$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft File: Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft (raw, json) Hash identifier: 0e9ivVLVQKvgdAMbA6aw4r8MNZOGUDEv4WItSItpQbw= Subject key identifier: 5D:EF:64:DA:85:0B:92:8C:B7:CB:D8:AE:71:DF:FC:CC:99:3E:78:9B Authority key identifier: 11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38 Certificate issuer: /CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238 Certificate serial: 0196B9A463A50AC2D77DC3DDE6EEA76D0298 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft Manifest number: 1537 Signing time: Sat 10 May 2025 10:01:20 +0000 Manifest this update: Sat 10 May 2025 10:01:20 +0000 Manifest next update: Sun 11 May 2025 10:01:20 +0000 Files and hashes: 1: 5G5BM-esfF_6C_xQG_XyVMwxyOE.roa (hash: DTEsWku/je4v/TwdVnousshkC1Z9Nk6/Nslvyo2EP34=) 2: Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl (hash: xseTNmkJpWguZ3o/v3Zq0yCeGnI8oSHvDAPA+uLnNiI=) 3: TETu_fLUe48vZB1pOjmaY0SlQQA.roa (hash: gDCE6MhOeAd0nfmLm0m4CAZB11EUzJkcQQpOLfihn0E=) 4: VngaLO49HwnzixCSQrMS5QePJOo.roa (hash: SORIRInRNS+ArP5XpLLGilyF1yJehSCjMcuXLbTFsfc=) 5: YSDMeB2OTSIw6d7x_-ya3YNBb4I.roa (hash: 5DEymavmL/Oqd88L6GTzb0QEXTGCoR8MdiyKdDZSrJI=) 6: drdL02MmNzHMMHIF4yacPWU2kg0.roa (hash: KhAY+4DUpLSPm7dfV38gtwL9yM7jnqqyzPFAlnLXewY=) 7: fTBhrrSBbBFDDDSeRz_t6BtiuYI.roa (hash: jsgnIPPUhjpCdO1fNL/ROC4wGawaLCPOPIUu0X3J2DY=) 8: qS-QZXFJVFLsxStfDN8QKYsFoWA.roa (hash: ub+puMkCknG+9jJcf4x1TFPFmm3wndXxu70WFu0aS+k=) 9: tCyUX7lLcCHL4Eg9b-YCZ8hKq84.roa (hash: ZHN59gKlvLQCayzjjY8TreGgGDaR4N6wRPXQfVrVtuk=) 10: vBseKRkIdbzZO1ddn-ofvdi2GJA.roa (hash: ND3FeKVlWj+XXYRRpKXvYZfwYIWF0c8k6ow+131ixZM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 May 2025 04:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:b9:a4:63:a5:0a:c2:d7:7d:c3:dd:e6:ee:a7:6d:02:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238 Validity Not Before: May 10 10:01:20 2025 GMT Not After : May 11 10:01:20 2025 GMT Subject: CN=5def64da850b928cb7cbd8ae71dffccc993e789b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:63:48:17:f5:97:b7:cf:9b:e0:04:f0:3f:6b: a5:87:e8:ad:bb:22:ed:11:da:37:5e:ba:85:8a:83: 21:dc:82:09:1f:3e:7e:fc:f9:4a:ab:b8:02:87:7e: 53:09:24:e6:f6:df:e4:83:f8:ac:39:89:a9:8a:73: e8:63:92:4d:40:75:4c:8b:2e:3d:b6:8e:4a:e3:d5: 08:d8:4a:1e:ec:be:7d:3e:5c:86:a6:1e:76:01:1d: 32:5a:98:4d:e8:97:c6:59:16:91:67:05:28:11:91: 24:ab:9f:a8:2b:7d:c2:2c:03:24:13:ae:18:d0:ed: 21:ba:c4:dd:92:91:2d:7d:3a:45:60:14:8f:18:c9: ed:d8:93:10:b3:da:a3:48:93:c6:18:ec:6f:ea:35: 2a:64:02:48:99:c5:bc:6c:0b:16:cf:62:a3:da:16: 96:6d:21:54:2a:63:26:3d:bd:e7:88:00:43:f9:9f: a1:44:40:19:dd:14:11:db:3d:28:f9:57:56:71:a8: c0:a5:a8:87:df:9c:fc:24:0b:97:f4:40:09:39:64: fe:ea:4a:e7:e0:3f:b2:8d:9e:ec:db:94:a3:93:b9: 29:60:79:bd:e5:9e:97:a7:99:b8:49:0e:ad:94:c1: 7b:89:59:b9:ce:d3:b4:ef:41:7d:59:f3:b7:8f:cd: e5:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:EF:64:DA:85:0B:92:8C:B7:CB:D8:AE:71:DF:FC:CC:99:3E:78:9B X509v3 Authority Key Identifier: keyid:11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:a8:1c:8c:91:c5:38:21:15:41:62:dc:da:17:9e:91:99:3f: 8e:b0:73:e2:11:4c:58:da:b6:d1:ba:75:3e:c2:cf:d9:bf:b2: 87:d2:15:4e:7b:1c:cd:b6:61:ce:18:d2:bd:0c:9c:e7:50:b3: 28:42:2d:77:90:15:f7:f7:90:56:9d:39:51:3e:35:84:e2:8f: c1:00:2f:97:5c:f0:76:eb:20:ff:5d:44:cd:4a:e0:00:5d:c9: fc:e9:12:c9:bd:5b:0d:36:65:30:76:37:49:b6:a0:e1:26:89: 63:d0:15:e5:0b:56:bb:93:5e:d2:34:eb:f8:0d:6a:d7:dc:9a: 31:49:cf:41:9e:3c:67:d0:84:bb:3d:65:80:e7:13:83:c9:74: ff:ca:9c:d8:61:0b:77:d9:0d:6c:01:28:2d:3f:c9:51:e5:f6: 8d:64:93:e3:41:96:0b:e4:8c:8f:21:cf:f7:bd:4f:96:00:40: 9d:f2:38:f3:7a:7e:2f:eb:f5:67:12:c1:79:98:64:16:49:57: ea:44:22:1a:1a:92:c6:ce:8b:ed:33:97:7d:26:10:b8:53:5c: 00:2b:93:45:20:de:fb:bd:36:75:e7:ce:b1:81:64:14:d2:df: af:ac:aa:39:7f:58:59:3b:c2:f7:55:b6:b5:0a:ee:d4:37:ec: 2f:92:a4:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa5pGOlCsLXfcPd5u6nbQKYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExYmZhMjk2MWZhMGUwYjA3MDQxMjkzZGRjMGMzNjkzYTll MGEyMzgwHhcNMjUwNTEwMTAwMTIwWhcNMjUwNTExMTAwMTIwWjAzMTEwLwYDVQQD Eyg1ZGVmNjRkYTg1MGI5MjhjYjdjYmQ4YWU3MWRmZmNjYzk5M2U3ODliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4mNIF/WXt8+b4ATwP2ulh+ituyLt Edo3XrqFioMh3IIJHz5+/PlKq7gCh35TCSTm9t/kg/isOYmpinPoY5JNQHVMiy49 to5K49UI2Eoe7L59PlyGph52AR0yWphN6JfGWRaRZwUoEZEkq5+oK33CLAMkE64Y 0O0husTdkpEtfTpFYBSPGMnt2JMQs9qjSJPGGOxv6jUqZAJImcW8bAsWz2Kj2haW bSFUKmMmPb3niABD+Z+hREAZ3RQR2z0o+VdWcajApaiH35z8JAuX9EAJOWT+6krn 4D+yjZ7s25Sjk7kpYHm95Z6Xp5m4SQ6tlMF7iVm5ztO070F9WfO3j83lPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF3vZNqFC5KMt8vYrnHf/MyZPnibMB8GA1UdIwQY MBaAFBG/opYfoOCwcEEpPdwMNpOp4KI4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWItaWxoLWc0TEJ3UVNrOTNBdzJrNm5nb2pnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8xNzMxNzMtODE5Zi00YmM5LTkyZDgt Nzg3OTFjOTM1NmEzLzEvRWItaWxoLWc0TEJ3UVNrOTNBdzJrNm5nb2pnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8xNzMxNzMtODE5Zi00YmM5LTkyZDgtNzg3OTFjOTM1NmEz LzEvRWItaWxoLWc0TEJ3UVNrOTNBdzJrNm5nb2pnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI6gcjJHF OCEVQWLc2heekZk/jrBz4hFMWNq20bp1PsLP2b+yh9IVTnsczbZhzhjSvQyc51Cz KEItd5AV9/eQVp05UT41hOKPwQAvl1zwdusg/11EzUrgAF3J/OkSyb1bDTZlMHY3 Sbag4SaJY9AV5QtWu5Ne0jTr+A1q19yaMUnPQZ48Z9CEuz1lgOcTg8l0/8qc2GEL d9kNbAEoLT/JUeX2jWST40GWC+SMjyHP971PlgBAnfI483p+L+v1ZxLBeZhkFklX 6kQiGhqSxs6L7TOXfSYQuFNcACuTRSDe+702defOsYFkFNLfr6yqOX9YWTvC91W2 tQru1DfsL5KkCg== -----END CERTIFICATE-----Generated at Sat May 10 13:27:10 2025 by rpki-client