$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft File: g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft (raw, json) Hash identifier: c2bYEkAf+U6ku/X9MwCv1iUeT7mvKTQUtTRT7s3lzOQ= Subject key identifier: 6D:3B:BF:14:D3:74:1D:44:02:8A:8A:9D:B4:0A:2B:E9:5C:34:2E:3B Authority key identifier: 83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F Certificate issuer: /CN=835bc9bb547e27788d221bc8bbd5fb02e024480f Certificate serial: 0196741E14B10D0E697681FE9B8F044678B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft Manifest number: 1523 Signing time: Sat 26 Apr 2025 22:00:50 +0000 Manifest this update: Sat 26 Apr 2025 22:00:50 +0000 Manifest next update: Sun 27 Apr 2025 22:00:50 +0000 Files and hashes: 1: 0RuxYCs-ZR77zbS2FKRWZztVK0Q.roa (hash: jSdqasNIGwiL/SkcUsG3UsldrYCjzkxpl4GYnjGAclY=) 2: 4jaGZdOEYrPblfps0YpbkEMcNKM.roa (hash: G6P2F/yQN3KTaexhThEC0j4hTEjLeDNZKdLyv/NC+3M=) 3: 4sVuDUHUhuqv4fotP4t5XZJrll4.roa (hash: ObxWj69OtudWkX1fVAGgmn9Z1mlrHpzlXmvK45aoIXM=) 4: 7GopD--APCfXYx9PjcNYgXNDy2A.roa (hash: KIrKeJz8KA76goRAIf/fblPP4cBUagZY3WoTBQ0WHf0=) 5: 9WKsimr4vOF_rpwncL6ruOF18YY.roa (hash: xH/VPFrvixhNlhTD8hrquKiIRK1N1S8LQ39X4kWgDbU=) 6: DXe2QCeg44oSwSjch2B9InQFKjo.roa (hash: K6OnR7hdUcOFhOpAS0quOhv9TOcSZTKYV24C7+i6Ykc=) 7: Dtu0FUQBTwq7nMetgTpNdxrJrUc.roa (hash: 2+O0fEd5VicZaDp5QDSOVxRQGaFMgRpvuxLyoCSaMdM=) 8: QP6HFrGNHPgiMzuluLrD65g0i-A.roa (hash: l99hGpVbTIt/+tvuvWJuKHSUe5o+u4epf35vOiEw4Vc=) 9: Rv0B6f_Ojij8hrpzf3DR30lnBYI.roa (hash: b/H/zEu0WFP2D/nRrX3BPfEmih42pvZKFxL8bEEPnXE=) 10: Zg9LMTVlLMAMzOgaRCOZsvbj5YY.roa (hash: 9YC0kyDqEXxaDbjw/WFc8btR+dLVmBtAW2yMy6GIxwY=) 11: ZgkKPqbv9uiQkq9_E4cqyYGcFls.roa (hash: m/krRcpOPe54FnCcamtSok5EA+fs9cArfGttZA4+K7A=) 12: bL6MKH62F5NiojNDkRLOm7t1V50.roa (hash: VYSTyygBbvuJ4ferc/WHT6RrnYr38adoWbgUflVODE4=) 13: e8sw3NSVdW7RuwBxKGlVO3o7vs4.roa (hash: vas7IbvKA+23Qxw1IFtJvSTpfV6psv5Y/rS0T6Oox/Y=) 14: g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl (hash: VQWcRLpbJqocAhDINYclEswz7pcqCbZMSO0ws46mEjg=) 15: gY7BKIjwewKZZlWFSHLcdLr49NM.roa (hash: i0lchkykJ9yatPl5KViR8cy+o8YUx9lts6RmnA23id8=) 16: ndVpFTiV-032z1oLz_wixEvXGiw.roa (hash: /HnhEZMMk7Eh52x99XbC/u8H+8NvDyXM8aky5jw29mA=) 17: pyjq9eTJ16BICExepyy4hHdzJBY.roa (hash: 1qL3K1S3vi6SKpgKIPcn0F7XdPnvihL3lLBBWXETN6c=) 18: rvBoaYSrYkbtJTtOKbhTdATaFJM.roa (hash: LE4FJA/j7M053Yg4eAl5SJ9uM0sRd4GVsWhWeNGGUv0=) 19: z4wc-XAByuKg9_4TbtczZujvcTM.roa (hash: k/l1khmraEpcZ2ZtOkT01pmuwNGz8qHwS9DZWQhB7Ek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 17:20:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:74:1e:14:b1:0d:0e:69:76:81:fe:9b:8f:04:46:78:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=835bc9bb547e27788d221bc8bbd5fb02e024480f Validity Not Before: Apr 26 22:00:50 2025 GMT Not After : Apr 27 22:00:50 2025 GMT Subject: CN=6d3bbf14d3741d44028a8a9db40a2be95c342e3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:86:6b:94:3f:01:9d:b2:83:36:c1:ae:8c:2e: 51:ab:af:c9:11:0f:6c:7e:5a:8a:31:60:01:bc:75: 1f:03:5b:04:2f:a1:07:46:80:fd:2f:9b:f8:ae:f9: 12:84:37:87:9d:e3:4c:30:d4:f5:79:39:cf:ea:5f: ef:ff:cb:93:4b:0d:ba:64:5e:d7:b6:61:9f:e4:fb: 13:a2:bf:0f:be:f4:30:cb:b6:44:7b:43:70:f2:58: 4a:cd:d7:7b:18:1c:83:0e:4f:6e:4e:f8:1c:21:af: 1d:3e:07:87:3a:36:2d:22:0c:68:69:40:46:57:5a: 8b:67:54:39:48:4c:cf:34:8c:df:03:c0:ba:31:bd: f9:f1:85:8c:05:09:8c:f0:03:37:c9:f6:4f:6e:25: e4:4a:a3:31:52:ef:aa:77:5b:55:16:c2:af:b2:d5: 7a:95:39:83:6c:52:da:c4:be:ed:2d:f4:48:d6:e6: a7:2a:9b:10:f2:cd:70:7b:b0:9f:31:61:06:39:5b: 1d:c4:44:83:6e:ee:a4:c3:bd:8e:a8:c9:2d:63:f0: d9:f8:20:75:3a:ae:a4:70:8c:80:77:bd:40:2e:76: 8c:aa:88:62:3f:b4:6a:91:ea:17:39:7d:ea:40:58: e1:e8:30:95:36:be:5a:2b:93:62:26:4d:d4:b1:11: cb:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:3B:BF:14:D3:74:1D:44:02:8A:8A:9D:B4:0A:2B:E9:5C:34:2E:3B X509v3 Authority Key Identifier: keyid:83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:4b:66:88:21:68:1a:4d:3b:37:ba:5a:76:8b:d5:69:fa:ac: e0:4e:fc:65:a4:8c:14:df:b8:c2:85:a6:4e:be:ff:3e:54:88: 58:c5:63:ac:89:ff:1f:56:a6:09:a3:29:d9:25:66:97:57:bf: 26:39:0e:6f:74:36:aa:24:f8:5c:17:29:89:4d:f5:09:9f:c4: ef:77:28:55:bc:e7:9e:db:5b:33:89:07:a7:70:a4:3c:85:b9: a9:1a:02:d6:8f:57:57:33:df:16:f2:ae:f9:31:9c:51:c5:53: be:63:42:7d:a9:ad:87:02:28:b5:24:18:96:28:f7:be:cb:3f: bf:53:df:dd:b7:b6:12:5f:c7:bf:13:95:c5:5a:ff:59:f8:ef: 9c:91:97:32:80:43:12:98:7a:eb:5b:a0:e7:30:98:b9:19:f7: 62:7d:6d:04:90:70:85:dc:07:1f:2f:5b:b0:67:8b:ec:e3:cb: 34:0a:f2:44:7b:80:7e:1a:3d:6c:44:66:6d:e7:db:f5:a0:c6: 65:4c:eb:59:c8:bf:28:86:be:e8:89:ee:6f:cf:0f:7c:39:76: 52:b8:67:2c:f6:48:f9:bf:bc:5c:40:7f:49:a7:ba:2f:7d:ac: 36:f4:24:af:c8:d6:96:0c:e6:18:ed:c4:23:bf:8f:94:8a:09: b9:64:34:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ0HhSxDQ5pdoH+m48ERni0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzNWJjOWJiNTQ3ZTI3Nzg4ZDIyMWJjOGJiZDVmYjAyZTAy NDQ4MGYwHhcNMjUwNDI2MjIwMDUwWhcNMjUwNDI3MjIwMDUwWjAzMTEwLwYDVQQD Eyg2ZDNiYmYxNGQzNzQxZDQ0MDI4YThhOWRiNDBhMmJlOTVjMzQyZTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYZrlD8BnbKDNsGujC5Rq6/JEQ9s flqKMWABvHUfA1sEL6EHRoD9L5v4rvkShDeHneNMMNT1eTnP6l/v/8uTSw26ZF7X tmGf5PsTor8PvvQwy7ZEe0Nw8lhKzdd7GByDDk9uTvgcIa8dPgeHOjYtIgxoaUBG V1qLZ1Q5SEzPNIzfA8C6Mb358YWMBQmM8AM3yfZPbiXkSqMxUu+qd1tVFsKvstV6 lTmDbFLaxL7tLfRI1uanKpsQ8s1we7CfMWEGOVsdxESDbu6kw72OqMktY/DZ+CB1 Oq6kcIyAd71ALnaMqohiP7RqkeoXOX3qQFjh6DCVNr5aK5NiJk3UsRHLtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG07vxTTdB1EAoqKnbQKK+lcNC47MB8GA1UdIwQY MBaAFINbybtUfid4jSIbyLvV+wLgJEgPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzF2SnUxUi1KM2lOSWh2SXU5WDdBdUFrU0E4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC85NjJmYjEtM2RmMC00ZWMyLWI1MGEt YjM2YTI0ZDM5NDI3LzEvZzF2SnUxUi1KM2lOSWh2SXU5WDdBdUFrU0E4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC85NjJmYjEtM2RmMC00ZWMyLWI1MGEtYjM2YTI0ZDM5NDI3 LzEvZzF2SnUxUi1KM2lOSWh2SXU5WDdBdUFrU0E4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQktmiCFo Gk07N7padovVafqs4E78ZaSMFN+4woWmTr7/PlSIWMVjrIn/H1amCaMp2SVml1e/ JjkOb3Q2qiT4XBcpiU31CZ/E73coVbznnttbM4kHp3CkPIW5qRoC1o9XVzPfFvKu +TGcUcVTvmNCfamthwIotSQYlij3vss/v1Pf3be2El/HvxOVxVr/WfjvnJGXMoBD Eph661ug5zCYuRn3Yn1tBJBwhdwHHy9bsGeL7OPLNAryRHuAfho9bERmbefb9aDG ZUzrWci/KIa+6Inub88PfDl2UrhnLPZI+b+8XEB/Sae6L32sNvQkr8jWlgzmGO3E I7+PlIoJuWQ0WA== -----END CERTIFICATE-----Generated at Sun Apr 27 00:21:28 2025 by rpki-client