$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft File: uqp7TAHpKcOJI5gatRyXJ6H58H4.mft (raw, json) Hash identifier: BjG4OFhO9pQmX3fezc3WjKyOUdS0CbJA9AvX4jbg7PQ= Subject key identifier: D1:E9:2E:3B:89:AC:A0:BB:00:8F:AF:F3:0C:D7:6E:AB:C8:C2:FF:BF Authority key identifier: BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E Certificate issuer: /CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e Certificate serial: 0196AF5733DFF71EAC652884B6029F776AF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft Manifest number: 0DAA Signing time: Thu 08 May 2025 10:00:49 +0000 Manifest this update: Thu 08 May 2025 10:00:49 +0000 Manifest next update: Fri 09 May 2025 10:00:49 +0000 Files and hashes: 1: 7McO252I-2XmB-n1NnBeB1r5CWE.roa (hash: 24OjT44qRE3dHEPo0tp7gh6oq8ab7wOoKSNtPKZcaBc=) 2: Bec3FuivOBDOqgjzPfv4d13m2lM.roa (hash: owG94wKPWPllEhJt14j/A1tpXG3GUHNv4s01kzZtAnY=) 3: HrLnTFOPuXGJZKS7rlmaWMaB12U.roa (hash: jcuLWaH/rcaC8v9EK0xYWQuHABbf0+s0Obyth7vsFT0=) 4: JSR7L8D9xzMVHTQmxCxocupUPs8.roa (hash: sFWVvlE7717fYPfXWHO2rnVLWNcg9ik7geNB96fmazw=) 5: JnCqxhyvDDTFwlQwcYA45oqNsts.roa (hash: X2ViL15etoBaQT1ZtUkjo76AgO/tgVupvfM/YNVslSw=) 6: McMBr1hsxhXrROzf0sr3mjGRuDc.roa (hash: Fvo8oGCRkNBeNpNWcCOxOgEGI6vuaFHxjYVbWtFIey0=) 7: Sh525ZOQJJbH9YDhZrYpqPsIxfs.roa (hash: PGMXYMk9j2WkhNa5b+RRTezsJs7pRowlF2ax1MZi69A=) 8: cIDWJL9g_fa8H__ObMHRE-i2WwY.roa (hash: WZfhhX//aYpvYb55NKq8Rk6SJoX28Rmvm2m76EVMcvc=) 9: uqp7TAHpKcOJI5gatRyXJ6H58H4.crl (hash: md5UfeuMbymHbRREiOLZF3voTQBqwpTTWR3vVh9YaWY=) 10: z7Zbfv6Q5DvvTSZX25hLRJ36zu8.roa (hash: uQ11jkD+2MzIqFlHgr0jlAF+ezlOM9wpcUkZ5cI8xPI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 May 2025 07:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:af:57:33:df:f7:1e:ac:65:28:84:b6:02:9f:77:6a:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e Validity Not Before: May 8 10:00:49 2025 GMT Not After : May 9 10:00:49 2025 GMT Subject: CN=d1e92e3b89aca0bb008faff30cd76eabc8c2ffbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3c:6d:b1:fe:86:06:66:71:34:70:43:93:50: cc:7b:06:88:44:bf:60:e2:4e:d5:04:c0:97:9c:52: ba:db:a5:10:17:c6:e6:58:1b:a7:76:2a:9a:19:02: 6d:9b:f1:77:98:3d:ed:46:2c:3c:b1:c8:ed:b1:b9: 86:37:7b:22:8b:ef:55:a9:52:07:a0:29:c4:9e:e2: 4a:b7:69:83:14:56:c6:99:90:54:bf:b9:2b:1a:19: ba:96:96:7a:ca:fd:d8:3a:57:02:49:d2:64:ff:e5: 80:33:51:ef:0c:26:a8:de:cb:75:35:bc:46:c7:d2: fb:6d:0c:ad:84:89:41:90:9e:89:ef:79:0c:04:dc: 9c:e7:d1:14:60:5d:2b:00:e9:9a:ab:f0:3f:b1:bc: aa:af:91:6c:cf:0f:ce:84:1c:eb:a7:b2:f1:f0:64: c0:66:5f:dc:68:f6:1a:40:a6:08:0d:94:9e:17:83: d8:4e:e4:3c:88:6f:34:84:ff:72:ae:e2:dd:47:bf: 7c:95:21:20:4a:ef:d5:da:cf:a1:d3:d5:d8:f6:d5: 04:c2:40:c9:3d:26:22:2b:7c:46:6e:b3:a4:59:9d: 4e:99:d0:17:c9:f1:aa:03:63:45:7d:13:f9:40:0e: 1d:5d:04:51:df:cf:fa:c6:7f:e3:35:fe:d1:e1:ec: 25:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:E9:2E:3B:89:AC:A0:BB:00:8F:AF:F3:0C:D7:6E:AB:C8:C2:FF:BF X509v3 Authority Key Identifier: keyid:BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:1a:7f:47:60:8d:c1:c5:cc:76:74:45:b9:b8:21:39:5d:7d: 8a:b1:ad:7f:79:86:44:e7:fc:9e:eb:89:c6:44:d2:ec:77:9c: b6:f8:51:18:da:82:8f:ec:d7:4a:94:11:d1:c0:ca:97:86:4d: b3:a2:63:a0:05:eb:c9:76:36:a6:c5:8a:4b:c2:8c:cc:ae:65: 75:27:1c:32:a9:5d:a0:90:52:4f:53:ff:a3:81:19:59:68:8c: e0:47:53:a9:f0:44:75:47:a7:8d:ce:60:4c:b2:dd:86:eb:0e: 7a:15:60:64:c6:60:41:31:cc:7b:ce:03:91:89:69:31:71:25: 39:3d:5a:54:0e:84:1b:a7:56:b4:f6:b6:f6:b3:df:cd:58:b3: c4:09:29:36:19:12:40:e3:5b:17:8a:be:9c:f5:b1:a2:a5:98: 22:11:4d:05:72:08:db:b6:7d:e3:03:e5:00:26:62:47:ea:35: 2e:dd:75:03:7d:59:d8:82:27:27:f1:4f:3e:76:46:aa:e3:ea: 02:d9:50:46:ad:1c:69:cd:c7:08:ec:c8:49:eb:19:7b:83:59: 61:c8:cc:47:16:42:27:61:8b:94:cf:b0:69:0e:38:b0:cd:1e: 88:4f:d8:59:38:a2:11:d6:ad:32:40:e9:b5:85:cf:e9:e6:92: 71:31:c6:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZavVzPf9x6sZSiEtgKfd2r5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYWE3YjRjMDFlOTI5YzM4OTIzOTgxYWI1MWM5NzI3YTFm OWYwN2UwHhcNMjUwNTA4MTAwMDQ5WhcNMjUwNTA5MTAwMDQ5WjAzMTEwLwYDVQQD EyhkMWU5MmUzYjg5YWNhMGJiMDA4ZmFmZjMwY2Q3NmVhYmM4YzJmZmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTxtsf6GBmZxNHBDk1DMewaIRL9g 4k7VBMCXnFK626UQF8bmWBundiqaGQJtm/F3mD3tRiw8scjtsbmGN3sii+9VqVIH oCnEnuJKt2mDFFbGmZBUv7krGhm6lpZ6yv3YOlcCSdJk/+WAM1HvDCao3st1NbxG x9L7bQythIlBkJ6J73kMBNyc59EUYF0rAOmaq/A/sbyqr5Fszw/OhBzrp7Lx8GTA Zl/caPYaQKYIDZSeF4PYTuQ8iG80hP9yruLdR798lSEgSu/V2s+h09XY9tUEwkDJ PSYiK3xGbrOkWZ1OmdAXyfGqA2NFfRP5QA4dXQRR38/6xn/jNf7R4ewlFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNHpLjuJrKC7AI+v8wzXbqvIwv+/MB8GA1UdIwQY MBaAFLqqe0wB6SnDiSOYGrUclyeh+fB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFwN1RBSHBLY09KSTVnYXRSeVhKNkg1OEg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYjllNzAtNDg5YS00MDg4LWIyOGUt ZTY4ZjZjZjJjMGQyLzEvdXFwN1RBSHBLY09KSTVnYXRSeVhKNkg1OEg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYjllNzAtNDg5YS00MDg4LWIyOGUtZTY4ZjZjZjJjMGQy LzEvdXFwN1RBSHBLY09KSTVnYXRSeVhKNkg1OEg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHhp/R2CN wcXMdnRFubghOV19irGtf3mGROf8nuuJxkTS7HectvhRGNqCj+zXSpQR0cDKl4ZN s6JjoAXryXY2psWKS8KMzK5ldSccMqldoJBST1P/o4EZWWiM4EdTqfBEdUenjc5g TLLdhusOehVgZMZgQTHMe84DkYlpMXElOT1aVA6EG6dWtPa29rPfzVizxAkpNhkS QONbF4q+nPWxoqWYIhFNBXII27Z94wPlACZiR+o1Lt11A31Z2IInJ/FPPnZGquPq AtlQRq0cac3HCOzISesZe4NZYcjMRxZCJ2GLlM+waQ44sM0eiE/YWTiiEdatMkDp tYXP6eaScTHGQA== -----END CERTIFICATE-----Generated at Thu May 8 17:22:29 2025 by rpki-client