$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft File: dGOVwSZyrZWJIbYrncmyvNimip8.mft (raw, json) Hash identifier: dhRG1pdFLGwefcVBiyajZMvArYNMyynJR/sDFhwvtbI= Subject key identifier: 4A:FC:83:F3:93:D3:BC:F5:34:E0:85:B3:9F:28:AB:52:DF:C4:BB:57 Authority key identifier: 74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F Certificate issuer: /CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f Certificate serial: 019684A33B18BC5C3CFA86CC44A106403228 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft Manifest number: 0D5A Signing time: Wed 30 Apr 2025 03:00:11 +0000 Manifest this update: Wed 30 Apr 2025 03:00:11 +0000 Manifest next update: Thu 01 May 2025 03:00:11 +0000 Files and hashes: 1: 49__1Mb6TJOq1lBE39sK0MqptNw.roa (hash: mUbErI4yr16L9KeXw+m7dZ8Q/W3G3H5gFLIPV4hSK+w=) 2: 5dh_b1RBPEedGPoH5jPrifwFpjk.roa (hash: FiUlLPDPpSS4NO4ecP0itIgJ8SGlTnSQQXsonHz0nWs=) 3: 9JRK7EwR6Rg_h37a1uMH5kLd-FE.roa (hash: seSeyyGJGHJLolRBA5CPiq9g6rFjmIDsp1xxdhmozxQ=) 4: D_DMWXe-SCxub8zdYhqregtOfgc.roa (hash: YdgWjYi7meP25wOXjFPlW12dueNlMrHsgbDj5lqUC/U=) 5: Gtrnpnu2EuvTaSZcq-k7Wc8SQpo.roa (hash: Ozf4xst6zqysHFFPHqPk6t9V4R5ZCQl3Sl9vytAN8Vc=) 6: LdIbymxNIXROKdCHKP82tGDACeU.roa (hash: kQyQUPIfVzFwJ1Jq+tF49xJ69eCwQR/ZkbVWbjv5vAI=) 7: SChPZPj9fTG0LMgBHiZShGaGesk.roa (hash: yiFf6ekegDw5R3MvDUcGOwB0KMvQ6EjjT4IN1JKBmzE=) 8: TBnbIzlh-BKbahkJ3E7jSuQuQaY.roa (hash: wANue+0BieEbIbGU0PO+SRCogjBRNdJwQ6IIP6xIdvM=) 9: dGOVwSZyrZWJIbYrncmyvNimip8.crl (hash: pC511p656OfwIj6+k8uHAWCYepGHez/8EPQ2UwHc0AU=) 10: h1ukNoxF9DJUl37AyGab6Erc1Gg.roa (hash: ZJoHXOQXc61UY5FcS2k+Dk9a8RGGZKOXsXXbXlt54JQ=) 11: py6UVbnGSCFD9UnKceZ9kgRxFEA.roa (hash: bcsPoMQcphhUQSwMWLfV++Vj4Ps638fSjd2kseADRTg=) 12: r1KzO2xl8ICSO7mqxB698PRuZNw.roa (hash: kEobsRqs12mPpmxJMO043I+VfPOn+9gNzHlkxfMSy8w=) 13: sji6IRKMxoDbfzOHSYIJXQ44kMU.roa (hash: J7ZKFCKuQD4fFS/N1oH5CYaWP7urJ+aNVO6F4VGrJVY=) 14: t5XPQX_yMIvCtklbQrF1q82oTKI.roa (hash: 7XrFoeiXGnOydV2Y9F7H+zsIgDxk1pwJqNALV9hG41A=) 15: zn28wDGOw3qBz9OqZJzgWf1QCv0.roa (hash: IFT8wg4FnvyKYbJvM5hiahqsDRtzob17zeYuwyl/UlM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 May 2025 00:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:84:a3:3b:18:bc:5c:3c:fa:86:cc:44:a1:06:40:32:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f Validity Not Before: Apr 30 03:00:11 2025 GMT Not After : May 1 03:00:11 2025 GMT Subject: CN=4afc83f393d3bcf534e085b39f28ab52dfc4bb57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:68:b7:8f:a3:76:01:5b:70:2d:f3:d1:2f:bf: ff:2e:e9:73:97:97:ad:b2:ee:87:6f:5c:ed:5b:97: f9:ca:90:93:58:d9:49:6c:1c:2f:29:b7:9f:bb:64: 85:45:3c:87:2c:5e:87:22:1d:fd:9b:7e:37:23:a6: c2:0f:d1:64:04:5e:6b:cc:d0:e4:e7:58:c4:b1:b4: 3a:e7:96:fc:86:85:84:24:e9:b9:07:70:89:7a:89: b2:7f:67:2e:02:6f:5c:31:a6:6e:89:b2:93:09:b8: b3:9d:e0:65:c0:a1:d7:33:5b:ff:c3:09:df:7c:34: 39:9d:62:91:79:ff:c1:e3:ab:e4:ca:44:15:2b:5e: d4:ac:b2:82:ac:27:d6:e6:42:32:48:6e:55:52:90: f5:a4:1a:93:4c:6a:c5:ea:4c:50:54:ee:3f:4f:ed: f2:8e:b7:d8:73:8e:6d:01:e2:74:8c:e0:50:c8:06: 45:54:59:e5:a8:e5:24:2e:d1:d6:4d:2c:d7:ec:96: 55:7f:d9:47:48:d4:6c:bb:ba:ef:b4:13:e0:cd:81: 5c:77:6f:91:17:9d:26:22:34:72:ab:88:b8:10:52: 4f:af:95:4e:e0:15:69:4a:2c:08:88:fa:0b:26:59: 07:b1:1f:68:1b:6d:8c:36:a3:58:93:58:48:40:be: b6:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:FC:83:F3:93:D3:BC:F5:34:E0:85:B3:9F:28:AB:52:DF:C4:BB:57 X509v3 Authority Key Identifier: keyid:74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:42:47:4f:84:4a:49:76:d3:e5:00:1f:36:86:36:3d:c0:cf: 20:a7:d6:2b:5e:99:e4:19:ca:a2:48:27:b5:20:02:67:cc:cf: 27:2a:85:63:69:0b:ee:98:0d:37:ef:18:a8:70:a4:94:55:b0: 54:0b:33:bc:8b:9c:c1:8e:42:33:96:ec:5f:1d:8e:81:42:75: e3:6e:bc:9a:8b:1c:c8:90:0f:b8:d1:83:95:db:9e:d5:da:6f: 13:31:66:2d:e2:ce:06:9d:07:c4:5a:31:6a:0d:1c:62:f4:cc: 14:39:41:bf:e2:c8:35:5e:b4:97:e2:da:09:82:59:7b:57:f9: 5c:40:e0:6d:53:87:9b:10:9e:64:c2:63:39:03:7f:58:06:5a: 7c:4a:6e:88:36:ad:d0:52:49:d3:58:7a:d7:e0:29:d8:18:a3: 6f:f9:74:f9:f0:75:0f:76:fc:2d:00:f7:96:24:6b:06:a1:e5: 19:a5:f7:44:b9:9b:01:8f:35:a4:82:ad:df:e7:58:57:f9:dc: 0c:08:f5:ca:57:4a:1f:5e:bd:5b:6b:de:a6:31:09:9a:fc:d4: ed:20:8f:96:ea:9b:89:a3:e9:1c:3a:91:84:53:3e:3d:ee:68: 7a:fe:31:90:6d:50:62:bc:d4:c8:e1:63:d1:44:6a:7a:6d:08: 06:07:29:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZaEozsYvFw8+obMRKEGQDIoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NjM5NWMxMjY3MmFkOTU4OTIxYjYyYjlkYzliMmJjZDhh NjhhOWYwHhcNMjUwNDMwMDMwMDExWhcNMjUwNTAxMDMwMDExWjAzMTEwLwYDVQQD Eyg0YWZjODNmMzkzZDNiY2Y1MzRlMDg1YjM5ZjI4YWI1MmRmYzRiYjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2i3j6N2AVtwLfPRL7//Lulzl5et su6Hb1ztW5f5ypCTWNlJbBwvKbefu2SFRTyHLF6HIh39m343I6bCD9FkBF5rzNDk 51jEsbQ655b8hoWEJOm5B3CJeomyf2cuAm9cMaZuibKTCbizneBlwKHXM1v/wwnf fDQ5nWKRef/B46vkykQVK17UrLKCrCfW5kIySG5VUpD1pBqTTGrF6kxQVO4/T+3y jrfYc45tAeJ0jOBQyAZFVFnlqOUkLtHWTSzX7JZVf9lHSNRsu7rvtBPgzYFcd2+R F50mIjRyq4i4EFJPr5VO4BVpSiwIiPoLJlkHsR9oG22MNqNYk1hIQL62nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEr8g/OT07z1NOCFs58oq1LfxLtXMB8GA1UdIwQY MBaAFHRjlcEmcq2ViSG2K53JsrzYpoqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEdPVndTWnlyWldKSWJZcm5jbXl2TmltaXA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi85ZTIzNTEtOGRkMC00YjcwLWE1ZmMt ZmI3NzRhYmRmYWMyLzEvZEdPVndTWnlyWldKSWJZcm5jbXl2TmltaXA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi85ZTIzNTEtOGRkMC00YjcwLWE1ZmMtZmI3NzRhYmRmYWMy LzEvZEdPVndTWnlyWldKSWJZcm5jbXl2TmltaXA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsUJHT4RK SXbT5QAfNoY2PcDPIKfWK16Z5BnKokgntSACZ8zPJyqFY2kL7pgNN+8YqHCklFWw VAszvIucwY5CM5bsXx2OgUJ14268moscyJAPuNGDldue1dpvEzFmLeLOBp0HxFox ag0cYvTMFDlBv+LINV60l+LaCYJZe1f5XEDgbVOHmxCeZMJjOQN/WAZafEpuiDat 0FJJ01h61+Ap2Bijb/l0+fB1D3b8LQD3liRrBqHlGaX3RLmbAY81pIKt3+dYV/nc DAj1yldKH169W2vepjEJmvzU7SCPluqbiaPpHDqRhFM+Pe5oev4xkG1QYrzUyOFj 0URqem0IBgcpGA== -----END CERTIFICATE-----Generated at Wed Apr 30 10:13:07 2025 by rpki-client