$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft File: Vw-w8di4wZiw3IYVivvLxSnPFr4.mft (raw, json) Hash identifier: W7GY8RocDU57ruI1T0rGMAdLJYpY7VL2U37YspBkqtg= Subject key identifier: 62:60:F7:74:9B:74:4B:29:61:BF:C0:24:43:6C:1F:07:C6:3E:43:C0 Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be Certificate serial: 0196ACFB1F014899DC4C33F61CDCBD7E2D19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft Manifest number: 0FFF Signing time: Wed 07 May 2025 23:01:00 +0000 Manifest this update: Wed 07 May 2025 23:01:00 +0000 Manifest next update: Thu 08 May 2025 23:01:00 +0000 Files and hashes: 1: 394tf-42F2nqTQBsIqtkSRmucjA.roa (hash: FEgkNeogh00D0/bMKIclm4PWisfm2kigk4t326/BxbM=) 2: LhiSCtln5FtX__OORvWyogq6e1Q.roa (hash: hy6v9rxifRC/tHX6TRNuZxsYh5g9SsOUALYCNaysw+8=) 3: MSn0dinH8F7h7C9Jc6R3UNmyP3w.roa (hash: KStiOBcSOiwyAn+YWBUdonUvaWYM4nslVzovef30Y4M=) 4: OcYqxTzrKk51o7UzflMDq0IEkmU.roa (hash: r3dK9LV9mG8s5RFEYjKSnWAnYTPlW4DqfejV7eJjGtw=) 5: RtrZUvwvuEHAGUrNZF36dX7rwhw.roa (hash: xnQU6yTCcLAWI3pPW1PWHIIj4ru7KEEsBgowO3cioPE=) 6: U0iiCyVKkBtsYKQQ59uFgwV0vUY.roa (hash: Kg0XkwtjvHqkxTV75IaHlum33qw8f4RzUFb1Bkwzos0=) 7: Vw-w8di4wZiw3IYVivvLxSnPFr4.crl (hash: 4aa9UIwvCgeyqmFC9fLXG9is8cdes81iJRyRkECWm4U=) 8: _OYA4765g9NJpcF7TDI32R4HwJ8.roa (hash: Yn+kaEeIeAIZFGdnv8IGAlURa//73XSkwoeGL0+JgXY=) 9: ss9acv__B4xuRCikM6Q1io4S-n8.roa (hash: pFGlfxJ1WiZHMyxc9wr2pYkizcAW4NxGW31B+3adYmw=) 10: xP_OgtuvPLIy6f3OgcMLRqYdB6o.roa (hash: /xteHtlPoU7Xt/uO/23RugSaavsPJ92G0OJK6/uUxx0=) 11: xtQkvE-BfPKmkRCMT0mfTaY-Qnk.roa (hash: bWoWLjpB0/INlSEEwksj7kb2GcvU1sLoTUOKUQMOGh8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 May 2025 20:38:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:ac:fb:1f:01:48:99:dc:4c:33:f6:1c:dc:bd:7e:2d:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be Validity Not Before: May 7 23:01:00 2025 GMT Not After : May 8 23:01:00 2025 GMT Subject: CN=6260f7749b744b2961bfc024436c1f07c63e43c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b3:6d:60:d5:ff:30:01:a2:fb:44:ea:22:7d: f1:b5:4c:18:0c:fd:bf:69:be:9c:01:56:71:e4:15: af:28:30:35:ed:ad:bd:9d:0e:8a:20:28:e4:e1:67: 3e:64:bf:7e:e7:30:b6:e2:2e:b0:32:01:93:75:b1: 5f:83:fd:04:85:82:eb:76:29:64:dd:9f:45:78:88: 2a:fa:c5:1d:1f:f2:2c:71:b7:c1:9d:f1:80:d7:0e: 0d:fd:eb:e3:8d:3b:2d:cf:5b:ce:1b:6d:c7:c6:89: b7:65:ae:c7:60:05:ec:72:48:77:a2:47:07:1b:25: f0:37:30:f9:dc:ba:cb:fd:c1:51:8e:ae:17:0f:27: 2f:c7:71:55:ca:05:2e:d3:67:51:3f:90:6d:33:d5: 2d:9e:9c:cd:71:e0:da:a7:5c:b7:c2:82:53:0c:bf: 1a:42:db:1c:43:c9:d5:fc:b9:37:f8:2a:26:ce:4e: 8f:1e:16:fd:f6:16:ff:54:b8:11:aa:69:64:66:c8: 86:9c:9a:a9:00:78:7d:2e:52:cd:cb:77:18:06:3c: db:f0:9a:92:b2:d7:01:3f:da:a8:54:44:39:26:58: b4:1b:b3:49:99:bc:05:9e:38:a7:96:10:ec:a3:20: ce:2d:17:fe:16:d2:d8:34:8c:14:85:1d:a6:76:e8: b0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:60:F7:74:9B:74:4B:29:61:BF:C0:24:43:6C:1F:07:C6:3E:43:C0 X509v3 Authority Key Identifier: keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:53:68:9a:6c:2e:52:1a:0f:67:bc:57:13:9e:b2:2f:cb:43: c9:59:64:08:50:fa:c1:34:1f:83:3d:57:92:4f:1b:4d:dd:f5: 19:a2:0f:c1:72:66:dc:1a:c3:be:b9:33:db:71:67:7b:02:0d: eb:c4:ae:e6:79:6c:ad:59:b2:c4:18:57:00:34:a7:59:f0:22: c4:c2:8c:39:71:62:04:58:66:0c:7a:c0:26:c8:1b:0e:9f:e6: be:13:6f:2c:c4:dd:fd:a1:4a:a0:6c:81:a5:93:36:c0:40:3f: de:a7:4d:2a:58:e7:e7:ce:e4:1f:0a:bd:f3:aa:39:6c:75:40: f9:18:4d:85:33:75:7f:df:a2:be:5f:09:da:90:ee:d0:4b:ab: 40:38:fd:c9:84:48:a2:27:6d:87:e8:64:c4:8d:d7:8c:82:5a: c6:dd:97:51:93:2c:24:63:c0:e0:1d:a1:fa:69:98:16:1a:1b: 6c:44:37:ad:f3:06:70:f4:72:0d:fd:ce:c4:c0:71:31:91:2e: ce:75:6c:b7:89:fd:0e:d3:bf:b6:3f:b7:f1:bd:c5:38:ed:a0: 3e:4e:21:ce:7e:81:8c:5e:82:cc:48:e9:d3:87:84:fb:46:1d: 32:33:ec:90:14:17:b3:7b:9e:51:eb:43:d7:67:bb:fe:d6:d9: fd:a7:5f:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZas+x8BSJncTDP2HNy9fi0ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MGZiMGYxZDhiOGMxOThiMGRjODYxNThhZmJjYmM1Mjlj ZjE2YmUwHhcNMjUwNTA3MjMwMTAwWhcNMjUwNTA4MjMwMTAwWjAzMTEwLwYDVQQD Eyg2MjYwZjc3NDliNzQ0YjI5NjFiZmMwMjQ0MzZjMWYwN2M2M2U0M2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7NtYNX/MAGi+0TqIn3xtUwYDP2/ ab6cAVZx5BWvKDA17a29nQ6KICjk4Wc+ZL9+5zC24i6wMgGTdbFfg/0EhYLrdilk 3Z9FeIgq+sUdH/IscbfBnfGA1w4N/evjjTstz1vOG23Hxom3Za7HYAXsckh3okcH GyXwNzD53LrL/cFRjq4XDycvx3FVygUu02dRP5BtM9UtnpzNceDap1y3woJTDL8a QtscQ8nV/Lk3+Comzk6PHhb99hb/VLgRqmlkZsiGnJqpAHh9LlLNy3cYBjzb8JqS stcBP9qoVEQ5Jli0G7NJmbwFnjinlhDsoyDOLRf+FtLYNIwUhR2mduiwmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGJg93SbdEspYb/AJENsHwfGPkPAMB8GA1UdIwQY MBaAFFcPsPHYuMGYsNyGFYr7y8Upzxa+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2Qt OTcyNDNlMzE2MjcyLzEvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2QtOTcyNDNlMzE2Mjcy LzEvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfFNommwu UhoPZ7xXE56yL8tDyVlkCFD6wTQfgz1Xkk8bTd31GaIPwXJm3BrDvrkz23FnewIN 68Su5nlsrVmyxBhXADSnWfAixMKMOXFiBFhmDHrAJsgbDp/mvhNvLMTd/aFKoGyB pZM2wEA/3qdNKljn587kHwq986o5bHVA+RhNhTN1f9+ivl8J2pDu0EurQDj9yYRI oidth+hkxI3XjIJaxt2XUZMsJGPA4B2h+mmYFhobbEQ3rfMGcPRyDf3OxMBxMZEu znVst4n9DtO/tj+38b3FOO2gPk4hzn6BjF6CzEjp04eE+0YdMjPskBQXs3ueUetD 12e7/tbZ/adfqw== -----END CERTIFICATE-----Generated at Thu May 8 06:42:21 2025 by rpki-client