$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft File: hPgk0y3xpRE9ghATRdeFo4rdveU.mft (raw, json) Hash identifier: kJZxxC3HeJNmEawamozU18/K/T4Sx8RZ5zTuIuDQnjU= Subject key identifier: 8F:DA:70:85:96:63:C4:E3:1C:D7:0D:8A:F8:E6:BF:D1:1A:BD:A3:6D Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5 Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5 Certificate serial: 01967454A241291C80DF02AAF576B2A99557 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft Manifest number: 158F Signing time: Sat 26 Apr 2025 23:00:25 +0000 Manifest this update: Sat 26 Apr 2025 23:00:25 +0000 Manifest next update: Sun 27 Apr 2025 23:00:25 +0000 Files and hashes: 1: 1-ULSrC7qERPJ5s0LHG6wQSokzXA.roa (hash: M565zMsE8K/YoAfcIK7Sfb56kLhbnQFGZfCJXZeA4+c=) 2: 4CDpfs04Q6BhM73eRs3ynYW0oqc.roa (hash: SptP34QoXw99zxxZStKLiJW4s4aN8DzBBvEgnUw9cUs=) 3: PNjb4X8kJscwHMXMiyuXtbGZX5o.roa (hash: t6ZmoP2V9ihNwE35xzcIYI2VvpWaOI2bhHX5db7NWXc=) 4: RJwe2BfOH2L8b2xvYWAb7A5I8YI.roa (hash: Ua7R/78tPOt1hUU0nncJ70Fr//DWyVNm+5rSWWhtzSo=) 5: SNFt0lB0U4IpDK2M6jbg0nixPuw.roa (hash: ZkAQcXTk1wy7KfuKPlx7eg9LZ93/MdGfH+lnC1SNvbA=) 6: ZpIOx5_wULQ6fk_u3FoWz7KE0YQ.roa (hash: xlJGrnQ3RAzHyUU8Evq1z4uBR31JBslascWxforueJ0=) 7: c39OdSugEhhkTfEPcCwd1BnFeWg.roa (hash: D3rVYMF6ZEkgIoR+XLBvFbt0BnRz80lo8KFUojO0nhs=) 8: hPgk0y3xpRE9ghATRdeFo4rdveU.crl (hash: +RKE526axF9TYx5FfsjBXyMhgE5GIIGn9KbyFzb6HE0=) 9: jZZQ117MrYD6QSdQsNATRgEh9Js.roa (hash: F74W3mlUaYmiXG4eRCyJ8iNyFuD8U//X0zL2pTBsPr0=) 10: kSIH-t1YlaXWMTafK3y9G8k2BtE.roa (hash: u8I0qLPnotq4HtUH8xPoZUCuSzCQZnlgK1v3TzivBbU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 23:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:74:54:a2:41:29:1c:80:df:02:aa:f5:76:b2:a9:95:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5 Validity Not Before: Apr 26 23:00:25 2025 GMT Not After : Apr 27 23:00:25 2025 GMT Subject: CN=8fda70859663c4e31cd70d8af8e6bfd11abda36d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:47:a1:18:df:bf:90:4d:32:4c:90:39:52:a4: 79:56:01:6a:b3:da:8a:ba:80:cf:84:07:48:20:65: 38:39:78:04:06:a3:fb:ea:6e:ed:6b:43:8d:49:68: 7f:67:e1:00:58:8a:11:a5:d2:cd:21:96:84:4d:2e: c7:d5:d6:d2:36:ac:c7:1a:67:8c:e9:14:05:5d:fe: 8b:c8:40:72:19:20:72:03:5c:a9:7e:d5:55:c0:c2: c2:26:d2:94:c2:53:72:ba:7d:98:c1:88:15:ba:18: 51:88:e3:c9:88:7f:08:32:d8:23:fa:69:a7:33:98: 28:f4:fd:8d:8d:6c:c3:7e:28:16:cb:c5:83:de:ce: c7:cb:5a:01:26:de:b1:4a:80:5f:3f:06:7c:75:9e: c7:8a:13:66:99:53:28:b6:7f:e0:5f:5f:5a:ee:01: f2:3a:00:03:5d:ac:bf:74:4c:07:40:18:94:f6:8a: bd:31:c4:06:1c:d1:50:2b:65:ab:7d:5f:f2:db:40: 02:f6:e5:6b:d4:d5:96:03:9d:2d:96:66:d0:ca:26: c6:43:9f:0b:ea:d2:93:e7:3a:b5:45:26:a2:0a:af: 46:84:73:6b:dd:64:90:22:a6:ff:1b:f3:21:38:25: 72:dd:d5:4c:62:1c:ba:dd:01:81:0b:b1:01:da:c1: ea:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:DA:70:85:96:63:C4:E3:1C:D7:0D:8A:F8:E6:BF:D1:1A:BD:A3:6D X509v3 Authority Key Identifier: keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:90:a0:b8:03:ad:1b:10:c4:14:5f:5e:7c:2d:c6:23:b8:71: 50:a1:25:d6:d9:c2:0c:aa:76:f3:97:27:eb:7f:0e:1b:f4:b0: e5:6d:32:f3:9f:30:69:aa:76:0f:67:51:e8:f0:e8:67:03:73: be:66:47:c5:ae:90:e9:02:16:95:9c:a5:8a:2c:38:68:b5:2c: 96:ba:6b:b1:f2:5b:46:93:98:a0:4c:b1:ef:40:16:e1:b9:a9: 67:fc:58:f7:fa:f4:fb:33:09:c8:ec:83:d6:3c:0d:8b:26:0f: 39:03:af:ea:63:c7:d4:56:e5:8d:8c:0a:f9:b8:20:85:c9:dc: ee:5d:48:36:1a:0a:69:34:cd:2b:97:a4:4a:c7:af:39:6d:de: 20:67:be:ec:40:d1:f2:01:67:00:91:50:bd:40:8d:1e:43:c7: 06:15:75:df:c0:0f:a6:18:cf:74:5e:31:65:42:f7:f3:31:43: c9:a9:cb:cd:8b:da:1f:31:c3:a3:17:13:4a:1d:29:27:52:70: 23:70:9c:1f:6c:20:d3:ca:bf:40:79:a5:97:de:1b:2e:8e:85: bc:b0:7d:d6:c9:51:03:83:f0:c7:7f:a0:4d:d7:53:12:8d:1a: 2b:84:a6:eb:1b:b4:ca:ef:b9:02:a3:48:af:de:51:5a:ee:9a: 0f:e1:56:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ0VKJBKRyA3wKq9XayqZVXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0ZjgyNGQzMmRmMWE1MTEzZDgyMTAxMzQ1ZDc4NWEzOGFk ZGJkZTUwHhcNMjUwNDI2MjMwMDI1WhcNMjUwNDI3MjMwMDI1WjAzMTEwLwYDVQQD Eyg4ZmRhNzA4NTk2NjNjNGUzMWNkNzBkOGFmOGU2YmZkMTFhYmRhMzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUehGN+/kE0yTJA5UqR5VgFqs9qK uoDPhAdIIGU4OXgEBqP76m7ta0ONSWh/Z+EAWIoRpdLNIZaETS7H1dbSNqzHGmeM 6RQFXf6LyEByGSByA1ypftVVwMLCJtKUwlNyun2YwYgVuhhRiOPJiH8IMtgj+mmn M5go9P2NjWzDfigWy8WD3s7Hy1oBJt6xSoBfPwZ8dZ7HihNmmVMotn/gX19a7gHy OgADXay/dEwHQBiU9oq9McQGHNFQK2WrfV/y20AC9uVr1NWWA50tlmbQyibGQ58L 6tKT5zq1RSaiCq9GhHNr3WSQIqb/G/MhOCVy3dVMYhy63QGBC7EB2sHq/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI/acIWWY8TjHNcNivjmv9EavaNtMB8GA1UdIwQY MBaAFIT4JNMt8aURPYIQE0XXhaOK3b3lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85ZDY1YmItYWI0Zi00M2FhLWJiYTgt NDM3Mzk0OTM4YzUyLzEvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS85ZDY1YmItYWI0Zi00M2FhLWJiYTgtNDM3Mzk0OTM4YzUy LzEvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhZCguAOt GxDEFF9efC3GI7hxUKEl1tnCDKp285cn638OG/Sw5W0y858waap2D2dR6PDoZwNz vmZHxa6Q6QIWlZyliiw4aLUslrprsfJbRpOYoEyx70AW4bmpZ/xY9/r0+zMJyOyD 1jwNiyYPOQOv6mPH1FbljYwK+bgghcnc7l1INhoKaTTNK5ekSsevOW3eIGe+7EDR 8gFnAJFQvUCNHkPHBhV138APphjPdF4xZUL38zFDyanLzYvaHzHDoxcTSh0pJ1Jw I3CcH2wg08q/QHmll94bLo6FvLB91slRA4Pwx3+gTddTEo0aK4Sm6xu0yu+5AqNI r95RWu6aD+FWSg== -----END CERTIFICATE-----Generated at Sun Apr 27 09:16:31 2025 by rpki-client