$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.mft File: XaQypOw7CsTKTk7OwOn01GtJevA.mft (raw, json) Hash identifier: CKEpzsjeIpjlQADvIrr2It+rpgDiUodKkSa2U1X45m4= Subject key identifier: 6E:66:DA:34:01:E3:A5:0D:FE:26:51:CA:2A:69:21:E1:E6:2E:C2:93 Authority key identifier: 5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0 Certificate issuer: /CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0 Certificate serial: 0196BE9352D6E70ECF6F7D353C4ECCD11C4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.mft Manifest number: 154B Signing time: Sun 11 May 2025 09:00:47 +0000 Manifest this update: Sun 11 May 2025 09:00:47 +0000 Manifest next update: Mon 12 May 2025 09:00:47 +0000 Files and hashes: 1: 0Je5Z-nMCx0Zkd418v5HueEhd54.roa (hash: pEX7Z7nPaiJOWyIs9b/nPIQ3gi19xivW2mZ533J3DJo=) 2: 14hghSYuKbF7DLMEPWygMHVGP7A.roa (hash: +lIfYCGzEu7fKfBEKYs45/U/OMBrFfQnzzBOsngrbkg=) 3: 7wCIILVV_KizMvEXiqEvvxC6Jr4.roa (hash: QBaOmpq6h8G9bZnJd7hH6tV1LQuldiouVWbU53bSAF8=) 4: NX-lJMVuq0hFJuXhiTDNigiTMiI.roa (hash: 32i5zz/HrQnOcYVXyjhBgA5WXVmw5qyUgDPkRo/rTuU=) 5: PCD0p_UNZon9aCxoq1egSeAnxBA.roa (hash: i0uT3nEejd+UeJVQ6gjyXxFUUCw66ysdAWzGYAGx+Mk=) 6: PYemKJWEUk-HkJO5Mj9UiDiPJ_4.roa (hash: QhKEDEG5e1WSPoJeyCcT8wLZHkvtF03JkUepmJw6Zxw=) 7: Rr0zbCWANGdldNBvrAd88RpS1U4.roa (hash: 9No9czOGF999cDISmqzMXCL5W1XMeYJzBnZLfRLwac4=) 8: Vl_3r99z42NwQ-24ZhXRiYXhqjY.roa (hash: GXmfSPtN6tufP5/kLCHIzO4q0RbIH3Sr/fl4Xj29EAo=) 9: WZNFgwpO480t4avTSei-zYnVVOY.roa (hash: 373H0BKFYtzTiKGrZaryv56z6bhznrJd/cnBel6rbT0=) 10: XaQypOw7CsTKTk7OwOn01GtJevA.crl (hash: 5veza3rs+HdMP9q54EyORB1h9TOe8Y4II9YSfwk3f1w=) 11: _uatClMcwC0uM9W8YXO5Qitmm-A.roa (hash: k5ie8fXmVl+ckXH05aUk9WqiZ3RnKPMqOUpy2XuoG7w=) 12: aHlGWauXADsFIjPBDWSnc29nHv8.roa (hash: y3CvDF1nTLBg2ldBPSyHCPUtAaI+qzww7+4uWAz8ztY=) 13: ea0vEI_fGMyg1jPZV-hKH8IC-2Q.roa (hash: lMsvTL1IJXE7hi4D1D2VQP7nQy14aHmJmR8i7R04mRU=) 14: sZ40szF_81b8iZ343Q6aVpk7QZc.roa (hash: ieSiCVj+T4ruST7AZXMVQI1ECh5LKhbuRyks+nO6HIc=) 15: xf4c83s9BhHDRES5-deoHo90fx8.roa (hash: Nc+I2Laa6OeGUM7r8e6LlLMHSt+btJK/FMAVLnkCxPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.crl rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.mft rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 May 2025 07:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:be:93:52:d6:e7:0e:cf:6f:7d:35:3c:4e:cc:d1:1c:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0 Validity Not Before: May 11 09:00:47 2025 GMT Not After : May 12 09:00:47 2025 GMT Subject: CN=6e66da3401e3a50dfe2651ca2a6921e1e62ec293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b3:34:88:83:ef:e7:87:d7:7e:e0:4b:68:9e: c9:de:99:e3:0f:84:44:d2:88:52:b4:24:27:1a:4c: af:96:3d:3b:e0:1d:f8:84:25:fe:27:f2:0a:b5:0a: 2d:e5:d3:86:c0:c2:87:3c:4a:bb:f6:80:bb:6c:35: d0:bb:96:29:c3:43:94:63:d1:ad:49:f6:c9:ea:0b: 3f:df:57:c3:89:cf:9d:de:86:be:fe:07:42:59:48: 4e:ea:9a:44:d5:f1:84:94:d1:f4:8a:54:1b:3e:c3: 4d:4b:0a:56:1c:bb:17:93:22:5c:70:7b:8b:15:6b: 19:77:72:c4:f4:12:f8:08:98:ab:63:07:bc:11:f9: 31:5c:72:f8:0a:7c:d1:ba:51:dd:68:3c:f2:0e:41: b4:ad:11:86:58:2a:58:ea:59:29:6e:13:a6:f6:5e: 1a:b8:50:e1:0e:c5:d7:0a:3c:77:5f:7c:28:f9:c2: 31:6e:50:41:b9:65:51:77:f1:14:88:7e:fb:5b:fa: 23:43:0a:a8:e5:f3:23:7d:61:c7:e7:5f:4d:a4:51: 08:84:ea:e2:af:5e:c7:b1:40:fa:44:69:28:c8:1f: f2:78:17:19:d2:f9:78:0b:82:5d:d2:cd:f2:69:ee: 07:f4:0d:45:c1:a4:01:9b:1f:05:2e:2d:cc:30:96: f0:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:66:DA:34:01:E3:A5:0D:FE:26:51:CA:2A:69:21:E1:E6:2E:C2:93 X509v3 Authority Key Identifier: keyid:5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:fc:45:83:d1:a6:9b:a5:07:c6:52:4c:ed:5c:93:69:8e:66: 59:b1:b7:26:57:0c:51:12:62:a0:93:7c:64:70:83:36:91:70: 85:bd:e4:cf:8b:df:ad:88:cc:cb:3e:6a:9c:e1:8b:02:6a:13: 36:1f:19:8e:58:80:78:7d:76:39:24:b1:34:83:57:61:4f:20: a1:f8:72:cc:2f:1c:70:32:82:0f:0c:e7:b2:1c:73:d9:a7:6a: 90:ac:58:47:e1:46:e0:05:2d:e5:d5:98:4f:6b:35:4b:29:81: 20:e3:0f:44:d2:4a:c2:e4:72:75:04:f9:a3:9d:1e:b5:4b:ad: e8:19:7a:36:0c:d9:2a:77:e9:5a:3e:52:fa:1a:e4:7e:9e:90: 02:c0:45:d7:9a:8d:0b:33:da:40:d0:e0:82:eb:33:87:9e:49: 46:d0:f7:cf:2a:09:61:1d:d0:26:9b:44:c0:00:a2:48:28:58: 7b:54:5c:ab:7b:8b:9a:1a:d3:79:cb:81:18:95:09:42:c0:54: 8c:67:6c:fa:6a:48:21:54:04:4a:99:69:fb:7c:82:3d:01:9a: 69:e6:9f:64:35:10:e6:13:e4:6a:ff:41:6a:36:6a:a4:61:87: 95:b6:98:71:0e:fa:a0:ba:53:b4:ed:79:86:13:29:ca:f5:9a: c6:d3:c2:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa+k1LW5w7Pb301PE7M0RxNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkYTQzMmE0ZWMzYjBhYzRjYTRlNGVjZWMwZTlmNGQ0NmI0 OTdhZjAwHhcNMjUwNTExMDkwMDQ3WhcNMjUwNTEyMDkwMDQ3WjAzMTEwLwYDVQQD Eyg2ZTY2ZGEzNDAxZTNhNTBkZmUyNjUxY2EyYTY5MjFlMWU2MmVjMjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbM0iIPv54fXfuBLaJ7J3pnjD4RE 0ohStCQnGkyvlj074B34hCX+J/IKtQot5dOGwMKHPEq79oC7bDXQu5Ypw0OUY9Gt SfbJ6gs/31fDic+d3oa+/gdCWUhO6ppE1fGElNH0ilQbPsNNSwpWHLsXkyJccHuL FWsZd3LE9BL4CJirYwe8EfkxXHL4CnzRulHdaDzyDkG0rRGGWCpY6lkpbhOm9l4a uFDhDsXXCjx3X3wo+cIxblBBuWVRd/EUiH77W/ojQwqo5fMjfWHH519NpFEIhOri r17HsUD6RGkoyB/yeBcZ0vl4C4Jd0s3yae4H9A1FwaQBmx8FLi3MMJbwNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG5m2jQB46UN/iZRyippIeHmLsKTMB8GA1UdIwQY MBaAFF2kMqTsOwrEyk5OzsDp9NRrSXrwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGFReXBPdzdDc1RLVGs3T3dPbjAxR3RKZXZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85ZTg0N2YtNDE0Ni00NTY2LThjM2Ut MWJhNTQzZWVhZWQ3LzEvWGFReXBPdzdDc1RLVGs3T3dPbjAxR3RKZXZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85ZTg0N2YtNDE0Ni00NTY2LThjM2UtMWJhNTQzZWVhZWQ3 LzEvWGFReXBPdzdDc1RLVGs3T3dPbjAxR3RKZXZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA/xFg9Gm m6UHxlJM7VyTaY5mWbG3JlcMURJioJN8ZHCDNpFwhb3kz4vfrYjMyz5qnOGLAmoT Nh8ZjliAeH12OSSxNINXYU8gofhyzC8ccDKCDwznshxz2adqkKxYR+FG4AUt5dWY T2s1SymBIOMPRNJKwuRydQT5o50etUut6Bl6NgzZKnfpWj5S+hrkfp6QAsBF15qN CzPaQNDgguszh55JRtD3zyoJYR3QJptEwACiSChYe1Rcq3uLmhrTecuBGJUJQsBU jGds+mpIIVQESplp+3yCPQGaaeafZDUQ5hPkav9BajZqpGGHlbaYcQ76oLpTtO15 hhMpyvWaxtPCrQ== -----END CERTIFICATE-----Generated at Sun May 11 16:03:55 2025 by rpki-client