$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft File: tOgroXFdaurlsBAnJf_gyDRzXX0.mft (raw, json) Hash identifier: rjguVjXkCjaAGxmIT1QvR19ArrstJSta63pl0xyIJ6Q= Subject key identifier: CC:DE:18:5C:B9:0C:8C:8E:2A:73:0C:B3:05:A4:F3:08:9A:E1:88:05 Authority key identifier: B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D Certificate issuer: /CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d Certificate serial: 0196759E99D4C3889BB33C1BC5DD33D45616 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft Manifest number: 0CFD Signing time: Sun 27 Apr 2025 05:00:50 +0000 Manifest this update: Sun 27 Apr 2025 05:00:50 +0000 Manifest next update: Mon 28 Apr 2025 05:00:50 +0000 Files and hashes: 1: 69jsCPkwXK1lmTxeQTyCID9PpjA.roa (hash: h/Q47E5oO3l5JxeekNZr7l4rqZH5SyA0969VUEHNB8w=) 2: 9MVV1yAh59mTgEP_W258bMa49_o.roa (hash: iCN3glju44EdxjBrGRw+NZhFmqg56yUA7pS6/PNweyY=) 3: AjV2rlIwTElr058YXLjGHHrdXf0.roa (hash: LTFD7RWDdMyUwIhuINghYkedTIuVGScYQK467Diulf0=) 4: Dgr2wvOQnRz5hgawqSG0QB7Wpf8.roa (hash: qz1bNfdEE/9TcJfQDqdc+8FtR45UoCnUkyfUGSABkmQ=) 5: ObtlGayrPGhbC0NJB3cANhdfN9g.roa (hash: IXODRFBoDBQAcQ/y7+mqgK85yVkykmHrcIsLk/+rl+k=) 6: RzTS_aVg4A3thhT1xHxtMXq_vOI.roa (hash: zu1mzofX6iUkewhCXeSVvIWnMGeLEK4TikiEna45T0w=) 7: VifVBKjqmDhUgid5BLElJTuQJo4.roa (hash: WI5+mxqhucetVt6cCUvKQ5QuoJnG/kLcpHeXlC1Yb5Y=) 8: agCunAIMbiFUpVXyoVcRfE7xh3E.roa (hash: 12EZuxX19r69+S96SCYBCKtQN4XtGc150mYeWjkdyLo=) 9: lKCL8VeF7spgo1KPqTl3MnMrJFU.roa (hash: G5kvKqbW+q0BKre+iGyFYRJgxgTgTCaLSiQqwrZLbuM=) 10: tOgroXFdaurlsBAnJf_gyDRzXX0.crl (hash: efNiaTonynPNxJzeL6ChNSPVZ3SU7Qub1iO4uQT65KE=) 11: wZZIVhI5EfN-k3jGubu94P9ytuo.roa (hash: fmC0r46A5+YZYWIPTFs/O2YKObhY3jYAxJEcyLgw5E8=) 12: yX3EF5wX9eXnrzIP9r_Bcz7W9Jw.roa (hash: /9zJEvjaN9ESiBxyrI/Lintckz9va2+vfCnzkJq6r6k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 05:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:75:9e:99:d4:c3:88:9b:b3:3c:1b:c5:dd:33:d4:56:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d Validity Not Before: Apr 27 05:00:50 2025 GMT Not After : Apr 28 05:00:50 2025 GMT Subject: CN=ccde185cb90c8c8e2a730cb305a4f3089ae18805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ff:ef:40:2a:8e:fe:d7:77:6f:26:5b:b0:da: de:93:cc:72:d1:24:1c:6d:05:33:0e:bc:b0:d0:7a: a3:1a:19:eb:6f:07:d8:dc:b3:f2:4f:6c:8b:3e:73: 3b:47:11:a3:89:d3:c7:4f:0c:a1:92:c1:c8:d1:8c: ed:43:04:52:1f:38:55:2b:77:0d:11:10:cf:70:b5: 6b:aa:17:1f:19:7a:90:1b:d1:73:cd:97:02:5a:09: 52:7d:6c:6f:ea:37:41:85:ab:3e:1d:9c:30:6d:87: 61:8c:c0:6d:7a:96:4d:51:95:cd:3b:08:b4:15:0d: 89:29:4d:4e:56:cc:ee:b1:88:59:91:4b:10:b2:7b: 82:bb:b7:8e:fa:7b:b4:c3:4f:c0:5f:73:b1:ec:ef: e0:22:99:b0:40:83:0a:0b:6b:82:6a:ab:bf:59:a5: 82:ac:c0:ef:9f:93:c9:21:f2:5d:cb:f0:ab:01:15: 74:d8:9e:08:da:8a:cb:0a:5f:ce:32:56:d7:31:36: e3:d8:5f:8c:d7:da:0e:8b:9b:55:9b:b1:92:c9:04: 9a:4f:37:1d:91:28:e8:26:6c:95:90:07:3a:9e:23: 11:fc:8d:bd:c4:c0:7d:58:06:f9:dc:f2:64:ac:d3: 61:55:ab:18:37:1d:88:d5:a8:0d:44:d0:72:c9:f4: 7b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:DE:18:5C:B9:0C:8C:8E:2A:73:0C:B3:05:A4:F3:08:9A:E1:88:05 X509v3 Authority Key Identifier: keyid:B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:00:bc:0e:69:bb:67:94:97:26:2c:79:46:13:61:a8:a6:df: 14:42:27:68:dd:6e:ac:56:33:68:0f:f0:43:de:40:2d:9e:17: 5b:d8:a9:12:2e:a1:be:3e:b2:b7:e9:2f:ea:b8:3b:33:3b:33: 43:93:21:56:1f:1c:ec:97:cc:89:d9:05:4c:79:55:88:8c:5a: 2e:a0:3a:68:ad:d6:90:35:45:0f:41:12:02:ad:b4:d1:cd:c2: ef:f4:8d:0e:86:67:f8:09:0f:77:ba:a4:38:a6:cb:10:c5:b2: 31:b1:ca:23:0b:a7:0d:43:d7:61:1f:46:31:40:6a:1e:ba:ff: 72:69:1d:5a:aa:ee:1c:a9:66:18:f0:0a:64:f9:67:12:76:06: aa:b1:ec:2a:df:83:da:38:53:4c:9b:16:79:29:9b:a0:49:97: 11:04:1a:75:38:46:1b:45:a9:47:57:59:4f:9e:71:34:c2:fd: 88:4a:08:78:98:42:12:ed:c1:69:85:f6:86:df:67:3d:ca:3b: 14:26:2c:52:68:15:43:83:98:e2:9f:6a:0f:28:b0:a0:91:a3: 06:99:a7:84:f3:41:7a:32:10:e4:40:5b:57:e9:b6:78:2e:b8: cf:cd:0e:56:59:fc:5b:84:7d:b6:9b:2b:40:3b:26:be:64:ef: b8:c3:ac:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ1npnUw4ibszwbxd0z1FYWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZTgyYmExNzE1ZDZhZWFlNWIwMTAyNzI1ZmZlMGM4MzQ3 MzVkN2QwHhcNMjUwNDI3MDUwMDUwWhcNMjUwNDI4MDUwMDUwWjAzMTEwLwYDVQQD EyhjY2RlMTg1Y2I5MGM4YzhlMmE3MzBjYjMwNWE0ZjMwODlhZTE4ODA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0P/vQCqO/td3byZbsNrek8xy0SQc bQUzDryw0HqjGhnrbwfY3LPyT2yLPnM7RxGjidPHTwyhksHI0YztQwRSHzhVK3cN ERDPcLVrqhcfGXqQG9FzzZcCWglSfWxv6jdBhas+HZwwbYdhjMBtepZNUZXNOwi0 FQ2JKU1OVszusYhZkUsQsnuCu7eO+nu0w0/AX3Ox7O/gIpmwQIMKC2uCaqu/WaWC rMDvn5PJIfJdy/CrARV02J4I2orLCl/OMlbXMTbj2F+M19oOi5tVm7GSyQSaTzcd kSjoJmyVkAc6niMR/I29xMB9WAb53PJkrNNhVasYNx2I1agNRNByyfR7nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMzeGFy5DIyOKnMMswWk8wia4YgFMB8GA1UdIwQY MBaAFLToK6FxXWrq5bAQJyX/4Mg0c119MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85MTUxYzAtMzMyNi00ODAxLTkzNjMt YzdkMTk5MzBkNjZkLzEvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy85MTUxYzAtMzMyNi00ODAxLTkzNjMtYzdkMTk5MzBkNjZk LzEvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgQC8Dmm7 Z5SXJix5RhNhqKbfFEInaN1urFYzaA/wQ95ALZ4XW9ipEi6hvj6yt+kv6rg7Mzsz Q5MhVh8c7JfMidkFTHlViIxaLqA6aK3WkDVFD0ESAq200c3C7/SNDoZn+AkPd7qk OKbLEMWyMbHKIwunDUPXYR9GMUBqHrr/cmkdWqruHKlmGPAKZPlnEnYGqrHsKt+D 2jhTTJsWeSmboEmXEQQadThGG0WpR1dZT55xNML9iEoIeJhCEu3BaYX2ht9nPco7 FCYsUmgVQ4OY4p9qDyiwoJGjBpmnhPNBejIQ5EBbV+m2eC64z80OVln8W4R9tpsr QDsmvmTvuMOsLA== -----END CERTIFICATE-----Generated at Sun Apr 27 15:41:50 2025 by rpki-client