$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft File: KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft (raw, json) Hash identifier: GjCy8xfzEm7h+8QzHFAGy3MHOB+kZXgYr91RhIM4IOQ= Subject key identifier: F7:9E:12:22:87:4B:9F:87:F9:C5:D4:0F:05:3F:D3:A4:D1:EB:00:CA Authority key identifier: 29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8 Certificate issuer: /CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8 Certificate serial: 019682EBFC5D188845FDCDBAC0B91C2D761E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft Manifest number: 09F3 Signing time: Tue 29 Apr 2025 19:00:25 +0000 Manifest this update: Tue 29 Apr 2025 19:00:25 +0000 Manifest next update: Wed 30 Apr 2025 19:00:25 +0000 Files and hashes: 1: 3n7I_kSrxdGXM-Yy8kH4fsc4pN8.roa (hash: s/PREhsDL5iYmJE9h5sCUC+jgqMKpegaWts1GqNWSms=) 2: FV9U3Yv2I7_2992_Tu4mBiIQFlI.roa (hash: /WpBV6VXQYMepV5lfUa4zJ1OtPuJRJ1gNT7mbz//kPY=) 3: IvOVPi4Jk0LAA7IyC_lBmoedUPk.roa (hash: iVbMNdqQVbnDfCnhCbcyzkADBiETtoTlj0kjeIAta6w=) 4: KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl (hash: ZGTWQgddM9n+5gSgpCNIxncKvgAue6mRcMPpM4KeTq0=) 5: T16pm2MQEAUE2FMbSssYLk6CkTk.roa (hash: 7uW7JXvNCvoGIxe5Z6TwqqTVQIqIp/L1A4jFvTPd0mc=) 6: UbPhv_LAVA0rwKgmHrLcoG4Owqg.roa (hash: FNzQh/BeexAfdXsFTyP2FKgRjYQQ55iXr7qpb2vEEQQ=) 7: VJKr8K21Xfen5uk1xCfGFVJrqNs.roa (hash: kXpjzIlwN+Gv44HIvCkq7vJ72G9g6c72ZjdAcBJOo5Y=) 8: _54CIVi2Yw4yngdpfKbMO07oyqo.roa (hash: TM5Ay2NTiDiELYyiOeCmFyJPSSpITIxR/LNxTfFDHDg=) 9: ca6XJ5NiIiIJ1gn26NWoBZY1OOE.roa (hash: m0MfY3W/yHtAcpQIPruy2IhGfS2aQQkvwxrvdJx1dpE=) 10: ozTUlRS2BP8xxCFNOquOdzTJVac.roa (hash: l1UJXUEegLYZKNp2zf9niVjLEqjlu26RHLObHLwCBJI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Apr 2025 19:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:82:eb:fc:5d:18:88:45:fd:cd:ba:c0:b9:1c:2d:76:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8 Validity Not Before: Apr 29 19:00:25 2025 GMT Not After : Apr 30 19:00:25 2025 GMT Subject: CN=f79e1222874b9f87f9c5d40f053fd3a4d1eb00ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:40:b0:37:32:04:11:3f:21:7d:58:ed:a8:68: 6f:96:9e:ff:61:20:9c:e3:b2:14:55:8c:07:46:32: 53:78:ee:25:2e:d1:81:e2:e5:72:c4:80:ac:6a:3e: 31:75:63:28:a1:31:55:da:a7:c2:7a:0e:71:09:46: ab:94:19:b8:93:72:5f:f3:b5:57:a1:70:f3:e7:3a: d8:bd:5f:22:aa:11:52:46:9e:e7:a3:c8:0d:61:9f: 3f:fb:88:b2:a0:2f:33:86:c6:26:95:24:20:af:2b: 09:43:fb:71:b4:65:0b:e7:c2:91:75:bb:14:db:4a: 41:f1:d4:6b:d4:34:42:be:b5:b3:05:10:52:4e:2f: 9b:8b:4b:a4:dc:d3:57:b2:1e:b6:ee:10:7d:bb:dc: 9d:55:71:65:f1:f6:5d:8d:fe:d0:2e:0e:4f:22:66: 7e:32:01:ef:26:95:b8:dc:a6:b4:80:67:ee:1c:f8: fa:75:a7:20:e1:e9:3b:fe:e2:49:a8:d8:15:f0:21: 83:fe:ac:a6:1e:81:c0:a7:64:b7:69:ce:87:17:e1: 67:a6:50:06:76:43:69:fb:a8:74:b7:ae:81:61:d8: 7e:e8:fc:54:7f:ae:3e:02:f7:86:53:43:d2:69:6c: 33:32:48:dd:b0:21:44:dc:df:e7:81:1b:76:14:0d: 03:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:9E:12:22:87:4B:9F:87:F9:C5:D4:0F:05:3F:D3:A4:D1:EB:00:CA X509v3 Authority Key Identifier: keyid:29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:0d:6a:45:ec:a1:99:1e:95:e9:f0:b3:72:a5:d1:63:1c:5d: 0f:a6:30:c8:70:8f:2e:dc:87:bf:22:16:27:a2:54:d3:d5:ed: 44:10:97:85:2e:1e:bf:37:42:74:a3:b0:4d:e0:6c:2a:74:40: ad:ac:51:93:c3:58:9a:80:0c:34:c1:c7:48:0b:1c:c0:fa:c8: 59:f0:81:13:82:56:83:c9:ce:00:a4:b0:e5:a4:55:6b:12:85: 4c:7d:0f:7c:01:a6:4d:bd:24:87:36:ef:08:d3:68:b7:55:f9: 22:2f:ad:ff:84:10:c7:c5:d7:69:b2:4b:2c:1f:2d:c5:ae:13: 6f:77:36:aa:99:cc:c1:be:20:5c:52:fb:95:20:80:18:c8:75: 0a:e3:7e:18:11:ba:b0:20:e0:aa:63:00:f5:57:1a:e3:3d:7c: 1b:c3:14:ff:d6:dc:eb:72:2a:7a:d1:8f:c9:11:d8:98:aa:31: 7b:2f:b5:37:3e:89:ba:cd:af:fb:3d:14:e3:2d:c1:3c:67:b0: b5:ae:a8:5a:32:4d:1e:f9:cc:cd:a2:20:b6:7d:fc:e2:ac:eb: 09:1f:50:a5:7f:51:58:e3:80:33:25:7e:71:8f:9e:32:44:db: 05:c7:47:11:b3:e7:74:ed:de:c7:e8:0e:46:d6:d1:d0:a4:3e: 2d:1a:17:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZaC6/xdGIhF/c26wLkcLXYeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YTk5NjRlMGNkMzVmYjM2NzU3ZTU2NTNmZmE3NjI2YWM1 ZGVlZTgwHhcNMjUwNDI5MTkwMDI1WhcNMjUwNDMwMTkwMDI1WjAzMTEwLwYDVQQD EyhmNzllMTIyMjg3NGI5Zjg3ZjljNWQ0MGYwNTNmZDNhNGQxZWIwMGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUCwNzIEET8hfVjtqGhvlp7/YSCc 47IUVYwHRjJTeO4lLtGB4uVyxICsaj4xdWMooTFV2qfCeg5xCUarlBm4k3Jf87VX oXDz5zrYvV8iqhFSRp7no8gNYZ8/+4iyoC8zhsYmlSQgrysJQ/txtGUL58KRdbsU 20pB8dRr1DRCvrWzBRBSTi+bi0uk3NNXsh627hB9u9ydVXFl8fZdjf7QLg5PImZ+ MgHvJpW43Ka0gGfuHPj6dacg4ek7/uJJqNgV8CGD/qymHoHAp2S3ac6HF+FnplAG dkNp+6h0t66BYdh+6PxUf64+AveGU0PSaWwzMkjdsCFE3N/ngRt2FA0DVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPeeEiKHS5+H+cXUDwU/06TR6wDKMB8GA1UdIwQY MBaAFCmplk4M01+zZ1flZT/6diasXe7oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2FtV1RnelRYN05uVi1WbFBfcDJKcXhkN3VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8yMTQwNjMtZjg4Zi00OTU4LWFlNTIt ZDliNTMzZjdmYmMzLzEvS2FtV1RnelRYN05uVi1WbFBfcDJKcXhkN3VnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy8yMTQwNjMtZjg4Zi00OTU4LWFlNTItZDliNTMzZjdmYmMz LzEvS2FtV1RnelRYN05uVi1WbFBfcDJKcXhkN3VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApw1qReyh mR6V6fCzcqXRYxxdD6YwyHCPLtyHvyIWJ6JU09XtRBCXhS4evzdCdKOwTeBsKnRA raxRk8NYmoAMNMHHSAscwPrIWfCBE4JWg8nOAKSw5aRVaxKFTH0PfAGmTb0khzbv CNNot1X5Ii+t/4QQx8XXabJLLB8txa4Tb3c2qpnMwb4gXFL7lSCAGMh1CuN+GBG6 sCDgqmMA9Vca4z18G8MU/9bc63IqetGPyRHYmKoxey+1Nz6Jus2v+z0U4y3BPGew ta6oWjJNHvnMzaIgtn384qzrCR9QpX9RWOOAMyV+cY+eMkTbBcdHEbPndO3ex+gO RtbR0KQ+LRoXmA== -----END CERTIFICATE-----Generated at Wed Apr 30 03:19:52 2025 by rpki-client