$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft File: YyzYf-q-QHUi4GVT8usFoMFgL78.mft (raw, json) Hash identifier: Us2uvC+cCLiX87Q2GrErPMCkAWkkh6/IoMaL6XddjL0= Subject key identifier: D8:15:E2:EB:6E:DD:43:7D:2D:93:1E:08:8B:13:3B:0C:47:D3:49:95 Authority key identifier: 63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF Certificate issuer: /CN=632cd87feabe407522e06553f2eb05a0c1602fbf Certificate serial: 019680C6CBB3812A29A89392A3819EFAD9C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft Manifest number: 06F1 Signing time: Tue 29 Apr 2025 09:00:33 +0000 Manifest this update: Tue 29 Apr 2025 09:00:33 +0000 Manifest next update: Wed 30 Apr 2025 09:00:33 +0000 Files and hashes: 1: 7g4KdSk0oMEt3rH3ZJ8R3dxMTi0.roa (hash: lxHXvphbzHFD8HzCFhMpWZbKa/TJm7QEqeDzMizn4WU=) 2: CTBAyqwCpKxb1ZRxTO9b1vwfTow.roa (hash: YN7csTjUba7odlT8rpPJtyZg6f4c8lmK7Q4NG0ex+Os=) 3: TxtNaSAifyEV6mP-AcvjkH3xVSk.roa (hash: 915oLCQXFOvhUMTKQDXC06NMqA6irYgihW73/bUTCvo=) 4: YyzYf-q-QHUi4GVT8usFoMFgL78.crl (hash: xhbxk+sPtyL/XSr0EIGTRYmlGPc3ZFEDjYjZlFx0zpU=) 5: cpBh0w2t5SUeTveHMXo0e45wl_g.roa (hash: wnpUNv6ppC8UNUrj4/3VOaysZ1B8H6QoFf3xDmtiXxw=) 6: hvBvJyG5-CfH83M2DhYFOWkU2Cg.roa (hash: wDKtmo40dwgRFBSRXHY0QDbdfttnASkBSxoZO1r3tGg=) 7: jB110pDZmcuujfQezVUYFypdnk4.roa (hash: Ja58Yq8wHJsWad7BVjuXhBRa5NCGI3uYM6r+ME659AY=) 8: nP6Wp7rqjDbaj9VXPjopbJmmZLQ.roa (hash: EDsEYJXVC7X/AF/ZHxiwn2CZKU1Xg1iI8gyvla1QqdM=) 9: prBGAJfo6jykezuLUpZ1BEDdn5A.roa (hash: STwdoXQqtV0U9DHkB0uJmQZyaRCvXoZ221e5pNUAHBY=) 10: uUbdbfji1wduoDXh4AqJeaJa564.roa (hash: mcE4tKe136UsFISwUkQg3BCl5f/Ei1vauiMoTq7oiwk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Apr 2025 09:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:80:c6:cb:b3:81:2a:29:a8:93:92:a3:81:9e:fa:d9:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=632cd87feabe407522e06553f2eb05a0c1602fbf Validity Not Before: Apr 29 09:00:33 2025 GMT Not After : Apr 30 09:00:33 2025 GMT Subject: CN=d815e2eb6edd437d2d931e088b133b0c47d34995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:00:d8:d4:a7:7a:37:61:68:7c:79:76:de:55: 5a:7d:0b:56:42:06:2a:74:6a:79:2a:f0:94:46:6b: ea:c1:b1:ec:c9:63:96:05:70:c1:a8:65:10:34:58: d2:a9:71:94:30:62:82:78:a0:71:96:e0:81:97:e8: cf:5e:15:b8:f6:e9:a8:a2:38:47:99:c3:17:39:b7: e9:10:8c:3f:03:f4:3d:11:df:8b:d8:9e:03:a8:2b: 3e:54:59:aa:e2:2e:70:5d:63:bb:f7:d5:ca:8a:db: f9:bf:c7:2c:6c:bb:5f:ee:39:44:87:38:1c:72:24: 13:e2:35:81:2b:b1:04:4b:d1:2b:7e:2b:d2:21:fe: bd:e6:30:0f:1a:85:ab:a2:85:a1:d7:f1:99:29:ad: 33:8a:dd:cf:4f:20:e9:3c:ac:3b:04:53:cf:54:cb: 5b:60:ff:28:e8:66:94:70:8d:3c:f2:e7:df:b2:fe: fb:04:d0:41:6c:d9:2c:5b:a4:a1:e5:35:a2:7a:50: 84:ed:25:8c:f9:3d:ec:3e:ae:c7:b4:35:ba:1d:3b: 2e:c9:48:a1:79:4a:cb:9e:6e:f4:3c:92:87:18:a0: 88:0f:ff:01:5e:29:4f:06:d3:7d:91:b8:04:22:c2: ae:a3:d7:44:bf:a8:fb:2b:26:cf:2d:9c:9d:bf:8b: 11:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:15:E2:EB:6E:DD:43:7D:2D:93:1E:08:8B:13:3B:0C:47:D3:49:95 X509v3 Authority Key Identifier: keyid:63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:d8:14:85:d8:09:3c:d9:94:3a:8a:a7:3e:62:2f:44:cc:d8: f6:bd:03:f9:49:05:d3:97:eb:7d:0d:b5:b3:79:7d:0b:90:d5: 8e:78:57:a9:13:27:02:fc:01:2e:95:be:59:43:cf:fa:dd:9e: 3b:9e:db:53:20:e0:fa:82:8d:b8:57:f1:65:85:79:d9:76:86: 7a:52:ba:27:fd:0e:39:14:3c:9e:b3:ab:03:c2:b2:c8:83:b8: ac:b0:b0:1d:18:13:fe:3b:11:96:2a:50:88:4c:ab:ec:65:eb: 60:fe:bd:2e:9f:d1:37:6a:30:bb:0f:73:1e:71:5a:42:15:70: f7:49:0a:2b:43:ce:c7:f1:eb:e2:a4:7a:b7:e7:bc:aa:c7:7d: 45:9e:41:fd:8f:ed:67:00:db:9d:64:e7:18:73:eb:ea:a8:e8: 7e:19:ef:86:46:74:7e:c5:11:d9:e1:23:58:81:cc:7e:e2:2e: e2:be:e8:9f:c3:00:6b:ed:a0:d5:94:84:97:52:3a:c1:03:9d: 37:d2:9d:83:a3:ea:dd:d5:91:b4:86:c2:f8:a7:0b:e8:ef:8e: b1:96:46:87:62:d1:bf:3b:5d:1a:6e:ef:e5:48:13:16:85:6f: 97:c0:e3:55:2c:82:f9:73:93:e3:65:f3:63:9f:60:09:10:59: 2f:4a:85:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZaAxsuzgSopqJOSo4Ge+tnDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMmNkODdmZWFiZTQwNzUyMmUwNjU1M2YyZWIwNWEwYzE2 MDJmYmYwHhcNMjUwNDI5MDkwMDMzWhcNMjUwNDMwMDkwMDMzWjAzMTEwLwYDVQQD EyhkODE1ZTJlYjZlZGQ0MzdkMmQ5MzFlMDg4YjEzM2IwYzQ3ZDM0OTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QDY1Kd6N2FofHl23lVafQtWQgYq dGp5KvCURmvqwbHsyWOWBXDBqGUQNFjSqXGUMGKCeKBxluCBl+jPXhW49umoojhH mcMXObfpEIw/A/Q9Ed+L2J4DqCs+VFmq4i5wXWO799XKitv5v8csbLtf7jlEhzgc ciQT4jWBK7EES9ErfivSIf695jAPGoWrooWh1/GZKa0zit3PTyDpPKw7BFPPVMtb YP8o6GaUcI088uffsv77BNBBbNksW6Sh5TWielCE7SWM+T3sPq7HtDW6HTsuyUih eUrLnm70PJKHGKCID/8BXilPBtN9kbgEIsKuo9dEv6j7KybPLZydv4sRJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNgV4utu3UN9LZMeCIsTOwxH00mVMB8GA1UdIwQY MBaAFGMs2H/qvkB1IuBlU/LrBaDBYC+/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXl6WWYtcS1RSFVpNEdWVDh1c0ZvTUZnTDc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9mZGRmNDctZmY2NC00NDdhLWI5OGYt NTUxMDQxNzNiMTgwLzEvWXl6WWYtcS1RSFVpNEdWVDh1c0ZvTUZnTDc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9mZGRmNDctZmY2NC00NDdhLWI5OGYtNTUxMDQxNzNiMTgw LzEvWXl6WWYtcS1RSFVpNEdWVDh1c0ZvTUZnTDc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATtgUhdgJ PNmUOoqnPmIvRMzY9r0D+UkF05frfQ21s3l9C5DVjnhXqRMnAvwBLpW+WUPP+t2e O57bUyDg+oKNuFfxZYV52XaGelK6J/0OORQ8nrOrA8KyyIO4rLCwHRgT/jsRlipQ iEyr7GXrYP69Lp/RN2owuw9zHnFaQhVw90kKK0POx/Hr4qR6t+e8qsd9RZ5B/Y/t ZwDbnWTnGHPr6qjofhnvhkZ0fsUR2eEjWIHMfuIu4r7on8MAa+2g1ZSEl1I6wQOd N9Kdg6Pq3dWRtIbC+KcL6O+OsZZGh2LRvztdGm7v5UgTFoVvl8DjVSyC+XOT42Xz Y59gCRBZL0qFKg== -----END CERTIFICATE-----Generated at Tue Apr 29 19:21:31 2025 by rpki-client