$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft File: XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft (raw, json) Hash identifier: qrp4vKA52hNS+519utk8EiZSX+GmiiOTL9WglXz8iJA= Subject key identifier: 13:10:68:28:00:92:69:EC:CA:10:1A:06:FC:7D:D3:4A:33:9F:F8:4D Authority key identifier: 5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 Certificate issuer: /CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Certificate serial: 0196BF3809C2F612E43E876C0557E5ECE178 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft Manifest number: 1414 Signing time: Sun 11 May 2025 12:00:42 +0000 Manifest this update: Sun 11 May 2025 12:00:42 +0000 Manifest next update: Mon 12 May 2025 12:00:42 +0000 Files and hashes: 1: 3b4Fq6_bIamsudbItbqhSpD_K9w.roa (hash: Vh901Zhx3OCDgeqedfZ/abhYR9Rhwc8dnd6e61mW9to=) 2: DefZ__9RqwjeIQvvIG8DNEtfalk.roa (hash: 8CQeEiGOKVZsA3/HRDhtbloh6zsps5iaRDAh0kwUHcw=) 3: Ks2E1N23FL1JlkaeAWsDQ0VTeMA.roa (hash: t0ikCKjSARWk2IVi/g7K6CXdDGiaZQEnFkAP2udGzsQ=) 4: XD3pFL9Q_FZXp8mNCcZObqRMVXg.roa (hash: g5/ZHa0TuYu8Xziy6YKoSXXXe+7v69Kf3qZJF69vu/k=) 5: XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl (hash: C5C7sg9zrpcV3/vrwQR7C9zQMmxMQHTfkiaKaugqqE0=) 6: XkyRTi83DrHF6W0GS43BmD-TiuE.roa (hash: /3vDH+EU57Ijtwd/m0ZEYJQybxBHrhK4Fu38BBZHM3k=) 7: b4M2RVAScTVc0rLcQWS2TUKBQVg.roa (hash: JAXZVAloSHKdDJuVLx42Yx5DyOaYH17Fr5xV9qxOaFU=) 8: bHywZIpT6KePzqd-y04f9_gubE4.roa (hash: t+U3j3yQlSyR3lx2MZ9I+FTCYrv0GnN+ja0QXS2Zfac=) 9: nxY9K3hs4eW9wiyd2zfVyuMPTZ8.roa (hash: kvygY+cOmoK64hnXWrmGQdyj1Eanlt8CEQUra7ZV1bE=) 10: sKeEH8goKxahgJVyVEdbhgJ7n7Y.roa (hash: uvOsVNDxwiKqJjLFyenb/M2w5Vt3m+sOy2/sHUQrtIc=) 11: w5BxPGkpdUOoj6KfnZEduZETjuE.roa (hash: JPKkhDje+63ounlQ9s1rDQVa+hGWwYxm1Bd6pam4P0o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 May 2025 07:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:bf:38:09:c2:f6:12:e4:3e:87:6c:05:57:e5:ec:e1:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Validity Not Before: May 11 12:00:42 2025 GMT Not After : May 12 12:00:42 2025 GMT Subject: CN=13106828009269ecca101a06fc7dd34a339ff84d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:44:de:59:11:3b:a1:d6:75:c3:a9:78:6c:56: a9:f5:61:07:c0:ff:ea:05:d4:64:b3:a8:c3:43:d9: 03:a2:0d:b0:b7:7f:3f:1a:77:d7:10:03:bb:42:81: 71:a8:62:de:11:a9:11:80:45:2c:d5:6c:8f:99:15: 2a:38:14:f2:06:15:87:b9:19:86:9f:c1:bf:e8:85: c8:63:c8:1f:6f:e6:c5:86:1a:0a:63:09:fe:cb:77: 97:9d:ac:12:ff:72:6f:d5:8d:c5:d2:ca:6b:cf:04: 49:bf:20:98:3a:21:24:31:05:f0:c8:6a:75:97:a3: f1:c0:71:fa:16:52:fb:c0:d9:da:12:6b:27:09:e4: 0a:8b:65:8e:37:23:8d:71:66:22:2d:e3:97:f4:f4: 61:92:af:04:01:f7:fe:d8:0c:7a:34:c3:d7:2b:09: 5a:c7:34:31:03:db:07:36:59:57:c2:f3:85:5c:9d: 60:46:59:67:d2:16:2b:cf:1a:c8:ad:7d:16:ec:5c: 70:fa:87:3c:c6:97:1a:aa:02:09:05:25:1e:7b:c3: 17:f7:b0:b4:49:b8:f7:58:a8:50:69:57:d9:04:3f: 04:c6:cd:45:15:e6:fd:42:36:13:c4:25:49:f9:6a: 05:88:4d:7c:42:cb:c9:fd:0d:6e:74:4c:ab:aa:46: 32:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:10:68:28:00:92:69:EC:CA:10:1A:06:FC:7D:D3:4A:33:9F:F8:4D X509v3 Authority Key Identifier: keyid:5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:32:b3:64:75:28:8b:c2:ee:1b:bc:be:31:ab:ee:0f:11:1b: 5e:85:8b:3c:43:69:80:04:16:5c:0d:ac:c7:33:12:c5:d9:a9: 83:d8:ff:dc:04:a6:20:4f:71:5a:df:50:92:2c:cc:ca:5c:e8: d4:db:da:6d:14:60:6c:56:76:17:b4:92:0d:4a:bd:eb:13:db: 51:06:1c:df:a5:09:ac:b7:af:10:8e:d5:97:41:71:a6:84:71: 71:50:56:8d:b8:57:3a:da:f7:7b:03:36:9c:19:58:e1:35:77: f3:0c:d8:2a:ee:e2:5d:d3:4f:2d:67:fa:a3:20:87:b3:ed:bf: e1:21:24:e6:4e:26:98:b4:43:74:4f:8b:4e:c8:2a:1d:e4:df: da:e1:99:4d:f6:02:43:0f:4e:12:54:5a:a5:3c:44:75:70:54: fa:b2:61:07:b9:01:b4:8c:96:b4:86:46:03:d6:45:58:11:96: 70:da:56:0b:db:f6:cf:4d:f4:9e:25:6d:8a:dc:0d:bd:68:f4: 51:8e:62:2c:29:9a:ad:91:61:85:05:c1:9b:5f:6f:4f:82:2f: 1e:ee:d5:6b:6b:c0:d0:31:7b:5b:4c:b2:11:5e:a1:81:38:6d: 75:4f:72:5e:f3:a5:b7:05:7d:c8:93:4d:02:4d:47:20:95:24: 97:67:5e:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa/OAnC9hLkPodsBVfl7OF4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNDAwYWMyMzk2YWUyMjhkMmIyZTU2ZjRiMDY3Mzk5Njkz NzllNDQwHhcNMjUwNTExMTIwMDQyWhcNMjUwNTEyMTIwMDQyWjAzMTEwLwYDVQQD EygxMzEwNjgyODAwOTI2OWVjY2ExMDFhMDZmYzdkZDM0YTMzOWZmODRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0TeWRE7odZ1w6l4bFap9WEHwP/q BdRks6jDQ9kDog2wt38/GnfXEAO7QoFxqGLeEakRgEUs1WyPmRUqOBTyBhWHuRmG n8G/6IXIY8gfb+bFhhoKYwn+y3eXnawS/3Jv1Y3F0sprzwRJvyCYOiEkMQXwyGp1 l6PxwHH6FlL7wNnaEmsnCeQKi2WONyONcWYiLeOX9PRhkq8EAff+2Ax6NMPXKwla xzQxA9sHNllXwvOFXJ1gRlln0hYrzxrIrX0W7Fxw+oc8xpcaqgIJBSUee8MX97C0 Sbj3WKhQaVfZBD8Exs1FFeb9QjYTxCVJ+WoFiE18QsvJ/Q1udEyrqkYyKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBMQaCgAkmnsyhAaBvx900ozn/hNMB8GA1UdIwQY MBaAFF5ACsI5auIo0rLlb0sGc5lpN55EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYt ZGZlZDEyZjFhMDFlLzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYtZGZlZDEyZjFhMDFl LzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXDKzZHUo i8LuG7y+MavuDxEbXoWLPENpgAQWXA2sxzMSxdmpg9j/3ASmIE9xWt9QkizMylzo 1NvabRRgbFZ2F7SSDUq96xPbUQYc36UJrLevEI7Vl0FxpoRxcVBWjbhXOtr3ewM2 nBlY4TV38wzYKu7iXdNPLWf6oyCHs+2/4SEk5k4mmLRDdE+LTsgqHeTf2uGZTfYC Qw9OElRapTxEdXBU+rJhB7kBtIyWtIZGA9ZFWBGWcNpWC9v2z030niVtitwNvWj0 UY5iLCmarZFhhQXBm19vT4IvHu7Va2vA0DF7W0yyEV6hgThtdU9yXvOltwV9yJNN Ak1HIJUkl2deUQ== -----END CERTIFICATE-----Generated at Sun May 11 15:26:39 2025 by rpki-client