$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft File: Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft (raw, json) Hash identifier: xHBhhUO31typaUpPprkRfzpmZBzIjuK3a4QDMillFA4= Subject key identifier: 71:2E:9E:5D:DC:DD:3C:79:C5:52:B0:C2:37:17:A3:63:90:74:0F:AA Authority key identifier: 65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 Certificate issuer: /CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Certificate serial: 0196AB7A8D7DEEC4AAC34D49D46CA9529278 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft Manifest number: 1538 Signing time: Wed 07 May 2025 16:00:57 +0000 Manifest this update: Wed 07 May 2025 16:00:57 +0000 Manifest next update: Thu 08 May 2025 16:00:57 +0000 Files and hashes: 1: 3LyGnKUrtS-bd3Yu3eH07LtQYR8.roa (hash: 5NomKYbD4FvnokbGtOTNPOIwbgTTBvKVyFQCl7SiC8k=) 2: 9OAY-jOw3emNDTJkwHz_aLBHU-o.roa (hash: Ah56S4YsKlRsIR5ZtCQAkBkQPPjwEJPdV91cqnHgQHo=) 3: D3HyRH4gt8I3AVc_11aVtLDHXXs.roa (hash: LthCRx/kLSoC/Gm2fuPju175Bc+44KoK1FGNtCDpOFQ=) 4: JdgLX_rDpFXbn3g6ck-3xVrnTaU.roa (hash: TOSlGfMktZDLi6DZuPyngZmNUQUQKAMWa3FBKS2yrIU=) 5: PFJiD8MLfnakL2mkAANmOoeHGUU.roa (hash: a0vpttSq3cgxQGvU/dz1eOxNhQQQu/dzUi1jCTAXGlI=) 6: RVJ3nIJEBcWZXpWb3MnSUCFA2iY.roa (hash: M8lbfWsAGSkoDl5BWQQZtTG7pQkMrZk5UuquwmgmkYY=) 7: XlUV47Af6RgAqHn9dKADpSmWXow.roa (hash: DZ3ovpHgXP4fdA9+Ev+RMAFLM7kbC/ZH4RHrYqXrnFs=) 8: Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl (hash: nKh3I0rJ3r15d6ub0YZlGG/qOgAsH5JCq8echCUFdgw=) 9: Zf59mhwN1S3gDhITine9rGoU1mI.roa (hash: ItAmoJjJI8759vV0N2ep7BAGBNMWntj11jBxYRrpcMA=) 10: qSRUcx1mNfKDgalh8O503kQbSt8.roa (hash: +4A/h9qJjo7DqqpmkiX09AgpoyXjjM+9hCnj8Lt2uqI=) 11: r6uPDA9vlEWT9sYoVFzM7GHgFa8.roa (hash: t27IhHRMBSQR6oORXFY/8Mn45oNpwsdletkYrs42U2g=) 12: u8s9HEkKaDRnfwCA4Fp1WEQGANU.roa (hash: D38pH0rgh3xNzyToMjwZsTzhvLlwYeEp9O/fE2rpcks=) 13: zNNg038UFfEY9NFH791kAGkTEyQ.roa (hash: DPthEHZwIWuER39PoW1q82KX77P15O59a2/uPQsrelg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 May 2025 13:31:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:ab:7a:8d:7d:ee:c4:aa:c3:4d:49:d4:6c:a9:52:92:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Validity Not Before: May 7 16:00:57 2025 GMT Not After : May 8 16:00:57 2025 GMT Subject: CN=712e9e5ddcdd3c79c552b0c23717a36390740faa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:da:1a:81:17:cc:5a:e2:ad:0f:f7:b3:71:e6: aa:d0:a5:51:12:d5:02:ce:e2:8f:6c:27:ce:8f:3e: 03:28:b6:5c:fd:11:0f:ce:5b:a3:1b:be:f7:a5:9a: c5:65:19:35:08:0a:f6:ab:7e:b7:ef:9c:85:30:54: 2c:81:f5:40:17:e7:24:76:e8:23:fc:77:50:6d:8b: 96:fc:e7:31:66:f5:37:dd:07:24:17:6b:df:29:cb: 96:47:a4:ef:99:0f:8a:15:7f:e8:87:69:c3:9e:23: 95:06:9c:36:fb:af:36:6b:c1:6d:4e:30:8a:b9:dd: 85:fc:0d:be:36:13:8d:6b:18:f2:22:59:7a:a8:0c: 9b:95:2a:94:f6:5d:1a:01:4c:3f:d2:3b:56:8d:bb: fc:d8:82:7a:fe:c6:57:ac:29:61:bc:10:62:c1:18: ff:c3:bb:04:fb:cf:5b:d3:7b:68:b8:70:a9:f0:18: 9b:6d:a5:d0:54:be:fd:24:b7:fc:2e:b2:27:54:50: 15:45:91:05:7d:0b:1d:bd:0e:19:52:8a:43:88:66: 6c:49:1e:8c:bf:7f:d4:8f:d1:a1:54:4c:8b:84:4e: b4:c4:89:05:11:f8:b0:18:84:0c:c5:2a:f5:ac:e2: 99:61:7d:ae:83:45:fc:28:4b:4a:07:93:8a:7a:21: 06:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:2E:9E:5D:DC:DD:3C:79:C5:52:B0:C2:37:17:A3:63:90:74:0F:AA X509v3 Authority Key Identifier: keyid:65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:d2:26:ac:6f:fa:3b:07:2e:68:5f:c0:12:fe:9b:d6:9d:74: 46:ea:bb:62:25:64:11:18:d9:20:62:3e:4d:41:76:f9:83:ce: 84:6b:b4:3c:bb:9f:1f:40:4b:48:d2:c3:7d:ed:7a:21:40:dc: c9:d8:53:39:25:08:16:fd:74:fa:83:ca:e4:42:9f:62:8c:f6: d5:be:02:3b:b7:01:51:ba:0b:d6:67:2e:51:46:22:cc:f4:62: 45:fc:d1:15:0a:25:1f:eb:34:9f:d2:f9:b3:21:96:9c:a6:2c: a6:6a:cc:36:20:0a:b0:61:f2:3d:12:ce:b6:c6:89:0f:c1:1d: c2:e3:7b:28:08:1a:78:26:b4:60:f5:5e:54:f1:82:a4:76:7a: 6d:63:63:e5:65:51:c1:51:cd:0b:cc:36:8a:8a:ec:e3:34:c5: cb:9e:3d:47:e6:8e:a8:ef:ae:90:ea:30:a5:56:ae:25:fe:58: 03:26:a4:99:32:a9:51:c2:e2:b6:68:6c:de:b7:7a:01:8e:37: b1:e3:fe:ad:19:c8:f4:bf:0a:50:95:db:aa:3c:9d:9f:85:6a: 49:3c:bd:d4:af:b7:8a:89:69:42:c8:3a:9e:85:52:50:b5:78: 47:f5:94:ca:1d:1a:5a:57:5d:9d:20:aa:6f:a9:6e:9c:9c:b7: 72:f3:a7:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZareo197sSqw01J1GypUpJ4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YmRjZmY3N2JmMDYwZDVkYTEyZGU0NWUyMDcyZTFjZmY0 NTYwYTcwHhcNMjUwNTA3MTYwMDU3WhcNMjUwNTA4MTYwMDU3WjAzMTEwLwYDVQQD Eyg3MTJlOWU1ZGRjZGQzYzc5YzU1MmIwYzIzNzE3YTM2MzkwNzQwZmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9NoagRfMWuKtD/ezceaq0KVREtUC zuKPbCfOjz4DKLZc/REPzlujG773pZrFZRk1CAr2q36375yFMFQsgfVAF+ckdugj /HdQbYuW/OcxZvU33QckF2vfKcuWR6TvmQ+KFX/oh2nDniOVBpw2+682a8FtTjCK ud2F/A2+NhONaxjyIll6qAyblSqU9l0aAUw/0jtWjbv82IJ6/sZXrClhvBBiwRj/ w7sE+89b03touHCp8BibbaXQVL79JLf8LrInVFAVRZEFfQsdvQ4ZUopDiGZsSR6M v3/Uj9GhVEyLhE60xIkFEfiwGIQMxSr1rOKZYX2ug0X8KEtKB5OKeiEGFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHEunl3c3Tx5xVKwwjcXo2OQdA+qMB8GA1UdIwQY MBaAFGW9z/d78GDV2hLeReIHLhz/RWCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYt ZDcwY2Q5N2Y0ODU3LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYtZDcwY2Q5N2Y0ODU3 LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVdImrG/6 OwcuaF/AEv6b1p10Ruq7YiVkERjZIGI+TUF2+YPOhGu0PLufH0BLSNLDfe16IUDc ydhTOSUIFv10+oPK5EKfYoz21b4CO7cBUboL1mcuUUYizPRiRfzRFQolH+s0n9L5 syGWnKYspmrMNiAKsGHyPRLOtsaJD8EdwuN7KAgaeCa0YPVeVPGCpHZ6bWNj5WVR wVHNC8w2iors4zTFy549R+aOqO+ukOowpVauJf5YAyakmTKpUcLitmhs3rd6AY43 seP+rRnI9L8KUJXbqjydn4VqSTy91K+3iolpQsg6noVSULV4R/WUyh0aWlddnSCq b6lunJy3cvOnHA== -----END CERTIFICATE-----Generated at Wed May 7 17:55:09 2025 by rpki-client