$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.mft File: JgsrxFR3yB13TaoMKKtEt3S6CSA.mft (raw, json) Hash identifier: CZezswaKn7OqtZEr/gYk8nO1dZf3IrGRBmf6JSLN5rY= Subject key identifier: 75:34:4C:B5:93:D4:D6:84:A1:82:08:DC:FB:5E:7E:E1:A6:99:12:B2 Authority key identifier: 26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20 Certificate issuer: /CN=260b2bc45477c81d774daa0c28ab44b774ba0920 Certificate serial: 0196B36ADA29681B00D86B80C87B3CCD1405 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.mft Manifest number: 0C9D Signing time: Fri 09 May 2025 05:00:46 +0000 Manifest this update: Fri 09 May 2025 05:00:46 +0000 Manifest next update: Sat 10 May 2025 05:00:46 +0000 Files and hashes: 1: 1-vjUFL9eUKNOH3DNHSKdRzXwLrc.roa (hash: E1OFkXJ2w0WBHM/2jJG2VFE7A0dOsn0uyLBEvDN92CY=) 2: 9Qp1lz6gdlmei4XDqjlb77aIr4c.roa (hash: /GHn25dkvuTMHnSPHF1/eiqXw/UVrF8KRTTdkWjQJCk=) 3: ElmmUi2BA5xfl3RGwKTnaLyhbiU.roa (hash: 7/HLb9yrgfenir+DMxSIjZmUv+UwMCuizDLWvP+aaNw=) 4: JgsrxFR3yB13TaoMKKtEt3S6CSA.crl (hash: mnD4TDv4ISrqEVPLE4RiC00r3eGyz7xDWzvu0MkQTAA=) 5: NgpciPnmjPOF-OSNOiSo5MIijfs.roa (hash: vKdGaRhdGD6WCVfukM5iZz4CdH1h6kqqTU0c8sc8nic=) 6: NjkpRdEpxNsm8wrcNM9aefJVdQI.roa (hash: SjORWnr19cENupMIzp+SEZJ+XxwL0HBZAxpGV9hyvUU=) 7: TiJ8h1qlcilwepecSwvXjw5DbUQ.roa (hash: i3FrVocCPmFO/RIdZF92/i/Jo2J9RsAjOqfHgmiRxmw=) 8: YLMZPsprpRxhmDT0WIbhqx6F--Y.roa (hash: tFoaXBl2VXqD6JFS6seQ88nt8uiv/guhHad/lARB2fE=) 9: csEf9syoFNTGaMlU5MhYUuOIBiQ.roa (hash: SLfRD5P3fO1tXNQj8q98v89NmGiqv9196LApLqBPnXA=) 10: en8nzWGtf10islE8QqdlR4YhdFI.roa (hash: U8OOoKnf7CTO1HtbX3OrrQUalNfVeLzf0c6wknYG0oc=) 11: pAFGuOmFiinmNtzDNIWAAHCBzL8.roa (hash: smnkSIWrC+aFHsjL39EpGOubWh1B5xY83hqBzhP60WM=) 12: sNX7m19Q4f93jZSLto3SXxcMlN0.roa (hash: 6kJ1u/k/CP7HU6lSzylQyIDCN0aXiAlRkfuNvpisAHg=) 13: sXeiXs9NThSJarWYdmbDOareR84.roa (hash: 8E8IelTcfcnUjoHcomwFc6Fdy9809IWQJJ0OZd6hORI=) 14: vj8_IlTF4gQOhKDYFlmdkPyTZFY.roa (hash: NIiwFYBXaeo7nmwF1tqQoUP+kn0hB4f7x9lz6NMy9k8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.mft rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 May 2025 00:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:b3:6a:da:29:68:1b:00:d8:6b:80:c8:7b:3c:cd:14:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=260b2bc45477c81d774daa0c28ab44b774ba0920 Validity Not Before: May 9 05:00:46 2025 GMT Not After : May 10 05:00:46 2025 GMT Subject: CN=75344cb593d4d684a18208dcfb5e7ee1a69912b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:db:aa:14:76:4a:13:1b:a7:d3:bd:03:30:bf: 17:58:9d:3d:37:aa:45:70:d5:c8:91:8f:d8:1a:6e: 26:3f:84:bf:4a:8e:8d:30:7a:3f:00:73:15:28:34: 16:9b:9f:35:b0:8c:24:e4:ec:31:6b:15:8b:8d:96: a4:f9:c4:82:51:17:05:17:f1:23:dd:13:88:f1:73: 77:2b:2c:42:8c:0a:7b:e5:73:28:0a:9f:ab:5b:b1: 3f:2c:36:d3:ab:0f:08:ab:a3:ec:66:1c:3a:2f:e1: 10:7e:67:40:26:3a:8f:8f:fd:cf:d1:c2:95:8d:4d: 74:38:d7:74:0c:58:f7:cd:24:c3:d5:c4:66:34:53: de:e9:dd:bd:7d:33:91:f1:86:b7:56:9d:ab:60:6c: 23:ee:d0:74:9b:52:9e:13:e5:01:b8:37:8b:30:f3: e1:ac:12:4d:9f:bb:0d:61:b5:79:1a:09:b4:a8:9d: 41:25:4c:6d:10:68:e4:18:79:76:f0:ee:d3:6f:b6: 47:7c:6f:be:49:ee:2f:49:31:de:9e:60:ce:64:e9: 3a:ee:16:8e:0a:a0:90:69:73:4c:d4:ea:b7:be:9a: 9d:a7:f2:f1:d7:4b:6b:c5:e5:28:7d:cd:09:c8:b5: d1:d7:9c:f4:99:74:40:55:f6:78:d5:78:5a:5c:2b: 73:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:34:4C:B5:93:D4:D6:84:A1:82:08:DC:FB:5E:7E:E1:A6:99:12:B2 X509v3 Authority Key Identifier: keyid:26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:33:3f:1c:b2:b2:97:dc:aa:51:e7:0f:0a:e3:a3:cb:eb:9e: f7:59:a5:a0:60:29:92:d6:11:95:97:9f:81:c1:db:4f:57:8a: 31:52:41:6e:48:ee:c0:11:72:05:ab:3f:a3:ca:a8:6d:4e:f7: e4:c8:80:40:ee:52:94:05:68:a7:4c:ba:96:fe:04:b0:2f:b2: 89:02:4e:df:0f:a0:31:fe:ca:82:99:08:e2:8a:db:1d:b8:47: c6:77:61:70:62:dc:59:9d:8c:f0:68:75:9f:06:1a:71:b8:46: d3:cb:7f:73:85:a6:1d:0b:e0:f5:bb:a0:91:10:5b:a6:2a:fa: a2:05:66:34:9a:e8:0b:24:52:16:ea:57:24:00:fc:ae:f1:94: ac:be:29:87:90:ed:b9:83:87:a3:bc:22:44:ab:16:6a:88:e2: 4f:99:1b:68:7c:da:25:51:6b:86:48:57:64:e8:6d:68:dd:a5: 16:bd:cc:2e:c6:cf:be:cc:0e:0a:5d:8c:22:af:7c:de:a3:3d: c4:37:00:c1:32:a0:9f:ed:2a:11:de:08:34:be:60:3d:a0:1a: 70:58:64:3b:5f:24:a7:7b:91:69:53:bf:d5:34:41:ba:c8:0c: 6b:ec:a8:fd:84:47:ad:42:cc:91:c8:96:5f:b6:e7:e0:b6:9b: 7c:aa:24:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZazatopaBsA2GuAyHs8zRQFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2MGIyYmM0NTQ3N2M4MWQ3NzRkYWEwYzI4YWI0NGI3NzRi YTA5MjAwHhcNMjUwNTA5MDUwMDQ2WhcNMjUwNTEwMDUwMDQ2WjAzMTEwLwYDVQQD Eyg3NTM0NGNiNTkzZDRkNjg0YTE4MjA4ZGNmYjVlN2VlMWE2OTkxMmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6duqFHZKExun070DML8XWJ09N6pF cNXIkY/YGm4mP4S/So6NMHo/AHMVKDQWm581sIwk5OwxaxWLjZak+cSCURcFF/Ej 3ROI8XN3KyxCjAp75XMoCp+rW7E/LDbTqw8Iq6PsZhw6L+EQfmdAJjqPj/3P0cKV jU10ONd0DFj3zSTD1cRmNFPe6d29fTOR8Ya3Vp2rYGwj7tB0m1KeE+UBuDeLMPPh rBJNn7sNYbV5Ggm0qJ1BJUxtEGjkGHl28O7Tb7ZHfG++Se4vSTHenmDOZOk67haO CqCQaXNM1Oq3vpqdp/Lx10trxeUofc0JyLXR15z0mXRAVfZ41XhaXCtz6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHU0TLWT1NaEoYII3PtefuGmmRKyMB8GA1UdIwQY MBaAFCYLK8RUd8gdd02qDCirRLd0ugkgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmdzcnhGUjN5QjEzVGFvTUtLdEV0M1M2Q1NBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83YjEyMDUtMzQ1MC00ZTkwLThiMTQt MTdlNjZjMWZkM2QxLzEvSmdzcnhGUjN5QjEzVGFvTUtLdEV0M1M2Q1NBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS83YjEyMDUtMzQ1MC00ZTkwLThiMTQtMTdlNjZjMWZkM2Qx LzEvSmdzcnhGUjN5QjEzVGFvTUtLdEV0M1M2Q1NBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACTM/HLKy l9yqUecPCuOjy+ue91mloGApktYRlZefgcHbT1eKMVJBbkjuwBFyBas/o8qobU73 5MiAQO5SlAVop0y6lv4EsC+yiQJO3w+gMf7KgpkI4orbHbhHxndhcGLcWZ2M8Gh1 nwYacbhG08t/c4WmHQvg9bugkRBbpir6ogVmNJroCyRSFupXJAD8rvGUrL4ph5Dt uYOHo7wiRKsWaojiT5kbaHzaJVFrhkhXZOhtaN2lFr3MLsbPvswOCl2MIq983qM9 xDcAwTKgn+0qEd4INL5gPaAacFhkO18kp3uRaVO/1TRBusgMa+yo/YRHrULMkciW X7bn4LabfKokag== -----END CERTIFICATE-----Generated at Fri May 9 08:36:31 2025 by rpki-client