$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft File: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft (raw, json) Hash identifier: QDG5kG08LNx7Kk1urAVOuKjzjzR369iWQIjLqNzL/lY= Subject key identifier: 44:79:82:BD:4B:ED:85:45:61:CC:D5:07:49:D7:C2:96:D9:C2:25:64 Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Certificate serial: 0196767A23786C44F7CA5AEBF2D4BCC4A8CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft Manifest number: 0D51 Signing time: Sun 27 Apr 2025 09:00:38 +0000 Manifest this update: Sun 27 Apr 2025 09:00:38 +0000 Manifest next update: Mon 28 Apr 2025 09:00:38 +0000 Files and hashes: 1: 1333qp73ruq7A2nSo9kOVQ7ZzE0.roa (hash: JX94IngnG5jgwt/Et193zGmN4IyvZ77gInsz4D23C18=) 2: 72ompPbzpmnzneIjTtp_bgxv8to.roa (hash: aazsmeYdXGvcDu68YTmlm+z5hJVBvjGJrpJeAcUoELg=) 3: 89lMNrhD2F5x0Ke_v2bBXPEQYgU.roa (hash: K5oebEL4UYGbpI6omznf50HWdMyeoL9B3ezd2prsxV4=) 4: E_3-qae-50qWA7R56c8VnNml0ZU.roa (hash: nkgMixGbN46lHgT97kcU8QjXRmEi7iabVPw78zf1uq4=) 5: EoqOLJZzdQ3i-M95BH6ZqX7Pq-o.roa (hash: a3yd5mlm4a54YbLPpH0dQXH+MNyJ+T7A5cQjTmvitXU=) 6: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl (hash: ll66WKRJ4+y4QPNdhLRYR/W58LnSI7dHd3o8tqGBjgA=) 7: J8otkOOOFhMQcKskyfSet45vpaA.roa (hash: OKOZ6+uREzTIvRtmYWOfCPq5FGMam+EbPwErDVD6eGc=) 8: dPBOUNuMluSVUVsbkWd3r_lebgU.roa (hash: pOELbtPhwT+Xz573ShVJg/36cMfG9CcY6YmD29hT1jk=) 9: h4WPx1Sgez5mjA1QOYWXTeKaf6I.roa (hash: j0LdK7x2Tf65HMuHIG0cj+mnli0iJ+gVK8H+vxjuT5g=) 10: m6IyPWEEbbAvvvSNw5JH6euTQ7A.roa (hash: 06SutFrXFPpCbXeexyGeEPlk43CPE0aY99qdVjAphr0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:76:7a:23:78:6c:44:f7:ca:5a:eb:f2:d4:bc:c4:a8:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Validity Not Before: Apr 27 09:00:38 2025 GMT Not After : Apr 28 09:00:38 2025 GMT Subject: CN=447982bd4bed854561ccd50749d7c296d9c22564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4e:cf:8f:f3:56:7b:0c:38:dc:86:02:0e:5a: 86:5f:f1:ef:16:a1:bb:0c:a4:60:9a:51:57:71:66: 81:03:3b:8d:8e:bb:39:5c:6d:52:5f:1f:22:49:a4: ac:0d:7a:58:f4:61:5c:70:0c:2d:92:67:42:93:87: f2:84:16:6c:b4:04:25:61:88:23:4d:01:00:67:56: a9:ab:fe:0e:c3:79:ea:26:57:00:7a:e2:37:a7:ba: 5e:bf:ad:21:85:aa:29:fe:68:2a:04:55:cc:2d:e8: da:72:39:a4:5b:c2:24:d9:fb:c9:40:eb:6d:f6:db: 6b:c3:7f:67:7b:e3:04:75:fe:e6:ac:b7:78:c6:bf: ef:dd:56:8c:d9:58:16:1d:50:44:4d:56:9b:cd:81: b5:5c:6e:20:7e:b0:b4:e1:37:5d:b5:36:40:63:31: 4f:e6:41:6e:a4:67:eb:30:37:65:42:97:53:0d:34: 01:a6:9c:4c:13:4b:08:0b:4f:a9:a9:9a:97:d2:e8: ef:5b:e0:af:46:b6:a7:ba:d5:42:98:4f:bd:6f:68: d6:8f:56:01:e1:5e:ea:cb:70:f0:cb:d2:23:21:14: 35:3e:14:2b:e4:7f:cd:fe:c4:64:60:ee:96:d4:a9: e8:7f:16:00:b7:32:8d:dd:56:46:5c:66:c7:c6:79: 64:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:79:82:BD:4B:ED:85:45:61:CC:D5:07:49:D7:C2:96:D9:C2:25:64 X509v3 Authority Key Identifier: keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:ca:0f:08:06:b2:75:aa:10:55:31:f5:c4:cb:af:e9:d2:d4: 73:d8:77:19:34:db:fb:7a:32:0f:86:b2:c1:52:2b:1f:09:20: 5d:60:0d:89:c4:18:16:06:5a:25:c3:c7:7a:2d:74:ea:ab:cb: 1a:52:b3:3b:a1:28:a7:06:4a:ef:1a:c0:96:0c:a1:05:10:84: 6f:53:32:20:8e:9d:53:ac:74:d9:8d:4c:23:7e:a0:ce:3f:34: f1:c8:1d:8c:c4:d1:a7:44:d4:4e:99:ad:0f:37:82:39:28:73: 53:c3:41:25:af:25:18:c9:f6:2e:9b:37:06:58:03:0e:fe:c3: 49:a8:17:eb:c5:b8:b9:8f:e8:79:45:03:75:fa:9f:37:de:0c: a9:98:7a:21:f0:2b:4a:41:9c:54:f4:b3:e9:3c:48:26:6d:51: 2c:fa:1a:1e:76:97:96:8a:e8:57:fe:a9:8f:5d:fc:1d:85:12: 0c:c5:b9:75:b3:33:ee:05:81:56:b3:e8:46:cd:c9:57:55:0e: 22:25:e9:a2:2e:2d:2c:3c:b1:4f:6e:95:0e:4f:04:0a:4f:f7: 9e:57:34:23:fe:11:2c:59:7b:38:38:f3:f5:88:95:37:0a:08: 4a:40:db:db:ed:8c:89:43:e9:a0:93:2d:7a:9e:ad:0b:a7:e0: a0:cd:f1:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ2eiN4bET3ylrr8tS8xKjPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhN2YwMzZlMjU5MjM5MWZiNDVhM2RkMzNjYWYwYjA3OTU2 OTczY2YwHhcNMjUwNDI3MDkwMDM4WhcNMjUwNDI4MDkwMDM4WjAzMTEwLwYDVQQD Eyg0NDc5ODJiZDRiZWQ4NTQ1NjFjY2Q1MDc0OWQ3YzI5NmQ5YzIyNTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArk7Pj/NWeww43IYCDlqGX/HvFqG7 DKRgmlFXcWaBAzuNjrs5XG1SXx8iSaSsDXpY9GFccAwtkmdCk4fyhBZstAQlYYgj TQEAZ1apq/4Ow3nqJlcAeuI3p7pev60hhaop/mgqBFXMLejacjmkW8Ik2fvJQOtt 9ttrw39ne+MEdf7mrLd4xr/v3VaM2VgWHVBETVabzYG1XG4gfrC04TddtTZAYzFP 5kFupGfrMDdlQpdTDTQBppxME0sIC0+pqZqX0ujvW+CvRranutVCmE+9b2jWj1YB 4V7qy3Dwy9IjIRQ1PhQr5H/N/sRkYO6W1KnofxYAtzKN3VZGXGbHxnlkuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFER5gr1L7YVFYczVB0nXwpbZwiVkMB8GA1UdIwQY MBaAFBp/A24lkjkftFo90zyvCweVaXPPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2It MzQwZDYyNWM2ZGJhLzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2ItMzQwZDYyNWM2ZGJh LzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmMoPCAay daoQVTH1xMuv6dLUc9h3GTTb+3oyD4aywVIrHwkgXWANicQYFgZaJcPHei106qvL GlKzO6EopwZK7xrAlgyhBRCEb1MyII6dU6x02Y1MI36gzj808cgdjMTRp0TUTpmt DzeCOShzU8NBJa8lGMn2Lps3BlgDDv7DSagX68W4uY/oeUUDdfqfN94MqZh6IfAr SkGcVPSz6TxIJm1RLPoaHnaXloroV/6pj138HYUSDMW5dbMz7gWBVrPoRs3JV1UO IiXpoi4tLDyxT26VDk8ECk/3nlc0I/4RLFl7ODjz9YiVNwoISkDb2+2MiUPpoJMt ep6tC6fgoM3xNg== -----END CERTIFICATE-----Generated at Sun Apr 27 18:41:51 2025 by rpki-client