$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft File: _zFJJHOnjG_p9Tn5-n0iUlYKK34.mft (raw, json) Hash identifier: snmsSIqXv71Vx7Sv02bd3ZGClN3jb4y2fRLogwEjuaw= Subject key identifier: 9F:08:38:AB:B1:99:FA:F1:F7:55:00:C4:F2:7F:13:9D:57:CC:33:AB Authority key identifier: FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E Certificate issuer: /CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e Certificate serial: 01967E338D06683F607254859EFD63444CB1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft Manifest number: 14D8 Signing time: Mon 28 Apr 2025 21:00:29 +0000 Manifest this update: Mon 28 Apr 2025 21:00:29 +0000 Manifest next update: Tue 29 Apr 2025 21:00:29 +0000 Files and hashes: 1: 9qi9h0f9RsAWpZuFc_s4Cmk2M0A.roa (hash: b6ycNMYfYTSq+8wwlth6XhXq2jeSDZcud5rVJF56Fyg=) 2: D-zKhuWPkxLy8zaYbK0D0Frw7ec.roa (hash: w8bSqTQlhfxtATfQh4eWS/eZa2u3cEwYUnWnj6COmyg=) 3: F_cRK7_FuJ1SOPF-eStGPWamodQ.roa (hash: bwgPCaYQdCUVOLDgCvOHRKGxaq7IRtIbjKPrwDwOiGI=) 4: JaFKfYKslg0WUVhBG8hHu6LqTvw.roa (hash: 4GgDdTVxQxqewTP0EOz1RIPWIQ2EEWazgc1qxopxzyA=) 5: NiD2SDjoMC5kCqhJ0LqUs7rzMnw.roa (hash: 9+KHXzf6QQ6hX/XBCMhmaRntprEYELpBh7Oa+Qw01T4=) 6: U6O4fPn6akIpWmgc4yJT0O6kLpo.roa (hash: yofA2VyhfSO3CESlgcLfFamVAKarRdUA7fzOcVSh6T0=) 7: _zFJJHOnjG_p9Tn5-n0iUlYKK34.crl (hash: hS1POOWOLpInWOFUllwWShvz2C9/bEpgBSVnDgLtNkA=) 8: ktD6AyHksOCblKN9a3qVRt27m9o.roa (hash: V5QNEtlJtM9vZYXeCjRbhyFbWnet1Vj6bUBis/VvlnY=) 9: u3VJR1_M7JzYx842qLGTM0en5V0.roa (hash: qbP/xDwKS1NUr1YSZhW1L+ZrVrT39XIk/W4+EAm8kOI=) 10: y4Nw6VYuIuUZOv6I685fKqZhbWQ.roa (hash: JM0RAslsFdrhEKUBmY+ywDM/Jo6q24Igd7pWLFOkC9Q=) 11: y59FYS6lZrG-f16cItpm531MOXQ.roa (hash: m/cQn2JcKJOMV46aRM88IL5ucBeWO1CQAwW+N3Yj5A4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:7e:33:8d:06:68:3f:60:72:54:85:9e:fd:63:44:4c:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e Validity Not Before: Apr 28 21:00:29 2025 GMT Not After : Apr 29 21:00:29 2025 GMT Subject: CN=9f0838abb199faf1f75500c4f27f139d57cc33ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:0c:7c:77:b8:a6:93:56:72:e8:3b:b6:eb:04: 59:b1:90:5f:87:f8:46:5b:53:36:c3:a4:e2:8a:95: 7e:0b:f2:5f:de:d2:69:11:30:eb:1e:44:b8:9b:cf: 42:75:26:04:48:1f:7e:22:51:33:63:30:87:4c:e9: 61:1d:e5:fc:92:36:4d:1a:0b:95:c9:ee:19:0e:d8: 9f:c1:f4:a7:94:a6:c1:33:8b:cc:fd:ce:23:93:76: 2e:c1:00:0e:47:65:4e:82:f1:71:fa:48:dc:98:24: d8:ab:e1:3e:48:5b:a5:41:d3:4a:65:d7:da:39:b9: 6a:b7:f6:0d:df:b5:94:c5:08:7e:ed:98:51:d9:47: 68:a6:5b:48:47:19:49:be:66:1a:fc:d4:a3:69:34: fd:29:70:3c:ac:02:66:fe:bc:54:9a:7a:10:80:be: f2:7a:e0:37:66:30:b8:ae:73:15:78:d7:c5:9e:bd: 31:7f:60:55:b1:80:2b:ee:e4:67:71:79:88:b3:df: c4:f2:e6:bc:b2:d4:56:04:6a:cd:21:5c:64:e9:fa: f0:91:c3:b4:84:ce:90:2e:1f:04:0d:e6:c6:ca:a0: f6:74:c8:76:c7:18:cb:4e:e5:1c:e6:74:d6:97:b7: 24:bc:ab:53:ca:af:b3:c2:94:ae:5f:54:c1:8d:21: e1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:08:38:AB:B1:99:FA:F1:F7:55:00:C4:F2:7F:13:9D:57:CC:33:AB X509v3 Authority Key Identifier: keyid:FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:22:3a:d1:10:ba:ce:c1:2e:3d:51:2c:5d:f7:81:98:0e:be: 6c:ce:9e:93:d4:70:c2:b9:fe:b0:35:09:61:72:12:4c:c8:e2: bb:7f:f0:f0:03:f4:b9:b1:af:ba:f8:a2:de:d7:db:ef:52:dc: 03:78:25:86:ba:00:3c:6c:f8:64:12:2e:e4:74:fb:28:49:16: f3:d5:fe:8b:03:fe:4f:44:ee:f6:fd:61:32:90:48:a1:53:ff: ec:5a:d4:88:64:70:dd:29:71:7c:c8:67:db:c8:89:e9:f1:19: 70:8a:ef:7a:23:48:02:da:77:14:f0:41:a5:1e:d5:9a:94:f2: 24:d9:7f:ba:d9:3a:45:21:f0:b0:ed:15:3c:c0:2a:df:f3:3d: 23:5b:e2:cf:ce:4d:1a:0a:13:c0:3e:e1:7e:31:54:39:66:8e: 9b:84:e2:1a:63:4e:29:42:15:da:9b:06:f9:95:98:e3:c8:8e: 3d:43:68:0d:13:90:7e:59:24:4e:29:2c:72:54:e7:f0:19:25: 9a:ff:1a:4a:b5:99:d1:98:f1:f1:d6:99:5f:82:0d:33:d6:db: d2:d5:d5:8b:f5:b4:3c:67:1e:a0:bc:08:c5:62:82:03:ff:ba: 6c:e1:d9:12:e6:bf:14:fc:a5:bf:4a:1c:c0:b5:9a:9f:3b:14: 8d:ab:63:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ+M40GaD9gclSFnv1jREyxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMzE0OTI0NzNhNzhjNmZlOWY1MzlmOWZhN2QyMjUyNTYw YTJiN2UwHhcNMjUwNDI4MjEwMDI5WhcNMjUwNDI5MjEwMDI5WjAzMTEwLwYDVQQD Eyg5ZjA4MzhhYmIxOTlmYWYxZjc1NTAwYzRmMjdmMTM5ZDU3Y2MzM2FiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Qx8d7imk1Zy6Du26wRZsZBfh/hG W1M2w6TiipV+C/Jf3tJpETDrHkS4m89CdSYESB9+IlEzYzCHTOlhHeX8kjZNGguV ye4ZDtifwfSnlKbBM4vM/c4jk3YuwQAOR2VOgvFx+kjcmCTYq+E+SFulQdNKZdfa Oblqt/YN37WUxQh+7ZhR2UdopltIRxlJvmYa/NSjaTT9KXA8rAJm/rxUmnoQgL7y euA3ZjC4rnMVeNfFnr0xf2BVsYAr7uRncXmIs9/E8ua8stRWBGrNIVxk6frwkcO0 hM6QLh8EDebGyqD2dMh2xxjLTuUc5nTWl7ckvKtTyq+zwpSuX1TBjSHh6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ8IOKuxmfrx91UAxPJ/E51XzDOrMB8GA1UdIwQY MBaAFP8xSSRzp4xv6fU5+fp9IlJWCit+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDct NzNmZDNiYzE5YWE3LzEvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDctNzNmZDNiYzE5YWE3 LzEvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQyI60RC6 zsEuPVEsXfeBmA6+bM6ek9Rwwrn+sDUJYXISTMjiu3/w8AP0ubGvuvii3tfb71Lc A3glhroAPGz4ZBIu5HT7KEkW89X+iwP+T0Tu9v1hMpBIoVP/7FrUiGRw3SlxfMhn 28iJ6fEZcIrveiNIAtp3FPBBpR7VmpTyJNl/utk6RSHwsO0VPMAq3/M9I1viz85N GgoTwD7hfjFUOWaOm4TiGmNOKUIV2psG+ZWY48iOPUNoDROQflkkTiksclTn8Bkl mv8aSrWZ0Zjx8daZX4INM9bb0tXVi/W0PGceoLwIxWKCA/+6bOHZEua/FPylv0oc wLWanzsUjatjaQ== -----END CERTIFICATE-----Generated at Tue Apr 29 07:12:31 2025 by rpki-client