$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft File: Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft (raw, json) Hash identifier: KMpHH66yyouRbr9A2fU9pXDfohukykXPYUbhI0yUwZI= Subject key identifier: B8:9F:30:61:CF:4C:A5:06:C2:A6:57:58:08:3A:E1:27:3E:89:78:05 Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f Certificate serial: 0196B0328CF1AC47B3456A83AF769DA765E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft Manifest number: 1577 Signing time: Thu 08 May 2025 14:00:24 +0000 Manifest this update: Thu 08 May 2025 14:00:24 +0000 Manifest next update: Fri 09 May 2025 14:00:24 +0000 Files and hashes: 1: IsxMtNlQJ4J5OkWPRRyBdod8aQg.roa (hash: G37zdezcJTNVKE89wqIfwLZT3BTcN0qsQ2l0rpiM6Xo=) 2: OBU8vlVFbNJaELvdSh6f-vm8Wi8.roa (hash: Dlm8O3K+/DDrDwWaVhCzSl+5X2EyncHNpdnVYLNwB+A=) 3: XfuXo6o_rAvS3auaRDpRyYbh-Ho.roa (hash: UXkgT+p8/Vdf5Yzbn+kQFWB0bdLGQBqp49YReLFZmdw=) 4: Yn15-lSTYzCSP9GpLWZu207hyyQ.roa (hash: ZRDear1XR2zxFa1Zzdm3ZmOBKV2EW2XYwQOhJXSb+c4=) 5: Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl (hash: vbQ6jmVlrQh8CSX3n6SHslUByUGAHgUDBSz2j62t4WY=) 6: ZzzCKQYXEyyoRJqn08ir4qRnYoY.roa (hash: v3CMJYaM4YjhgyRlCZi9VHNC9/ejVg1WlIGKxQSHOFU=) 7: cOvdIJRz_NYAOefMUDf5iKuF1Aw.roa (hash: JkRxsdjY7+lZf5UIgBndJQlLU5QH74sbP9jgqmE3I8s=) 8: cmFziYev2vZctSPYHCuJUahmrts.roa (hash: q804av0BwiqkRQu8gnJltLcVXPVfUIsNBKBCcl2mC3o=) 9: d9T8_jMA5OOlUFBzolig6e4lFl4.roa (hash: 1O/cLZtIVt/wqkV2Y55eMzx0OCuyozd0/DXaB7TJnEc=) 10: dME3uKuz9qhKb6fYAv1PRSHYQPc.roa (hash: uScRfDQwv2RoHdAU0NPUzUenqom6BB3gL/e217qP5bU=) 11: hNVJZaf1Q742ZOf5V7GGPg6DwoQ.roa (hash: qJB5V0i6XcC0nn5IoRQOg8JgvG9umWvqWjmz3fhyEgU=) 12: hywnu8WYT2nlwz43odSJDrRW-kI.roa (hash: fmRjbmK2i86QP0T+gwCHNnfXkIciPJ7caNHOaYsr8bQ=) 13: nW-VI6IYWUyxTPN5fUvx9ToESUM.roa (hash: W6Eutg2L38NW+fx+Oh7St+PRc+4apbrppDeqMeQevZY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 May 2025 14:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:b0:32:8c:f1:ac:47:b3:45:6a:83:af:76:9d:a7:65:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f Validity Not Before: May 8 14:00:24 2025 GMT Not After : May 9 14:00:24 2025 GMT Subject: CN=b89f3061cf4ca506c2a65758083ae1273e897805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:6f:5d:bf:8f:72:62:f6:d7:08:f0:be:74:75: 69:55:1b:d3:3d:50:f3:87:a7:3e:f9:5b:73:0f:99: aa:e5:c3:9d:5e:8a:88:f8:63:07:14:83:0c:99:3f: 37:5a:e9:7f:3f:77:3d:2e:43:ee:a3:0e:d4:6d:b3: 0e:5f:a1:5a:d5:aa:39:61:ec:3e:54:67:da:64:72: 00:af:45:a4:43:9c:f2:0e:9b:28:fc:9e:3c:27:24: f4:b6:e5:cf:ee:ca:e1:de:e7:f3:6e:96:44:24:77: f7:f2:b2:e1:31:6e:56:ef:6c:98:88:50:5a:98:cb: 3a:6c:3e:bd:4d:f3:35:8c:3f:cd:eb:1e:80:c1:d9: 62:da:19:6c:78:c0:84:20:b2:0e:00:cc:90:73:fe: 9c:a5:7e:69:f5:18:c0:04:20:bd:fb:9c:28:ef:98: 30:ff:e8:f7:3b:b7:39:5c:44:5e:1a:e7:7f:ec:8b: fd:1d:ab:07:df:ee:fb:df:f5:c2:f9:9a:f7:64:c5: a6:ee:37:ef:b4:98:97:41:19:bc:5f:03:a7:82:69: b3:08:91:82:5e:d8:2e:3c:d9:8f:9c:35:b1:73:d6: 56:7c:8d:d3:93:b1:d7:88:c2:69:d1:90:3f:ac:47: 4e:bb:d0:ae:b7:7f:80:a0:0d:6e:c8:af:9a:71:f2: 2b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:9F:30:61:CF:4C:A5:06:C2:A6:57:58:08:3A:E1:27:3E:89:78:05 X509v3 Authority Key Identifier: keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:0d:14:3f:d2:bf:8c:c6:ba:19:7f:d8:62:d4:3c:6c:34:4d: 70:1f:53:c3:e7:51:ce:e2:33:87:2a:11:9e:92:10:18:fd:fd: 4b:84:68:53:c6:42:b0:c9:3f:21:27:dd:51:a2:0a:60:d8:30: e6:bf:f6:d9:18:72:2f:53:5d:62:1a:92:05:14:61:db:dd:e6: 3d:3c:a3:27:ac:ea:1b:18:f3:ae:ea:44:b9:bc:e5:a5:51:96: 45:c1:f2:b2:97:41:98:ba:8b:15:63:f5:83:4c:07:5a:65:48: 33:76:fa:93:ba:d8:55:bc:c7:79:3d:d3:e5:e1:95:02:e9:b7: 67:3b:df:8d:42:7e:75:ee:eb:24:a0:14:b1:fa:fd:b6:af:e1: 5e:a9:62:45:ee:29:8e:3e:fc:d9:17:6d:68:ce:52:fa:7a:75: 25:9c:6b:e3:5e:92:c4:8d:42:a2:98:29:09:4c:72:d7:81:36: 5a:2b:65:e9:c8:50:f6:3a:19:22:0c:ac:7d:42:d6:e7:85:fd: 07:7b:c5:43:1c:3e:3c:cc:ba:f7:c8:2e:de:06:88:aa:f2:3f: 84:97:e0:81:83:2c:7c:03:b5:8f:d8:f6:a7:82:ff:55:73:67: 27:98:df:4e:4b:2f:b9:bc:b2:5e:c1:3b:27:72:a6:d0:82:0b: 86:b2:dd:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZawMozxrEezRWqDr3adp2XmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3OTU1YjFhYTFjMDI4NGQyODQzYjk2ZjI2YzVmZTc1MWU2 Njk0NmYwHhcNMjUwNTA4MTQwMDI0WhcNMjUwNTA5MTQwMDI0WjAzMTEwLwYDVQQD EyhiODlmMzA2MWNmNGNhNTA2YzJhNjU3NTgwODNhZTEyNzNlODk3ODA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk29dv49yYvbXCPC+dHVpVRvTPVDz h6c++VtzD5mq5cOdXoqI+GMHFIMMmT83Wul/P3c9LkPuow7UbbMOX6Fa1ao5Yew+ VGfaZHIAr0WkQ5zyDpso/J48JyT0tuXP7srh3ufzbpZEJHf38rLhMW5W72yYiFBa mMs6bD69TfM1jD/N6x6Awdli2hlseMCEILIOAMyQc/6cpX5p9RjABCC9+5wo75gw /+j3O7c5XEReGud/7Iv9HasH3+773/XC+Zr3ZMWm7jfvtJiXQRm8XwOngmmzCJGC XtguPNmPnDWxc9ZWfI3Tk7HXiMJp0ZA/rEdOu9Cut3+AoA1uyK+acfIr8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLifMGHPTKUGwqZXWAg64Sc+iXgFMB8GA1UdIwQY MBaAFGeVWxqhwChNKEO5bybF/nUeZpRvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDct MDhhZDk0MTAxZDdlLzEvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDctMDhhZDk0MTAxZDdl LzEvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgQ0UP9K/ jMa6GX/YYtQ8bDRNcB9Tw+dRzuIzhyoRnpIQGP39S4RoU8ZCsMk/ISfdUaIKYNgw 5r/22RhyL1NdYhqSBRRh293mPTyjJ6zqGxjzrupEubzlpVGWRcHyspdBmLqLFWP1 g0wHWmVIM3b6k7rYVbzHeT3T5eGVAum3ZzvfjUJ+de7rJKAUsfr9tq/hXqliRe4p jj782RdtaM5S+np1JZxr416SxI1CopgpCUxy14E2Witl6chQ9joZIgysfULW54X9 B3vFQxw+PMy698gu3gaIqvI/hJfggYMsfAO1j9j2p4L/VXNnJ5jfTksvubyyXsE7 J3Km0IILhrLduQ== -----END CERTIFICATE-----Generated at Thu May 8 20:38:16 2025 by rpki-client