$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft File: CR7HzPD6dh7Zm8WnqewNDusL8FU.mft (raw, json) Hash identifier: Uhg4DaI9P2cYIB+SsURVTiJMwHwVcMWXqhMn+7/XuYw= Subject key identifier: 38:9D:F6:D2:F8:17:C1:CE:60:B7:93:BD:D8:4D:96:D8:EC:C5:75:BE Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55 Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055 Certificate serial: 0196BDB7970D39D814343473E2CB41219B64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft Manifest number: 0ECA Signing time: Sun 11 May 2025 05:00:47 +0000 Manifest this update: Sun 11 May 2025 05:00:47 +0000 Manifest next update: Mon 12 May 2025 05:00:47 +0000 Files and hashes: 1: 4D2zuD0Eb8Jo50PCAbIdMhetGWU.roa (hash: +8AdCsIbg6QqiShSPx8KF625Srbmwui9ApyKDaSR7f8=) 2: 6SIE7lIPAfETfqeGKwz9qsqTDpo.roa (hash: baJLkGQNPC/ayO1BdamNx0wTnQsH1JjYTd+EvvvO47U=) 3: B5NGdVBBF38v7I807spD9rlndCk.roa (hash: Ij2UQybHDi9rCMOEdxuL3uK0WnnQkl2pfO/6vc3aPyM=) 4: BvGloeMd1pr-0RarsG3frbQCits.roa (hash: GcGKUXns2ciEuVorqL/ux5XGAMK5utLWLfmy9SJ0sbM=) 5: CR7HzPD6dh7Zm8WnqewNDusL8FU.crl (hash: 6fAdpsXpHGr4UqEpa+XtCRgHN4niNBhr1DdOkspXWqI=) 6: JNXkfS8Gevyb4Dt3MskQFKOQyBE.roa (hash: xyI4i/7FZY7J0bkn5v2Hrfk5UEeVMBFfBsSKz6DAPY0=) 7: L2H6UwduWaJxFicdgN2P7eBtiHA.roa (hash: P4+4JbqGYS4bGYqfrHMMZckY8WsOqty8P+Ix09bzckQ=) 8: MiY_UqV9XxTUP--p5MMXKEdvpoA.roa (hash: cejTZWCl258xJNR53TSPL/OafZfqazlim61BbS6tvNE=) 9: T1gh1hk6ej12g4Ihw5JL9jevaLA.roa (hash: S9ngvgv1d+3Twe9rVRGrD4AR8LO9wBk9cDUOi8GIi4o=) 10: THvQYIa2SprhVvWK5-tWknfJY9w.roa (hash: 5zmsJFBP7NnBZaNurwDsUUuS1oMZV7G7pUdzHmeMsEI=) 11: _2x-4OGJJSoKcxtXyC5heNpC1Lk.roa (hash: vkhFS/TDoPtaxHhXWGchXfwiYEYa7shcVneeg8uj/S8=) 12: cBFi45ZytFKgnNo2imsLe1_V7q8.roa (hash: r9FtBlSO2l8QxP7DU1HrwjHWsN6WkSKa/BKGiXhnmRk=) 13: chc7NZYTY8TAAm4omvxtyabyq7Y.roa (hash: D4ml84hX/IF5k6NvrzKJg2mEZ4TzfgqpdYCT4BEMOzQ=) 14: durT3uh2Ky_24MEFwd5Si3_aqOE.roa (hash: i0j2EhlYHuhS0ygdpSwrmJ+zKaf6MX39QT07/Pv8Mlw=) 15: hhzSm6GjX7s3vRc-UjvW8KahBO0.roa (hash: Ee9hXcXaMVLm37/p4g8p7BURdDDaz2FT+WhXrMvmGFM=) 16: vel8G0_GwQFflB8Mgko4kMTZKps.roa (hash: rEt+VHHycH8jAHwOJN7GUU5Y5p8vUpqH1HAPUwtitdw=) 17: yD-f7eB1dLOlfB3XPEqKpj98uCs.roa (hash: DRQJzu4HOqcnsIOmtzgmjk/hQ2C15/cPalIQczCWniU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 May 2025 05:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:bd:b7:97:0d:39:d8:14:34:34:73:e2:cb:41:21:9b:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055 Validity Not Before: May 11 05:00:47 2025 GMT Not After : May 12 05:00:47 2025 GMT Subject: CN=389df6d2f817c1ce60b793bdd84d96d8ecc575be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f8:c6:9b:a7:18:9c:b0:ed:13:37:67:79:d8: 03:d3:f2:96:a2:a7:62:76:4f:c0:2f:84:e8:ba:2a: d1:7b:09:34:72:c6:64:f6:7a:19:09:d1:43:b9:f8: 10:14:2c:26:d8:87:77:66:7b:89:f3:f8:81:75:37: f1:2a:2a:b8:28:e7:16:ff:63:5c:ed:1b:83:10:c7: a6:5a:f7:54:02:e1:85:99:b2:7d:56:ca:10:38:0a: 14:1f:e8:07:12:c6:65:0c:f7:a5:d4:43:cf:63:2a: e5:2e:8b:b0:06:8c:64:e2:5e:31:4c:c6:9c:c0:f0: aa:3d:15:80:ea:1b:8b:a3:a1:6d:f8:ce:7f:cc:57: 34:ed:dd:28:1e:94:03:37:08:ff:91:90:b2:89:8e: 63:34:a9:6f:da:ce:85:72:d8:35:87:b4:9b:53:54: 7f:db:f8:2f:20:2d:65:66:4a:5e:d4:02:22:a2:53: 97:6f:af:4d:e0:f4:a2:ca:c5:45:40:c9:fb:ff:4c: 9b:74:d2:14:6c:bc:e9:c5:33:6d:42:25:2a:cc:20: 8e:46:b0:2e:92:9d:5a:bc:8c:f3:62:4d:28:e8:3a: ab:38:49:f2:1f:51:0a:69:5d:3b:a0:95:d7:de:5c: 50:c7:27:5d:28:13:a8:37:e0:d8:ca:28:9d:54:8a: 94:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:9D:F6:D2:F8:17:C1:CE:60:B7:93:BD:D8:4D:96:D8:EC:C5:75:BE X509v3 Authority Key Identifier: keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:ef:58:97:34:c6:88:fc:ab:c4:69:5e:fb:80:c6:5b:75:a8: 63:ac:a5:0d:4b:38:59:7b:4b:64:e8:ae:cb:14:b6:a1:76:00: 59:74:7a:77:86:cd:50:2d:b3:4e:f0:ad:19:21:fe:db:0b:63: 9d:ca:7b:20:75:35:d0:9b:c4:fb:7b:09:74:c1:a0:4b:55:35: 33:3e:2f:83:f9:12:5d:f9:71:d3:e2:61:1b:c9:92:b6:7e:23: 2c:fb:d8:87:b8:f3:9a:f4:1b:57:f2:04:19:0a:6e:f9:3c:84: dd:25:36:9c:be:1b:d1:a4:31:4e:13:c9:99:8d:17:5b:21:8f: 3a:08:bc:c8:eb:dc:ff:96:20:c2:79:11:1a:34:7a:2b:7d:7c: ea:06:93:4f:a1:5e:b2:52:2d:ca:1d:82:cd:a4:6f:32:cd:e9: cb:b2:35:a5:6f:6f:a6:39:c6:7d:6c:2b:d1:8e:2e:3e:ea:72: 4e:dc:57:21:04:f4:33:8b:c1:cd:a0:6b:d5:21:c9:60:cb:9d: 9b:4d:84:42:55:4c:b8:43:9b:a9:a2:14:15:8c:1e:a8:07:b7: 82:b9:9b:dc:6a:dd:eb:3c:59:00:5e:7b:83:64:1c:67:a3:5a: 8b:46:33:a0:a4:98:bc:1c:7e:db:5e:9a:68:17:81:6e:b0:d6: 96:3f:3f:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa9t5cNOdgUNDRz4stBIZtkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MWVjN2NjZjBmYTc2MWVkOTliYzVhN2E5ZWMwZDBlZWIw YmYwNTUwHhcNMjUwNTExMDUwMDQ3WhcNMjUwNTEyMDUwMDQ3WjAzMTEwLwYDVQQD EygzODlkZjZkMmY4MTdjMWNlNjBiNzkzYmRkODRkOTZkOGVjYzU3NWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPjGm6cYnLDtEzdnedgD0/KWoqdi dk/AL4TouirRewk0csZk9noZCdFDufgQFCwm2Id3ZnuJ8/iBdTfxKiq4KOcW/2Nc 7RuDEMemWvdUAuGFmbJ9VsoQOAoUH+gHEsZlDPel1EPPYyrlLouwBoxk4l4xTMac wPCqPRWA6huLo6Ft+M5/zFc07d0oHpQDNwj/kZCyiY5jNKlv2s6Fctg1h7SbU1R/ 2/gvIC1lZkpe1AIiolOXb69N4PSiysVFQMn7/0ybdNIUbLzpxTNtQiUqzCCORrAu kp1avIzzYk0o6DqrOEnyH1EKaV07oJXX3lxQxyddKBOoN+DYyiidVIqU/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDid9tL4F8HOYLeTvdhNltjsxXW+MB8GA1UdIwQY MBaAFAkex8zw+nYe2ZvFp6nsDQ7rC/BVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQt NDVjZmM4NTdkZGRkLzEvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQtNDVjZmM4NTdkZGRk LzEvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMe9YlzTG iPyrxGle+4DGW3WoY6ylDUs4WXtLZOiuyxS2oXYAWXR6d4bNUC2zTvCtGSH+2wtj ncp7IHU10JvE+3sJdMGgS1U1Mz4vg/kSXflx0+JhG8mStn4jLPvYh7jzmvQbV/IE GQpu+TyE3SU2nL4b0aQxThPJmY0XWyGPOgi8yOvc/5YgwnkRGjR6K3186gaTT6Fe slItyh2CzaRvMs3py7I1pW9vpjnGfWwr0Y4uPupyTtxXIQT0M4vBzaBr1SHJYMud m02EQlVMuEObqaIUFYweqAe3grmb3Grd6zxZAF57g2QcZ6Nai0YzoKSYvBx+216a aBeBbrDWlj8/+Q== -----END CERTIFICATE-----Generated at Sun May 11 12:33:16 2025 by rpki-client