$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft File: 8FIRKM9jSqavp-9S1THz_NVWKPk.mft (raw, json) Hash identifier: 6SRGVZpDEStaQzJusww9OEpTJ5RinDvkboWvLNwE5Y0= Subject key identifier: 7C:16:9B:4B:38:E5:4C:0D:F5:F9:F3:D7:63:28:10:5E:B3:6B:F5:A4 Authority key identifier: F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9 Certificate issuer: /CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9 Certificate serial: 01967DC64E1138B6707B33F28ECF9704C461 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft Manifest number: 151C Signing time: Mon 28 Apr 2025 19:01:09 +0000 Manifest this update: Mon 28 Apr 2025 19:01:09 +0000 Manifest next update: Tue 29 Apr 2025 19:01:09 +0000 Files and hashes: 1: 0vpioq7e7IBvU0f7txi-wExHAPw.roa (hash: lCvUWIuH8RdERCkztaN1NhfYOchJDmj9ywnhD1WG0qs=) 2: 1-t-clxlx4vHi76xBwGIh0Y5orug.roa (hash: WGphFqEzeHYQfivrVaHRtOvOzzhN/PDKxrZlm3FuIDA=) 3: 4CCEdgNV-fGWUC_aGHxQwbUsOKQ.roa (hash: zTRmkFZkHzwf+QYURy5/v5Sjyovq0HLSmOwtNQ48L/c=) 4: 8FIRKM9jSqavp-9S1THz_NVWKPk.crl (hash: IMzSLeinOWGN4SIvd75OnQ1V2Q46QH2/DGgM3dtbrSQ=) 5: 9oOMh0CjqydkdSKEbK66nXXsu4E.roa (hash: qQJNJWud5A2R6q9LElC5WdsYynVdzga12kQWDH61mWo=) 6: AoQYABlbiRY1s0Gu3McHV58zrpk.roa (hash: 9zDAXKdytFg/3YwoUton7cniFW2Ja9ArE5tJ2skkn+c=) 7: OdGF_e17lYBOCmXmsk6hkXdf7b4.roa (hash: mFKHbPekFFY75D3Eu+1fU9mzEnOZ9+rJaeHup24zW3Q=) 8: PFyByii-LGzRSy90jiJ5mw1207A.roa (hash: gIS/3e5ejAqBGpUPti4f7RxoNdrem0KAE6vwjMubh3s=) 9: Qkq_75MjyviWe2NqgT_-Mwn9gnM.roa (hash: wJb9fi2vDIIR6voDYxFFRDUWuFkEQa98zP1PFmkzpXs=) 10: ScwFXX2rYjT7naQciVMaotJ-UfM.roa (hash: X8Vp96ZEvVObF+OkcOx9P04g9HBNU6my6Pc/b9LR72Y=) 11: rh7_88ku0NVEacOTg4kYRNyhUIs.roa (hash: Uz863y1lKUf+O+OGV8gNQDxIpi4RBI83I9R9FXt5Xp4=) 12: u37q8oxj6d2YnoBLY1VE3CqS2g0.roa (hash: QV9HVDjMgl4TBfOFPjFKF+CTfrUEm6XmvkI/fobJGaM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Apr 2025 15:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:7d:c6:4e:11:38:b6:70:7b:33:f2:8e:cf:97:04:c4:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9 Validity Not Before: Apr 28 19:01:09 2025 GMT Not After : Apr 29 19:01:09 2025 GMT Subject: CN=7c169b4b38e54c0df5f9f3d76328105eb36bf5a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:db:1e:2b:30:67:c4:60:39:b7:94:4e:9e:64: 26:84:40:24:18:df:26:f3:3c:fe:48:77:b6:92:1d: ec:e3:0a:4f:cf:eb:3f:76:00:b6:76:ad:da:1c:a2: 71:93:32:2b:7d:de:d4:dd:f4:45:fc:1d:2f:75:eb: 90:35:7d:d6:e4:76:6c:9a:f2:c2:67:b9:6e:e6:82: 7c:82:68:83:95:c6:23:a3:d7:01:1a:c9:83:61:bb: 5c:0e:69:1c:96:17:ee:a9:0f:2c:4e:ae:a7:f1:ec: 98:75:72:50:80:83:73:6b:31:14:a9:40:6c:30:20: fb:92:75:80:10:47:5e:00:5f:fd:97:ee:ea:3b:45: 42:ba:df:46:ec:0e:cf:7a:9e:f1:fa:01:9c:cf:8b: 30:85:5f:85:f8:4b:a0:01:75:d7:76:57:6e:aa:f6: 3a:d4:90:be:53:57:5f:a2:ec:7f:a5:73:be:10:ef: d3:31:d9:f2:17:7b:d3:5a:f4:50:85:44:48:22:6e: 85:e6:9a:2e:ed:9f:ed:b2:62:ce:6e:e4:2e:d9:12: 52:e5:ce:ed:53:4c:fe:22:d8:7e:d2:67:29:ff:2d: 45:e0:55:4e:b9:ca:fc:54:36:ea:e2:d3:30:75:88: 50:6c:97:06:7f:59:63:02:05:14:9c:4f:9b:49:40: c1:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:16:9B:4B:38:E5:4C:0D:F5:F9:F3:D7:63:28:10:5E:B3:6B:F5:A4 X509v3 Authority Key Identifier: keyid:F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:59:7c:f0:0d:56:b1:28:90:0d:be:92:bc:ff:77:e8:8b:99: 88:38:60:60:b2:91:53:df:6c:c9:fc:3d:0a:78:8c:80:56:59: 45:9b:6a:23:18:a1:87:e3:a4:4f:06:46:10:99:d6:69:95:0d: a2:19:cb:a4:7a:f4:d6:b8:a6:0c:60:4e:02:58:01:3d:85:77: 7f:cf:e0:29:18:25:24:e5:09:8f:03:4e:96:cc:08:56:b1:6b: f8:df:8f:0b:c9:84:1d:9c:44:5a:54:9b:d8:56:62:f1:c2:7b: ce:91:54:fa:1d:80:e4:51:fc:d9:c0:7a:79:c0:fa:bc:9a:ad: 7f:f8:d5:1d:42:64:53:c6:e3:0d:65:81:ba:d1:1c:f0:8e:65: 5d:37:8f:f2:2b:24:96:d6:f9:8e:16:28:ec:d2:02:c8:e3:8a: 44:e0:8d:25:9d:3c:4f:15:0f:a0:b6:1d:ea:1d:f2:24:83:20: 21:34:52:4b:03:e9:eb:71:1f:77:d9:80:9a:55:24:01:57:db: 63:97:1c:5d:e0:cf:23:23:bf:71:02:2d:47:10:5b:b6:35:50: 3b:da:e1:ea:11:26:4f:97:93:bf:82:0b:be:67:b2:11:6b:45: 68:7a:25:69:c8:e2:b7:81:d4:9d:ed:d3:c1:f4:ce:43:bc:78: 8b:c4:61:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ9xk4ROLZwezPyjs+XBMRhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNTIxMTI4Y2Y2MzRhYTZhZmE3ZWY1MmQ1MzFmM2ZjZDU1 NjI4ZjkwHhcNMjUwNDI4MTkwMTA5WhcNMjUwNDI5MTkwMTA5WjAzMTEwLwYDVQQD Eyg3YzE2OWI0YjM4ZTU0YzBkZjVmOWYzZDc2MzI4MTA1ZWIzNmJmNWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7dseKzBnxGA5t5ROnmQmhEAkGN8m 8zz+SHe2kh3s4wpPz+s/dgC2dq3aHKJxkzIrfd7U3fRF/B0vdeuQNX3W5HZsmvLC Z7lu5oJ8gmiDlcYjo9cBGsmDYbtcDmkclhfuqQ8sTq6n8eyYdXJQgINzazEUqUBs MCD7knWAEEdeAF/9l+7qO0VCut9G7A7Pep7x+gGcz4swhV+F+EugAXXXdlduqvY6 1JC+U1dfoux/pXO+EO/TMdnyF3vTWvRQhURIIm6F5pou7Z/tsmLObuQu2RJS5c7t U0z+Ith+0mcp/y1F4FVOucr8VDbq4tMwdYhQbJcGf1ljAgUUnE+bSUDBYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHwWm0s45UwN9fnz12MoEF6za/WkMB8GA1UdIwQY MBaAFPBSESjPY0qmr6fvUtUx8/zVVij5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUt ZTQ0MTliNjQyMTJlLzEvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUtZTQ0MTliNjQyMTJl LzEvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi1l88A1W sSiQDb6SvP936IuZiDhgYLKRU99syfw9CniMgFZZRZtqIxihh+OkTwZGEJnWaZUN ohnLpHr01rimDGBOAlgBPYV3f8/gKRglJOUJjwNOlswIVrFr+N+PC8mEHZxEWlSb 2FZi8cJ7zpFU+h2A5FH82cB6ecD6vJqtf/jVHUJkU8bjDWWButEc8I5lXTeP8isk ltb5jhYo7NICyOOKROCNJZ08TxUPoLYd6h3yJIMgITRSSwPp63Efd9mAmlUkAVfb Y5ccXeDPIyO/cQItRxBbtjVQO9rh6hEmT5eTv4ILvmeyEWtFaHolacjit4HUne3T wfTOQ7x4i8Rhcg== -----END CERTIFICATE-----Generated at Mon Apr 28 23:33:44 2025 by rpki-client