTaQ.roa (hash: h28IpYVJGdPeChoNExuao8goV9hXIxbKmOle/GHbji8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 05:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:76:0c:14:c4:04:a6:43:4e:35:50:e5:59:9a:e8:c9:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8777b5b36f66e13c4388c9934da507856515d073 Validity Not Before: Apr 27 07:00:25 2025 GMT Not After : Apr 28 07:00:25 2025 GMT Subject: CN=e49a4208cac473002743e80fe2cd57327e15b2b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8f:36:b4:c1:61:7a:39:1f:05:87:6b:b8:10: ac:86:b2:10:29:21:50:3b:36:c3:d0:08:22:36:bf: 74:f2:69:65:b4:70:6e:18:96:81:cb:c3:99:63:92: 4a:fe:5c:df:25:f7:77:68:0f:82:ee:cf:f6:ea:d8: 55:ca:9e:5b:ba:22:4f:6b:65:1f:ce:bf:fc:df:d8: f8:f4:69:19:54:02:16:1a:8f:41:c7:be:ed:cb:1d: 7f:40:5b:a1:8b:9a:0a:f5:bf:09:00:36:8e:cf:ce: 05:49:a0:3b:19:21:be:f6:4d:3a:41:fd:2a:b4:82: c6:8f:9c:e7:6e:1c:0a:f8:33:f1:fb:0b:13:bd:eb: 1d:ff:27:58:c7:46:c5:d0:b5:ad:a8:9c:36:1b:f6: 76:63:9b:4f:fb:e2:e5:8a:5d:e0:d0:53:77:53:14: 17:c6:5b:33:d2:a2:2d:4c:7b:64:82:be:cf:e8:d4: 4c:d6:87:54:21:86:43:12:56:57:d3:d0:0a:17:a1: 36:15:c0:b0:5f:35:cc:67:ec:9b:94:b8:3a:9b:d2: 3e:81:8d:15:0e:54:dc:66:2b:49:32:c0:be:a4:b5: 08:60:ea:60:fe:37:40:98:8e:ea:34:19:b8:05:7f: c0:66:47:d8:d6:04:a3:59:7e:da:fe:c6:70:0f:fb: f1:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:9A:42:08:CA:C4:73:00:27:43:E8:0F:E2:CD:57:32:7E:15:B2:B3 X509v3 Authority Key Identifier: keyid:87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:bf:f2:0d:45:f6:a8:31:1f:64:47:ef:f7:47:c8:57:19:58: 66:e5:61:27:36:85:a3:62:95:31:e4:76:9a:15:f9:e9:24:ce: 3e:94:07:33:4f:81:00:4e:0c:db:aa:e5:0a:57:75:8b:57:25: 7e:b6:f8:74:9e:45:44:3b:e3:48:f0:43:c2:f5:cf:5e:e5:48: 3b:67:9a:66:5d:7d:0c:2b:fc:21:57:71:eb:24:ab:ce:1c:72: 45:2d:cc:a5:36:08:a4:eb:4e:34:bc:91:75:00:72:dc:9f:6c: 26:12:f1:7e:11:0c:48:dd:88:1b:22:5b:ce:56:08:62:fd:e6: b1:ec:a2:7b:71:3e:11:86:62:22:a8:02:f7:dd:63:e2:4a:3c: 41:bf:85:fd:1e:1a:27:42:a7:fd:80:e3:6b:02:75:21:d0:b2: f9:90:30:d3:3f:63:3a:a1:10:0d:c8:9c:9e:cf:d2:7f:b4:92: 29:82:74:7a:4a:f3:4f:8b:d2:d8:85:e0:b4:e0:20:be:f8:04: ca:b1:0b:b4:9d:1d:b8:b2:a8:85:98:f8:63:90:33:20:82:03: f2:aa:af:18:0a:f9:a7:14:e9:12:a6:c8:88:f6:34:19:13:b3: 6c:a2:14:ab:5e:c3:47:21:da:c5:93:e9:b5:65:ce:fe:f3:2a: 90:0e:5a:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ2DBTEBKZDTjVQ5Vma6MlcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NzdiNWIzNmY2NmUxM2M0Mzg4Yzk5MzRkYTUwNzg1NjUx NWQwNzMwHhcNMjUwNDI3MDcwMDI1WhcNMjUwNDI4MDcwMDI1WjAzMTEwLwYDVQQD EyhlNDlhNDIwOGNhYzQ3MzAwMjc0M2U4MGZlMmNkNTczMjdlMTViMmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1I82tMFhejkfBYdruBCshrIQKSFQ OzbD0AgiNr908mlltHBuGJaBy8OZY5JK/lzfJfd3aA+C7s/26thVyp5buiJPa2Uf zr/839j49GkZVAIWGo9Bx77tyx1/QFuhi5oK9b8JADaOz84FSaA7GSG+9k06Qf0q tILGj5znbhwK+DPx+wsTvesd/ydYx0bF0LWtqJw2G/Z2Y5tP++Llil3g0FN3UxQX xlsz0qItTHtkgr7P6NRM1odUIYZDElZX09AKF6E2FcCwXzXMZ+yblLg6m9I+gY0V DlTcZitJMsC+pLUIYOpg/jdAmI7qNBm4BX/AZkfY1gSjWX7a/sZwD/vx1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOSaQgjKxHMAJ0PoD+LNVzJ+FbKzMB8GA1UdIwQY MBaAFId3tbNvZuE8Q4jJk02lB4VlFdBzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2Mt ZWQxZjMwY2MxYzU3LzEvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2MtZWQxZjMwY2MxYzU3 LzEvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABr/yDUX2 qDEfZEfv90fIVxlYZuVhJzaFo2KVMeR2mhX56STOPpQHM0+BAE4M26rlCld1i1cl frb4dJ5FRDvjSPBDwvXPXuVIO2eaZl19DCv8IVdx6ySrzhxyRS3MpTYIpOtONLyR dQBy3J9sJhLxfhEMSN2IGyJbzlYIYv3mseyie3E+EYZiIqgC991j4ko8Qb+F/R4a J0Kn/YDjawJ1IdCy+ZAw0z9jOqEQDcicns/Sf7SSKYJ0ekrzT4vS2IXgtOAgvvgE yrELtJ0duLKohZj4Y5AzIIID8qqvGAr5pxTpEqbIiPY0GROzbKIUq17DRyHaxZPp tWXO/vMqkA5aFQ== -----END CERTIFICATE-----Generated at Sun Apr 27 12:48:39 2025 by rpki-client