$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft File: ORnyrZFYS6_wRnRHusj7l40fndM.mft (raw, json) Hash identifier: NavStW40g0ExKWyQGfd1nLvzpXEjQaOg8jIYS/W9Gug= Subject key identifier: 2B:CB:74:92:84:DD:9C:40:E9:BD:3B:A2:0A:14:09:89:DC:0E:C1:7E Authority key identifier: 39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3 Certificate issuer: /CN=3919f2ad91584baff0467447bac8fb978d1f9dd3 Certificate serial: 01967FEB404AA582309F54A9677FFE054369 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft Manifest number: 1539 Signing time: Tue 29 Apr 2025 05:00:45 +0000 Manifest this update: Tue 29 Apr 2025 05:00:45 +0000 Manifest next update: Wed 30 Apr 2025 05:00:45 +0000 Files and hashes: 1: 3Xkfgsy5F0IowNcy1PedAB3Q6w0.roa (hash: iyJL5cuUJjZvE75tBtKfcWvyK2dmPiVKM7BX3wZGQos=) 2: 4EDvDSCIPe0YYvYx7Str0IpAPeM.roa (hash: A9xeZgyOfSqqIMRvaPEIhp5b1RhtdrlitB+v147UkT4=) 3: 5pue0s9j8lhdVuO6m6E92d4GwDU.roa (hash: CSkd5pFYexGISl0uc2qVJpocMMmmGw3Zguf0ypv5Owk=) 4: ORnyrZFYS6_wRnRHusj7l40fndM.crl (hash: x6LOuRVLEqeQ3sztHqHrbtuFCU0mInonNgIfMBNdvyc=) 5: UfCPGY0KJE6274iAqACixLj9Gmw.roa (hash: DEe7CtPUt0XEDknWoFEE8OaasnbG+ag0I4mAzR/inaE=) 6: WBerlCoyvzWnSx7AM9uVxy9XUro.roa (hash: FyOYZU8Lcu6m3tCIEh8spxjddiJiAmITHkAJjSq/GW0=) 7: hWosbOoApl7V_Bhpe5UlA20sERA.roa (hash: PkJmNJ/LtXuQwtW6f6gFggLl9YMZJgAspupTTJw2DD0=) 8: m-oD5AGGiKc-qI8F9BHOsqfUhwQ.roa (hash: ZivLa2r1rkIhgA7nnzvSrie3rkSLQvNS6UhWQpi2o50=) 9: r4CnQQx_zbdBDGpIsGGdqEuowRg.roa (hash: Cf3KdUglzAXq3AND0kUcTnVm0D52NG4w3f87gIFdSQg=) 10: uot90FkBP8Y3Y-x6-7brjjoB-rU.roa (hash: 0JXXSAl/uFfrD7KxeCsCoDWgeiNKlIuga4IDFWQXH2c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Apr 2025 05:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:7f:eb:40:4a:a5:82:30:9f:54:a9:67:7f:fe:05:43:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3919f2ad91584baff0467447bac8fb978d1f9dd3 Validity Not Before: Apr 29 05:00:45 2025 GMT Not After : Apr 30 05:00:45 2025 GMT Subject: CN=2bcb749284dd9c40e9bd3ba20a140989dc0ec17e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c6:15:6a:bc:d7:1d:0e:58:87:7c:eb:ff:42: ea:0a:b4:d2:4d:9a:3e:06:3a:ff:10:90:8f:bd:4e: 3b:0c:47:0a:9c:fb:40:e9:34:6a:39:a5:d4:66:6e: 70:86:de:6d:a3:1d:d4:1a:91:aa:7e:42:62:96:25: 51:a6:49:a5:ac:71:08:77:f5:8b:72:9c:d2:d1:0a: 9b:0f:51:b0:3f:5a:95:2c:a6:2b:89:01:aa:87:f3: 9d:d0:50:9e:8d:1c:6c:bc:8b:7b:f8:de:4e:c5:b2: 4f:f2:72:12:19:47:71:da:b9:62:9d:3b:bc:15:15: 43:cd:09:b1:e3:99:57:ce:49:d0:73:60:8b:75:95: 9f:9e:5e:81:da:0a:11:4d:38:b7:b3:c0:38:fa:1d: d8:26:3b:6a:4f:79:38:99:17:85:04:e7:22:d9:34: f6:6c:f8:43:8e:e2:f9:ec:58:08:77:df:9c:d2:c7: 1e:d0:6d:5f:70:1c:34:46:fe:12:83:7e:a0:ff:14: 0b:1b:87:21:cf:f7:99:f8:a4:25:9a:9d:42:2a:91: 27:a9:a1:dd:11:97:21:a9:5b:79:0e:3b:a8:96:a0: cb:81:ee:8f:2f:07:eb:fb:bb:2b:53:52:b2:94:51: 29:e3:8c:93:64:18:66:d5:95:b0:c3:14:77:c8:a1: 8c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:CB:74:92:84:DD:9C:40:E9:BD:3B:A2:0A:14:09:89:DC:0E:C1:7E X509v3 Authority Key Identifier: keyid:39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:a2:88:df:1c:24:b2:68:67:40:5f:7c:47:39:b6:ac:e0:5d: 00:c1:3a:d7:a3:72:b4:51:b0:97:9a:0f:c4:ed:34:6f:b3:4d: da:75:ca:3a:e8:5b:34:20:fe:d2:96:28:9e:36:1c:ff:11:41: 82:d6:f5:b3:c7:72:0a:6e:51:c0:b4:29:f5:54:1d:05:9d:bd: f7:29:2d:f1:b0:50:9d:8d:f6:98:1e:19:ae:11:c3:6f:64:05: b8:b7:52:30:f7:fb:82:82:86:b8:c2:6b:f0:d5:ca:e7:41:cb: 96:55:9f:da:01:04:6e:ed:65:1c:0e:fc:ee:d7:b3:d7:db:e2: b8:82:49:9b:9f:7b:af:a8:6c:99:5c:ab:22:0b:63:09:32:43: da:69:2b:ad:f6:9e:b7:7d:78:5c:c8:40:4c:88:22:d0:53:3e: 7b:2f:4b:cf:19:5f:bb:22:c8:f6:bb:6e:dd:66:26:5e:91:19: 4b:f7:28:75:25:53:56:1c:bb:bf:0c:83:e0:be:74:a9:0b:10: 5f:27:a2:6d:26:c1:18:a7:1c:18:d2:39:70:ce:47:d9:0d:ae: cf:98:b6:2a:1c:37:e6:a5:2b:43:2c:58:d8:4d:be:f4:26:15: a9:5e:52:28:d7:a1:8b:7f:e2:ba:45:39:13:f5:65:22:80:21: 6c:fe:72:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ/60BKpYIwn1SpZ3/+BUNpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MTlmMmFkOTE1ODRiYWZmMDQ2NzQ0N2JhYzhmYjk3OGQx ZjlkZDMwHhcNMjUwNDI5MDUwMDQ1WhcNMjUwNDMwMDUwMDQ1WjAzMTEwLwYDVQQD EygyYmNiNzQ5Mjg0ZGQ5YzQwZTliZDNiYTIwYTE0MDk4OWRjMGVjMTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMYVarzXHQ5Yh3zr/0LqCrTSTZo+ Bjr/EJCPvU47DEcKnPtA6TRqOaXUZm5wht5tox3UGpGqfkJiliVRpkmlrHEId/WL cpzS0QqbD1GwP1qVLKYriQGqh/Od0FCejRxsvIt7+N5OxbJP8nISGUdx2rlinTu8 FRVDzQmx45lXzknQc2CLdZWfnl6B2goRTTi3s8A4+h3YJjtqT3k4mReFBOci2TT2 bPhDjuL57FgId9+c0sce0G1fcBw0Rv4Sg36g/xQLG4chz/eZ+KQlmp1CKpEnqaHd EZchqVt5DjuolqDLge6PLwfr+7srU1KylFEp44yTZBhm1ZWwwxR3yKGM/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCvLdJKE3ZxA6b07ogoUCYncDsF+MB8GA1UdIwQY MBaAFDkZ8q2RWEuv8EZ0R7rI+5eNH53TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85MTE4ZTItYWU3NC00YzI0LWE3NzUt MzJhYTY3MzFjMjkxLzEvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS85MTE4ZTItYWU3NC00YzI0LWE3NzUtMzJhYTY3MzFjMjkx LzEvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPKKI3xwk smhnQF98Rzm2rOBdAME616NytFGwl5oPxO00b7NN2nXKOuhbNCD+0pYonjYc/xFB gtb1s8dyCm5RwLQp9VQdBZ299ykt8bBQnY32mB4ZrhHDb2QFuLdSMPf7goKGuMJr 8NXK50HLllWf2gEEbu1lHA787tez19viuIJJm597r6hsmVyrIgtjCTJD2mkrrfae t314XMhATIgi0FM+ey9LzxlfuyLI9rtu3WYmXpEZS/codSVTVhy7vwyD4L50qQsQ XyeibSbBGKccGNI5cM5H2Q2uz5i2Khw35qUrQyxY2E2+9CYVqV5SKNehi3/iukU5 E/VlIoAhbP5ymg== -----END CERTIFICATE-----Generated at Tue Apr 29 11:26:05 2025 by rpki-client