$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft File: 3_JHJt8-d_b0yOBDZhOzURDurzg.mft (raw, json) Hash identifier: +irdQuaEBc/3hm7Wmeaj6g2MaskYgRT1P32BV/lxiag= Subject key identifier: B3:BE:17:4E:BD:09:C8:C4:DF:1D:DC:1D:F8:10:BE:81:ED:D8:59:6D Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38 Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38 Certificate serial: 0196730B079A1B94B85A316E2EC46BABC215 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft Manifest number: 1101 Signing time: Sat 26 Apr 2025 17:00:24 +0000 Manifest this update: Sat 26 Apr 2025 17:00:24 +0000 Manifest next update: Sun 27 Apr 2025 17:00:24 +0000 Files and hashes: 1: 2t-i2kopwR52Z_Mpc2NKni29tLQ.roa (hash: tZUsUngIszxCM0ZEk2P0zYz3h8rOxng23uEouu0fEOA=) 2: 3_HM3LXI2dI7yCUkbwsS0LVmtPQ.roa (hash: dlvoBhBeGam9xbjGOiUpXKoso+XH3qNTVfnBCvdbd3Q=) 3: 3_JHJt8-d_b0yOBDZhOzURDurzg.crl (hash: RBVZ/YSdrVtE5vO36EnVdlQkYleoOeq53o3NTaWyp+0=) 4: E_7EA8UJkxlGETtzRt_qHmFJYsI.roa (hash: 407g7UlI6CqSY6AOA+kHrysQofaOwh0+lRwTxsDvEPM=) 5: EgzHUocwnSDaTR0mcH1N2AahbPA.roa (hash: qnns/hwFAonNH2cGnXK7MoaWY9Y+ZF5REF6qTFex00M=) 6: EqWJbW00yHom-8ojBy6QYR1H3FM.roa (hash: jchk7todvo3pxE5MJlQ/7M5jHRN15mY+WmGn6RIiL74=) 7: KByvn3G9xMi5zVMf2hfCx6ANxyI.roa (hash: h4AZQDVtiSftBpybDJxG4QIlGy8TOkA79xpxhxDweg4=) 8: LBBRl1_5PTCAndMsefaH2qIgsWI.roa (hash: P4yu/hSYw0dip59FJgO1wKqB51hJxMddEa7BdAJON18=) 9: SFJQLYtyuvLa-Z-_p6GETmClzzQ.roa (hash: TpY/D4v+35T3Gg8FMD0C6YxKf8fx/yuDpF1EWp6QNws=) 10: SW2UHW6XXrCRSFkNV0CVmfSilT8.roa (hash: OU29d/hqTbWW7Cob/3TqpwPxH+8rWvDwLVXV+Khg58o=) 11: gLpL93_717seB53wtn-PIYRSJpQ.roa (hash: BEBryS8Pk5M96RkjmV9ApUKiEfxXTgBuMMQoR0rPtvE=) 12: qIy8EEGEKThhCv4eyhu0aaS6jQQ.roa (hash: FTpKxy8SMv8Ii+e2R+cokRiry1onK0HB+M+lb5hU0DQ=) 13: sl5VJ3i7CbF6mq-XTH5pxWMmK5o.roa (hash: 4bfJxuYHYnVskQrhNVV+ZwN1afVTdgzyH0yWLAaqMRM=) 14: yiW-kmeX6T3jx-yL7EZZYoVvwps.roa (hash: QstF1sZuORe/6EM2aW5TGBrHuj8rjUHPJQAAamVQG0Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 11:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:73:0b:07:9a:1b:94:b8:5a:31:6e:2e:c4:6b:ab:c2:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38 Validity Not Before: Apr 26 17:00:24 2025 GMT Not After : Apr 27 17:00:24 2025 GMT Subject: CN=b3be174ebd09c8c4df1ddc1df810be81edd8596d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:2a:77:5b:be:06:13:d3:6f:86:4b:ed:de:b8: 6b:6b:79:d2:a3:03:da:dd:ed:51:d6:a6:99:06:d6: c5:2c:f8:1a:cc:fa:4d:3b:b5:07:4b:9b:e4:b7:1b: d9:d7:9b:5a:ee:c0:b8:2f:fe:e1:63:42:56:01:1d: a7:aa:71:9f:0d:d5:c1:34:9e:0c:39:b0:fc:12:97: a6:17:0c:f2:f0:16:ce:ed:75:9c:23:bb:b8:0b:c6: 9f:3c:31:62:e3:62:cb:60:51:86:50:75:e8:62:d4: fb:51:20:60:8f:76:11:ab:2b:90:de:ca:9c:69:a8: bd:dd:60:ac:c1:9b:9d:95:91:14:1a:18:73:02:d6: 00:36:ff:9f:b2:16:4e:ca:cc:7a:d3:a6:b4:c3:c2: ef:ee:4a:a7:df:56:e3:f5:a5:16:a1:33:e1:29:33: 50:55:25:8a:3c:e8:43:30:d6:a3:cd:b8:d3:33:1c: 2c:dd:e5:a5:17:91:09:3d:e4:90:d6:cd:54:52:30: fb:28:9b:b3:95:d5:62:2a:b7:6d:47:06:e1:29:0a: 1a:d0:fb:6a:77:5f:2b:17:e6:84:f5:4f:f2:f2:4e: 3b:61:c0:7c:f4:39:64:28:16:5d:2b:7c:af:62:0d: e3:fb:3d:78:61:66:20:86:b8:79:79:ed:9c:78:6b: 47:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:BE:17:4E:BD:09:C8:C4:DF:1D:DC:1D:F8:10:BE:81:ED:D8:59:6D X509v3 Authority Key Identifier: keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:83:c7:5f:36:02:13:fd:0d:75:28:a0:2f:15:06:fd:41:ee: 6d:ba:c6:fb:f7:e8:23:0b:84:6a:9f:55:1d:20:7a:4f:31:a1: c9:23:c4:b0:92:f2:c9:61:05:2a:5c:03:bd:77:95:dc:c2:2b: cf:50:9d:cb:88:a6:5c:03:0e:ec:d0:26:7b:67:2e:8d:34:80: f7:e4:23:67:fb:25:79:6d:74:ec:bc:2f:d2:7f:02:08:33:78: 33:ba:1d:fe:21:f1:5e:6c:10:90:cb:82:bf:a6:88:ae:60:b9: 0d:a5:34:b0:d5:c8:38:7d:ee:6c:8a:95:d5:f5:58:d4:fb:b9: a2:75:45:af:c7:c0:c4:dc:51:ee:45:47:77:e4:70:c7:cc:cc: 45:00:f2:5d:61:1a:8f:82:d0:f8:d0:5f:c0:c2:86:40:40:2c: da:0c:75:43:d7:d7:b2:c3:00:75:7b:ad:7c:b8:4b:35:13:85: dc:cf:05:8d:4e:45:c6:8e:4d:4d:db:47:a0:67:29:74:2f:5f: 38:70:69:3e:d5:29:64:7a:b6:6e:57:06:1b:19:92:a3:9e:40: 82:12:42:e6:95:50:bc:02:d1:04:a5:af:5f:72:69:4a:e7:f8: b1:ec:5e:f0:fc:5e:13:55:1f:c6:71:20:11:cf:d3:79:49:f1: ae:0c:4f:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZzCweaG5S4WjFuLsRrq8IVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmZjI0NzI2ZGYzZTc3ZjZmNGM4ZTA0MzY2MTNiMzUxMTBl ZWFmMzgwHhcNMjUwNDI2MTcwMDI0WhcNMjUwNDI3MTcwMDI0WjAzMTEwLwYDVQQD EyhiM2JlMTc0ZWJkMDljOGM0ZGYxZGRjMWRmODEwYmU4MWVkZDg1OTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiip3W74GE9Nvhkvt3rhra3nSowPa 3e1R1qaZBtbFLPgazPpNO7UHS5vktxvZ15ta7sC4L/7hY0JWAR2nqnGfDdXBNJ4M ObD8EpemFwzy8BbO7XWcI7u4C8afPDFi42LLYFGGUHXoYtT7USBgj3YRqyuQ3sqc aai93WCswZudlZEUGhhzAtYANv+fshZOysx606a0w8Lv7kqn31bj9aUWoTPhKTNQ VSWKPOhDMNajzbjTMxws3eWlF5EJPeSQ1s1UUjD7KJuzldViKrdtRwbhKQoa0Ptq d18rF+aE9U/y8k47YcB89DlkKBZdK3yvYg3j+z14YWYghrh5ee2ceGtHuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLO+F069CcjE3x3cHfgQvoHt2FltMB8GA1UdIwQY MBaAFN/yRybfPnf29MjgQ2YTs1EQ7q84MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzct NjJiYjZkNjNlNTlkLzEvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzctNjJiYjZkNjNlNTlk LzEvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM4PHXzYC E/0NdSigLxUG/UHubbrG+/foIwuEap9VHSB6TzGhySPEsJLyyWEFKlwDvXeV3MIr z1Cdy4imXAMO7NAme2cujTSA9+QjZ/sleW107Lwv0n8CCDN4M7od/iHxXmwQkMuC v6aIrmC5DaU0sNXIOH3ubIqV1fVY1Pu5onVFr8fAxNxR7kVHd+Rwx8zMRQDyXWEa j4LQ+NBfwMKGQEAs2gx1Q9fXssMAdXutfLhLNROF3M8FjU5Fxo5NTdtHoGcpdC9f OHBpPtUpZHq2blcGGxmSo55AghJC5pVQvALRBKWvX3JpSuf4sexe8PxeE1UfxnEg Ec/TeUnxrgxPQg== -----END CERTIFICATE-----Generated at Sat Apr 26 19:11:24 2025 by rpki-client