$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft File: vTZoYo8N950EfsoNmtz8C2aT4wk.mft (raw, json) Hash identifier: d52hOu50gy0Q5C3ffAKKYxSpt9l8izzSz0fE85vpvvM= Subject key identifier: 18:59:EB:F3:27:08:4C:F3:5C:18:4A:9D:20:87:24:B5:F8:86:68:E1 Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09 Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309 Certificate serial: 019671BD901C1A295972336CAF9162A7684C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft Manifest number: 1076 Signing time: Sat 26 Apr 2025 10:56:10 +0000 Manifest this update: Sat 26 Apr 2025 10:56:10 +0000 Manifest next update: Sun 27 Apr 2025 10:56:10 +0000 Files and hashes: 1: 1-AkEgtFYAeYpvfsAvZdlJuyuVF4.roa (hash: bj7r1qBjXXo6AEdGvTw884ILliGHjEYqfvi7PxgbBxU=) 2: 18s6iv28JzN23ACcxvidnV4O018.roa (hash: E520J/m/9e2VHqsrljvZsuWV/dovmSdu9Qn56B7khEk=) 3: 7HaXNFSYGxOw3R9L6I0z6V-mXb4.roa (hash: iLQ9KNTQ4u3M1tfa+YEpVxilam6XMDqybBUGCnTqiss=) 4: 8GAUp0koq7cLyKDBljD12_gS9fU.roa (hash: TLK0INhWOPZtOAAlZEJ0okbttAxXwilC0/Fin663h4o=) 5: 932bk4xk8D2m0YlpYRXnrslKHP8.roa (hash: B6DNczjlhlzz5ZKbKj92dPOZOg9mVz9aUr0Xx1che2A=) 6: CZpuUzJEsKjUOKMTz3rPnaPFYr0.roa (hash: 829sU0orhueuSWygyiEyGmFZ/X99K3xCPmemYX73BGM=) 7: FL7xyPZcMQ2IcS_NYdOw64zSnhI.roa (hash: hTtsrLyKX+B71mb+xLolhfXCujGBZZVnGz4ugWVh69Q=) 8: GcsSEat9NsqT_94yQpD14Wkz5bM.roa (hash: Z+N4jmA9jyUUH+rZkvbQnNXcsocdrdSVNKIh39tULtg=) 9: b7dBieR_P9kmLnGcxW0fyaZjeow.roa (hash: 7CjlHKhuVQvksqqfXKK92KNHJPTf/pbKa2kMAV8YPNg=) 10: c-Wnlh-kFjP6q7EkrDX-duWttJc.roa (hash: 6Prgxqh9/nVNm4A4c9/ay2pcayT5Dd+P1lar2QOL0DQ=) 11: e_TrdC1EfOVSQQ49ZA0FeaTTzjk.roa (hash: jUrwE90O+dclJeJNaa2stLGSCRfUe/eu1j5NSomJE/4=) 12: hVFH86LVYnyePIbmaCqfpS5vJKM.roa (hash: Jp2Ho2sVrxwbPVnhT98cuAw+l3HPTfx4q1sSUogMvrs=) 13: iL4hRCpLyAzkS7iRbK0kB-K-W-4.roa (hash: ZPL3tMdQLbuvPkq9q+UlEUarVrYcyMhTXlq7N8fBMNw=) 14: pVgxUhCc7dPqvhiu0OhGRnn06X4.roa (hash: H5Zdm7znexs+7FCW+NTfkFJPDw3F/Gamb5QXizhY9Tk=) 15: tBvdEHK96-8IqXDimpyAd6-FvfI.roa (hash: kV3wVJLyHXbFkaWXeqnUNYEgcOQg7ySmIasAR3i9gU0=) 16: vTZoYo8N950EfsoNmtz8C2aT4wk.crl (hash: zvi7nCAa6EG2HQ9Vre3NcdEibsVIAp5CFwZZijioOMo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 10:56:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:71:bd:90:1c:1a:29:59:72:33:6c:af:91:62:a7:68:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309 Validity Not Before: Apr 26 10:56:10 2025 GMT Not After : Apr 27 10:56:10 2025 GMT Subject: CN=1859ebf327084cf35c184a9d208724b5f88668e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:af:56:b5:bc:63:c9:01:cf:01:60:cc:c9:d0: e2:15:7c:72:f5:be:15:92:96:2f:d5:05:e5:5d:9f: 2d:0c:50:2a:43:a8:bd:0a:a2:f2:26:3e:f7:f0:d9: 87:e0:c1:34:a9:c2:5a:89:70:de:d7:07:1e:55:0f: ab:3e:ad:90:cf:54:01:55:41:42:b1:88:cb:b8:02: c8:30:47:3b:43:d3:27:12:67:ff:9e:b3:6e:90:0c: 1f:06:d8:c2:ed:aa:da:77:8f:36:70:2b:9d:c5:50: a6:54:87:c1:3e:71:d8:c7:fc:36:3e:ce:70:14:b2: ee:fa:f5:e6:d2:88:98:db:16:4e:cd:95:59:6a:28: 5c:30:7e:f8:30:6c:6e:39:35:87:a0:86:32:eb:fa: c8:18:89:f8:35:c4:8c:d9:6a:53:a2:b5:76:2d:7f: 0c:fc:d6:99:04:31:4e:aa:b2:c7:45:59:b0:6c:a4: bf:bc:54:dd:93:1c:4d:05:c8:81:28:c3:8f:64:5d: f1:8d:54:79:da:07:aa:ac:c2:0e:fe:6a:3f:08:21: 3f:99:90:ab:c5:99:80:7a:69:bb:44:ee:4a:20:4c: ef:45:42:26:ac:48:77:29:da:97:8f:d7:f5:9a:1e: 37:d5:99:40:b0:b0:58:2a:77:ac:e5:83:95:af:05: 28:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:59:EB:F3:27:08:4C:F3:5C:18:4A:9D:20:87:24:B5:F8:86:68:E1 X509v3 Authority Key Identifier: keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:d7:eb:07:47:8e:25:32:ce:fc:88:cd:60:95:4a:4d:cf:eb: fd:42:bf:b4:a1:aa:89:35:12:b2:2e:60:0a:21:d2:3f:ba:0e: fc:f8:8d:63:96:41:bd:1f:be:59:9d:9d:1b:25:27:ec:14:11: 0a:aa:47:9e:30:4f:6f:70:51:28:b7:46:26:97:c3:33:a2:de: 2a:c9:47:b7:69:37:f3:3a:30:4b:b7:48:74:ad:56:ba:d0:b8: b4:b7:18:db:62:16:76:e5:83:77:84:ad:78:c0:b5:7c:92:04: da:93:bc:33:a5:c4:34:95:ee:a0:44:7d:85:86:de:fc:c1:fe: e6:40:46:81:fb:ff:28:ea:04:26:27:7f:cd:fb:bb:41:3e:b7: b4:60:08:70:e6:35:76:8b:e4:0f:a5:f6:f6:c1:7b:9a:1a:d6: 78:17:4d:79:d4:83:be:ef:8c:a5:ae:c3:2e:3c:8c:e1:6c:b8: 96:ab:20:01:31:92:bc:31:46:4a:e0:9b:28:76:98:3b:e6:45: 14:0f:90:06:c4:5d:30:7d:90:9d:04:86:71:36:61:02:39:34: 6a:3a:a7:b9:18:bd:b3:9a:4e:34:cb:5c:d1:50:e2:2c:b5:17: 3f:99:b7:c5:37:07:53:09:89:03:24:5b:a4:62:92:cd:b2:8f: dd:45:3e:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZxvZAcGilZcjNsr5Fip2hMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkMzY2ODYyOGYwZGY3OWQwNDdlY2EwZDlhZGNmYzBiNjY5 M2UzMDkwHhcNMjUwNDI2MTA1NjEwWhcNMjUwNDI3MTA1NjEwWjAzMTEwLwYDVQQD EygxODU5ZWJmMzI3MDg0Y2YzNWMxODRhOWQyMDg3MjRiNWY4ODY2OGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA769WtbxjyQHPAWDMydDiFXxy9b4V kpYv1QXlXZ8tDFAqQ6i9CqLyJj738NmH4ME0qcJaiXDe1wceVQ+rPq2Qz1QBVUFC sYjLuALIMEc7Q9MnEmf/nrNukAwfBtjC7arad482cCudxVCmVIfBPnHYx/w2Ps5w FLLu+vXm0oiY2xZOzZVZaihcMH74MGxuOTWHoIYy6/rIGIn4NcSM2WpTorV2LX8M /NaZBDFOqrLHRVmwbKS/vFTdkxxNBciBKMOPZF3xjVR52geqrMIO/mo/CCE/mZCr xZmAemm7RO5KIEzvRUImrEh3KdqXj9f1mh431ZlAsLBYKnes5YOVrwUoGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBhZ6/MnCEzzXBhKnSCHJLX4hmjhMB8GA1UdIwQY MBaAFL02aGKPDfedBH7KDZrc/Atmk+MJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMt ZTZiZjMxNmM5NGExLzEvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMtZTZiZjMxNmM5NGEx LzEvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbtfrB0eO JTLO/IjNYJVKTc/r/UK/tKGqiTUSsi5gCiHSP7oO/PiNY5ZBvR++WZ2dGyUn7BQR CqpHnjBPb3BRKLdGJpfDM6LeKslHt2k38zowS7dIdK1WutC4tLcY22IWduWDd4St eMC1fJIE2pO8M6XENJXuoER9hYbe/MH+5kBGgfv/KOoEJid/zfu7QT63tGAIcOY1 dovkD6X29sF7mhrWeBdNedSDvu+Mpa7DLjyM4Wy4lqsgATGSvDFGSuCbKHaYO+ZF FA+QBsRdMH2QnQSGcTZhAjk0ajqnuRi9s5pONMtc0VDiLLUXP5m3xTcHUwmJAyRb pGKSzbKP3UU+ag== -----END CERTIFICATE-----Generated at Sat Apr 26 17:36:15 2025 by rpki-client