$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft File: Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft (raw, json) Hash identifier: J7Gs5eV36S8dokPm27DutLVBPdnh55B1BC5ATXgvmK8= Subject key identifier: 39:99:E1:0C:21:06:F2:A1:5F:60:B9:34:82:19:E8:6B:02:59:E8:B3 Authority key identifier: 19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9 Certificate issuer: /CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9 Certificate serial: 0196760CBBB9AAF405F2D7EF7BF8986B7963 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft Manifest number: 0909 Signing time: Sun 27 Apr 2025 07:01:07 +0000 Manifest this update: Sun 27 Apr 2025 07:01:07 +0000 Manifest next update: Mon 28 Apr 2025 07:01:07 +0000 Files and hashes: 1: 1zxqTZu6SRyYv_Ffy0lFoBPOEm4.roa (hash: ThozvqbE39I99NwlKLMA8FultirTXMcz2Kd4yrw2ZKw=) 2: 2JQiF-KuxisBuWKzCCYjlMYezbU.roa (hash: SXSN+jTHRj/1XPCNhGNyMfhXX6aenkr84XXZn44oBus=) 3: 2wuDk6nFqqGYiaSC6iucrRXcbQk.roa (hash: 79MFBQJOifCFih1gwOm9utzcHryDlN0MlgfAlM0KB/E=) 4: Dd0lNs2hky54dQAv3vPisZjCFp4.roa (hash: NVL0LmaHqGXfi7RWJ5Z26iREn6xhTna8KN7jsCj7oR4=) 5: G79Wrqy1Lf8BeR2TvbTFt1b4zUw.roa (hash: mkWsUDpUk6REoIb9yGYNYnYwXC9syYE03KiortiRCR0=) 6: Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl (hash: IdcZKD4s/34xjZamys2spUBELn47Qa7q+ZwkDuAdLgM=) 7: MtXcqoleDqMSyVWGFxd3850uGF8.roa (hash: 5zTGwHssmIeS5Ukj/HGoA7Wxq1gUaItGj34ri17+IlA=) 8: Q6bkyyQLjY5spQCrn9goEf71pPU.roa (hash: 9lviglTOByJ8RQWmZ8UPa2cM7z/LltLd8urB8JmBNnE=) 9: U6LKInYX6jQwBV8KMEesVDrNWSk.roa (hash: g36WmG/r5q9WK7xtEoYV2z/lqj+2PVHpdEIB93a9SEM=) 10: U93bZjAVh1P1joBT40YtFgkj33U.roa (hash: zo9QHI0N0+rtiU9CTdPl68EA0JwhDa16Oocr2Zm0PWg=) 11: Uaif5mluHcrJUGbfFQOQv5aGmqo.roa (hash: 4GcANOdK85GtkfgKCJ6D/Bc//mwXx0P/TVTNMp8rznY=) 12: diYtHkbWhD5oCZMkqf9gfGkO_S0.roa (hash: mAM70Fu/V+UYJ6UW5MauFuojQwzYrrWiK8CdKSQ5gBA=) 13: jyDBS4SlMdZTmgBvwq4TdZHy1_k.roa (hash: LeAOH2iyHYZi5p/Iq7kAMVJlSvm2ZJXwY56cgcvgz+I=) 14: o45bYQhOCCIJ6diASSlaPPyYOes.roa (hash: uj8xvTOhvYykytL80kX0T4Yxevvgs6AdIz3+LIY+FaU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 05:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:76:0c:bb:b9:aa:f4:05:f2:d7:ef:7b:f8:98:6b:79:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9 Validity Not Before: Apr 27 07:01:07 2025 GMT Not After : Apr 28 07:01:07 2025 GMT Subject: CN=3999e10c2106f2a15f60b9348219e86b0259e8b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c2:49:27:3d:10:5e:8a:f7:9c:d7:d0:08:b5: 0c:4d:c3:06:a4:e1:79:14:a2:7a:72:25:7f:db:ba: 40:a1:62:b4:84:55:f2:27:af:33:d1:63:3d:ed:96: 07:2c:f5:2f:2a:13:9b:93:96:e3:d4:73:46:27:d9: 4a:46:aa:78:17:92:a4:21:0c:61:e8:87:7d:d8:0e: df:91:d1:a7:9b:37:b2:7c:d2:9e:1c:cd:4a:8b:eb: 1d:a0:d5:19:e1:48:e9:6c:58:11:bf:d5:b5:00:3a: 8e:31:98:9e:76:85:60:e2:bf:be:8a:eb:d7:1e:2e: 95:6f:54:91:ce:09:25:c7:ca:fe:9c:45:a1:13:6c: 7a:df:f6:39:d2:e1:df:dd:be:0e:2d:ce:60:8b:b6: 98:46:a9:47:90:81:da:60:09:9c:1f:a3:27:09:e9: a6:df:2a:20:13:40:47:c0:eb:a1:ad:a9:0b:3c:03: 28:07:db:e1:23:e4:b8:48:76:5c:7d:2c:a5:d8:06: 43:ae:a1:c4:f3:c8:c5:f6:b3:02:c7:1a:4e:70:d5: df:06:b1:8c:61:11:43:09:eb:95:dd:6f:bf:03:be: 1a:cd:e9:01:2b:83:21:35:cd:2a:73:fc:a9:1c:be: 94:14:f3:2b:cb:0b:64:fd:5e:eb:51:f0:9a:e0:92: 54:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:99:E1:0C:21:06:F2:A1:5F:60:B9:34:82:19:E8:6B:02:59:E8:B3 X509v3 Authority Key Identifier: keyid:19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:1f:73:26:7f:1c:03:9f:9c:b4:a4:43:c4:b0:25:0e:ae:a4: fa:39:eb:23:ad:43:98:60:82:bd:40:a2:e6:7c:44:e1:f1:0d: ae:26:86:4b:1a:28:d7:24:b3:a2:4e:1b:08:91:d6:23:ec:3b: cd:49:ca:89:51:90:33:d9:b2:5a:9e:92:10:f3:43:a6:f3:fc: e0:95:c7:02:fc:be:9b:d2:5d:58:d6:e9:9a:80:67:58:fe:f2: 11:05:0e:87:5a:25:97:aa:1e:45:07:e4:c0:29:1e:05:8d:8f: 02:60:9e:bc:b7:08:b9:c7:af:f2:a6:41:8c:53:98:09:e0:58: 60:4b:bd:e8:e4:37:fb:51:7b:98:76:4d:f4:5a:06:28:e4:ec: 31:6c:f4:e3:61:bb:4d:68:18:3f:6d:7b:c7:62:a6:77:97:2e: bd:79:91:c1:63:87:36:4a:e6:e5:e7:52:52:0b:46:4f:80:ec: 43:bf:a4:e2:f0:9f:8b:3d:3f:00:e3:17:3b:11:e0:e3:1c:70: 67:d1:d0:83:91:11:09:9d:42:b0:36:8b:87:5b:8a:0a:28:33: b7:7b:c7:26:c1:26:48:fb:ba:e9:29:3f:c7:0b:56:37:c3:4a: 49:33:7e:ed:28:22:09:e3:a1:cc:ee:a7:5c:d4:8b:89:41:85: 38:d6:5a:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ2DLu5qvQF8tfve/iYa3ljMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ZWU1ZjE2ZmMxNDRhY2I5ODk3NzQ0OWZhYTBhYjc3ZGUx YmRjYzkwHhcNMjUwNDI3MDcwMTA3WhcNMjUwNDI4MDcwMTA3WjAzMTEwLwYDVQQD EygzOTk5ZTEwYzIxMDZmMmExNWY2MGI5MzQ4MjE5ZTg2YjAyNTllOGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMJJJz0QXor3nNfQCLUMTcMGpOF5 FKJ6ciV/27pAoWK0hFXyJ68z0WM97ZYHLPUvKhObk5bj1HNGJ9lKRqp4F5KkIQxh 6Id92A7fkdGnmzeyfNKeHM1Ki+sdoNUZ4UjpbFgRv9W1ADqOMZiedoVg4r++iuvX Hi6Vb1SRzgklx8r+nEWhE2x63/Y50uHf3b4OLc5gi7aYRqlHkIHaYAmcH6MnCemm 3yogE0BHwOuhrakLPAMoB9vhI+S4SHZcfSyl2AZDrqHE88jF9rMCxxpOcNXfBrGM YRFDCeuV3W+/A74azekBK4MhNc0qc/ypHL6UFPMrywtk/V7rUfCa4JJUWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDmZ4QwhBvKhX2C5NIIZ6GsCWeizMB8GA1UdIwQY MBaAFBnuXxb8FErLmJd0Sfqgq3feG9zJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83NDIzNzAtZTEwZi00NTQxLWFhNmMt NjFhZmI2NmQxZThjLzEvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83NDIzNzAtZTEwZi00NTQxLWFhNmMtNjFhZmI2NmQxZThj LzEvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAix9zJn8c A5+ctKRDxLAlDq6k+jnrI61DmGCCvUCi5nxE4fENriaGSxoo1ySzok4bCJHWI+w7 zUnKiVGQM9myWp6SEPNDpvP84JXHAvy+m9JdWNbpmoBnWP7yEQUOh1oll6oeRQfk wCkeBY2PAmCevLcIucev8qZBjFOYCeBYYEu96OQ3+1F7mHZN9FoGKOTsMWz042G7 TWgYP217x2Kmd5cuvXmRwWOHNkrm5edSUgtGT4DsQ7+k4vCfiz0/AOMXOxHg4xxw Z9HQg5ERCZ1CsDaLh1uKCigzt3vHJsEmSPu66Sk/xwtWN8NKSTN+7SgiCeOhzO6n XNSLiUGFONZakA== -----END CERTIFICATE-----Generated at Sun Apr 27 12:09:03 2025 by rpki-client