$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft File: 8FIRKM9jSqavp-9S1THz_NVWKPk.mft (raw, json) Hash identifier: +rSb34bOT6jouJ2jXWUS60y8cjwm5YT7f/UG77U/SF4= Subject key identifier: BE:9A:B6:BB:AC:06:FA:EA:4A:FC:64:66:A4:BE:99:FA:76:DB:5F:03 Authority key identifier: F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9 Certificate issuer: /CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9 Certificate serial: 019677FBD4A5CE3E25938C8A7AAB118E5AF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft Manifest number: 1519 Signing time: Sun 27 Apr 2025 16:01:54 +0000 Manifest this update: Sun 27 Apr 2025 16:01:54 +0000 Manifest next update: Mon 28 Apr 2025 16:01:54 +0000 Files and hashes: 1: 0vpioq7e7IBvU0f7txi-wExHAPw.roa (hash: lCvUWIuH8RdERCkztaN1NhfYOchJDmj9ywnhD1WG0qs=) 2: 1-t-clxlx4vHi76xBwGIh0Y5orug.roa (hash: WGphFqEzeHYQfivrVaHRtOvOzzhN/PDKxrZlm3FuIDA=) 3: 4CCEdgNV-fGWUC_aGHxQwbUsOKQ.roa (hash: zTRmkFZkHzwf+QYURy5/v5Sjyovq0HLSmOwtNQ48L/c=) 4: 8FIRKM9jSqavp-9S1THz_NVWKPk.crl (hash: SxeBTEtKl6ubs4x1xJS0vptSuZkI/sx7Ep2kSlxI2n4=) 5: 9oOMh0CjqydkdSKEbK66nXXsu4E.roa (hash: qQJNJWud5A2R6q9LElC5WdsYynVdzga12kQWDH61mWo=) 6: AoQYABlbiRY1s0Gu3McHV58zrpk.roa (hash: 9zDAXKdytFg/3YwoUton7cniFW2Ja9ArE5tJ2skkn+c=) 7: OdGF_e17lYBOCmXmsk6hkXdf7b4.roa (hash: mFKHbPekFFY75D3Eu+1fU9mzEnOZ9+rJaeHup24zW3Q=) 8: PFyByii-LGzRSy90jiJ5mw1207A.roa (hash: gIS/3e5ejAqBGpUPti4f7RxoNdrem0KAE6vwjMubh3s=) 9: Qkq_75MjyviWe2NqgT_-Mwn9gnM.roa (hash: wJb9fi2vDIIR6voDYxFFRDUWuFkEQa98zP1PFmkzpXs=) 10: ScwFXX2rYjT7naQciVMaotJ-UfM.roa (hash: X8Vp96ZEvVObF+OkcOx9P04g9HBNU6my6Pc/b9LR72Y=) 11: rh7_88ku0NVEacOTg4kYRNyhUIs.roa (hash: Uz863y1lKUf+O+OGV8gNQDxIpi4RBI83I9R9FXt5Xp4=) 12: u37q8oxj6d2YnoBLY1VE3CqS2g0.roa (hash: QV9HVDjMgl4TBfOFPjFKF+CTfrUEm6XmvkI/fobJGaM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 16:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:77:fb:d4:a5:ce:3e:25:93:8c:8a:7a:ab:11:8e:5a:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9 Validity Not Before: Apr 27 16:01:54 2025 GMT Not After : Apr 28 16:01:54 2025 GMT Subject: CN=be9ab6bbac06faea4afc6466a4be99fa76db5f03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:79:46:c9:e0:b2:7f:ce:f9:bc:64:c0:f1:53: c3:11:e3:41:56:f5:a9:83:21:98:dd:fa:70:63:de: 78:00:5b:fd:1a:31:06:1c:21:7b:de:73:34:94:50: 3f:b2:91:c9:36:c2:c1:9d:03:6c:d1:b6:d5:6f:ec: fb:0c:c7:28:bf:f7:6b:93:69:0b:0a:13:51:89:a4: d1:8a:e9:dd:d7:29:f6:c2:a5:88:99:31:01:e2:a9: b2:4f:3f:5c:75:95:09:0b:2a:6b:fe:04:23:49:04: d1:5d:bd:8b:89:9d:bf:91:05:9b:7d:6c:2c:33:33: f7:d1:5b:44:1c:50:c2:d4:01:6a:23:cc:07:38:15: 8b:01:75:c9:4f:6d:64:e9:7a:2d:fd:75:89:f5:f6: fe:f6:a4:9f:e0:1d:3d:e9:1f:fb:e8:aa:a0:19:15: a9:d9:3d:41:11:76:91:b9:d9:18:d0:27:3f:3d:92: 2b:74:c6:b1:0d:d6:0e:db:4e:96:e5:a6:35:55:3b: 45:42:7e:73:14:e6:a6:82:e9:ba:55:d6:ad:c0:b0: 53:59:24:2f:36:3f:e9:29:56:99:f5:1c:3a:1a:80: 0b:5e:ea:f9:d0:26:36:da:2a:8e:4f:6e:61:8b:f8: 98:87:5f:87:7f:ff:4c:4a:6e:fd:2c:78:67:cd:1b: 5d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:9A:B6:BB:AC:06:FA:EA:4A:FC:64:66:A4:BE:99:FA:76:DB:5F:03 X509v3 Authority Key Identifier: keyid:F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:42:a4:c6:10:70:88:05:2e:1d:4e:1b:ab:29:4c:56:1d:b3: 6b:8a:eb:66:e2:21:92:06:8b:67:31:61:6c:0d:85:8e:f3:86: 0b:94:e7:c7:09:f9:fe:8b:67:ff:e5:8f:e9:5d:1d:f7:e2:5c: 0c:2b:c5:a8:56:60:1f:89:c3:12:93:f5:d6:8b:77:d1:1b:4e: 26:d4:c5:fa:1a:78:8f:34:44:f5:94:4a:8f:44:35:ff:df:6a: 73:07:94:fb:ea:8f:6d:39:39:83:be:bd:d0:65:af:cf:fe:ff: 68:09:dc:8a:b7:b9:71:84:a6:1a:d1:03:08:e7:40:93:29:92: b3:89:8a:a8:a2:9a:40:1c:3b:c8:24:35:df:ea:a0:81:af:d0: a7:b5:e6:9f:55:bb:bb:11:a8:f1:01:c3:63:2a:7b:50:5a:67: 37:5d:13:4c:78:dd:51:cd:5d:79:5e:a0:33:75:32:1a:61:43: 69:bf:3a:8c:fe:04:14:3a:e8:22:77:f2:47:2b:d0:22:3a:bc: e4:72:21:44:ae:ec:64:d2:bb:af:94:0e:58:38:2f:63:6e:91: 34:49:d0:10:7f:ce:50:3c:ad:57:c0:04:a0:1c:14:12:67:14: bc:ab:7b:6e:d2:7f:3c:5a:16:47:20:b7:81:fd:fa:2e:55:9a: 96:6d:a3:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ3+9Slzj4lk4yKeqsRjlryMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNTIxMTI4Y2Y2MzRhYTZhZmE3ZWY1MmQ1MzFmM2ZjZDU1 NjI4ZjkwHhcNMjUwNDI3MTYwMTU0WhcNMjUwNDI4MTYwMTU0WjAzMTEwLwYDVQQD EyhiZTlhYjZiYmFjMDZmYWVhNGFmYzY0NjZhNGJlOTlmYTc2ZGI1ZjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHlGyeCyf875vGTA8VPDEeNBVvWp gyGY3fpwY954AFv9GjEGHCF73nM0lFA/spHJNsLBnQNs0bbVb+z7DMcov/drk2kL ChNRiaTRiund1yn2wqWImTEB4qmyTz9cdZUJCypr/gQjSQTRXb2LiZ2/kQWbfWws MzP30VtEHFDC1AFqI8wHOBWLAXXJT21k6Xot/XWJ9fb+9qSf4B096R/76KqgGRWp 2T1BEXaRudkY0Cc/PZIrdMaxDdYO206W5aY1VTtFQn5zFOamgum6VdatwLBTWSQv Nj/pKVaZ9Rw6GoALXur50CY22iqOT25hi/iYh1+Hf/9MSm79LHhnzRtdFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL6atrusBvrqSvxkZqS+mfp2218DMB8GA1UdIwQY MBaAFPBSESjPY0qmr6fvUtUx8/zVVij5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUt ZTQ0MTliNjQyMTJlLzEvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUtZTQ0MTliNjQyMTJl LzEvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACUKkxhBw iAUuHU4bqylMVh2za4rrZuIhkgaLZzFhbA2FjvOGC5Tnxwn5/otn/+WP6V0d9+Jc DCvFqFZgH4nDEpP11ot30RtOJtTF+hp4jzRE9ZRKj0Q1/99qcweU++qPbTk5g769 0GWvz/7/aAncire5cYSmGtEDCOdAkymSs4mKqKKaQBw7yCQ13+qgga/Qp7Xmn1W7 uxGo8QHDYyp7UFpnN10TTHjdUc1deV6gM3UyGmFDab86jP4EFDroInfyRyvQIjq8 5HIhRK7sZNK7r5QOWDgvY26RNEnQEH/OUDytV8AEoBwUEmcUvKt7btJ/PFoWRyC3 gf36LlWalm2jOQ== -----END CERTIFICATE-----Generated at Mon Apr 28 00:37:12 2025 by rpki-client