$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft File: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft (raw, json) Hash identifier: QwK7UBOmHx0dVYmYL2DLwHEet98ZJAOsbEHmOZtwbwk= Subject key identifier: 1F:9B:EF:04:EC:C6:28:C5:A3:87:E6:FD:03:30:1C:94:6D:8E:C9:22 Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Certificate serial: 01967266150BA37EF1FC7E9310A103F8BDE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft Manifest number: 1536 Signing time: Sat 26 Apr 2025 14:00:14 +0000 Manifest this update: Sat 26 Apr 2025 14:00:14 +0000 Manifest next update: Sun 27 Apr 2025 14:00:14 +0000 Files and hashes: 1: 5oD2HNqgzG_qOcF_21G9KLy5e2Y.roa (hash: RmXZv+Vqe5cI4h6ljtkED0qwtDL54/1oOSvgcLZr5dM=) 2: 6H0jPgZ40-qSdMrUIpXtjHxd2VA.roa (hash: bKX7Wm+km5brNebStx9trC9lQWDSYN+gli61DR2OFCc=) 3: 75sT-nwUqhGJrktdH6EqWa-q1mo.roa (hash: R1QtO6OQwY7O/dWJMCnCSA9mjsQZb+aGyr2mwiCWXM0=) 4: Bk5EEDboiWzloYLSbIprmQyOumI.roa (hash: Leabib+pYR396O62ZqXXAQ9RyIVRB2I7VcCKzRGI0Zw=) 5: FRe6auZzcSOVPtZ6Q5yvjDHlzS0.roa (hash: 2NaXdTlzJjkR6eXsQNd9ul22Iz8k3jyPNXeVsKS/++A=) 6: GEXA_gDFN_UI9pmu8MV3voaPJJw.roa (hash: dqAjGTOppVUexxUhNJnZSDJjjUoQVnH9/+S3XNxYfss=) 7: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl (hash: YdkRLQ99C6wldC4UIoXX7TGekXPbABLXwsEKQpA8R5M=) 8: J0mrTDoDAe4tdcNY4ZTx8ruuu9g.roa (hash: SdkYwpw3qIRaB5VQaHi9AMXoPRVnXFJoZo9ChQzY2P8=) 9: QKd9v1TqhiMsVLAcOxJ22eYxs_g.roa (hash: HKu0bw+bkfxh/NhVSCdqzBjjysK0/agU+8z7cijegyY=) 10: WKhjscqZWdN-nuM8dfIBcstyH14.roa (hash: khUF0nyoDvCPGxtlsBxOqPz0aIco2pUZJy9sOWQaHzM=) 11: qMUUhW1iC-XMKPgcY2-u4nUNHXY.roa (hash: 8IGWcOXBDlPGcQOckJ+GtmlbDYmD6/HkpFAja/aKolM=) 12: tV8pY2AaFoThs7aSR_rVRKM4uZ8.roa (hash: 5JEjFQnGCc8ZZH1Nis0Dk3OW+MkzIr5bBwteIscBMNg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 11:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:72:66:15:0b:a3:7e:f1:fc:7e:93:10:a1:03:f8:bd:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Validity Not Before: Apr 26 14:00:14 2025 GMT Not After : Apr 27 14:00:14 2025 GMT Subject: CN=1f9bef04ecc628c5a387e6fd03301c946d8ec922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:d0:b9:f0:e6:b4:77:4c:3a:0e:c3:52:64:0e: a5:95:89:02:76:9b:f9:f3:89:3d:6d:15:3b:45:c3: d7:be:f3:93:53:03:62:96:3c:32:16:16:48:2e:e0: c3:09:3f:38:19:64:ff:36:3d:af:f7:cc:b3:0a:02: 87:0d:8b:37:26:3d:ae:1c:f0:53:33:b7:aa:94:6d: db:07:80:43:a3:eb:32:cd:22:22:83:dc:35:3a:da: 58:71:53:4b:15:8c:d9:c7:9a:1d:68:ed:50:10:99: 81:84:2c:75:42:dc:04:a4:f2:c1:95:5e:6f:82:fa: 30:81:09:67:cd:9e:a6:0f:0b:25:6e:ca:65:bd:f7: 8e:a0:3d:4b:b4:fe:59:ed:62:d2:1d:08:65:90:99: e8:58:19:6d:fc:29:ba:56:4c:82:5d:c5:df:cc:d8: 9c:61:58:51:5d:1d:95:bb:4e:32:e5:94:ae:f3:92: 18:1d:dc:1c:b9:c8:73:0d:7b:89:0e:cd:58:fa:68: 78:36:4e:13:76:fd:d8:59:cc:2d:f6:79:ab:76:6e: b4:e0:f0:78:eb:c8:c9:9d:30:50:04:5b:9f:c4:6a: 7b:4e:92:1e:4c:8b:a8:ae:2b:47:a2:f3:28:69:2c: c1:64:c1:b8:bc:a3:d1:e7:6e:3b:45:b4:a8:70:4c: 13:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:9B:EF:04:EC:C6:28:C5:A3:87:E6:FD:03:30:1C:94:6D:8E:C9:22 X509v3 Authority Key Identifier: keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:75:94:aa:42:50:9d:d7:85:d8:18:c0:c8:ec:69:7c:9d:3c: e3:97:f4:70:55:c7:3b:4c:5a:d3:14:66:55:6a:ef:a1:2c:54: 16:dd:4a:0f:6b:8a:28:5a:55:36:4d:84:ae:fc:10:76:f9:cb: 70:10:a3:7c:9a:7a:c2:fd:c2:f2:4e:b4:3a:eb:21:3d:ab:56: 6d:ca:38:58:2d:4b:89:59:59:0f:d5:28:9b:ab:42:f0:f9:60: 9b:6f:53:08:cc:85:39:1e:a0:33:a7:62:04:2e:0a:a5:a6:48: 1c:69:c4:88:ef:cf:92:ed:03:55:7e:c5:9e:a8:7f:20:dd:22: d0:34:10:3d:d2:3f:5a:0e:9e:26:66:9d:34:db:2a:92:b6:a2: b5:aa:87:71:9c:37:f5:b7:4f:ac:36:4d:8f:92:99:aa:41:1d: 55:53:48:0d:d7:de:bf:d5:a1:39:49:74:48:53:66:8e:78:b3: 41:37:ab:fe:65:fe:c1:f9:1d:c8:bb:f5:b5:e6:20:24:ae:4e: e0:d6:68:8c:88:2c:2b:ab:1b:9f:ad:47:82:dc:bd:31:ad:1e: b8:c2:ea:a1:e0:e7:6b:67:14:92:2c:3a:48:d4:e3:d4:00:f1: 73:a8:17:7a:53:2a:26:73:e5:fc:8b:60:23:fc:d5:90:b5:4d: 9e:bb:45:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZyZhULo37x/H6TEKED+L3pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNjgxMzhkNGVjMmVhNTFjYWNlZjA5ZmYxMDU4YTM3MGE1 YmUxOTAwHhcNMjUwNDI2MTQwMDE0WhcNMjUwNDI3MTQwMDE0WjAzMTEwLwYDVQQD EygxZjliZWYwNGVjYzYyOGM1YTM4N2U2ZmQwMzMwMWM5NDZkOGVjOTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6dC58Oa0d0w6DsNSZA6llYkCdpv5 84k9bRU7RcPXvvOTUwNiljwyFhZILuDDCT84GWT/Nj2v98yzCgKHDYs3Jj2uHPBT M7eqlG3bB4BDo+syzSIig9w1OtpYcVNLFYzZx5odaO1QEJmBhCx1QtwEpPLBlV5v gvowgQlnzZ6mDwslbsplvfeOoD1LtP5Z7WLSHQhlkJnoWBlt/Cm6VkyCXcXfzNic YVhRXR2Vu04y5ZSu85IYHdwcuchzDXuJDs1Y+mh4Nk4Tdv3YWcwt9nmrdm604PB4 68jJnTBQBFufxGp7TpIeTIuoritHovMoaSzBZMG4vKPR5247RbSocEwTGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB+b7wTsxijFo4fm/QMwHJRtjskiMB8GA1UdIwQY MBaAFB9oE41OwupRys7wn/EFijcKW+GQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgt NjA4NTY0ODM5ZmQwLzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgtNjA4NTY0ODM5ZmQw LzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADXWUqkJQ ndeF2BjAyOxpfJ0845f0cFXHO0xa0xRmVWrvoSxUFt1KD2uKKFpVNk2ErvwQdvnL cBCjfJp6wv3C8k60OushPatWbco4WC1LiVlZD9Uom6tC8Plgm29TCMyFOR6gM6di BC4KpaZIHGnEiO/Pku0DVX7Fnqh/IN0i0DQQPdI/Wg6eJmadNNsqkraitaqHcZw3 9bdPrDZNj5KZqkEdVVNIDdfev9WhOUl0SFNmjnizQTer/mX+wfkdyLv1teYgJK5O 4NZojIgsK6sbn61Hgty9Ma0euMLqoeDna2cUkiw6SNTj1ADxc6gXelMqJnPl/Itg I/zVkLVNnrtFCQ== -----END CERTIFICATE-----Generated at Sat Apr 26 18:12:45 2025 by rpki-client