$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft File: FL7g69BrS4EvnhNxbiXxw8PRTMY.mft (raw, json) Hash identifier: zq0NJsMpQhWFT7HP0bTMwals2dv/NSQgsRwxEnpkGEE= Subject key identifier: 0B:49:72:1C:D1:10:F6:B0:27:13:27:07:D0:B6:4E:06:FE:EB:29:9F Authority key identifier: 14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6 Certificate issuer: /CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6 Certificate serial: 01967EA1AFF2B64C8E40566FEC495B9E42DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft Manifest number: 1527 Signing time: Mon 28 Apr 2025 23:00:47 +0000 Manifest this update: Mon 28 Apr 2025 23:00:47 +0000 Manifest next update: Tue 29 Apr 2025 23:00:47 +0000 Files and hashes: 1: 08gO2xhzYB9MrOPyUgzVPTFsEks.roa (hash: uuTu5Ilmhz+ZTWX0lT3lDAgUnguN/hhWVP6RiQFWbO0=) 2: 2WvVwy-PRL5GLrJD80GhjHcE31U.roa (hash: V+gab5/KP1zLki+Ce4a8elUju3qZMThRlJep3bHdmjU=) 3: DlttiF7sTnpZBCWr79VnOWAb-Cw.roa (hash: 1I+LBYXesIZu1L3F5YYgW1sIY18eU3XqF+UKWnyiXM4=) 4: E_7lfxRnXL43BaxS0BR35ae28-8.roa (hash: bsdbl8+gmpOB2GMwRa9PUSXIwKLCbxh9y6aoGWsrfmA=) 5: FL7g69BrS4EvnhNxbiXxw8PRTMY.crl (hash: +k21GqBcuypGyvD0pmOgmxXzLhGiTlr1sJYwEH1pc8Q=) 6: LVCOq86MWXkEBLGlXajn0ZENzKo.roa (hash: za/dFUKCElp0tRhTQ1rRsumZkCaRLeXmcSoTGiaBfbk=) 7: MRT2LF_aEOeFlu0z18oRZu0OKoQ.roa (hash: RWWOAldqVltxk1TROg2IYHHxbCDwXOV9TETvXzcXc50=) 8: RS51aQgOg2IG7Kd3gYmS2BKt-mo.roa (hash: 04jNZ5D66dkBNT8VoJCjjfzY2tYl+DQ4VUJcAaUENu8=) 9: UkVGZcePqwW-KxvbBYt50liz4UM.roa (hash: HUtG9jf1oU5Vm0ZUnGnbYEpFmR4EvSJFZLnuUG/MWnk=) 10: kVpC8L3NVBoBD0uRMCZwUe0L0hI.roa (hash: ZhoOhvNlGipJNbOy/H0tyIYa78nFkIWP7NHbAfT2b3I=) 11: uqIp0R_dvDEsqpriRwcj3sItHGw.roa (hash: 0M8ijVLRqjXM3pBRfR1epwx7A0hp1U4azXVWoA9LspU=) 12: wNeMSi5MrXHKJ9Bcd1J1t9TUVxs.roa (hash: 3TBrkx3yBNsIFnG+W7zhjJSop/DWdhzl60pc+HRX438=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Apr 2025 22:36:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:7e:a1:af:f2:b6:4c:8e:40:56:6f:ec:49:5b:9e:42:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6 Validity Not Before: Apr 28 23:00:47 2025 GMT Not After : Apr 29 23:00:47 2025 GMT Subject: CN=0b49721cd110f6b027132707d0b64e06feeb299f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b8:90:2b:ed:bb:56:36:57:29:6c:00:2e:00: 9b:f9:a3:66:a0:80:7e:70:7b:72:1d:5e:fe:4c:20: 55:54:23:e4:ee:cb:12:8a:6c:6b:a2:58:89:f1:c4: f6:44:61:ea:ba:44:66:77:ba:ca:44:97:9b:64:a2: 03:95:dc:ac:65:4e:1d:53:a9:67:df:e6:6e:b2:45: a7:e3:3e:51:7a:74:59:ce:f2:f8:32:e2:c9:ce:e8: a4:76:1a:de:b7:64:43:ae:aa:19:39:7e:e7:a6:48: 63:33:4c:3c:00:70:52:7f:55:27:c7:d8:76:5e:84: c3:51:9a:6a:3a:88:85:d2:64:30:f3:c3:4d:4b:5d: 2c:e4:12:f8:79:ad:ca:bd:4e:a1:41:a7:36:51:7b: c6:a0:8a:c1:cf:a9:8c:b3:18:df:9c:ad:bb:78:9b: b2:9a:da:11:67:b1:1b:0d:a7:a2:ce:9b:01:b3:be: d6:f5:4a:7c:f0:6f:df:bf:b5:e9:12:dc:c0:c6:71: 79:8c:66:c6:47:b6:b9:e9:fd:fc:ac:3f:9f:6f:1a: be:f6:c3:e7:97:d9:1f:ac:08:6e:69:dd:66:9b:6c: b4:33:48:6e:ff:61:00:5c:18:a4:e2:83:80:cd:f6: 25:e1:3b:e1:ac:8d:ad:8a:74:c6:bd:cf:af:0f:00: 4d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:49:72:1C:D1:10:F6:B0:27:13:27:07:D0:B6:4E:06:FE:EB:29:9F X509v3 Authority Key Identifier: keyid:14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:0e:23:51:c4:3b:cd:37:18:ea:53:e5:65:5a:7c:52:85:ad: 86:04:71:f7:6e:c6:73:36:c9:21:d8:cc:d9:79:d5:88:00:9f: f3:e1:59:7a:5c:aa:e5:34:c0:73:ab:f4:38:58:4e:0c:a8:88: fa:b2:79:48:c2:40:72:f8:db:05:18:41:d0:78:af:0d:d5:bd: df:78:3a:6c:f9:f8:2c:6d:e7:ac:3f:6e:e3:c6:13:ad:12:30: d3:96:04:11:c7:0e:c2:0f:76:28:4b:8c:77:70:7b:24:36:38: 30:6f:0b:93:73:ae:5e:68:44:44:69:ec:c3:4e:2f:4b:34:00: 02:4c:56:9b:33:86:5e:f0:09:4e:9c:7f:14:3a:a9:a7:c7:3b: 66:5c:ba:5d:61:1a:37:39:d4:49:9e:18:08:05:d1:b6:bd:79: 7d:f1:68:42:c9:90:08:e0:ef:82:8c:19:8e:48:d4:de:3d:59: f6:fe:f7:27:73:dc:65:d4:1c:ee:6e:59:80:a3:a0:51:96:e9: d4:10:49:ee:7d:cb:54:b8:77:15:e6:c7:34:70:1f:55:8e:09: 3a:83:bc:99:91:bf:e9:b8:b4:b7:bb:0c:83:59:cf:c3:39:96: 6f:73:3d:9a:20:5f:e3:a4:58:8c:52:35:7b:91:29:53:c7:d5: 5f:2d:e0:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ+oa/ytkyOQFZv7ElbnkLfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0YmVlMGViZDA2YjRiODEyZjllMTM3MTZlMjVmMWMzYzNk MTRjYzYwHhcNMjUwNDI4MjMwMDQ3WhcNMjUwNDI5MjMwMDQ3WjAzMTEwLwYDVQQD EygwYjQ5NzIxY2QxMTBmNmIwMjcxMzI3MDdkMGI2NGUwNmZlZWIyOTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvriQK+27VjZXKWwALgCb+aNmoIB+ cHtyHV7+TCBVVCPk7ssSimxroliJ8cT2RGHqukRmd7rKRJebZKIDldysZU4dU6ln 3+ZuskWn4z5RenRZzvL4MuLJzuikdhret2RDrqoZOX7npkhjM0w8AHBSf1Unx9h2 XoTDUZpqOoiF0mQw88NNS10s5BL4ea3KvU6hQac2UXvGoIrBz6mMsxjfnK27eJuy mtoRZ7EbDaeizpsBs77W9Up88G/fv7XpEtzAxnF5jGbGR7a56f38rD+fbxq+9sPn l9kfrAhuad1mm2y0M0hu/2EAXBik4oOAzfYl4TvhrI2tinTGvc+vDwBNfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAtJchzREPawJxMnB9C2Tgb+6ymfMB8GA1UdIwQY MBaAFBS+4OvQa0uBL54TcW4l8cPD0UzGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUt ZDFiYjZiNGRkNzAxLzEvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUtZDFiYjZiNGRkNzAx LzEvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjQ4jUcQ7 zTcY6lPlZVp8UoWthgRx927GczbJIdjM2XnViACf8+FZelyq5TTAc6v0OFhODKiI +rJ5SMJAcvjbBRhB0HivDdW933g6bPn4LG3nrD9u48YTrRIw05YEEccOwg92KEuM d3B7JDY4MG8Lk3OuXmhERGnsw04vSzQAAkxWmzOGXvAJTpx/FDqpp8c7Zly6XWEa NznUSZ4YCAXRtr15ffFoQsmQCODvgowZjkjU3j1Z9v73J3PcZdQc7m5ZgKOgUZbp 1BBJ7n3LVLh3FebHNHAfVY4JOoO8mZG/6bi0t7sMg1nPwzmWb3M9miBf46RYjFI1 e5EpU8fVXy3gYA== -----END CERTIFICATE-----Generated at Tue Apr 29 05:17:41 2025 by rpki-client