$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft File: KXxQjSOzgxW79FtybSIFCkYSe4w.mft (raw, json) Hash identifier: +eEHzqBBLTSlKpvt+d6g2oGBTlACzU9jel2uryfyItU= Subject key identifier: 1E:86:C1:3F:63:02:7C:59:15:10:E3:C8:A3:9D:F5:41:39:04:8D:B0 Authority key identifier: 29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C Certificate issuer: /CN=297c508d23b38315bbf45b726d22050a46127b8c Certificate serial: 0196BA48E0ACD306192FD23B297733A6AC8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft Manifest number: 153E Signing time: Sat 10 May 2025 13:01:00 +0000 Manifest this update: Sat 10 May 2025 13:01:00 +0000 Manifest next update: Sun 11 May 2025 13:01:00 +0000 Files and hashes: 1: 6DiazTfSLwiU3nHVXB2_ipX3pSI.roa (hash: GgVQ0c2h8QmAuSALS7AfweuOCzU4KJ/qThY066+SiL8=) 2: F9Dj4BH3DTiBJqZUn9Gq6zuqgzw.roa (hash: PvC6qEA55o/ujVGgT7SwQI1kg6RiKLhNPwSFFwPuR5o=) 3: FM0AOR7qs5ReYOYfvDzPvyeOFF4.roa (hash: pyPxYA6UMvNM4UkCYSW/CeHul7I1PWvfOpcPGXbUI7A=) 4: KXxQjSOzgxW79FtybSIFCkYSe4w.crl (hash: tPeh0/8IpSJKNTc4Isi0VWH1WBaCpxtU/0lDFnOluV0=) 5: LzFoDYPr7_0gEjtlfJ6xXw6t_lo.roa (hash: rXfhzDDWrE3BbdIp2NtDgdm3XDSADxRFIs8wy+p88S0=) 6: OPHuyxpO9PisbasiiAKtaHkvxVA.roa (hash: x3Qa5U665mgT3yS3jj1UddNty1CV91Oaf8NDM/bZhaM=) 7: kgi8mKAM2yCVgRH4L9W1E0GBctE.roa (hash: /x/rSNiAHNpL5ZxR6vbLMgxwW3ubNoY4GIMOdVAovVA=) 8: wN-88kHsfZoIQbMbBeQSvFTLUAA.roa (hash: TZn5hV31aDddpb82jvBnOx8ugm4e4LbJg3sHA8zL+QM=) 9: xDp3K5cwdwo-amBn4Z3yMMAdo3Y.roa (hash: eoBx0TZUtOUgkA8rEPSl3wkXkZ2dgXNZBSrXrhwvq14=) 10: zYd_cPkM9NVsX7bTQ07hSv4bWMk.roa (hash: 7m24y9mQHGr+u8/2znCaziY9Qt7M+iB4zeF7KEcBtdg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 May 2025 13:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:ba:48:e0:ac:d3:06:19:2f:d2:3b:29:77:33:a6:ac:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297c508d23b38315bbf45b726d22050a46127b8c Validity Not Before: May 10 13:01:00 2025 GMT Not After : May 11 13:01:00 2025 GMT Subject: CN=1e86c13f63027c591510e3c8a39df54139048db0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:cd:f0:e2:97:c9:e0:95:f2:4a:ce:3d:e4:2e: d8:05:6c:f3:62:72:c1:ba:7e:0d:18:95:ea:50:06: 29:0c:8c:99:f0:e4:5d:ce:4f:84:4e:c2:b6:34:f1: 5f:f2:a4:e7:ce:5a:b3:4d:8c:52:3c:16:90:e0:c7: 02:f5:ce:6e:00:d3:b0:c1:89:16:7c:ff:94:56:57: 40:a1:31:e4:43:b5:70:e7:d7:25:d3:00:7e:45:12: fb:ee:2b:be:0e:3c:7f:7b:7a:1f:4d:45:cd:5f:4d: 66:f5:65:b6:89:38:06:a9:a2:d6:5c:7e:af:a9:10: 2e:fe:1d:74:7a:38:00:2d:7d:cb:26:46:33:03:58: 4e:03:5e:38:87:eb:49:4b:b0:83:37:d8:07:ae:eb: c3:fc:76:6a:c6:f7:de:1d:80:fb:7b:53:5d:cf:d4: 43:ae:4f:30:0e:22:ef:17:fc:ff:91:a4:86:0e:93: 98:40:58:73:36:c9:ee:c7:c6:dc:86:f4:8e:c5:c9: 3f:8f:a3:c8:31:77:5a:b5:c0:4f:c6:ef:0e:6e:50: 35:78:ae:d1:b3:4e:b6:52:49:50:24:bb:70:59:e6: b6:af:3e:28:ad:45:18:6a:24:01:12:cf:e4:37:d1: 2e:3e:14:93:09:15:34:fe:be:c5:f8:fb:6f:ed:b6: 39:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:86:C1:3F:63:02:7C:59:15:10:E3:C8:A3:9D:F5:41:39:04:8D:B0 X509v3 Authority Key Identifier: keyid:29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:a1:ae:fb:70:b8:4e:ac:f2:a3:67:19:7d:be:0a:b0:29:8b: 0e:c7:02:8e:3e:ab:b1:8a:70:15:f1:ce:5a:3d:f9:7d:5f:71: 4c:eb:74:41:e6:6c:e1:27:e7:7b:1d:db:9b:69:a4:e9:44:62: a7:86:1e:fa:bd:07:d7:e0:98:98:87:1e:22:0d:6b:27:54:19: eb:63:61:cb:c3:44:de:29:5f:b6:96:b7:72:24:84:67:f0:c1: 48:ca:94:61:5d:83:a6:eb:55:c0:1d:3d:98:c4:8a:24:10:be: 6c:1a:90:7d:7c:40:5b:1c:bc:65:76:05:70:ee:d8:46:b8:45: 06:d9:62:99:1d:18:ff:7e:c0:9c:6b:65:01:a4:52:61:fc:b9: 18:3a:e7:7d:36:40:4d:dd:7e:27:02:ab:93:a3:ec:54:d4:dc: d8:8d:6e:25:1a:28:74:56:dd:61:ee:5a:87:80:e2:ec:46:89: f8:b3:92:14:12:d8:1e:65:73:20:b5:93:56:9f:4d:ca:23:f7: a2:7a:95:65:aa:ca:23:4a:0b:80:df:94:b7:53:57:58:24:a1: dd:61:2b:a7:08:47:60:ad:1a:ad:09:aa:77:c1:a6:d3:53:4c: 65:46:6e:8a:df:4d:83:f0:e9:e6:2c:56:ae:f2:ad:dd:93:4a: c8:f7:f7:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa6SOCs0wYZL9I7KXczpqyPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2M1MDhkMjNiMzgzMTViYmY0NWI3MjZkMjIwNTBhNDYx MjdiOGMwHhcNMjUwNTEwMTMwMTAwWhcNMjUwNTExMTMwMTAwWjAzMTEwLwYDVQQD EygxZTg2YzEzZjYzMDI3YzU5MTUxMGUzYzhhMzlkZjU0MTM5MDQ4ZGIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2s3w4pfJ4JXySs495C7YBWzzYnLB un4NGJXqUAYpDIyZ8ORdzk+ETsK2NPFf8qTnzlqzTYxSPBaQ4McC9c5uANOwwYkW fP+UVldAoTHkQ7Vw59cl0wB+RRL77iu+Djx/e3ofTUXNX01m9WW2iTgGqaLWXH6v qRAu/h10ejgALX3LJkYzA1hOA144h+tJS7CDN9gHruvD/HZqxvfeHYD7e1Ndz9RD rk8wDiLvF/z/kaSGDpOYQFhzNsnux8bchvSOxck/j6PIMXdatcBPxu8OblA1eK7R s062UklQJLtwWea2rz4orUUYaiQBEs/kN9EuPhSTCRU0/r7F+Ptv7bY5uQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB6GwT9jAnxZFRDjyKOd9UE5BI2wMB8GA1UdIwQY MBaAFCl8UI0js4MVu/Rbcm0iBQpGEnuMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTIt MzZlOWE3OWJkOTUwLzEvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTItMzZlOWE3OWJkOTUw LzEvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFaGu+3C4 Tqzyo2cZfb4KsCmLDscCjj6rsYpwFfHOWj35fV9xTOt0QeZs4Sfnex3bm2mk6URi p4Ye+r0H1+CYmIceIg1rJ1QZ62Nhy8NE3ilftpa3ciSEZ/DBSMqUYV2DputVwB09 mMSKJBC+bBqQfXxAWxy8ZXYFcO7YRrhFBtlimR0Y/37AnGtlAaRSYfy5GDrnfTZA Td1+JwKrk6PsVNTc2I1uJRoodFbdYe5ah4Di7EaJ+LOSFBLYHmVzILWTVp9NyiP3 onqVZarKI0oLgN+Ut1NXWCSh3WErpwhHYK0arQmqd8Gm01NMZUZuit9Ng/Dp5ixW rvKt3ZNKyPf3Pw== -----END CERTIFICATE-----Generated at Sat May 10 17:00:14 2025 by rpki-client