$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft File: 7TChMXGFYKNKs0k4hOhY7EMfatE.mft (raw, json) Hash identifier: SggGsaPzuV1+t3ILJjgOJJbOqmf1D0BPYtOBdfdSw1g= Subject key identifier: 9A:13:A5:A9:E6:0B:59:ED:42:CE:14:E3:A5:4C:F9:A3:95:00:41:EB Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1 Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1 Certificate serial: 0196BB924C301F1C46DBEE3D588AF354F9DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft Manifest number: 0B8A Signing time: Sat 10 May 2025 19:00:49 +0000 Manifest this update: Sat 10 May 2025 19:00:49 +0000 Manifest next update: Sun 11 May 2025 19:00:49 +0000 Files and hashes: 1: 7TChMXGFYKNKs0k4hOhY7EMfatE.crl (hash: CkIzVOWDeNLicQMONBd5c0e9Wsf7X6lR6asnKuyfHKk=) 2: CMrHF8H9YG0k4ImZKJ0Wv5prbiU.roa (hash: 7mi0g+KT3QF83gURKdhKKpg94gTD0horBgadWGVDb8E=) 3: FfSeCwPXspTGNJXs1YFUWRkPWd8.roa (hash: 2wkLeptVYT3svowWE9iGU2ivjkcGP5lQfdyzSutjYiw=) 4: McQBWIkKTuiBTTZqAfwfimGiJv8.roa (hash: kezXGJ7slA/edYCjH/7MkGlnqiO9ieoRDACp9a7xuJg=) 5: PsSNrF4GYSF0wH771eRpN_af86E.roa (hash: 9DKoGdEkKbdB2FEIrzJZnlfynd23Qv+qRMTZsGGY64U=) 6: Sf-fnn87zqI6IDyZOCzOmqlh3ZM.roa (hash: ys8hXeVOTWclda1oWzQD6jxmP+pwlIxNYEQ2N3HNoIA=) 7: _Ehrq3F22eZQSCUZ41NXs1Mis4w.roa (hash: culdYqYdPXx/iLIUaW8VpKJoZ1AwgkT3iD+KMiCIgQM=) 8: buI3YKDrfWPqXXHZRlTS3-bj0cs.roa (hash: UTI3BZiE8tVZY3qvGvbwT+0MAq76+0w1dzLWYm9V4G0=) 9: lJu4vvomNeL77Z8YpH2r84A1bZM.roa (hash: mTkLp4XIHK60hTMHWyRMAysJ6XfiJSK2I0bd+JC5zqI=) 10: qi0InhuXBU-ET3BQIygAjHDv7R4.roa (hash: EwPEIgFR9Y7apfRR0iJdm8aoI2On5DfKKekezl88mDo=) 11: qu7kmExCuDOLhLu5jIOipsHVZUU.roa (hash: mpb42buPTORd/2C44Vbt1Yru22KauX6K16YgcD4OCHs=) 12: uw16RrYC31ae26o-GMI2QavuMU0.roa (hash: 8/SaDVncSWNGOp0BT1E2Z6/gbpYML5fhwg/+UmSEX/w=) 13: v3Y2kQBxLTzeaG8d43skpwQULcs.roa (hash: B7Egk3MrSfO4fxdlQbPhy1Krh5zi1OM2O8JrAFo0eOM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 May 2025 19:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:bb:92:4c:30:1f:1c:46:db:ee:3d:58:8a:f3:54:f9:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1 Validity Not Before: May 10 19:00:49 2025 GMT Not After : May 11 19:00:49 2025 GMT Subject: CN=9a13a5a9e60b59ed42ce14e3a54cf9a3950041eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:80:2c:60:23:ab:5f:2a:ae:f5:61:36:08:04: c8:11:57:dc:2a:bd:cc:d2:3a:53:9c:4a:cc:d8:eb: 87:b1:ad:19:de:0b:f0:ce:56:cc:94:eb:b5:b4:67: c8:48:c2:c6:14:e4:ef:3a:f1:ab:5d:af:f6:b6:08: 95:f9:04:f3:18:00:36:76:b7:2f:4f:4b:e6:c6:ca: cd:b6:f6:4e:da:51:69:24:6e:33:8c:89:bc:8b:be: cf:14:4e:2a:fb:92:dd:8e:4e:66:61:51:87:92:a1: 3a:c5:3c:7a:81:77:d3:9a:2b:45:e7:f1:48:e7:8e: e8:f3:a6:33:09:40:1b:40:ae:c4:fb:1e:70:33:8f: 9a:bc:02:29:15:96:9d:d7:fe:22:14:5d:5b:a4:19: 6c:e8:ce:18:d3:4a:32:b4:62:bb:3c:54:9e:71:1b: b1:66:37:18:7f:c3:53:d8:7a:94:4c:59:68:7b:cf: b0:9f:9a:b6:19:d8:d8:00:03:26:ad:c1:cb:00:ea: 9a:7a:13:02:d1:aa:1a:2e:d5:e7:2b:a3:b2:f2:1c: 6e:39:b8:54:93:91:51:f0:ca:ab:88:98:03:80:56: 05:b8:32:25:59:fd:6b:28:d7:2d:ea:18:27:9b:f6: 50:7b:33:61:e2:fd:94:c2:94:d4:b8:dc:b3:56:bb: 13:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:13:A5:A9:E6:0B:59:ED:42:CE:14:E3:A5:4C:F9:A3:95:00:41:EB X509v3 Authority Key Identifier: keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:be:04:bf:33:ee:dd:b3:63:2d:91:0b:97:f3:aa:9e:2f:d3: f7:2d:60:9c:2e:04:96:89:de:53:d7:0c:cc:e2:5b:c7:c7:90: 77:16:6f:95:f9:b5:ad:cc:56:62:c0:8f:51:ba:09:bd:4f:3a: 8c:f6:f1:25:86:8e:c8:36:47:38:86:69:70:7d:50:de:b5:a1: 97:ea:85:64:a6:21:a5:2a:c8:a7:95:fc:53:5d:4a:1d:a4:09: 7b:b3:c4:df:f9:4f:7a:66:ae:16:c9:5c:b7:f0:cc:b3:9c:16: 5d:60:15:b6:70:a4:24:26:8f:98:bc:17:04:94:7a:42:84:95: de:b6:19:6f:d7:5a:51:bb:f4:ef:53:95:47:00:35:ca:36:7a: 4a:e0:9b:03:59:57:8a:4a:6d:b5:41:c3:c8:61:74:e5:54:8a: 48:2b:f6:c8:85:bd:b5:a0:26:74:ad:26:7d:62:77:ea:2a:8d: b3:d8:27:d4:25:9b:41:72:e5:e7:1f:f0:9e:53:40:3d:fa:1b: 64:fa:fa:bc:e6:69:05:a0:bc:1e:0f:3a:1b:8d:a5:ab:5c:a4: 26:9f:1e:be:36:70:45:ea:44:4c:ff:a0:85:04:5a:19:1a:dd: 37:7d:28:ff:e1:e7:65:a9:1b:25:e9:23:88:99:3d:da:31:de: f1:21:3e:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa7kkwwHxxG2+49WIrzVPnaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkMzBhMTMxNzE4NTYwYTM0YWIzNDkzODg0ZTg1OGVjNDMx ZjZhZDEwHhcNMjUwNTEwMTkwMDQ5WhcNMjUwNTExMTkwMDQ5WjAzMTEwLwYDVQQD Eyg5YTEzYTVhOWU2MGI1OWVkNDJjZTE0ZTNhNTRjZjlhMzk1MDA0MWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYAsYCOrXyqu9WE2CATIEVfcKr3M 0jpTnErM2OuHsa0Z3gvwzlbMlOu1tGfISMLGFOTvOvGrXa/2tgiV+QTzGAA2drcv T0vmxsrNtvZO2lFpJG4zjIm8i77PFE4q+5Ldjk5mYVGHkqE6xTx6gXfTmitF5/FI 547o86YzCUAbQK7E+x5wM4+avAIpFZad1/4iFF1bpBls6M4Y00oytGK7PFSecRux ZjcYf8NT2HqUTFloe8+wn5q2GdjYAAMmrcHLAOqaehMC0aoaLtXnK6Oy8hxuObhU k5FR8MqriJgDgFYFuDIlWf1rKNct6hgnm/ZQezNh4v2UwpTUuNyzVrsTQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJoTpanmC1ntQs4U46VM+aOVAEHrMB8GA1UdIwQY MBaAFO0woTFxhWCjSrNJOIToWOxDH2rRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTkt NGIzYjFiNjNiNmFiLzEvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTktNGIzYjFiNjNiNmFi LzEvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXr4EvzPu 3bNjLZELl/Oqni/T9y1gnC4EloneU9cMzOJbx8eQdxZvlfm1rcxWYsCPUboJvU86 jPbxJYaOyDZHOIZpcH1Q3rWhl+qFZKYhpSrIp5X8U11KHaQJe7PE3/lPemauFslc t/DMs5wWXWAVtnCkJCaPmLwXBJR6QoSV3rYZb9daUbv071OVRwA1yjZ6SuCbA1lX ikpttUHDyGF05VSKSCv2yIW9taAmdK0mfWJ36iqNs9gn1CWbQXLl5x/wnlNAPfob ZPr6vOZpBaC8Hg86G42lq1ykJp8evjZwRepETP+ghQRaGRrdN30o/+HnZakbJekj iJk92jHe8SE+Cg== -----END CERTIFICATE-----Generated at Sun May 11 03:54:12 2025 by rpki-client