$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft File: zRCMIl8keM1CMBeYkNByhL4WNs0.mft (raw, json) Hash identifier: uG67syiPlgJlbB3HU83/7xRQPYG+vhQrqfPDCB3JjVs= Subject key identifier: 72:16:10:EA:7B:36:F9:2D:CA:10:33:E8:86:DB:A3:E9:D9:11:FD:A3 Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd Certificate serial: 0196BD12A8D02CBF990F527A56010DABE0B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft Manifest number: 0D84 Signing time: Sun 11 May 2025 02:00:38 +0000 Manifest this update: Sun 11 May 2025 02:00:38 +0000 Manifest next update: Mon 12 May 2025 02:00:38 +0000 Files and hashes: 1: 5WcQI-96O5FH1qX3Ok9ZLqqGV90.roa (hash: 6fOcHEhBTxH3iUZb4U4KYnoW42okdMilfcyFdKyUUCo=) 2: 6w6GslstW7dP-hGd9Y6a0xOTJ1Q.roa (hash: c/YkJLvVjnK6oPthfFlSxGHPywR+uY+AcXy43DN7bDA=) 3: 9pK-UIM-H6tNfktNjnY3n3eplHo.roa (hash: uVmuFNCMVIRszRB0UyxXgi1VNyC51j94Uds90LHBjSU=) 4: TrRa3mOQMzvIbozJzmyBJZ6tULw.roa (hash: d1WpoK6cobO04MOKczILPk89idxmBxtIOoIeGxHI9HI=) 5: WxkR99ND6hkg9zjVGX3QR8_P3Sg.roa (hash: kx4fWFzO9g7cyAxp6MdcGUoII+Luoha51Ph8bVepefA=) 6: bV7wiXISBEG2SHcG3dNKC6Wy_3Y.roa (hash: nmxCRUNayEJiwBjnfgLQZj2sJPp5WltkD5SdU2gQZ9k=) 7: bel6Fk2PBFF8iK4X4dPcB_YL-p8.roa (hash: whSoMvRfcwg1zlxaNwdPk6EU1wdOECDElkdNcqQV/CE=) 8: dguhelyeA7h-WKBbQzBkNq3_W40.roa (hash: xeizpLm1WM753pH0+O915Rj+oI7hkint9s/onXzL15U=) 9: hBKsbi06dqWQsHOJ9T-z_RIbUjA.roa (hash: uWUX6xGjuFBVk0pdcf+5Gpk/beOEbACzQvY2ZU/EXNs=) 10: uOq6i2-TnOYCsxAxwvHpJmAlTfg.roa (hash: 9inVtd7SVRI0UIGAJNZs9aNl1wsnYwDi5iWNfEOoDLM=) 11: yoNL7-5tCOlQ2k6SSzI3Bw-Kl9o.roa (hash: ZyshyOfvs12ZYQKuRmc4qW+/EYU6jHrxeUY751HiXsY=) 12: zRCMIl8keM1CMBeYkNByhL4WNs0.crl (hash: enFFwfE/IxLLiRa3aC7wK3EDudmS72ed4AuVj2b4WjE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 May 2025 02:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:bd:12:a8:d0:2c:bf:99:0f:52:7a:56:01:0d:ab:e0:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd Validity Not Before: May 11 02:00:38 2025 GMT Not After : May 12 02:00:38 2025 GMT Subject: CN=721610ea7b36f92dca1033e886dba3e9d911fda3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:cc:87:0b:11:65:22:c8:96:2d:4d:a1:98:27: b8:72:51:72:40:e6:aa:04:f7:f5:e1:b9:db:8f:6d: e8:3a:af:30:a6:ec:00:b3:11:5d:69:5e:25:60:56: 75:5b:2f:44:ea:8d:b9:87:e4:d4:18:99:da:fd:92: 24:1e:4f:70:52:26:95:3f:df:01:6b:2a:f8:5b:c0: 9d:45:2a:aa:48:21:e5:e2:f7:52:47:50:d3:45:f9: 03:00:89:98:58:ac:57:ba:ca:f6:da:4d:20:d6:f6: 96:e5:c2:0b:ab:3b:ab:65:21:19:91:9f:87:40:c4: 54:5b:e3:9e:4c:75:8b:49:db:bc:37:a3:8b:08:31: 56:38:fb:f2:0e:67:19:9c:b9:95:8d:fb:8e:d2:13: 29:31:e5:82:59:bc:8a:d2:10:b9:38:67:3d:7d:6d: 76:aa:8b:e1:28:08:44:2d:fd:17:a7:4e:32:d2:13: ed:d4:2d:e0:c7:91:02:b3:89:ff:c3:81:1f:34:39: 49:db:ac:ed:be:29:38:ad:ec:3a:d5:df:26:3e:8b: 62:7f:8f:08:28:f6:68:3a:1a:d5:7b:ac:51:9b:44: 94:a3:c7:04:52:9b:7c:46:6e:67:e2:67:52:98:d1: 13:eb:fc:b1:c7:ad:d3:e5:d9:fc:c7:6a:00:c4:9b: 31:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:16:10:EA:7B:36:F9:2D:CA:10:33:E8:86:DB:A3:E9:D9:11:FD:A3 X509v3 Authority Key Identifier: keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:da:a8:f7:e3:95:9c:09:ff:b4:6c:8b:57:e6:e6:09:0e:02: 4f:bd:8a:c1:88:ac:8f:bb:ba:50:d9:b9:a8:3b:6a:ad:95:07: 39:75:73:5b:57:02:b2:1d:2f:df:35:0f:54:cd:b8:69:00:bb: 6e:b2:40:93:76:22:cf:40:e3:c8:37:84:6d:76:21:3c:ab:8f: ea:d3:8b:61:28:02:ea:c0:5a:9e:fc:d1:4e:b3:bb:aa:d5:09: 9f:93:8c:39:80:c5:40:03:bf:4a:12:7b:d9:61:a9:63:66:e7: a5:5f:4f:90:11:b8:6a:14:5d:bf:40:0c:60:ee:fe:5e:7d:5d: 5c:e6:ca:7d:9a:11:a3:38:77:dd:da:35:98:9a:45:ae:f0:cb: af:99:c9:d9:af:70:53:37:e8:a7:33:9c:2b:47:23:cc:97:fd: 17:22:9a:1f:5b:d5:dd:98:da:51:96:b8:c3:c2:9b:d4:23:9d: 9c:5b:f5:ca:fe:4b:84:5d:f5:1b:43:a4:d9:4c:3e:0b:b0:c3: e6:da:6c:56:17:49:3a:51:cd:38:37:25:49:53:bf:2e:a4:b3: 44:32:6a:93:d4:08:35:35:99:6b:f9:89:2b:0c:63:62:7e:2d: 98:fa:c7:ee:7c:00:b7:6e:c6:da:2c:bd:e4:93:73:85:78:e4: 39:5b:ba:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa9EqjQLL+ZD1J6VgENq+C1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMTA4YzIyNWYyNDc4Y2Q0MjMwMTc5ODkwZDA3Mjg0YmUx NjM2Y2QwHhcNMjUwNTExMDIwMDM4WhcNMjUwNTEyMDIwMDM4WjAzMTEwLwYDVQQD Eyg3MjE2MTBlYTdiMzZmOTJkY2ExMDMzZTg4NmRiYTNlOWQ5MTFmZGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08yHCxFlIsiWLU2hmCe4clFyQOaq BPf14bnbj23oOq8wpuwAsxFdaV4lYFZ1Wy9E6o25h+TUGJna/ZIkHk9wUiaVP98B ayr4W8CdRSqqSCHl4vdSR1DTRfkDAImYWKxXusr22k0g1vaW5cILqzurZSEZkZ+H QMRUW+OeTHWLSdu8N6OLCDFWOPvyDmcZnLmVjfuO0hMpMeWCWbyK0hC5OGc9fW12 qovhKAhELf0Xp04y0hPt1C3gx5ECs4n/w4EfNDlJ26ztvik4rew61d8mPotif48I KPZoOhrVe6xRm0SUo8cEUpt8Rm5n4mdSmNET6/yxx63T5dn8x2oAxJsxYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHIWEOp7NvktyhAz6Ibbo+nZEf2jMB8GA1UdIwQY MBaAFM0QjCJfJHjNQjAXmJDQcoS+FjbNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQt YWU1MDI3MzY4MWE3LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQtYWU1MDI3MzY4MWE3 LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPNqo9+OV nAn/tGyLV+bmCQ4CT72KwYisj7u6UNm5qDtqrZUHOXVzW1cCsh0v3zUPVM24aQC7 brJAk3Yiz0DjyDeEbXYhPKuP6tOLYSgC6sBanvzRTrO7qtUJn5OMOYDFQAO/ShJ7 2WGpY2bnpV9PkBG4ahRdv0AMYO7+Xn1dXObKfZoRozh33do1mJpFrvDLr5nJ2a9w UzfopzOcK0cjzJf9FyKaH1vV3ZjaUZa4w8Kb1COdnFv1yv5LhF31G0Ok2Uw+C7DD 5tpsVhdJOlHNODclSVO/LqSzRDJqk9QINTWZa/mJKwxjYn4tmPrH7nwAt27G2iy9 5JNzhXjkOVu6mA== -----END CERTIFICATE-----Generated at Sun May 11 12:35:26 2025 by rpki-client