$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft File: VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft (raw, json) Hash identifier: RJ8zC8lrVEenru6yN9zEYfqBCNgGpqcYyiJgQ3f31D8= Subject key identifier: 5E:C8:87:D1:3F:C2:5D:A9:F9:48:85:02:99:39:D4:9C:A1:67:16:06 Authority key identifier: 55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED Certificate issuer: /CN=55fad96dd05af8c2d26192c841131f2f97459fed Certificate serial: 019678D6D607EE4F2F69B585F9CCE74F3CC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft Manifest number: 151C Signing time: Sun 27 Apr 2025 20:01:07 +0000 Manifest this update: Sun 27 Apr 2025 20:01:07 +0000 Manifest next update: Mon 28 Apr 2025 20:01:07 +0000 Files and hashes: 1: 6fy-RpF2xj4bRR9VT9bQ_Fryj8A.roa (hash: +fjUuan9mhMoL5J+xbDDTtsP2e+9iZNf2Q6jWOsGO/g=) 2: B2guzqJ0c1c1SQ3CcIbZxFBJLXQ.roa (hash: 55A03hHw140PM0KCnI5wADrRDcpuUYgxTN0Hby4pUXI=) 3: GDhDJ-2zjU0GkRTxU28X9ngeRHc.roa (hash: o2yqsnKawfThSJXCRUMbs0Smm+L29A8WJUtnBaTxbug=) 4: GcZeqFRM3Vo0APvxkyx_MnzPveU.roa (hash: a4xzh+76qyVv2r1JqzdGIwl68kZYtgkEbksxJPUpquk=) 5: HDILnjmhtcEJk46AQcpCMkCLoA8.roa (hash: RKyE3trmJiGqNtjuvNCycAFA3dGIi6wfCWONyfSdxXk=) 6: OzvEZ_7o6iiEemTYYUh3uPS2kS0.roa (hash: olMlYCsvO4RycaUkfHVORoJbVkzPaXULWZ1VzqkkPLI=) 7: VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl (hash: 5drAtAfkG3zEgfRSc+WtyuOz+tJaHv0fZOOnS6L79Jk=) 8: X8OOCxFmHvFVmgVaORuTFl7bqwA.roa (hash: 8QmTqC1KGhreGJsiTB4YVXTsChzMFM1fgstpYcqi2wU=) 9: _XmPllT7ofYCPa4yLDSVV52Pl3k.roa (hash: bV+K4k+usRA15bCwnB7mW9jVhJg2loiLSbzbXFY6zLY=) 10: kGlBTt5x7KU-txz2Om5dyRKUTdQ.roa (hash: gRmjPVyQTg22cTzCYFSGaaZzVv3Ajzi1EkEgtKCYrRY=) 11: zC5qQAr1NH8TWMnKZTFLrXEquxw.roa (hash: p9nwz/HJCgnc5FZXpmGWtTKanzU2+2yGdiNXNP6y+Q0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:78:d6:d6:07:ee:4f:2f:69:b5:85:f9:cc:e7:4f:3c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55fad96dd05af8c2d26192c841131f2f97459fed Validity Not Before: Apr 27 20:01:07 2025 GMT Not After : Apr 28 20:01:07 2025 GMT Subject: CN=5ec887d13fc25da9f94885029939d49ca1671606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e3:41:14:91:2e:4d:6d:60:35:57:c6:91:b2: cb:f4:fe:90:cf:38:51:a8:57:75:15:49:21:99:56: 9b:b5:ec:ee:f8:87:fb:7b:8d:fb:66:eb:70:dc:f5: e7:41:8f:e6:32:10:9a:4f:12:4a:d3:af:f7:be:64: b9:60:b3:dd:6d:56:49:96:b7:04:1a:a6:bf:de:34: b9:2b:ef:13:4e:d1:ed:b6:1a:cf:58:e3:64:48:c2: 94:13:95:96:54:46:5a:2c:42:3a:b5:6b:32:c4:7c: f3:58:36:a4:f9:81:61:91:65:9e:11:f0:07:af:1b: ac:e1:38:b6:24:bf:e8:a8:9f:c9:db:c8:37:43:e3: ca:4d:62:8f:84:5c:28:c1:5d:b0:7c:ff:c1:85:93: b7:16:d8:3d:c3:c8:69:fe:af:d4:c6:63:39:9d:2f: fd:25:d1:86:9c:1d:f9:d3:4d:55:c8:2c:d5:04:92: b6:ed:d2:90:78:f0:23:85:d1:1e:af:64:77:87:ee: 69:a1:fb:43:da:6c:1c:67:7d:52:68:d0:b1:c7:9f: f2:f0:70:d0:a9:f6:d5:64:01:7a:b7:ee:93:ca:a3: 22:c9:84:07:84:fe:a0:ff:58:2c:80:8a:85:76:8d: 01:49:48:f3:77:c8:ee:f5:aa:ca:79:4e:4a:50:92: 48:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:C8:87:D1:3F:C2:5D:A9:F9:48:85:02:99:39:D4:9C:A1:67:16:06 X509v3 Authority Key Identifier: keyid:55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:bf:65:c2:84:e1:e8:e0:1a:6c:2f:fd:f4:46:d9:9a:79:bd: 9c:da:42:51:d0:80:a9:7a:ad:f2:cb:71:ec:f8:2e:f5:7c:8d: 84:8d:87:7f:f3:c1:c4:5e:84:85:a2:79:6e:c5:03:6d:65:17: 87:22:b6:a4:6c:b0:29:b4:56:65:68:0e:93:8e:cb:32:1b:29: ea:d8:7d:2f:da:7c:e6:a3:99:72:4d:a0:13:16:d0:75:c1:03: 78:7d:bc:64:4f:7b:3a:4a:f0:43:8b:d6:02:09:b7:2c:47:98: d9:97:48:c0:0e:92:b2:09:40:48:cd:71:27:bb:54:27:8b:ea: 7b:dd:0a:3d:47:1a:79:26:a6:5f:57:2e:97:29:5f:67:be:09: 9b:4d:33:1d:48:26:cb:96:58:e2:cc:b4:79:c1:13:c9:76:69: 4d:20:2f:d4:f5:ef:92:41:bc:86:93:67:50:af:a2:b6:bc:75: fd:61:5e:3e:65:93:07:3a:fb:86:6c:f9:e4:b1:1e:d1:62:00: f7:22:0e:08:3f:b9:5d:9a:24:c8:09:3c:39:96:76:68:69:11: 73:e0:26:5d:65:41:cc:da:2c:cb:e9:bb:d4:e8:ec:0e:25:47: 80:d2:6b:a8:f3:19:89:b1:26:da:2d:d8:46:b7:9a:a7:fd:37: c1:1f:23:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ41tYH7k8vabWF+cznTzzAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1ZmFkOTZkZDA1YWY4YzJkMjYxOTJjODQxMTMxZjJmOTc0 NTlmZWQwHhcNMjUwNDI3MjAwMTA3WhcNMjUwNDI4MjAwMTA3WjAzMTEwLwYDVQQD Eyg1ZWM4ODdkMTNmYzI1ZGE5Zjk0ODg1MDI5OTM5ZDQ5Y2ExNjcxNjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtONBFJEuTW1gNVfGkbLL9P6QzzhR qFd1FUkhmVabtezu+If7e437Zutw3PXnQY/mMhCaTxJK06/3vmS5YLPdbVZJlrcE Gqa/3jS5K+8TTtHtthrPWONkSMKUE5WWVEZaLEI6tWsyxHzzWDak+YFhkWWeEfAH rxus4Ti2JL/oqJ/J28g3Q+PKTWKPhFwowV2wfP/BhZO3Ftg9w8hp/q/UxmM5nS/9 JdGGnB35001VyCzVBJK27dKQePAjhdEer2R3h+5poftD2mwcZ31SaNCxx5/y8HDQ qfbVZAF6t+6TyqMiyYQHhP6g/1gsgIqFdo0BSUjzd8ju9arKeU5KUJJINwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF7Ih9E/wl2p+UiFApk51JyhZxYGMB8GA1UdIwQY MBaAFFX62W3QWvjC0mGSyEETHy+XRZ/tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmZyWmJkQmEtTUxTWVpMSVFSTWZMNWRGbi0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zMGU1ODItNDQ0OC00OTUyLTk0YTAt MzBmZjJjODNmMDAxLzEvVmZyWmJkQmEtTUxTWVpMSVFSTWZMNWRGbi0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8zMGU1ODItNDQ0OC00OTUyLTk0YTAtMzBmZjJjODNmMDAx LzEvVmZyWmJkQmEtTUxTWVpMSVFSTWZMNWRGbi0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT79lwoTh 6OAabC/99EbZmnm9nNpCUdCAqXqt8stx7Pgu9XyNhI2Hf/PBxF6EhaJ5bsUDbWUX hyK2pGywKbRWZWgOk47LMhsp6th9L9p85qOZck2gExbQdcEDeH28ZE97OkrwQ4vW Agm3LEeY2ZdIwA6SsglASM1xJ7tUJ4vqe90KPUcaeSamX1culylfZ74Jm00zHUgm y5ZY4sy0ecETyXZpTSAv1PXvkkG8hpNnUK+itrx1/WFePmWTBzr7hmz55LEe0WIA 9yIOCD+5XZokyAk8OZZ2aGkRc+AmXWVBzNosy+m71OjsDiVHgNJrqPMZibEm2i3Y Rreap/03wR8jFw== -----END CERTIFICATE-----Generated at Sun Apr 27 22:39:58 2025 by rpki-client