$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft File: vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft (raw, json) Hash identifier: hapeJrxWqKxu8P/CQCjtUkLnaWKMAdv0fn/Ll1flXQQ= Subject key identifier: DF:8F:B8:8D:8A:35:D4:D9:FC:8C:58:DD:81:62:E0:47:76:5B:0E:00 Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Certificate serial: 0196718ADBDD766225FA0E295731CA7AE2AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft Manifest number: 1263 Signing time: Sat 26 Apr 2025 10:00:47 +0000 Manifest this update: Sat 26 Apr 2025 10:00:47 +0000 Manifest next update: Sun 27 Apr 2025 10:00:47 +0000 Files and hashes: 1: 0pSLjaK5jJNleu-R1-JaIUNyXTw.roa (hash: du8WDP9/QiGqQOMX+ttIn10kEatb/Zs0qVgMPU5RqcE=) 2: 1WhmCNdV46akTWjdNSLb7xvYYGY.roa (hash: YgT7som/aRyqXmNhgGt4xOXpluNZMOE49qj62NVQC/I=) 3: 47Db6II4VWguGq1fmON_zyxfDTw.roa (hash: EtXOL534BY7YerRgShjwEr47qYY33r1iCEI0u/06D0o=) 4: 7-GhubYtfN_LHVkFF6zgqVFEil8.roa (hash: nMY0AubUAwGxLZdATA5AGoarINwqSaBiO8weqjvyFYE=) 5: 9o1bJHIY2DKstOflrYyuB4_xDJU.roa (hash: v84lCLYd/0h8qh/tv6tRvbnV7bRzw3VazSaPX2e1ubo=) 6: BQ_7CRByLAUpF1evkSyLCrrovKE.roa (hash: uT3RGzji41/DL4m9M7hw+Zpz+kLpotb4EKSd9Zae5tA=) 7: CQSr_mSGvx_MO501tTIbCtodnJs.roa (hash: esowCKU64ui4/Ap6GOn6lU0uRgAnfvEQjSsW8NdABkY=) 8: GDi32Sl_OrQquHaF5eRnZJe-JNU.roa (hash: SiXuwxSrm46q0wZ0C2mDE4OXGGQ9n7xN1flM/SzNXRA=) 9: I8S2hVkDs5WQ9gotPSw5OhIE_XU.roa (hash: 5OhiLGp3GkkcRYzG4tfq1G76vW7BOIqKJjeoc64Pt4o=) 10: MhM8AdXgoCd4zrzFUNyYeB1JwVg.roa (hash: x8CsV2gfv0T+wUL+aorX982fUJ/l+SVnwH0Xs0/jba0=) 11: PBWz5FaEMqr9VnHaKiVhm-NVVl8.roa (hash: RIMrhXVWZgpA4EKCo1eJ1BqfdDBJ/tZAXJ7v1AtcQKI=) 12: TEmBttlqOql-6WlBVV0HWvswEQo.roa (hash: fN7yflsLhVlqg4R45jJbYQ9DskvVzHDmzUKU/2SCJrQ=) 13: bKDzGVLS3_6865mtln3Kw5WmywQ.roa (hash: 1z8bJ9Dv0gvS7Kzr3By8Hyv6gfSz5rRy8bS1g5sgkAA=) 14: bm3jAPSokNwmkDXJzC1yE4mlh8U.roa (hash: Ugi+oeIGdBF2ZuSWBZVXXcNVIbH2fno96x0J1auQtLQ=) 15: dGOEJpiLqXr1GxRQGfDAi5gIbkg.roa (hash: +wCypBByvXlOI7hJJjkhkxo33K/FrkpIIcsdMGYENyU=) 16: dU3qmUSa0GUKRhwNtqeBWyfdFgA.roa (hash: +1noky3lUg4Xw21sSrzlUFu5e24FajFmXh8kqpW0IH8=) 17: ieLYYEtxw8yorIFSAMUiUnhPzxc.roa (hash: zpEjE+0wqNe3063Xp+u8y1IQ6Fze1n5YSctd31AydZQ=) 18: kP7-2BrCdrR1vflyzN6bCG-bC4Y.roa (hash: uhNV7zf/NfCBx0RNf+uccZmVPDDvd1bgU3gAxdkEF5g=) 19: m-Q_Wn24gdJ-kqlu-siY_6OniFE.roa (hash: +f069Ignbpg0zmLTIqsmUaOuN5XLud0PtvHpBkikPfg=) 20: pubBNtMB3i07GYMPpVIhhyFOTo8.roa (hash: Mn01o/7jdUgPgTc66DieNIOLFHGdyMS6RTRjsWHR/O4=) 21: sucSe0eC1r3sihXi_iaR2SOp89U.roa (hash: /HwnUsqpfauRDshlfSmbLyvgIlTpLPydMX0GwSKwT/o=) 22: uGhxQuJoiydmGBCdoiTuE4rnskY.roa (hash: cp9F2KjzrCdyiwYgQ04s2rnpm15FpJSYgYYNO9VL9i4=) 23: vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl (hash: zEGmY1vFntgust08EqyVHAagsYT6Bb0Y0v/zsenTfFA=) 24: w35GeF1NRVWkdgYrM-D2oVh4XKk.roa (hash: 0xzHuhqUOoAiP/Y6/IovF7/iSmc6xQ7Xmuv7ej0uOJ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 10:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:71:8a:db:dd:76:62:25:fa:0e:29:57:31:ca:7a:e2:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Validity Not Before: Apr 26 10:00:47 2025 GMT Not After : Apr 27 10:00:47 2025 GMT Subject: CN=df8fb88d8a35d4d9fc8c58dd8162e047765b0e00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:89:56:8e:9f:a1:84:8c:6d:e1:8d:13:a5:d3: 1d:c2:de:cf:d5:9c:e9:0a:db:cd:57:9b:09:2c:f5: 35:a5:c7:52:c8:c4:cd:bc:3d:27:9b:02:ee:1f:ad: 66:ff:13:ad:a9:06:69:22:6e:f6:e5:fc:5e:54:e0: 24:dd:23:e6:05:db:5e:d3:f0:0b:74:56:b0:b0:a7: 00:30:1d:9b:f5:79:b6:f3:49:08:e6:a5:dc:2b:b5: 52:5d:4d:80:9f:97:b4:e9:6c:d2:4b:6d:c6:09:09: 58:df:c8:87:e4:21:fb:51:fc:46:87:85:69:8a:53: 35:99:15:dd:58:0d:96:bc:72:bf:35:7f:52:80:50: 94:a8:2b:2c:5a:0f:d5:46:36:4d:41:2c:aa:2a:e9: 6e:db:4a:0b:58:11:40:11:93:95:17:70:83:2b:aa: d5:e0:d9:11:f8:86:01:5e:fa:25:b6:c5:24:1c:f4: b1:26:92:39:bb:87:9d:62:1b:f8:a2:2b:93:c8:9c: 1d:eb:04:4e:89:ca:3a:53:2a:a7:fd:bf:6e:9a:44: 19:5a:26:a4:a3:2c:2f:72:f6:84:cd:1c:13:77:21: fd:33:bf:e9:39:4d:5d:13:6a:bd:71:21:b9:84:8a: ec:bd:0e:49:46:2f:d5:76:34:5e:d5:2a:dd:48:f5: c6:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:8F:B8:8D:8A:35:D4:D9:FC:8C:58:DD:81:62:E0:47:76:5B:0E:00 X509v3 Authority Key Identifier: keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:6c:c0:e7:2d:2a:16:eb:2e:fd:d7:ef:dd:9e:77:bc:dd:21: ff:f6:06:ea:71:c3:2d:c3:d6:f5:d1:14:ee:d6:4f:d7:09:c4: b1:83:57:cf:90:61:7b:2b:ad:dc:d8:00:c9:06:d8:f1:ef:8c: b9:60:50:a0:0b:f1:ad:2b:aa:b8:dd:2d:c9:6c:12:fc:1d:85: 02:86:88:f0:b4:da:74:ae:93:9c:55:bd:58:55:b3:dc:55:33: 34:e4:4e:db:7b:34:2b:af:22:f0:bc:92:a4:b8:44:17:61:c2: 88:df:24:93:e7:c1:74:ef:d2:71:99:b9:b5:0c:af:6e:83:d8: 32:36:db:af:ee:e9:b2:a0:d1:ad:4a:9f:14:15:0e:81:20:5d: d4:08:bb:60:0a:a2:d0:17:7d:4e:3b:9f:88:fc:94:0a:c8:3d: 41:be:64:4e:a3:d2:b3:74:5e:8e:73:43:49:22:8c:39:ec:37: c7:23:b0:f6:4c:ca:22:f6:17:50:4e:c3:e9:f8:a1:cd:cc:d8: 7e:2f:69:8c:fa:5e:53:38:5e:d3:ba:8c:15:8d:f0:72:75:8c: f4:76:7f:50:f4:2c:ca:34:54:dc:a4:c5:11:05:ce:01:5b:d3: 40:99:94:93:a1:b5:b3:b2:05:87:6c:90:cf:ea:cf:05:de:5f: eb:00:24:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZxitvddmIl+g4pVzHKeuKuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjZmRmZTZkY2E4YWM3YmZhMWE5NDUwZWY5OWZkMzE1ZWQw MmFjZDkwHhcNMjUwNDI2MTAwMDQ3WhcNMjUwNDI3MTAwMDQ3WjAzMTEwLwYDVQQD EyhkZjhmYjg4ZDhhMzVkNGQ5ZmM4YzU4ZGQ4MTYyZTA0Nzc2NWIwZTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIlWjp+hhIxt4Y0TpdMdwt7P1Zzp CtvNV5sJLPU1pcdSyMTNvD0nmwLuH61m/xOtqQZpIm725fxeVOAk3SPmBdte0/AL dFawsKcAMB2b9Xm280kI5qXcK7VSXU2An5e06WzSS23GCQlY38iH5CH7UfxGh4Vp ilM1mRXdWA2WvHK/NX9SgFCUqCssWg/VRjZNQSyqKulu20oLWBFAEZOVF3CDK6rV 4NkR+IYBXvoltsUkHPSxJpI5u4edYhv4oiuTyJwd6wROico6Uyqn/b9umkQZWiak oywvcvaEzRwTdyH9M7/pOU1dE2q9cSG5hIrsvQ5JRi/VdjRe1SrdSPXG6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN+PuI2KNdTZ/IxY3YFi4Ed2Ww4AMB8GA1UdIwQY MBaAFLz9/m3Kise/oalFDvmf0xXtAqzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmIt MWFmMjQ2NWE4ZWVjLzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmItMWFmMjQ2NWE4ZWVj LzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGmzA5y0q Fusu/dfv3Z53vN0h//YG6nHDLcPW9dEU7tZP1wnEsYNXz5Bheyut3NgAyQbY8e+M uWBQoAvxrSuquN0tyWwS/B2FAoaI8LTadK6TnFW9WFWz3FUzNORO23s0K68i8LyS pLhEF2HCiN8kk+fBdO/ScZm5tQyvboPYMjbbr+7psqDRrUqfFBUOgSBd1Ai7YAqi 0Bd9TjufiPyUCsg9Qb5kTqPSs3RejnNDSSKMOew3xyOw9kzKIvYXUE7D6fihzczY fi9pjPpeUzhe07qMFY3wcnWM9HZ/UPQsyjRU3KTFEQXOAVvTQJmUk6G1s7IFh2yQ z+rPBd5f6wAkdg== -----END CERTIFICATE-----Generated at Sat Apr 26 19:02:52 2025 by rpki-client