$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft File: 4VgI8_khvIw-6ofHWExYTBAAsFE.mft (raw, json) Hash identifier: igdFfj9fXW04ZFt1KnV0eytRUegdgxl90SRUaS2LysM= Subject key identifier: D1:1D:8B:02:AF:11:9C:25:A9:B1:72:D7:A5:5E:77:9E:1A:D6:10:BA Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51 Certificate issuer: /CN=e15808f3f921bc8c3eea87c7584c584c1000b051 Certificate serial: 0196759E52FD1012468076061A8BE0545C6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft Manifest number: 1530 Signing time: Sun 27 Apr 2025 05:00:32 +0000 Manifest this update: Sun 27 Apr 2025 05:00:32 +0000 Manifest next update: Mon 28 Apr 2025 05:00:32 +0000 Files and hashes: 1: 4VgI8_khvIw-6ofHWExYTBAAsFE.crl (hash: BplIPwhqAiti/khDs4qIDio0ljmZmgRzTNae9QcKG3g=) 2: 7hCd_HKEYkXLvNCBLfMsTezcRXs.roa (hash: U6tVugGWrDYmHCXTomFCnYlQyCN2W9AcT+utfrGkYmM=) 3: HK9YTPeAPa2mm7JsqVFDcEqWktE.roa (hash: pGFfaceKosL6QVYMO3oG4sR8CNlOKvbDd43IVlI91l4=) 4: SiUykNKTjaApyo1sqndO19rBYAs.roa (hash: jaR1D2Lqsnpc33UxJXomGKoF/S6s6EdMDhOpwvCqmiY=) 5: YxnLmhiEAoRIPwqx7D5pI2tVg0E.roa (hash: Z5VZl3NN5nIeNmBSmYIBYR811mPwFTzRI+uDPXf+8B0=) 6: dsVEniM-PjP3aF57gRKfJeGsuXA.roa (hash: rATVs9dRCK5irdzRkSY1vrtCfxCwPvZoSJA3EPbdN5Q=) 7: jNJogHc9h5lodSxhpjDRYEENUOM.roa (hash: O0aQYdB/pHChDSdymrPe8W/YPJRqMLBI8pg3+YHjgZ8=) 8: myrzpFPZKEFrMiKvWzGEDQDrl_I.roa (hash: J9rVlZg9Lutrp3UmbnqdopvJazmPd6IwXd6xHibeysc=) 9: pm4iWvL8z96fIGtjxaGjSXeRJT4.roa (hash: ZYVelcX+1GR4HDMDdE6U47zsAh6vEcuxWCIg/8E3uZE=) 10: qeW6k62Ova_Op7BhYtzucMuedHs.roa (hash: iPCOF2sKXY5KaN1yHnhdOMP4cE9n3NAPWSlvKOP6/hY=) 11: qispPpKIlPSWV1rI1EAZQtlT-p0.roa (hash: sBtkCqwyGciPSktKwAiba5P4WFIxvlZFVG+B/hvcwgI=) 12: z1XxJmXXx8uVxhk9CwQJXiPqHzU.roa (hash: EaljD/90P2BfuVNTpmwdBC+zdctwtxvncMDcXLvuk10=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 05:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:75:9e:52:fd:10:12:46:80:76:06:1a:8b:e0:54:5c:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051 Validity Not Before: Apr 27 05:00:32 2025 GMT Not After : Apr 28 05:00:32 2025 GMT Subject: CN=d11d8b02af119c25a9b172d7a55e779e1ad610ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:82:c9:5f:82:a2:40:6b:f1:33:0a:ee:14:c1: 39:ff:8c:73:23:dc:97:de:42:9f:21:68:e0:1f:15: 42:e5:d5:d9:cb:72:0f:9a:87:75:9e:c9:9e:74:3c: d2:69:cd:fe:eb:89:73:87:da:0d:a9:9d:27:44:7d: 36:8b:e7:2d:a0:15:5c:95:bd:44:df:aa:36:db:ee: ca:45:0d:35:74:cd:30:e6:bb:e4:78:32:7f:82:d6: 82:4a:20:55:d6:29:6d:7e:f2:ae:01:d5:3c:67:ee: 05:a8:34:ab:cd:62:cb:60:c3:ba:8f:82:d4:64:a4: fa:4d:40:7f:63:18:ff:fc:c4:69:ba:84:df:2b:69: d5:93:23:d2:3b:60:44:ef:56:65:75:81:4e:2c:af: 9a:c9:16:a3:38:e7:28:84:37:94:5e:fd:27:d0:21: 8c:43:cf:8d:24:22:f0:38:7f:f0:3b:dd:37:29:f9: 8e:a4:0a:12:f9:d5:9d:c0:5f:04:8a:92:e1:1a:99: 74:fb:4e:73:b3:9c:2a:cf:bd:92:ed:13:73:c5:e7: d5:6a:4c:d9:f3:2d:aa:cb:aa:d9:ba:51:c3:c1:7b: 29:95:f5:14:9c:c2:d3:3c:94:4f:1f:a7:35:f0:74: 9f:e4:34:34:d5:f9:00:d8:54:12:d7:4f:21:fb:94: 8e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:1D:8B:02:AF:11:9C:25:A9:B1:72:D7:A5:5E:77:9E:1A:D6:10:BA X509v3 Authority Key Identifier: keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:4b:70:b2:9d:a9:a1:04:2f:48:df:37:bc:b2:26:5f:98:86: 71:ec:be:56:2c:d1:bf:6b:61:4f:7c:a3:00:5e:bb:ec:85:fa: 56:31:62:e5:08:26:30:85:7f:81:6b:c9:18:57:a4:b3:c3:e9: 91:28:70:c8:be:d7:c8:41:c5:4f:6c:75:a6:e2:21:e0:67:6a: c1:76:b0:cd:c0:2e:d8:f4:09:be:6e:fa:a1:fb:00:3b:23:d1: 7f:e4:3a:e4:5c:c3:ba:f4:c3:b7:09:67:af:1b:71:3e:6a:cb: 95:71:2f:0b:a2:e7:bc:72:a6:9d:a4:f4:7c:16:ab:00:fb:40: 63:77:8f:28:07:83:1b:6e:29:ea:48:7e:f4:e6:34:fe:1b:27: fc:fb:c3:72:f3:11:fc:3c:b1:c6:91:56:18:72:79:8f:6a:8b: 96:81:33:cb:52:82:2f:9f:2e:d2:de:68:14:d7:33:78:27:64: 5d:ba:72:4a:b1:b4:d9:16:31:e5:dd:58:4c:7f:cb:64:ba:8a: 9a:ab:85:a7:0a:c3:42:6d:78:19:37:f7:93:e1:fe:8c:ab:c9: 07:76:bf:a1:f0:24:40:97:ed:24:d5:db:14:95:a7:f5:68:7e: ec:62:8a:23:51:e7:b4:f1:89:b5:a3:fa:b6:99:47:d8:64:00: 2d:d4:ae:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ1nlL9EBJGgHYGGovgVFxuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNTgwOGYzZjkyMWJjOGMzZWVhODdjNzU4NGM1ODRjMTAw MGIwNTEwHhcNMjUwNDI3MDUwMDMyWhcNMjUwNDI4MDUwMDMyWjAzMTEwLwYDVQQD EyhkMTFkOGIwMmFmMTE5YzI1YTliMTcyZDdhNTVlNzc5ZTFhZDYxMGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ILJX4KiQGvxMwruFME5/4xzI9yX 3kKfIWjgHxVC5dXZy3IPmod1nsmedDzSac3+64lzh9oNqZ0nRH02i+ctoBVclb1E 36o22+7KRQ01dM0w5rvkeDJ/gtaCSiBV1iltfvKuAdU8Z+4FqDSrzWLLYMO6j4LU ZKT6TUB/Yxj//MRpuoTfK2nVkyPSO2BE71ZldYFOLK+ayRajOOcohDeUXv0n0CGM Q8+NJCLwOH/wO903KfmOpAoS+dWdwF8EipLhGpl0+05zs5wqz72S7RNzxefVakzZ 8y2qy6rZulHDwXsplfUUnMLTPJRPH6c18HSf5DQ01fkA2FQS108h+5SOEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNEdiwKvEZwlqbFy16Ved54a1hC6MB8GA1UdIwQY MBaAFOFYCPP5IbyMPuqHx1hMWEwQALBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC84ZThlODItNTI3NC00ZDJmLThjYTAt YWIxOWZjYjBjZTY0LzEvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC84ZThlODItNTI3NC00ZDJmLThjYTAtYWIxOWZjYjBjZTY0 LzEvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkUtwsp2p oQQvSN83vLImX5iGcey+VizRv2thT3yjAF677IX6VjFi5QgmMIV/gWvJGFeks8Pp kShwyL7XyEHFT2x1puIh4GdqwXawzcAu2PQJvm76ofsAOyPRf+Q65FzDuvTDtwln rxtxPmrLlXEvC6LnvHKmnaT0fBarAPtAY3ePKAeDG24p6kh+9OY0/hsn/PvDcvMR /DyxxpFWGHJ5j2qLloEzy1KCL58u0t5oFNczeCdkXbpySrG02RYx5d1YTH/LZLqK mquFpwrDQm14GTf3k+H+jKvJB3a/ofAkQJftJNXbFJWn9Wh+7GKKI1HntPGJtaP6 tplH2GQALdSuBQ== -----END CERTIFICATE-----Generated at Sun Apr 27 09:16:28 2025 by rpki-client