$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft File: dOPDNpcglLGowT1BgWhX0Zejquk.mft (raw, json) Hash identifier: mCGZwp6HFAIp63d+BYQQUdYhfshcE6ubxGCrNPcYZRU= Subject key identifier: 0A:11:57:A5:43:AA:47:99:B5:AD:E4:68:DF:F0:AB:27:E2:8D:C9:93 Authority key identifier: 74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9 Certificate issuer: /CN=74e3c336972094b1a8c13d41816857d197a3aae9 Certificate serial: 0196A01A8D6A3CC8F6C11C5BAF7E41FC72DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft Manifest number: 1242 Signing time: Mon 05 May 2025 11:00:16 +0000 Manifest this update: Mon 05 May 2025 11:00:16 +0000 Manifest next update: Tue 06 May 2025 11:00:16 +0000 Files and hashes: 1: 05CufssDJG0pTAbK0ZW527iD2UU.roa (hash: BGjazq+URRQ8AjeY79SbxnXbTrLwkTMUsC+q970r9fs=) 2: 1jpCyAps9bajWpTTNjuuJqkvGNw.roa (hash: QdNF4dszmqN93C6OMT7lYcdmskEQt8kQtHTCFEeRLK4=) 3: B-IzhwSKXhHkz88nSETOGD9yRG4.roa (hash: YnLpp9fGmyMsduAjb3ebFR0Lsy/94n7A+dxRiyz9BXo=) 4: VJ6MDr9v2VTJjopln-NK2ojxFwc.roa (hash: aCjSF+Bt+cDnTvcdibhV9s05hQuvY9LCYp3eMrgD2Ks=) 5: YOcpXFVJRTJW2caFAPTppkNQBuk.roa (hash: bsMm8G8+2Vegzn+c1SqEObi1wuYbeOXaQ994ZEYf674=) 6: ZkXHXACPVBEyaSWAI4Y5TiQ0uXg.roa (hash: 7IrCQhHl7e+sxv1qd9FACB7rpVFTzzOf7CaAsOq9lEE=) 7: a1U9llCdwrEqU4GkcwBsuwGny80.roa (hash: x9+7kA4QQzpZS4+gdNTWeXV2Ehq7i5FwV0w3Ws0zS7A=) 8: bilxvgHa_ortWdZiJoCPu9q2EO4.roa (hash: l/1X47j3OP5z+Rp05LuTXjyl7yZpgOm/aXT90ziTHDc=) 9: btX-zAe_zEJQ3ltM7sZKTKWNtzU.roa (hash: FXQNguGpvehosedHQRjCf06rJkvh5KY35ySN2Wig1dE=) 10: dOPDNpcglLGowT1BgWhX0Zejquk.crl (hash: ahR9E3HVWVdQNpZJcfNHdf3A+Q/4zLBDgmyr5oeNzfs=) 11: leLN7dUwqNQXTkicjPodaPNaHrA.roa (hash: /TZBYmyqPdbIBcWc+Ubi8mL2e3Sg1zgKUo/8XZMZsK8=) 12: ltEUPJ59iMmxTdNEYLGbM1Yq6jY.roa (hash: 4OyHOUV/gpG2mHKMCDQGjjKuCFHSFtOInlqympBF1Os=) 13: pzyfVcqGqM8oIh9yspKnplAOyo4.roa (hash: hsiUYyCYakxAYsQctvaT1faoOH457ARGeeeeMVZVUZk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 May 2025 10:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:a0:1a:8d:6a:3c:c8:f6:c1:1c:5b:af:7e:41:fc:72:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74e3c336972094b1a8c13d41816857d197a3aae9 Validity Not Before: May 5 11:00:16 2025 GMT Not After : May 6 11:00:16 2025 GMT Subject: CN=0a1157a543aa4799b5ade468dff0ab27e28dc993 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:46:ef:22:e7:fa:0e:30:48:e8:78:55:08:fc: 41:21:f3:17:01:28:76:88:0a:b8:71:7a:38:f9:8c: d2:13:16:7c:9a:50:fa:45:af:4d:76:33:89:c2:f2: e4:20:10:3d:76:1f:b6:76:0b:d8:84:24:ba:32:3b: f9:41:86:85:dc:ac:60:d8:20:cf:3f:35:1c:0e:ff: ca:e9:8c:d6:b9:48:79:4f:c3:3e:ed:6b:f3:50:c7: 2d:e0:c3:0a:34:e0:de:8e:d9:aa:b1:1b:51:5d:11: 13:27:62:c7:0c:74:e3:4a:de:ba:40:d6:b9:c3:7d: 47:eb:de:5f:48:a2:6c:48:32:f9:60:81:72:83:1e: e2:11:32:6f:e9:3d:c2:e2:87:a3:14:4d:55:da:65: 46:c3:19:1b:23:81:09:54:5e:cd:8f:19:eb:b1:12: fc:6d:e4:7e:cf:6f:05:29:88:1f:9c:a4:df:37:f7: a2:95:e2:35:4f:8f:9b:38:14:15:b8:94:8e:8d:bc: cb:a9:f9:d6:f9:53:15:92:ae:55:6c:15:41:1d:e3: 3b:9f:0c:fd:b1:c1:cf:9c:8f:53:b4:28:a8:1b:c3: c2:b6:9a:82:eb:93:52:ec:05:8c:85:3d:43:6f:04: ee:92:26:3c:ae:46:1c:c5:3c:5d:5d:3e:b1:3e:89: 4f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:11:57:A5:43:AA:47:99:B5:AD:E4:68:DF:F0:AB:27:E2:8D:C9:93 X509v3 Authority Key Identifier: keyid:74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:1b:1c:6f:cc:f5:c6:21:5d:f1:bc:aa:92:62:c2:5c:4d:e0: 33:6f:e3:b2:bf:64:1e:f8:fb:20:74:47:2e:b9:e1:ad:a7:63: b0:f8:9f:e6:74:2a:e0:32:17:12:63:97:ff:64:1d:c1:95:a8: 24:f9:fd:51:bb:2d:09:5f:6d:c2:5f:2b:05:0b:42:7e:24:be: 45:27:6e:1f:cc:11:22:42:28:f8:8d:51:af:7e:0c:17:25:9e: 32:2d:56:ab:e3:26:d2:cb:5b:ed:fc:49:5b:5d:eb:bf:5c:13: 6d:3a:30:3d:80:6f:a0:55:80:68:44:87:ce:15:91:fe:c3:2e: 77:86:22:00:7f:21:92:25:2b:30:8f:8b:df:3b:98:d1:d3:8d: 69:9e:dd:18:7a:d5:c7:a1:37:08:27:68:b9:3b:e7:09:0f:1d: 63:02:16:28:01:63:2e:76:ad:07:69:16:50:8f:8e:ad:9d:b0: f1:d9:b7:82:a6:c6:49:e0:24:2c:05:f0:d4:3c:93:ca:d0:60: f6:84:ac:5d:2c:8c:34:5b:86:99:f2:9e:e4:9c:f9:bc:ac:df: 7a:79:05:d8:49:b7:f8:0c:c6:eb:f7:6e:6b:23:7c:98:70:fa: ae:a4:23:0c:a7:82:f1:ed:21:bc:a1:d5:00:b0:33:0b:20:62: 1b:9c:8c:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZagGo1qPMj2wRxbr35B/HLaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZTNjMzM2OTcyMDk0YjFhOGMxM2Q0MTgxNjg1N2QxOTdh M2FhZTkwHhcNMjUwNTA1MTEwMDE2WhcNMjUwNTA2MTEwMDE2WjAzMTEwLwYDVQQD EygwYTExNTdhNTQzYWE0Nzk5YjVhZGU0NjhkZmYwYWIyN2UyOGRjOTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEbvIuf6DjBI6HhVCPxBIfMXASh2 iAq4cXo4+YzSExZ8mlD6Ra9NdjOJwvLkIBA9dh+2dgvYhCS6Mjv5QYaF3Kxg2CDP PzUcDv/K6YzWuUh5T8M+7WvzUMct4MMKNODejtmqsRtRXRETJ2LHDHTjSt66QNa5 w31H695fSKJsSDL5YIFygx7iETJv6T3C4oejFE1V2mVGwxkbI4EJVF7NjxnrsRL8 beR+z28FKYgfnKTfN/eileI1T4+bOBQVuJSOjbzLqfnW+VMVkq5VbBVBHeM7nwz9 scHPnI9TtCioG8PCtpqC65NS7AWMhT1DbwTukiY8rkYcxTxdXT6xPolP9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAoRV6VDqkeZta3kaN/wqyfijcmTMB8GA1UdIwQY MBaAFHTjwzaXIJSxqME9QYFoV9GXo6rpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAt YTZjNDllYjI4Mjg3LzEvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAtYTZjNDllYjI4Mjg3 LzEvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvhscb8z1 xiFd8byqkmLCXE3gM2/jsr9kHvj7IHRHLrnhradjsPif5nQq4DIXEmOX/2QdwZWo JPn9UbstCV9twl8rBQtCfiS+RSduH8wRIkIo+I1Rr34MFyWeMi1Wq+Mm0stb7fxJ W13rv1wTbTowPYBvoFWAaESHzhWR/sMud4YiAH8hkiUrMI+L3zuY0dONaZ7dGHrV x6E3CCdouTvnCQ8dYwIWKAFjLnatB2kWUI+OrZ2w8dm3gqbGSeAkLAXw1DyTytBg 9oSsXSyMNFuGmfKe5Jz5vKzfenkF2Em3+AzG6/duayN8mHD6rqQjDKeC8e0hvKHV ALAzCyBiG5yM9w== -----END CERTIFICATE-----Generated at Mon May 5 14:32:52 2025 by rpki-client