$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft File: MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft (raw, json) Hash identifier: hf+SZCu7KakyeIdQ1+A2qEV3didK6dIjIYgiE2jaQ4c= Subject key identifier: A0:6D:1A:9A:80:32:B2:E5:42:20:01:8D:C6:4E:10:D9:A0:13:04:25 Authority key identifier: 32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F Certificate issuer: /CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f Certificate serial: 019679445288B3FFE2A4B45E39A2725959CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft Manifest number: 152D Signing time: Sun 27 Apr 2025 22:00:42 +0000 Manifest this update: Sun 27 Apr 2025 22:00:42 +0000 Manifest next update: Mon 28 Apr 2025 22:00:42 +0000 Files and hashes: 1: 08x65D62xajmjuWxGOGX--5GFZ4.roa (hash: ku01TCluM3ObD1DEPpsLr/8jGhA1O5espf/zteTKSkk=) 2: 1-fxNLZQMykWE3SLBLsEKwibzn3o.roa (hash: U9t8UfOKITE6D0gBLc/Dtn9zr6EfXzJkxHJL0LBQvTo=) 3: FzyJ-A4chBzu8lQqhpLh4dfVe9s.roa (hash: kikBFtCVFZZA5yK1FlsJJ2Y15ol/mIm/K3+f2pwmt3Q=) 4: JRfXlKgZScSlnAP9_s4mWUCHMzI.roa (hash: Yofq9QzaUqxyhMLfnSLcXXtmS3vz0xWVOjl3kItQ1gM=) 5: MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl (hash: DJIVRwzsHEBbpUR/vYE8+4AxRjIGQWBAZp4drhB7owA=) 6: OOWsOYaSoAqJ3HO-R5wNTcf_irg.roa (hash: FHVKtTLfD9KJ5KSxDig6awJ13wpTnxgLs+NcZ0Q//g4=) 7: UI2cnhatNs5ZeysmslxEpLBSTew.roa (hash: axZPCQgEFKrONNIyjteNC+Y0RYmX6khaCS5yj1K7lFE=) 8: XIqtTjvuJ5glY39EaIP6KmILhoo.roa (hash: oyK+JoJZ3ZJXn7BAWGpujgyfoF5xI3Ds91YiwWdI2PE=) 9: b_MAVuI29oBciIh7vGGq0NJVEzc.roa (hash: hDxp3S5bhbbLqI6OACypq5MMFaQlI+7lCsYe3tJ2F9c=) 10: dOfaSe3fIYIhGR1xcwXjfUk3OeI.roa (hash: uz8UfxMH6M1zEnn7EFrd8TVCQANQpajV/Ux4YkN59Jk=) 11: ivBw7pb2lERE4O4pT70f-IjK-H8.roa (hash: 9+du4uvg6+sqYU99LVsbimMbdhpdO5ppSVPQO3/HDIY=) 12: mew8-eeZMjfWFrph1bkqTGd0o2o.roa (hash: ZTROpY1xzLgXXfO1lrdKWiIbYEdEw9dXrylpkOT7OWA=) 13: o56KW7qmKI89RBX7wwhJRJnWzxA.roa (hash: TSisfXvRUilLYjnEFcF1fY33OVEAWdRk4KyWKFaY7ZA=) 14: vaL0J_r43BzBTm5r8Bo75j0pTF8.roa (hash: 75FzmVXUE4MjGcr9LiSgeGxgqkVwVmsZ6mF1xXYO59Y=) 15: wjhfspu_G4HGizYS_OBNLClt3cU.roa (hash: bxfIFEAR3HaNo4msf1HR2PgJlfyMNGagLyOKrjbfFag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 22:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:79:44:52:88:b3:ff:e2:a4:b4:5e:39:a2:72:59:59:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f Validity Not Before: Apr 27 22:00:42 2025 GMT Not After : Apr 28 22:00:42 2025 GMT Subject: CN=a06d1a9a8032b2e54220018dc64e10d9a0130425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:36:a0:14:fc:c0:2c:b7:d2:01:66:8b:69:6b: 35:84:48:c4:29:9a:1b:d9:cb:d4:e8:42:f9:75:35: 35:68:a5:49:0c:8a:3c:18:03:e9:b9:c9:f4:f1:55: 8d:da:b6:59:f7:5c:d6:54:d9:a8:24:0b:7a:8f:b8: ab:8b:3d:fd:a7:f6:2d:61:f9:54:c6:72:f3:1c:42: 9e:a6:a6:9d:e8:7b:4a:ce:8c:b7:10:55:a6:c1:84: 27:48:3a:94:5d:98:76:ca:a6:39:78:35:cf:54:b2: 90:23:9d:80:38:95:23:2b:c5:5b:42:95:03:43:98: 92:65:75:ed:08:ce:14:3d:f7:9f:ae:7f:68:ee:d8: ef:6b:e2:b7:f1:fb:d9:ca:9e:d7:0e:0c:ed:f6:b1: 22:a0:86:3e:c8:0d:94:d2:dd:f0:b7:cd:e0:79:c7: 97:f6:0e:f9:33:12:54:57:de:cb:6c:16:78:ae:8d: 34:b5:4b:ba:4e:af:bd:31:9c:f8:0a:25:b5:2d:9b: a4:c3:b8:e4:41:6e:c4:0e:b9:30:80:ea:13:74:5d: 2c:c8:c7:90:c8:b2:85:5a:42:00:74:3f:47:2f:4b: 46:81:d2:72:15:c0:49:14:c2:a9:1b:ad:c8:82:f2: 56:54:dc:8e:19:2e:ed:9e:71:8d:f8:3a:0f:dd:94: 88:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:6D:1A:9A:80:32:B2:E5:42:20:01:8D:C6:4E:10:D9:A0:13:04:25 X509v3 Authority Key Identifier: keyid:32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:46:8c:1c:a6:32:d6:c7:92:07:b3:ef:ce:c2:2b:40:bf:53: 1a:b2:71:be:a2:85:66:f4:e7:66:b7:a8:d4:be:b3:1a:a8:9f: bd:b0:51:06:6d:5f:62:9c:96:f5:45:00:62:5a:98:18:93:45: b2:a8:36:3c:09:dd:97:ba:83:c1:dc:c4:35:ba:28:94:94:b1: 6c:9e:a5:80:81:8d:a5:96:71:dd:76:50:c4:4e:57:c0:6c:34: 72:a5:16:6b:e1:88:d0:d7:f8:d9:3f:26:17:e9:b1:e2:32:a5: 65:3d:1c:97:54:db:f4:f9:cf:83:ae:70:8d:f4:8f:2f:f1:03: 00:f1:e0:2f:65:54:e0:c8:c5:59:30:7b:48:f6:22:68:16:4f: f3:64:a9:32:81:97:22:96:cc:72:ca:26:fb:9e:b9:86:cc:aa: 1e:e1:f1:2e:09:21:84:30:b4:57:22:1f:87:5b:db:cc:ee:4c: 65:23:03:b7:d1:99:c0:e2:97:6f:d0:cd:c9:26:af:47:80:cc: 4b:7f:7e:35:f8:15:6a:1f:2d:cd:c8:67:05:4b:42:67:79:31: a9:c1:04:04:11:f2:79:3a:8f:8a:98:f8:6a:a1:9e:f6:73:5b: 8b:89:ce:b3:15:9c:48:57:60:d9:76:60:8a:8a:28:a6:14:a0: 89:b0:c1:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ5RFKIs//ipLReOaJyWVnKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNDc0YWM3Y2E4NWUwOWMyZDQ4YjMzZTdiZjY2ZjhlZDc2 NGRlMGYwHhcNMjUwNDI3MjIwMDQyWhcNMjUwNDI4MjIwMDQyWjAzMTEwLwYDVQQD EyhhMDZkMWE5YTgwMzJiMmU1NDIyMDAxOGRjNjRlMTBkOWEwMTMwNDI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjagFPzALLfSAWaLaWs1hEjEKZob 2cvU6EL5dTU1aKVJDIo8GAPpucn08VWN2rZZ91zWVNmoJAt6j7iriz39p/YtYflU xnLzHEKepqad6HtKzoy3EFWmwYQnSDqUXZh2yqY5eDXPVLKQI52AOJUjK8VbQpUD Q5iSZXXtCM4UPfefrn9o7tjva+K38fvZyp7XDgzt9rEioIY+yA2U0t3wt83geceX 9g75MxJUV97LbBZ4ro00tUu6Tq+9MZz4CiW1LZukw7jkQW7EDrkwgOoTdF0syMeQ yLKFWkIAdD9HL0tGgdJyFcBJFMKpG63IgvJWVNyOGS7tnnGN+DoP3ZSIzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKBtGpqAMrLlQiABjcZOENmgEwQlMB8GA1UdIwQY MBaAFDJHSsfKheCcLUizPnv2b47XZN4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8xZmQwYTYtNDUxNy00YTBiLWIzYzkt MTJlYzIyYzljNWEyLzEvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8xZmQwYTYtNDUxNy00YTBiLWIzYzktMTJlYzIyYzljNWEy LzEvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdUaMHKYy 1seSB7PvzsIrQL9TGrJxvqKFZvTnZreo1L6zGqifvbBRBm1fYpyW9UUAYlqYGJNF sqg2PAndl7qDwdzENboolJSxbJ6lgIGNpZZx3XZQxE5XwGw0cqUWa+GI0Nf42T8m F+mx4jKlZT0cl1Tb9PnPg65wjfSPL/EDAPHgL2VU4MjFWTB7SPYiaBZP82SpMoGX IpbMcsom+565hsyqHuHxLgkhhDC0VyIfh1vbzO5MZSMDt9GZwOKXb9DNySavR4DM S39+NfgVah8tzchnBUtCZ3kxqcEEBBHyeTqPipj4aqGe9nNbi4nOsxWcSFdg2XZg iooophSgibDByQ== -----END CERTIFICATE-----Generated at Mon Apr 28 06:19:07 2025 by rpki-client