$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.mft File: dTm3oSNBeqcZMllGqong8wqwygk.mft (raw, json) Hash identifier: vhuSSpWPgc9qkCZjtpvd3Ax0UXCE6O7xKyf/s1ck/Qk= Subject key identifier: 77:81:5B:0A:B1:AB:7B:42:68:22:80:0C:D6:EE:76:94:12:13:52:73 Authority key identifier: 75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09 Certificate issuer: /CN=7539b7a123417aa719325946aa89e0f30ab0ca09 Certificate serial: 019688B784AA2ADF3D03DFEADEB3E4BE94AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.mft Manifest number: 1528 Signing time: Wed 30 Apr 2025 22:00:50 +0000 Manifest this update: Wed 30 Apr 2025 22:00:50 +0000 Manifest next update: Thu 01 May 2025 22:00:50 +0000 Files and hashes: 1: 6DEouzxjjNK_68sFR-t4CPN-SS8.roa (hash: Oi8D+F91F2i7lr20xSQLbZgZOtgMLQbrK5SvQlzaitc=) 2: GcwznvOYgf-O_ItmFmcLriyXzrs.roa (hash: GxJFlw75s4yOkIPA50toNBLYc/0teNDfXWriesa0E04=) 3: Kjj1PFgdxWrn9icX0ncL0yYzo6Y.roa (hash: BnGBHXPVc8IVOeVlYqNHwJMTowIQPGvDHpMjEcNMsvg=) 4: LYviAp3PxmjO3NYT62eUwATXCDA.roa (hash: cNgFyZaC7ifnpFT8pGCK7760nWd6v3gVDQo7PYoFJbc=) 5: MEvLBKznYJtmItKD78ssXi4mzoQ.roa (hash: pEF4lHoNxgZxriIYsg2W9oGgnigGshpc2ELBfuOnvBk=) 6: QL3J5aUF7REcuSuGJkHRh-T_Mlk.roa (hash: NRo/K62fCGXaYZyQldEoQlP95+Ec/K3+eWLflyYVYMA=) 7: Saq3VYHlza0IcEZF1whMhjsSAlA.roa (hash: iAqLC/j/inixhiy0KGKP177bZAzmIcZH/0FDe0WAUeQ=) 8: VOSDfxHvYjtBiBTe909ZadJMtPA.roa (hash: dQcuzaMdOD+0BiceMsluO5RG0GYGErSY43MYPGJaOdo=) 9: VVGAKlexZnslyaxsj979p9-1tLc.roa (hash: zSg/YLF7G2TzXt0TnTqPgj/B+dgWPQfBczFUSMDRTig=) 10: YWpo66YDW4G278af10SMQAtiOHo.roa (hash: Y9X0J6r0SDlIe4fmcLli4bcOvBDBEcbJdPc8zKihBto=) 11: dTm3oSNBeqcZMllGqong8wqwygk.crl (hash: cM5Dz/rBs208upnos3rkV0U5htvE1NE5qgwqeIK3HeI=) 12: kV6R2Ovdk9Hj-oCFXECnloFy2r4.roa (hash: PiaTCFnxlB3VR92lDDt5EbEtyX7/8S00PG5z/8wHps0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.mft rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 May 2025 21:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:88:b7:84:aa:2a:df:3d:03:df:ea:de:b3:e4:be:94:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7539b7a123417aa719325946aa89e0f30ab0ca09 Validity Not Before: Apr 30 22:00:50 2025 GMT Not After : May 1 22:00:50 2025 GMT Subject: CN=77815b0ab1ab7b426822800cd6ee769412135273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:70:d5:c9:0f:8b:6c:27:5c:1e:de:f0:9d:df: 77:f8:9a:1c:c7:2b:e5:b6:37:1f:33:96:76:c6:f6: 54:27:dd:a0:a5:fb:df:ea:d2:5c:d6:0d:ec:fe:d6: 7c:c4:11:bb:09:38:ed:01:c1:da:30:7b:29:d0:e2: 4a:3e:c1:07:6a:bc:6f:f5:30:32:a7:f7:fa:a3:1c: f9:94:e7:ea:33:26:a8:90:f9:af:20:91:fc:40:74: 39:14:71:1e:7f:fe:85:3f:11:9a:48:9d:b0:c0:98: e5:40:f0:69:f7:6d:4d:b4:f3:a4:61:72:74:b9:18: ce:32:49:f1:ec:b4:25:7c:75:2a:af:83:ab:32:bd: 0f:c0:b2:a1:8c:15:f2:25:d9:57:a5:ea:ac:1b:14: 3c:bf:d6:80:20:b1:b9:8e:25:58:03:2f:35:1b:d1: 0a:ab:fc:33:da:6c:7b:71:c9:33:65:4f:46:d0:a6: 7b:05:01:93:80:6f:08:ad:aa:a9:43:f7:2e:16:10: fb:61:1e:c3:b7:5a:76:87:a4:ed:f4:66:75:1f:ee: 00:32:9d:7a:91:91:2d:14:2e:fc:5e:bd:6f:3e:d9: 6f:40:6e:c0:9d:d1:3c:fb:4d:53:1f:7e:5c:d3:2f: 1e:b2:bb:15:4e:01:08:c1:a9:76:23:0b:f5:09:2a: 2f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:81:5B:0A:B1:AB:7B:42:68:22:80:0C:D6:EE:76:94:12:13:52:73 X509v3 Authority Key Identifier: keyid:75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:43:c2:0d:f0:ec:f7:f9:78:c4:09:73:db:5d:60:f1:a6:51: 9c:99:ab:c1:6a:2d:84:b5:7e:55:9b:44:fb:37:e2:a5:b7:ff: 52:44:4a:d9:c3:e2:11:af:99:42:a2:ea:14:50:f9:bb:1a:4c: 24:9a:8c:97:15:c5:02:71:91:7e:1f:1e:5e:e0:50:b9:b4:4a: f5:1a:79:f0:c9:4f:42:0f:fa:2d:40:b2:e8:d1:a9:33:63:63: bb:b2:d6:74:26:49:cf:f8:d2:79:37:7e:a2:e5:87:9d:26:78: 04:4c:be:6b:5d:c8:b1:1c:52:dd:e9:4e:9f:f5:ee:47:0d:aa: 86:fa:26:46:31:41:25:db:9e:31:1f:24:d6:b6:06:50:b7:9e: e8:9e:a4:7d:74:17:af:f7:b1:4d:78:51:e0:27:e5:76:9f:5c: 86:3b:8e:79:ce:68:a2:3b:bb:db:db:c9:ac:62:5a:ba:94:90: f3:e4:4c:ed:52:d4:66:9d:5e:e8:f9:fa:39:d4:7e:63:48:d9: 28:a1:21:be:a6:c5:b4:17:29:38:1e:0b:d7:6e:3d:cb:b4:54: 21:5e:51:6f:c9:84:9b:6a:ec:17:a2:39:22:4c:9b:bb:ab:e2: 0a:48:b5:6a:3d:91:24:2b:e0:08:ab:29:cd:b0:25:d9:63:4b: e8:82:f6:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZaIt4SqKt89A9/q3rPkvpSuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MzliN2ExMjM0MTdhYTcxOTMyNTk0NmFhODllMGYzMGFi MGNhMDkwHhcNMjUwNDMwMjIwMDUwWhcNMjUwNTAxMjIwMDUwWjAzMTEwLwYDVQQD Eyg3NzgxNWIwYWIxYWI3YjQyNjgyMjgwMGNkNmVlNzY5NDEyMTM1MjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nDVyQ+LbCdcHt7wnd93+Jocxyvl tjcfM5Z2xvZUJ92gpfvf6tJc1g3s/tZ8xBG7CTjtAcHaMHsp0OJKPsEHarxv9TAy p/f6oxz5lOfqMyaokPmvIJH8QHQ5FHEef/6FPxGaSJ2wwJjlQPBp921NtPOkYXJ0 uRjOMknx7LQlfHUqr4OrMr0PwLKhjBXyJdlXpeqsGxQ8v9aAILG5jiVYAy81G9EK q/wz2mx7cckzZU9G0KZ7BQGTgG8IraqpQ/cuFhD7YR7Dt1p2h6Tt9GZ1H+4AMp16 kZEtFC78Xr1vPtlvQG7AndE8+01TH35c0y8esrsVTgEIwal2Iwv1CSovhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHeBWwqxq3tCaCKADNbudpQSE1JzMB8GA1UdIwQY MBaAFHU5t6EjQXqnGTJZRqqJ4PMKsMoJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFRtM29TTkJlcWNaTWxsR3Fvbmc4d3F3eWdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi84MDdlZDUtNTBiMy00ZTVmLTkzNjct NWI1ZTMzY2U3MGFkLzEvZFRtM29TTkJlcWNaTWxsR3Fvbmc4d3F3eWdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi84MDdlZDUtNTBiMy00ZTVmLTkzNjctNWI1ZTMzY2U3MGFk LzEvZFRtM29TTkJlcWNaTWxsR3Fvbmc4d3F3eWdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK0PCDfDs 9/l4xAlz211g8aZRnJmrwWothLV+VZtE+zfipbf/UkRK2cPiEa+ZQqLqFFD5uxpM JJqMlxXFAnGRfh8eXuBQubRK9Rp58MlPQg/6LUCy6NGpM2Nju7LWdCZJz/jSeTd+ ouWHnSZ4BEy+a13IsRxS3elOn/XuRw2qhvomRjFBJdueMR8k1rYGULee6J6kfXQX r/exTXhR4Cfldp9chjuOec5ooju729vJrGJaupSQ8+RM7VLUZp1e6Pn6OdR+Y0jZ KKEhvqbFtBcpOB4L1249y7RUIV5Rb8mEm2rsF6I5Ikybu6viCki1aj2RJCvgCKsp zbAl2WNL6IL2Cg== -----END CERTIFICATE-----Generated at Thu May 1 05:02:26 2025 by rpki-client