$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft File: xoxl5pm1dqsROnm-iCiUjx5swmA.mft (raw, json) Hash identifier: JdQqIulIv0UQBB9K2Q05iZu1O1uwlaKCv4s5A9ysUlk= Subject key identifier: AE:0C:B7:8A:20:E1:CB:39:94:1F:F5:88:33:C6:53:8D:D4:40:9B:6F Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260 Certificate serial: 0196BEC9C34AD29348F67A93F9BEA774E579 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft Manifest number: 154E Signing time: Sun 11 May 2025 10:00:15 +0000 Manifest this update: Sun 11 May 2025 10:00:15 +0000 Manifest next update: Mon 12 May 2025 10:00:15 +0000 Files and hashes: 1: 1-MSRWSQtqSdDykFqgK028cizJi0.roa (hash: WqD5qb/jOk/ShamzzXPrgMl7YDZhBR7eUlMqzZQm2Dc=) 2: OnXz6WgfuRiDu5-Y3YnMkk3kcO0.roa (hash: zjtP8G1YewfWQQsF2jtG3Q4Y+lx5iFA26+Blbps5UAk=) 3: iSE8VzIXYTA3-dooaxmYWKpS0qo.roa (hash: IeDZRrl6CgL8vBwDH71W6sMJaMN7Vdw8hCmmUYyI5IA=) 4: kV9BaaJp3bhAo4tQDSQdD_KGKA8.roa (hash: f3JiebE8gczSZgpVGp2jkCNZn7S8iorDwX6Di/s1kP8=) 5: nULdL8xjB16vfCp-N77OS9ijtts.roa (hash: Q9emnLmKgjXDvnlXHjQW3LysE+69K7L9y44jhFRbDQI=) 6: n_Up9lnfTJMz-js3Cbgk_K52fyw.roa (hash: ecIKB8OiEWMj8aNDIiv7lS/1mdAO1io7fStA2u1k86M=) 7: pPdITgISwe1ls0n4B9Wg40Ntg08.roa (hash: NBh0wXAnQnIFqGvw4LVqk54dGRKPT/MfixOxmNNyNJU=) 8: q7L_5WyvnyBOLyUjnhDU9nBD9B8.roa (hash: pr1LjoRubfJ5RCqICApgGf7peGcCrhGApgNtsgmVs3Q=) 9: rotm5S1yeVh_byhtZ0TuP8nb1lI.roa (hash: bGH5+ZfT48IjV7Cmls3wXMYIr6+sn0IXhXcbuXsyl58=) 10: xoxl5pm1dqsROnm-iCiUjx5swmA.crl (hash: UjsCm0UsnpY/j1cZGNJG/BOKEk6l7Seru5b6ezqcBzQ=) 11: y4UTVrbv13sP5rGkuwiRwwFMthg.roa (hash: L96Jgm8W9VYPegZ+vaGCTBJpUDWh8fXSkJC40yErhWU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 May 2025 10:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:be:c9:c3:4a:d2:93:48:f6:7a:93:f9:be:a7:74:e5:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260 Validity Not Before: May 11 10:00:15 2025 GMT Not After : May 12 10:00:15 2025 GMT Subject: CN=ae0cb78a20e1cb39941ff58833c6538dd4409b6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9a:ab:2e:bc:57:fc:ff:0b:13:cf:55:9a:76: 92:49:bc:32:69:13:06:3d:fe:5c:89:3e:3b:73:42: f4:b3:df:da:2f:6d:18:3a:ce:f3:eb:34:10:b8:42: d3:dc:e0:64:db:b0:37:30:be:cc:4f:84:4e:18:d9: 04:37:c0:4a:92:51:32:75:9e:42:c8:7a:6d:66:c2: 5f:e1:02:62:47:e1:5d:98:84:4c:9d:a9:d2:c2:7a: c6:96:2e:84:69:a2:0a:d5:98:39:bf:4e:e4:50:d1: 3e:b5:2d:1b:93:d9:93:81:82:26:62:86:eb:1d:5f: 4f:6c:0e:cd:ae:89:0b:36:bd:e5:87:7f:32:e2:cf: 6d:57:f1:a9:3b:2c:56:72:86:95:31:ae:33:4b:27: be:07:f5:59:7d:b1:6b:76:a5:79:9f:cc:e2:d7:eb: 0f:0d:af:2e:ca:5f:2c:eb:5d:af:4c:35:de:e2:5d: dc:70:92:ec:65:ba:96:d2:4a:e9:25:6b:4a:1a:da: 21:3e:bf:0c:35:09:9c:5c:14:3b:c4:4d:86:f1:95: 9f:ba:fc:78:d8:00:86:4b:4f:17:18:2c:f1:a5:45: 81:c8:2f:db:d1:ac:62:8b:61:70:e8:6c:32:3e:14: f6:91:df:a8:24:dd:ca:e9:a5:79:a3:93:48:dd:86: 29:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:0C:B7:8A:20:E1:CB:39:94:1F:F5:88:33:C6:53:8D:D4:40:9B:6F X509v3 Authority Key Identifier: keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:07:c3:0f:73:76:bd:87:e7:b3:c2:c4:c9:21:94:26:67:49: d6:18:e3:06:ed:63:53:8b:b9:0d:b9:f4:77:4b:f1:e0:30:91: 2d:a5:b3:b0:17:a8:a3:40:ef:f5:36:7a:91:31:07:ed:71:4e: ec:c4:a5:cd:d1:7c:ca:31:c8:86:6a:7f:69:9c:44:53:26:ad: d0:99:bb:8a:2b:e2:31:77:8a:77:1c:53:89:3f:28:f6:c9:8f: 3e:f6:8b:eb:67:98:1d:eb:fa:e1:22:dd:10:87:06:99:11:c7: 26:e2:af:5d:2d:c9:00:be:4e:3b:50:f9:03:b0:78:ee:df:39: 52:b6:ca:fe:61:c0:a5:32:9a:5c:27:e4:db:70:ef:66:60:1b: 64:98:d9:6c:09:7d:6b:91:c3:32:22:be:1e:89:73:f3:0e:4f: 16:13:4a:c5:93:ce:a0:71:66:e0:70:a3:49:7c:85:fb:25:b5: 73:d3:d5:28:9b:c8:be:95:67:cf:f3:34:55:b8:08:d6:48:74: a7:10:fd:e9:fd:a3:77:88:67:e3:4a:26:08:26:37:43:90:61: fa:5b:5b:6f:19:74:c7:75:c5:6a:6c:3f:f2:73:44:a2:35:0f: cb:34:fb:85:d2:58:6f:93:ae:35:3c:6b:d0:41:0d:de:e4:8c: b8:e7:27:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa+ycNK0pNI9nqT+b6ndOV5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2OGM2NWU2OTliNTc2YWIxMTNhNzliZTg4Mjg5NDhmMWU2 Y2MyNjAwHhcNMjUwNTExMTAwMDE1WhcNMjUwNTEyMTAwMDE1WjAzMTEwLwYDVQQD EyhhZTBjYjc4YTIwZTFjYjM5OTQxZmY1ODgzM2M2NTM4ZGQ0NDA5YjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJqrLrxX/P8LE89VmnaSSbwyaRMG Pf5ciT47c0L0s9/aL20YOs7z6zQQuELT3OBk27A3ML7MT4ROGNkEN8BKklEydZ5C yHptZsJf4QJiR+FdmIRMnanSwnrGli6EaaIK1Zg5v07kUNE+tS0bk9mTgYImYobr HV9PbA7NrokLNr3lh38y4s9tV/GpOyxWcoaVMa4zSye+B/VZfbFrdqV5n8zi1+sP Da8uyl8s612vTDXe4l3ccJLsZbqW0krpJWtKGtohPr8MNQmcXBQ7xE2G8ZWfuvx4 2ACGS08XGCzxpUWByC/b0axii2Fw6GwyPhT2kd+oJN3K6aV5o5NI3YYpPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK4Mt4og4cs5lB/1iDPGU43UQJtvMB8GA1UdIwQY MBaAFMaMZeaZtXarETp5vogolI8ebMJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYt NjA3ZDRmMzdmNTlmLzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYtNjA3ZDRmMzdmNTlm LzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApQfDD3N2 vYfns8LEySGUJmdJ1hjjBu1jU4u5Dbn0d0vx4DCRLaWzsBeoo0Dv9TZ6kTEH7XFO 7MSlzdF8yjHIhmp/aZxEUyat0Jm7iiviMXeKdxxTiT8o9smPPvaL62eYHev64SLd EIcGmRHHJuKvXS3JAL5OO1D5A7B47t85UrbK/mHApTKaXCfk23DvZmAbZJjZbAl9 a5HDMiK+Holz8w5PFhNKxZPOoHFm4HCjSXyF+yW1c9PVKJvIvpVnz/M0VbgI1kh0 pxD96f2jd4hn40omCCY3Q5Bh+ltbbxl0x3XFamw/8nNEojUPyzT7hdJYb5OuNTxr 0EEN3uSMuOcnFw== -----END CERTIFICATE-----Generated at Sun May 11 18:54:07 2025 by rpki-client