$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft File: 437h7O0Z-KCjpjW_qiZCk-NDd5U.mft (raw, json) Hash identifier: PN2pVWIwoHbuJY7QGDGsxRr975DDVp6AAmdvwQtYq5I= Subject key identifier: 9C:D0:14:5F:87:6E:63:C3:05:3D:B4:FA:B2:AF:2B:45:1E:B8:4F:8F Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95 Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795 Certificate serial: 0196C2022352B8611F189636AB98FD7D9812 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft Manifest number: 155E Signing time: Mon 12 May 2025 01:00:41 +0000 Manifest this update: Mon 12 May 2025 01:00:41 +0000 Manifest next update: Tue 13 May 2025 01:00:41 +0000 Files and hashes: 1: 1-gMcB2tX1aJagc2aIqyie1JosUM.roa (hash: e/zYIsHTFYDxeTkK5hyPfn+knzLFEB1hZl3ZQmxyCc0=) 2: 437h7O0Z-KCjpjW_qiZCk-NDd5U.crl (hash: OEQZvgRvvyXQuJxDMYGsw4GNid/0/uKBZNc5DI6g5N0=) 3: 9eNXipbIkyVdZ3T8NqmEYXwSLqE.roa (hash: BrQPu/EjsIQipBfThN07mTNPYYMcHP60+6UvtDcOjIw=) 4: EFuxyCYga5KedfhIetzIM8Wqp3Y.roa (hash: O+IR1hZ8a8RGzU0SmSAJy1+brABxzqq2amGl3toGZFo=) 5: HCRZ7kidZrpHRM8SX0jXI98_QOg.roa (hash: HUPg13X8WTvtMO+SgQO0HEMJKkRMS4NI1byIhfG01j4=) 6: JS9UWtZttem3o1fXhyj6cDhffLI.roa (hash: 2i5hM4JyTJhdNStU0tEfjgguQh3ME+ydQZVTRw+h18A=) 7: RX5TjbcaEwYk1IhE69eAlXBXNyQ.roa (hash: c0wkjrnxIEHQj5HUBmajY9pyKvCItPr80kJiD5UVJ6c=) 8: TxnmQLTJ7RG9p8EWlmGMzoVFKYM.roa (hash: ya4Fhh2AAgBvWI3PefXXRZJhuG79XQoe+sEudA3lm48=) 9: Ug41i06gdv9Ukc46NZ5XcrOupdE.roa (hash: llRNNcmXFkFqLY4QgsxGuCXjBef7WAi2K7CKwj9Mkc8=) 10: _z7lUoI1zB7ijV7HBhNzAOg7hvI.roa (hash: /vONE0L2m45mBqfcuw95QHCPgC/SgADGzcrX8+7SrZY=) 11: btFiCRe6ijn7iG7FxViTiaat_Ss.roa (hash: LM2pD9aQd87JsY0EO+NGidT06PsoOqy+c+K8ZJnFpLQ=) 12: iTq1k1-n5HC3mDH6yOxsGqky0UI.roa (hash: AGbGIRgcWmrYfxQjlQUEIVcfb2QPCldn/oJ/TJ7MR/A=) 13: ijEqoAEZpU0XwucBGAsnbQDDdNw.roa (hash: JCAoDA+s8OPB6Om2MtNX+ndsLOblJSylnwNeZbS7ZEI=) 14: oUN6hm9XIH9hez7uSosGEeiTS64.roa (hash: O2lJOrBjeZAv4ECvJJ0xPhkbtSeFQ6Qb6tFoYeeLtF0=) 15: rHz8kaauSx9yjUtMHgkc7yNJ95o.roa (hash: PhKHXgs0bJsWkyri4OmHbJXKHUs8Dv3fw5JQFOIgfUI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 May 2025 01:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:c2:02:23:52:b8:61:1f:18:96:36:ab:98:fd:7d:98:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795 Validity Not Before: May 12 01:00:41 2025 GMT Not After : May 13 01:00:41 2025 GMT Subject: CN=9cd0145f876e63c3053db4fab2af2b451eb84f8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0f:ca:16:dc:ec:a5:31:11:84:bf:d7:c0:74: ad:86:2a:9f:d5:70:f6:e8:48:9e:3f:3d:f2:fc:21: 1e:25:77:11:11:5e:03:0c:99:a4:c2:4c:c7:9d:0c: 8b:a4:c8:2b:f2:33:b3:34:75:e6:75:75:27:38:fa: b1:ff:8a:7b:ba:cd:24:44:79:d0:a9:25:1b:ca:3c: b2:db:58:69:a4:2e:74:5e:96:96:66:fd:92:3b:37: 1d:e2:0d:45:0d:38:31:1e:7c:c7:0c:92:05:3d:43: 30:48:4c:80:74:2c:97:fd:1a:7d:c0:c8:f4:46:10: f1:09:01:5a:c0:a2:2b:dd:4f:d5:ed:e3:fa:2f:10: 6a:f1:c9:46:a6:94:42:f7:83:bd:18:df:fe:a6:ac: af:89:7a:37:98:42:0b:b2:6c:79:74:f1:02:3c:f3: d1:1f:fc:99:70:db:df:06:f6:88:ab:63:ea:2d:b5: 64:a4:e9:37:e8:02:be:2e:93:bc:54:33:32:aa:dc: c0:d4:05:94:a8:81:34:6e:19:06:ed:37:60:85:7c: 1d:f7:e2:0e:f9:f2:66:4b:6b:09:ee:d5:74:3c:62: f9:48:d6:68:ef:65:d2:04:19:6e:51:8b:1e:1f:39: a3:3f:e5:07:39:79:73:8c:59:db:de:ab:44:1b:4e: 3a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:D0:14:5F:87:6E:63:C3:05:3D:B4:FA:B2:AF:2B:45:1E:B8:4F:8F X509v3 Authority Key Identifier: keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:5e:4d:1b:3b:aa:12:ad:16:07:a6:2a:e5:15:fd:3b:76:5c: 9c:e8:aa:0a:04:9a:8d:2e:a2:44:34:6e:fa:b3:5b:46:21:12: 95:4a:7d:4c:c6:f1:1b:3e:f6:a7:6f:9e:ac:78:2a:e8:b8:04: 4f:8e:66:05:bf:3b:7d:40:f7:8f:01:ec:2b:be:75:7b:4c:94: a0:d5:3f:0a:74:80:7c:9d:f6:8b:35:b3:87:80:62:37:7d:dd: d2:6a:99:81:eb:c8:45:53:89:c1:b0:83:63:5f:50:6c:e6:9a: 96:13:28:cf:1c:58:b1:70:5c:f2:84:44:8c:af:9c:1f:58:8e: e7:d0:52:b7:87:f5:46:53:c9:23:d4:4d:11:5f:93:1d:94:e4: 89:f6:c2:83:26:04:2e:03:58:fc:56:ac:22:be:59:2c:51:ff: 20:8d:9a:b4:b9:f6:ed:28:6a:e9:cd:3d:2c:f3:4c:b6:1e:d0: 4b:9f:f0:ec:97:01:1e:48:dc:d8:f3:5a:53:28:16:88:de:5d: 01:a3:f3:48:ae:7b:bc:86:28:79:df:a2:96:c8:59:fe:51:e3: ae:fa:69:ad:b2:97:41:ad:bf:00:69:50:28:64:dd:b0:a9:c2: 19:b3:21:7e:86:e7:36:23:ab:dc:ee:7a:41:bd:aa:2c:74:17: ef:45:00:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZbCAiNSuGEfGJY2q5j9fZgSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzN2VlMWVjZWQxOWY4YTBhM2E2MzViZmFhMjY0MjkzZTM0 Mzc3OTUwHhcNMjUwNTEyMDEwMDQxWhcNMjUwNTEzMDEwMDQxWjAzMTEwLwYDVQQD Eyg5Y2QwMTQ1Zjg3NmU2M2MzMDUzZGI0ZmFiMmFmMmI0NTFlYjg0ZjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApg/KFtzspTERhL/XwHSthiqf1XD2 6EiePz3y/CEeJXcREV4DDJmkwkzHnQyLpMgr8jOzNHXmdXUnOPqx/4p7us0kRHnQ qSUbyjyy21hppC50XpaWZv2SOzcd4g1FDTgxHnzHDJIFPUMwSEyAdCyX/Rp9wMj0 RhDxCQFawKIr3U/V7eP6LxBq8clGppRC94O9GN/+pqyviXo3mEILsmx5dPECPPPR H/yZcNvfBvaIq2PqLbVkpOk36AK+LpO8VDMyqtzA1AWUqIE0bhkG7TdghXwd9+IO +fJmS2sJ7tV0PGL5SNZo72XSBBluUYseHzmjP+UHOXlzjFnb3qtEG046wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJzQFF+HbmPDBT20+rKvK0UeuE+PMB8GA1UdIwQY MBaAFON+4eztGfigo6Y1v6omQpPjQ3eVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMt MzZlMzQ0YWJjOWQzLzEvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMtMzZlMzQ0YWJjOWQz LzEvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV15NGzuq Eq0WB6Yq5RX9O3ZcnOiqCgSajS6iRDRu+rNbRiESlUp9TMbxGz72p2+erHgq6LgE T45mBb87fUD3jwHsK751e0yUoNU/CnSAfJ32izWzh4BiN33d0mqZgevIRVOJwbCD Y19QbOaalhMozxxYsXBc8oREjK+cH1iO59BSt4f1RlPJI9RNEV+THZTkifbCgyYE LgNY/FasIr5ZLFH/II2atLn27Shq6c09LPNMth7QS5/w7JcBHkjc2PNaUygWiN5d AaPzSK57vIYoed+ilshZ/lHjrvpprbKXQa2/AGlQKGTdsKnCGbMhfobnNiOr3O56 Qb2qLHQX70UA5g== -----END CERTIFICATE-----Generated at Mon May 12 11:22:46 2025 by rpki-client