$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft File: nZibOZjhn8APhnDPbJ10AXFc808.mft (raw, json) Hash identifier: 3UpUfBN0wJv2mAQ+t9h9Hn5Dk1ZabcaR3XXWABlX2NI= Subject key identifier: BF:EF:27:22:A9:A7:F7:D5:0C:F2:60:D1:8F:47:66:CC:34:24:E2:AC Authority key identifier: 9D:98:9B:39:98:E1:9F:C0:0F:86:70:CF:6C:9D:74:01:71:5C:F3:4F Certificate issuer: /CN=9d989b3998e19fc00f8670cf6c9d7401715cf34f Certificate serial: 0196846C842FB126899A16E5394EA68A78CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft Manifest number: 0A Signing time: Wed 30 Apr 2025 02:00:26 +0000 Manifest this update: Wed 30 Apr 2025 02:00:26 +0000 Manifest next update: Thu 01 May 2025 02:00:26 +0000 Files and hashes: 1: 2d84iaAy9peqMc8uPtiQJUVpqhA.roa (hash: XonhU7MQtuyMxgxQYBP6Y8GxbPwqjebSF5A8W+e+9Dk=) 2: 7dhCE4YFHCUjlqkpkZY7lO72jeU.roa (hash: U8fxbXZIOaigGsLrKkx21Oe8R/4CGL6VvmyMHjpBRGE=) 3: EzmgW5SIzKZhd3gcqi5vbAQspRs.roa (hash: 9GSjRSh1NRSv4vNrPQJMwH5N/rEwdp6boN/thonioHA=) 4: Oi5y3oR-zAeDQVQqnqlub4mxZBY.roa (hash: wiW5g0XVDHNy1QPGb/8FJ3EhNGUt4wPgRz1ROLxdqCE=) 5: SWb9dWC7dX_rwlK0omJMc3wlDks.roa (hash: LsnTgIHVTvCHjZWRXF28FLY3Qh1KmfRKmu1wsQo8XRo=) 6: Vkn5Fjc1blCjW36pRVzcI2dLeRM.roa (hash: b4zxuu0+PWf6Y2gL35zDWaLiEcfMZ+LL8pUvtmTR45E=) 7: VtA0sYtoBS8bGZyWtELDxZdV15w.roa (hash: qr5xc7yY1HYHlnNGTTUy5XqyOe3bNLkhXLhBpl8oti4=) 8: XqFMryLIw1x1QzwoXKE2TA0QsD8.roa (hash: 4jdqgSKXalwNBkWrPQkzkWpgRaMNA4FVpS3FsC5tqMU=) 9: YzR4bVvYuilSAsgyIIG5IHRToDw.roa (hash: aeoTN5jE2adPRR+yahq8zhU6/6Zb1ls1gStL9w3wSCY=) 10: lcQi5Bm9eFSfTGrvmV8ciQpCrmk.roa (hash: RYrQUk3+RUhAVWqgU4UejdbJ0Pp8G4DFGkckRr+4ALw=) 11: nK63OUw5HovdmnJOU8TA3IOqFXc.roa (hash: At6fl1NEh3tU3v5PbKWMv3k4BjWoFVeGE3Mdg5kqGAA=) 12: nZibOZjhn8APhnDPbJ10AXFc808.crl (hash: sOSlfh5dOJfS6L9370eeYIo0Jwz0FIc3voOfFAxfjeg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 May 2025 00:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:84:6c:84:2f:b1:26:89:9a:16:e5:39:4e:a6:8a:78:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d989b3998e19fc00f8670cf6c9d7401715cf34f Validity Not Before: Apr 30 02:00:26 2025 GMT Not After : May 1 02:00:26 2025 GMT Subject: CN=bfef2722a9a7f7d50cf260d18f4766cc3424e2ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ed:90:58:53:b8:ce:d9:b4:26:2c:c4:b6:03: 92:20:ab:ee:19:3f:b8:7e:53:ab:d2:03:5f:ef:a4: fc:c8:dc:18:09:85:bd:8c:19:62:63:18:85:f5:52: ad:be:d7:8b:6a:b1:32:4e:ca:cb:7f:76:93:1e:cf: 55:70:54:7e:55:74:79:11:c9:ce:71:31:14:45:72: ad:06:74:3c:05:91:09:51:d0:10:0b:54:de:98:30: 29:b6:6b:3c:48:00:76:2f:7e:74:45:82:72:85:64: d1:d1:a3:5c:a5:c7:ce:11:ea:bb:da:c5:37:86:19: 13:4a:c7:c4:b1:1f:41:13:97:78:3b:a1:e5:7f:e2: da:82:d3:53:03:08:e6:0a:da:81:e6:73:4f:70:6d: 67:08:8d:5d:83:e9:5f:66:3d:1e:72:dd:f0:43:2d: 05:4a:f9:d5:59:00:4b:e6:49:ef:e1:06:ad:ba:16: 57:12:df:d9:45:1f:66:64:72:c0:5e:11:17:24:88: 26:fb:c3:b5:ab:08:14:a7:2c:a6:47:66:2b:6e:7a: 40:b0:a4:2d:72:85:20:3b:2c:06:37:19:96:cd:6b: 94:52:95:58:03:2b:c7:b7:d3:c7:15:82:65:19:3b: f8:43:4e:0f:3d:6f:cb:84:bb:75:a5:9d:88:fd:6a: 0a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:EF:27:22:A9:A7:F7:D5:0C:F2:60:D1:8F:47:66:CC:34:24:E2:AC X509v3 Authority Key Identifier: keyid:9D:98:9B:39:98:E1:9F:C0:0F:86:70:CF:6C:9D:74:01:71:5C:F3:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:13:93:de:a3:c6:4d:de:06:16:52:77:91:bc:0c:9b:83:10: ba:be:ea:49:2c:6d:a4:98:20:6a:03:33:e4:87:58:dd:29:ef: 73:1b:68:2e:2c:59:fa:f8:1f:d1:fa:e5:32:2f:9b:41:a2:65: c8:91:0c:6f:f9:92:84:e1:df:51:05:29:8f:d4:3f:dc:05:6a: cb:ea:e2:8e:cd:86:e8:bc:d2:34:7b:b4:76:e0:8c:39:43:0c: 4d:4f:7f:f6:f9:c9:7d:02:78:7e:8f:0a:eb:a8:d4:a6:c8:b1: ce:aa:16:56:71:98:2e:17:5a:2d:3e:34:c3:3d:8a:f1:19:74: 72:f8:fe:64:fa:84:fd:01:b5:c7:a1:dc:fc:79:e6:05:a7:14: 8d:8b:91:f7:66:9d:64:c7:43:06:0a:45:77:b7:61:e3:39:13: 52:f2:f5:e4:5c:ae:8f:a3:ed:44:1b:0b:2d:b5:a8:e5:f8:7a: 4c:e6:d5:65:52:30:7a:fc:22:9b:16:eb:4e:66:06:5e:bb:e0: 7f:9a:a8:9f:c3:47:3c:52:5f:9b:df:05:e9:d0:bb:d0:9c:36: 4d:3c:75:b4:89:34:2c:3e:58:53:b2:fc:35:5a:f6:a6:66:ed: 9e:23:b6:5b:0c:33:99:4a:0a:5e:c0:e1:6b:c8:b1:95:bf:f0: 67:da:61:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZaEbIQvsSaJmhblOU6minjOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkOTg5YjM5OThlMTlmYzAwZjg2NzBjZjZjOWQ3NDAxNzE1 Y2YzNGYwHhcNMjUwNDMwMDIwMDI2WhcNMjUwNTAxMDIwMDI2WjAzMTEwLwYDVQQD EyhiZmVmMjcyMmE5YTdmN2Q1MGNmMjYwZDE4ZjQ3NjZjYzM0MjRlMmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmO2QWFO4ztm0JizEtgOSIKvuGT+4 flOr0gNf76T8yNwYCYW9jBliYxiF9VKtvteLarEyTsrLf3aTHs9VcFR+VXR5EcnO cTEURXKtBnQ8BZEJUdAQC1TemDAptms8SAB2L350RYJyhWTR0aNcpcfOEeq72sU3 hhkTSsfEsR9BE5d4O6Hlf+LagtNTAwjmCtqB5nNPcG1nCI1dg+lfZj0ect3wQy0F SvnVWQBL5knv4QatuhZXEt/ZRR9mZHLAXhEXJIgm+8O1qwgUpyymR2YrbnpAsKQt coUgOywGNxmWzWuUUpVYAyvHt9PHFYJlGTv4Q04PPW/LhLt1pZ2I/WoK8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL/vJyKpp/fVDPJg0Y9HZsw0JOKsMB8GA1UdIwQY MBaAFJ2YmzmY4Z/AD4Zwz2yddAFxXPNPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC84YzVmNWEtODA0Yi00ZGY2LTgyN2It YzdjY2Q3OTQzMTA2LzEvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC84YzVmNWEtODA0Yi00ZGY2LTgyN2ItYzdjY2Q3OTQzMTA2 LzEvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2hOT3qPG Td4GFlJ3kbwMm4MQur7qSSxtpJggagMz5IdY3SnvcxtoLixZ+vgf0frlMi+bQaJl yJEMb/mShOHfUQUpj9Q/3AVqy+rijs2G6LzSNHu0duCMOUMMTU9/9vnJfQJ4fo8K 66jUpsixzqoWVnGYLhdaLT40wz2K8Rl0cvj+ZPqE/QG1x6Hc/HnmBacUjYuR92ad ZMdDBgpFd7dh4zkTUvL15Fyuj6PtRBsLLbWo5fh6TObVZVIwevwimxbrTmYGXrvg f5qon8NHPFJfm98F6dC70Jw2TTx1tIk0LD5YU7L8NVr2pmbtniO2WwwzmUoKXsDh a8ixlb/wZ9ph/g== -----END CERTIFICATE-----Generated at Wed Apr 30 05:32:42 2025 by rpki-client