$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft File: DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft (raw, json) Hash identifier: ksK5GCa+TcRiYeopu4s0e572MNPSdF0vL8PiJq5NpM4= Subject key identifier: 63:C8:2E:D4:8B:0C:A9:4C:DA:93:44:40:C4:0D:8B:87:F8:5E:75:27 Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 Certificate issuer: /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Certificate serial: 019672D3FCC736136AE3F80315DCEBCE3830 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft Manifest number: 0ED9 Signing time: Sat 26 Apr 2025 16:00:17 +0000 Manifest this update: Sat 26 Apr 2025 16:00:17 +0000 Manifest next update: Sun 27 Apr 2025 16:00:17 +0000 Files and hashes: 1: 7K3k7b_VuVXreG4TZPCJYqZfF3E.roa (hash: Mlmhkf4jbq89VKvIVk+oiVN1ePN2hRV3HnX2uto8WJU=) 2: BrLyoPvlUaso46lX0KWb5vFGmM0.roa (hash: xL+T2GI69dhAcv4plVUHvDhKIEwvfeKCIn8Shgjm/i0=) 3: DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl (hash: Gx0ygHTaVMRyrNf99krC+MQDOSFb6+lZcQxBnu8T/PI=) 4: ItkPtexNahvw3tDr3_bT8GEZfr8.roa (hash: SJn0U88NMdBnAS7glQzEzO/4h8XGSEZsIoQuSFWE8lQ=) 5: KPsZP5UxbVlCpzRsbOBIhy6z_pQ.roa (hash: kVAhbMyWoKA5VWa5Rhx+mEjaq4dPTfBEWmIzltLf7OA=) 6: O4hsLYqHDHOc5YtrhKrxfVw253c.roa (hash: ftP8M0zBEeWH13FQ0ROC4yQQqu5d0hiLyMqOEpuSB2s=) 7: S8NNzpYJ5i63QJglA0hS6lNTgN4.roa (hash: oQMGxS6aGqOdLfZr8vkFFrUapKMk/UebkSM9HMDYXqs=) 8: XHlN3RpeQmFr0S8d8kRmm2_r9Gw.roa (hash: 2CQIDqSJfPO5Zu/OEOhrMlJ6AbMdAt7LicT/EFEbIc8=) 9: XtPC-hLseHu-oNHb7iMp78D7fDc.roa (hash: hosi2cp2sXp7OezBXmUWbVNJewXZGC35mZTjc3/DqAc=) 10: bqCIwVZ2XpZx_IfIj7dYA8wJreY.roa (hash: i6u6U6/gyOnTl0MAd6o9UqfZD0C1nlK3nCbIBUXXrK4=) 11: qU-FNtg0qY4hJwKQMawgQqk-7hk.roa (hash: 13slz4AHZrhhHtsx3wRRPE08jfCa/LuOzvkrn3vV24A=) 12: rCxYI5Tulv7y1jiwSQxGMLIrGN8.roa (hash: +s5/7hhcPvTnv+J/E+7TIW4jm9Ttlavmle1UeAYMmYQ=) 13: ub_wuD6GrLRSFxkzvOcZq4Jo0u8.roa (hash: 7Un/Y+Kg84yVZqoJNW9xKfwZcI8pk00diQSKoBsgLzQ=) 14: wO5DmrwTSoyl76lHsJA2t5qAs9I.roa (hash: gFeojWx3JdvkiLn4u4KpLVd5bJnsp8Sl11CkVIEvvlw=) 15: yV5VAilxWOh0of_wXNotAN0Ules.roa (hash: okzmmgBoCtu74qSYeftTIK3U3j25WujMDAESaACQXMQ=) 16: zEVJ0_wf_uy6-Ifr09xIfyn08R0.roa (hash: Mx0lPSY3hw6TgVNilrBT17dSIAN0s4FyHxEYjNAbcQI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 11:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:72:d3:fc:c7:36:13:6a:e3:f8:03:15:dc:eb:ce:38:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Validity Not Before: Apr 26 16:00:17 2025 GMT Not After : Apr 27 16:00:17 2025 GMT Subject: CN=63c82ed48b0ca94cda934440c40d8b87f85e7527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:9b:b8:a6:20:28:9d:75:0d:9b:10:e3:2b:1c: 15:3a:56:a2:a4:64:24:e4:86:56:25:92:d0:79:97: 30:ab:c7:4e:54:cf:aa:30:d5:03:2d:12:16:c0:52: 1f:16:59:e6:af:83:e4:04:01:0c:72:36:82:5b:e8: 92:54:11:da:87:d8:5c:1c:78:ac:da:0e:0e:40:69: b2:93:db:9c:38:8d:70:71:29:b9:78:91:01:65:68: b5:16:83:55:27:3b:41:79:05:40:af:38:73:b0:5a: 2e:66:ea:de:da:b1:af:49:69:8f:82:c3:e7:b3:10: 27:a5:b6:f9:ba:03:f6:66:d8:bc:08:75:d0:4d:62: 6a:53:ba:a1:6e:8f:7b:14:bc:f9:ed:90:f7:7b:14: 9c:af:58:b3:fb:45:c4:df:5a:ad:83:3f:8d:b1:73: 67:17:3b:dc:a7:84:94:a1:91:b3:96:35:6f:dd:d5: 55:ef:75:d9:a3:e6:72:e7:dd:ca:80:5e:c5:7a:02: 53:07:34:1c:84:8f:7b:9d:ae:bd:46:49:e1:23:4f: 57:6d:2b:e8:1e:b1:eb:c8:52:7d:84:84:55:84:d0: 47:88:cb:3f:88:29:84:8a:d3:67:68:76:c4:e3:f8: 7b:95:9b:2b:38:6c:17:79:cc:c4:81:d5:d4:2c:57: f0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:C8:2E:D4:8B:0C:A9:4C:DA:93:44:40:C4:0D:8B:87:F8:5E:75:27 X509v3 Authority Key Identifier: keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:56:9c:34:11:c1:aa:ac:79:70:67:b6:bd:79:3c:84:e3:f5: a4:63:3c:61:9e:af:b9:0c:d2:44:fd:69:8f:2f:ab:14:69:e3: 18:a6:ac:5d:c6:00:22:19:10:32:6a:b9:ea:3a:95:62:f3:95: 0e:56:86:db:ae:f0:fc:b4:b4:79:75:d8:eb:43:58:04:2a:8a: d2:1c:ca:20:c8:ef:15:b2:32:5c:d2:86:b6:06:87:c7:f3:8b: d7:37:f8:70:63:c7:70:fb:d7:95:ea:05:ed:72:4d:cb:07:16: 13:54:05:68:50:4f:52:8d:25:5d:4e:04:12:2b:a2:ea:35:3a: ac:97:e6:fd:77:e4:e8:81:e6:f0:2e:15:95:63:c6:23:b7:7f: 87:11:27:34:61:83:a6:79:54:a1:38:ee:f8:b9:66:0e:d3:72: a2:c1:60:8b:2d:f7:0f:a8:e2:1a:16:74:49:0e:bc:6f:ed:c8: f7:3f:30:68:1a:58:f9:e2:10:ba:24:d4:3d:e2:62:4d:99:f2: 8a:eb:41:87:2e:99:aa:79:fa:e4:06:48:15:c9:f8:42:f2:d3: 87:79:67:d2:49:04:2c:83:fa:92:7f:29:98:bd:5a:62:c2:51: 72:6d:68:83:7a:42:cd:bf:81:10:38:bb:63:74:ab:74:ea:87: 15:cd:5f:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZy0/zHNhNq4/gDFdzrzjgwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkYjY3YzVjN2ZhN2ZlMjQ5MmVlYzM3Y2Y0Mjc2NDJiNzFk NDI1YjAwHhcNMjUwNDI2MTYwMDE3WhcNMjUwNDI3MTYwMDE3WjAzMTEwLwYDVQQD Eyg2M2M4MmVkNDhiMGNhOTRjZGE5MzQ0NDBjNDBkOGI4N2Y4NWU3NTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25u4piAonXUNmxDjKxwVOlaipGQk 5IZWJZLQeZcwq8dOVM+qMNUDLRIWwFIfFlnmr4PkBAEMcjaCW+iSVBHah9hcHHis 2g4OQGmyk9ucOI1wcSm5eJEBZWi1FoNVJztBeQVArzhzsFouZure2rGvSWmPgsPn sxAnpbb5ugP2Zti8CHXQTWJqU7qhbo97FLz57ZD3exScr1iz+0XE31qtgz+NsXNn Fzvcp4SUoZGzljVv3dVV73XZo+Zy593KgF7FegJTBzQchI97na69RknhI09XbSvo HrHryFJ9hIRVhNBHiMs/iCmEitNnaHbE4/h7lZsrOGwXeczEgdXULFfwCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGPILtSLDKlM2pNEQMQNi4f4XnUnMB8GA1UdIwQY MBaAFA22fFx/p/4kku7DfPQnZCtx1CWwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjkt YjAzZGY5OTZlNDgxLzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjktYjAzZGY5OTZlNDgx LzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEFacNBHB qqx5cGe2vXk8hOP1pGM8YZ6vuQzSRP1pjy+rFGnjGKasXcYAIhkQMmq56jqVYvOV DlaG267w/LS0eXXY60NYBCqK0hzKIMjvFbIyXNKGtgaHx/OL1zf4cGPHcPvXleoF 7XJNywcWE1QFaFBPUo0lXU4EEiui6jU6rJfm/Xfk6IHm8C4VlWPGI7d/hxEnNGGD pnlUoTju+LlmDtNyosFgiy33D6jiGhZ0SQ68b+3I9z8waBpY+eIQuiTUPeJiTZny iutBhy6Zqnn65AZIFcn4QvLTh3ln0kkELIP6kn8pmL1aYsJRcm1og3pCzb+BEDi7 Y3SrdOqHFc1fVA== -----END CERTIFICATE-----Generated at Sat Apr 26 18:37:15 2025 by rpki-client