$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft File: nLJc5VDk2b2gW9XUXItro3Qwu7o.mft (raw, json) Hash identifier: IEYK4Qw8aDEU4FLkbfZA1glvipDtgApi/F9q+xKFfsY= Subject key identifier: A6:B3:0A:AB:8A:44:F1:E1:D9:5C:FC:52:7B:8C:02:53:EB:C0:B9:D5 Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA Certificate issuer: /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Certificate serial: 0196A4D3810821ED82DE2B852BAD0F4A2FD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft Manifest number: 0EF4 Signing time: Tue 06 May 2025 09:00:46 +0000 Manifest this update: Tue 06 May 2025 09:00:46 +0000 Manifest next update: Wed 07 May 2025 09:00:46 +0000 Files and hashes: 1: 5twkGWnpZ3caWcoF0F7nZ3MnxRQ.roa (hash: Hj9ctK8yUmftQlZpCOc5gcL4pBH+76rKw29EPYTV1fY=) 2: 6t_-rwl5vkceJUl9xfuErIgk5XQ.roa (hash: UgA7/ParQEm4RUB+nS1eICM0VcT/VJB2T/2XjYuyjiU=) 3: CcOTWwBfhnDK4i-Cl6vgTQ1Ne6Q.roa (hash: 0gfOeo67IeexaN6S4XXz6/wYaUsrA1sXsSwqEGJjGB8=) 4: Kkr4WQTbiLrBJjIFNHmfQjqdMFs.roa (hash: AX2E33mALAyiSH2uL+jaoucILuyqIMUcyM5PTXw0LYA=) 5: XDROFBDLzXZk58Wa7Gj_bxIFP24.roa (hash: oEZB4Wy5f3UZqEPOPaZ8r51Wy4lzW93yWdCW8EWeAw0=) 6: fsRjNoJDy9POHF18ZkBOzQiMl94.roa (hash: pTBEz/UhwNCD7057vDv5QDiSVRnDRK75JX++XfB+B70=) 7: l0gHM8GvVK6QwtZ12bJdUWZyAgA.roa (hash: EQ1dP2YRTk2eZV0a40sNzCpIDgU0CGJQGOvWRKK6OaU=) 8: lIqtXZgZb6FK3xchEu_KzpPH9HY.roa (hash: EF/nDh6v7FHlrVK+Jno0NvRyT9dpjTxvni+KKTpPgho=) 9: nLJc5VDk2b2gW9XUXItro3Qwu7o.crl (hash: 8tE6V+oT+ml8Obr7q7X+03RRyN6R1eb/0opebEd83mo=) 10: uHCer9bSYtAYzAW97IkYAtxT0oY.roa (hash: pEZrL5HUVwpESwP8P9Avj4b8s7dLWZdI+MAnQfTy42g=) 11: zLYfKKvwZksRC-Mec9uQxezCf-I.roa (hash: 7jSn1GJtzfCE3yqBQcJd/SMTsqwM51FfYe/cCLi5Z4A=) 12: zS2PBrD2vmlXLTrGFHERr-Tg3sM.roa (hash: ZKfnpYOgYarKcHUc2HZAGzDoCt3IGKzpVqNwP6NLT/8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 May 2025 09:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:a4:d3:81:08:21:ed:82:de:2b:85:2b:ad:0f:4a:2f:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Validity Not Before: May 6 09:00:46 2025 GMT Not After : May 7 09:00:46 2025 GMT Subject: CN=a6b30aab8a44f1e1d95cfc527b8c0253ebc0b9d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e4:ba:72:18:65:7b:27:f4:dc:09:8e:6d:0e: 0a:c8:86:97:b2:7f:59:3f:f8:e9:d3:a1:cc:b5:b4: 8d:3e:24:20:50:43:12:45:83:e9:ab:3f:4f:d8:1e: 64:32:36:8d:8a:e7:2f:73:11:1d:6a:ec:d4:9a:c7: 54:00:10:42:38:6f:9e:9c:d5:f1:0e:2d:ef:1d:de: 6c:67:f7:f6:3a:0b:69:12:3f:71:ba:19:4b:ec:18: 20:1d:60:a6:56:49:f5:59:51:62:98:16:9e:c7:00: a1:1e:33:11:9e:aa:90:55:57:12:80:78:2c:18:e1: a9:71:8c:6b:8d:85:9a:6f:72:5f:36:5a:2d:65:14: 00:29:6a:67:d0:98:6d:60:31:0c:24:5d:e5:14:c8: c9:75:e9:c4:9e:a0:b3:e1:a2:24:4b:df:df:43:2a: 0f:ad:51:67:fb:45:9d:20:a5:7f:54:a5:26:f3:c0: 30:85:f7:98:6e:79:30:bd:0b:1d:f8:ef:44:59:a1: 6c:6d:a6:1a:20:3c:01:81:19:9b:84:83:5f:ea:6c: c1:8b:db:2a:a1:ca:88:c1:d8:6f:2c:b2:49:ee:ee: 7e:69:25:36:a3:38:2c:66:14:44:f0:19:12:ea:26: 86:31:26:44:ac:64:b5:ec:b2:a9:c1:1f:78:8b:af: 1a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:B3:0A:AB:8A:44:F1:E1:D9:5C:FC:52:7B:8C:02:53:EB:C0:B9:D5 X509v3 Authority Key Identifier: keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:9b:be:a1:59:cb:5a:97:b2:58:cf:b0:e3:98:19:99:76:46: 1b:50:f3:32:d3:18:19:1f:2b:3d:d5:89:1f:bf:41:f8:c3:cf: 2c:62:d8:50:41:77:51:96:06:3c:4a:ae:0f:38:4e:62:64:75: 2f:c5:7c:f3:5e:22:ce:d1:df:c7:ed:ed:e1:26:a3:ba:f4:32: 6b:d2:7a:a0:62:0f:ab:d0:6d:0f:77:e7:11:04:93:1d:59:d8: 87:7a:f0:3d:e3:36:bb:a0:ab:a6:ae:fa:fa:19:b7:d8:88:59: 0a:0e:ad:96:63:68:b9:73:6a:ea:a1:2b:b1:72:a7:5e:88:b5: 39:1e:f0:79:61:71:a2:a0:5b:83:19:2f:38:04:a3:66:5c:46: 60:7a:59:7c:30:fd:08:f2:bc:0d:ce:83:51:f9:7a:b5:a2:f3: 8c:70:81:1b:61:47:55:c3:13:7d:07:15:c8:9d:e9:45:ab:62: 78:d3:ac:31:31:f2:09:a3:12:f3:49:22:b5:45:49:99:5d:3a: af:89:6c:61:1a:8f:1e:1c:5a:cb:05:14:e4:08:81:39:b0:1e: 43:3a:d0:05:45:ce:70:89:b4:34:52:f1:4d:0f:89:fa:d8:4f: 1a:da:19:c0:89:f5:72:14:12:1d:2b:8c:3e:15:63:1a:f8:fe: 17:85:db:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZak04EIIe2C3iuFK60PSi/XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYjI1Y2U1NTBlNGQ5YmRhMDViZDVkNDVjOGI2YmEzNzQz MGJiYmEwHhcNMjUwNTA2MDkwMDQ2WhcNMjUwNTA3MDkwMDQ2WjAzMTEwLwYDVQQD EyhhNmIzMGFhYjhhNDRmMWUxZDk1Y2ZjNTI3YjhjMDI1M2ViYzBiOWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+S6chhleyf03AmObQ4KyIaXsn9Z P/jp06HMtbSNPiQgUEMSRYPpqz9P2B5kMjaNiucvcxEdauzUmsdUABBCOG+enNXx Di3vHd5sZ/f2OgtpEj9xuhlL7BggHWCmVkn1WVFimBaexwChHjMRnqqQVVcSgHgs GOGpcYxrjYWab3JfNlotZRQAKWpn0JhtYDEMJF3lFMjJdenEnqCz4aIkS9/fQyoP rVFn+0WdIKV/VKUm88AwhfeYbnkwvQsd+O9EWaFsbaYaIDwBgRmbhINf6mzBi9sq ocqIwdhvLLJJ7u5+aSU2ozgsZhRE8BkS6iaGMSZErGS17LKpwR94i68aMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKazCquKRPHh2Vz8UnuMAlPrwLnVMB8GA1UdIwQY MBaAFJyyXOVQ5Nm9oFvV1FyLa6N0MLu6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYt YmU0NWYwZDJhYmJiLzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYtYmU0NWYwZDJhYmJi LzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH5u+oVnL WpeyWM+w45gZmXZGG1DzMtMYGR8rPdWJH79B+MPPLGLYUEF3UZYGPEquDzhOYmR1 L8V8814iztHfx+3t4SajuvQya9J6oGIPq9BtD3fnEQSTHVnYh3rwPeM2u6Crpq76 +hm32IhZCg6tlmNouXNq6qErsXKnXoi1OR7weWFxoqBbgxkvOASjZlxGYHpZfDD9 CPK8Dc6DUfl6taLzjHCBG2FHVcMTfQcVyJ3pRatieNOsMTHyCaMS80kitUVJmV06 r4lsYRqPHhxaywUU5AiBObAeQzrQBUXOcIm0NFLxTQ+J+thPGtoZwIn1chQSHSuM PhVjGvj+F4Xb+A== -----END CERTIFICATE-----Generated at Tue May 6 16:18:41 2025 by rpki-client