$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft File: pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft (raw, json) Hash identifier: vLGCri/x8AacXkGFm3FNldfa6MuNrTs7frn9fXlWF2c= Subject key identifier: 8B:17:D1:71:5A:BB:53:44:42:A7:3A:DC:CF:50:6E:ED:AD:80:E1:1B Authority key identifier: A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60 Certificate issuer: /CN=a608db43964b6986ec740f0b5e33f627589ac560 Certificate serial: 0196A8791586F57FDEAA4A4578EDD7E5B50E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft Manifest number: 152F Signing time: Wed 07 May 2025 02:00:29 +0000 Manifest this update: Wed 07 May 2025 02:00:29 +0000 Manifest next update: Thu 08 May 2025 02:00:29 +0000 Files and hashes: 1: I3mgQ157a_bF2dTxc-vf7pMJtM4.roa (hash: 7UAHNapwwX16Slile1RjKMtt2nkeBVUncM7zwsYLT8w=) 2: MHgro3rXC3LA-ZCKp8QuaVCuDNM.roa (hash: sXYt7ycXFJCXAbuucaVo5/ccp47LCDa9LjtriRMFWXQ=) 3: PBXMgqYnsJA87BxLSTiMQaCiTQM.roa (hash: wzJgz/i9pbuBUkW2cHLEeF8EDXUdrOLSSMmRBwjvuyY=) 4: W9Inx9ixKUML_LOXnUHyVFrXNZE.roa (hash: Hce+QeLL7wTflcLdNV6AIKOI7Oh5vFKC0Lzm+giAD4k=) 5: aXYA7UmSga-uAKN3mA-MrcLvQNw.roa (hash: A6mLEC8I6HDPu8tLJ0OvOtzb6OIQimg3DdB4KG2uaDU=) 6: ci5DKE54eT5iN_nAPc-7X1GldFI.roa (hash: XQ0NDtKbc4dG/tVRbQc3pC1EJxNFS1iSTeQJD2B3KrE=) 7: gGa9g3xm-WUrWGnZqfKZudqy63U.roa (hash: gMhH5wVZGQUaR4GjDTcIjxc58KL7jUF42zUcWUMJNmY=) 8: hK0B_1bjDs4SgkjuewwBu_Hyp1Q.roa (hash: P1SdgqhUGccV0nstYPHl8zR8nqe1TrQ9TkFifIcHjeo=) 9: pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl (hash: Q4GX2cNCksC06PShVr+KdBM3EPy15Qhy+T97EJKsycA=) 10: rWecwzOy_r05COuEiZl4KWht5j4.roa (hash: APFZzX7MSHk1ET0fGFHAZgyisv5z2ZfhR0L4cxUpeKo=) 11: zVSaKUExhHJLuuGxs99kYQGdQi0.roa (hash: kRzk6R6AO4mRz5HhKteUKae1kEl/X9QjV+pW67bmw5E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 May 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:a8:79:15:86:f5:7f:de:aa:4a:45:78:ed:d7:e5:b5:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a608db43964b6986ec740f0b5e33f627589ac560 Validity Not Before: May 7 02:00:29 2025 GMT Not After : May 8 02:00:29 2025 GMT Subject: CN=8b17d1715abb534442a73adccf506eedad80e11b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:41:18:ae:da:9f:19:7f:60:3b:0e:44:da:52: 23:12:33:cc:64:19:62:03:55:7b:99:df:b4:7c:94: 2b:0c:de:23:33:95:cf:4e:d5:fd:4a:3e:e5:0c:65: f1:3c:61:87:74:6c:3b:c2:d7:27:dd:4f:ff:eb:74: b2:ad:74:2a:ec:ea:f4:37:74:9e:f1:33:0a:77:3a: f8:6f:bd:9d:7e:35:12:20:5a:40:db:62:7c:58:f7: 87:6d:36:90:ac:da:f8:da:e2:04:72:3c:9d:6a:83: 5e:e5:12:b8:be:75:c8:ec:9a:58:ef:6c:88:37:35: c5:4c:df:5f:dd:b7:36:82:7a:ea:e2:ab:41:d4:3f: ad:d2:cb:2b:e1:18:25:79:c0:c9:ac:9d:f9:51:3f: 22:b3:23:60:b0:56:51:7f:5f:b7:d9:ae:4f:f8:82: f8:71:9c:08:97:f6:76:44:06:8c:f1:10:c3:d5:70: 1d:db:9b:0e:0c:d5:8d:ba:f1:a6:c7:a1:4d:43:c3: ed:3d:cc:5b:d7:a6:a4:d6:cb:88:3f:5c:c7:3f:5e: af:d2:83:b9:73:30:26:bc:41:93:87:99:b4:17:82: 64:a4:63:1f:59:85:6b:e3:1b:52:a1:31:fb:84:52: 30:f8:9e:16:70:1f:f3:c7:56:ee:2c:88:fa:6e:a9: c4:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:17:D1:71:5A:BB:53:44:42:A7:3A:DC:CF:50:6E:ED:AD:80:E1:1B X509v3 Authority Key Identifier: keyid:A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:33:5b:03:2d:07:5d:04:0d:6e:c1:1d:33:c2:dc:ca:76:b6: 70:5f:ff:32:33:02:54:bb:92:a7:7d:8f:17:54:5e:45:4b:cc: 92:53:a8:bf:b2:27:5f:e8:5a:ea:e4:13:51:64:ae:91:fb:0c: 31:91:ab:5d:04:d2:e8:1e:ce:52:f8:51:b6:b1:9a:40:16:af: fb:5c:a6:91:08:b5:5c:b6:d6:82:05:7f:22:a6:be:31:48:55: 1d:c5:4d:fa:f6:5f:ba:4b:4a:84:0c:8f:cd:33:84:76:a4:c1: d6:77:1e:03:b3:0c:0a:9b:3f:49:d2:47:8e:4c:fb:8f:06:e0: 4b:f7:51:72:27:c5:63:72:5a:bc:d7:a1:f0:b6:bd:04:01:0d: 53:3b:2b:34:ab:b5:46:44:bb:26:11:b8:9e:0b:2e:a0:32:6f: 09:5c:a0:3a:90:d0:f7:8c:05:8d:8b:53:fa:c6:fc:7c:d0:c9: 72:3e:7b:3a:29:18:89:e8:3b:3d:8d:9f:fa:d2:30:0e:64:d2: c7:1f:60:af:ad:d0:78:57:c0:23:8c:8b:16:6b:da:d6:c5:29: d4:0d:cc:97:fa:ac:6b:43:ea:f6:c4:7e:68:5d:1e:d3:db:ed: 45:0b:65:c2:51:42:0f:83:35:98:6e:52:b3:e2:73:d6:86:77: 05:e7:2a:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZaoeRWG9X/eqkpFeO3X5bUOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MDhkYjQzOTY0YjY5ODZlYzc0MGYwYjVlMzNmNjI3NTg5 YWM1NjAwHhcNMjUwNTA3MDIwMDI5WhcNMjUwNTA4MDIwMDI5WjAzMTEwLwYDVQQD Eyg4YjE3ZDE3MTVhYmI1MzQ0NDJhNzNhZGNjZjUwNmVlZGFkODBlMTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEEYrtqfGX9gOw5E2lIjEjPMZBli A1V7md+0fJQrDN4jM5XPTtX9Sj7lDGXxPGGHdGw7wtcn3U//63SyrXQq7Or0N3Se 8TMKdzr4b72dfjUSIFpA22J8WPeHbTaQrNr42uIEcjydaoNe5RK4vnXI7JpY72yI NzXFTN9f3bc2gnrq4qtB1D+t0ssr4RglecDJrJ35UT8isyNgsFZRf1+32a5P+IL4 cZwIl/Z2RAaM8RDD1XAd25sODNWNuvGmx6FNQ8PtPcxb16ak1suIP1zHP16v0oO5 czAmvEGTh5m0F4JkpGMfWYVr4xtSoTH7hFIw+J4WcB/zx1buLIj6bqnEgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIsX0XFau1NEQqc63M9Qbu2tgOEbMB8GA1UdIwQY MBaAFKYI20OWS2mG7HQPC14z9idYmsVgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGdqYlE1WkxhWWJzZEE4TFhqUDJKMWlheFdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi81MDAxNTAtMTU1MS00N2RlLWI1MDQt ZDY0NjgzY2VlMTZmLzEvcGdqYlE1WkxhWWJzZEE4TFhqUDJKMWlheFdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi81MDAxNTAtMTU1MS00N2RlLWI1MDQtZDY0NjgzY2VlMTZm LzEvcGdqYlE1WkxhWWJzZEE4TFhqUDJKMWlheFdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfDNbAy0H XQQNbsEdM8Lcyna2cF//MjMCVLuSp32PF1ReRUvMklOov7InX+ha6uQTUWSukfsM MZGrXQTS6B7OUvhRtrGaQBav+1ymkQi1XLbWggV/Iqa+MUhVHcVN+vZfuktKhAyP zTOEdqTB1nceA7MMCps/SdJHjkz7jwbgS/dRcifFY3JavNeh8La9BAENUzsrNKu1 RkS7JhG4ngsuoDJvCVygOpDQ94wFjYtT+sb8fNDJcj57OikYieg7PY2f+tIwDmTS xx9gr63QeFfAI4yLFmva1sUp1A3Ml/qsa0Pq9sR+aF0e09vtRQtlwlFCD4M1mG5S s+Jz1oZ3BecqUg== -----END CERTIFICATE-----Generated at Wed May 7 11:35:06 2025 by rpki-client