$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft File: DJDDVuKGT0OJSFdENVXYtcA1KBk.mft (raw, json) Hash identifier: 4JVly/ZUtqHSQYA9RhbDdtE+MzZttWqu/1UNYQmzCpE= Subject key identifier: 40:E7:F0:04:20:E4:EC:06:98:C9:92:16:63:7A:FE:2A:B4:7F:BD:85 Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819 Certificate serial: 01969FE3C9DEEAA3CA94DE29868134B1356F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft Manifest number: 153B Signing time: Mon 05 May 2025 10:00:27 +0000 Manifest this update: Mon 05 May 2025 10:00:27 +0000 Manifest next update: Tue 06 May 2025 10:00:27 +0000 Files and hashes: 1: 7Pzqe98aO4BoBrbjEM8VyT6sS1M.roa (hash: njNZ21C9pluyh9z/aL31IWofBM1v+N+fPmyvHPndCq0=) 2: 90MmzVO4MvLdyb-AJQYr53vSOsE.roa (hash: 5J/pNqbP4sJI9fRD38vzW+V+FYiLCJKVNSYkNzbkDm4=) 3: 9GHN6GSMWh16APWbnq7wDsfKnn8.roa (hash: JH6A2KPyYk6kU9S+YXzBoAozjZCx1I1/FQIb22szn8c=) 4: A3yiMnUOTAMIYvHymHxcRRdl3pQ.roa (hash: stXGsXMD+FrQyZX4g7row6To+DPm5GuY/8GYAAv5+hY=) 5: DJDDVuKGT0OJSFdENVXYtcA1KBk.crl (hash: YAKOQCT8WETgOeZ4/zHaohYKBvbthb12dwsduTWZmAk=) 6: QQRJC_YG8r-4Cm4-FiDTcyGseMs.roa (hash: v9L1LzSv9+QS9AJyAVCgrR0utN6Qk2ha4KHx/OIWRBY=) 7: Rtm2eqjMuokQbFDH0uOZXue46j0.roa (hash: i+SxWKbKu33HD+1YPJSxFNXcAddtYFx5sKVQShwTd24=) 8: _eU7wK7pdUxRG2CXsHdjbv2SOXc.roa (hash: ZAIXppKunQur0KGtFLAbnwIeXUabVYHwA+qIIq12IRo=) 9: aTMRrwo9_4SayQ9D7LTyaVFK_Xc.roa (hash: +IcvkZ/Lt7dooQvX8ekK5PfLV+YRr5hiDK4PBIh/lAA=) 10: cObImnIoQoiLVyP9x--GVap2GkM.roa (hash: bO+Q27weBg0SDz9xPqlXo6tY9cdxQ8Yt4y7PlrRbjHY=) 11: fYrpElZs1NsSNrkwEfo6WNxBdRU.roa (hash: w1Z5VCOxpqbNZVNnJiTQLVLUsMOtA4kiHusU/VADD9E=) 12: rytOjYktSxYttWQbNzKnWNHr8kE.roa (hash: yLxz3XA2NehPKva17aTVpf9d8xx7CPICWNJXYP6IG3U=) 13: wz4Rxi2T5RISNbtekZKZj5gg7co.roa (hash: ZkBZlEwEIE4xANMo9oJsaqTSQA+2tjjnLN93XVxIic4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 May 2025 10:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:9f:e3:c9:de:ea:a3:ca:94:de:29:86:81:34:b1:35:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819 Validity Not Before: May 5 10:00:27 2025 GMT Not After : May 6 10:00:27 2025 GMT Subject: CN=40e7f00420e4ec0698c99216637afe2ab47fbd85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:55:87:93:f7:d5:a4:b9:df:4f:e1:1a:ee:9d: 21:21:2a:ec:62:07:c2:d8:2a:10:b9:74:7f:14:55: d0:37:16:fe:c6:6f:48:91:ca:4a:15:24:dc:85:79: df:e5:fc:f6:03:fd:bb:9b:7e:a2:4a:40:bd:d5:85: e9:b0:90:a1:56:01:97:78:fe:24:ce:f1:aa:8c:6e: 91:0c:01:1b:82:c4:d3:03:a4:26:1f:60:81:5a:77: 2b:a0:8a:7b:1b:0c:4d:58:31:36:f9:04:8f:d0:32: 37:81:e1:fc:ba:7e:97:0b:71:39:88:73:e7:92:4a: 38:13:ca:7b:d9:fd:77:25:9c:a4:b2:7f:7b:67:99: 2f:bb:3f:e6:6c:fb:91:c8:e8:6d:e7:45:a2:5d:ea: 54:8e:56:87:6f:ff:e4:61:d7:de:66:02:d5:17:83: 64:27:38:df:0e:be:d8:3b:cd:51:af:56:45:1c:64: b1:58:7a:04:80:57:2a:89:67:e3:a5:28:83:9e:58: 53:a8:21:09:12:65:4b:54:cf:94:91:61:f7:5e:9d: cb:99:70:b3:f6:b0:96:7e:b9:3f:5d:3e:bc:cf:e5: 59:90:80:37:2a:9e:b4:0d:13:6f:9f:47:0b:27:c6: 5e:4b:83:a8:e3:d9:3e:09:52:d3:93:c9:be:0a:0d: 88:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:E7:F0:04:20:E4:EC:06:98:C9:92:16:63:7A:FE:2A:B4:7F:BD:85 X509v3 Authority Key Identifier: keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:4b:ae:35:7d:07:88:71:be:32:23:6b:1a:ee:79:3d:15:1b: 13:22:9c:4a:5f:ec:7e:d8:6b:b8:3c:c2:aa:96:ca:fa:dc:70: 0f:f4:77:24:1b:52:86:0c:a2:9d:58:3e:58:5b:f0:c1:f7:3f: bd:65:1f:46:f3:b9:2a:8a:64:79:51:4d:a0:1d:47:89:4a:78: 16:f5:fd:4b:b8:06:90:c1:37:20:fe:89:1e:93:a9:e8:6a:fc: 85:11:79:48:9d:69:d9:7e:c2:eb:b5:87:c0:02:bd:85:76:f5: a8:83:15:92:a2:ed:ed:68:6d:71:c5:cd:0b:91:50:f2:f0:f4: a7:7b:2f:2b:8c:4e:65:8b:42:38:56:38:2d:f1:62:b7:0a:ee: b7:c5:0a:35:4a:18:51:13:ef:15:fb:a6:66:a3:c3:79:49:fa: 6c:6f:29:41:8e:2c:0e:24:e7:dc:d5:22:59:7d:14:92:93:6d: 7b:67:74:db:37:4c:c1:b5:5b:59:e8:5e:8d:09:f3:10:6b:30: 19:6f:64:ee:9c:0b:31:59:82:f1:cd:09:7e:ae:d9:e8:08:6c: dc:59:ce:f8:25:ac:83:aa:7c:cc:05:b6:d1:78:41:89:8e:2c: 34:63:62:41:34:c2:75:f8:2d:bd:0f:c9:47:46:6b:b1:bc:b0: 51:9e:93:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZaf48ne6qPKlN4phoE0sTVvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjOTBjMzU2ZTI4NjRmNDM4OTQ4NTc0NDM1NTVkOGI1YzAz NTI4MTkwHhcNMjUwNTA1MTAwMDI3WhcNMjUwNTA2MTAwMDI3WjAzMTEwLwYDVQQD Eyg0MGU3ZjAwNDIwZTRlYzA2OThjOTkyMTY2MzdhZmUyYWI0N2ZiZDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVWHk/fVpLnfT+Ea7p0hISrsYgfC 2CoQuXR/FFXQNxb+xm9IkcpKFSTchXnf5fz2A/27m36iSkC91YXpsJChVgGXeP4k zvGqjG6RDAEbgsTTA6QmH2CBWncroIp7GwxNWDE2+QSP0DI3geH8un6XC3E5iHPn kko4E8p72f13JZyksn97Z5kvuz/mbPuRyOht50WiXepUjlaHb//kYdfeZgLVF4Nk JzjfDr7YO81Rr1ZFHGSxWHoEgFcqiWfjpSiDnlhTqCEJEmVLVM+UkWH3Xp3LmXCz 9rCWfrk/XT68z+VZkIA3Kp60DRNvn0cLJ8ZeS4Oo49k+CVLTk8m+Cg2IMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEDn8AQg5OwGmMmSFmN6/iq0f72FMB8GA1UdIwQY MBaAFAyQw1bihk9DiUhXRDVV2LXANSgZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDct ZTM3OTlhZGU5ZGZlLzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDctZTM3OTlhZGU5ZGZl LzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY0uuNX0H iHG+MiNrGu55PRUbEyKcSl/sfthruDzCqpbK+txwD/R3JBtShgyinVg+WFvwwfc/ vWUfRvO5KopkeVFNoB1HiUp4FvX9S7gGkME3IP6JHpOp6Gr8hRF5SJ1p2X7C67WH wAK9hXb1qIMVkqLt7WhtccXNC5FQ8vD0p3svK4xOZYtCOFY4LfFitwrut8UKNUoY URPvFfumZqPDeUn6bG8pQY4sDiTn3NUiWX0UkpNte2d02zdMwbVbWehejQnzEGsw GW9k7pwLMVmC8c0Jfq7Z6Ahs3FnO+CWsg6p8zAW20XhBiY4sNGNiQTTCdfgtvQ/J R0ZrsbywUZ6TDw== -----END CERTIFICATE-----Generated at Mon May 5 15:08:03 2025 by rpki-client