$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft File: 3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft (raw, json) Hash identifier: feT/643S0vHTwAehLroxBDuLslCXoV1ZhO/7JAQ9Qis= Subject key identifier: 93:E0:A9:22:1F:BF:2A:B4:13:60:E9:CA:B9:7A:23:83:9B:5A:36:BA Authority key identifier: DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20 Certificate issuer: /CN=dc5c532f3cd5e11e19feb19655d4f19926f02020 Certificate serial: 0196B0A0A7479DBABC17559658C1E28463E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft Manifest number: 0358 Signing time: Thu 08 May 2025 16:00:40 +0000 Manifest this update: Thu 08 May 2025 16:00:40 +0000 Manifest next update: Fri 09 May 2025 16:00:40 +0000 Files and hashes: 1: 1-WZZnjR8DlZqLUibcRUcYzm0QDU.roa (hash: /lrkBjM9dGMr6D7JGPVc5syjsFBtCzanEGLfhb4dKM0=) 2: 3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl (hash: fodaspnSl1YHFuj1TwA0Y41+W93Iut2L5I7nulVrL6g=) 3: 3jZyUpaNiuxwzYQ21tChGVq7yOY.roa (hash: rlRJ/UNIhVQKGyw4Wr/cDFs+VO81jRk6SUephZD3g4o=) 4: 5khyx2A9d0Q0e3huYGosj5KCOlo.roa (hash: m/iIxHfeWDlWWpGAIqzgFb7iOcTekZb0i9Y2aBX+dy4=) 5: 7cUCY2EysYK09Y_F1tsMsp_B8MU.roa (hash: el4sZWuoJZOOcj14KO5Yq16IPPIz+c0KckgEteIx4YM=) 6: ILbeank0F3xhLsgBl0NZfpBZFig.roa (hash: 8RlSwtQK5lhGbhOtyX4cacpgfYuG3exGirW2aa5+FLI=) 7: KBQWtgPCMeq_IbONzoF64FnlzwE.roa (hash: EZ3seNeYjAQFpAfGwhXlV+Wya2vQO7lfYcVB84EkqA4=) 8: PBiom43THD1F1SBGVmDFN9WwnMo.roa (hash: EVRLL8Mxobz8XRwc26H2JAHWkuwMiYakvll8d/79CJQ=) 9: TnqWiZSrJP5FZLgDlXk-iaFi5k8.roa (hash: 8gjKeaSL9Im1mKl/CKczQDSLzI2OEBo3YD5qQoY5RT0=) 10: VXGu7cRy3TUPyfgbIf2vopAF1Lc.roa (hash: 40vRMPsPFPCFnDUP/ikEgH9v+gi1iVOQkLoxtLSkOqE=) 11: ZaSQVTZm2f4ebc71HIkhrpqqsuk.roa (hash: X8/L0T6q0bM6s++7u2MQIu4RlHWQNdJcKAvE7bH3VP4=) 12: jldP_NkgEKrLmFaYQtB6TuhGzRs.roa (hash: Cz3xmiLxKccg4wAv608JqhvYxIHIutFBcyhT8Ond0Zs=) 13: oQk2rT9-TmTMiTawX34MBI0QTrc.roa (hash: 6J7fvMBzz5wnq8Q655iOLvmHY5jKT0LznvTL3IrQ8Xw=) 14: unsmmkYBpbXrCubGO7XS6N7I7QM.roa (hash: /TaQOoUPP+hWic0pvVLJBHflkZLzIc8T4AFkDEL7yKk=) 15: w9Z-5nLehvUlBeOI2h5dSoEBLSw.roa (hash: dyC69X2s5yoLrmCLq7pBQHExLj0vbp1A/uwW5wlqEug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 May 2025 16:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:b0:a0:a7:47:9d:ba:bc:17:55:96:58:c1:e2:84:63:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc5c532f3cd5e11e19feb19655d4f19926f02020 Validity Not Before: May 8 16:00:40 2025 GMT Not After : May 9 16:00:40 2025 GMT Subject: CN=93e0a9221fbf2ab41360e9cab97a23839b5a36ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:03:e3:aa:81:6f:73:3f:ca:35:50:e5:11:55: 38:d2:fc:f7:33:be:55:16:36:1f:e4:f2:cf:01:b4: 0a:90:c4:7f:97:29:32:e8:d6:f6:b8:89:53:b3:40: 3a:37:3b:86:f7:24:58:35:ef:1e:73:40:cc:06:0e: b6:07:d9:41:bb:58:bc:ba:87:85:52:e6:29:45:98: 41:0d:39:05:07:45:59:a2:94:5b:ad:e3:1a:de:31: 48:34:d3:01:d2:bf:28:4d:ce:a4:47:c4:28:4e:d2: e7:f6:12:83:73:cc:b4:0d:4e:16:d5:6d:04:63:c6: 4d:a9:55:ee:c8:52:3b:1e:49:88:9c:3f:60:b8:68: 62:b0:da:b3:d4:68:99:ca:bc:c5:6f:a5:c7:b4:e7: bc:2f:59:fc:60:91:95:f4:91:8c:2a:62:c4:3f:e2: 7d:9e:b2:bc:53:24:ba:39:72:e7:e6:cd:8e:bc:76: 73:bd:2c:c5:84:51:61:9d:30:13:34:3a:a2:6e:03: d7:74:fe:40:dc:79:9a:b0:e9:77:96:9e:d3:ab:a6: 7b:43:47:c7:a6:82:38:21:77:c9:76:87:69:15:00: 2f:de:6f:ec:8f:b4:6f:63:be:6a:33:ef:c6:27:c2: d7:ab:a4:81:cd:0f:2c:94:cf:17:e4:5b:92:d8:4e: 7b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:E0:A9:22:1F:BF:2A:B4:13:60:E9:CA:B9:7A:23:83:9B:5A:36:BA X509v3 Authority Key Identifier: keyid:DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:6e:a2:8b:27:dc:c9:10:f8:d6:a2:fe:74:63:2d:45:33:c4: 5d:da:f4:11:ec:60:0a:47:eb:49:e9:95:68:25:68:a9:76:d1: 32:7a:ce:d2:68:91:58:2d:ed:c7:f8:12:54:53:5f:77:b0:e6: 23:9e:82:c3:20:4c:6b:d9:9a:09:7b:a8:04:6e:d9:25:50:bd: 1f:2c:89:9b:60:0e:4e:86:77:43:97:6c:3a:5d:a6:aa:19:14: 21:54:d0:67:e0:82:bd:c7:08:a9:a6:c5:ad:02:38:57:ca:6d: 5a:f5:b9:01:2e:b4:b1:b0:0a:ea:cb:47:1e:bc:e8:26:6e:74: 43:72:41:64:39:ad:f9:59:c3:4f:9e:0e:03:7d:7c:c6:2f:9f: d8:34:d3:b6:b6:2b:2a:61:b3:d9:75:4c:2f:8a:85:04:2b:46: de:e0:fd:96:ca:5f:6e:72:61:c9:1e:f3:7f:a6:8f:06:82:51: 8a:42:53:10:a2:ba:83:72:d7:8c:0f:d1:ee:29:2b:77:c4:af: 12:54:1d:16:a1:9f:7a:a3:ce:fb:50:95:c0:fd:1a:0a:2f:20: 4d:3f:28:48:0a:60:9f:2d:1e:61:c5:d0:e7:8a:e1:f5:e0:55: 9a:2f:9f:32:8a:25:66:0f:64:53:40:dd:eb:b1:fe:f0:e2:a3: 76:63:0a:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZawoKdHnbq8F1WWWMHihGPpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNWM1MzJmM2NkNWUxMWUxOWZlYjE5NjU1ZDRmMTk5MjZm MDIwMjAwHhcNMjUwNTA4MTYwMDQwWhcNMjUwNTA5MTYwMDQwWjAzMTEwLwYDVQQD Eyg5M2UwYTkyMjFmYmYyYWI0MTM2MGU5Y2FiOTdhMjM4MzliNWEzNmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAPjqoFvcz/KNVDlEVU40vz3M75V FjYf5PLPAbQKkMR/lyky6Nb2uIlTs0A6NzuG9yRYNe8ec0DMBg62B9lBu1i8uoeF UuYpRZhBDTkFB0VZopRbreMa3jFINNMB0r8oTc6kR8QoTtLn9hKDc8y0DU4W1W0E Y8ZNqVXuyFI7HkmInD9guGhisNqz1GiZyrzFb6XHtOe8L1n8YJGV9JGMKmLEP+J9 nrK8UyS6OXLn5s2OvHZzvSzFhFFhnTATNDqibgPXdP5A3HmasOl3lp7Tq6Z7Q0fH poI4IXfJdodpFQAv3m/sj7RvY75qM+/GJ8LXq6SBzQ8slM8X5FuS2E57jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJPgqSIfvyq0E2Dpyrl6I4ObWja6MB8GA1UdIwQY MBaAFNxcUy881eEeGf6xllXU8Zkm8CAgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEt NGI2YzFjZjlmZTRmLzEvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEtNGI2YzFjZjlmZTRm LzEvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI26iiyfc yRD41qL+dGMtRTPEXdr0EexgCkfrSemVaCVoqXbRMnrO0miRWC3tx/gSVFNfd7Dm I56CwyBMa9maCXuoBG7ZJVC9HyyJm2AOToZ3Q5dsOl2mqhkUIVTQZ+CCvccIqabF rQI4V8ptWvW5AS60sbAK6stHHrzoJm50Q3JBZDmt+VnDT54OA318xi+f2DTTtrYr KmGz2XVML4qFBCtG3uD9lspfbnJhyR7zf6aPBoJRikJTEKK6g3LXjA/R7ikrd8Sv ElQdFqGfeqPO+1CVwP0aCi8gTT8oSApgny0eYcXQ54rh9eBVmi+fMoolZg9kU0Dd 67H+8OKjdmMKRA== -----END CERTIFICATE-----Generated at Fri May 9 02:59:53 2025 by rpki-client