$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft File: h74JMJcJfERX_1qj5Yk8jBVDJhI.mft (raw, json) Hash identifier: 3Y80Z33USbz4gEvo5bNoKnbVAm2cSkTOXGOtHH3QX3E= Subject key identifier: DD:BA:C5:2F:19:F9:B5:A6:6A:3E:CF:B6:74:B0:AE:68:F2:90:3B:A1 Authority key identifier: 87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12 Certificate issuer: /CN=87be093097097c4457ff5aa3e5893c8c15432612 Certificate serial: 0196B44671635ADB4442BF69F6CB9568CB4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft Manifest number: 11BF Signing time: Fri 09 May 2025 09:00:37 +0000 Manifest this update: Fri 09 May 2025 09:00:37 +0000 Manifest next update: Sat 10 May 2025 09:00:37 +0000 Files and hashes: 1: 58EBygRjdS7517jE8ijFSPfVOH4.roa (hash: 7YP7WUOPsrK23qXejFg0a6c2K8s3GbzwWCeuhRLXrr4=) 2: 6gQb_YrXJIkOy1ffV5AywwaDFKA.roa (hash: YBUcx/W2YYWfTW+ZfLh5vpIiC6jkcxCKGBt0nojo2Ok=) 3: CjTW9-CUmuY1lxZ8OqndS2FXSrY.roa (hash: 9DQ0LnRbHYpMYq+dl7Z0Jfv0Jx2DrmotGXluT5sxbiI=) 4: UYD_ol6L79u8glgaI6wKUZit3aI.roa (hash: Gf9BtC+mpY9FQr0OFj9WV8BSFzyS8ChMq/mXIibBTC4=) 5: YxuPih3fAlXVoEE31gDs9iD2i1w.roa (hash: x8butTOJLg1TuADmdhNJfjqeOtty4tQbuYOKyeZNAJI=) 6: cgfWhp9nnNlIFwxwBmM9ufcXLT8.roa (hash: d9o/0tEnmxkRdMrExtvCAvZnhgV08vpjue2h9xSnd5M=) 7: h74JMJcJfERX_1qj5Yk8jBVDJhI.crl (hash: +iPwBjFaAJB8+9dS0FIx51P7EpBuRgXNRBZecd2D0vI=) 8: jS9AN5oD9gr_onzGTzL8xf4_tCg.roa (hash: L5WRngdm8hXH1GtO9dblNyDW24uvtXBx7hO8Cv9i3R8=) 9: l73XbGk7c4j4MjyLCnCZ2AhSa5g.roa (hash: zN4KADzvP9RDaA1coLbTnlm7K8otMtISf3HRhyFdP4I=) 10: zDYhvUbelcRpqpslUbRSgUjh_fg.roa (hash: oMqhUHMRnzSTRY98vl61orkGgfrk9poSjKlRD++vvbQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 May 2025 09:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:b4:46:71:63:5a:db:44:42:bf:69:f6:cb:95:68:cb:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87be093097097c4457ff5aa3e5893c8c15432612 Validity Not Before: May 9 09:00:37 2025 GMT Not After : May 10 09:00:37 2025 GMT Subject: CN=ddbac52f19f9b5a66a3ecfb674b0ae68f2903ba1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ee:75:40:ed:67:5a:1d:1b:26:6a:50:1c:64: d0:88:ee:ee:37:d1:ac:8f:5b:4d:56:64:82:c0:55: 58:98:4f:0a:66:7b:f8:52:47:d8:45:97:ab:8d:2a: a9:7f:03:e8:3b:74:96:e8:b4:26:d0:47:1c:99:dc: cb:5e:6c:ad:11:d3:74:1b:32:c8:49:55:46:a6:dc: 77:5c:67:86:e8:fe:43:ec:60:49:05:22:61:28:31: 6c:41:26:a5:92:79:22:d3:72:57:5d:0b:a8:c0:38: e7:64:8b:dd:4a:f2:b1:5d:82:3a:ee:cc:22:72:fc: e1:f8:fe:62:bf:cf:4d:55:c1:4c:17:be:26:c1:5a: 4a:f8:97:15:dc:df:67:77:30:53:77:c6:1d:19:0f: 41:c6:cc:50:58:18:d1:b3:d2:b4:7f:a3:ab:29:05: 9b:c9:83:44:6e:41:ac:8f:1a:0a:ff:40:fc:48:03: 19:ef:db:e5:d6:d4:25:e8:eb:8d:d6:ad:f5:d2:8c: d5:f7:2d:c6:d3:35:be:74:f5:7f:fe:b4:ea:af:82: 5d:ba:64:d0:fb:b7:a8:6a:43:14:ff:69:d6:9e:77: 7a:14:64:8d:43:b6:73:13:8a:2a:22:3f:25:dc:44: 08:8b:e6:a0:f1:45:c8:2a:a3:21:33:ee:0b:07:00: ad:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:BA:C5:2F:19:F9:B5:A6:6A:3E:CF:B6:74:B0:AE:68:F2:90:3B:A1 X509v3 Authority Key Identifier: keyid:87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:b9:fb:1e:f4:35:12:61:f4:00:dc:bc:a7:fd:9b:8b:6d:93: bd:34:6c:b7:d2:11:ad:28:46:39:89:bf:7f:cb:fa:61:12:c0: 3c:bb:9c:e8:ce:62:56:41:90:0a:5b:30:75:be:0e:7a:89:c3: 6b:92:41:01:2e:e0:21:96:21:9a:c7:57:d8:f6:24:64:3d:64: 9d:5b:d1:c3:50:73:78:9f:85:13:ad:20:a8:0a:ff:67:c0:d9: 78:bf:5c:48:d6:4a:99:ea:40:b9:54:82:62:40:a1:30:5d:9a: b5:e8:88:e4:94:ff:63:4d:53:e6:cf:0b:52:e2:86:3d:e6:5c: 15:80:bc:e3:7f:cb:a1:d7:fd:13:0f:41:f5:27:35:58:ae:89: 66:19:0d:18:bb:9e:24:51:a1:62:2c:ad:cf:d6:f4:ce:97:11: a7:00:47:67:32:78:fb:14:96:b0:18:7b:77:ed:b0:e5:47:69: 66:49:5a:fc:59:34:63:5b:cd:7b:11:cd:0a:9d:14:9e:bb:97: c9:88:69:46:b2:01:c5:ee:ad:f4:84:12:9e:b1:08:70:32:68: 41:80:98:8a:fb:bb:84:71:6f:37:25:f5:dc:a4:ef:ea:e2:7b: 5c:ec:2a:4b:dd:87:e4:80:96:bd:dd:97:da:94:11:fd:da:f1: e9:3e:df:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa0RnFjWttEQr9p9suVaMtNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3YmUwOTMwOTcwOTdjNDQ1N2ZmNWFhM2U1ODkzYzhjMTU0 MzI2MTIwHhcNMjUwNTA5MDkwMDM3WhcNMjUwNTEwMDkwMDM3WjAzMTEwLwYDVQQD EyhkZGJhYzUyZjE5ZjliNWE2NmEzZWNmYjY3NGIwYWU2OGYyOTAzYmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+51QO1nWh0bJmpQHGTQiO7uN9Gs j1tNVmSCwFVYmE8KZnv4UkfYRZerjSqpfwPoO3SW6LQm0EccmdzLXmytEdN0GzLI SVVGptx3XGeG6P5D7GBJBSJhKDFsQSalknki03JXXQuowDjnZIvdSvKxXYI67swi cvzh+P5iv89NVcFMF74mwVpK+JcV3N9ndzBTd8YdGQ9BxsxQWBjRs9K0f6OrKQWb yYNEbkGsjxoK/0D8SAMZ79vl1tQl6OuN1q310ozV9y3G0zW+dPV//rTqr4JdumTQ +7eoakMU/2nWnnd6FGSNQ7ZzE4oqIj8l3EQIi+ag8UXIKqMhM+4LBwCt8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN26xS8Z+bWmaj7PtnSwrmjykDuhMB8GA1UdIwQY MBaAFIe+CTCXCXxEV/9ao+WJPIwVQyYSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDc0Sk1KY0pmRVJYXzFxajVZazhqQlZESmhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jYzhmNGEtNGMwMi00MDRiLThkOTMt MmNkZTY1ZjMxMTJhLzEvaDc0Sk1KY0pmRVJYXzFxajVZazhqQlZESmhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jYzhmNGEtNGMwMi00MDRiLThkOTMtMmNkZTY1ZjMxMTJh LzEvaDc0Sk1KY0pmRVJYXzFxajVZazhqQlZESmhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARbn7HvQ1 EmH0ANy8p/2bi22TvTRst9IRrShGOYm/f8v6YRLAPLuc6M5iVkGQClswdb4OeonD a5JBAS7gIZYhmsdX2PYkZD1knVvRw1BzeJ+FE60gqAr/Z8DZeL9cSNZKmepAuVSC YkChMF2ateiI5JT/Y01T5s8LUuKGPeZcFYC843/Lodf9Ew9B9Sc1WK6JZhkNGLue JFGhYiytz9b0zpcRpwBHZzJ4+xSWsBh7d+2w5UdpZkla/Fk0Y1vNexHNCp0UnruX yYhpRrIBxe6t9IQSnrEIcDJoQYCYivu7hHFvNyX13KTv6uJ7XOwqS92H5ICWvd2X 2pQR/drx6T7fFw== -----END CERTIFICATE-----Generated at Fri May 9 13:20:00 2025 by rpki-client