$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft File: AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft (raw, json) Hash identifier: N8l9LvGulHhcN1ewrIEZ+RT0XrQyzMMs7BfH+orBvwI= Subject key identifier: 5B:B9:8D:02:DC:5A:1D:71:03:E6:C2:47:9D:ED:C9:E3:2A:D9:26:32 Authority key identifier: 02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29 Certificate issuer: /CN=0232a4bfb7796405a556b759f1d193e4c4d37129 Certificate serial: 0196722F36B50FF7B7370E3FB6F91E23FFAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft Manifest number: 1519 Signing time: Sat 26 Apr 2025 13:00:18 +0000 Manifest this update: Sat 26 Apr 2025 13:00:18 +0000 Manifest next update: Sun 27 Apr 2025 13:00:18 +0000 Files and hashes: 1: 2MTpcYnM1k7_eZxG4JM1vyDTgyk.roa (hash: ymmdwaUbb6XKWmKTfQm4pWw8ouzRa7gwqokbxv+gmWU=) 2: 3CW8ZrBicXZ-3Xo2rFwfHtSekAs.roa (hash: 7ay6ExNqGjacU7HN/bzX0dJI8r/LlyrNhedhAiFT9ik=) 3: 4MiALt5VQvZmZRNJbgiFndSZM4w.roa (hash: GJAf7lhefseebsxtLfvA2JkOrit3YnALqwfo2sORCvw=) 4: 7XLrZeKON3mi_Y8HbdkwhdOJHZM.roa (hash: uPZBCvQWdyX5oSW3u+GYq0zKOz3VqYp/42l/kQKgi6Y=) 5: AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl (hash: NNoK0qk7VOmCD3SX0sSl0K3g+IpYywSdmXP/qPxGoks=) 6: Woo9uQ4ucTRYjMh9ah88cw5clxk.roa (hash: WrdAqZeK7ES2+LIoGcfX11G6G4YXGyd2qn4CZO/jQsA=) 7: Xih-EfVQ2lODpeM1Ya_8fjlb3e0.roa (hash: l4FttRaMYnWfbRGN1GiO7VFVJgCvU1nAC+1h/ttWafI=) 8: Z2PHW8LvacSdhO2HpcioR4D6P_g.roa (hash: kHWtIvwFttg31Y3IHOia+gnD127BKytZFvvHo2JKuAw=) 9: gbjyDe1jMzAx-GtGqvOl5rcNw2Y.roa (hash: bZY4frDqpa0VtHIgDLvz2UTVVluMMplhW24wn9Ofe38=) 10: kSocueKI3xqrxYrVlgp46XPJhoY.roa (hash: 38MoDqAostLgesLzGLlzSF6QuxV0tRHQ2WgTUcouUvI=) 11: zDn6BG65-N44C0uDlJe3RzkiUTs.roa (hash: EM6Uwy/Us+r0AtgVlMQcbmCbt0K/tS3jHqszI1mZVYQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 11:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:72:2f:36:b5:0f:f7:b7:37:0e:3f:b6:f9:1e:23:ff:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0232a4bfb7796405a556b759f1d193e4c4d37129 Validity Not Before: Apr 26 13:00:18 2025 GMT Not After : Apr 27 13:00:18 2025 GMT Subject: CN=5bb98d02dc5a1d7103e6c2479dedc9e32ad92632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:02:0e:dc:e4:0c:f7:57:9b:e3:51:b6:43:a7: c1:89:4a:be:83:83:e8:27:66:b8:6b:3a:e9:aa:f2: e6:81:f6:60:ca:ff:4b:02:13:0a:f9:8b:1d:56:02: 4c:70:b8:09:a6:43:76:aa:40:80:a4:a3:0d:7f:77: 74:7c:b4:96:7a:9d:b5:d5:ab:2f:c2:43:c5:c0:b8: e5:3d:01:eb:5b:51:cb:3c:eb:fa:3e:35:ec:13:e6: 72:46:12:0d:17:10:d4:37:b1:a9:ec:ca:28:11:5b: a5:17:49:4e:7c:25:f1:bb:26:e4:d6:c9:8d:22:c9: b5:4d:5a:56:f1:83:60:d2:6c:d3:1a:37:64:1f:e7: 31:e7:66:f6:e7:fa:8c:98:3a:d6:07:c1:b6:77:ff: 8e:ba:4d:6f:70:a8:3e:0b:e5:0d:ff:a2:62:14:11: 28:a9:ec:0a:fe:f8:53:4f:36:eb:cf:2f:78:58:cc: 8b:78:f8:32:18:da:6b:62:04:04:fa:01:6b:48:e5: 13:fd:38:4d:f2:a9:14:2e:94:a8:b6:dd:c2:bb:d6: 3e:9d:99:1d:ad:6b:de:59:8a:52:db:36:65:af:2b: e7:61:4d:50:e1:21:9a:84:2b:be:92:a7:fa:d1:b1: bc:22:51:ef:fd:8c:0b:fd:cf:3f:92:fd:d4:3d:80: 98:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:B9:8D:02:DC:5A:1D:71:03:E6:C2:47:9D:ED:C9:E3:2A:D9:26:32 X509v3 Authority Key Identifier: keyid:02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:47:72:74:7c:5b:36:c7:c4:ff:fe:3f:c1:b6:df:8e:4b:fe: 41:99:9f:23:f0:01:35:d8:16:15:95:ef:49:c6:89:27:d8:7e: fd:27:a4:67:1c:a7:02:68:8d:82:f8:6a:5b:fe:19:7c:18:de: fd:c8:ee:4c:46:8d:9e:37:76:d8:5d:27:64:9c:30:5d:38:0e: e4:9b:30:38:b6:af:fa:97:fb:bf:95:7e:17:7b:cc:ba:ae:b5: f8:04:7b:b5:c0:0e:dd:9c:a0:f5:fc:42:94:52:3d:b9:77:3d: 14:0a:e9:d9:2f:11:b5:4f:9f:57:0a:c1:73:04:b5:60:70:49: 37:77:b4:46:37:d1:16:7b:35:64:41:ed:55:4a:b1:6f:3b:8f: 72:9c:c3:76:6e:f4:b4:19:23:40:bf:4b:1b:12:6a:06:fa:89: 31:25:88:cf:65:ce:ea:ee:52:9b:d6:ea:a7:f1:47:27:d0:96: 46:76:8e:c6:ca:61:87:2a:ea:42:34:ec:a7:e7:4e:9a:c0:34: 07:42:bb:44:16:dc:ec:2a:15:be:bb:58:d6:08:88:72:8e:02: 84:0e:7d:b6:88:78:0b:3b:dc:e3:a7:40:0b:5a:fc:c1:59:be: d7:2c:41:6f:bc:72:11:f2:ca:44:26:19:2f:f6:06:9a:38:9b: e5:9c:4b:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZyLza1D/e3Nw4/tvkeI/+vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyMzJhNGJmYjc3OTY0MDVhNTU2Yjc1OWYxZDE5M2U0YzRk MzcxMjkwHhcNMjUwNDI2MTMwMDE4WhcNMjUwNDI3MTMwMDE4WjAzMTEwLwYDVQQD Eyg1YmI5OGQwMmRjNWExZDcxMDNlNmMyNDc5ZGVkYzllMzJhZDkyNjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQIO3OQM91eb41G2Q6fBiUq+g4Po J2a4azrpqvLmgfZgyv9LAhMK+YsdVgJMcLgJpkN2qkCApKMNf3d0fLSWep211asv wkPFwLjlPQHrW1HLPOv6PjXsE+ZyRhINFxDUN7Gp7MooEVulF0lOfCXxuybk1smN Ism1TVpW8YNg0mzTGjdkH+cx52b25/qMmDrWB8G2d/+Ouk1vcKg+C+UN/6JiFBEo qewK/vhTTzbrzy94WMyLePgyGNprYgQE+gFrSOUT/ThN8qkULpSott3Cu9Y+nZkd rWveWYpS2zZlryvnYU1Q4SGahCu+kqf60bG8IlHv/YwL/c8/kv3UPYCYnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFu5jQLcWh1xA+bCR53tyeMq2SYyMB8GA1UdIwQY MBaAFAIypL+3eWQFpVa3WfHRk+TE03EpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWpLa3Y3ZDVaQVdsVnJkWjhkR1Q1TVRUY1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9hN2NlN2EtODQ0My00NmViLThjYmEt M2JiNGQ2MjAwNTE4LzEvQWpLa3Y3ZDVaQVdsVnJkWjhkR1Q1TVRUY1NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9hN2NlN2EtODQ0My00NmViLThjYmEtM2JiNGQ2MjAwNTE4 LzEvQWpLa3Y3ZDVaQVdsVnJkWjhkR1Q1TVRUY1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhUdydHxb NsfE//4/wbbfjkv+QZmfI/ABNdgWFZXvScaJJ9h+/SekZxynAmiNgvhqW/4ZfBje /cjuTEaNnjd22F0nZJwwXTgO5JswOLav+pf7v5V+F3vMuq61+AR7tcAO3Zyg9fxC lFI9uXc9FArp2S8RtU+fVwrBcwS1YHBJN3e0RjfRFns1ZEHtVUqxbzuPcpzDdm70 tBkjQL9LGxJqBvqJMSWIz2XO6u5Sm9bqp/FHJ9CWRnaOxsphhyrqQjTsp+dOmsA0 B0K7RBbc7CoVvrtY1giIco4ChA59toh4Czvc46dAC1r8wVm+1yxBb7xyEfLKRCYZ L/YGmjib5ZxLSw== -----END CERTIFICATE-----Generated at Sat Apr 26 16:06:22 2025 by rpki-client