$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft File: Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft (raw, json) Hash identifier: I/SAm53mXI2clBM2OGqQj/hDrZzMPYl1Od8nUNeHgbg= Subject key identifier: CF:3A:37:04:51:93:6B:BA:05:6A:F2:C5:13:BF:DC:9A:7E:CA:96:BD Authority key identifier: 43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49 Certificate issuer: /CN=43d5ba0815c9f5193f80989ee893acacc4ba8849 Certificate serial: 019671C1C8C1302B4BABAA406D8595B3D249 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft Manifest number: 1526 Signing time: Sat 26 Apr 2025 11:00:47 +0000 Manifest this update: Sat 26 Apr 2025 11:00:47 +0000 Manifest next update: Sun 27 Apr 2025 11:00:47 +0000 Files and hashes: 1: 0xlQ3OoAf3jw6dFpT3Cm7wgpHUc.roa (hash: MQMgI1VWvUX5TVbBWyEo2dcW4NQMw/+uEaquqgjFfto=) 2: 3FEjI3AeaOdfwu2SE8mhTfKLsPM.roa (hash: SX8ruu5xtU5nHOj268+AdU4uDijl/E2PS/yTXGtZ3JQ=) 3: Bt_BJ_rJvQ-dhFs_SCmV1G3Ogsk.roa (hash: MRBJocdcxttyraiCxJuRCmX4CgQbJJdUodQ85Hkwc4U=) 4: JyxghoeF6hDC8N6SVjWRhYxsMBM.roa (hash: xPNYZdV7e7Lg6hC+x9cwa/uaXPSCMeE53FUH9lU5TIM=) 5: OYF94ILNmc9IGZCl0trT_vCrveA.roa (hash: uj8o2STwQYQOQKO9jHh+UgR4tdLDjqQa9LhPcW5B4qI=) 6: Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl (hash: peWJ0IoljWYlKQNeNFTDufY5iIuUaLfS5ALnhJlwlTM=) 7: a2-Ak-XNzMq87nGfxm17NNrDD-w.roa (hash: oobPnpb12mxX5CV2sXI30Is1iiyb45x/TVEFVdIFWQ0=) 8: bkFu5lpbMCNQfDrUwHK85noTE8w.roa (hash: LF7GIBSOnpzm9vehsDsQICT9UHecDF3rayxCzLBTmJc=) 9: jQWzz1KtPVeMOk9juszbTA9KSZM.roa (hash: tyZR5R+Av5TR5d+AMDxHfCQO1+yCBaGSUIry75HEJTI=) 10: prsVOyRGU3MtYYx93kWm773j8G4.roa (hash: XFsscFozdK/fanLtH4eqsqCTvm9rcJcpt7EZvhsiimc=) 11: tyWKDUVqC5IzOiqKJqRpStnyBMA.roa (hash: qWagwXDRFIv38+Ji9vgNoeMWS7OrJF0vAZgWVKNUl5M=) 12: xXPje22kQWotZEDmug62wH0gDiA.roa (hash: agsgwd8NBBgzTmUw5oBm+qVdc/ai59WAMmo29EAFg6c=) 13: ys5vmqUy51MsJ0ygo_iK-V09VLk.roa (hash: 0bEBsx5vAAoh9m1hQ5TVct9tCZkHxHVWgyiCpF/cLSU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 11:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:71:c1:c8:c1:30:2b:4b:ab:aa:40:6d:85:95:b3:d2:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43d5ba0815c9f5193f80989ee893acacc4ba8849 Validity Not Before: Apr 26 11:00:47 2025 GMT Not After : Apr 27 11:00:47 2025 GMT Subject: CN=cf3a370451936bba056af2c513bfdc9a7eca96bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:69:9e:67:d8:26:88:0a:be:0c:47:8c:dd:b3: 81:1a:63:db:7e:b4:ed:e2:c4:37:b4:8f:2b:d1:1a: b0:3a:c5:9b:8a:3b:25:7c:f4:ae:96:e4:32:4e:18: ba:33:0e:16:d0:c6:13:ce:a2:be:7e:34:80:ba:65: df:dd:61:f0:87:3b:8e:c0:b1:70:21:d7:9e:ba:f5: 78:fe:6a:d7:7a:ed:ab:74:46:c2:81:c2:da:cc:63: e5:83:b8:21:1b:ce:7c:33:5d:ef:4a:fe:eb:13:d7: 6d:22:8d:05:b3:8b:36:7a:2d:35:85:0a:2d:0c:1d: 50:df:49:ea:ea:92:79:9d:4a:7d:e2:59:4d:89:e9: a0:e5:30:84:de:a3:5e:96:3a:9e:aa:48:42:01:99: da:26:ee:c3:48:aa:99:61:8d:c7:07:98:0d:66:64: 00:b5:fa:15:77:6b:5b:e9:c3:a0:cb:31:ce:29:90: 21:99:a2:26:2f:a4:11:8e:bd:25:38:24:37:d1:ae: c7:db:c4:1b:ef:fb:a2:4f:37:8e:92:49:c6:9c:cd: 86:c5:06:72:91:ea:c5:79:b6:e2:17:aa:ea:cf:3d: 90:47:81:a8:7c:5d:08:29:e8:96:a1:c2:d4:96:bb: 22:d9:dc:4f:91:47:86:f5:36:8e:cf:d9:86:7b:82: ca:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:3A:37:04:51:93:6B:BA:05:6A:F2:C5:13:BF:DC:9A:7E:CA:96:BD X509v3 Authority Key Identifier: keyid:43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:98:16:98:f3:bc:ea:e2:3c:ea:39:0f:13:1b:c8:3c:44:04: e3:59:79:4c:86:ad:d2:49:c5:1c:c7:d2:96:29:9d:78:e4:66: 5b:fd:36:bc:bd:46:5f:24:ca:a1:57:3f:c2:c6:31:cf:e1:3b: 7d:3c:b9:88:03:e7:a6:9f:37:69:8e:8c:cb:d8:65:37:6d:b6: 50:c4:16:ad:40:4e:8a:2c:75:78:2c:ef:30:4d:e1:7a:98:90: fa:53:ee:db:e7:c7:00:82:af:41:08:38:f5:ab:8c:e5:e7:c0: eb:7c:b8:61:e2:69:85:9f:fd:05:e2:02:8c:c1:49:db:01:40: 86:8e:da:6d:ca:a7:ec:b4:56:f8:10:f9:42:07:a1:f2:b1:76: d9:e0:62:e3:2b:b6:de:36:a1:05:90:8b:d2:2d:c5:0e:23:39: 39:12:59:22:d9:8d:ab:5f:57:e1:18:ab:19:9b:24:46:eb:11: cd:ed:36:bb:3e:c2:6c:47:5e:d0:46:10:e9:17:b6:6c:30:8d: 5e:5d:75:b6:79:ef:ed:a3:f5:a2:95:41:de:a9:0a:47:90:04: 52:26:37:a2:d9:17:2d:8e:79:cb:f7:14:5a:a5:9f:b5:8f:43: a4:3d:26:ac:9d:d6:56:4b:5f:6d:43:2f:55:16:f9:5f:e5:d2: b2:87:5b:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZxwcjBMCtLq6pAbYWVs9JJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzZDViYTA4MTVjOWY1MTkzZjgwOTg5ZWU4OTNhY2FjYzRi YTg4NDkwHhcNMjUwNDI2MTEwMDQ3WhcNMjUwNDI3MTEwMDQ3WjAzMTEwLwYDVQQD EyhjZjNhMzcwNDUxOTM2YmJhMDU2YWYyYzUxM2JmZGM5YTdlY2E5NmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GmeZ9gmiAq+DEeM3bOBGmPbfrTt 4sQ3tI8r0RqwOsWbijslfPSuluQyThi6Mw4W0MYTzqK+fjSAumXf3WHwhzuOwLFw IdeeuvV4/mrXeu2rdEbCgcLazGPlg7ghG858M13vSv7rE9dtIo0Fs4s2ei01hQot DB1Q30nq6pJ5nUp94llNiemg5TCE3qNeljqeqkhCAZnaJu7DSKqZYY3HB5gNZmQA tfoVd2tb6cOgyzHOKZAhmaImL6QRjr0lOCQ30a7H28Qb7/uiTzeOkknGnM2GxQZy kerFebbiF6rqzz2QR4GofF0IKeiWocLUlrsi2dxPkUeG9TaOz9mGe4LKKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM86NwRRk2u6BWryxRO/3Jp+ypa9MB8GA1UdIwQY MBaAFEPVuggVyfUZP4CYnuiTrKzEuohJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTlXNkNCWEo5UmtfZ0ppZTZKT3NyTVM2aUVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83MjgyYjQtN2YxMS00ZWUwLWFiZWEt ZTEzZTU1NzljNWRjLzEvUTlXNkNCWEo5UmtfZ0ppZTZKT3NyTVM2aUVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi83MjgyYjQtN2YxMS00ZWUwLWFiZWEtZTEzZTU1NzljNWRj LzEvUTlXNkNCWEo5UmtfZ0ppZTZKT3NyTVM2aUVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALZgWmPO8 6uI86jkPExvIPEQE41l5TIat0knFHMfSlimdeORmW/02vL1GXyTKoVc/wsYxz+E7 fTy5iAPnpp83aY6My9hlN222UMQWrUBOiix1eCzvME3hepiQ+lPu2+fHAIKvQQg4 9auM5efA63y4YeJphZ/9BeICjMFJ2wFAho7abcqn7LRW+BD5Qgeh8rF22eBi4yu2 3jahBZCL0i3FDiM5ORJZItmNq19X4RirGZskRusRze02uz7CbEde0EYQ6Re2bDCN Xl11tnnv7aP1opVB3qkKR5AEUiY3otkXLY55y/cUWqWftY9DpD0mrJ3WVktfbUMv VRb5X+XSsodbJw== -----END CERTIFICATE-----Generated at Sat Apr 26 19:03:43 2025 by rpki-client