$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft File: yE1hzRftkuVLszl_HlprOQSsbwU.mft (raw, json) Hash identifier: 3RgliXSaxEThGuLCXykQETaxQyCMQ7G9dmJwB+Yxcjg= Subject key identifier: 39:86:62:42:7B:66:EA:88:2A:82:9E:D3:8D:0E:9E:B5:DB:DE:F2:D5 Authority key identifier: C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05 Certificate issuer: /CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05 Certificate serial: 0196BF6F67BE975B42D0D3675EC66662F449 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft Manifest number: 153F Signing time: Sun 11 May 2025 13:01:11 +0000 Manifest this update: Sun 11 May 2025 13:01:11 +0000 Manifest next update: Mon 12 May 2025 13:01:11 +0000 Files and hashes: 1: 7lgq0ctAzIlTDcpOLaQGdaGThZk.roa (hash: e5z2Mfd4VCKCw2JmNleVEdAAScHXO8Xd9p2GShP5Y6E=) 2: IGLb7JdpoxpYlnFXvXAzGRRfnEo.roa (hash: 0HJkbHEqR9KGOAfONOEGNISfFQwVd9M/ZUhb0aiOuaQ=) 3: L_lziZvf0rcW2nhVL69U2cxHt5E.roa (hash: pANePALmK/hOXRwbvUEA/qtpc0qlGhfdWdBBREZqc1k=) 4: YtSu06eBvsaI_VOFmqz1IslXnNc.roa (hash: 0dn7VD8ICYAbfWAEObXxBVJEjbsCWfJ8U7nwROGAGsU=) 5: ckan5dvz7J1ZSK30Drxlo4PWhMs.roa (hash: F1BRb89WpgPtx0JUztwDXeDnh4+IrOFx75odNR04usQ=) 6: dLz_hs_QORbsBLSIa-GqwYxnFoY.roa (hash: +fTN+O03RfwmbM+R0hQdMI6NFyRIvlQwmN4JSANhNh0=) 7: flXkvhrZJ0ZeBKtpmmtVGzFsQKI.roa (hash: Y9UGCFlpeU/Vq7d3cJo997/pq2lWNIQ3AFJn/rIco44=) 8: ikN4SSSIJdpATfbTuF1aqPVQm8w.roa (hash: gunzQ7zSHNaZSvXp8QC6wdbsRU0gF2fXQubVjTHi9K8=) 9: nBGnunXHIlzfqmh1yvjBYc2bnwI.roa (hash: AE0YoKWgcnhxm5wM19OntmREG6LsPgDjKTOjRjiZyzs=) 10: yE1hzRftkuVLszl_HlprOQSsbwU.crl (hash: wwHKKxzvP5n4iC6SqEI3p3mE75Q94zaN5Yqfgp3RIZI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 May 2025 13:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:bf:6f:67:be:97:5b:42:d0:d3:67:5e:c6:66:62:f4:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05 Validity Not Before: May 11 13:01:11 2025 GMT Not After : May 12 13:01:11 2025 GMT Subject: CN=398662427b66ea882a829ed38d0e9eb5dbdef2d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:05:d7:12:0b:f3:1d:b6:be:1a:02:81:60:ea: 9d:9b:37:82:62:53:18:40:19:24:d6:4b:17:ae:07: 13:1b:58:0b:f5:a2:3b:7d:b7:32:08:e5:9c:37:66: 65:03:83:d3:fa:95:1d:72:8f:26:8e:4d:45:66:af: ee:d2:88:ac:26:f5:de:03:03:b0:7b:0b:58:df:82: 27:b3:aa:7f:fa:e1:6c:d0:ec:a9:5c:92:17:f4:6d: b4:cb:19:55:72:7c:6c:47:0a:91:97:23:04:e8:0c: cf:87:1a:cd:e1:d3:1d:6d:2a:7d:1a:f7:1e:6d:d0: 1e:6e:be:f4:fe:f7:ff:ab:ca:5d:43:ea:cc:77:db: 19:6b:49:32:b6:d2:60:65:fb:e0:82:30:89:9c:35: 9a:c4:61:18:7e:5a:0c:e8:46:84:35:04:4d:b6:d9: c8:ce:0c:6c:c2:24:4a:1b:af:84:13:61:1a:d9:41: 62:fa:9d:33:24:99:e7:a2:20:ce:7a:e5:6f:87:c3: e5:b6:7b:f3:c6:65:00:a2:09:87:cd:d5:64:fe:e6: 96:89:65:bc:47:cf:0f:76:95:d6:bb:96:fa:0b:0a: 7a:36:e2:e8:d4:18:c1:2b:53:bd:b3:5c:63:44:8e: 21:34:85:6d:f1:16:10:31:eb:f3:52:d3:90:1e:35: ed:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:86:62:42:7B:66:EA:88:2A:82:9E:D3:8D:0E:9E:B5:DB:DE:F2:D5 X509v3 Authority Key Identifier: keyid:C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:d8:6f:42:d6:06:c8:5b:10:6a:2c:03:64:29:b0:cb:07:62: 1b:d2:b6:63:05:6f:24:4d:f7:99:5e:52:b7:41:2a:27:fc:a1: a5:37:56:28:16:8b:4f:c2:ed:88:be:6a:5c:7d:9e:40:f1:2f: 82:7c:46:41:ee:2c:63:79:20:5a:9b:d5:9b:01:11:72:e3:4b: 5b:44:59:98:f2:58:f5:9d:2b:2c:bc:e0:99:7e:9f:eb:45:1b: ee:41:a2:1e:23:4d:e0:94:6e:b8:75:ca:97:44:6e:35:4c:12: 49:21:65:e7:21:ca:c1:81:bc:ab:23:d4:d8:b5:5b:ee:ab:fc: cf:2d:7c:29:ca:ca:a5:9d:75:b8:67:20:7f:64:87:b1:09:55: 17:bc:73:ea:62:8b:3f:89:47:e7:d5:5c:52:ac:b2:a8:15:fe: 84:18:1b:3c:8c:b3:ce:4e:01:19:31:e8:0b:6b:ba:30:2c:04: 23:8a:47:9d:fb:b6:cd:2b:98:41:2f:42:d8:4b:99:78:b6:0d: 45:1c:d5:aa:d4:ea:85:8c:8d:47:71:12:55:a1:51:95:1d:2e: 7e:d4:59:b6:68:c3:76:56:57:ad:a2:9f:50:61:49:60:fe:b2: 12:f4:5c:d8:9e:6f:cd:69:f8:28:f4:82:0e:53:3f:30:cf:0d: a3:82:15:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa/b2e+l1tC0NNnXsZmYvRJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4NGQ2MWNkMTdlZDkyZTU0YmIzMzk3ZjFlNWE2YjM5MDRh YzZmMDUwHhcNMjUwNTExMTMwMTExWhcNMjUwNTEyMTMwMTExWjAzMTEwLwYDVQQD EygzOTg2NjI0MjdiNjZlYTg4MmE4MjllZDM4ZDBlOWViNWRiZGVmMmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQXXEgvzHba+GgKBYOqdmzeCYlMY QBkk1ksXrgcTG1gL9aI7fbcyCOWcN2ZlA4PT+pUdco8mjk1FZq/u0oisJvXeAwOw ewtY34Ins6p/+uFs0OypXJIX9G20yxlVcnxsRwqRlyME6AzPhxrN4dMdbSp9Gvce bdAebr70/vf/q8pdQ+rMd9sZa0kyttJgZfvggjCJnDWaxGEYfloM6EaENQRNttnI zgxswiRKG6+EE2Ea2UFi+p0zJJnnoiDOeuVvh8PltnvzxmUAogmHzdVk/uaWiWW8 R88PdpXWu5b6Cwp6NuLo1BjBK1O9s1xjRI4hNIVt8RYQMevzUtOQHjXtzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDmGYkJ7ZuqIKoKe040OnrXb3vLVMB8GA1UdIwQY MBaAFMhNYc0X7ZLlS7M5fx5aazkErG8FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUUxaHpSZnRrdVZMc3psX0hscHJPUVNzYndVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS84OGVhZTgtNGI4Ni00Mzg5LWFhZGIt YzI1Nzc5MmRhZGM0LzEveUUxaHpSZnRrdVZMc3psX0hscHJPUVNzYndVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS84OGVhZTgtNGI4Ni00Mzg5LWFhZGItYzI1Nzc5MmRhZGM0 LzEveUUxaHpSZnRrdVZMc3psX0hscHJPUVNzYndVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApNhvQtYG yFsQaiwDZCmwywdiG9K2YwVvJE33mV5St0EqJ/yhpTdWKBaLT8LtiL5qXH2eQPEv gnxGQe4sY3kgWpvVmwERcuNLW0RZmPJY9Z0rLLzgmX6f60Ub7kGiHiNN4JRuuHXK l0RuNUwSSSFl5yHKwYG8qyPU2LVb7qv8zy18KcrKpZ11uGcgf2SHsQlVF7xz6mKL P4lH59VcUqyyqBX+hBgbPIyzzk4BGTHoC2u6MCwEI4pHnfu2zSuYQS9C2EuZeLYN RRzVqtTqhYyNR3ESVaFRlR0uftRZtmjDdlZXraKfUGFJYP6yEvRc2J5vzWn4KPSC DlM/MM8No4IV4w== -----END CERTIFICATE-----Generated at Sun May 11 22:20:45 2025 by rpki-client