$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft File: Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft (raw, json) Hash identifier: 8GTXoLrAUx+vzRZUGctrt/zhx+qBqPrc5NUlvwYeF5g= Subject key identifier: 36:3D:E6:5E:E3:5F:8E:77:DB:D0:CD:3D:B1:C0:B0:8C:F0:86:7D:38 Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69 Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69 Certificate serial: 01969ED13814A0A4E99B0475E523869A79EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft Manifest number: 0F69 Signing time: Mon 05 May 2025 05:00:33 +0000 Manifest this update: Mon 05 May 2025 05:00:33 +0000 Manifest next update: Tue 06 May 2025 05:00:33 +0000 Files and hashes: 1: B1Q4xWffdUN7zPjy1sq3Dtrabr0.roa (hash: XSRbcDFmD2SBWhC9QVnlq9zNA7EtDeg2/jCNqGJ6Vow=) 2: EFpp1ecMW8TWRG-p4oYa7fPPvPI.roa (hash: a7nT0f4Aii6pfEA07RoNM/fESmlRPCmSXyaPHHhHtfc=) 3: G5aSz4shLC5EKgp2SbNK-UcpZls.roa (hash: ao0JJHFk2t7w93DBJFTmDX4+D2u79wITuPAaWZsRu74=) 4: Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl (hash: 2Qw9S/anhh+BPqjRH9TpFbREwVCXWGISAG44tJ5SClA=) 5: J-jYbkHcU08sfslJpHJcwTM3ehc.roa (hash: jbuWwS0NdmUW31cs0jkODoZKeIDKRJImFm8tQFXzCko=) 6: OwdGZ1AgjDFGCReMkA1z7YNmB6U.roa (hash: Bb/ivuP+adqpzsV0MXjT8YP9ajM7ZwSlLveu3KhabUo=) 7: VHuw9bCvd_xbchW3ciS0PDWXw_w.roa (hash: gsE8OKW+/bE0pDGpsJc+2dHPUTMKwzSWKQdDcL2OGGQ=) 8: Vi5NHh9PeiZKSedITFgsgmiPCmI.roa (hash: p7I/BG2g25UPrgXDvJH/MAw3MvHjYcpWdRge+ekzCdI=) 9: YPCVZfdLkRnpwRWt5j9ECFmQgkw.roa (hash: hjB0AgE/bEo2D0PnqWgeOepZ8iy64G1fbs2WbSURiyc=) 10: ZDwPo4eEroHvW0Q-cNvO-pGgd80.roa (hash: MhXd3/42bxWERGmNkex/8mTYhYeR1LhuzyC3QmH77TY=) 11: h9060_GP774mLO77LC6My7l_Iqk.roa (hash: xCF+i+qRMr0iOa+aUqi0JjRA0FfOBaa6KB7RH+xl9to=) 12: lUv8OjHUlBMekakzg-j5fQ_XiFg.roa (hash: f+p/zRgG0RQsMdZYacDCMc3D+9sgqRofkU4BGtH4uqk=) 13: w5dYOa54vKNEPegbP1ILAe4B70k.roa (hash: UG3Pt6aB2V/te9hBV8WZU509/953v6ZJ4S6EVvmx5A0=) 14: wMNls6aGPElAO-q1J1yhX2YjyMw.roa (hash: T5LNkfUUjSqO9ZymGqQoAIJA3aG+G/WQ2mWR/OBaa5g=) 15: wkc9yBg4lPDGjCfaJZRjyFM7mB0.roa (hash: qUIFrqdAEDEN9kEv6WmzzdSEX+yB2KZ5WLQVyM2U4m0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 May 2025 22:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:9e:d1:38:14:a0:a4:e9:9b:04:75:e5:23:86:9a:79:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69 Validity Not Before: May 5 05:00:33 2025 GMT Not After : May 6 05:00:33 2025 GMT Subject: CN=363de65ee35f8e77dbd0cd3db1c0b08cf0867d38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e8:2b:a3:ea:69:d8:ae:3a:4e:81:0a:5d:a8: 9b:00:1a:a5:96:e3:58:ee:14:fc:89:97:51:ae:6c: da:8c:de:8c:5b:4a:b6:36:1f:19:38:a7:9f:b6:6d: 62:74:5e:bb:56:49:74:40:6a:f2:7e:f9:82:cf:1a: ca:8f:1c:62:5c:2c:2c:89:84:77:91:72:06:0e:e6: 04:b1:ac:4a:aa:2e:d6:d7:18:85:ee:cc:0e:4d:13: ad:0c:62:52:db:38:14:f5:03:db:84:a7:c9:08:bd: ce:7f:af:20:50:e6:27:bf:b1:af:1b:1a:d1:7e:49: 6c:c2:61:4c:2b:98:95:9e:f5:de:fc:a3:ca:a9:e3: 0e:a0:5f:9c:c1:0c:c3:da:42:08:eb:11:c7:58:cb: 7c:a3:41:e5:ee:a0:50:3b:cd:e1:83:ca:2b:0a:57: ab:ed:40:dc:62:6b:fb:12:cb:41:02:76:a2:e1:8d: e9:51:a7:f4:53:65:48:f5:8c:5b:94:68:5f:04:59: 60:55:03:9c:e1:e5:a5:f7:81:50:af:fa:56:33:bf: 33:22:d5:da:69:01:a9:73:90:c5:4b:a7:d9:59:b4: 93:16:50:76:6c:61:1f:9d:6e:09:92:0c:ec:a0:4d: 1b:8a:22:67:ab:93:ea:0e:19:bb:3d:83:d8:11:f4: c0:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:3D:E6:5E:E3:5F:8E:77:DB:D0:CD:3D:B1:C0:B0:8C:F0:86:7D:38 X509v3 Authority Key Identifier: keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:07:c8:6a:c3:e9:bf:06:6b:7a:96:8f:f5:55:26:87:18:d7: af:94:29:3d:65:92:a3:8e:92:72:57:d4:9f:a7:df:9c:64:e9: 2d:89:b4:8e:be:00:26:3e:30:e2:50:9c:f1:2b:a9:c2:76:c1: cd:b4:17:a1:28:36:97:65:e8:e3:e1:49:a4:11:07:92:46:ec: 52:85:a3:37:e6:fc:ed:13:b0:a3:ef:78:b0:46:18:06:a4:e7: 22:06:06:e6:b9:bf:83:18:65:d0:2d:b2:09:54:43:0a:37:dd: ec:63:b9:0c:59:00:3c:4e:24:02:8c:77:f2:2f:70:7c:ca:b6: eb:74:ed:aa:37:67:ed:f7:18:3c:f4:10:7a:90:79:75:78:e0: 4f:98:b2:60:b7:f2:c0:fc:8f:ff:98:fc:85:fb:58:3c:f8:3f: 80:7e:d7:4b:41:e6:5f:0d:d0:7e:50:7a:ff:b3:11:f2:50:6f: 8c:bf:89:c3:0e:ff:d1:a3:16:bc:53:61:7f:01:39:d5:f9:97: 90:1e:de:ce:a4:fd:2a:87:1c:bb:32:7e:ab:08:51:03:69:8b: 1a:90:8d:e0:17:c3:4a:d7:28:62:96:e6:99:be:79:28:e1:76: a0:fe:0d:33:46:85:f1:77:6f:d8:10:b7:f1:01:96:8d:cb:14: 82:ee:20:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZae0TgUoKTpmwR15SOGmnnsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlOWZkYzdmYjM5ZWJiYmVkNGVlNTRmNzAzZDNhYzYxNTNk ZGVlNjkwHhcNMjUwNTA1MDUwMDMzWhcNMjUwNTA2MDUwMDMzWjAzMTEwLwYDVQQD EygzNjNkZTY1ZWUzNWY4ZTc3ZGJkMGNkM2RiMWMwYjA4Y2YwODY3ZDM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyegro+pp2K46ToEKXaibABqlluNY 7hT8iZdRrmzajN6MW0q2Nh8ZOKeftm1idF67Vkl0QGryfvmCzxrKjxxiXCwsiYR3 kXIGDuYEsaxKqi7W1xiF7swOTROtDGJS2zgU9QPbhKfJCL3Of68gUOYnv7GvGxrR fklswmFMK5iVnvXe/KPKqeMOoF+cwQzD2kII6xHHWMt8o0Hl7qBQO83hg8orCler 7UDcYmv7EstBAnai4Y3pUaf0U2VI9YxblGhfBFlgVQOc4eWl94FQr/pWM78zItXa aQGpc5DFS6fZWbSTFlB2bGEfnW4JkgzsoE0biiJnq5PqDhm7PYPYEfTAYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDY95l7jX45329DNPbHAsIzwhn04MB8GA1UdIwQY MBaAFB6f3H+znru+1O5U9wPTrGFT3e5pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgt NjkxZmY1YjQ0YjAxLzEvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgtNjkxZmY1YjQ0YjAx LzEvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWQfIasPp vwZrepaP9VUmhxjXr5QpPWWSo46SclfUn6ffnGTpLYm0jr4AJj4w4lCc8SupwnbB zbQXoSg2l2Xo4+FJpBEHkkbsUoWjN+b87ROwo+94sEYYBqTnIgYG5rm/gxhl0C2y CVRDCjfd7GO5DFkAPE4kAox38i9wfMq263Ttqjdn7fcYPPQQepB5dXjgT5iyYLfy wPyP/5j8hftYPPg/gH7XS0HmXw3QflB6/7MR8lBvjL+Jww7/0aMWvFNhfwE51fmX kB7ezqT9KoccuzJ+qwhRA2mLGpCN4BfDStcoYpbmmb55KOF2oP4NM0aF8Xdv2BC3 8QGWjcsUgu4gTg== -----END CERTIFICATE-----Generated at Mon May 5 07:04:42 2025 by rpki-client