$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft File: vfrSPhHPDSSkd1lOugn5msxvH_8.mft (raw, json) Hash identifier: DxvFP4DpIvQGh0enKG4Qhlm5o1dKWC6zpDajjxEh/d0= Subject key identifier: D5:50:1F:9A:53:BB:D0:D6:B6:D7:42:2E:AD:F0:C3:ED:E9:F4:1D:4E Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF Certificate issuer: /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff Certificate serial: 019675306DFC49606DB4BCF4E5612178D997 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft Manifest number: 1529 Signing time: Sun 27 Apr 2025 03:00:30 +0000 Manifest this update: Sun 27 Apr 2025 03:00:30 +0000 Manifest next update: Mon 28 Apr 2025 03:00:30 +0000 Files and hashes: 1: 6WLkt-CJrHz9HrmJ80IE8yLiggQ.roa (hash: A1D8GCMAKibxSwfJYYFLTLyOk7V1Z8lwvSAEOW0OnkI=) 2: 7vjowzcPet99DpSwRMSRoDCwwzU.roa (hash: X+UxdfFDiClGq5vQ6ru5h4wKAEV+wpHwdLPZ+uKZ1dI=) 3: KrWr-uxPx9ROkw1dMPy0luW9rHI.roa (hash: wAvc90Nk+tLmXZJ7T3uA3J3ZDaVOAEjfbFhLJlJ5p7c=) 4: W6ybVPAGTpEsw7meUuR6P0SBWi0.roa (hash: Pk0B2oz1VW/tzo+fvfG4VG2dc2avAQtB88TgpiGpr1s=) 5: _l-kXEP7uNjKBXPQ_iDyaiai-0s.roa (hash: yKpSNSngqAM/eyMmWKP/S33qgMa9todToBwJi00eda0=) 6: e5O39jLwx-J5_GwekaRwgr2d2RE.roa (hash: HUk8Z3Nkmb3qkmakGlU4y4u1qV2j7sm1wiYlhVDlC1I=) 7: fL3fAtFLchxlzuCc2GY65y6LmZ0.roa (hash: XRZwhdg6OIZelMOuq2OiZcg4UiZ6j5YXWUKJ7b9dB2A=) 8: jVxo0eRrcP2pgqEM2o5yJCaDJF8.roa (hash: 16iXvR9xhaKTmRi0zkcfcRjJRbOmgMjKBuv8xrJfUx4=) 9: lVRxioxScoDE7zhaCYNE7hVti4o.roa (hash: 2SOb+vjF9aw2d+xYqFyVysIAXg1nOJ/HsxNH3uvPjjc=) 10: oFZG6FuqcB6CEgUjG9AbuL9dAS0.roa (hash: UZD/yf7XHoNO7JDGnUu+XcMvM0jiJ1W2cL6Q6ekzwvE=) 11: rzIhKyyjXlSGxIVHnVv7j-nWQ4A.roa (hash: wyAyy8rxCcwgCB+QLmatxIedkc9CxRz+G4M60YbCHcQ=) 12: tiIoys09kmXMH3pj0eYY3jB6F7o.roa (hash: /BFY3lyPkgwMGI6Yoxtr7ZIkhvJMoAS7umXiaAeUjKk=) 13: vfrSPhHPDSSkd1lOugn5msxvH_8.crl (hash: d/rO16FHz6ObCUH1PSuR8u4WPBxerAJHtpeE9c5fXzM=) 14: yNNopewn85t08Znw5j3oTWUISEc.roa (hash: ZkUCX6gB41bOpnUPfzdbRC3CiwRZ4yyWFwXTC/D9/dc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 03:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:75:30:6d:fc:49:60:6d:b4:bc:f4:e5:61:21:78:d9:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff Validity Not Before: Apr 27 03:00:30 2025 GMT Not After : Apr 28 03:00:30 2025 GMT Subject: CN=d5501f9a53bbd0d6b6d7422eadf0c3ede9f41d4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:22:0b:b1:22:9a:02:9f:e1:73:4a:a5:a6:94: eb:10:75:af:40:38:ce:be:4e:f2:15:30:32:4a:35: 6a:89:f2:1a:cc:97:18:c0:9b:00:f7:bd:c1:85:74: 04:da:69:4a:e1:62:4b:da:81:37:33:3b:48:75:d9: 32:a7:fa:89:f3:6c:45:1e:e7:c1:02:31:92:af:db: 3c:b3:3b:ac:0d:ad:a5:64:79:23:55:fa:cf:e8:b5: 69:69:f6:63:60:10:6c:63:22:31:93:f8:ca:da:3a: c8:6b:5f:f0:c3:0b:0b:e3:24:f5:11:6e:14:4e:80: 8f:f0:f0:ec:fd:6b:59:d0:9c:f2:ae:b4:aa:98:25: 02:ab:23:08:d4:62:f8:bb:2e:b3:ba:4a:b9:63:6a: 18:b6:a1:1e:5d:0c:18:90:7f:28:40:03:c9:56:91: 38:a7:a3:a5:dd:ee:19:2a:b0:3f:f1:af:95:a7:43: 05:32:f1:8a:3c:4c:45:21:dd:e5:29:58:bd:a5:6e: e0:82:91:08:29:19:1b:80:f2:94:d8:11:b8:df:fa: e2:28:34:a8:1c:f7:96:c7:8b:fa:8d:0a:fe:55:36: ba:0d:89:89:55:1c:13:6c:43:41:c4:6f:c8:38:da: 1e:54:cb:da:8c:63:9e:c0:4c:99:f9:63:14:9f:25: e9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:50:1F:9A:53:BB:D0:D6:B6:D7:42:2E:AD:F0:C3:ED:E9:F4:1D:4E X509v3 Authority Key Identifier: keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:5b:23:a6:84:ab:01:78:bc:c1:d5:3b:53:a2:e0:35:e1:b7: d4:60:80:fe:86:20:56:91:1a:0c:a8:81:f4:3d:2a:59:69:ab: 1d:15:7c:65:46:10:74:bc:3f:01:04:34:de:dd:af:3b:4e:aa: 0e:03:7a:b9:25:59:79:78:d1:7b:e7:a9:5b:3d:bf:6f:03:2c: 54:32:51:c2:ff:22:16:b6:f1:9f:98:d9:8f:9a:89:37:22:e1: c1:03:e7:9a:1e:00:51:b7:8a:c4:b9:cc:61:62:0e:da:35:d9: 7c:8f:2f:47:1a:d0:b7:70:9a:33:28:45:1c:c5:c5:e9:34:0b: 15:49:75:22:e6:33:64:13:60:12:79:2f:96:1d:d6:a4:02:e4: c9:56:ad:fe:2b:fa:6c:dd:7f:96:e6:0a:2c:9c:1b:1e:70:de: e0:0d:30:89:06:b0:8d:83:9d:d9:13:55:75:21:65:38:b0:7e: 94:a4:95:20:c2:70:95:fd:13:01:8a:5a:2c:c2:ae:be:51:33: e0:a9:3b:95:71:6b:96:68:fa:d6:cc:d1:88:78:36:5b:63:ef: 3b:22:6e:0d:a6:16:a2:e7:23:ae:50:7e:98:0e:88:e6:38:9e: 08:db:ae:60:ec:6d:75:2b:45:c3:24:ef:96:97:c5:6b:9a:d0: 80:22:0c:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ1MG38SWBttLz05WEheNmXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZmFkMjNlMTFjZjBkMjRhNDc3NTk0ZWJhMDlmOTlhY2M2 ZjFmZmYwHhcNMjUwNDI3MDMwMDMwWhcNMjUwNDI4MDMwMDMwWjAzMTEwLwYDVQQD EyhkNTUwMWY5YTUzYmJkMGQ2YjZkNzQyMmVhZGYwYzNlZGU5ZjQxZDRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiILsSKaAp/hc0qlppTrEHWvQDjO vk7yFTAySjVqifIazJcYwJsA973BhXQE2mlK4WJL2oE3MztIddkyp/qJ82xFHufB AjGSr9s8szusDa2lZHkjVfrP6LVpafZjYBBsYyIxk/jK2jrIa1/wwwsL4yT1EW4U ToCP8PDs/WtZ0JzyrrSqmCUCqyMI1GL4uy6zukq5Y2oYtqEeXQwYkH8oQAPJVpE4 p6Ol3e4ZKrA/8a+Vp0MFMvGKPExFId3lKVi9pW7ggpEIKRkbgPKU2BG43/riKDSo HPeWx4v6jQr+VTa6DYmJVRwTbENBxG/IONoeVMvajGOewEyZ+WMUnyXpyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNVQH5pTu9DWttdCLq3ww+3p9B1OMB8GA1UdIwQY MBaAFL360j4Rzw0kpHdZTroJ+ZrMbx//MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9lMjUyMzktNmFiMC00OTE5LWE3NmEt NGY0ZTcxZTMyMDg0LzEvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9lMjUyMzktNmFiMC00OTE5LWE3NmEtNGY0ZTcxZTMyMDg0 LzEvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiFsjpoSr AXi8wdU7U6LgNeG31GCA/oYgVpEaDKiB9D0qWWmrHRV8ZUYQdLw/AQQ03t2vO06q DgN6uSVZeXjRe+epWz2/bwMsVDJRwv8iFrbxn5jZj5qJNyLhwQPnmh4AUbeKxLnM YWIO2jXZfI8vRxrQt3CaMyhFHMXF6TQLFUl1IuYzZBNgEnkvlh3WpALkyVat/iv6 bN1/luYKLJwbHnDe4A0wiQawjYOd2RNVdSFlOLB+lKSVIMJwlf0TAYpaLMKuvlEz 4Kk7lXFrlmj61szRiHg2W2PvOyJuDaYWoucjrlB+mA6I5jieCNuuYOxtdStFwyTv lpfFa5rQgCIM2A== -----END CERTIFICATE-----Generated at Sun Apr 27 13:11:56 2025 by rpki-client