$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft File: pjvMbSX3R2-7PsM_bbw-nurZIhI.mft (raw, json) Hash identifier: EhZMACPvdwrUYmf9e+KomgNaggTTxjHKnHCOIobz2I0= Subject key identifier: E7:48:D0:E0:5B:71:4C:24:36:F9:EC:AC:3C:61:55:C5:7E:DD:0E:65 Authority key identifier: A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12 Certificate issuer: /CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212 Certificate serial: 0196B9DA70286002A568B539F96018E8F583 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft Manifest number: 0890 Signing time: Sat 10 May 2025 11:00:22 +0000 Manifest this update: Sat 10 May 2025 11:00:22 +0000 Manifest next update: Sun 11 May 2025 11:00:22 +0000 Files and hashes: 1: 5NFcVQOlS2SfRA9_dseHho-9-mc.roa (hash: swfI8aXvx2sxn3YOzxRnlDU7qvwOILHJAwX26Y3ztqI=) 2: 719PZLmeHqbujtRsKmvo5771XIo.roa (hash: bsKRuhzJIveVWiHQvKvv+dLt6oNf3d66tNY6ht9/C3A=) 3: 8WUQrdzKsEZUNzZ9k3E9ajfkd5s.roa (hash: Ixz0hSpVqJJ/oAfsncTGxOv3fHWBSaH9gBGjqTv8vpQ=) 4: FHXWFrj4nreKJjXTfDKCc6Y16Is.roa (hash: PfuW04ELrwKUUeQD8qGy+/BFhBo8C5J05OWPOUMFx5w=) 5: Ho4pDAaaconFe5cZ7ygze1a44Xo.roa (hash: 1pC6hpICFpbgfqlZn7adq2AVfLKO5t0AC5KWofkjFSE=) 6: Kd5CFoG07kPDgqUGQpHj24zQka8.roa (hash: +2s4BraFjLJP4x9hMH6DgHfMWVkWCLxuz2cF8ghToGs=) 7: NYJYw1BTKJV56akoY5ZQRJna-MA.roa (hash: brwHoHz9mi1vg8NUkbqZqqePDdu1Ej44xmauCwQ9Qac=) 8: TLEdQvZiEPlpX35O8B6oknJfuyE.roa (hash: AdjCtV/JftiFEQtyk78ssQUWpqAhZBfMUWjoyo3BngI=) 9: _-FUjYz5pLdhL7MicJJ-uRt5LKI.roa (hash: FdRIrcXaoKNyd2lS+olFcjF6MT37TxwlG2cpQ0ijFig=) 10: _oLRK5idAdNe6s2HkA4qKGrWM9w.roa (hash: bEX/uFsdMFsGbIDl0JR6YoKezu5WTefYWQYtSHqeed4=) 11: pjvMbSX3R2-7PsM_bbw-nurZIhI.crl (hash: wtkZJVDtMnzCbDQ++g7ncFrKh8JOD/nSJwhWIGnY3NI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 May 2025 11:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:b9:da:70:28:60:02:a5:68:b5:39:f9:60:18:e8:f5:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212 Validity Not Before: May 10 11:00:22 2025 GMT Not After : May 11 11:00:22 2025 GMT Subject: CN=e748d0e05b714c2436f9ecac3c6155c57edd0e65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4d:a9:7e:18:53:3d:c3:4a:2e:18:07:ca:a2: cc:07:10:24:d2:04:12:8e:11:95:79:e9:d7:c8:a6: 95:93:65:a4:1d:35:32:c5:1b:b7:fa:f1:5d:62:bd: 30:ec:fe:bd:12:c7:ed:0e:5e:39:d8:72:44:d9:e1: 3e:74:43:32:2c:66:ee:7c:eb:49:3c:59:c8:42:9c: 1b:75:30:11:64:d5:b6:58:5b:27:b4:0a:4f:38:c2: ff:86:75:8f:25:64:e0:ad:00:78:a1:70:d0:a2:4f: 0d:fb:33:7c:0c:79:e1:2f:0f:ca:1e:ec:a4:ef:a5: 0d:1a:01:f0:f7:b2:bc:16:0d:5b:29:a3:8f:0a:b5: e2:14:0f:0b:d9:49:cd:34:23:fc:9f:73:3b:6a:e8: 04:a9:47:05:3c:4c:cb:2e:8d:ca:b4:47:d3:fb:04: d7:7e:11:ac:3c:04:33:45:59:f2:3b:d6:c7:fe:2c: 03:63:2c:dc:7b:1d:4a:30:1a:47:ac:c0:4b:87:62: fd:7f:01:06:b7:32:5b:e7:71:b6:42:b0:d2:45:d6: ec:2b:21:d4:5a:49:61:1e:5f:60:c3:94:90:5b:da: 74:bb:28:9f:6e:d0:bf:8d:1d:c3:ae:69:a2:8e:d3: dd:5f:fd:52:6c:b6:39:56:e6:3c:1a:db:2b:a9:09: 03:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:48:D0:E0:5B:71:4C:24:36:F9:EC:AC:3C:61:55:C5:7E:DD:0E:65 X509v3 Authority Key Identifier: keyid:A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:ba:c0:69:27:92:aa:fe:c3:a1:e2:0f:90:0c:47:1d:e9:39: 38:c5:f6:a5:ab:5d:31:93:35:f6:fc:24:96:68:92:74:17:85: 81:ba:ae:fe:77:ee:e3:b4:05:5f:bc:0f:8c:25:e1:e8:0d:19: af:da:ae:84:1b:81:09:1a:58:8e:96:0c:10:f3:17:5d:6f:75: b2:d9:8d:81:ff:07:5a:ba:dd:6f:52:15:92:a9:c5:16:5e:53: 72:16:c9:a7:38:f6:c7:be:04:6d:10:b2:57:e4:84:40:30:d5: 0a:0f:8f:0a:14:33:77:09:d8:9c:2f:54:9a:5a:fc:2b:8a:d4: 05:dc:5b:5d:00:c7:c0:d3:89:71:9d:8e:4f:76:22:95:b8:30: 95:ca:d5:85:81:9b:17:c7:17:65:25:47:26:ac:65:a3:5d:5e: 48:c8:7a:90:d0:19:d4:d9:60:4f:1e:01:c8:7b:77:34:3b:a3: ae:91:58:8b:76:f6:85:03:fa:f7:ee:e3:3c:81:2c:22:43:e2: fe:7e:b3:ad:7f:9d:bc:2f:d6:a7:37:a4:58:90:c0:d7:5d:8c: 47:c7:8d:e4:c7:7c:e5:96:06:af:e6:f9:6e:96:62:37:0b:52: 94:d5:38:a5:19:91:b7:7b:bb:d5:74:2d:20:cf:10:96:38:dd: d4:9f:89:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa52nAoYAKlaLU5+WAY6PWDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2M2JjYzZkMjVmNzQ3NmZiYjNlYzMzZjZkYmMzZTllZWFk OTIyMTIwHhcNMjUwNTEwMTEwMDIyWhcNMjUwNTExMTEwMDIyWjAzMTEwLwYDVQQD EyhlNzQ4ZDBlMDViNzE0YzI0MzZmOWVjYWMzYzYxNTVjNTdlZGQwZTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuU2pfhhTPcNKLhgHyqLMBxAk0gQS jhGVeenXyKaVk2WkHTUyxRu3+vFdYr0w7P69EsftDl452HJE2eE+dEMyLGbufOtJ PFnIQpwbdTARZNW2WFsntApPOML/hnWPJWTgrQB4oXDQok8N+zN8DHnhLw/KHuyk 76UNGgHw97K8Fg1bKaOPCrXiFA8L2UnNNCP8n3M7augEqUcFPEzLLo3KtEfT+wTX fhGsPAQzRVnyO9bH/iwDYyzcex1KMBpHrMBLh2L9fwEGtzJb53G2QrDSRdbsKyHU WklhHl9gw5SQW9p0uyifbtC/jR3DrmmijtPdX/1SbLY5VuY8GtsrqQkDpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOdI0OBbcUwkNvnsrDxhVcV+3Q5lMB8GA1UdIwQY MBaAFKY7zG0l90dvuz7DP228Pp7q2SISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83NjhmZGItZDFiNS00YmVmLWJjYmQt NDkyNGZhMDAwYjdjLzEvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS83NjhmZGItZDFiNS00YmVmLWJjYmQtNDkyNGZhMDAwYjdj LzEvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACLrAaSeS qv7DoeIPkAxHHek5OMX2patdMZM19vwklmiSdBeFgbqu/nfu47QFX7wPjCXh6A0Z r9quhBuBCRpYjpYMEPMXXW91stmNgf8HWrrdb1IVkqnFFl5TchbJpzj2x74EbRCy V+SEQDDVCg+PChQzdwnYnC9Umlr8K4rUBdxbXQDHwNOJcZ2OT3YilbgwlcrVhYGb F8cXZSVHJqxlo11eSMh6kNAZ1NlgTx4ByHt3NDujrpFYi3b2hQP69+7jPIEsIkPi /n6zrX+dvC/WpzekWJDA112MR8eN5Md85ZYGr+b5bpZiNwtSlNU4pRmRt3u71XQt IM8Qljjd1J+Jag== -----END CERTIFICATE-----Generated at Sat May 10 20:04:31 2025 by rpki-client