$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft File: CR7HzPD6dh7Zm8WnqewNDusL8FU.mft (raw, json) Hash identifier: VogTyNRJVAgFNhPF9Dwysy8mvNVhguM+KgL41OLH7gc= Subject key identifier: 97:F7:11:A3:28:47:DC:51:91:58:FC:4A:BF:AE:B4:13:3C:93:89:97 Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55 Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055 Certificate serial: 01967153C7FE0419CFA142D55D7F83A7EBE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft Manifest number: 0EA1 Signing time: Sat 26 Apr 2025 09:00:38 +0000 Manifest this update: Sat 26 Apr 2025 09:00:38 +0000 Manifest next update: Sun 27 Apr 2025 09:00:38 +0000 Files and hashes: 1: 6SIE7lIPAfETfqeGKwz9qsqTDpo.roa (hash: baJLkGQNPC/ayO1BdamNx0wTnQsH1JjYTd+EvvvO47U=) 2: B5NGdVBBF38v7I807spD9rlndCk.roa (hash: Ij2UQybHDi9rCMOEdxuL3uK0WnnQkl2pfO/6vc3aPyM=) 3: BvGloeMd1pr-0RarsG3frbQCits.roa (hash: GcGKUXns2ciEuVorqL/ux5XGAMK5utLWLfmy9SJ0sbM=) 4: CR7HzPD6dh7Zm8WnqewNDusL8FU.crl (hash: 5NSYLTWzdYBb90t4bnexSZS46SAEjmazW03lwVLbFvU=) 5: JNXkfS8Gevyb4Dt3MskQFKOQyBE.roa (hash: xyI4i/7FZY7J0bkn5v2Hrfk5UEeVMBFfBsSKz6DAPY0=) 6: L2H6UwduWaJxFicdgN2P7eBtiHA.roa (hash: P4+4JbqGYS4bGYqfrHMMZckY8WsOqty8P+Ix09bzckQ=) 7: MiY_UqV9XxTUP--p5MMXKEdvpoA.roa (hash: cejTZWCl258xJNR53TSPL/OafZfqazlim61BbS6tvNE=) 8: THvQYIa2SprhVvWK5-tWknfJY9w.roa (hash: 5zmsJFBP7NnBZaNurwDsUUuS1oMZV7G7pUdzHmeMsEI=) 9: Ws2J4aPdEb_raZV_Q6WLZuYq9bw.roa (hash: UJOhfpK9rLA1rrtLAae9ZE03f0fN+dWFgn6AnwjjtWM=) 10: _2x-4OGJJSoKcxtXyC5heNpC1Lk.roa (hash: vkhFS/TDoPtaxHhXWGchXfwiYEYa7shcVneeg8uj/S8=) 11: cBFi45ZytFKgnNo2imsLe1_V7q8.roa (hash: r9FtBlSO2l8QxP7DU1HrwjHWsN6WkSKa/BKGiXhnmRk=) 12: chc7NZYTY8TAAm4omvxtyabyq7Y.roa (hash: D4ml84hX/IF5k6NvrzKJg2mEZ4TzfgqpdYCT4BEMOzQ=) 13: durT3uh2Ky_24MEFwd5Si3_aqOE.roa (hash: i0j2EhlYHuhS0ygdpSwrmJ+zKaf6MX39QT07/Pv8Mlw=) 14: hhzSm6GjX7s3vRc-UjvW8KahBO0.roa (hash: Ee9hXcXaMVLm37/p4g8p7BURdDDaz2FT+WhXrMvmGFM=) 15: vel8G0_GwQFflB8Mgko4kMTZKps.roa (hash: rEt+VHHycH8jAHwOJN7GUU5Y5p8vUpqH1HAPUwtitdw=) 16: xBZNSEvhDpAM1D0pY3qScT-0BUc.roa (hash: DvZnOP9131lTN6eFpOmfx2mnihzdQJETBW3zsjhHDtU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:71:53:c7:fe:04:19:cf:a1:42:d5:5d:7f:83:a7:eb:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055 Validity Not Before: Apr 26 09:00:38 2025 GMT Not After : Apr 27 09:00:38 2025 GMT Subject: CN=97f711a32847dc519158fc4abfaeb4133c938997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:2d:89:20:89:38:4b:cd:14:1c:76:2b:cd:47: 02:21:a9:dd:98:ea:e9:90:0c:92:39:0e:8f:7d:9e: d4:a0:6f:cd:a8:65:ee:14:93:9c:8f:76:4a:2c:5f: a6:cb:f6:68:f3:4c:ed:ba:1d:2b:32:50:02:62:8b: 9b:6e:34:f1:e7:aa:28:1e:3f:de:6b:0f:42:b7:da: d7:12:9c:b4:85:37:5b:18:d3:af:c6:aa:19:e6:a4: cb:81:22:51:b3:a0:5a:35:4e:cc:44:59:40:ba:7b: e7:a6:05:6a:24:2f:04:09:ca:53:52:b9:30:b8:a6: 5d:8e:d1:7d:8d:5f:75:ad:09:d5:3f:8c:dc:6b:55: 90:7f:4c:cc:70:be:db:9d:e2:68:fb:8b:e5:c8:c0: 8e:d2:ce:99:08:46:f8:78:b2:9e:93:cf:0a:ab:f6: bd:1a:a3:72:7d:91:13:c6:c8:a4:23:82:42:27:55: 70:d7:cd:b6:50:14:8f:f6:29:a3:7a:db:a0:88:d7: 14:27:23:43:a7:6a:3b:79:e2:60:76:86:e1:05:e6: 31:be:e8:33:04:0d:40:3c:32:c7:d5:cb:9f:73:93: bf:72:e1:3c:71:36:07:67:da:f2:6a:3f:30:c7:d8: 88:ab:b8:45:4e:b3:6f:06:6f:76:a9:7a:74:6b:f2: af:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:F7:11:A3:28:47:DC:51:91:58:FC:4A:BF:AE:B4:13:3C:93:89:97 X509v3 Authority Key Identifier: keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:de:43:0a:31:c6:8e:10:ba:ed:67:1b:40:cc:7f:32:02:68: a7:0f:e3:fb:20:2e:20:46:0e:5f:23:f2:15:3d:a5:fe:3c:b6: 6c:65:d1:66:f0:ce:9b:f3:9e:6b:4f:2f:be:d3:31:41:ca:b3: b5:d0:33:f6:f2:b8:bd:a2:10:9b:a7:ce:63:46:63:2b:b4:b4: bc:c5:e5:23:51:61:d3:14:bf:67:fd:80:cf:7e:75:38:0d:0b: cc:cd:98:e8:d4:59:3b:1a:53:f7:55:0f:23:41:3b:f5:9a:05: b0:9d:53:f3:ce:f9:00:88:f3:5e:d2:75:05:a7:b0:6b:d2:52: 14:5a:a8:41:81:ca:61:50:8c:f9:79:a1:3b:a6:00:cd:0b:f5: f1:40:03:a0:f3:d2:1f:00:18:a4:9a:e3:5e:80:0c:7e:86:3d: e2:08:a2:5b:d4:87:a0:24:13:9d:c5:bd:9d:e6:88:91:3e:18: 7b:0a:20:2d:2b:64:d2:a8:89:25:58:bd:33:52:f8:ac:ff:56: a8:85:f6:a7:0e:65:03:e7:05:c5:86:3b:da:28:f6:f7:53:a2: 13:5f:79:77:14:bc:13:c1:e7:60:f8:dd:ea:66:14:83:c4:78: ac:41:8e:1a:16:63:15:7b:fc:1c:fb:49:04:1f:de:77:f9:0d: 3f:6a:48:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZxU8f+BBnPoULVXX+Dp+vlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MWVjN2NjZjBmYTc2MWVkOTliYzVhN2E5ZWMwZDBlZWIw YmYwNTUwHhcNMjUwNDI2MDkwMDM4WhcNMjUwNDI3MDkwMDM4WjAzMTEwLwYDVQQD Eyg5N2Y3MTFhMzI4NDdkYzUxOTE1OGZjNGFiZmFlYjQxMzNjOTM4OTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4C2JIIk4S80UHHYrzUcCIandmOrp kAySOQ6PfZ7UoG/NqGXuFJOcj3ZKLF+my/Zo80ztuh0rMlACYoubbjTx56ooHj/e aw9Ct9rXEpy0hTdbGNOvxqoZ5qTLgSJRs6BaNU7MRFlAunvnpgVqJC8ECcpTUrkw uKZdjtF9jV91rQnVP4zca1WQf0zMcL7bneJo+4vlyMCO0s6ZCEb4eLKek88Kq/a9 GqNyfZETxsikI4JCJ1Vw1822UBSP9imjetugiNcUJyNDp2o7eeJgdobhBeYxvugz BA1APDLH1cufc5O/cuE8cTYHZ9ryaj8wx9iIq7hFTrNvBm92qXp0a/KvHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJf3EaMoR9xRkVj8Sr+utBM8k4mXMB8GA1UdIwQY MBaAFAkex8zw+nYe2ZvFp6nsDQ7rC/BVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQt NDVjZmM4NTdkZGRkLzEvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQtNDVjZmM4NTdkZGRk LzEvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK95DCjHG jhC67WcbQMx/MgJopw/j+yAuIEYOXyPyFT2l/jy2bGXRZvDOm/Oea08vvtMxQcqz tdAz9vK4vaIQm6fOY0ZjK7S0vMXlI1Fh0xS/Z/2Az351OA0LzM2Y6NRZOxpT91UP I0E79ZoFsJ1T8875AIjzXtJ1Baewa9JSFFqoQYHKYVCM+XmhO6YAzQv18UADoPPS HwAYpJrjXoAMfoY94giiW9SHoCQTncW9neaIkT4YewogLStk0qiJJVi9M1L4rP9W qIX2pw5lA+cFxYY72ij291OiE195dxS8E8HnYPjd6mYUg8R4rEGOGhZjFXv8HPtJ BB/ed/kNP2pIwg== -----END CERTIFICATE-----Generated at Sat Apr 26 18:13:10 2025 by rpki-client