$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft File: MaGF0OsMp4EcWGQl3g6WDhz-ths.mft (raw, json) Hash identifier: UzagUS42JDdIoK9kPhgZmzXUf0jlTap2dekayk7GblQ= Subject key identifier: BB:50:B3:84:FD:7D:B1:06:43:AE:CF:E6:19:2C:85:80:8A:AE:01:2C Authority key identifier: 31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B Certificate issuer: /CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b Certificate serial: 01967266567A5AA922551B7D43FB5A902C42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft Manifest number: 15A6 Signing time: Sat 26 Apr 2025 14:00:31 +0000 Manifest this update: Sat 26 Apr 2025 14:00:31 +0000 Manifest next update: Sun 27 Apr 2025 14:00:31 +0000 Files and hashes: 1: 0zqU-vNXZ2phU0OLDTydQoGFH8Q.roa (hash: +gP0NPBpHn9gACyGVaIVIcNnU3nAFyTkDtrpKge+z2I=) 2: BEWUUb6Sb5YAERA7Rm-cdwFsmF0.roa (hash: +Qt2yDKsz2L2j/WArrE4B6qzTe0DbfXxEvpfQa5HyZw=) 3: LlMngn95TdQ9s1lobSIfFiaxwMc.roa (hash: WeKn9zwaRRHjlRd4WIjiQWXgKdTTEMZ6BTo5nLZ3Ai4=) 4: MaGF0OsMp4EcWGQl3g6WDhz-ths.crl (hash: nHb5F+0iZSIk9YkDqSlIjnbYnRamVI5WC0MzVBKynlA=) 5: QqT-BvbiqSOYuM4Lk4hz0YSVQ1I.roa (hash: F9VEIK5Zux7AgHQDn3EERLEADA0kYEbfVteSN7+buqQ=) 6: SeWVIKVcFZf5OfSUSvJx8xzrGmw.roa (hash: R1Xjt4d6fbhtdYnW5OsTMCBTcoqdj84LM2GJBD6GMIY=) 7: SuAwx53ztZ8nH6iQDl-exiTpB9U.roa (hash: OW4UNz0fPDN3E3BkjgDIvFCnQ13CpXoOp18yw+GY/do=) 8: e9kzaC5aK1AvC-cHsDdx9haP07k.roa (hash: QuaA/YDvF9Gcy4o2L6hDN/avQ+2ifpi3IVCtvCyZW14=) 9: kexkh65vQ7bMWtG8mnCvje3Zp-w.roa (hash: Pg9AL21punrl7WTntjhvGX0o4iTm5IvkXrJIfPr6Vw0=) 10: n-CxE-sLgsFeR17bn7XmAKrCNq0.roa (hash: mwly/ao+vXEKbQeJ+XNXv81dFwjdgRZmDPnXBYLigws=) 11: rELDabhnIWczGPpdcFPbIHRUmiM.roa (hash: C3tLRE4vf2kTivHGIZ50gcjmBmCNhZmWayfOhcglSbg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 14:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:72:66:56:7a:5a:a9:22:55:1b:7d:43:fb:5a:90:2c:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b Validity Not Before: Apr 26 14:00:31 2025 GMT Not After : Apr 27 14:00:31 2025 GMT Subject: CN=bb50b384fd7db10643aecfe6192c85808aae012c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b7:f7:a3:0e:ca:7f:1c:45:25:6b:93:a8:2b: 56:6d:62:90:9c:db:ab:15:49:78:5e:d3:bf:7d:a4: 5a:e8:7d:27:d9:e4:2a:41:3e:3e:83:5f:9a:13:0e: 34:16:69:46:73:03:70:db:80:1c:7e:4f:1d:c8:21: c8:27:f3:06:92:c6:a9:84:56:a3:44:1e:cd:9e:5d: 9d:52:f7:20:71:8a:2a:b7:1e:69:08:d0:54:50:b1: f4:4e:e7:d2:14:3a:72:70:e0:e0:96:8a:c3:59:ca: 0a:f9:9d:ea:e5:e7:df:62:7d:ae:bb:67:6a:44:1c: 3e:2c:c9:c5:11:b4:58:b1:1f:41:21:2b:2e:39:40: 83:35:a3:13:93:80:9b:41:46:80:c2:ff:5c:54:30: 8e:ce:57:62:c2:7a:33:8d:3d:dd:28:8f:ab:c5:79: 63:a0:76:f3:85:f0:da:27:3b:43:7c:4f:04:20:55: a7:de:bb:f1:16:7a:0a:7a:e3:66:46:d4:06:ab:78: 08:16:f6:22:f5:8e:7a:8e:80:aa:10:51:95:d9:3b: 29:1d:7a:c2:b8:8e:25:ad:8a:f1:ce:90:35:05:a6: 0a:20:b3:98:50:10:0f:21:a8:c4:b7:e0:2c:6b:12: 27:2f:90:23:2e:af:39:ec:ef:46:9e:bd:04:45:80: 4d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:50:B3:84:FD:7D:B1:06:43:AE:CF:E6:19:2C:85:80:8A:AE:01:2C X509v3 Authority Key Identifier: keyid:31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:2a:f2:f9:65:85:26:c5:fd:ff:02:68:06:12:48:d7:59:96: b0:1c:72:c8:9a:71:09:2d:3d:ea:b6:96:21:b6:62:78:3f:80: 8b:07:7c:84:d8:32:ba:c3:96:a4:d6:b3:c9:9b:e9:60:34:dc: c2:5b:d7:cd:80:cf:68:13:0b:38:f1:26:92:a0:09:47:a9:46: 9c:9f:d3:cd:4f:39:76:7e:10:24:f8:8c:23:4c:c6:7d:4c:26: 5a:ea:a5:15:88:32:3e:5b:52:36:89:6d:b3:ba:4b:4d:9c:f4: c0:04:b7:ac:73:b6:3d:bd:7e:51:a3:60:65:62:ab:6d:40:f4: f5:11:d2:34:e9:79:73:f6:9f:27:7a:9e:76:0a:77:89:04:0a: 2b:ad:61:d9:54:19:5f:ed:44:40:1d:5f:14:c6:01:60:57:43: 42:36:aa:5c:b4:7a:cb:12:f7:f1:b9:ad:46:f2:44:7f:7a:72: bf:a1:13:0a:5d:c3:d8:30:89:b3:f0:e2:49:5f:5b:04:56:b8: 51:54:19:0f:72:1e:d9:e7:95:f6:49:9a:68:b2:a2:8b:b1:79: ad:72:bf:3b:48:24:2a:3a:bd:4f:ef:45:57:3b:c8:9f:cf:ba: 2b:07:c3:94:c9:be:ff:47:56:33:5d:5d:c5:eb:65:fc:4a:49: a0:64:51:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZyZlZ6WqkiVRt9Q/takCxCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxYTE4NWQwZWIwY2E3ODExYzU4NjQyNWRlMGU5NjBlMWNm ZWI2MWIwHhcNMjUwNDI2MTQwMDMxWhcNMjUwNDI3MTQwMDMxWjAzMTEwLwYDVQQD EyhiYjUwYjM4NGZkN2RiMTA2NDNhZWNmZTYxOTJjODU4MDhhYWUwMTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrf3ow7KfxxFJWuTqCtWbWKQnNur FUl4XtO/faRa6H0n2eQqQT4+g1+aEw40FmlGcwNw24Acfk8dyCHIJ/MGksaphFaj RB7Nnl2dUvcgcYoqtx5pCNBUULH0TufSFDpycODglorDWcoK+Z3q5effYn2uu2dq RBw+LMnFEbRYsR9BISsuOUCDNaMTk4CbQUaAwv9cVDCOzldiwnozjT3dKI+rxXlj oHbzhfDaJztDfE8EIFWn3rvxFnoKeuNmRtQGq3gIFvYi9Y56joCqEFGV2TspHXrC uI4lrYrxzpA1BaYKILOYUBAPIajEt+AsaxInL5AjLq857O9Gnr0ERYBNnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLtQs4T9fbEGQ67P5hkshYCKrgEsMB8GA1UdIwQY MBaAFDGhhdDrDKeBHFhkJd4Olg4c/rYbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWFHRjBPc01wNEVjV0dRbDNnNldEaHotdGhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8wODFjNmUtMWQ2NS00Y2NkLTk2ZjUt MWRjYzg2YzExZTc0LzEvTWFHRjBPc01wNEVjV0dRbDNnNldEaHotdGhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny8wODFjNmUtMWQ2NS00Y2NkLTk2ZjUtMWRjYzg2YzExZTc0 LzEvTWFHRjBPc01wNEVjV0dRbDNnNldEaHotdGhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABCry+WWF JsX9/wJoBhJI11mWsBxyyJpxCS096raWIbZieD+Aiwd8hNgyusOWpNazyZvpYDTc wlvXzYDPaBMLOPEmkqAJR6lGnJ/TzU85dn4QJPiMI0zGfUwmWuqlFYgyPltSNolt s7pLTZz0wAS3rHO2Pb1+UaNgZWKrbUD09RHSNOl5c/afJ3qedgp3iQQKK61h2VQZ X+1EQB1fFMYBYFdDQjaqXLR6yxL38bmtRvJEf3pyv6ETCl3D2DCJs/DiSV9bBFa4 UVQZD3Ie2eeV9kmaaLKii7F5rXK/O0gkKjq9T+9FVzvIn8+6KwfDlMm+/0dWM11d xetl/EpJoGRR5A== -----END CERTIFICATE-----Generated at Sat Apr 26 22:58:24 2025 by rpki-client