$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft File: Kfp91j8uLYe194UAk8dDu_vhTkQ.mft (raw, json) Hash identifier: JAWbHC8mhz3f5oISaH0VinOIDcbf842NeTVW59Ytw9I= Subject key identifier: F0:87:7F:91:3E:64:56:9A:39:1D:8B:EE:A2:FA:68:FF:04:B8:3D:47 Authority key identifier: 29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44 Certificate issuer: /CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44 Certificate serial: 0196748C301EBA3D04940219611F00209AB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft Manifest number: 03BF Signing time: Sun 27 Apr 2025 00:01:06 +0000 Manifest this update: Sun 27 Apr 2025 00:01:06 +0000 Manifest next update: Mon 28 Apr 2025 00:01:06 +0000 Files and hashes: 1: 05o0ilxpLPFj724SFa-brN8vzXk.roa (hash: CPN9MrS7MYDAN7zH2nr9vN3ZoOoKTAOXjde0z1Y3r4g=) 2: 5h88FMdyJ4BKxPsdcgHQyCeiggw.roa (hash: Owv+GMEcs1uONJHFnOZ4mKs3NxskXYOAjZpyCXtz47Y=) 3: 7HfOX3VXYMpd2AIPBc7-S-uMs_8.roa (hash: k5M6cr3ux0zaC3HrK4AQu/eEDnL7gIrijJy4BZ0Nw4M=) 4: 7OOt-MnHsX07hiPdKHIMZaJ8wrg.roa (hash: 7nZ90mtRGZWhPbm1Puw7IzZkWIgR1R3W35D51WFY05w=) 5: BT9PpbhARp2PKEupubiiio8TvBc.roa (hash: PoRHUsj11iEWOHUhXg6p185DLswF97IfYO5dpNwM+4k=) 6: F1OWe033_DuZ-JjrisCh6PYvi1s.roa (hash: bLONjsizRZ/N6QYxCW6KHMn5K6t8a7PJWP3/t57vEJk=) 7: K3PHjFr5iZQBePAHzZD7020H3CQ.roa (hash: cYqNDwyqOAThtjZwtvIGK4yhgMYUiG7kHacZddA60SQ=) 8: Kfp91j8uLYe194UAk8dDu_vhTkQ.crl (hash: xuvQgbEzkt8XfJRoRr/Vb8uOK7CXl3OKCqut8VCS3Wg=) 9: PwDUcjqBkiIEULzXxKTVGmmTWG4.roa (hash: FRJ/j45X7Ib31MDYnkP96sRJLV09a4YTIEwHH8GRm+c=) 10: SGJaxM1tftN6eWW_JhWZIZdq6Hs.roa (hash: i3+GB/wkLsPOj8TleSkbJUTDI0kj7dMA6dFb0QRWP+8=) 11: X-V1c33BeHLMq6YPZ6efCsl3cMM.roa (hash: qD2GqEyAmd2okDBw6OR3DlzX+O8r0bDHBHVLHEg9U3g=) 12: X6A7ZOxQkF-N5TBF6hNZ0D-sPxQ.roa (hash: sOJamuYIhYJWJLrvAE1wd1xA2gh7NgXmer7n43KBLdc=) 13: Y68HM_eE8K1w4SS6fxm68_4816Q.roa (hash: j5XSBxx8t0t2IG8jaeix/JPoU5Vp2pcHE0yvoVN43nY=) 14: eM7RoSEq3C715iKtcwBUqsiVTDM.roa (hash: U7xNVv9g2fKrI4EOjzXQcIX1ekwna/aEJqfXxfKaR90=) 15: u-M1H4DlyfJcf3cI4KPf60AAf5E.roa (hash: rqvHkJ1B+GOatMUS6IQfjBMvmK91Ea22MfD3TS1yuVM=) 16: us6ukJjPwguMUHmhc8SpjnjeHOE.roa (hash: RuHDwxtF2zmik+S8Nhu0t8NrGvwHVQJraNmp1nORf/c=) 17: zvMqPtiLMOCgjOxqm6euJp83YNA.roa (hash: jIvx8RFgHAKB/kauSEcxDljiE/0sDn1/Jfcw3a0iCKU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 17:20:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:74:8c:30:1e:ba:3d:04:94:02:19:61:1f:00:20:9a:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44 Validity Not Before: Apr 27 00:01:06 2025 GMT Not After : Apr 28 00:01:06 2025 GMT Subject: CN=f0877f913e64569a391d8beea2fa68ff04b83d47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fd:a4:a8:75:e3:f0:d9:cb:59:45:d5:9a:26: c3:45:49:1c:40:0c:44:25:52:d7:a0:a0:8b:aa:ca: f5:92:b0:2d:ef:62:12:be:e4:1e:8c:ff:8a:cf:25: 0f:65:0f:f4:fa:d2:95:16:d3:77:0f:32:de:da:78: 10:4f:a4:e8:ff:79:82:c1:60:e5:e5:9d:ad:d4:18: a6:51:96:43:49:5e:77:fc:fb:3a:b1:40:f7:41:96: dc:82:dd:6d:8e:dc:77:24:f0:8d:bb:9f:bd:21:f2: 74:9e:33:9c:a6:1d:73:d6:a8:63:7e:ea:f2:31:a4: 78:38:99:c2:44:e0:05:94:44:36:9f:f5:bb:2b:89: 96:c6:1c:33:ba:9d:42:e1:90:70:3e:ae:2f:45:dc: 99:d4:97:34:86:c0:10:07:5b:37:2d:70:34:c0:48: e4:f8:cf:3a:c3:be:42:61:6e:55:95:d7:aa:d1:d5: e9:9b:4d:ed:e4:16:6a:6f:bd:3b:16:6f:7e:a1:ee: 51:d2:cc:9f:c4:b9:a8:fd:98:10:c8:58:1e:01:f7: 55:7b:9b:52:96:3d:d3:cb:86:57:da:59:49:12:a2: 58:f4:cf:e1:f4:6a:78:23:dd:49:72:57:c3:5f:8f: 6c:8f:cc:72:c8:12:08:10:fe:d2:9b:f6:08:53:c7: 76:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:87:7F:91:3E:64:56:9A:39:1D:8B:EE:A2:FA:68:FF:04:B8:3D:47 X509v3 Authority Key Identifier: keyid:29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:5a:94:d7:82:e2:8c:6c:79:56:87:75:42:29:57:4a:55:fd: d9:7d:8a:34:4c:4f:b6:d9:fc:21:ba:04:68:31:8e:3c:b9:e1: 77:44:f3:19:88:50:17:5a:2b:08:b8:00:fe:18:5f:74:67:23: 1e:b1:a7:7e:80:f6:da:c2:8f:16:c5:ec:b7:39:f9:0c:70:67: d1:0c:d9:7c:46:bd:ab:95:46:5a:72:3e:dc:1c:82:ae:32:1a: d6:86:50:33:b5:80:f4:d2:09:75:16:42:fe:02:03:be:7e:23: 2c:6e:e8:4c:c6:00:c0:49:41:c5:da:91:3c:90:f6:bb:cf:0e: 76:0b:98:58:92:43:8d:63:85:e0:e5:81:d5:7f:4f:be:33:3a: 70:1e:a2:fd:9d:2a:69:0f:2d:0a:7a:eb:24:57:f8:91:8e:f2: 53:74:49:c5:1f:53:ad:e6:c5:94:93:20:0b:3f:1c:c2:a9:bc: 08:b6:a3:86:81:4d:57:56:6d:bc:fa:04:ca:2e:b6:c8:c9:cc: 30:23:38:17:9b:fd:a1:c9:8d:a3:d9:dc:0b:ec:b6:47:4f:76: c9:90:c1:72:bf:fc:1f:39:5e:5f:5f:27:fa:e8:dc:15:4f:c4: da:6a:a6:9b:02:51:99:6a:82:c8:66:c9:62:d1:49:bb:bc:4c: c6:a2:3c:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ0jDAeuj0ElAIZYR8AIJq2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZmE3ZGQ2M2YyZTJkODdiNWY3ODUwMDkzYzc0M2JiZmJl MTRlNDQwHhcNMjUwNDI3MDAwMTA2WhcNMjUwNDI4MDAwMTA2WjAzMTEwLwYDVQQD EyhmMDg3N2Y5MTNlNjQ1NjlhMzkxZDhiZWVhMmZhNjhmZjA0YjgzZDQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/2kqHXj8NnLWUXVmibDRUkcQAxE JVLXoKCLqsr1krAt72ISvuQejP+KzyUPZQ/0+tKVFtN3DzLe2ngQT6To/3mCwWDl 5Z2t1BimUZZDSV53/Ps6sUD3QZbcgt1tjtx3JPCNu5+9IfJ0njOcph1z1qhjfury MaR4OJnCROAFlEQ2n/W7K4mWxhwzup1C4ZBwPq4vRdyZ1Jc0hsAQB1s3LXA0wEjk +M86w75CYW5Vldeq0dXpm03t5BZqb707Fm9+oe5R0syfxLmo/ZgQyFgeAfdVe5tS lj3Ty4ZX2llJEqJY9M/h9Gp4I91JclfDX49sj8xyyBIIEP7Sm/YIU8d2nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPCHf5E+ZFaaOR2L7qL6aP8EuD1HMB8GA1UdIwQY MBaAFCn6fdY/Li2HtfeFAJPHQ7v74U5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8yYzBjYmYtMTFmNy00YjZkLWI4OGUt NzlmN2I2ZWE3YzE0LzEvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8yYzBjYmYtMTFmNy00YjZkLWI4OGUtNzlmN2I2ZWE3YzE0 LzEvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATFqU14Li jGx5Vod1QilXSlX92X2KNExPttn8IboEaDGOPLnhd0TzGYhQF1orCLgA/hhfdGcj HrGnfoD22sKPFsXstzn5DHBn0QzZfEa9q5VGWnI+3ByCrjIa1oZQM7WA9NIJdRZC /gIDvn4jLG7oTMYAwElBxdqRPJD2u88OdguYWJJDjWOF4OWB1X9PvjM6cB6i/Z0q aQ8tCnrrJFf4kY7yU3RJxR9TrebFlJMgCz8cwqm8CLajhoFNV1ZtvPoEyi62yMnM MCM4F5v9ocmNo9ncC+y2R092yZDBcr/8HzleX18n+ujcFU/E2mqmmwJRmWqCyGbJ YtFJu7xMxqI8HQ== -----END CERTIFICATE-----Generated at Sun Apr 27 03:19:03 2025 by rpki-client