$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft File: h0v4BwzuQwXRo4npEPtRArvMGUE.mft (raw, json) Hash identifier: 46IDAMXoEDOa/Ok51npX/Bbe2fTUROIGAqwZY+K0z1w= Subject key identifier: 8B:BE:02:B9:2C:E5:51:4F:C0:73:82:45:D5:93:5A:1E:D3:86:31:FE Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41 Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941 Certificate serial: 0196729D9A82B6E3C383FF762285E25C9B25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft Manifest number: 0E9C Signing time: Sat 26 Apr 2025 15:00:53 +0000 Manifest this update: Sat 26 Apr 2025 15:00:53 +0000 Manifest next update: Sun 27 Apr 2025 15:00:53 +0000 Files and hashes: 1: 0OKEEKGhx09vrOl7RYzWo3_wxgQ.roa (hash: bVmqeltj/mUgRyI/UDd3qXuGmM6ZNTUv7NHdJ5Ecm14=) 2: 0na0952KGc1H37d43sfmQKJLL00.roa (hash: corUkZBv/wXf0UWamqTqW2vCXAO7jctIMZRyOPGvfMc=) 3: 0nyuKNwkHdjNx58vqjYZWHgdk04.roa (hash: IJwrVyR1/3bxuDIXcjl0pqsWJYg81ab8+TgzpFzMgak=) 4: 50gtoTdhN9nO756-F4DP2ztZ9co.roa (hash: PoNPNVOdbr6ZQt1a8yzQyLs5SXzvoUcV/tLE/CbCBRA=) 5: 5WW9l5SbU7Xc5dzcJPOjnh-Ti1k.roa (hash: 2mR14FDC49JE9sKTdrARapGEl+mL/ykOGzFFu5F/fQM=) 6: GPQpLDssO6fTD1dGaJR05RFssa4.roa (hash: fp71tS0Tf+vhKpm3TY4BWXK7QdJ3Wg7DCBdUoQ7F5lg=) 7: J9C16lcx8PgyurfKUP9kuPkC8qk.roa (hash: FgZNOU0gXFenPcB6tHkqCpKLWPVhc0a8myZew2TEgCo=) 8: VvF4Vi4FweHBoF6fwzvWsqkmd1g.roa (hash: 0iNsEJDKXYV/LCkoqqh7O11YVgjXO/OY9nxGaKpwAV8=) 9: h0v4BwzuQwXRo4npEPtRArvMGUE.crl (hash: 5wNBa0jmv5tRnVRgOGDDUbpWGCWfoTTFBiQcH8KwGwQ=) 10: vevN_FQh1oLDczAFJHEKh5hEOxE.roa (hash: T6+n5imfk+pQSeT5Osi01ihP8snYGAynnv1xpTuEaoU=) 11: xER0K9I9xK8DBLC6KDcI75JR9LY.roa (hash: OqOr60qixfUKi1rv4+JZ/v9458y498eM0Dbfd2dxyz4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 11:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:72:9d:9a:82:b6:e3:c3:83:ff:76:22:85:e2:5c:9b:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941 Validity Not Before: Apr 26 15:00:53 2025 GMT Not After : Apr 27 15:00:53 2025 GMT Subject: CN=8bbe02b92ce5514fc0738245d5935a1ed38631fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:07:26:63:52:56:11:a4:01:6d:57:bf:05:69: 2c:ea:10:89:4a:3f:45:e5:5a:f3:de:6a:80:af:0d: 20:33:a4:9d:09:5e:d1:1b:f5:cd:4d:47:3b:a9:7d: 24:c3:22:d9:ef:7b:f8:85:c1:00:07:ac:01:83:53: f2:b6:07:6e:1f:62:80:f8:02:9f:f7:a6:0f:47:9d: 09:24:4e:da:d7:56:e1:b7:1e:a7:63:86:25:ab:ef: 20:aa:22:4e:5f:bd:44:73:ba:78:1d:f5:2f:e3:24: 1a:6e:d0:43:5a:df:13:92:c9:7b:15:da:fb:c6:13: 22:fc:ab:a1:ab:63:95:81:81:0b:3e:d4:53:62:56: 17:4e:33:ab:a1:cb:24:d1:27:06:19:fa:bd:98:a3: e0:ec:98:b0:37:fc:0b:4e:cb:43:4f:7f:5e:51:3e: da:67:cf:47:7c:ea:da:72:23:a1:62:1b:f5:28:da: 16:e9:2b:cf:46:1e:df:04:45:bb:d4:66:b1:30:35: 48:fe:ac:4a:e5:0b:50:2b:a2:ce:af:74:14:ce:63: 8e:a5:3d:e4:b8:c2:1b:ee:ba:b4:1c:a3:96:e2:06: 22:31:d3:40:fe:b9:1d:b7:e1:32:6a:72:d9:1d:b7: ec:cb:b3:7f:f5:de:e7:ed:93:e6:b0:a6:2a:3e:82: 49:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:BE:02:B9:2C:E5:51:4F:C0:73:82:45:D5:93:5A:1E:D3:86:31:FE X509v3 Authority Key Identifier: keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:52:ea:55:a5:f9:15:14:57:7a:a5:55:79:e8:1c:05:e7:ad: ec:34:ec:69:03:7f:08:06:2c:bc:d0:9e:ca:11:c8:fb:6b:2d: 85:0e:e9:8c:e8:f4:d4:58:20:db:0f:4f:18:b9:8a:f8:23:60: 43:1e:50:d8:df:d2:a8:86:e3:f4:a5:7b:87:75:f7:dd:c8:8a: 5f:68:06:d4:0d:19:6f:55:5c:fe:dd:9a:d2:23:f2:e1:e6:0c: 9e:73:73:3f:2a:ba:84:e0:7c:cd:58:fe:c3:49:32:e6:51:a4: 73:4c:6f:a0:b9:43:c7:46:1d:b0:ca:80:5e:29:8a:6a:0a:e5: 68:92:b0:b5:d5:c6:e5:fc:8b:d1:81:47:38:67:98:c4:70:ea: d4:d0:5f:18:f6:f9:a5:72:fb:31:30:de:fe:e5:1a:6c:a0:f5: 18:b5:fe:fd:12:fa:28:63:27:4d:f8:e6:90:d4:79:92:82:da: 20:3c:b6:0d:79:70:d9:1b:51:a0:d9:0c:f1:b9:4b:0b:11:89: 73:51:9a:08:c1:57:9d:f8:d7:68:30:92:d2:58:10:d7:9d:a7: 71:17:08:14:70:62:31:67:4f:98:93:47:80:9a:57:c8:5b:e7: 7d:c5:68:5c:93:03:49:88:6b:32:f1:76:fd:dc:07:ed:dc:bb: 4b:e4:3f:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZynZqCtuPDg/92IoXiXJslMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NGJmODA3MGNlZTQzMDVkMWEzODllOTEwZmI1MTAyYmJj YzE5NDEwHhcNMjUwNDI2MTUwMDUzWhcNMjUwNDI3MTUwMDUzWjAzMTEwLwYDVQQD Eyg4YmJlMDJiOTJjZTU1MTRmYzA3MzgyNDVkNTkzNWExZWQzODYzMWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQcmY1JWEaQBbVe/BWks6hCJSj9F 5Vrz3mqArw0gM6SdCV7RG/XNTUc7qX0kwyLZ73v4hcEAB6wBg1PytgduH2KA+AKf 96YPR50JJE7a11bhtx6nY4Ylq+8gqiJOX71Ec7p4HfUv4yQabtBDWt8Tksl7Fdr7 xhMi/Kuhq2OVgYELPtRTYlYXTjOrocsk0ScGGfq9mKPg7JiwN/wLTstDT39eUT7a Z89HfOraciOhYhv1KNoW6SvPRh7fBEW71GaxMDVI/qxK5QtQK6LOr3QUzmOOpT3k uMIb7rq0HKOW4gYiMdNA/rkdt+EyanLZHbfsy7N/9d7n7ZPmsKYqPoJJ/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIu+Arks5VFPwHOCRdWTWh7ThjH+MB8GA1UdIwQY MBaAFIdL+AcM7kMF0aOJ6RD7UQK7zBlBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWIt NmZlNGQ4ZmVkMTYwLzEvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWItNmZlNGQ4ZmVkMTYw LzEvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfVLqVaX5 FRRXeqVVeegcBeet7DTsaQN/CAYsvNCeyhHI+2sthQ7pjOj01Fgg2w9PGLmK+CNg Qx5Q2N/SqIbj9KV7h3X33ciKX2gG1A0Zb1Vc/t2a0iPy4eYMnnNzPyq6hOB8zVj+ w0ky5lGkc0xvoLlDx0YdsMqAXimKagrlaJKwtdXG5fyL0YFHOGeYxHDq1NBfGPb5 pXL7MTDe/uUabKD1GLX+/RL6KGMnTfjmkNR5koLaIDy2DXlw2RtRoNkM8blLCxGJ c1GaCMFXnfjXaDCS0lgQ152ncRcIFHBiMWdPmJNHgJpXyFvnfcVoXJMDSYhrMvF2 /dwH7dy7S+Q/qg== -----END CERTIFICATE-----Generated at Sat Apr 26 17:49:30 2025 by rpki-client