$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft File: Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft (raw, json) Hash identifier: 83XwWjoIDtcRZmg1jkppj4Ey3/LBizjAWJ1gvOngU+w= Subject key identifier: 2A:E7:7C:CF:4E:EE:0D:E2:2F:98:7E:D8:4C:23:D5:2D:04:7A:99:15 Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65 Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65 Certificate serial: 0196BBFFDDBFA4FA189F257ADE81F80D0AEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft Manifest number: 088A Signing time: Sat 10 May 2025 21:00:29 +0000 Manifest this update: Sat 10 May 2025 21:00:29 +0000 Manifest next update: Sun 11 May 2025 21:00:29 +0000 Files and hashes: 1: 0UnS-IxSrSbJu0LMwZGgrlOMQaY.roa (hash: RlE1mBt+QrDUuTHvHAH0++Dmsi2Z+uRQ/Byv5g9xWBY=) 2: 1-MsC5JIxdLnLZFyHuf6RgL5WGhc.roa (hash: pKBlmn1z+pps27wu7UmvO8rAolauod4xSkZZnJ9W1vs=) 3: 2pvIQqdrnc-BOV2vOiV82aU9KnE.roa (hash: JAA8g6YNbUGTGs3DmgxNRM+sH++rPd6SoVFBQv/ksXw=) 4: 5iTlOOubPJODXH7vsUI7Wpq0ba8.roa (hash: VCwAilQGOK0VnPyRzIvdM0YYC7WGdN3kdeSa5Bw3IAA=) 5: FMB-bLkFzuyKrNP2ugJeFR5FvcA.roa (hash: b4QarnLE9DJEtGHI3hEpn5pxBgsxCwePllqAAi4lx4c=) 6: RkzLHfWs_BL956tVkCeC3dIaNec.roa (hash: wKD0RAlNUVNkdZZ5vl809Igsg9tUDfvk8Sh/yVsSt8s=) 7: U-0XoRYDV1K8NeLT79sQu_iy4t8.roa (hash: QAJ2fJtDmsN9XNVxW3a/dJEvqFcETnDiO1SCagG2pSk=) 8: X9nzYcXU9EgIVl_7ZZWxlGNl4g4.roa (hash: wL/WH3TZ58EyBKIgJ0ej+sAXqdnuotdQ0gWq1xiVtwU=) 9: Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl (hash: p5mM+taatC6Yw/uMVCkc1sIPIEs38JtJtJ8Nggfq/PY=) 10: ZUGOIAUF7QcfJjyar2KLvgczs3w.roa (hash: hYWt23TW4POZBD00pdsn3rVpmOTF/64UdGALhmAlXk0=) 11: aQ7JsCHnSB2G4dfY_3yHXhj3Wo8.roa (hash: jc74/wQHOsinC7epcPYWAUkOMi5kreIozg0B86UPDDA=) 12: a_6EfM_eUhmEh3H7meW3ObA4-Go.roa (hash: NcCAQGLpBENo3heEl3G42fQyl7X50upMygvTrvmVy/A=) 13: bXxx-llWekyrtBewA8UESiAygSk.roa (hash: CVAUCXJbLgxcc/u+sDImVr2cGi4Am9sXCXZAdGDnVHY=) 14: lO_bhdVoi0rApHqZUYrR4e0dET0.roa (hash: L6ri99HTG/n8zl4aG6bBJmgMqEKOzJ8HTJ12NQEy2Ow=) 15: tIAnE7olcf48QxrYYLP98BoNm20.roa (hash: SgccbfmcOoOAqCbxUUBRnDTQCDmXYn2orIs/oZbYZEY=) 16: yH-qgMAP1a-ONlIbLyS-3YiA-v8.roa (hash: 5ALF18aBSR3V/0UBc56QwyH3CpaKIq6eI34/1+3sXLg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 May 2025 21:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:bb:ff:dd:bf:a4:fa:18:9f:25:7a:de:81:f8:0d:0a:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67499595a65aab0b53768def08091e31061e9e65 Validity Not Before: May 10 21:00:29 2025 GMT Not After : May 11 21:00:29 2025 GMT Subject: CN=2ae77ccf4eee0de22f987ed84c23d52d047a9915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2e:2c:f5:c4:5b:4a:4a:45:37:cb:f6:44:5c: 7d:db:d0:91:bd:21:40:fc:09:46:1b:f9:c8:53:2d: c8:92:34:99:b1:e3:92:8b:17:2e:63:ee:54:39:b0: 4f:b5:0c:3d:f2:4f:4a:41:30:2b:79:27:c4:73:90: 00:6f:7f:8d:1b:a0:2c:66:b4:e4:1d:bf:94:f0:89: bc:f1:e5:92:b0:66:a4:b0:de:59:d6:00:3c:bd:56: 12:17:b8:81:5f:07:d3:b4:1e:73:d4:c9:06:8f:5c: 4c:fb:d4:3f:91:6e:8e:2e:19:b3:5a:40:82:84:23: 39:bb:a1:c2:69:20:33:95:f6:ed:1c:53:46:52:cf: f6:97:d6:fb:f2:2e:5e:96:d2:ca:63:e8:e5:4b:f0: 85:d6:72:36:56:54:7e:e9:75:3e:b4:f5:5b:79:c5: b5:71:3f:87:5d:be:b3:3c:c2:a1:3b:7b:72:e5:35: 7b:8e:3f:9e:f0:76:8a:ce:38:ed:f1:ba:01:fc:45: 86:08:aa:ae:6c:3b:2b:63:85:f3:8d:c8:55:18:6d: 85:d3:26:d9:08:9b:9e:f4:2c:4f:ed:23:11:62:e8: 69:5f:9b:5f:32:25:1a:0f:6d:c9:8e:01:ab:c7:8a: 7d:23:9b:0d:7a:59:64:bc:9f:e4:bb:36:89:d2:88: b0:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:E7:7C:CF:4E:EE:0D:E2:2F:98:7E:D8:4C:23:D5:2D:04:7A:99:15 X509v3 Authority Key Identifier: keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:95:5b:60:13:d3:e0:b6:fb:8a:36:ed:b7:cf:fc:b9:af:36: 3e:b2:35:fd:c4:a4:5d:aa:e3:7d:a8:ef:c6:4b:da:8d:5b:fa: db:99:e6:03:45:e3:a1:bf:ad:cd:9c:f0:42:6d:88:aa:be:10: b1:0d:83:6e:67:99:fa:d8:92:3c:ff:57:da:5b:7c:ff:a1:83: 35:18:8f:bb:ec:b7:10:56:57:85:e8:c9:da:a7:5e:4e:47:19: 1f:71:7d:64:9a:3f:52:2f:00:c2:5a:25:b0:86:f5:a7:09:30: f9:d5:ac:55:cd:8b:ba:b8:52:24:d3:ca:d5:d9:3a:59:bb:55: 83:be:5b:4e:72:99:d9:86:bb:13:46:5f:c7:ca:81:e0:6d:15: bd:72:22:4e:b3:1d:ac:cb:9d:7e:56:b0:20:d4:27:fc:32:02: 65:77:6a:5a:f3:d1:08:c1:2f:fb:8f:dc:0e:08:94:78:c6:da: 42:af:c5:44:c4:c6:6a:0f:f1:d5:e6:fe:8c:a9:cb:dd:d4:21: 1d:95:d4:87:70:2d:d1:00:02:4b:41:4c:79:ea:65:90:24:1a: 0f:94:f6:d3:a9:ae:f0:62:3d:56:7a:d2:69:46:d0:66:a1:ba: 83:57:95:fa:ad:df:23:96:57:52:ec:6b:a1:0e:fb:97:7d:20: d5:f6:33:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa7/92/pPoYnyV63oH4DQrqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NDk5NTk1YTY1YWFiMGI1Mzc2OGRlZjA4MDkxZTMxMDYx ZTllNjUwHhcNMjUwNTEwMjEwMDI5WhcNMjUwNTExMjEwMDI5WjAzMTEwLwYDVQQD EygyYWU3N2NjZjRlZWUwZGUyMmY5ODdlZDg0YzIzZDUyZDA0N2E5OTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyS4s9cRbSkpFN8v2RFx929CRvSFA /AlGG/nIUy3IkjSZseOSixcuY+5UObBPtQw98k9KQTAreSfEc5AAb3+NG6AsZrTk Hb+U8Im88eWSsGaksN5Z1gA8vVYSF7iBXwfTtB5z1MkGj1xM+9Q/kW6OLhmzWkCC hCM5u6HCaSAzlfbtHFNGUs/2l9b78i5eltLKY+jlS/CF1nI2VlR+6XU+tPVbecW1 cT+HXb6zPMKhO3ty5TV7jj+e8HaKzjjt8boB/EWGCKqubDsrY4XzjchVGG2F0ybZ CJue9CxP7SMRYuhpX5tfMiUaD23JjgGrx4p9I5sNellkvJ/kuzaJ0oiwQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCrnfM9O7g3iL5h+2Ewj1S0EepkVMB8GA1UdIwQY MBaAFGdJlZWmWqsLU3aN7wgJHjEGHp5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTct MzU1MDgwNDE2NTJkLzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTctMzU1MDgwNDE2NTJk LzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlJVbYBPT 4Lb7ijbtt8/8ua82PrI1/cSkXarjfajvxkvajVv625nmA0Xjob+tzZzwQm2Iqr4Q sQ2DbmeZ+tiSPP9X2lt8/6GDNRiPu+y3EFZXhejJ2qdeTkcZH3F9ZJo/Ui8Awlol sIb1pwkw+dWsVc2LurhSJNPK1dk6WbtVg75bTnKZ2Ya7E0Zfx8qB4G0VvXIiTrMd rMudflawINQn/DICZXdqWvPRCMEv+4/cDgiUeMbaQq/FRMTGag/x1eb+jKnL3dQh HZXUh3At0QACS0FMeeplkCQaD5T206mu8GI9VnrSaUbQZqG6g1eV+q3fI5ZXUuxr oQ77l30g1fYzoA== -----END CERTIFICATE-----Generated at Sun May 11 04:09:39 2025 by rpki-client