$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft File: fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft (raw, json) Hash identifier: QPSsk7R9zre9p6a4nx+GGA8ubt7RnFxV/XQlBvq8FIw= Subject key identifier: EF:C7:8F:12:55:B0:AE:E7:27:6D:65:40:BA:1D:A3:57:4E:60:51:E5 Authority key identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 Certificate issuer: /CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Certificate serial: 0196A27704EA7AD006750ACE59EC3FA6F6FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft Manifest number: 1539 Signing time: Mon 05 May 2025 22:00:30 +0000 Manifest this update: Mon 05 May 2025 22:00:30 +0000 Manifest next update: Tue 06 May 2025 22:00:30 +0000 Files and hashes: 1: DBK9l2G1Y1RQ5PjyPxL_4I1OMHc.roa (hash: 3ebqdm6jhi27iGWijCrC+ujaLCSP8YdtxyMrgT6MGh0=) 2: De225tD85-F1qbUEFGgafancbWE.roa (hash: ffQBtPdq/jYZ9UDdbPyqbcdbl0gguGtGw9sQ+gR7uW0=) 3: FVwdutw7NFu1BbmJwTuCXcvc_14.roa (hash: m5b5TQzeQb/gop0Hx8V4hVEc9cB9H3Vuqes4y1yEy8w=) 4: GGjTVZWbLSDhQp9W7TQ3y8oF_b4.roa (hash: Pk5u57XOUkvuKTr8WK8jFr5Dz4GoBS8wm3HWTrG8FLc=) 5: LBBZUXMrOft_XP60iSESTKt86sM.roa (hash: 89zGaVQWdEa8E1V0POtFohdWRYv8E1LJMUoFWfa2mrg=) 6: NoQQo7-js6L12fR0RacWq8GG0sQ.roa (hash: 5b2ty4pyO343YcitFJvqMF9Dc1v6ZLu7zQaIL0yJMCU=) 7: P7tcMbdP2x9DJkbSuUwIb9G9x9o.roa (hash: QjQA68r89i9yJT2InLr4ogmEqW/3iVwOl7YPH7/R1Mo=) 8: VX4ftyY4KZHbSmiCReLCvSah6K0.roa (hash: Rn1JFaArfYotjjdUcRkdUwwvp5zW652Iz5Ayfo9Jabw=) 9: fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl (hash: 6hTIYgDwEcNv7wyjY6tbJZ6N+BG0DtKboCesTkxfIWM=) 10: h-1L5eLqg4mkZA6vkbFimrHVmcg.roa (hash: bqaSlAu3zA+3kNA8VplAkJvr2kDap+TG6ZM8MSm8+8U=) 11: vCDuY3lxDvFGl_QkzVFbCKb-ZsE.roa (hash: OduZBIIo/1HneBK/hYWAUdQ5Rk0JzBTx0gVli+SLKl8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 May 2025 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:a2:77:04:ea:7a:d0:06:75:0a:ce:59:ec:3f:a6:f6:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Validity Not Before: May 5 22:00:30 2025 GMT Not After : May 6 22:00:30 2025 GMT Subject: CN=efc78f1255b0aee7276d6540ba1da3574e6051e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1e:db:cd:63:58:dd:2d:61:28:43:99:68:37: 8e:67:6c:ed:70:ec:93:d6:af:40:6a:14:0c:03:47: 42:c3:ac:5f:7f:5c:51:3f:f6:a0:20:9f:d3:5c:2f: b3:4e:9e:86:1e:00:03:c9:b8:5f:f0:6a:6a:58:52: 3f:51:36:9a:35:c4:66:29:04:f9:9c:16:d2:74:25: 07:ba:1f:e8:cc:66:44:86:21:e1:b0:21:cc:bc:f2: 12:68:39:04:8e:e8:de:be:7d:a9:41:64:58:2c:3e: fa:51:de:d9:75:30:7d:a6:a0:da:c4:7e:fb:b8:78: 90:7d:22:2f:ab:93:8b:e9:f0:da:e9:57:a4:5e:ce: 82:e8:05:a0:db:ad:24:2e:b0:0c:97:cf:4c:eb:b7: 7b:b4:20:1a:02:14:fa:19:3a:2b:03:ab:26:aa:bb: 67:7b:c3:3e:4b:9d:d4:fe:a5:60:b2:ce:7e:14:8a: 95:12:94:04:fe:a8:09:16:f6:fd:27:e4:e5:b9:26: 94:3b:fc:65:06:57:21:bc:63:93:a8:20:a5:7c:e6: 5b:f5:6d:55:97:34:24:77:1a:a6:56:71:14:9e:c8: ad:af:cc:33:5d:67:c8:1e:e5:d5:3f:a3:86:fb:e6: af:fb:d9:ee:1b:4d:5e:46:51:b7:7a:f2:dd:2f:d4: 7f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:C7:8F:12:55:B0:AE:E7:27:6D:65:40:BA:1D:A3:57:4E:60:51:E5 X509v3 Authority Key Identifier: keyid:7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:a7:b7:6a:3f:ea:a9:da:a4:c8:ae:1d:d3:9b:f6:c4:be:a4: 25:71:26:21:df:f8:46:cb:20:49:45:07:26:b8:c5:05:1d:62: 25:28:4c:fe:07:dc:69:f1:03:5e:28:b1:64:2e:82:b7:0e:3f: d8:34:71:e9:8c:ed:72:94:23:ce:28:d7:36:09:1d:59:6c:51: 0d:1c:b2:c5:e2:02:d7:c7:22:61:31:85:6b:95:be:b1:ed:8f: 3f:a8:41:1c:9d:4a:f9:a3:8e:29:c7:cc:35:80:bf:95:fc:4e: 25:5c:d1:ef:59:f3:80:c0:90:af:8b:d0:ff:a8:56:50:4a:b2: a9:95:1c:7d:df:4f:8b:34:dc:66:64:88:bd:f7:6f:52:24:69: c4:0d:6c:c9:e8:8a:7e:78:82:d4:18:de:8a:81:bb:72:c4:2b: a8:79:79:bb:1e:5f:ee:3f:1e:9f:9b:bc:c6:77:ea:ed:18:4c: c9:15:eb:52:55:e3:6c:1c:a1:a8:52:a4:d7:32:68:65:ba:17: 40:7d:35:0a:97:ab:db:65:2c:b2:72:3c:d5:ea:84:81:5f:34: b0:88:c8:43:d4:07:aa:02:d8:01:4b:20:4a:c0:ed:cf:a7:e1: de:1c:4f:1d:e8:4f:49:c2:87:63:8a:b5:a6:e0:df:9e:97:b3: 27:b6:06:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZaidwTqetAGdQrOWew/pvb7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDRjMjVjMmY4YjQ3ZTVkYWY1MmQxYzRjNWE1MDk5OWRk MGEwYTkwHhcNMjUwNTA1MjIwMDMwWhcNMjUwNTA2MjIwMDMwWjAzMTEwLwYDVQQD EyhlZmM3OGYxMjU1YjBhZWU3Mjc2ZDY1NDBiYTFkYTM1NzRlNjA1MWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApR7bzWNY3S1hKEOZaDeOZ2ztcOyT 1q9AahQMA0dCw6xff1xRP/agIJ/TXC+zTp6GHgADybhf8GpqWFI/UTaaNcRmKQT5 nBbSdCUHuh/ozGZEhiHhsCHMvPISaDkEjujevn2pQWRYLD76Ud7ZdTB9pqDaxH77 uHiQfSIvq5OL6fDa6VekXs6C6AWg260kLrAMl89M67d7tCAaAhT6GTorA6smqrtn e8M+S53U/qVgss5+FIqVEpQE/qgJFvb9J+TluSaUO/xlBlchvGOTqCClfOZb9W1V lzQkdxqmVnEUnsitr8wzXWfIHuXVP6OG++av+9nuG01eRlG3evLdL9R/5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO/HjxJVsK7nJ21lQLodo1dOYFHlMB8GA1UdIwQY MBaAFH0Ewlwvi0fl2vUtHExaUJmd0KCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMt ZTYzZTk0Y2JhMDlmLzEvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMtZTYzZTk0Y2JhMDlm LzEvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKae3aj/q qdqkyK4d05v2xL6kJXEmId/4RssgSUUHJrjFBR1iJShM/gfcafEDXiixZC6Ctw4/ 2DRx6YztcpQjzijXNgkdWWxRDRyyxeIC18ciYTGFa5W+se2PP6hBHJ1K+aOOKcfM NYC/lfxOJVzR71nzgMCQr4vQ/6hWUEqyqZUcfd9PizTcZmSIvfdvUiRpxA1syeiK fniC1BjeioG7csQrqHl5ux5f7j8en5u8xnfq7RhMyRXrUlXjbByhqFKk1zJoZboX QH01Cper22UssnI81eqEgV80sIjIQ9QHqgLYAUsgSsDtz6fh3hxPHehPScKHY4q1 puDfnpezJ7YGuA== -----END CERTIFICATE-----Generated at Tue May 6 06:47:19 2025 by rpki-client