$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft File: _zFJJHOnjG_p9Tn5-n0iUlYKK34.mft (raw, json) Hash identifier: yx31PtAZhCZsCVgiG81nxfJroopC9rnD6I/ZP0Zuyyg= Subject key identifier: 36:C9:81:C1:E9:A5:44:77:A0:CA:8A:62:7D:D8:C5:F3:C8:B8:9C:8D Authority key identifier: FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E Certificate issuer: /CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e Certificate serial: 0196BC00923B01ABE31B08CE1E9C516EAFC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft Manifest number: 14F8 Signing time: Sat 10 May 2025 21:01:16 +0000 Manifest this update: Sat 10 May 2025 21:01:16 +0000 Manifest next update: Sun 11 May 2025 21:01:16 +0000 Files and hashes: 1: 9qi9h0f9RsAWpZuFc_s4Cmk2M0A.roa (hash: b6ycNMYfYTSq+8wwlth6XhXq2jeSDZcud5rVJF56Fyg=) 2: D-zKhuWPkxLy8zaYbK0D0Frw7ec.roa (hash: w8bSqTQlhfxtATfQh4eWS/eZa2u3cEwYUnWnj6COmyg=) 3: F_cRK7_FuJ1SOPF-eStGPWamodQ.roa (hash: bwgPCaYQdCUVOLDgCvOHRKGxaq7IRtIbjKPrwDwOiGI=) 4: JaFKfYKslg0WUVhBG8hHu6LqTvw.roa (hash: 4GgDdTVxQxqewTP0EOz1RIPWIQ2EEWazgc1qxopxzyA=) 5: NiD2SDjoMC5kCqhJ0LqUs7rzMnw.roa (hash: 9+KHXzf6QQ6hX/XBCMhmaRntprEYELpBh7Oa+Qw01T4=) 6: U6O4fPn6akIpWmgc4yJT0O6kLpo.roa (hash: yofA2VyhfSO3CESlgcLfFamVAKarRdUA7fzOcVSh6T0=) 7: _zFJJHOnjG_p9Tn5-n0iUlYKK34.crl (hash: YNXjDAT+eApEtxXaZahd9V2pnGCwvh/xfPt2K+9ZE5c=) 8: ktD6AyHksOCblKN9a3qVRt27m9o.roa (hash: V5QNEtlJtM9vZYXeCjRbhyFbWnet1Vj6bUBis/VvlnY=) 9: u3VJR1_M7JzYx842qLGTM0en5V0.roa (hash: qbP/xDwKS1NUr1YSZhW1L+ZrVrT39XIk/W4+EAm8kOI=) 10: y4Nw6VYuIuUZOv6I685fKqZhbWQ.roa (hash: JM0RAslsFdrhEKUBmY+ywDM/Jo6q24Igd7pWLFOkC9Q=) 11: y59FYS6lZrG-f16cItpm531MOXQ.roa (hash: m/cQn2JcKJOMV46aRM88IL5ucBeWO1CQAwW+N3Yj5A4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 May 2025 21:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:bc:00:92:3b:01:ab:e3:1b:08:ce:1e:9c:51:6e:af:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e Validity Not Before: May 10 21:01:16 2025 GMT Not After : May 11 21:01:16 2025 GMT Subject: CN=36c981c1e9a54477a0ca8a627dd8c5f3c8b89c8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cd:61:3a:0d:90:23:32:6c:07:33:a0:0c:87: 55:17:95:6b:de:25:d1:b8:23:17:1d:70:62:d5:fe: 95:40:5c:00:57:5e:43:a2:21:6c:94:59:0c:fe:07: 2c:29:73:d3:e4:58:41:a3:d7:03:0a:2e:f6:a5:b4: 9b:05:bd:a0:7f:2a:43:be:9c:1c:40:da:8c:c3:17: 7d:f3:0e:1f:d1:2b:18:0a:53:9f:6c:3c:ae:8f:c5: 11:2e:3c:ea:02:97:c7:f3:7b:6f:79:e7:29:5b:07: c1:4a:ff:83:86:6e:14:ad:57:75:8c:8a:27:e1:4e: 5d:bb:8c:5a:9a:7b:28:08:e3:13:2f:09:32:f7:42: 49:e9:a0:2d:21:ff:20:36:86:b2:dd:4c:5a:8c:24: 1e:e9:bb:87:1e:68:a1:b2:d1:99:68:88:ac:c6:b1: 2b:18:f4:ff:99:23:b9:4a:6c:28:9b:a9:0f:3f:55: a3:72:53:62:a6:b6:f6:cc:e5:7c:ca:41:f9:4b:c4: 7b:fa:46:26:13:32:b4:66:be:16:81:16:d4:2a:a6: d5:2c:5c:a6:f7:cf:6f:d0:19:0a:2b:9e:da:a8:0f: 3b:98:93:c2:5b:32:04:bc:73:ba:d3:90:9d:62:02: 42:55:50:28:3d:4c:d0:e9:34:21:30:c9:ea:82:54: cc:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:C9:81:C1:E9:A5:44:77:A0:CA:8A:62:7D:D8:C5:F3:C8:B8:9C:8D X509v3 Authority Key Identifier: keyid:FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:c0:3c:fe:43:11:cb:52:e5:6a:26:e9:b6:c2:16:09:65:d8: 60:63:f7:78:1c:87:6a:cc:e8:35:0e:38:6c:bf:e8:02:36:f5: d8:d9:2b:18:4f:da:3d:45:10:40:6c:d8:f2:b3:43:af:42:80: ad:2b:53:bb:59:07:fb:c5:6d:0b:c3:a3:9c:14:ca:a6:ac:0a: ad:20:27:c1:92:f9:f6:2b:9c:3d:18:47:f4:4a:9a:2b:4c:3c: 66:74:f8:73:dd:cf:ad:9a:4c:76:8c:2e:0c:f0:99:db:53:30: dd:30:83:d9:46:76:1e:12:82:e3:12:65:8e:7c:db:47:09:3c: 29:fa:a2:f3:5e:73:03:6e:11:22:92:95:e1:34:ff:9a:d5:84: cd:9e:4b:07:21:6a:85:f9:23:2e:36:11:9b:50:ac:97:a7:9b: 69:fa:83:04:8a:15:37:f7:70:b4:64:92:d9:f3:ac:cd:d6:f5: 9e:cc:e7:cc:5a:e1:35:9a:a1:f2:cc:36:1f:ee:1f:9f:91:9f: 2d:91:6d:e6:d7:f3:0f:bc:c7:f4:b0:8b:18:94:92:65:ea:f3: 13:6e:b0:6d:8f:81:64:79:ab:75:ad:b6:2c:fb:95:80:4c:0d: 08:b7:41:83:45:9f:a9:7d:01:9d:00:92:3e:ee:99:49:25:21: d5:9b:de:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa8AJI7AavjGwjOHpxRbq/EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMzE0OTI0NzNhNzhjNmZlOWY1MzlmOWZhN2QyMjUyNTYw YTJiN2UwHhcNMjUwNTEwMjEwMTE2WhcNMjUwNTExMjEwMTE2WjAzMTEwLwYDVQQD EygzNmM5ODFjMWU5YTU0NDc3YTBjYThhNjI3ZGQ4YzVmM2M4Yjg5YzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArM1hOg2QIzJsBzOgDIdVF5Vr3iXR uCMXHXBi1f6VQFwAV15DoiFslFkM/gcsKXPT5FhBo9cDCi72pbSbBb2gfypDvpwc QNqMwxd98w4f0SsYClOfbDyuj8URLjzqApfH83tveecpWwfBSv+Dhm4UrVd1jIon 4U5du4xamnsoCOMTLwky90JJ6aAtIf8gNoay3UxajCQe6buHHmihstGZaIisxrEr GPT/mSO5Smwom6kPP1WjclNiprb2zOV8ykH5S8R7+kYmEzK0Zr4WgRbUKqbVLFym 989v0BkKK57aqA87mJPCWzIEvHO605CdYgJCVVAoPUzQ6TQhMMnqglTM1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDbJgcHppUR3oMqKYn3YxfPIuJyNMB8GA1UdIwQY MBaAFP8xSSRzp4xv6fU5+fp9IlJWCit+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDct NzNmZDNiYzE5YWE3LzEvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDctNzNmZDNiYzE5YWE3 LzEvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFsA8/kMR y1LlaibptsIWCWXYYGP3eByHaszoNQ44bL/oAjb12NkrGE/aPUUQQGzY8rNDr0KA rStTu1kH+8VtC8OjnBTKpqwKrSAnwZL59iucPRhH9EqaK0w8ZnT4c93PrZpMdowu DPCZ21Mw3TCD2UZ2HhKC4xJljnzbRwk8Kfqi815zA24RIpKV4TT/mtWEzZ5LByFq hfkjLjYRm1Csl6ebafqDBIoVN/dwtGSS2fOszdb1nsznzFrhNZqh8sw2H+4fn5Gf LZFt5tfzD7zH9LCLGJSSZerzE26wbY+BZHmrda22LPuVgEwNCLdBg0WfqX0BnQCS Pu6ZSSUh1ZveBg== -----END CERTIFICATE-----Generated at Sun May 11 00:52:54 2025 by rpki-client