$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft File: raJar-Ophw6VJK-gJlmH7VpaTaM.mft (raw, json) Hash identifier: gpxNlboOwhEhGjgtfqpWLV02TLfRUkJnFsPVWbEvKZY= Subject key identifier: 3D:A0:50:49:65:93:35:A1:7B:14:32:CB:45:CD:CE:F1:19:55:D2:6F Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3 Certificate issuer: /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3 Certificate serial: 0196BEC9DC83D39BDF31DE50A3C89CB810F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft Manifest number: 1565 Signing time: Sun 11 May 2025 10:00:22 +0000 Manifest this update: Sun 11 May 2025 10:00:22 +0000 Manifest next update: Mon 12 May 2025 10:00:22 +0000 Files and hashes: 1: 3cvNvdSi3XGnlgqLMUXhh7Fbsns.roa (hash: RjSiDuOGFmz06JKyEcD4gXSDvTvwzOibXX44/BaGwzM=) 2: 4qU0lYZixQn_ajK7o9tm4-h59Yc.roa (hash: rJ9oCMP6AUNUzaOpIFXW5T5zkn6qUN20PTxwfzReYSQ=) 3: CKER9wKJnd8i3s1x_cuI1c5b5Gg.roa (hash: s6MpM43dZhbOOH2ONDtptW7UmeKZDzVPrS361Wp7DlU=) 4: IAVMzOtz-_56l10XXW1XpGPX7FA.roa (hash: hrsUGBohTqkchtKuuNqlxk60990twah7968fUr2crR8=) 5: QqlMdh24Ws5Csf0Uuo2IJQlJoC4.roa (hash: /8SKmiBGn8KNuuR9Z6Vc2oYu9cW/r06GpbN1vuAdWAE=) 6: VWz0dchWUkZQVyP3JtuInNAFbyA.roa (hash: SqCoHwQT1RKZsrh/slkYf8DtZsXR49Lw8MbGV9Z0lJQ=) 7: XG0f4whg8DTzg4ZpQd0f-UdmRXY.roa (hash: ZGcU72mX8VKGJYV72um72oY45czQYPy5f+/AekBe7rg=) 8: eTZvFVUGnDNHwq2npFaevM_pjLg.roa (hash: 18cD37AihQlqKhfJw/uFQO048dE0tdQTn3vqNmQm/DI=) 9: jOJJqoS_PgQTtahvKFyYtdpryQc.roa (hash: NLWvbfmQ0GpKEPm+5C3Z0gDnOHe3vz+adN0kchftPSM=) 10: owgmBs4vbkkXbw2K0OuU1ejAVjM.roa (hash: hWN+IDhiOv5MeOYFdicsOLf4isT8+TWoYgyTGhIN3B8=) 11: raJar-Ophw6VJK-gJlmH7VpaTaM.crl (hash: ru47CS0NiR7EbhCmIPmlsgZyTvhd2f7CBr4hrPwNX/k=) 12: w47kV22DUX2rmSAV17IslbqJZkE.roa (hash: jwhv3mxFNCUIHi+oaeb9HMdIuv95C0du8+Aflx3W8ng=) 13: zBMwGWWflzLxBSFNPzJ2aqEBgrE.roa (hash: Frie/26MAD4moXE2hcnRczEyt7GQngLuPdcorC2uOx4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 May 2025 10:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:be:c9:dc:83:d3:9b:df:31:de:50:a3:c8:9c:b8:10:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3 Validity Not Before: May 11 10:00:22 2025 GMT Not After : May 12 10:00:22 2025 GMT Subject: CN=3da05049659335a17b1432cb45cdcef11955d26f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:61:3a:ec:6a:0d:87:61:54:b8:eb:ac:92:25: ca:69:ce:7f:59:3f:83:af:66:2d:f1:63:21:11:9f: ad:55:6c:ed:74:3e:61:8b:2f:72:8e:8a:6d:19:8f: b3:74:f6:72:a5:a2:26:33:5c:a1:df:98:d5:93:30: 37:4a:27:bb:c7:3d:74:7a:59:5e:00:2a:d0:f0:a5: 70:24:20:5a:0d:2b:89:b1:56:85:10:e8:cb:ac:53: ba:19:7f:7a:9a:55:82:12:e9:9a:ad:df:b0:94:04: 0d:11:96:90:a6:9f:3b:8e:4f:88:58:bc:75:62:7f: f8:7a:ce:81:54:8e:23:34:26:c7:66:48:9d:1e:f2: 0c:88:f5:b7:54:12:43:dc:49:38:60:06:6d:b4:a2: e4:42:29:95:b9:ad:b3:ca:ae:67:6f:ff:f1:cc:bd: e0:da:1d:f0:2a:f2:4b:b3:72:ea:8e:bd:a7:b9:6c: 6d:a4:16:58:f6:c8:08:a9:98:eb:af:d9:2a:4f:ab: 42:17:55:b9:5e:67:58:f2:cc:30:f8:4c:f4:aa:a0: b4:2d:79:c5:9a:3e:f2:17:dc:24:85:37:28:bf:a7: c9:db:cb:df:3b:ae:a0:23:4b:5e:1a:5c:ce:46:27: af:65:05:65:b6:e9:19:fa:11:56:d2:9c:ea:c1:fa: 48:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:A0:50:49:65:93:35:A1:7B:14:32:CB:45:CD:CE:F1:19:55:D2:6F X509v3 Authority Key Identifier: keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:89:7b:27:e0:56:51:a9:53:8e:08:c7:db:8f:51:40:42:dc: 3b:50:39:f5:8a:1c:87:a7:86:06:b6:f6:24:33:c6:b9:43:4c: 89:53:70:6a:86:ca:61:67:02:dd:86:7d:5c:69:7c:27:da:8d: 83:eb:01:bc:5a:8a:ee:f1:58:7a:e9:de:41:73:48:fb:fd:3b: ec:2c:b4:ad:15:0e:0a:9a:f9:40:4d:b3:c2:5c:bf:ad:83:cc: 8f:a6:fb:2e:43:91:e7:7f:fe:2c:99:09:8c:84:28:b8:dc:07: 2d:75:77:e7:bf:96:fb:93:20:61:71:e2:07:2c:f3:3b:ca:e2: 20:c2:a9:e4:87:84:0a:29:cf:56:87:f1:14:77:54:35:66:b0: 3b:0b:f4:8a:43:31:d9:3f:79:9d:c7:8d:18:67:87:17:c6:ff: 23:0d:cf:2c:ca:2e:0b:c7:0e:13:ad:39:0d:98:90:a8:b6:b7: 35:2e:c8:ab:0f:64:c0:73:69:fc:c8:ca:bf:3e:3e:9f:03:b9: 58:3b:94:22:48:ce:23:0c:4c:37:41:71:95:31:98:27:5b:c7: 8b:89:3f:24:c4:61:66:e8:94:b3:1b:31:92:00:16:ea:46:d3: 14:17:e5:05:87:e9:80:4d:df:88:f3:72:ab:d4:23:1f:33:7f: e0:64:45:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa+ydyD05vfMd5Qo8icuBD4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkYTI1YWFmZTNhOTg3MGU5NTI0YWZhMDI2NTk4N2VkNWE1 YTRkYTMwHhcNMjUwNTExMTAwMDIyWhcNMjUwNTEyMTAwMDIyWjAzMTEwLwYDVQQD EygzZGEwNTA0OTY1OTMzNWExN2IxNDMyY2I0NWNkY2VmMTE5NTVkMjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32E67GoNh2FUuOuskiXKac5/WT+D r2Yt8WMhEZ+tVWztdD5hiy9yjoptGY+zdPZypaImM1yh35jVkzA3Sie7xz10elle ACrQ8KVwJCBaDSuJsVaFEOjLrFO6GX96mlWCEumard+wlAQNEZaQpp87jk+IWLx1 Yn/4es6BVI4jNCbHZkidHvIMiPW3VBJD3Ek4YAZttKLkQimVua2zyq5nb//xzL3g 2h3wKvJLs3Lqjr2nuWxtpBZY9sgIqZjrr9kqT6tCF1W5XmdY8sww+Ez0qqC0LXnF mj7yF9wkhTcov6fJ28vfO66gI0teGlzORievZQVltukZ+hFW0pzqwfpIawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD2gUEllkzWhexQyy0XNzvEZVdJvMB8GA1UdIwQY MBaAFK2iWq/jqYcOlSSvoCZZh+1aWk2jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmFKYXItT3BodzZWSkstZ0psbUg3VnBhVGFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS84MTBkMjQtYWNiZS00Y2IyLTlhYzUt OWQ1ODc1ZDg2MzczLzEvcmFKYXItT3BodzZWSkstZ0psbUg3VnBhVGFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS84MTBkMjQtYWNiZS00Y2IyLTlhYzUtOWQ1ODc1ZDg2Mzcz LzEvcmFKYXItT3BodzZWSkstZ0psbUg3VnBhVGFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABIl7J+BW UalTjgjH249RQELcO1A59Yoch6eGBrb2JDPGuUNMiVNwaobKYWcC3YZ9XGl8J9qN g+sBvFqK7vFYeuneQXNI+/077Cy0rRUOCpr5QE2zwly/rYPMj6b7LkOR53/+LJkJ jIQouNwHLXV357+W+5MgYXHiByzzO8riIMKp5IeECinPVofxFHdUNWawOwv0ikMx 2T95nceNGGeHF8b/Iw3PLMouC8cOE605DZiQqLa3NS7Iqw9kwHNp/MjKvz4+nwO5 WDuUIkjOIwxMN0FxlTGYJ1vHi4k/JMRhZuiUsxsxkgAW6kbTFBflBYfpgE3fiPNy q9QjHzN/4GRFvQ== -----END CERTIFICATE-----Generated at Sun May 11 20:04:20 2025 by rpki-client