$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft File: vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft (raw, json) Hash identifier: OGI+MJVkRqTvWqv0E5nxvtsOvO/zOu4tSE6DVNAUh9U= Subject key identifier: FF:99:83:A5:7D:5B:97:F8:95:19:62:FE:5B:43:11:A5:F7:E2:E0:8E Authority key identifier: BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C Certificate issuer: /CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c Certificate serial: 0196B0D78873C517E8482DF80FA2E99D3E27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft Manifest number: 123D Signing time: Thu 08 May 2025 17:00:37 +0000 Manifest this update: Thu 08 May 2025 17:00:37 +0000 Manifest next update: Fri 09 May 2025 17:00:37 +0000 Files and hashes: 1: 8Fk9kDKNu_wHTuVpwQ1FTDYEEUM.roa (hash: R9lk1OKBJor+p6Fk8Cm9760Y52YkNlkiK4HwLBjauEw=) 2: LCMzGb8KK1XAn7ueElCREh4ehR0.roa (hash: 9Gw2b+IOeGIlGw5y7XNoxgCnQ7hXETrnIXJowIYGjqA=) 3: LShVVLJCwZTpOQVpRu4BHXCMY5o.roa (hash: qOW5Q7zU6W8XRrp7RUj6wZmvzkpmHb4NVAohhcOeaxY=) 4: bmuOfACYZiZOnCTz9ES9s06c_ac.roa (hash: kxF+XBYjW7ExfLjJidwuYPma+i/t1erJy7+ooTz+eSY=) 5: dqSVfYV4r9M8RMZopTNsSTKHeIY.roa (hash: XrN+1wwdRwyX8n7r+VHCtW4D45jLjIPlWVhNaBZnVwQ=) 6: h9mNIwplN3HJblv2au9Os6COmfk.roa (hash: MUN1yxszebSMcti0G9u7TeXrwfcHsFyRaIzpQnCM9XQ=) 7: mUZj0w-uWUstpfqo5cH06vK19uA.roa (hash: MzyNzzDoUFyK/QZw2a/+HQPhRLTClRfb/mdHjVRhByQ=) 8: r0mTEa6qt-IyELm4t03iQrSQvaU.roa (hash: 5O0ZRSkH9lwLC8LUcZsdLUDFOU7u/lNlnWwcFjFATOs=) 9: rHoYFPQ0T9Hef-z6s-pJ7i0yyQo.roa (hash: xQJ9yww4YSKaaEyQBdYXA5up0iEVqjr/At6e2xJMUB8=) 10: vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl (hash: RQw+ySDK9mwNbuvyRUAdLpFmuM+bn/w3OCjb/i7e1xM=) 11: vfYaTtc4brt0Ov1kx9oCUOHIJXI.roa (hash: eB+hXGbiqW76z1VHwcXpM+YfyI+lZHNYCy9KL7CJ5lM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 May 2025 15:42:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:b0:d7:88:73:c5:17:e8:48:2d:f8:0f:a2:e9:9d:3e:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c Validity Not Before: May 8 17:00:37 2025 GMT Not After : May 9 17:00:37 2025 GMT Subject: CN=ff9983a57d5b97f8951962fe5b4311a5f7e2e08e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c2:40:02:59:4d:60:69:32:15:10:b3:20:53: 84:00:5f:25:d7:cb:aa:c3:73:6c:75:98:f1:2c:55: ec:7b:b7:b6:05:0b:ce:38:f5:ae:c4:9d:37:3e:12: d8:23:dd:c1:70:df:ff:f7:88:c4:18:69:7d:a0:5f: 57:57:74:76:58:b3:08:a6:63:31:91:f6:6f:b1:bc: 96:e3:23:6c:e0:61:b1:ba:a5:58:8f:e0:5b:22:cf: 25:c0:3b:52:18:21:9c:dd:8b:6f:bf:28:68:98:7b: 7b:35:1f:88:c5:b9:a7:99:56:2d:67:28:75:89:62: 04:76:c0:4f:15:f6:00:7d:85:13:52:df:6b:c9:f7: d6:c8:df:ee:41:80:f2:c3:12:bb:9e:9e:cf:d6:58: 17:75:7d:f9:ae:44:5b:c4:8c:5c:a8:fa:02:18:3f: 71:29:b3:4b:9b:e6:57:b9:2b:f3:2b:30:6e:67:4a: e3:c7:52:9c:4e:80:dd:0d:b4:0b:11:e7:77:ce:43: ee:62:be:87:b8:91:42:bd:22:65:0c:5a:d0:7c:48: 0d:9b:13:86:eb:8b:62:0d:57:50:94:fd:12:37:a9: 21:44:9a:4f:ab:a1:af:f0:79:3b:27:00:c4:b7:d5: af:6d:35:d2:6f:e6:38:c9:8d:01:d6:8d:eb:5c:cb: 81:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:99:83:A5:7D:5B:97:F8:95:19:62:FE:5B:43:11:A5:F7:E2:E0:8E X509v3 Authority Key Identifier: keyid:BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:8d:3c:2d:78:c7:01:65:10:cb:04:f5:83:fb:d8:cb:81:17: 94:ad:4a:52:53:e3:fd:f6:d8:90:07:d3:b9:f5:63:76:6a:5a: e8:06:fd:8c:91:fc:43:57:33:c3:93:f7:08:3e:d4:fb:b1:3d: 27:ad:ca:9a:15:95:7d:41:d7:17:1c:8a:53:b9:61:60:28:41: 1e:df:e0:90:13:b7:5c:1a:36:cf:a3:76:d2:b8:78:94:7e:b0: 5d:49:6d:57:2b:9f:c4:23:1c:28:db:b1:2d:27:e2:cb:a3:32: 28:58:fb:a0:04:df:ba:7c:78:13:e9:36:24:37:fa:bf:f4:f7: 88:d3:43:e1:b9:cd:45:08:40:b2:96:4f:f8:0f:2a:60:1e:7c: 18:54:0f:01:06:3e:e5:75:64:89:ba:ad:24:49:51:bf:70:0f: 0f:12:2d:af:86:62:3a:c9:6a:e7:0b:13:d8:20:be:9e:e3:05: 17:26:78:61:6e:78:bb:cc:10:ac:a4:31:7b:73:d4:76:df:fa: e7:7e:0a:2f:57:88:85:57:e8:80:86:6d:96:8e:ea:d7:e9:62: 6d:83:b2:b2:50:8c:94:2e:4b:e8:ce:ca:76:cf:ec:3a:47:a5: 11:fe:97:c1:95:65:4d:54:5b:0f:99:f5:f0:ef:46:3f:b3:fb: ab:67:cf:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZaw14hzxRfoSC34D6LpnT4nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNDcwM2UwOGNhMGQ2YTMxMGNiYzY0M2ZmY2IzMDdmZjZj ZGM2NWMwHhcNMjUwNTA4MTcwMDM3WhcNMjUwNTA5MTcwMDM3WjAzMTEwLwYDVQQD EyhmZjk5ODNhNTdkNWI5N2Y4OTUxOTYyZmU1YjQzMTFhNWY3ZTJlMDhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcJAAllNYGkyFRCzIFOEAF8l18uq w3NsdZjxLFXse7e2BQvOOPWuxJ03PhLYI93BcN//94jEGGl9oF9XV3R2WLMIpmMx kfZvsbyW4yNs4GGxuqVYj+BbIs8lwDtSGCGc3YtvvyhomHt7NR+IxbmnmVYtZyh1 iWIEdsBPFfYAfYUTUt9ryffWyN/uQYDywxK7np7P1lgXdX35rkRbxIxcqPoCGD9x KbNLm+ZXuSvzKzBuZ0rjx1KcToDdDbQLEed3zkPuYr6HuJFCvSJlDFrQfEgNmxOG 64tiDVdQlP0SN6khRJpPq6Gv8Hk7JwDEt9WvbTXSb+Y4yY0B1o3rXMuB/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP+Zg6V9W5f4lRli/ltDEaX34uCOMB8GA1UdIwQY MBaAFLxHA+CMoNajEMvGQ//LMH/2zcZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84NjNiYTAtMDQ3Ni00M2Q3LThiZTct NjZlZGEyMjhmZWM3LzEvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy84NjNiYTAtMDQ3Ni00M2Q3LThiZTctNjZlZGEyMjhmZWM3 LzEvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAio08LXjH AWUQywT1g/vYy4EXlK1KUlPj/fbYkAfTufVjdmpa6Ab9jJH8Q1czw5P3CD7U+7E9 J63KmhWVfUHXFxyKU7lhYChBHt/gkBO3XBo2z6N20rh4lH6wXUltVyufxCMcKNux LSfiy6MyKFj7oATfunx4E+k2JDf6v/T3iNND4bnNRQhAspZP+A8qYB58GFQPAQY+ 5XVkibqtJElRv3APDxItr4ZiOslq5wsT2CC+nuMFFyZ4YW54u8wQrKQxe3PUdt/6 534KL1eIhVfogIZtlo7q1+libYOyslCMlC5L6M7Kds/sOkelEf6XwZVlTVRbD5n1 8O9GP7P7q2fPzA== -----END CERTIFICATE-----Generated at Thu May 8 19:39:47 2025 by rpki-client