$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft File: pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft (raw, json) Hash identifier: lSCcE4VmDJlWzQKoix5pPCDW8QFnqgSwTpBCiKWqZ+s= Subject key identifier: 91:CC:D5:E3:CF:C0:61:DD:96:40:94:85:F0:79:EB:CC:6F:D0:96:85 Authority key identifier: A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60 Certificate issuer: /CN=a608db43964b6986ec740f0b5e33f627589ac560 Certificate serial: 01967C0DFAFCABB447FF53581E4EA4F8430F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft Manifest number: 1518 Signing time: Mon 28 Apr 2025 11:00:13 +0000 Manifest this update: Mon 28 Apr 2025 11:00:13 +0000 Manifest next update: Tue 29 Apr 2025 11:00:13 +0000 Files and hashes: 1: I3mgQ157a_bF2dTxc-vf7pMJtM4.roa (hash: 7UAHNapwwX16Slile1RjKMtt2nkeBVUncM7zwsYLT8w=) 2: MHgro3rXC3LA-ZCKp8QuaVCuDNM.roa (hash: sXYt7ycXFJCXAbuucaVo5/ccp47LCDa9LjtriRMFWXQ=) 3: PBXMgqYnsJA87BxLSTiMQaCiTQM.roa (hash: wzJgz/i9pbuBUkW2cHLEeF8EDXUdrOLSSMmRBwjvuyY=) 4: W9Inx9ixKUML_LOXnUHyVFrXNZE.roa (hash: Hce+QeLL7wTflcLdNV6AIKOI7Oh5vFKC0Lzm+giAD4k=) 5: aXYA7UmSga-uAKN3mA-MrcLvQNw.roa (hash: A6mLEC8I6HDPu8tLJ0OvOtzb6OIQimg3DdB4KG2uaDU=) 6: ci5DKE54eT5iN_nAPc-7X1GldFI.roa (hash: XQ0NDtKbc4dG/tVRbQc3pC1EJxNFS1iSTeQJD2B3KrE=) 7: gGa9g3xm-WUrWGnZqfKZudqy63U.roa (hash: gMhH5wVZGQUaR4GjDTcIjxc58KL7jUF42zUcWUMJNmY=) 8: hK0B_1bjDs4SgkjuewwBu_Hyp1Q.roa (hash: P1SdgqhUGccV0nstYPHl8zR8nqe1TrQ9TkFifIcHjeo=) 9: pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl (hash: JrnA4b5tPtEixUmXmmlLUkRHd7V0ty4sSZqL7LZPu4k=) 10: rWecwzOy_r05COuEiZl4KWht5j4.roa (hash: APFZzX7MSHk1ET0fGFHAZgyisv5z2ZfhR0L4cxUpeKo=) 11: zVSaKUExhHJLuuGxs99kYQGdQi0.roa (hash: kRzk6R6AO4mRz5HhKteUKae1kEl/X9QjV+pW67bmw5E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Apr 2025 11:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:7c:0d:fa:fc:ab:b4:47:ff:53:58:1e:4e:a4:f8:43:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a608db43964b6986ec740f0b5e33f627589ac560 Validity Not Before: Apr 28 11:00:13 2025 GMT Not After : Apr 29 11:00:13 2025 GMT Subject: CN=91ccd5e3cfc061dd96409485f079ebcc6fd09685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:04:d5:2b:b1:8a:6c:7d:a8:9e:ef:12:22:05: 12:f3:87:54:4c:e9:f2:0f:ac:04:01:4b:ac:9c:b4: e3:12:92:a4:71:0f:63:f4:39:fb:3d:b6:83:1f:c0: 2f:dc:81:ce:45:91:1f:b5:11:ce:22:0d:0a:21:88: 1d:6a:bc:62:14:94:e6:18:c2:a4:a5:29:21:9d:cc: 8d:a4:5c:7d:96:28:c9:66:78:4d:54:e1:e5:7d:61: 8b:5a:81:03:31:37:86:29:08:66:0e:01:c0:8d:2f: 7a:c5:b3:5d:2f:78:1f:7c:0c:57:d9:a5:e6:54:f1: 23:d2:9c:6d:81:8c:fd:5a:be:4c:30:d1:17:fd:a6: a8:ed:b1:20:36:67:63:c5:e3:85:eb:a3:2f:3b:59: ce:66:b7:bc:28:32:1c:a5:2a:5e:f1:4f:f5:67:1b: 39:a2:e1:03:9d:e3:db:44:ff:0e:91:0f:06:a6:3a: 4c:82:9f:3c:41:c6:37:bb:62:ae:06:33:d9:9b:7a: a7:aa:98:6f:b4:8a:9b:c1:eb:4b:ee:47:cd:98:ee: ab:84:99:58:be:6f:a0:87:c3:f6:3a:1e:5d:ba:0b: 24:3c:f8:69:33:10:4b:b8:56:38:3e:02:16:ce:12: a7:02:54:98:cc:83:d5:29:96:b9:a6:ea:89:0d:1a: 7e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:CC:D5:E3:CF:C0:61:DD:96:40:94:85:F0:79:EB:CC:6F:D0:96:85 X509v3 Authority Key Identifier: keyid:A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:03:f1:a9:23:68:64:92:48:7b:31:ea:43:d9:b2:52:47:40: 2f:34:3b:3f:90:cc:31:6b:99:ad:c9:5d:41:0a:0e:9f:f5:96: 82:18:0f:60:01:7f:6f:0a:f0:0b:69:d7:df:a3:38:82:74:99: 54:23:51:7d:fa:91:94:73:75:98:54:28:4a:e7:0a:06:d9:fb: dc:0e:22:a0:4c:1b:5e:a8:47:3c:7c:40:a7:b2:1b:bf:75:10: 9c:0e:4d:6d:2d:ce:71:87:2b:8c:ed:43:c3:65:75:85:ed:cf: 22:2f:b7:9c:34:ac:02:0e:b4:60:34:d7:fe:61:f8:ce:d3:16: 91:e3:93:ee:dc:ad:72:e2:cd:10:8d:be:8a:a7:2b:0c:a6:fc: e9:4f:41:af:42:4c:c9:18:a7:ea:e5:24:06:9c:3c:fc:6d:16: 35:a4:50:03:fe:21:6b:e7:8d:9a:87:14:04:cc:a0:5b:40:36: 58:a2:5b:0c:be:12:94:4e:80:b3:9b:35:cb:86:ec:a0:9e:b4: 37:19:be:87:b7:9f:6e:61:de:f3:11:6a:75:27:79:c2:de:b7: a5:6e:7d:dd:ae:7e:a0:b1:fb:01:9b:07:d4:7e:2e:8f:9d:d5: 20:33:87:ad:6e:80:04:fc:36:5e:6d:6f:8d:f8:99:eb:b7:93: f4:75:c2:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ8Dfr8q7RH/1NYHk6k+EMPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MDhkYjQzOTY0YjY5ODZlYzc0MGYwYjVlMzNmNjI3NTg5 YWM1NjAwHhcNMjUwNDI4MTEwMDEzWhcNMjUwNDI5MTEwMDEzWjAzMTEwLwYDVQQD Eyg5MWNjZDVlM2NmYzA2MWRkOTY0MDk0ODVmMDc5ZWJjYzZmZDA5Njg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwTVK7GKbH2onu8SIgUS84dUTOny D6wEAUusnLTjEpKkcQ9j9Dn7PbaDH8Av3IHORZEftRHOIg0KIYgdarxiFJTmGMKk pSkhncyNpFx9lijJZnhNVOHlfWGLWoEDMTeGKQhmDgHAjS96xbNdL3gffAxX2aXm VPEj0pxtgYz9Wr5MMNEX/aao7bEgNmdjxeOF66MvO1nOZre8KDIcpSpe8U/1Zxs5 ouEDnePbRP8OkQ8GpjpMgp88QcY3u2KuBjPZm3qnqphvtIqbwetL7kfNmO6rhJlY vm+gh8P2Oh5dugskPPhpMxBLuFY4PgIWzhKnAlSYzIPVKZa5puqJDRp+9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJHM1ePPwGHdlkCUhfB568xv0JaFMB8GA1UdIwQY MBaAFKYI20OWS2mG7HQPC14z9idYmsVgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGdqYlE1WkxhWWJzZEE4TFhqUDJKMWlheFdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi81MDAxNTAtMTU1MS00N2RlLWI1MDQt ZDY0NjgzY2VlMTZmLzEvcGdqYlE1WkxhWWJzZEE4TFhqUDJKMWlheFdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi81MDAxNTAtMTU1MS00N2RlLWI1MDQtZDY0NjgzY2VlMTZm LzEvcGdqYlE1WkxhWWJzZEE4TFhqUDJKMWlheFdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArwPxqSNo ZJJIezHqQ9myUkdALzQ7P5DMMWuZrcldQQoOn/WWghgPYAF/bwrwC2nX36M4gnSZ VCNRffqRlHN1mFQoSucKBtn73A4ioEwbXqhHPHxAp7Ibv3UQnA5NbS3OcYcrjO1D w2V1he3PIi+3nDSsAg60YDTX/mH4ztMWkeOT7tytcuLNEI2+iqcrDKb86U9Br0JM yRin6uUkBpw8/G0WNaRQA/4ha+eNmocUBMygW0A2WKJbDL4SlE6As5s1y4bsoJ60 Nxm+h7efbmHe8xFqdSd5wt63pW593a5+oLH7AZsH1H4uj53VIDOHrW6ABPw2Xm1v jfiZ67eT9HXCSQ== -----END CERTIFICATE-----Generated at Mon Apr 28 17:08:15 2025 by rpki-client