$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft File: ZkD4nOImRblyl9eANybcL7Dl9Lk.mft (raw, json) Hash identifier: 126uOHRtUAhs5WzGfszfKn7RWOXOV2WRgaVI14ijTfo= Subject key identifier: B0:6B:7C:83:35:CA:4B:7A:48:EA:8B:52:57:19:F9:A3:BD:75:8E:9F Authority key identifier: 66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9 Certificate issuer: /CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9 Certificate serial: 019675D52EBDAE332B80FAC3938B14BA7614 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft Manifest number: 1522 Signing time: Sun 27 Apr 2025 06:00:27 +0000 Manifest this update: Sun 27 Apr 2025 06:00:27 +0000 Manifest next update: Mon 28 Apr 2025 06:00:27 +0000 Files and hashes: 1: 1-mklDANMVJEiPmpBlxf2QE7U4xQ.roa (hash: nYcrxIcojCmllQ6KA3duBQeqM8wo1N5ldpzqFh4IADM=) 2: 6jIK36Mhaa4Xbj7P1Zh2U_58p-M.roa (hash: U9tg2SAso4TZBWfhZ8a+7jSfIjc4dzku6E3DThi6OYI=) 3: GFllu8yCEzYxH4Ih5x02DmBd6d8.roa (hash: MMmyezgzI9GjhXg9IrhVD+9c+IgYTInaNbVAzHZN2q0=) 4: MrukXcFUqEow256KAYyeIYLRZog.roa (hash: XtBjKt0dD05c3nHn8KPQ936/hM8bld6aPmDpQ0/ANLw=) 5: QbMBVnYbFFojOFc196F2jGwUv80.roa (hash: PfefSPZEQEk15+9V5/IwtgSWUTKXs+bmANRjvJwpNgo=) 6: RqGHUWF00fhVZeF-dl8ZKiYmlxQ.roa (hash: xtXihm79MoGY4uAJpdxZbQ/glvVQjH9b99Zaga793M8=) 7: WpJJ_ikBuc-Y0bGUJcEnqRT8GwE.roa (hash: F2+S7SjwnB98jayV0ovfpTJ0OhWt8ofMSB+zMRafvPU=) 8: X-Wp2GdoJeyJqzlvdHdTYBcZFbQ.roa (hash: a4lrtqUDOD2jEGfmKJYDLSW6SifymwRthtLHwdcAY4w=) 9: ZkD4nOImRblyl9eANybcL7Dl9Lk.crl (hash: dD5MB5T2Mp8zpIoxyvq2bPfuGEkV5AObSjFgiW+Syfw=) 10: i4fVJ23Gnd_yPkuF6n29x3RRNtE.roa (hash: b9PLNQP5kOz4vbwmAcKMWxEW3G7VlFSo/at2gpQ0dIE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 05:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:75:d5:2e:bd:ae:33:2b:80:fa:c3:93:8b:14:ba:76:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9 Validity Not Before: Apr 27 06:00:27 2025 GMT Not After : Apr 28 06:00:27 2025 GMT Subject: CN=b06b7c8335ca4b7a48ea8b525719f9a3bd758e9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3a:f8:54:bf:52:d3:1e:5d:59:70:03:6f:be: 63:b5:19:46:b2:7c:88:f2:f6:ee:e9:17:40:59:ca: 45:e9:f9:da:e7:ab:5d:51:53:47:00:96:d5:73:b9: d1:5e:52:17:86:a9:ab:2d:8a:45:5a:d5:f1:43:87: 32:29:31:a4:78:f0:18:f8:2b:79:cb:4e:af:bb:35: 23:01:b1:8e:65:7c:fd:b0:39:91:fa:e2:e0:ba:06: ed:4e:0a:f6:7c:c4:6e:ad:b2:87:4b:54:b6:40:34: da:99:59:0f:0c:7a:0a:00:85:a1:87:bd:b2:4d:06: 92:0b:cc:ca:99:b4:6d:1e:c9:51:c3:31:80:06:69: 90:87:0e:88:29:b7:5d:e7:74:36:80:3f:50:31:98: 11:db:ec:4a:00:86:a6:80:57:46:a1:41:ab:d9:29: 19:8d:75:65:b0:30:46:56:db:08:17:1d:aa:2b:43: f5:de:74:3b:17:e5:69:be:5c:68:f2:33:53:88:c2: b9:80:30:df:b1:86:5a:1a:da:e9:1a:8e:0d:65:72: 81:26:61:65:9d:37:e5:72:5a:dc:5b:ae:19:76:59: 2c:7b:44:06:9a:e8:7e:cf:26:a1:55:3a:92:44:83: c8:5f:cb:9c:6c:18:13:23:62:b3:50:ff:1a:cf:74: b8:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:6B:7C:83:35:CA:4B:7A:48:EA:8B:52:57:19:F9:A3:BD:75:8E:9F X509v3 Authority Key Identifier: keyid:66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:46:d3:c7:53:37:f6:6c:81:b1:ca:16:3d:bb:d5:dd:ac:14: af:54:b1:69:86:cd:f9:bd:83:0b:5a:19:a5:93:fc:cf:d3:8c: 7d:d7:3a:73:6e:25:ff:da:ba:5e:c9:27:e9:8a:ea:10:a0:5b: e9:49:f0:7b:8b:35:92:42:ce:92:7d:22:7a:39:e0:01:66:c5: 38:30:7c:fc:8f:33:71:42:bf:ee:66:4b:2c:64:5a:22:04:6e: b1:6f:e5:f4:e8:bb:45:ef:ef:e3:31:d7:f3:d9:fb:9b:6a:5f: 81:37:56:49:6f:a9:c3:01:17:c9:50:a9:ec:5b:d2:fc:fc:d0: f6:19:da:92:c2:02:c6:4c:06:ee:9f:57:73:0c:c9:27:19:23: ef:2c:93:0c:1a:3f:a6:8d:b2:f7:4e:f3:5b:56:38:fa:3a:f9: 6f:44:cd:01:89:49:4a:36:c5:60:07:be:cd:fe:2f:24:41:d8: 4b:bf:44:45:11:8e:6a:e9:7e:c5:14:36:4f:d4:ae:be:17:f5: d9:66:02:bf:20:2f:2c:09:03:4a:c1:2e:0e:1c:c0:ad:79:24: db:a6:c3:d4:54:ea:34:db:b8:4c:8d:13:b2:91:50:34:ea:59: 6e:3d:17:5a:08:0f:30:ab:2c:4a:fa:c6:8c:8d:41:f9:0f:22: 78:44:ca:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ11S69rjMrgPrDk4sUunYUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NDBmODljZTIyNjQ1Yjk3Mjk3ZDc4MDM3MjZkYzJmYjBl NWY0YjkwHhcNMjUwNDI3MDYwMDI3WhcNMjUwNDI4MDYwMDI3WjAzMTEwLwYDVQQD EyhiMDZiN2M4MzM1Y2E0YjdhNDhlYThiNTI1NzE5ZjlhM2JkNzU4ZTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDr4VL9S0x5dWXADb75jtRlGsnyI 8vbu6RdAWcpF6fna56tdUVNHAJbVc7nRXlIXhqmrLYpFWtXxQ4cyKTGkePAY+Ct5 y06vuzUjAbGOZXz9sDmR+uLgugbtTgr2fMRurbKHS1S2QDTamVkPDHoKAIWhh72y TQaSC8zKmbRtHslRwzGABmmQhw6IKbdd53Q2gD9QMZgR2+xKAIamgFdGoUGr2SkZ jXVlsDBGVtsIFx2qK0P13nQ7F+Vpvlxo8jNTiMK5gDDfsYZaGtrpGo4NZXKBJmFl nTflclrcW64Zdlkse0QGmuh+zyahVTqSRIPIX8ucbBgTI2KzUP8az3S4XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLBrfIM1ykt6SOqLUlcZ+aO9dY6fMB8GA1UdIwQY MBaAFGZA+JziJkW5cpfXgDcm3C+w5fS5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEt NDRhYjdhOWQ3ZGVhLzEvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEtNDRhYjdhOWQ3ZGVh LzEvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh0bTx1M3 9myBscoWPbvV3awUr1SxaYbN+b2DC1oZpZP8z9OMfdc6c24l/9q6Xskn6YrqEKBb 6Unwe4s1kkLOkn0iejngAWbFODB8/I8zcUK/7mZLLGRaIgRusW/l9Oi7Re/v4zHX 89n7m2pfgTdWSW+pwwEXyVCp7FvS/PzQ9hnaksICxkwG7p9XcwzJJxkj7yyTDBo/ po2y907zW1Y4+jr5b0TNAYlJSjbFYAe+zf4vJEHYS79ERRGOaul+xRQ2T9Suvhf1 2WYCvyAvLAkDSsEuDhzArXkk26bD1FTqNNu4TI0TspFQNOpZbj0XWggPMKssSvrG jI1B+Q8ieETKNw== -----END CERTIFICATE-----Generated at Sun Apr 27 15:21:34 2025 by rpki-client