$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft File: R3avt0-tW68KYYC0lRDYuEl9-NM.mft (raw, json) Hash identifier: 41hBCJFYhZKT4vkjHAvycnK2R6mMcRANBsWOd4VV8zg= Subject key identifier: 8F:DE:70:24:7A:11:56:31:E4:F6:94:EE:B4:A4:5C:B2:1C:3F:9B:46 Authority key identifier: 47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3 Certificate issuer: /CN=4776afb74fad5baf0a6180b49510d8b8497df8d3 Certificate serial: 0196AAD53C2C3AB43FCA8744968590987F38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft Manifest number: 152B Signing time: Wed 07 May 2025 13:00:23 +0000 Manifest this update: Wed 07 May 2025 13:00:23 +0000 Manifest next update: Thu 08 May 2025 13:00:23 +0000 Files and hashes: 1: 1h855CNEVOjEfeY3xJdnjH3udfA.roa (hash: LnReL4xvvQZDIPnpuzGkg0WHy3mNK+PRykuvMTviVRU=) 2: 9TPdAIfPUajUjs2DsbC3GN5w1mM.roa (hash: f998uOYMTFD5RySwHTrfZLXT9MQqC7DQiOZI706CLv0=) 3: BjNcWgFCcgba03gZ00Wn0vEqj3g.roa (hash: U/XRsHv7C+f9dXk91I1pC9Y4HNFCH0uKUdMuFoDViRQ=) 4: BrfY4YW_yXK06U0eOLt-LobfjzY.roa (hash: Hv6+aEBXmMC9XH4TQkng0p4jntb620WSOaHbhPCP9JQ=) 5: Cw1uuAeUBhAelOLTm4Dk1iRffEA.roa (hash: z7x5PkssyE32f3g9waLhPt3Hl1C8H5f4Iw04pNNOOB8=) 6: EcRwtilhZy6tNswg6gPS5OkvUlQ.roa (hash: qBDPjWgpNJxholOTWxrJUnO/kRkTjC8UXjWmpsN+tAc=) 7: R3avt0-tW68KYYC0lRDYuEl9-NM.crl (hash: TVX6nMzlS+2qpyD1xkrfzL/7eC4qygyv/bcAkXuBMY4=) 8: T8_EmiMUPF83zSf_CWDX1W5xQ1k.roa (hash: d6CAaY4KcSFvMEPDFQGYRUngwvkhFj6iBm1RzRLZ++4=) 9: WUYHmqFyP61kI6BD9sMT7KF9l-U.roa (hash: xFiWBHTwLfZ5M8eQEBathNKsbTc1PcIqXDpV9YTX3G8=) 10: g5kj0c5gIcfXvJMBxVW2-IvShUI.roa (hash: CKgIE1v8ZknTa0F780Va3Q+BXidD3R6HaKXYmqUb3wg=) 11: kKoWp4Lx502DAZ2dTiIEcojnfao.roa (hash: wbMVZciEXcbsx0EhcS9t8+gUwRDnIiXLOoH2KSH13m8=) 12: m0urSftBhVugiQE6mFeNiCtZVI8.roa (hash: xOqBMnBvPEbbfCmZX1QX9FuTGPEracGRpzNmhAwuxVM=) 13: p9BRYnl3EKm9TTth6amvuszGxmw.roa (hash: RclXNVeUwytI6eicBVcxuy79LLzQjb8L+50PtV/MwdU=) 14: rq0QSGPYNrEzw6-22i_TjD_5ytM.roa (hash: GZherMDntzrMQ22JN8aWo0GpEMJ9AqPJdM6Y8aGsT1I=) 15: tWTx91zKwnMqo4ymab78lMSrAv8.roa (hash: ueVp+aZdHi8wvh5xrtibgRIouCvFn7uQziD4gJ74yO0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 May 2025 08:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:aa:d5:3c:2c:3a:b4:3f:ca:87:44:96:85:90:98:7f:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4776afb74fad5baf0a6180b49510d8b8497df8d3 Validity Not Before: May 7 13:00:23 2025 GMT Not After : May 8 13:00:23 2025 GMT Subject: CN=8fde70247a115631e4f694eeb4a45cb21c3f9b46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1b:f0:85:d3:20:ac:0e:fc:92:83:23:ae:2d: 0d:5e:4f:d2:a5:c5:d6:2b:64:4f:29:0f:44:7f:c2: 3b:c6:65:be:d0:14:28:71:ba:c5:0c:51:59:64:d0: 78:86:24:4e:2d:10:1e:02:c2:43:ef:57:9e:3b:4b: 2f:0d:46:f2:10:0a:3e:58:ca:54:d4:d1:a5:7e:31: 72:62:f9:f5:ec:aa:51:a7:54:ae:70:c3:f5:32:17: d9:09:0a:f7:e7:61:d5:56:54:3b:52:10:17:c3:44: 2a:95:b8:03:6f:06:83:3f:7b:4e:16:6f:52:34:b9: 6d:33:cb:78:7a:3a:9c:1c:b9:bf:bf:f5:74:1e:68: ce:3c:60:1d:77:f7:43:ee:a5:8c:d2:76:ba:88:d2: 06:fd:7b:1c:f5:5a:67:53:86:ea:61:0c:33:56:28: 2b:bf:55:16:4a:5e:64:5c:19:d7:88:96:c0:f1:4d: 75:09:be:99:a1:00:64:0a:ba:f5:9c:6a:05:8d:ea: 01:ee:6d:24:16:1b:ed:e4:5b:6c:0e:a1:4e:69:0c: f8:d0:58:56:0b:d1:af:b9:3a:e8:63:0a:98:19:bb: 3b:4a:ba:b1:1a:3c:aa:21:36:f2:e8:3f:ad:81:aa: 7d:ed:82:b8:de:1f:28:61:6e:a2:f4:97:4c:d1:62: c1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:DE:70:24:7A:11:56:31:E4:F6:94:EE:B4:A4:5C:B2:1C:3F:9B:46 X509v3 Authority Key Identifier: keyid:47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:a5:de:f3:fe:cf:f3:bd:9c:e4:f6:ef:83:7e:fb:96:02:ca: f2:9a:46:98:0e:fe:6e:76:95:77:41:92:a3:e9:03:82:79:a6: ae:cb:9d:c7:6d:b1:c1:e0:14:29:8d:fb:65:97:90:49:97:44: a3:3e:61:65:05:b9:d5:91:fa:58:01:77:3d:44:7b:a7:97:b0: c9:c5:9c:a2:5e:79:7c:99:03:68:99:85:17:e2:93:88:43:9d: bd:c2:8c:91:1e:76:eb:ad:d5:15:bd:0a:c9:3a:a0:e0:b7:93: c8:26:53:0a:65:15:7e:57:f5:bd:87:f1:09:f2:b1:32:2d:02: 3d:fb:29:e9:46:57:53:6f:c7:0f:4b:ee:57:07:39:ee:98:ea: 6a:c6:e7:7e:a9:a8:ff:08:c2:ab:50:32:a7:a7:4c:79:47:57: 24:ca:77:9a:ce:67:df:7f:2c:03:94:8e:db:ce:5e:91:a1:43: d8:5f:2f:4c:17:31:39:49:f0:3f:9a:7e:52:67:85:bf:cc:4a: 01:27:a8:71:bd:0a:b6:e7:c7:c3:5f:af:c5:4a:b3:f6:01:60: a5:e1:f9:a1:7d:a9:f6:6c:34:55:a4:df:a9:da:f1:93:46:dc: 1a:27:dd:e2:19:7d:0c:24:81:72:3c:94:31:c3:f6:4e:7c:b8: 97:6c:11:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZaq1TwsOrQ/yodEloWQmH84MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NzZhZmI3NGZhZDViYWYwYTYxODBiNDk1MTBkOGI4NDk3 ZGY4ZDMwHhcNMjUwNTA3MTMwMDIzWhcNMjUwNTA4MTMwMDIzWjAzMTEwLwYDVQQD Eyg4ZmRlNzAyNDdhMTE1NjMxZTRmNjk0ZWViNGE0NWNiMjFjM2Y5YjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRvwhdMgrA78koMjri0NXk/SpcXW K2RPKQ9Ef8I7xmW+0BQocbrFDFFZZNB4hiROLRAeAsJD71eeO0svDUbyEAo+WMpU 1NGlfjFyYvn17KpRp1SucMP1MhfZCQr352HVVlQ7UhAXw0QqlbgDbwaDP3tOFm9S NLltM8t4ejqcHLm/v/V0HmjOPGAdd/dD7qWM0na6iNIG/Xsc9VpnU4bqYQwzVigr v1UWSl5kXBnXiJbA8U11Cb6ZoQBkCrr1nGoFjeoB7m0kFhvt5FtsDqFOaQz40FhW C9GvuTroYwqYGbs7SrqxGjyqITby6D+tgap97YK43h8oYW6i9JdM0WLBGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI/ecCR6EVYx5PaU7rSkXLIcP5tGMB8GA1UdIwQY MBaAFEd2r7dPrVuvCmGAtJUQ2LhJffjTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mNzFjYzItYjcxZC00NjY4LTg2NjEt MDUzOGU5NWYzZjEyLzEvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9mNzFjYzItYjcxZC00NjY4LTg2NjEtMDUzOGU5NWYzZjEy LzEvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFKXe8/7P 872c5Pbvg377lgLK8ppGmA7+bnaVd0GSo+kDgnmmrsudx22xweAUKY37ZZeQSZdE oz5hZQW51ZH6WAF3PUR7p5ewycWcol55fJkDaJmFF+KTiEOdvcKMkR52663VFb0K yTqg4LeTyCZTCmUVflf1vYfxCfKxMi0CPfsp6UZXU2/HD0vuVwc57pjqasbnfqmo /wjCq1Ayp6dMeUdXJMp3ms5n338sA5SO285ekaFD2F8vTBcxOUnwP5p+UmeFv8xK ASeocb0KtufHw1+vxUqz9gFgpeH5oX2p9mw0VaTfqdrxk0bcGifd4hl9DCSBcjyU McP2Tny4l2wRAA== -----END CERTIFICATE-----Generated at Wed May 7 14:19:09 2025 by rpki-client