$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft File: X32laK0Ce54knBPiI9MidpiBop8.mft (raw, json) Hash identifier: ilH9GHIIoJWN6D72zHFHjNsAPuavcziNk3Mgk1nX5sQ= Subject key identifier: 6C:AC:3F:E6:61:5E:7B:7E:8E:53:7B:EB:B5:FF:60:FF:8D:DE:29:C4 Authority key identifier: 5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F Certificate issuer: /CN=5f7da568ad027b9e249c13e223d322769881a29f Certificate serial: 0196C45E826C19739EE7F9D1BE120D0A4A9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft Manifest number: 0AAF Signing time: Mon 12 May 2025 12:00:50 +0000 Manifest this update: Mon 12 May 2025 12:00:50 +0000 Manifest next update: Tue 13 May 2025 12:00:50 +0000 Files and hashes: 1: Dhg938LLNxihNYriqStR3oqs6Jg.roa (hash: Aj+6lvIDsodEZ6I55Us8ZFj5GtVjSmfFFjL8I/MfYqo=) 2: FuntCXoBht24QvgtEtbVZEuCdp0.roa (hash: JUPlc/PvxJjzfETFQC1BU7Iej8ynSg/XdYSUf902Tpo=) 3: OSozPCauqZRrj5FYZCZShQYan60.roa (hash: gJTuyuPcePva2Pf/4Z3V1y7VTQjYV+P6FusXSLPZfSw=) 4: X32laK0Ce54knBPiI9MidpiBop8.crl (hash: mI9qqiXX88rfo3oKc0VCXEKS3i04SSrmigWl3J4k1Zs=) 5: XjVu2IyXljFzhSvYma_h3-clfVU.roa (hash: nT21YokFB5zQvbm3JPkkRJDjEHGU38C24xQDpQHQGAI=) 6: ZkkDzXmdTsLG1oQnHCXCpjMrN0c.roa (hash: vhxQZdTakyknsbSaFbQwA3rjVR03VcM9s8jNMsMZ03E=) 7: jUQ_fZXFaYGd4zaZnSgAlOdWse0.roa (hash: TxGng+dp5AKM1yJ/Crw7UDMDcGHP31uzC9AJJeqBDMA=) 8: oSGRjgd5g7uxmIyMg55GeDp1lcQ.roa (hash: yVVI9w+n8DQ5LZ0pU0EZPfP/S8D3Imwu6pg6ds8XII0=) 9: s84uwW_-i_SHLp2X5wNbbXCbos0.roa (hash: XmZwP1Dphpy/OpROhUP0RXS2PeMw5xbgxdsjXIheFhc=) 10: ztzJ9WkVuGW2KUZ-NYOffXMn-mU.roa (hash: 0aNwIJcWE8BWdRRapb0b1h0he6NRcvrOvXa3hI/Nxv4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 May 2025 12:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:c4:5e:82:6c:19:73:9e:e7:f9:d1:be:12:0d:0a:4a:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f7da568ad027b9e249c13e223d322769881a29f Validity Not Before: May 12 12:00:50 2025 GMT Not After : May 13 12:00:50 2025 GMT Subject: CN=6cac3fe6615e7b7e8e537bebb5ff60ff8dde29c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e0:88:71:03:cd:98:87:42:de:fd:d6:4f:57: 5f:82:17:20:0f:ec:ac:9b:29:f1:91:d9:92:09:7d: 6d:26:2a:06:16:fc:ba:53:ad:21:bb:b9:cc:13:84: ca:ca:6f:2b:9b:78:9c:9f:d0:a5:2f:b7:88:76:4e: 10:75:86:0b:d1:83:35:36:fd:fb:a7:d8:31:53:7f: 2f:68:71:58:70:8d:31:e6:83:bd:83:ae:3e:0c:f6: 50:c0:bd:34:b5:70:4d:71:b0:05:bd:79:f2:61:66: a6:ca:d7:e1:d6:8f:15:5d:7b:2f:65:bf:f7:fc:d6: fb:c9:eb:23:4d:c8:5a:fb:0a:d1:18:b0:51:00:4e: 94:3e:dc:e0:67:6c:56:80:4f:ab:82:b7:47:c1:dc: c3:ab:f6:c5:3b:be:93:e6:b5:db:35:d5:fa:17:ec: 79:15:8c:f0:d9:fe:95:73:02:10:86:b1:8f:e0:54: 12:19:0d:02:4e:8c:d9:1e:f8:66:9b:94:79:b1:5b: 47:f8:0d:9e:d9:99:98:c3:88:ad:44:60:59:3c:84: 57:b1:10:57:6b:41:d8:f7:14:ae:05:30:9c:7b:fc: d6:de:f0:b9:83:ec:c7:c0:74:ae:09:e4:6d:8b:fd: 00:6b:ca:86:e4:0a:50:45:27:70:44:c8:c4:c8:86: c2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:AC:3F:E6:61:5E:7B:7E:8E:53:7B:EB:B5:FF:60:FF:8D:DE:29:C4 X509v3 Authority Key Identifier: keyid:5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:d0:1e:c2:23:09:f8:e0:03:9b:e9:49:7e:fd:41:e2:0f:78: 39:94:d9:e3:bd:6f:dd:18:16:39:c4:27:b4:5f:39:3b:8f:f8: ba:18:7b:66:c0:68:d9:1b:5f:5e:3c:b2:55:8e:5e:73:f7:34: 70:8d:e9:32:21:a1:00:fe:7d:d7:74:ed:5b:97:78:94:2b:49: 94:23:43:26:9f:12:73:9b:99:cf:c5:c7:67:d7:a7:4d:28:f0: 13:b5:63:0e:ae:53:2d:c1:5b:db:8f:4e:dd:09:7b:2b:f2:71: cb:e0:a9:fd:66:8b:b1:0d:f1:1c:f5:d1:6f:cc:3a:0b:6c:1e: 99:c7:8b:b0:0a:cf:58:8c:5a:94:22:40:00:5c:6a:0c:9c:f1: 25:23:5e:b3:b7:23:22:d2:58:80:88:e5:4d:4f:fd:f9:02:10: d3:e0:f2:4e:5d:dc:81:a6:c8:93:52:6e:a3:60:d7:a5:a5:5d: 0a:f2:85:bb:34:a2:25:c6:a9:93:19:e4:a1:a2:d1:0a:1b:4d: 7e:25:47:11:bf:0b:de:88:5e:01:7c:6e:d5:08:8c:b8:46:27: 6e:7d:f1:2c:8e:65:78:95:34:72:7a:fa:9d:c1:cf:67:29:c8: fa:e4:72:14:db:a8:d1:54:f5:e0:c8:a3:86:e7:a6:cc:4a:a8: b2:f9:f1:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZbEXoJsGXOe5/nRvhINCkqeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmN2RhNTY4YWQwMjdiOWUyNDljMTNlMjIzZDMyMjc2OTg4 MWEyOWYwHhcNMjUwNTEyMTIwMDUwWhcNMjUwNTEzMTIwMDUwWjAzMTEwLwYDVQQD Eyg2Y2FjM2ZlNjYxNWU3YjdlOGU1MzdiZWJiNWZmNjBmZjhkZGUyOWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOCIcQPNmIdC3v3WT1dfghcgD+ys mynxkdmSCX1tJioGFvy6U60hu7nME4TKym8rm3icn9ClL7eIdk4QdYYL0YM1Nv37 p9gxU38vaHFYcI0x5oO9g64+DPZQwL00tXBNcbAFvXnyYWamytfh1o8VXXsvZb/3 /Nb7yesjTcha+wrRGLBRAE6UPtzgZ2xWgE+rgrdHwdzDq/bFO76T5rXbNdX6F+x5 FYzw2f6VcwIQhrGP4FQSGQ0CTozZHvhmm5R5sVtH+A2e2ZmYw4itRGBZPIRXsRBX a0HY9xSuBTCce/zW3vC5g+zHwHSuCeRti/0Aa8qG5ApQRSdwRMjEyIbClQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGysP+ZhXnt+jlN767X/YP+N3inEMB8GA1UdIwQY MBaAFF99pWitAnueJJwT4iPTInaYgaKfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDMybGFLMENlNTRrbkJQaUk5TWlkcGlCb3A4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8wNTQ4OGYtZjRlMC00ZTZjLTk0ZjUt Mzc1NzUzOWMyYWM5LzEvWDMybGFLMENlNTRrbkJQaUk5TWlkcGlCb3A4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8wNTQ4OGYtZjRlMC00ZTZjLTk0ZjUtMzc1NzUzOWMyYWM5 LzEvWDMybGFLMENlNTRrbkJQaUk5TWlkcGlCb3A4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACdAewiMJ +OADm+lJfv1B4g94OZTZ471v3RgWOcQntF85O4/4uhh7ZsBo2RtfXjyyVY5ec/c0 cI3pMiGhAP5913TtW5d4lCtJlCNDJp8Sc5uZz8XHZ9enTSjwE7VjDq5TLcFb249O 3Ql7K/Jxy+Cp/WaLsQ3xHPXRb8w6C2wemceLsArPWIxalCJAAFxqDJzxJSNes7cj ItJYgIjlTU/9+QIQ0+DyTl3cgabIk1Juo2DXpaVdCvKFuzSiJcapkxnkoaLRChtN fiVHEb8L3oheAXxu1QiMuEYnbn3xLI5leJU0cnr6ncHPZynI+uRyFNuo0VT14Mij huemzEqosvnxkg== -----END CERTIFICATE-----Generated at Mon May 12 20:25:16 2025 by rpki-client