$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft File: qFMQ9QMTeuizXU8yn0bwad1wOBU.mft (raw, json) Hash identifier: DciHWMAAnKhe6CTSqrFneyx2kBhGnRMH71CzVFfjUDs= Subject key identifier: 18:2D:1D:6F:48:BE:38:D1:42:E7:39:28:39:31:F9:D6:82:9C:FB:9D Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815 Certificate serial: 019674C28296BC0CD2F261F43190BC06581F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft Manifest number: 0D02 Signing time: Sun 27 Apr 2025 01:00:26 +0000 Manifest this update: Sun 27 Apr 2025 01:00:26 +0000 Manifest next update: Mon 28 Apr 2025 01:00:26 +0000 Files and hashes: 1: 45oKWJWNSoyMzWD0Kk8sRqagqHc.roa (hash: ZRiap7KBK/6F7WwTwhZKaIQBo6dyCPRAgO2PzUDFBBs=) 2: ATNXl5sMuCCQNc30c9l_cm0TcNw.roa (hash: JR8hJ7ucTtgcsP6vKnL9nV/ionD4rfzPRQrpuXEnEks=) 3: CFPX1ri2j5dVasAGgzMnoT-cOt4.roa (hash: XuiBdXxA9M8XJCfAqglXHp2+4b0MLMP/9FYtw4ETJG4=) 4: QRHTKN_AxXjbmDKFt4ozafbZWOw.roa (hash: vK+wvCTtBc+xdfzjCzcAglHcT6Ag6mWapdojkB+Av7Q=) 5: RzmJFM1w4lcKb-cMMQHxwOVwaGg.roa (hash: QwnOv7xt3IWs1L0a2mkMv12V+qGgnpTK/xFmjuXt76M=) 6: cD5IUm-EGBa-Vh255QRP5iyEl_s.roa (hash: /lOTEa3bqElIJJFu5D/6AmLfH6GyOP4ijF9uzNdORv0=) 7: eIw0eh3YEP-bYNeQocOrQeNT9Ho.roa (hash: BiNAvK+4yaYNt1bYkWd7/mgIyoOzJmL05f+bYFpnKTI=) 8: f8ajHMTtlNrrsyJRSeSaLdkgL4w.roa (hash: OG8Xhrawq0hNB4vX2mJ90g91tXyh7BGHjkXzp23NXFs=) 9: gHLoJSwOR2fIlfZQ84ZVB1QOa-c.roa (hash: SKoZJ8pTow2YG7a9sBl0MU1xTakkCXEyJHhzGygBuek=) 10: lrunxs8EBQWo1LhIzQdrw-3rbsE.roa (hash: 6Uc4XQPRY3dYjqUXjx+dcG63Gain6LYn70AV0wZhR+o=) 11: qFMQ9QMTeuizXU8yn0bwad1wOBU.crl (hash: 6Blk4dIDg0WPsMsRKnhtyiqiWR8okYsc7fjvXbXF45E=) 12: qLwaQHbpLKR-VOFMsqI1Dr-brZQ.roa (hash: zu206w/6uZIZGZL13CES5xmLYzoUTsD6JgpbCtCYgq4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:74:c2:82:96:bc:0c:d2:f2:61:f4:31:90:bc:06:58:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815 Validity Not Before: Apr 27 01:00:26 2025 GMT Not After : Apr 28 01:00:26 2025 GMT Subject: CN=182d1d6f48be38d142e739283931f9d6829cfb9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:57:1e:59:eb:f9:fb:66:ad:7f:1a:6d:0d:51: d3:55:10:62:be:88:6e:3d:17:db:5d:86:4c:05:74: 23:69:f1:b5:9f:cf:52:2e:2e:3d:5f:f2:6a:e9:f1: 07:d9:ef:9d:48:c0:13:b2:ef:94:d7:15:f1:b5:a2: d3:4e:e7:d8:18:2f:8e:86:b2:27:e7:00:94:bb:fc: 67:11:3d:1f:27:9d:a9:07:1c:8c:59:72:45:4a:b5: a7:b9:0c:44:f5:9e:cc:c1:31:32:e9:1b:a5:1d:24: 54:42:50:c1:59:eb:01:5b:b7:63:be:8b:79:eb:46: fa:3a:55:ce:74:73:fe:5a:5c:19:49:ec:22:de:54: 0b:3f:a8:89:e9:65:05:97:9a:7d:05:c6:87:ed:6c: 10:cf:67:a9:c6:7a:76:71:e9:10:16:1c:5f:74:97: e7:1b:0d:c7:40:36:fd:78:96:1d:3b:e2:5a:78:9f: db:cf:3b:30:d2:7d:22:a8:9f:3a:2e:67:b6:91:54: de:24:79:da:1b:e3:a6:92:5c:7a:f4:16:11:07:c4: ae:7d:37:cb:b9:4b:ce:6d:fa:28:84:15:d5:95:70: e7:18:32:37:55:05:c4:c9:4d:4a:7f:6d:1f:9f:21: c8:17:fe:0d:ed:e6:04:a1:cf:c2:b8:91:78:e8:28: 2e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:2D:1D:6F:48:BE:38:D1:42:E7:39:28:39:31:F9:D6:82:9C:FB:9D X509v3 Authority Key Identifier: keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:56:23:ce:96:bd:9b:9c:68:bc:4b:af:38:f6:a7:d0:fb:b7: b5:e3:fa:28:20:71:06:db:9b:94:4d:ea:63:b5:c3:44:70:ae: 02:6f:b3:f7:b9:2e:40:13:03:33:45:57:40:49:9b:4f:fc:3b: ec:dd:5c:53:9f:3b:bb:87:04:b4:12:d5:cb:7e:86:8c:31:30: bf:56:81:23:f5:23:8a:5a:71:2a:96:6c:3a:5b:8b:0b:01:1a: f6:9a:2b:94:95:a0:e1:ce:d4:00:cf:7a:a2:8f:6c:86:dd:03: cc:36:16:66:4e:cb:50:e5:20:01:3f:d5:83:08:3d:d3:f5:e2: 0d:9e:0d:2b:7e:97:df:26:0a:c3:4a:bf:ab:73:9c:b0:4b:da: 51:89:b2:10:8e:21:66:ba:4f:b3:45:d6:de:ef:a2:55:ff:9e: 60:fb:f6:c6:b4:30:55:f8:aa:27:1a:59:22:15:91:4a:b8:07: 68:12:d8:58:50:21:dd:a1:01:24:32:2a:09:59:bc:8c:64:40: e5:98:8f:29:3f:66:d2:cc:c7:ab:54:18:39:07:34:de:38:a9: 98:99:8a:00:ab:46:8b:e7:2b:5d:95:b5:00:c2:37:59:d7:45: 9e:4c:dc:bc:de:d1:e8:95:c3:5b:cf:30:f1:9a:dd:81:f6:c2: 9a:a4:ac:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ0woKWvAzS8mH0MZC8BlgfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NTMxMGY1MDMxMzdhZThiMzVkNGYzMjlmNDZmMDY5ZGQ3 MDM4MTUwHhcNMjUwNDI3MDEwMDI2WhcNMjUwNDI4MDEwMDI2WjAzMTEwLwYDVQQD EygxODJkMWQ2ZjQ4YmUzOGQxNDJlNzM5MjgzOTMxZjlkNjgyOWNmYjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVceWev5+2atfxptDVHTVRBivohu PRfbXYZMBXQjafG1n89SLi49X/Jq6fEH2e+dSMATsu+U1xXxtaLTTufYGC+OhrIn 5wCUu/xnET0fJ52pBxyMWXJFSrWnuQxE9Z7MwTEy6RulHSRUQlDBWesBW7djvot5 60b6OlXOdHP+WlwZSewi3lQLP6iJ6WUFl5p9BcaH7WwQz2epxnp2cekQFhxfdJfn Gw3HQDb9eJYdO+JaeJ/bzzsw0n0iqJ86Lme2kVTeJHnaG+Omklx69BYRB8SufTfL uUvObfoohBXVlXDnGDI3VQXEyU1Kf20fnyHIF/4N7eYEoc/CuJF46CguDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBgtHW9IvjjRQuc5KDkx+daCnPudMB8GA1UdIwQY MBaAFKhTEPUDE3ros11PMp9G8GndcDgVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYt MzAxODlhNWE0ZWJhLzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYtMzAxODlhNWE0ZWJh LzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAalYjzpa9 m5xovEuvOPan0Pu3teP6KCBxBtublE3qY7XDRHCuAm+z97kuQBMDM0VXQEmbT/w7 7N1cU587u4cEtBLVy36GjDEwv1aBI/UjilpxKpZsOluLCwEa9porlJWg4c7UAM96 oo9sht0DzDYWZk7LUOUgAT/Vgwg90/XiDZ4NK36X3yYKw0q/q3OcsEvaUYmyEI4h ZrpPs0XW3u+iVf+eYPv2xrQwVfiqJxpZIhWRSrgHaBLYWFAh3aEBJDIqCVm8jGRA 5ZiPKT9m0szHq1QYOQc03jipmJmKAKtGi+crXZW1AMI3WddFnkzcvN7R6JXDW88w 8ZrdgfbCmqSsdg== -----END CERTIFICATE-----Generated at Sun Apr 27 04:20:45 2025 by rpki-client