$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft File: 1g9F98xLaR_UoxwfHAtPYF13pu8.mft (raw, json) Hash identifier: +gDjZoM0OJBysIGl5cX3psKadtEw2aN47IVmpct6600= Subject key identifier: 84:D7:F7:17:57:9A:80:68:B0:9F:0E:3C:84:5D:0B:9D:B6:97:23:A2 Authority key identifier: D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF Certificate issuer: /CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef Certificate serial: 0196A7D45669B9E45224F3CB52E401298DCB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft Manifest number: 1532 Signing time: Tue 06 May 2025 23:00:32 +0000 Manifest this update: Tue 06 May 2025 23:00:32 +0000 Manifest next update: Wed 07 May 2025 23:00:32 +0000 Files and hashes: 1: 1g9F98xLaR_UoxwfHAtPYF13pu8.crl (hash: Gl3bi8e/v3T3a7lmag+LvFVYkxkvox6xbt/wzZTGPRI=) 2: GMAT5cnP7VsDriW3_zL3dmojRH8.roa (hash: 9OZgqMWwoj0IlbvwNkLekurnPx7RT1aRlKGSPHOL6N4=) 3: IoE67Ac0pXcZcF9gBBC8VKka1vE.roa (hash: kt4XWZcgrYkLHsaAC2c2z5iyqyhmqC0zJwGvhSrnQ3E=) 4: MnG_2GzorHPsXNp5Vum7-rUjReY.roa (hash: D3z8cv+XlClqN6b2gc/ybPBfC33Ewbb6orbavaJ/jxk=) 5: PPMANDrLvF7lVgznicSOoAT3-3U.roa (hash: goEhx/poAjkzaQRi2RGACZSEuEQ6nJJ0p5PoSp7o6bo=) 6: b5u0PP2LUmpbpNJ4qAdIl3s9IjI.roa (hash: 4ZbWUTDO0hiozFSxacFGW2XCjTl1RPjd3yDPIUYji9M=) 7: jfxb2BR-CQiCSpU8DpDydbDz1b0.roa (hash: fObbuEbq3/zFmHWpgeQlp5JFopCYl+4GEGdq5exW77c=) 8: rrmPFSxVt5xEtowDvlnYGvxrH3s.roa (hash: mhHuydqllyBkMxNXx9HLabM7W+Fte6mEhiiQe0n8fRA=) 9: th1p5jE1fl21GfKXyCflURpVpo0.roa (hash: w4pXoPCT9slYbdDvFiyPewBrsldI3f9m6umM8Wv0SkE=) 10: viBgIC4abJYY7C__L2VefsiYSYI.roa (hash: r+Hi34v0Qt4A/ODVfo4uFHb77CXM38aMXnF2F0o4IcY=) 11: xNr5I0Wokl-j2aBAEkjZmpNRVng.roa (hash: epmYMuuR7FlxzNy/fvLKPn2AzgVlFDZhQf7tXXleECM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 May 2025 16:14:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:a7:d4:56:69:b9:e4:52:24:f3:cb:52:e4:01:29:8d:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef Validity Not Before: May 6 23:00:32 2025 GMT Not After : May 7 23:00:32 2025 GMT Subject: CN=84d7f717579a8068b09f0e3c845d0b9db69723a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:82:48:76:7d:dd:9c:96:52:c1:da:b1:72:43: c5:ec:92:03:26:cd:a1:6a:58:62:15:fb:b9:2e:eb: 86:00:a9:48:94:55:c0:55:1c:49:6d:da:a7:d9:1c: 16:d5:ad:f7:58:cd:63:11:43:55:2a:fa:a3:66:95: de:2e:01:c4:71:1b:96:de:47:e1:68:f2:11:b9:dd: c6:25:a8:86:4e:b5:5c:c0:bd:42:83:60:3d:f9:7c: bf:c6:d6:f7:8f:4d:c0:ea:01:d8:81:f2:08:29:83: 34:e7:8c:8f:f0:57:36:8c:6f:c4:b5:36:b5:cf:cd: 1f:b7:74:c4:5e:da:c1:dc:2c:f6:40:9b:99:1b:45: d5:91:70:d9:b5:d2:f4:de:c3:ba:d0:a3:09:e0:89: 11:fc:44:53:a1:15:43:bb:30:51:66:f6:79:b9:4b: e4:f6:05:d2:f3:66:92:4b:76:80:d5:a4:f1:89:3a: 90:d1:d6:c8:53:cb:0c:db:98:de:48:ce:e2:49:78: 3c:59:27:6c:76:4a:3a:d0:9b:b8:90:3d:dd:5d:9b: c3:b8:99:65:7f:03:46:04:a7:fe:c7:7e:ad:4b:33: f9:b5:38:48:68:34:00:f3:f1:f6:b9:de:03:48:a9: 69:31:d9:f3:a8:6a:47:8e:31:ee:8d:85:05:22:00: d8:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:D7:F7:17:57:9A:80:68:B0:9F:0E:3C:84:5D:0B:9D:B6:97:23:A2 X509v3 Authority Key Identifier: keyid:D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:67:78:28:37:8b:3b:86:89:f6:d1:8c:68:d8:41:26:50:b5: e7:66:64:de:0f:a3:d6:42:04:de:22:70:7b:59:fc:ac:d7:a5: c4:ff:c8:bd:5c:da:81:63:47:20:0b:c6:9f:6b:97:2b:f3:7c: 7a:98:47:96:09:bf:d3:3d:99:d8:d3:ba:82:90:b0:e4:2c:f7: 04:81:59:31:a6:e3:f3:7c:52:04:e4:8d:91:b2:5d:07:69:0a: de:70:12:0f:d8:c4:10:fc:89:aa:e4:70:1b:33:e0:11:6d:44: 07:86:7d:36:2a:be:66:2a:c1:28:93:71:ba:2c:48:d6:db:d1: 69:ee:52:94:db:e6:21:63:df:e5:da:a7:e9:1d:92:d9:f0:64: 7d:9f:2c:98:4e:e5:cb:18:43:89:54:7a:fd:6a:06:0a:fa:3f: 78:df:83:24:ea:0d:3d:40:3d:1f:27:32:c3:2b:87:a6:d0:8f: c2:b9:57:10:54:89:53:f1:6e:90:4c:8d:54:fa:df:ea:c0:5a: f2:ba:99:cd:ae:c6:00:08:c5:fd:b3:0c:9e:9a:3e:a2:39:2a: f3:39:fd:c6:f1:b1:fa:0c:ea:a6:b4:40:09:ac:13:98:bd:50: cf:36:69:1b:92:9b:cc:d2:df:96:3b:4f:c1:2a:59:32:19:c8: 9a:a6:46:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZan1FZpueRSJPPLUuQBKY3LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MGY0NWY3Y2M0YjY5MWZkNGEzMWMxZjFjMGI0ZjYwNWQ3 N2E2ZWYwHhcNMjUwNTA2MjMwMDMyWhcNMjUwNTA3MjMwMDMyWjAzMTEwLwYDVQQD Eyg4NGQ3ZjcxNzU3OWE4MDY4YjA5ZjBlM2M4NDVkMGI5ZGI2OTcyM2EyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4JIdn3dnJZSwdqxckPF7JIDJs2h alhiFfu5LuuGAKlIlFXAVRxJbdqn2RwW1a33WM1jEUNVKvqjZpXeLgHEcRuW3kfh aPIRud3GJaiGTrVcwL1Cg2A9+Xy/xtb3j03A6gHYgfIIKYM054yP8Fc2jG/EtTa1 z80ft3TEXtrB3Cz2QJuZG0XVkXDZtdL03sO60KMJ4IkR/ERToRVDuzBRZvZ5uUvk 9gXS82aSS3aA1aTxiTqQ0dbIU8sM25jeSM7iSXg8WSdsdko60Ju4kD3dXZvDuJll fwNGBKf+x36tSzP5tThIaDQA8/H2ud4DSKlpMdnzqGpHjjHujYUFIgDYIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFITX9xdXmoBosJ8OPIRdC522lyOiMB8GA1UdIwQY MBaAFNYPRffMS2kf1KMcHxwLT2Bdd6bvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hZDMwNDQtY2RjZS00NmNmLTkyYzkt YTk1NGQwNTM5OTRhLzEvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9hZDMwNDQtY2RjZS00NmNmLTkyYzktYTk1NGQwNTM5OTRh LzEvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy2d4KDeL O4aJ9tGMaNhBJlC152Zk3g+j1kIE3iJwe1n8rNelxP/IvVzagWNHIAvGn2uXK/N8 ephHlgm/0z2Z2NO6gpCw5Cz3BIFZMabj83xSBOSNkbJdB2kK3nASD9jEEPyJquRw GzPgEW1EB4Z9Niq+ZirBKJNxuixI1tvRae5SlNvmIWPf5dqn6R2S2fBkfZ8smE7l yxhDiVR6/WoGCvo/eN+DJOoNPUA9HycywyuHptCPwrlXEFSJU/FukEyNVPrf6sBa 8rqZza7GAAjF/bMMnpo+ojkq8zn9xvGx+gzqprRACawTmL1QzzZpG5KbzNLfljtP wSpZMhnImqZGLA== -----END CERTIFICATE-----Generated at Wed May 7 02:28:55 2025 by rpki-client