$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft File: CoH-kFn2ggvBitWALy8fynfSVLc.mft (raw, json) Hash identifier: NoQXopT/6ts6IOe4iZzOyhzh2wYWRKigyntBXXP67XU= Subject key identifier: D1:A1:4D:1E:E1:DA:60:A3:44:DD:9B:48:52:D4:43:19:DD:FB:EB:21 Authority key identifier: 0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7 Certificate issuer: /CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7 Certificate serial: 0196745471BC5FFF991D5BB5D802F24BA11A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft Manifest number: 086F Signing time: Sat 26 Apr 2025 23:00:13 +0000 Manifest this update: Sat 26 Apr 2025 23:00:13 +0000 Manifest next update: Sun 27 Apr 2025 23:00:13 +0000 Files and hashes: 1: 31z7eSu8--35kebgOlCIABBeVf8.roa (hash: Bo6lIvIlV0RX6xhodzhO7tuvgscKOLMBcfTJSKlUYZw=) 2: 7pPLJaN3OTQBK8i-P4GOQNKJPho.roa (hash: HpLQLLrJKx/bS+zdiKUm5TCX+jRSuh5jVP1YSt/MOZY=) 3: CoH-kFn2ggvBitWALy8fynfSVLc.crl (hash: 0khcCmptgfBx2/BCEHfAnqWnrU2g+qf2dblr2hSBqas=) 4: EacbpO8P-LkG-h50-C35fVYJXyI.roa (hash: btUaf5jDz02025fLzDlihBUOmr88cX2MxuDiHPb5dc4=) 5: FstRBv2kO53NDHW81Q9Mg07SWg4.roa (hash: +uStvYqgj5hn3d6BL0rwAnmTzIsGb1x7W+G4jAHTkdA=) 6: Gf8Y2t4y9XW51teYl9-IOJM-QkE.roa (hash: JzLxoz0gWXWBbhQLZinkEP2bb0OKmAdUFJyyBJ71KUI=) 7: N0ylFt5LVYNjTI-_TsSgO84trzU.roa (hash: FGN5RCpPLee+DVEx92LqF5VUyDDoLbxxrafkYHnOVZg=) 8: PEEbtcraLxJZAPZLAW5H_KDLDwQ.roa (hash: wU0HPJ884+fnbW1G1BaCynti9gWD3Sn+0YrIsJUp3ns=) 9: hLdZE5q1FOXSO44ZofCjRXN9z7I.roa (hash: CmOCZv7BugezIWG5ZPHeIaee5S3CP9UP9zRJfwRzazg=) 10: i1bI7bZVKfcJ9vCnWPYEzcCSqOc.roa (hash: I9SME80ARJLDqvqmW5BBXCvNlxHc4Su4PKuf6AZPdG4=) 11: n_d7GjbZ9YbYK045nkHL_lX76pM.roa (hash: L6McSAJwh8T7ZY3ArgurepjkJRDGFkS06sAchDylLyc=) 12: pW-Kl5UPWqu6KG3_J4t1h52HuR0.roa (hash: 0HOBimxzzdToQy38vYlAJbGZVaBtPNrg0qioOLxF/+Q=) 13: tlqKEYYvFMWYK-JPntFn1nyKI1U.roa (hash: /wIoPxgkbhHCyNQ8NB2J0bNqG5fb1wxitY8EONuXMt0=) 14: yFPiywRMEHaITt3TRPzJux8bzAU.roa (hash: WnTskmfJ1KLR7sA0SYoAyMqXx6u45IJAhh3f7ztydOk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:74:54:71:bc:5f:ff:99:1d:5b:b5:d8:02:f2:4b:a1:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7 Validity Not Before: Apr 26 23:00:13 2025 GMT Not After : Apr 27 23:00:13 2025 GMT Subject: CN=d1a14d1ee1da60a344dd9b4852d44319ddfbeb21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:6e:f9:03:5e:29:8e:0e:91:61:7f:45:1e:23: cf:32:09:b4:00:a5:a9:44:94:1e:46:80:56:05:fa: 14:f7:9c:80:db:92:54:6a:96:c6:74:7b:56:f0:12: 0f:98:15:f6:32:99:e7:96:27:68:6c:f7:b3:88:7b: a4:be:04:1f:04:b2:17:7f:8f:a1:be:ee:ce:a9:c3: 6e:45:00:fc:35:ec:21:d7:a5:13:de:d6:06:6c:cf: 73:57:81:a1:97:44:92:93:d7:17:90:76:80:ef:60: ca:5b:93:8e:b1:90:53:d4:99:99:28:51:a6:1a:1a: 9c:64:6f:33:d5:b8:c3:0c:ba:f6:40:8d:33:88:5d: e9:9a:45:6f:14:a4:21:b9:6e:d2:b6:10:4c:87:e7: 78:0b:b2:94:1a:61:bd:9a:7c:f1:5a:d3:b0:0f:b1: 1d:5f:35:e4:0b:e9:86:cc:21:30:a6:ed:4e:8e:1c: 80:25:3d:a2:c2:f9:5e:e5:a2:a6:2e:af:1c:a4:09: da:bb:d7:47:e9:58:d4:ce:5f:30:2c:87:3f:37:e6: 19:c3:39:1b:f0:1c:36:63:be:ca:9f:8f:7e:6a:1b: cb:48:9f:a5:37:48:82:24:c2:9d:c1:2d:c2:6e:17: 50:57:45:e2:0d:1d:36:c4:2f:45:b5:7b:58:d3:c0: f7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:A1:4D:1E:E1:DA:60:A3:44:DD:9B:48:52:D4:43:19:DD:FB:EB:21 X509v3 Authority Key Identifier: keyid:0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:45:16:57:4e:f4:88:c0:03:b4:12:96:a7:54:76:9c:b4:6c: 7c:88:80:5c:a3:68:d7:e2:71:5d:55:a5:52:a4:ed:af:b8:a8: 76:e8:9b:26:33:ee:b6:1b:e9:36:8d:3e:75:2c:0f:f6:80:06: 4d:16:8f:d5:34:e2:5c:3a:d1:3a:d2:70:57:22:9b:90:41:e5: cc:1a:23:23:a1:d9:81:ea:26:58:92:45:dc:a2:f3:cf:f8:0d: 32:e6:0c:81:ce:b8:fc:44:8c:e7:07:0d:db:9d:9c:34:ea:55: 1c:95:47:b0:68:2d:a3:a6:ec:7f:5c:18:4e:d2:cb:af:cf:2d: 76:e3:aa:2c:0a:49:90:a5:ac:de:a7:b5:cd:43:af:ad:b5:4d: 8d:06:34:e3:a1:60:8e:2b:bc:f6:22:f3:f2:eb:10:d8:99:a9: 10:1b:55:84:64:e8:8e:70:4a:a0:df:4c:3c:20:6a:59:21:82: 0a:61:b8:46:24:01:c6:c5:83:14:fb:fa:89:95:f2:b3:c0:24: ce:e3:d2:48:60:42:8e:d9:8b:df:93:bb:9a:7a:73:b2:9f:cb: 36:97:52:5d:87:e5:eb:7e:ac:02:10:3b:bf:84:56:79:81:db: 74:5d:37:e0:35:7c:e3:74:3d:f2:05:d3:48:e5:b2:7e:81:8c: 3a:ba:bd:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ0VHG8X/+ZHVu12ALyS6EaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhODFmZTkwNTlmNjgyMGJjMThhZDU4MDJmMmYxZmNhNzdk MjU0YjcwHhcNMjUwNDI2MjMwMDEzWhcNMjUwNDI3MjMwMDEzWjAzMTEwLwYDVQQD EyhkMWExNGQxZWUxZGE2MGEzNDRkZDliNDg1MmQ0NDMxOWRkZmJlYjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlG75A14pjg6RYX9FHiPPMgm0AKWp RJQeRoBWBfoU95yA25JUapbGdHtW8BIPmBX2MpnnlidobPeziHukvgQfBLIXf4+h vu7OqcNuRQD8Newh16UT3tYGbM9zV4Ghl0SSk9cXkHaA72DKW5OOsZBT1JmZKFGm GhqcZG8z1bjDDLr2QI0ziF3pmkVvFKQhuW7SthBMh+d4C7KUGmG9mnzxWtOwD7Ed XzXkC+mGzCEwpu1OjhyAJT2iwvle5aKmLq8cpAnau9dH6VjUzl8wLIc/N+YZwzkb 8Bw2Y77Kn49+ahvLSJ+lN0iCJMKdwS3CbhdQV0XiDR02xC9FtXtY08D3OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNGhTR7h2mCjRN2bSFLUQxnd++shMB8GA1UdIwQY MBaAFAqB/pBZ9oILwYrVgC8vH8p30lS3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgt YmYwNWFjYzgyYmQxLzEvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgtYmYwNWFjYzgyYmQx LzEvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIUUWV070 iMADtBKWp1R2nLRsfIiAXKNo1+JxXVWlUqTtr7ioduibJjPuthvpNo0+dSwP9oAG TRaP1TTiXDrROtJwVyKbkEHlzBojI6HZgeomWJJF3KLzz/gNMuYMgc64/ESM5wcN 252cNOpVHJVHsGgto6bsf1wYTtLLr88tduOqLApJkKWs3qe1zUOvrbVNjQY046Fg jiu89iLz8usQ2JmpEBtVhGTojnBKoN9MPCBqWSGCCmG4RiQBxsWDFPv6iZXys8Ak zuPSSGBCjtmL35O7mnpzsp/LNpdSXYfl636sAhA7v4RWeYHbdF034DV843Q98gXT SOWyfoGMOrq96g== -----END CERTIFICATE-----Generated at Sun Apr 27 06:04:00 2025 by rpki-client