$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft File: 2-arjgxG6EG0TSucawO7ZfViHbE.mft (raw, json) Hash identifier: DQ2wDAnsPmRsOPkBtQXIcEhjLJ7WpV9i1vr28Bt6Yo4= Subject key identifier: 87:89:AC:91:8C:8E:6D:D1:B5:F6:2F:17:EE:A1:07:1F:A1:5A:BA:52 Authority key identifier: DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1 Certificate issuer: /CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1 Certificate serial: 019673E6ED8B09E171EB4857549B695BB3D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft Manifest number: 1529 Signing time: Sat 26 Apr 2025 21:00:35 +0000 Manifest this update: Sat 26 Apr 2025 21:00:35 +0000 Manifest next update: Sun 27 Apr 2025 21:00:35 +0000 Files and hashes: 1: 1F-PLkJeZsd5BhbWomZg7cLPFrk.roa (hash: yrygGJcoXqVH2Jg8Juj5GnPuSpfNJREHSoSijlooIac=) 2: 2-arjgxG6EG0TSucawO7ZfViHbE.crl (hash: gmT/ix3MTJEsXejGW6cSAaDVPfQ5xb6TspJKVlI8Bnw=) 3: 3PFyhkeygxSnr9lo2JsKv8zzptA.roa (hash: q1R0erCPFvF5C0+eg74kijSUxdckHy4082+SsXMgLoI=) 4: 5gCvrLecynoNlZqqecgbQQFoRrQ.roa (hash: 9K+m38Q0PxPs98dlo8mOUJqX2gTHhK0yh4taoKPklF4=) 5: Hgi1HuyOIm-pDNTXBi7SDeMMv54.roa (hash: 4I6w4WrI+TeCpJfBFE/CPemODRHx6exn+BxP4Gc/fZ4=) 6: TXY1I130XvsaTvWkchtuWI-PM9g.roa (hash: TIrFe9IGuWpgbdyOP5J+JnA8eNzT/AVIEYMB6nU7cvM=) 7: VTFmKW5oJe_aki7x1urblkP0Fyc.roa (hash: 2MZuFdP6pQLocFIUqAzsdUT8olNA1CbFEwyUxslWUHU=) 8: WuMjl-VoG-q9mOfKlozyoU3i5Zc.roa (hash: gMQYLpr2E7Od3N3zIX37zoUdKHUCId0XHkWxbn/9Hs4=) 9: eL6yX2gKmuR54LoAuIUZEONKX3g.roa (hash: Wq/KgDr2vwlpid8VQStYJgjmPQjXNNh76BSl9DIrTcE=) 10: hBf-hoIhETw06OBRpv7F1WdTrE8.roa (hash: LSEM+beBKj2xu4gyMsUhzku59BFOyI6BOdyKq1jM8vA=) 11: nA9xLYDfBUMTndIiuMDxngVWqy8.roa (hash: pXyFBd1rpI+yPoJu0gr4TIbRfkcbLlWRK75T9hWlGqk=) 12: ps-3dIi4E3kjzYMhNLY6gSZjzEI.roa (hash: AimvrgTPnFzv1TtjV/eH/9wijMpIF0IeujrL4F6J9qw=) 13: vWlItCBxAXeKE8gJX96SzwOKVyc.roa (hash: Y2Q+VHBMvY4aKyxjSWnm9nXu79hw6C2astvb5J8gRi4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 17:20:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:73:e6:ed:8b:09:e1:71:eb:48:57:54:9b:69:5b:b3:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1 Validity Not Before: Apr 26 21:00:35 2025 GMT Not After : Apr 27 21:00:35 2025 GMT Subject: CN=8789ac918c8e6dd1b5f62f17eea1071fa15aba52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f6:08:f5:5a:cf:22:fd:61:6a:06:b7:6f:63: 42:66:a2:a4:45:e5:ed:f2:60:05:11:6c:cc:07:27: bd:48:16:4c:8e:3a:20:af:8b:3d:ae:2c:86:29:6b: 2e:96:e0:03:8b:cb:8d:9a:9d:33:af:92:c2:0a:c3: 94:ef:86:10:49:3b:89:88:37:3d:72:96:f8:3a:9f: 52:02:66:c8:52:5a:86:0a:ea:2d:76:04:bb:7c:e0: 0b:34:34:88:4c:2b:fb:ee:17:ab:25:4e:90:f3:b9: 6e:c0:bc:89:2c:37:ee:31:95:66:90:7d:61:1c:96: 51:4a:2e:a4:c4:36:27:20:db:af:47:bc:e3:a2:95: d8:3b:6b:20:1e:77:31:be:7a:4a:7e:7f:ba:78:e6: 0d:8a:5c:3d:a9:1b:6e:5b:52:39:96:2c:8d:b2:3b: 11:e2:b6:f3:56:10:ff:27:7b:16:e4:9b:c2:fb:3c: 42:ba:b7:66:4c:e2:cb:d2:ec:a2:9c:42:33:b6:70: 8f:88:3a:0f:7d:d5:55:23:88:bb:ef:f5:d0:34:30: 29:c7:26:fd:92:6c:f1:48:13:b4:70:30:00:81:56: 08:5b:cc:1d:c1:a1:97:05:3f:77:56:39:fd:d7:27: 2f:f5:4a:09:b0:24:66:d5:cd:63:25:97:54:ac:a2: 03:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:89:AC:91:8C:8E:6D:D1:B5:F6:2F:17:EE:A1:07:1F:A1:5A:BA:52 X509v3 Authority Key Identifier: keyid:DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:4c:29:55:dc:9e:91:5e:7b:0e:cc:5d:a3:11:78:49:f6:c4: 26:a9:9c:82:31:ea:99:3d:35:50:91:b4:98:56:bd:85:a0:07: d1:36:9f:26:0c:e4:52:d3:ff:36:2f:1f:59:7f:0e:b3:7d:a6: 1a:73:ad:f0:46:52:c8:0b:06:29:9a:02:27:31:35:b2:b0:2f: a3:78:0c:da:e5:5a:a9:0b:ca:95:11:4c:12:7f:bc:1d:e3:98: 55:88:9f:1e:85:9b:e5:52:c7:d2:cf:03:2c:e8:ba:c0:23:eb: 2f:a7:31:06:aa:50:1b:3e:c9:d5:e1:b0:9f:86:b4:aa:fa:09: aa:d2:a6:c0:8a:8a:7d:10:75:4b:f9:49:ce:16:c9:c9:a5:14: 53:5a:e9:43:0b:33:1c:8e:90:aa:cf:15:94:78:a3:ec:7f:ef: 7c:ab:ca:34:be:d6:b8:5e:0d:82:79:9a:ff:a2:b7:2e:0e:99: ce:c7:89:42:b8:4d:3f:8f:8f:1b:df:92:ee:3b:1b:25:a7:09: 7b:63:08:c9:93:55:f6:d5:86:f2:28:bc:e9:cb:72:ca:17:f8: 1f:13:1e:23:c2:3c:0a:e7:68:0c:ae:76:c8:56:94:3d:57:6f: 1d:cc:df:28:a2:d4:bf:1e:99:f2:af:ff:07:b5:88:91:4a:23: 60:b5:a5:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZz5u2LCeFx60hXVJtpW7PRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiZTZhYjhlMGM0NmU4NDFiNDRkMmI5YzZiMDNiYjY1ZjU2 MjFkYjEwHhcNMjUwNDI2MjEwMDM1WhcNMjUwNDI3MjEwMDM1WjAzMTEwLwYDVQQD Eyg4Nzg5YWM5MThjOGU2ZGQxYjVmNjJmMTdlZWExMDcxZmExNWFiYTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/YI9VrPIv1haga3b2NCZqKkReXt 8mAFEWzMBye9SBZMjjogr4s9riyGKWsuluADi8uNmp0zr5LCCsOU74YQSTuJiDc9 cpb4Op9SAmbIUlqGCuotdgS7fOALNDSITCv77herJU6Q87luwLyJLDfuMZVmkH1h HJZRSi6kxDYnINuvR7zjopXYO2sgHncxvnpKfn+6eOYNilw9qRtuW1I5liyNsjsR 4rbzVhD/J3sW5JvC+zxCurdmTOLL0uyinEIztnCPiDoPfdVVI4i77/XQNDApxyb9 kmzxSBO0cDAAgVYIW8wdwaGXBT93Vjn91ycv9UoJsCRm1c1jJZdUrKID4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIeJrJGMjm3RtfYvF+6hBx+hWrpSMB8GA1UdIwQY MBaAFNvmq44MRuhBtE0rnGsDu2X1Yh2xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS85NjQzNmMtZjZmYS00MGJhLWEyN2Mt ZmIxMDMwNjUxMDY3LzEvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS85NjQzNmMtZjZmYS00MGJhLWEyN2MtZmIxMDMwNjUxMDY3 LzEvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASkwpVdye kV57DsxdoxF4SfbEJqmcgjHqmT01UJG0mFa9haAH0TafJgzkUtP/Ni8fWX8Os32m GnOt8EZSyAsGKZoCJzE1srAvo3gM2uVaqQvKlRFMEn+8HeOYVYifHoWb5VLH0s8D LOi6wCPrL6cxBqpQGz7J1eGwn4a0qvoJqtKmwIqKfRB1S/lJzhbJyaUUU1rpQwsz HI6Qqs8VlHij7H/vfKvKNL7WuF4Ngnma/6K3Lg6ZzseJQrhNP4+PG9+S7jsbJacJ e2MIyZNV9tWG8ii86ctyyhf4HxMeI8I8CudoDK52yFaUPVdvHczfKKLUvx6Z8q// B7WIkUojYLWlcg== -----END CERTIFICATE-----Generated at Sun Apr 27 00:31:33 2025 by rpki-client