$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft File: MH2IfALgfJ5HTR-OIQScqmzj-9M.mft (raw, json) Hash identifier: HeQKfJWlZ63n38GVznDI6UaDg9WejrQ5c3OHCOl26j0= Subject key identifier: B2:40:1F:69:6C:D4:B3:BC:21:D4:2F:2A:2C:5A:39:1F:BA:4E:30:70 Authority key identifier: 30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3 Certificate issuer: /CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3 Certificate serial: 0196BBC8C7B586534A3C665963ED80D24168 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft Manifest number: 1536 Signing time: Sat 10 May 2025 20:00:19 +0000 Manifest this update: Sat 10 May 2025 20:00:19 +0000 Manifest next update: Sun 11 May 2025 20:00:19 +0000 Files and hashes: 1: Go3D60IftVT7kBobBk8HTq_r6wY.roa (hash: /aH1VuqUtHMC947Kt5tr1ajHSrdHN60XTYZiPes2dOU=) 2: JKKr0NwqKrBRfO9-TNMA6fKjebU.roa (hash: +prVLn/SSNSb/SQ4BmX9heAxTyq0XNrqnNVcVb/zNYQ=) 3: MH2IfALgfJ5HTR-OIQScqmzj-9M.crl (hash: Cz+2LHV54uyqx5xyGjxO6b4fAIrZxvpYuud61HEvWEA=) 4: OrdWNePRO-azuf-x7WJ0gNqkZc8.roa (hash: ehZsJBwER/Ak+kPEJiQOXw5pziTKWHwzzGUWq4oZM/c=) 5: Q3_mv-tF2Z1EHDZHaZk8mJMN1bk.roa (hash: oXSPeYLnMI9gMBulzyR8eDJwfmPdLhgYhc4vqS0U/tE=) 6: S2TXSI-3n25IfgGnM4uuJwml268.roa (hash: DAgFF4qJxC/k8JOz+sB1Q1cvXx4PDaouIru4SXZXgbU=) 7: UJuJe34B0guqTgOl--QOCgSYvZE.roa (hash: c2O3pbkk6z+NjOLR47vzvdpTF+ZJKIik+rzOAO3mk2Y=) 8: bR8kj_c2TPqFFFMT255K3OTqBTI.roa (hash: mIG3JTVdQTlKmcdrQlCtE5KtfNee8F1irJglkfAd6/0=) 9: e_JO57HIUgxnL2zZw_SZRKtvz2k.roa (hash: kYzJL9upOKUtQTqnQ+rXijBf3P483K+T+FEi6SAaLE0=) 10: iF74lchyYH7faRXUXMHNpR_TrWc.roa (hash: 7HXWZbOcLR6YZsq3MaREkcOeGbzmuGmdyIo3eOGAB/M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 May 2025 20:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:bb:c8:c7:b5:86:53:4a:3c:66:59:63:ed:80:d2:41:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3 Validity Not Before: May 10 20:00:19 2025 GMT Not After : May 11 20:00:19 2025 GMT Subject: CN=b2401f696cd4b3bc21d42f2a2c5a391fba4e3070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4c:27:32:dd:fc:de:8e:16:f3:09:2a:79:c2: f9:ab:78:e7:85:dd:ba:aa:4d:e9:14:fb:5c:8e:84: b8:ce:1f:7f:2b:6f:cc:5e:e4:3d:6d:09:07:61:fc: d1:d2:41:87:c0:84:ba:01:8f:ba:38:b3:29:21:a0: 83:0d:85:37:23:fe:e0:86:42:34:0b:10:f5:1c:f1: a8:29:5b:f8:3c:76:72:d7:de:30:fd:93:1c:b4:f2: bd:dd:46:74:ee:db:95:de:47:f8:33:d6:af:cf:67: 23:cb:1c:34:93:95:25:b5:7c:e6:2c:10:1b:cf:e2: 0f:0d:95:86:c2:b6:c6:a7:a0:7a:e5:ce:cf:5a:30: 1b:fe:2b:d4:ee:cc:96:7b:e4:3a:78:76:4c:d5:6a: d2:b5:59:89:5a:7b:bc:a1:5b:eb:fe:83:93:d3:a0: 70:8c:52:9d:69:f6:4b:e6:6d:87:48:f9:76:a1:fe: ca:41:6d:80:2d:2c:02:ec:b8:c0:65:a1:dd:68:8c: 7f:ad:66:ea:7b:d5:7a:20:97:8e:cb:c2:74:1b:96: 9a:f0:3f:ae:df:69:78:86:9c:bc:89:e7:1e:fb:5a: 7b:fc:b1:21:1f:75:8a:14:ba:ca:cb:d1:11:a8:76: 68:dc:f1:f0:49:43:3f:7c:4c:b0:9e:a9:14:b3:8d: 41:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:40:1F:69:6C:D4:B3:BC:21:D4:2F:2A:2C:5A:39:1F:BA:4E:30:70 X509v3 Authority Key Identifier: keyid:30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:28:1d:ac:f0:7b:68:a1:ab:8e:b6:f3:c0:c6:35:e1:53:76: f7:7e:a2:e0:ee:75:8b:09:42:a2:ca:ef:b9:e7:10:18:4d:40: 4f:0b:da:60:ca:88:6d:10:7c:38:b7:8c:cd:72:23:2e:4c:d1: 5f:cd:6c:0c:ba:1d:4d:69:3f:d6:e4:5d:67:40:1d:c1:e9:ce: c1:59:a7:34:48:fa:ab:13:71:0f:14:9d:54:4d:07:03:8f:26: 46:46:f7:e6:53:3e:67:a9:17:a4:72:05:0e:1b:dd:03:8c:af: 60:96:a2:8c:59:7d:c3:14:7f:4a:27:08:67:09:03:d9:76:9e: 71:1c:4b:42:9a:da:a0:5b:d2:88:ad:34:d3:76:90:2a:a5:51: 71:6d:52:ca:c7:b8:2a:90:36:01:78:ed:8d:8d:85:eb:88:c8: 28:bc:7d:bd:0f:4e:27:7d:c4:b6:14:d5:e8:73:67:94:30:60: 4f:59:24:7a:2f:21:95:50:3c:95:fb:d6:a0:f1:30:8e:e5:e2: 40:67:65:8a:b3:d7:6e:7f:96:62:a8:91:0c:db:3d:39:57:56: fa:2f:1b:3b:85:8f:e9:68:c2:41:ef:c0:60:8d:34:dc:f7:87: a5:7b:70:b0:d6:d1:d2:33:3e:7c:36:61:dc:94:c7:6d:00:fb: 6b:d4:df:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa7yMe1hlNKPGZZY+2A0kFoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwN2Q4ODdjMDJlMDdjOWU0NzRkMWY4ZTIxMDQ5Y2FhNmNl M2ZiZDMwHhcNMjUwNTEwMjAwMDE5WhcNMjUwNTExMjAwMDE5WjAzMTEwLwYDVQQD EyhiMjQwMWY2OTZjZDRiM2JjMjFkNDJmMmEyYzVhMzkxZmJhNGUzMDcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0wnMt383o4W8wkqecL5q3jnhd26 qk3pFPtcjoS4zh9/K2/MXuQ9bQkHYfzR0kGHwIS6AY+6OLMpIaCDDYU3I/7ghkI0 CxD1HPGoKVv4PHZy194w/ZMctPK93UZ07tuV3kf4M9avz2cjyxw0k5UltXzmLBAb z+IPDZWGwrbGp6B65c7PWjAb/ivU7syWe+Q6eHZM1WrStVmJWnu8oVvr/oOT06Bw jFKdafZL5m2HSPl2of7KQW2ALSwC7LjAZaHdaIx/rWbqe9V6IJeOy8J0G5aa8D+u 32l4hpy8iece+1p7/LEhH3WKFLrKy9ERqHZo3PHwSUM/fEywnqkUs41B1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLJAH2ls1LO8IdQvKixaOR+6TjBwMB8GA1UdIwQY MBaAFDB9iHwC4HyeR00fjiEEnKps4/vTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9iMjBkODMtNjEyYy00YjYyLTk3YTMt MWE1ZTVmMTkxYmZhLzEvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9iMjBkODMtNjEyYy00YjYyLTk3YTMtMWE1ZTVmMTkxYmZh LzEvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANygdrPB7 aKGrjrbzwMY14VN2936i4O51iwlCosrvuecQGE1ATwvaYMqIbRB8OLeMzXIjLkzR X81sDLodTWk/1uRdZ0AdwenOwVmnNEj6qxNxDxSdVE0HA48mRkb35lM+Z6kXpHIF DhvdA4yvYJaijFl9wxR/SicIZwkD2XaecRxLQpraoFvSiK0003aQKqVRcW1Syse4 KpA2AXjtjY2F64jIKLx9vQ9OJ33EthTV6HNnlDBgT1kkei8hlVA8lfvWoPEwjuXi QGdlirPXbn+WYqiRDNs9OVdW+i8bO4WP6WjCQe/AYI003PeHpXtwsNbR0jM+fDZh 3JTHbQD7a9TfiA== -----END CERTIFICATE-----Generated at Sun May 11 04:55:13 2025 by rpki-client