$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft File: C047O4QkIliGMULtOhl5LZfLvHQ.mft (raw, json) Hash identifier: lEkBqK0NiAK+xQZLdovd+fbHs+4pkK1fAw9HMahvjxg= Subject key identifier: A5:B2:39:F7:4B:62:3C:D7:00:BF:B5:AB:7C:4E:82:34:C8:B9:0B:31 Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Certificate serial: 0196C64C89652E4FA4821B1EFD17ED40C16F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft Manifest number: 01FD Signing time: Mon 12 May 2025 21:00:26 +0000 Manifest this update: Mon 12 May 2025 21:00:26 +0000 Manifest next update: Tue 13 May 2025 21:00:26 +0000 Files and hashes: 1: 4EVIucA70gYtRBC_kvd8S_jO4G4.roa (hash: f24fNYbERcDJzGGGVxLcXRg46QfyX7NJWLWSxrMNmcw=) 2: BEBIiS8kF8YsGnU_xtcNUlRLrD4.roa (hash: jOHIlKdvXIgJGWM14XmaB7UsAMXtqbb4a2RVgY2if5A=) 3: BjqTHtTtBtZx2Y5CozNWD3CEBt0.roa (hash: eW/XcbSH0tDYIAlNaQxhj837cfdUxkfKds65F/54mgM=) 4: C047O4QkIliGMULtOhl5LZfLvHQ.crl (hash: G0IyhR50aDs5djPpbyXe+96vYEJgCEUm0H8lJOWoOII=) 5: EvZmdpYLd03WERL_L0i0mrtj944.roa (hash: CV2qEuFjtfL/Sdsin89UXRGI8h47pjbkcQWbmiCWOHY=) 6: H49hyQPEQJXxJVi2iR8A2ADQ41U.roa (hash: eqi7i//uHcpOg1OfB0kupkpo9kTQKxZE6a6NNvU+Pyg=) 7: LWsi3KmW8bzkCxEOXVP0T6JNl74.roa (hash: ++a3kmsuF/zJu9wF6l25AqVnQ10r4JeQqeeIizqUJQ4=) 8: _sI3gk2hZDn41-4NfzG0rDsgjws.roa (hash: GJeNAr5zzIi7APfhQYD6zR5b4f6TKUkgkI8dhjWpt4s=) 9: b7g_AfGKRKl1uxe-BoiQM3sl0nw.roa (hash: Zf9ZuQPGxN3TX6S4uzmoIy9WChIwMZZm6ZNHezb6N+U=) 10: bCaBS4aQHjuaa_tTVMTRXq8OR_U.roa (hash: 7H4q9uVHSlMkwQO5xRA3Q4nmZoDkIn1SJmtZoSSXixQ=) 11: eXJnpYMa-IdGpU12uxGCY5NDT2Y.roa (hash: M3Nh2BNY8AV/HHul6zfhbO6slqPj10KjIlafndI4MS8=) 12: sbkxRvSrfQGNdpGANqUogURHroU.roa (hash: GVO8i7AC/aFii+I0dhy+QGbxHH4AqRNBV/o41DJJYK4=) 13: uSB4Q9lZ5N_vUTK7fY2jb9w2g4Y.roa (hash: br5Lt3idKAa3r0A/AYPd7r0VCPVHp7gxtlokiM1B+jU=) 14: uuTcIhmMVylXKoo0d8I18SaHjWU.roa (hash: a8ZKg1ASt06tQrhILg7SaB6+2r8ufbJSPrndEQoQ7X4=) 15: xHngG7-8SpvR4GU7uQJ9CSiwWZE.roa (hash: x8ABg3/WDvKaIH/AtPmCjRuLWVLjTRbBAhvhG1rjtSo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 May 2025 20:47:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:c6:4c:89:65:2e:4f:a4:82:1b:1e:fd:17:ed:40:c1:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74 Validity Not Before: May 12 21:00:26 2025 GMT Not After : May 13 21:00:26 2025 GMT Subject: CN=a5b239f74b623cd700bfb5ab7c4e8234c8b90b31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f9:17:21:8d:36:0d:8f:cf:e7:a0:9f:b6:b7: d4:a0:ce:94:f2:d7:94:49:b7:61:db:52:fe:8e:60: a0:ea:d1:06:bd:70:75:c9:af:a4:55:59:aa:55:15: 02:02:2f:5a:b6:a6:9d:13:55:39:06:16:b4:ac:a1: 0f:12:fd:8e:68:09:86:26:61:a0:e7:33:54:3a:27: 07:3a:66:9a:49:61:c2:1e:03:11:6b:98:ac:0c:65: 2f:e8:5d:eb:b0:05:fb:7f:23:48:bd:a4:7a:15:03: ce:bd:dd:18:34:2b:b3:a6:62:82:a7:c7:18:90:17: 27:4a:02:1b:6c:26:b9:48:8a:2d:77:96:d6:cd:9a: f1:e7:34:ea:64:cf:77:9d:84:ce:98:2a:68:2d:f6: e4:11:0b:9e:11:86:cf:94:eb:58:9c:c6:00:bf:56: 4a:80:63:ce:28:94:7f:05:c4:73:f0:51:15:ae:19: 60:76:e1:c9:59:2c:eb:90:63:24:a1:d3:97:34:d1: 02:54:bf:69:b9:9d:3e:a4:e2:69:95:43:2d:6c:8c: b7:3c:08:02:c3:59:6a:ec:04:89:7e:46:02:b6:a8: 7f:ce:02:cf:0c:55:1c:36:1c:7a:aa:e3:4f:32:12: 20:c5:24:f5:7b:2f:77:97:7f:24:56:18:98:ca:6b: fb:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:B2:39:F7:4B:62:3C:D7:00:BF:B5:AB:7C:4E:82:34:C8:B9:0B:31 X509v3 Authority Key Identifier: keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:6c:fb:96:b8:b7:54:61:d5:00:f9:9d:80:70:89:e3:f3:98: 1f:dc:99:c3:72:4e:67:d8:f7:24:58:93:75:a6:a2:d2:5d:51: eb:3c:08:39:c0:d9:46:56:a6:4a:81:5b:17:bd:42:42:e5:45: 83:77:14:b3:e4:f7:59:24:79:3b:d6:b0:d6:3b:87:a8:b2:22: e0:0e:82:c9:2b:a6:b6:76:44:a8:c2:8c:d2:31:9d:72:85:a4: 0c:c3:83:67:cb:55:21:a0:cb:93:ec:70:f7:3b:20:a0:ef:26: bb:f5:c0:0c:30:b7:fa:ea:55:ae:6b:39:1b:c1:32:f6:6d:bc: 12:83:41:92:16:10:f2:08:9c:e4:9c:e4:54:de:65:85:ee:23: c7:59:74:74:d4:eb:ba:a1:a7:92:51:a1:0c:63:dd:33:f3:bd: b8:97:2e:8d:e5:16:94:87:43:9f:fc:45:dc:3b:4f:88:15:b7: 69:a9:50:4e:5a:26:42:9d:a2:5c:c0:1b:8f:ff:69:ff:bd:c8: a8:42:7a:56:92:f7:20:b7:9d:d3:2a:49:b2:52:6a:a4:73:7f: 31:1c:c7:0c:52:d5:d8:35:a1:c0:68:40:28:7f:be:67:50:6e: 72:05:3e:b2:80:f1:4b:3b:d2:57:51:4b:03:81:18:9d:8b:a1: 9d:7a:79:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZbGTIllLk+kghse/RftQMFvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj YmJjNzQwHhcNMjUwNTEyMjEwMDI2WhcNMjUwNTEzMjEwMDI2WjAzMTEwLwYDVQQD EyhhNWIyMzlmNzRiNjIzY2Q3MDBiZmI1YWI3YzRlODIzNGM4YjkwYjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfkXIY02DY/P56CftrfUoM6U8teU Sbdh21L+jmCg6tEGvXB1ya+kVVmqVRUCAi9atqadE1U5Bha0rKEPEv2OaAmGJmGg 5zNUOicHOmaaSWHCHgMRa5isDGUv6F3rsAX7fyNIvaR6FQPOvd0YNCuzpmKCp8cY kBcnSgIbbCa5SIotd5bWzZrx5zTqZM93nYTOmCpoLfbkEQueEYbPlOtYnMYAv1ZK gGPOKJR/BcRz8FEVrhlgduHJWSzrkGMkodOXNNECVL9puZ0+pOJplUMtbIy3PAgC w1lq7ASJfkYCtqh/zgLPDFUcNhx6quNPMhIgxST1ey93l38kVhiYymv7MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKWyOfdLYjzXAL+1q3xOgjTIuQsxMB8GA1UdIwQY MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt MTRkMjM4NTI3ODM1LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1 LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA02z7lri3 VGHVAPmdgHCJ4/OYH9yZw3JOZ9j3JFiTdaai0l1R6zwIOcDZRlamSoFbF71CQuVF g3cUs+T3WSR5O9aw1juHqLIi4A6CySumtnZEqMKM0jGdcoWkDMODZ8tVIaDLk+xw 9zsgoO8mu/XADDC3+upVrms5G8Ey9m28EoNBkhYQ8gic5JzkVN5lhe4jx1l0dNTr uqGnklGhDGPdM/O9uJcujeUWlIdDn/xF3DtPiBW3aalQTlomQp2iXMAbj/9p/73I qEJ6VpL3ILed0ypJslJqpHN/MRzHDFLV2DWhwGhAKH++Z1BucgU+soDxSzvSV1FL A4EYnYuhnXp5bQ== -----END CERTIFICATE-----Generated at Tue May 13 02:32:33 2025 by rpki-client