$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft File: jzgYVUpRgI7vuCnsdGWjIi8nASM.mft (raw, json) Hash identifier: 2ouONAlEJe0K42u0ranig2Y4nGmYendkdomG1/Ofr14= Subject key identifier: 9E:3E:93:A2:BC:50:CE:29:1C:D8:75:FF:93:78:01:1F:EF:8F:2D:1A Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23 Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123 Certificate serial: 0196BA7F848A758E192E76711E2328B35DC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft Manifest number: 156B Signing time: Sat 10 May 2025 14:00:41 +0000 Manifest this update: Sat 10 May 2025 14:00:41 +0000 Manifest next update: Sun 11 May 2025 14:00:41 +0000 Files and hashes: 1: 1-d5l7iEM0a18LhX1EyGB8md8n8M.roa (hash: 501zHAdTFZeEcvr80KDCfqteaSP9iBPoj2GeSoFGK4o=) 2: 1pbl9lLrLHSegTR5aMKg_vc70Uo.roa (hash: JuIlY/C1ag+dEHYXDzz9ICIcinIRd2dm1piPpM/bPQE=) 3: 3zrOYfPwdwhMIYtIoDWyzk7SucA.roa (hash: ruw9KhAohiZRqx+LW+C5lr9bjBdHC4VDTTsxeERmgZg=) 4: D9naFu6VO2lwpjmohULxFpHf9o0.roa (hash: /QUuvgGaHE+yk+5fnp+5qSsx9OmsxECFhKZjRSqaWdE=) 5: Dhmm9E4z9IDgJopzgLGmxrHdNQ4.roa (hash: B8DLE1dNxG4G5fXZ02aNrPdB4JUf1oXnLm020cY0Ang=) 6: Fex3ntehhk9YD9UIIrzJwNM9wrw.roa (hash: sq3dolfBoZQI4X41dAgCq7RgYZJhMoyQLMqp5TWhC2I=) 7: VjpJTcOg3A5jj9MR_Jf-2rC27FI.roa (hash: j+JKcPjYq1zl0l4R0plKeTXWGQoSZJuEOufZw9GSsFY=) 8: YW1hjZcECO_e-0edVIPSxYfb76o.roa (hash: Z7Jb+7gEawQrZdP5rGn/EP9zISP8MR7q05pqJZYy5UQ=) 9: Yf4EPkmLCRMBoZZIyHDnCPRPVEI.roa (hash: ttyqpkkqQzqqS+yO4BIrD80NvM4sA9JzqnD08LyFADk=) 10: dXcSjT8XLHwaAMrJxhlYycEZesc.roa (hash: vJl3MVsCu53wiiS+S6cF6AaFBwg//wkLirqkCxUkMcU=) 11: djNEYQKUqckFK1iM46DyL8t42d0.roa (hash: NQBuvCxVnkGQRlXPk53EZOQo+ABbplgx2/ODuq1jN3M=) 12: f-F8l0cH9l2JC8CaYCu5zkEyyRY.roa (hash: ySgIqgk7JZDlXDIu42q8Lk8iY2QRZnL5gTXIvXblACQ=) 13: f7g9WoNm-2HicP4eAC6c6FDXbfw.roa (hash: zw4AKABwEHT1G3SslViMu4vYgw9q/wbL5miIJACFbLo=) 14: gvygCJRNiZjAzFCHzFEh-Jvn8p4.roa (hash: GokX4+GYxsZuRoER2H3W827pg8jM7a0dfuDGYTpJcug=) 15: jzgYVUpRgI7vuCnsdGWjIi8nASM.crl (hash: M103A8bMo7taEp6R+dcONSdELJGi2TLYPy4O9U2MzS4=) 16: l4eCCyQbqnmNaWzCsO-CTHaJLBQ.roa (hash: +can2V5bGbRV5XkaQEn6m/2qdSAnNySkBwlFd9kA+2w=) 17: mfw9rN7s0JH2LVr_IrLTwFMFT7k.roa (hash: Fl3Qq4SjgxhY/P+3EJokj3AAPC+i2wSth+OMzYo5JiY=) 18: sHn49Wbb5PrrjUwnaQqlFkCVe1w.roa (hash: Js/zXcmF6Rja4dKWo6EIhgWUvKjRGSk5unEUfI1hOIs=) 19: xQd5W4e4PnDjglCYlz04ippgCtY.roa (hash: Tau6wHDOULjCaWttAcL4vrdDPhetrZL68pVWIATRLJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 May 2025 13:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:ba:7f:84:8a:75:8e:19:2e:76:71:1e:23:28:b3:5d:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123 Validity Not Before: May 10 14:00:41 2025 GMT Not After : May 11 14:00:41 2025 GMT Subject: CN=9e3e93a2bc50ce291cd875ff9378011fef8f2d1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7b:1a:7a:9b:a5:e0:bc:2c:57:c3:44:ee:0f: e0:24:59:f6:aa:49:af:9a:e6:8f:36:36:a4:0d:bb: 01:20:00:aa:f2:9f:7f:36:bc:c9:dd:34:72:aa:cf: 31:12:f1:aa:7a:aa:ae:43:b6:c7:07:8a:21:17:9d: fd:57:71:88:de:6a:67:33:3e:6d:54:6d:59:1f:39: 14:5e:f1:f8:a2:61:ad:f2:f3:4e:6d:37:20:19:f9: d6:9a:fe:ef:99:1b:e3:38:2f:97:e1:b2:c3:60:12: 97:f1:cf:4a:ed:43:84:20:e1:36:7e:2d:81:17:13: 7c:c6:75:56:0e:0d:4a:c0:b3:bb:8a:76:6e:0a:8e: 3b:41:0d:62:73:1e:a4:1c:65:86:a2:59:ea:f6:30: 15:47:c0:b9:dc:b3:e3:6a:31:93:bc:72:ea:5f:9d: 72:23:bb:7e:47:42:95:02:6d:73:5c:6a:1f:4d:75: 1a:18:51:ef:d4:db:67:2d:74:9b:03:4d:39:70:5f: e0:49:42:91:fe:d5:97:e1:4e:d2:a6:1e:33:0d:12: f2:63:3b:dd:f0:c2:b8:e6:5a:1b:0e:e5:a3:65:ff: 6f:62:d9:42:2a:8f:b5:a9:59:d4:ea:11:f6:bf:7e: 0e:78:74:f7:f5:2d:84:9d:c6:6b:f1:f6:bb:a5:a6: bf:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:3E:93:A2:BC:50:CE:29:1C:D8:75:FF:93:78:01:1F:EF:8F:2D:1A X509v3 Authority Key Identifier: keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:f3:bc:fa:86:e7:5d:38:06:94:c6:0a:88:60:5e:d0:b3:bf: fa:eb:91:1f:fe:81:5f:da:b4:39:0b:a6:98:25:f2:c9:5b:18: 4e:d5:06:64:c0:d4:3b:35:25:e4:ab:5f:1e:dc:cb:44:5e:44: 78:4b:89:3a:72:8c:1c:6a:a7:6f:55:9b:4b:6a:1e:77:12:b8: 69:a1:5f:fa:24:94:aa:34:e9:f7:c2:7c:9c:15:10:0f:8d:43: af:65:56:a6:dd:c7:c1:dc:2c:fc:ce:1e:02:e1:03:bf:93:d6: 43:fd:0f:3c:5d:00:67:47:33:a0:e2:ec:03:48:1f:bf:59:4a: 2e:b8:db:f6:04:13:75:48:02:4e:a5:4a:ed:89:1e:b0:81:2e: bc:e9:9c:82:e9:a5:df:ea:78:0d:2e:16:fb:94:83:bb:c0:f9: 9d:05:b0:db:26:62:b5:28:d6:8b:23:1b:18:f5:63:33:b8:39: da:4e:39:ad:16:29:b5:9b:9a:52:60:b1:8c:45:c1:f9:e0:60: b2:8c:c8:2f:13:b8:61:ec:05:ab:97:d1:45:4b:ac:bf:20:65: cd:29:f0:9e:f6:c4:d6:c3:7b:d8:e2:5e:9c:6c:a2:42:44:76: 13:7d:d8:3c:12:6a:46:6e:c9:f0:fd:8b:a1:ed:4b:17:9f:e5: 10:9f:2a:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa6f4SKdY4ZLnZxHiMos13GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMzgxODU1NGE1MTgwOGVlZmI4MjllYzc0NjVhMzIyMmYy NzAxMjMwHhcNMjUwNTEwMTQwMDQxWhcNMjUwNTExMTQwMDQxWjAzMTEwLwYDVQQD Eyg5ZTNlOTNhMmJjNTBjZTI5MWNkODc1ZmY5Mzc4MDExZmVmOGYyZDFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnsaepul4LwsV8NE7g/gJFn2qkmv muaPNjakDbsBIACq8p9/NrzJ3TRyqs8xEvGqeqquQ7bHB4ohF539V3GI3mpnMz5t VG1ZHzkUXvH4omGt8vNObTcgGfnWmv7vmRvjOC+X4bLDYBKX8c9K7UOEIOE2fi2B FxN8xnVWDg1KwLO7inZuCo47QQ1icx6kHGWGolnq9jAVR8C53LPjajGTvHLqX51y I7t+R0KVAm1zXGofTXUaGFHv1NtnLXSbA005cF/gSUKR/tWX4U7Sph4zDRLyYzvd 8MK45lobDuWjZf9vYtlCKo+1qVnU6hH2v34OeHT39S2EncZr8fa7paa/cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ4+k6K8UM4pHNh1/5N4AR/vjy0aMB8GA1UdIwQY MBaAFI84GFVKUYCO77gp7HRloyIvJwEjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgt YmZiNGJhMzBlNDVhLzEvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgtYmZiNGJhMzBlNDVh LzEvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF/O8+obn XTgGlMYKiGBe0LO/+uuRH/6BX9q0OQummCXyyVsYTtUGZMDUOzUl5KtfHtzLRF5E eEuJOnKMHGqnb1WbS2oedxK4aaFf+iSUqjTp98J8nBUQD41Dr2VWpt3Hwdws/M4e AuEDv5PWQ/0PPF0AZ0czoOLsA0gfv1lKLrjb9gQTdUgCTqVK7YkesIEuvOmcguml 3+p4DS4W+5SDu8D5nQWw2yZitSjWiyMbGPVjM7g52k45rRYptZuaUmCxjEXB+eBg sozILxO4YewFq5fRRUusvyBlzSnwnvbE1sN72OJenGyiQkR2E33YPBJqRm7J8P2L oe1LF5/lEJ8qzQ== -----END CERTIFICATE-----Generated at Sat May 10 19:59:03 2025 by rpki-client