$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft File: uw1OhZN7eg8nEFTShhTyk01OpQA.mft (raw, json) Hash identifier: Z/mVQZINde7hrVwnNX0D4aJIiMiLdrwd99/uhX/odno= Subject key identifier: 05:28:AA:7D:63:C8:27:CC:A1:CA:32:82:09:44:76:21:9F:E6:E4:59 Authority key identifier: BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00 Certificate issuer: /CN=bb0d4e85937b7a0f271054d28614f2934d4ea500 Certificate serial: 0196B5C7ACD457E7EC669E066D7D905C58FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft Manifest number: 154A Signing time: Fri 09 May 2025 16:01:24 +0000 Manifest this update: Fri 09 May 2025 16:01:24 +0000 Manifest next update: Sat 10 May 2025 16:01:24 +0000 Files and hashes: 1: 3RRxCGORhxJUfcVq4tpq0XZragY.roa (hash: y6TouJV1sDEJ98HnKmVFWXfBdYGdQF1hzAEK2639To8=) 2: 5nt62Ml_BfD3sCqENG25aFRULUA.roa (hash: shO7ZD3fWyMom1aU5Agkl1IXTdztc6qi1+eKd9LVp3s=) 3: GYodMieh8Gfbfq2hLI5KhvEaFHY.roa (hash: CZAsAUa04Szvy+CPZOLDpgA58sS4VlmBo7Rcp6UE57A=) 4: JkWwBURcFGhQXBTXcyXYeBLRT88.roa (hash: nL/v19wxGJvKXuA4YZlDQPHgwxgDJO16wPSvgDXWLog=) 5: LjPTtXACZzIXUrAHmmcGaTSoJX0.roa (hash: hU58ToAOVO8bZ1ShSsstYoflDj5E/scFC015sKbb9KM=) 6: NQcZZcex_ckVBDVfUO9h5l4bn_0.roa (hash: sFlT0ZyQmXGdOwtr2nIXrN6+TeuiCTpZ+teimAOiato=) 7: SC-XsxdAgu2J1rxvQLaYfHoW1SE.roa (hash: 5FD3bfkZCZGPoE+1Wlr2La0Az/eQkkz+JwW46jnyGyE=) 8: ZWty-mG4ns1IWiuKTeqfUnMX6z0.roa (hash: Fdt1PMb3TrWbP6jCMcLY62qFNJsdx5gYRel9cuxCKcY=) 9: anCAVFrU6QU0WXm-Tf9Rgd2lCjk.roa (hash: o4eJwkX3D001t3lWuQpnvXZPwiotWwCUXp0dU8d6pBU=) 10: jHTP33yl1wRqWX8GtFt4mY-Ujqk.roa (hash: ZmeIR/HiMPo2cRoFPWUYH8GvupvDGcgqNg9sL2L7rpM=) 11: uw1OhZN7eg8nEFTShhTyk01OpQA.crl (hash: ShrOjBJr/RRBh4B8BU1sa9Z0gbdjDd3kKsOggDKuofg=) 12: zDiDdQidrsVi9EGom3KTj1C2EMU.roa (hash: gTHzGIwoR29tUryXTFuhCmFlurDWmdDpwhItmXV0euE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 May 2025 10:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:b5:c7:ac:d4:57:e7:ec:66:9e:06:6d:7d:90:5c:58:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb0d4e85937b7a0f271054d28614f2934d4ea500 Validity Not Before: May 9 16:01:24 2025 GMT Not After : May 10 16:01:24 2025 GMT Subject: CN=0528aa7d63c827cca1ca3282094476219fe6e459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4d:43:65:26:b7:a9:3d:2e:ce:0a:b2:d9:de: 85:ed:94:ab:35:1b:3e:eb:38:3b:f4:71:bb:cc:da: 52:16:97:dc:df:17:40:db:da:cf:28:4e:48:96:92: 64:6c:11:0f:a2:ef:fe:06:ad:bc:85:38:9b:3d:76: 00:ba:47:30:8b:14:31:ab:cf:d3:d4:b2:ec:14:8d: d6:c1:41:f6:09:d8:eb:5a:8d:3d:af:04:1f:05:eb: d4:1a:fd:23:29:5e:1a:2c:3b:e3:18:57:af:52:9a: 9f:10:db:dd:1b:94:e2:03:eb:0d:32:6b:61:ea:8f: 91:e1:5f:58:ad:f9:61:25:29:b1:ef:f9:16:47:62: dd:c6:22:2e:0b:1f:64:77:be:84:43:e9:c7:04:db: 97:66:4e:43:e5:02:60:5a:53:ae:3f:d2:76:f0:15: 50:78:52:17:0d:a3:19:c6:4a:aa:da:ad:dd:db:9a: 5a:6e:de:e2:97:ce:21:da:a3:91:b4:c9:dd:c9:1b: 37:bf:83:a5:28:9c:2f:3a:76:61:36:83:c3:e5:68: ab:ce:81:fd:29:2c:e4:b5:d9:9c:89:bb:32:ed:3a: e3:09:ee:30:be:fd:76:b6:ca:41:9e:9b:ca:06:7d: 75:e5:68:3e:ff:8b:04:3f:35:e2:33:86:94:96:60: 04:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:28:AA:7D:63:C8:27:CC:A1:CA:32:82:09:44:76:21:9F:E6:E4:59 X509v3 Authority Key Identifier: keyid:BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:78:14:a4:c1:0c:24:56:78:72:94:db:a6:71:b7:ef:b3:2d: 60:f8:b8:fc:75:0a:89:50:a1:85:a8:7b:c4:9e:97:48:38:81: 11:07:c2:5f:f4:42:bf:b1:04:96:a5:3f:16:1e:f7:ec:2b:2f: 6a:f3:de:8a:28:c4:b3:8b:d2:0e:c6:0a:c1:1e:40:a8:d3:31: 32:a0:cc:66:51:33:07:cc:ea:58:89:50:e8:fa:51:c4:b4:93: c0:ec:c2:63:84:71:a6:c4:3c:ed:83:18:a9:e0:e1:5f:a8:c4: 31:07:65:00:c5:ca:ed:29:9b:36:0f:00:d1:d7:ca:62:57:8e: c6:9d:39:1e:51:b7:19:e1:aa:16:8f:d0:f2:6a:3f:e5:09:42: ee:90:35:a4:1f:62:59:f7:3e:78:dd:48:13:02:b0:4a:e3:46: 25:df:8f:18:3e:1b:23:f3:09:2e:5d:a0:60:2a:12:0f:9c:2c: c3:30:47:92:7a:6a:22:83:b3:7a:8a:3c:94:d3:bf:3e:47:b2: 71:d2:25:5a:c3:4e:de:99:46:34:5a:ce:b2:6f:6a:73:c3:85: b9:69:ab:bc:a0:df:77:9c:37:54:6e:d2:ce:cd:e0:0a:ea:58: 3f:89:62:46:42:a7:f8:38:b9:de:33:21:bc:c6:1e:c0:c1:3e: 69:9b:ed:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa1x6zUV+fsZp4GbX2QXFj9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiMGQ0ZTg1OTM3YjdhMGYyNzEwNTRkMjg2MTRmMjkzNGQ0 ZWE1MDAwHhcNMjUwNTA5MTYwMTI0WhcNMjUwNTEwMTYwMTI0WjAzMTEwLwYDVQQD EygwNTI4YWE3ZDYzYzgyN2NjYTFjYTMyODIwOTQ0NzYyMTlmZTZlNDU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxU1DZSa3qT0uzgqy2d6F7ZSrNRs+ 6zg79HG7zNpSFpfc3xdA29rPKE5IlpJkbBEPou/+Bq28hTibPXYAukcwixQxq8/T 1LLsFI3WwUH2CdjrWo09rwQfBevUGv0jKV4aLDvjGFevUpqfENvdG5TiA+sNMmth 6o+R4V9YrflhJSmx7/kWR2LdxiIuCx9kd76EQ+nHBNuXZk5D5QJgWlOuP9J28BVQ eFIXDaMZxkqq2q3d25pabt7il84h2qORtMndyRs3v4OlKJwvOnZhNoPD5WirzoH9 KSzktdmcibsy7TrjCe4wvv12tspBnpvKBn115Wg+/4sEPzXiM4aUlmAEuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAUoqn1jyCfMocoygglEdiGf5uRZMB8GA1UdIwQY MBaAFLsNToWTe3oPJxBU0oYU8pNNTqUAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXcxT2haTjdlZzhuRUZUU2hoVHlrMDFPcFFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9kMTc1MjctY2Y5OC00ZDM3LTg2NmYt OGU5Yjk4YTk5Y2RiLzEvdXcxT2haTjdlZzhuRUZUU2hoVHlrMDFPcFFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9kMTc1MjctY2Y5OC00ZDM3LTg2NmYtOGU5Yjk4YTk5Y2Ri LzEvdXcxT2haTjdlZzhuRUZUU2hoVHlrMDFPcFFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeXgUpMEM JFZ4cpTbpnG377MtYPi4/HUKiVChhah7xJ6XSDiBEQfCX/RCv7EElqU/Fh737Csv avPeiijEs4vSDsYKwR5AqNMxMqDMZlEzB8zqWIlQ6PpRxLSTwOzCY4RxpsQ87YMY qeDhX6jEMQdlAMXK7SmbNg8A0dfKYleOxp05HlG3GeGqFo/Q8mo/5QlC7pA1pB9i Wfc+eN1IEwKwSuNGJd+PGD4bI/MJLl2gYCoSD5wswzBHknpqIoOzeoo8lNO/Pkey cdIlWsNO3plGNFrOsm9qc8OFuWmrvKDfd5w3VG7Szs3gCupYP4liRkKn+Di53jMh vMYewME+aZvt5A== -----END CERTIFICATE-----Generated at Fri May 9 20:25:10 2025 by rpki-client