$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft File: 1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft (raw, json) Hash identifier: thFlu7Oa0fvaZ1/tCGGKIPmPiTAb12NkFNsu8epDlKM= Subject key identifier: F1:EF:B1:46:A1:E6:31:F3:03:F6:52:AA:6C:32:3E:07:FB:74:EC:C1 Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f Certificate serial: 019671F837835F7876C2101F00008F83F9BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft Manifest number: 0116 Signing time: Sat 26 Apr 2025 12:00:14 +0000 Manifest this update: Sat 26 Apr 2025 12:00:14 +0000 Manifest next update: Sun 27 Apr 2025 12:00:14 +0000 Files and hashes: 1: 1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl (hash: wpyhUTEhAJuuknt/nP7uqbxDay0AZOnbIM2IZHHRuPE=) 2: 1wpYbJjMVS82TVxPAOVX6pCPGKQ.roa (hash: 3xvTuCB41F6sdLRUmzqEl3VOI6ssNS6IFJHIQv00iw4=) 3: 41khnizxBGanK3xTNiHjAvKipH8.roa (hash: +2nPBjFX53lA3rBvCP4G7QFUiek8gLIOpEYxktzzHC0=) 4: 5-QMYbv6g-FN-fdVOJNV1HH1m6M.roa (hash: xV1NRgYtEODMWOlzwhSaxIa7QyWEWgoeYdySvkmH+s4=) 5: E4KcJHE0n0TKLaC6bMZFCAcb_VQ.roa (hash: hPXmeWeNB758yPScVGfaU0vyDbInbo0zBYshzkP1Pxo=) 6: NyqyG7fPk-uaBV3NXtzHh7POROs.roa (hash: qLY68+vvoU/SWf1iD3VPHA3MqaHYRinOutWS8NLVROo=) 7: RoaSxBr_-xssvvDubAoAhMyxaAg.roa (hash: UZpuMn+RNpVxxnZxp21D39sq8CTTXmab0fgVUeNycsQ=) 8: TatL9OoUWxXZgHGxaDUj4GDLE9o.roa (hash: +7WpBtxQIB4QfQxia/0uvzsc5xW01CueIK7yUh8b2As=) 9: hq3xMLYu58E-C0pKKjxQOD1kigU.roa (hash: dPdHlJZKotxKAavShKgk5PjirXm73ti2oqop05hSu5Y=) 10: oMfkKGXFcnmSViJxvMVaXYN-WMc.roa (hash: dHmlqEj0EtV9pApFZVhgBPJ1DnVEoibHvmv/oANdXq0=) 11: osl7KzSOgMl0BA3IKYuC-EBfUyo.roa (hash: 0BANXCYD/nKLAgu9nDU4e1ZVArlN7v2aY71LQoAs1lw=) 12: qhRts2cf4P5t7bHqjMHL0FdipSw.roa (hash: eN2E4ioyfVg0a1c+Sdpb0/GA9hP7MUujM4zMFqNQiyw=) 13: uCMSjxkOkfzHdypyvUOewV8qw9A.roa (hash: bfz4N8RVke/0ZUN0349iWnmXb4vrOxiJS20dfxPr4zQ=) 14: zve48iCRLcxAfyRqEYbhVJaDbkc.roa (hash: hcNZnUJ77WU5RzlZ8fQ1M+4ucnK5Pr12OcO2QKPdDls=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 11:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:71:f8:37:83:5f:78:76:c2:10:1f:00:00:8f:83:f9:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f Validity Not Before: Apr 26 12:00:14 2025 GMT Not After : Apr 27 12:00:14 2025 GMT Subject: CN=f1efb146a1e631f303f652aa6c323e07fb74ecc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4a:9c:85:1b:9f:1f:c2:14:44:c4:26:a3:f9: 93:cb:97:a8:01:c6:07:39:97:8a:6c:d6:c8:d8:8f: b9:ed:a5:45:c7:bc:cf:4c:6f:58:bf:de:dc:2a:fc: 52:ea:1d:f4:6f:42:f8:b8:49:86:ea:11:43:b8:70: ce:51:d4:27:f8:8f:f5:90:02:79:71:96:5b:d4:18: b1:65:1d:3f:60:de:99:09:3a:82:fe:cd:a2:93:30: 69:3c:0d:54:75:67:61:8d:b8:5d:f2:b7:30:c3:1b: f2:ce:aa:ff:26:fe:4a:bc:af:39:42:0d:a8:8d:70: 97:f0:6d:50:1c:b1:a1:a7:bb:01:16:94:90:19:52: aa:a6:c6:44:ca:bd:49:78:02:2a:dd:61:26:98:5b: 1d:5d:c7:eb:f1:be:ec:54:42:3c:1a:aa:27:be:bb: 63:d6:c1:55:3b:62:2b:99:0f:6b:e2:d5:37:1b:86: 8b:70:da:9d:35:31:8c:b5:b6:f7:e0:4d:7d:f6:01: 83:c0:9a:7a:10:8d:5d:25:7f:bf:e7:49:7d:ee:b3: ce:89:3b:67:ee:87:72:22:30:42:79:3e:43:6d:07: bf:fa:df:47:c5:88:f7:f5:9b:3c:d5:79:39:81:76: 3b:ee:ef:66:9a:35:db:b5:ed:ef:88:f9:e2:44:86: f8:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:EF:B1:46:A1:E6:31:F3:03:F6:52:AA:6C:32:3E:07:FB:74:EC:C1 X509v3 Authority Key Identifier: keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:ed:94:49:69:fb:c7:09:dc:f0:b1:de:7a:e2:10:41:4a:6d: 55:24:9a:14:b3:7e:7f:27:75:8c:c0:8d:f6:f7:26:20:0f:b3: ad:70:33:94:c0:49:a8:68:b7:60:fa:b2:99:25:89:e0:d0:ca: ec:63:51:38:81:e4:3e:01:df:f4:b6:e2:25:48:92:7a:1a:00: 8a:89:c3:2f:03:22:2f:34:d2:10:46:eb:0f:5d:cb:a2:90:65: 4a:10:16:95:3a:86:38:ba:0e:7b:01:89:83:a7:9c:ef:59:56: 06:29:7b:92:bc:97:6d:b2:25:70:71:69:10:a2:24:45:5c:a8: 03:8a:aa:47:75:08:f9:2d:f1:e2:41:7f:f7:f0:d1:77:05:c9: e5:07:28:6f:5d:a3:da:12:d6:09:4f:0c:b8:f6:c3:a7:d9:bc: a3:cf:24:8b:c6:67:b7:de:66:73:99:81:96:0e:d6:28:d5:62: f4:f3:19:f6:3e:38:60:af:a0:6d:e3:ab:60:f8:12:87:ba:56: 70:0d:47:9b:b2:72:f2:74:04:83:95:a3:d7:0c:e8:b7:6a:ff: 89:10:4b:83:c5:0c:62:36:60:26:df:91:2d:b8:07:1e:3f:0c: b8:15:a4:f0:6c:3f:c1:14:1d:75:1c:02:4d:8c:4f:1f:5a:15: 2b:0c:65:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZx+DeDX3h2whAfAACPg/m9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Yjk1MzMwNzM0YzlhYWY2NmQxMWJjZDJiZWRkMzgwZjQx MGY5M2YwHhcNMjUwNDI2MTIwMDE0WhcNMjUwNDI3MTIwMDE0WjAzMTEwLwYDVQQD EyhmMWVmYjE0NmExZTYzMWYzMDNmNjUyYWE2YzMyM2UwN2ZiNzRlY2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0qchRufH8IURMQmo/mTy5eoAcYH OZeKbNbI2I+57aVFx7zPTG9Yv97cKvxS6h30b0L4uEmG6hFDuHDOUdQn+I/1kAJ5 cZZb1BixZR0/YN6ZCTqC/s2ikzBpPA1UdWdhjbhd8rcwwxvyzqr/Jv5KvK85Qg2o jXCX8G1QHLGhp7sBFpSQGVKqpsZEyr1JeAIq3WEmmFsdXcfr8b7sVEI8Gqonvrtj 1sFVO2IrmQ9r4tU3G4aLcNqdNTGMtbb34E199gGDwJp6EI1dJX+/50l97rPOiTtn 7odyIjBCeT5DbQe/+t9HxYj39Zs81Xk5gXY77u9mmjXbte3viPniRIb4aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPHvsUah5jHzA/ZSqmwyPgf7dOzBMB8GA1UdIwQY MBaAFNS5UzBzTJqvZtEbzSvt04D0EPk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYt NDMwMTNiMjhkOWQ2LzEvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYtNDMwMTNiMjhkOWQ2 LzEvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh+2USWn7 xwnc8LHeeuIQQUptVSSaFLN+fyd1jMCN9vcmIA+zrXAzlMBJqGi3YPqymSWJ4NDK 7GNROIHkPgHf9LbiJUiSehoAionDLwMiLzTSEEbrD13LopBlShAWlTqGOLoOewGJ g6ec71lWBil7kryXbbIlcHFpEKIkRVyoA4qqR3UI+S3x4kF/9/DRdwXJ5Qcob12j 2hLWCU8MuPbDp9m8o88ki8Znt95mc5mBlg7WKNVi9PMZ9j44YK+gbeOrYPgSh7pW cA1Hm7Jy8nQEg5Wj1wzot2r/iRBLg8UMYjZgJt+RLbgHHj8MuBWk8Gw/wRQddRwC TYxPH1oVKwxl+w== -----END CERTIFICATE-----Generated at Sat Apr 26 19:02:22 2025 by rpki-client