$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft File: s8UbDAY8_BaUP8mkfiyAWZD26q4.mft (raw, json) Hash identifier: I1LRCvzEzxtFK7eDlWQ1X8BcMfv3YjfPsbE7G8y2Jyo= Subject key identifier: D4:7A:94:B3:6D:5B:56:14:C6:82:1B:E7:58:8B:A9:B5:FC:5F:F5:00 Authority key identifier: B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE Certificate issuer: /CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae Certificate serial: 019679E9E4D2074CF0AE4101B000993D517E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft Manifest number: 151F Signing time: Mon 28 Apr 2025 01:01:33 +0000 Manifest this update: Mon 28 Apr 2025 01:01:33 +0000 Manifest next update: Tue 29 Apr 2025 01:01:33 +0000 Files and hashes: 1: 2mMFFVEf9RI7laeK707TbUw9w1o.roa (hash: lJtAZDZI6kWuia4ewbwmh2H0Ib7YOsmGLnMGMcXt0g8=) 2: BqnvofScUisQsUQed2MQ6B18GAQ.roa (hash: aF/iFUXhalT+tHSvHf/i2jdL4yddWHGSdcJZMfIy3uE=) 3: DV3PY9YU5zk2EaQYZkZq4p-ZUYM.roa (hash: iyl4yZuKkTsrQs+Y4JJy2vYNDSKm0/gIBzJQSKVyBGM=) 4: FeALzwmlHVBsdnrHTXpUuCdKMKk.roa (hash: LOwvL3odoyBFINMdFWH/VCQRIEFy3WTnNyeQKYYbRfU=) 5: H1-xrUolZhz6fzzg_UIN6T3DPWQ.roa (hash: qIZY0TolKgREye8GEvOpwQsSjnvpT07vwo6n55/XGY4=) 6: TyV9-G3EmDmxesG6kytX3N3gsKY.roa (hash: 5ZTWb+G4Smvs/SR1cTUZYD6dnJkngJRJoyw2KmVLYwM=) 7: UDyJk4Oy_-L1Te8H_oQucf6YjW4.roa (hash: RtdvCTTWOI7dE+z50k0BiFUEbUEH2UCgRme1pMQy/3s=) 8: WjZqJ0NhE5N_q8Z5fvWq8P2vTKU.roa (hash: yqIxBJiLiShm8irHVY2/sGIwoQoJ1y3znhIp9whAo54=) 9: dKsN1qGwEKIQpUTURYKT2umZW2w.roa (hash: tA8mIaQttFCg4VHXuxLgiMZWDalN45RLcJgG64coFpw=) 10: hmD_gbHlASML2ltcjVZUWmwvSYc.roa (hash: 7BK9fS2pKl/VxlRPtn0r5sqSpL1lbttsGsNK/TVCOlc=) 11: kskh1ZO_la7WXFGA4d2IKKXIwWc.roa (hash: PSi/1bSx17DcwOcX0aGn17oACEy8dwOziOStHczOl68=) 12: n4LrIW3mgA8G3axl4csgyTpsp8Q.roa (hash: LNegLtDN4y1dMd1RyuVmBjmyfpzTDjWVARTw/3voBLo=) 13: qfvkeVV0y4MYey-tvY_ef7wx-wY.roa (hash: vszu6nR/oFbgkiJpXSyUxF5kf03wjhbHFgMzPvnqwuM=) 14: s8UbDAY8_BaUP8mkfiyAWZD26q4.crl (hash: AISDuexdEvjLPVyF/b7GXvDp+iOH+c2PNFS9nSnMi90=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 23:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:79:e9:e4:d2:07:4c:f0:ae:41:01:b0:00:99:3d:51:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae Validity Not Before: Apr 28 01:01:33 2025 GMT Not After : Apr 29 01:01:33 2025 GMT Subject: CN=d47a94b36d5b5614c6821be7588ba9b5fc5ff500 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:68:d2:16:ca:90:18:62:e7:1d:b5:dc:91:b6: fc:c2:11:6c:e4:fd:89:67:2f:6f:3e:30:d8:40:d8: e8:cf:4f:9e:c3:30:74:83:75:c9:3c:f6:84:c1:11: d7:a4:0e:de:0d:c1:b7:f1:0b:94:44:72:8f:60:03: c3:51:23:35:80:09:c3:cf:6d:b2:60:60:e2:14:7a: dc:59:8c:fc:21:3e:16:5c:01:25:d1:de:09:d0:f2: 21:38:cc:1e:e2:11:0e:b7:2c:f7:d2:33:9c:f1:5d: f2:ed:94:d4:58:d1:7a:7a:c1:7b:17:9e:4a:c6:d5: 1a:dd:54:47:44:4e:1d:05:9f:69:7c:17:ac:06:36: 98:83:49:2a:f1:66:50:e3:2e:ab:1b:71:5c:51:7b: 40:1e:64:93:b6:2b:0d:8a:43:fb:24:97:2e:1a:ca: 86:04:2b:a1:c6:12:81:80:ad:c6:d8:1b:30:8f:72: 2f:7d:d8:07:9e:56:2d:fd:e3:b5:ca:3e:8c:d5:4e: 50:b4:48:90:7a:3b:9b:54:bb:fa:be:53:dc:86:bb: 9f:b7:6e:7d:de:4a:82:a0:ba:7c:46:a9:66:6f:41: e5:23:eb:16:f8:04:e9:30:19:e3:d0:ce:1a:92:78: 95:51:98:f7:18:7e:d0:2a:fc:7c:51:66:52:a4:18: 27:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:7A:94:B3:6D:5B:56:14:C6:82:1B:E7:58:8B:A9:B5:FC:5F:F5:00 X509v3 Authority Key Identifier: keyid:B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:18:f4:32:89:85:5e:78:f2:37:cf:a4:82:28:9b:ff:65:bb: 64:d1:57:1f:5d:82:0a:68:09:cb:7e:d7:9e:09:ed:b8:7f:69: d3:ea:82:85:c4:27:91:84:05:69:2c:d1:5b:93:6f:08:40:0c: 72:a8:b9:8b:d7:59:89:df:33:cc:7c:3e:a4:53:27:ad:f8:fb: fd:67:23:a1:8d:1d:72:2f:44:56:f1:fd:2c:84:60:9a:c1:89: 1f:cd:ac:e2:b6:b5:a0:1c:82:25:2a:08:c0:95:9c:1b:71:d0: 7a:a3:02:63:44:73:ff:3c:27:1e:c6:d8:73:a4:cb:e0:ce:12: d1:9c:fb:16:48:f4:af:23:06:14:9a:25:bd:d4:30:a7:5a:3c: 2f:43:bc:88:e1:19:a5:fa:cd:ac:43:02:03:56:5f:26:0b:f7: 85:8d:b3:ef:1d:d7:da:30:54:48:a8:c7:79:3e:09:ff:99:ea: a4:29:36:c7:68:5e:21:3e:f8:e7:4f:21:22:10:6e:d8:f2:37: 1a:1c:59:11:ac:63:bb:d9:04:f2:22:dc:d5:79:7b:45:7b:7d: 66:33:70:c4:c2:21:7c:63:76:d2:13:e1:1a:1b:95:bb:d5:0f: 79:64:63:6f:b6:3e:c6:b0:ce:1d:4a:f3:47:e4:68:a8:24:4d: 97:55:e3:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ56eTSB0zwrkEBsACZPVF+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYzUxYjBjMDYzY2ZjMTY5NDNmYzlhNDdlMmM4MDU5OTBm NmVhYWUwHhcNMjUwNDI4MDEwMTMzWhcNMjUwNDI5MDEwMTMzWjAzMTEwLwYDVQQD EyhkNDdhOTRiMzZkNWI1NjE0YzY4MjFiZTc1ODhiYTliNWZjNWZmNTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWjSFsqQGGLnHbXckbb8whFs5P2J Zy9vPjDYQNjoz0+ewzB0g3XJPPaEwRHXpA7eDcG38QuURHKPYAPDUSM1gAnDz22y YGDiFHrcWYz8IT4WXAEl0d4J0PIhOMwe4hEOtyz30jOc8V3y7ZTUWNF6esF7F55K xtUa3VRHRE4dBZ9pfBesBjaYg0kq8WZQ4y6rG3FcUXtAHmSTtisNikP7JJcuGsqG BCuhxhKBgK3G2Bswj3IvfdgHnlYt/eO1yj6M1U5QtEiQejubVLv6vlPchruft259 3kqCoLp8Rqlmb0HlI+sW+ATpMBnj0M4akniVUZj3GH7QKvx8UWZSpBgnhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNR6lLNtW1YUxoIb51iLqbX8X/UAMB8GA1UdIwQY MBaAFLPFGwwGPPwWlD/JpH4sgFmQ9uquMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczhVYkRBWThfQmFVUDhta2ZpeUFXWkQyNnE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81ODc3OTItYmFlOS00MTgzLWE0YjEt ZmY1ZjFhZDY5MjY2LzEvczhVYkRBWThfQmFVUDhta2ZpeUFXWkQyNnE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi81ODc3OTItYmFlOS00MTgzLWE0YjEtZmY1ZjFhZDY5MjY2 LzEvczhVYkRBWThfQmFVUDhta2ZpeUFXWkQyNnE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABxj0MomF XnjyN8+kgiib/2W7ZNFXH12CCmgJy37XngntuH9p0+qChcQnkYQFaSzRW5NvCEAM cqi5i9dZid8zzHw+pFMnrfj7/WcjoY0dci9EVvH9LIRgmsGJH82s4ra1oByCJSoI wJWcG3HQeqMCY0Rz/zwnHsbYc6TL4M4S0Zz7Fkj0ryMGFJolvdQwp1o8L0O8iOEZ pfrNrEMCA1ZfJgv3hY2z7x3X2jBUSKjHeT4J/5nqpCk2x2heIT74508hIhBu2PI3 GhxZEaxju9kE8iLc1Xl7RXt9ZjNwxMIhfGN20hPhGhuVu9UPeWRjb7Y+xrDOHUrz R+RoqCRNl1Xj/g== -----END CERTIFICATE-----Generated at Mon Apr 28 07:51:14 2025 by rpki-client