$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft File: pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft (raw, json) Hash identifier: eAfOu5qRt/i5oCLX1c0s1oh30grI7wrTeWm1W2+YkDQ= Subject key identifier: 37:90:C8:88:E2:55:7F:FD:62:D1:34:40:EB:64:6A:6C:73:FA:91:3F Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6 Certificate issuer: /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6 Certificate serial: 019689CA6EACCC3D21B34C40EA017976F41F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft Manifest number: 151D Signing time: Thu 01 May 2025 03:01:07 +0000 Manifest this update: Thu 01 May 2025 03:01:07 +0000 Manifest next update: Fri 02 May 2025 03:01:07 +0000 Files and hashes: 1: 2HkBnlanOdUzmWf9Hl_U6GG-UuE.roa (hash: 1Wufa6HiHvWpFQaG3Xl8fTsSYIf48lD7RqqgQlltU14=) 2: 5WrJ_uE8kyfBBg-3rwJlJ6xmp_8.roa (hash: akdPzsnTgH7KtcZBNqPU1osdDy68HWzdp9bPm2mowoQ=) 3: BNK50FDIwLul7LRBqtaICEr9khw.roa (hash: ShN2ExZBctzcXHciSMYpuLHy7sMW4gajHqdp4SmGKwY=) 4: Igsn8_GzxEpyZvyNiTStn1VsWkE.roa (hash: cE10F5ee4Fxy6sxZfixjPiEnOAJr26pMrzQhtmiwXq0=) 5: KkXUwS_4I3ayhd69cP94FHMIKt8.roa (hash: LxyBIOit8HMNZzSJZEvDwuJO4yhxg3p4QU3YOVadKu8=) 6: NkCEdq2ndobm6VmDQa-IZfuAZDY.roa (hash: qOcbuXOI6PfGqV0fypc3sx8Dz5dzMIOt/A/FbNV5s0s=) 7: VO04moXAuIXDmP-FmAZqJ4sbq3E.roa (hash: 1XK9VHT2ZgrrEZxAyHMR/9/4dzcq7U5D/O87NBOUp3A=) 8: YUWzsfvcGYX0_uMBwsz_UtSEvoQ.roa (hash: I2+ZceVVB5u+gR2ocAD4lll8BHqWUKoQ7I2fsyabCm4=) 9: cPX1rLru3EhLpPPW1MnKD3WDdJU.roa (hash: FlPB3PisSixKS60KrufI9cZqpGdplL3+VEjQPrfxXDw=) 10: dP7R-pLAHJv2fxQ8stLMnaNCaIU.roa (hash: ttCIQ6x9upS1QYi3S99yjmOdJpA4nSRRgEVZ9+6A5jo=) 11: gMOwF2mtPRPPpZ-NEq9tmTPMYvM.roa (hash: 9I06ya03N63sQNTiVWhF2hYWAac083jSJyEUOO+Wtd8=) 12: kC3rNl_UHdn-CNb6aCHsLrxS98Q.roa (hash: 1HQePVd4oj57DlYrJg866ZwBO3ttz1hacWXVoenAvOE=) 13: nf8wv6xh5ICDlagRQQtQeDyX7AI.roa (hash: IeriVdC3WPiFlh9qajSZSa5F78gurX6jx9EVck9sDTQ=) 14: pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl (hash: ylPh/DQAr4ywn/gyN8v8csyh7wB/WfWDhybX6+9l7Eg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 May 2025 22:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:89:ca:6e:ac:cc:3d:21:b3:4c:40:ea:01:79:76:f4:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6 Validity Not Before: May 1 03:01:07 2025 GMT Not After : May 2 03:01:07 2025 GMT Subject: CN=3790c888e2557ffd62d13440eb646a6c73fa913f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:da:4b:f3:3e:9d:21:8a:b9:25:db:be:1e:28: c3:49:0e:8e:84:b0:48:80:33:f8:0e:4e:eb:02:84: 52:b0:da:c3:0b:ae:02:8f:de:01:c0:19:64:cc:2d: 73:79:19:cf:32:5a:ef:51:4f:72:9f:ac:90:60:13: bc:af:fe:0e:a0:5d:c0:b0:9f:71:69:59:53:21:99: ff:23:51:10:98:a9:6f:ea:2e:a0:b1:f4:66:0b:c5: 52:82:a1:39:23:80:73:2e:fe:4e:7a:c9:8b:03:7e: d2:ef:3b:58:c5:df:0f:cd:8f:f9:9f:34:b7:3c:28: 74:ac:27:b6:f6:e1:e9:36:4c:46:4c:98:b4:41:c7: 7b:0b:44:cc:13:9c:8e:bb:f6:20:a4:ec:e2:0f:85: 37:e7:57:e2:94:2b:08:71:73:90:42:48:69:6c:85: 1d:9c:1c:db:a2:29:58:6d:05:8f:43:da:12:ec:0d: 1f:ec:fb:17:74:6b:07:4a:c0:56:3c:9d:4d:d5:02: 29:bc:e0:30:1f:a8:db:8d:f8:39:29:c0:a1:ef:b4: 55:09:02:ce:e3:8e:87:4f:6f:2f:aa:7c:35:f6:00: f6:2c:1d:a7:fd:f1:5f:bd:7b:13:9c:a1:99:f7:ba: 35:16:2a:9c:24:08:d4:a7:7f:c8:07:5a:b5:11:70: 2a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:90:C8:88:E2:55:7F:FD:62:D1:34:40:EB:64:6A:6C:73:FA:91:3F X509v3 Authority Key Identifier: keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:84:a9:2c:b5:ba:2c:5e:71:c9:ad:8d:33:99:4c:c9:ac:57: ea:fb:b8:fd:8a:43:63:ed:b3:2b:57:e3:25:9a:d0:5e:b2:6f: 03:8e:21:74:29:a9:bb:a4:92:68:7a:fa:4c:55:e6:30:0c:f6: 9e:ed:d0:68:86:60:c8:10:ec:be:3a:81:88:a5:72:6a:df:2b: f2:45:04:f5:e6:20:bf:42:da:fc:fa:fe:24:d8:6e:65:12:0f: 61:7a:1a:24:d4:0a:55:04:fe:01:1b:a1:6f:16:a7:ae:be:8d: e7:f7:2d:2f:1c:a9:7c:8b:ae:06:d4:b0:5c:f1:55:b9:be:67: ef:bb:6d:f8:8c:c2:17:74:4c:fc:d6:52:5e:41:16:4e:87:15: 13:4a:9f:02:9c:35:af:ff:40:4e:4f:6d:a8:8a:fb:41:d2:62: 6a:d6:53:72:e8:11:aa:0b:a9:bd:01:18:39:c1:1d:66:5c:d1: 6a:45:a6:bc:fd:1e:c8:20:b4:1a:52:33:44:9a:01:d6:ee:ae: 2a:ad:88:9f:d0:7e:25:09:ba:7a:96:da:2a:0b:f9:61:6e:59: bf:97:91:37:f7:f3:5b:28:80:e6:f0:c7:8a:78:18:6b:1b:f9: 19:f6:92:b1:c6:7f:26:15:80:f4:bf:e6:86:03:16:ae:4b:f2: d0:7b:82:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZaJym6szD0hs0xA6gF5dvQfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YmNjMTJhZmE0ZjA1NzM5ZjQ1ZjYwNWUyMjFjNjRjM2Mw ZDJlZDYwHhcNMjUwNTAxMDMwMTA3WhcNMjUwNTAyMDMwMTA3WjAzMTEwLwYDVQQD EygzNzkwYzg4OGUyNTU3ZmZkNjJkMTM0NDBlYjY0NmE2YzczZmE5MTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdpL8z6dIYq5Jdu+HijDSQ6OhLBI gDP4Dk7rAoRSsNrDC64Cj94BwBlkzC1zeRnPMlrvUU9yn6yQYBO8r/4OoF3AsJ9x aVlTIZn/I1EQmKlv6i6gsfRmC8VSgqE5I4BzLv5OesmLA37S7ztYxd8PzY/5nzS3 PCh0rCe29uHpNkxGTJi0Qcd7C0TME5yOu/YgpOziD4U351filCsIcXOQQkhpbIUd nBzboilYbQWPQ9oS7A0f7PsXdGsHSsBWPJ1N1QIpvOAwH6jbjfg5KcCh77RVCQLO 446HT28vqnw19gD2LB2n/fFfvXsTnKGZ97o1FiqcJAjUp3/IB1q1EXAqmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDeQyIjiVX/9YtE0QOtkamxz+pE/MB8GA1UdIwQY MBaAFKS8wSr6TwVzn0X2BeIhxkw8DS7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9iYjE0MGEtMmEyMS00ZjVmLWJkY2Mt ODhiMDE2YmJkNTgxLzEvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9iYjE0MGEtMmEyMS00ZjVmLWJkY2MtODhiMDE2YmJkNTgx LzEvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWYSpLLW6 LF5xya2NM5lMyaxX6vu4/YpDY+2zK1fjJZrQXrJvA44hdCmpu6SSaHr6TFXmMAz2 nu3QaIZgyBDsvjqBiKVyat8r8kUE9eYgv0La/Pr+JNhuZRIPYXoaJNQKVQT+ARuh bxanrr6N5/ctLxypfIuuBtSwXPFVub5n77tt+IzCF3RM/NZSXkEWTocVE0qfApw1 r/9ATk9tqIr7QdJiatZTcugRqgupvQEYOcEdZlzRakWmvP0eyCC0GlIzRJoB1u6u Kq2In9B+JQm6epbaKgv5YW5Zv5eRN/fzWyiA5vDHingYaxv5GfaSscZ/JhWA9L/m hgMWrkvy0HuCDw== -----END CERTIFICATE-----Generated at Thu May 1 07:51:15 2025 by rpki-client