$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft File: C6yCgEcArTZTi_hvNMBz6XFDDaU.mft (raw, json) Hash identifier: iH9PSJ9SCfgM3W9ltoMiHADmzYecJ+NZipgtQWTWrm4= Subject key identifier: 0E:73:DA:22:E2:07:BE:5A:E7:3A:4F:1B:DB:34:9A:11:0D:33:4B:28 Authority key identifier: 0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5 Certificate issuer: /CN=0bac82804700ad36538bf86f34c073e971430da5 Certificate serial: 0196790D1D7B5B393AB096A26F6C1D92F926 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft Manifest number: 151E Signing time: Sun 27 Apr 2025 21:00:24 +0000 Manifest this update: Sun 27 Apr 2025 21:00:24 +0000 Manifest next update: Mon 28 Apr 2025 21:00:24 +0000 Files and hashes: 1: 1Rd2o3xUjPYq6-ROGbojsnIAO7o.roa (hash: cJibfgam1opzds5Qh9r7Y5ffttnidwSOVT40ptzFnqs=) 2: 3BgoLFWZ9YgbC6oPkKTi3o_J_gQ.roa (hash: S8E8XfDmes95rq1PbjLgkDvVZJpWeDUS/8l576aU10U=) 3: 7bJ_SXsvQs5jd90zxR_xlvABeGo.roa (hash: m0ZQ2Y2DbXV8jV6KvTNs6fUZ/bk3yiFcpgd8GYS9O7Q=) 4: C6yCgEcArTZTi_hvNMBz6XFDDaU.crl (hash: rO/OpM63IUmCiZ8amwBXuEuWhbjOjSmv4aEmAbkZBis=) 5: EJIUsUOKvSLerwNQFS-Out5zZuM.roa (hash: D433E6UiMyX9KdcjAcomX19JFn+CfTOeAqT8DsBwSkY=) 6: IYymNdWawqstgCP4XTcQ0LRxyO4.roa (hash: zZeH4Zhf/0r9N1702in9DCWq7U55L0ULISwTrHj2H68=) 7: L1Bz6qAa7Tw2r0koEROI1LNkc8U.roa (hash: DocEMWhWVMmnhBegXTSWZpGGhsBAl4jcHIRujEDNT44=) 8: b_Dm6TuKr2O9F9em_a6cktDchPg.roa (hash: ehArjKJWDMxsQnB7k5Ijrml5MK5YWi9DCvAWzUWkArc=) 9: vdMwrE1WRBo6tPAM0c8ANEH4m7w.roa (hash: aAOimEwL2ZyXBynFWKnhjaaS/YCd7rqkh4wnbJ4qboQ=) 10: xkRsFChgw8FgF1z4ealSBYfjSiw.roa (hash: c2XTA6ndUBR9DMhPW66OSPqlDjn7RwF/yQC+0Ynbm/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 16:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:79:0d:1d:7b:5b:39:3a:b0:96:a2:6f:6c:1d:92:f9:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bac82804700ad36538bf86f34c073e971430da5 Validity Not Before: Apr 27 21:00:24 2025 GMT Not After : Apr 28 21:00:24 2025 GMT Subject: CN=0e73da22e207be5ae73a4f1bdb349a110d334b28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:e9:83:b3:86:92:d8:df:ff:a8:67:4f:f2:67: f2:54:6c:fa:36:f7:83:9d:9e:9c:32:54:8f:db:74: 8d:ca:49:a7:11:40:45:2a:2f:7b:07:31:95:44:fc: c2:fe:09:30:49:c9:38:b1:b7:e8:f2:0e:ce:5c:c1: f8:4e:c9:09:fb:ad:a7:92:46:a0:f1:f4:09:4d:cb: b7:19:ce:1b:01:c2:ff:2e:e1:be:f4:41:b4:48:bb: 21:ec:cc:0b:98:d8:84:79:0f:0f:5c:0a:9b:ec:eb: 60:74:9f:e1:fa:dd:ed:08:77:d5:7a:3b:b7:ba:fc: 62:59:26:71:68:51:e2:9d:64:8d:97:cf:5f:60:42: 1e:7f:69:02:81:c1:45:6a:72:b9:6d:b5:49:42:52: c4:c8:85:3e:52:1b:90:7e:8d:b2:d0:c3:58:94:55: b6:3d:03:05:3e:94:36:8f:20:c0:aa:39:32:c7:80: 56:8e:0f:b3:90:f4:e0:5d:9a:b4:e2:75:75:1d:5f: 24:cc:19:8f:d7:da:a4:02:5e:38:55:8e:97:43:7f: b7:aa:e7:67:52:e2:72:38:09:d5:eb:ad:14:eb:33: 7c:2f:01:87:74:1f:36:1b:3e:67:e9:04:1a:72:f5: 52:11:f1:ef:09:c1:82:11:cf:57:2f:ed:1d:b2:7e: 0b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:73:DA:22:E2:07:BE:5A:E7:3A:4F:1B:DB:34:9A:11:0D:33:4B:28 X509v3 Authority Key Identifier: keyid:0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:ab:98:ef:9e:1c:8d:e2:b8:5e:a4:2b:60:53:eb:88:a5:62: 5e:85:05:7a:97:07:85:a3:3e:ea:d1:93:4a:c6:b7:49:8d:dc: 66:41:cd:e4:90:74:2c:dd:b8:6d:c6:35:d2:2e:56:f7:ef:cd: 65:3d:fe:98:25:07:25:97:46:47:bb:af:2d:56:75:6b:79:0d: b4:dc:ff:6b:29:61:e5:a6:bc:4f:a6:ca:7a:69:01:31:2b:ad: 3a:e9:9d:3b:e8:38:96:d7:cd:ff:42:82:23:7f:4b:01:4a:e2: b9:05:8e:24:d6:4e:c3:d6:6d:ee:8a:cc:a2:8b:75:60:41:9c: 08:b4:52:85:6b:72:67:25:04:c2:a8:3d:fc:27:5f:a9:e6:0d: dd:20:ec:e2:7a:da:e8:b9:38:08:db:0e:69:69:31:99:df:41: 9c:a9:04:a2:53:9c:8c:74:0f:29:95:ab:12:63:74:c1:30:3f: 78:d0:3f:5c:ba:1e:9f:b8:3b:5f:34:19:1f:13:ca:f6:c6:80: 2c:bc:5f:a4:6c:c3:e1:da:ac:3b:5f:88:ec:b7:1e:18:4e:b9: 3a:1e:86:d7:aa:3e:7e:66:be:84:4b:d0:26:56:80:a8:88:7b: 6c:1a:3c:8c:14:40:0a:09:a4:6d:52:2e:fb:38:58:93:76:83: 69:b6:ce:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ5DR17Wzk6sJaib2wdkvkmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiYWM4MjgwNDcwMGFkMzY1MzhiZjg2ZjM0YzA3M2U5NzE0 MzBkYTUwHhcNMjUwNDI3MjEwMDI0WhcNMjUwNDI4MjEwMDI0WjAzMTEwLwYDVQQD EygwZTczZGEyMmUyMDdiZTVhZTczYTRmMWJkYjM0OWExMTBkMzM0YjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8umDs4aS2N//qGdP8mfyVGz6NveD nZ6cMlSP23SNykmnEUBFKi97BzGVRPzC/gkwSck4sbfo8g7OXMH4TskJ+62nkkag 8fQJTcu3Gc4bAcL/LuG+9EG0SLsh7MwLmNiEeQ8PXAqb7OtgdJ/h+t3tCHfVeju3 uvxiWSZxaFHinWSNl89fYEIef2kCgcFFanK5bbVJQlLEyIU+UhuQfo2y0MNYlFW2 PQMFPpQ2jyDAqjkyx4BWjg+zkPTgXZq04nV1HV8kzBmP19qkAl44VY6XQ3+3qudn UuJyOAnV660U6zN8LwGHdB82Gz5n6QQacvVSEfHvCcGCEc9XL+0dsn4LuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA5z2iLiB75a5zpPG9s0mhENM0soMB8GA1UdIwQY MBaAFAusgoBHAK02U4v4bzTAc+lxQw2lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzZ5Q2dFY0FyVFpUaV9odk5NQno2WEZERGFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9hNzI4OTEtZGUyZi00MTU2LWEwMTEt NDNmNjRiY2VhOTlkLzEvQzZ5Q2dFY0FyVFpUaV9odk5NQno2WEZERGFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9hNzI4OTEtZGUyZi00MTU2LWEwMTEtNDNmNjRiY2VhOTlk LzEvQzZ5Q2dFY0FyVFpUaV9odk5NQno2WEZERGFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ6uY754c jeK4XqQrYFPriKViXoUFepcHhaM+6tGTSsa3SY3cZkHN5JB0LN24bcY10i5W9+/N ZT3+mCUHJZdGR7uvLVZ1a3kNtNz/aylh5aa8T6bKemkBMSutOumdO+g4ltfN/0KC I39LAUriuQWOJNZOw9Zt7orMoot1YEGcCLRShWtyZyUEwqg9/CdfqeYN3SDs4nra 6Lk4CNsOaWkxmd9BnKkEolOcjHQPKZWrEmN0wTA/eNA/XLoen7g7XzQZHxPK9saA LLxfpGzD4dqsO1+I7LceGE65Oh6G16o+fma+hEvQJlaAqIh7bBo8jBRACgmkbVIu +zhYk3aDabbOuQ== -----END CERTIFICATE-----Generated at Mon Apr 28 02:04:28 2025 by rpki-client