$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft File: RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft (raw, json) Hash identifier: dqmPLdGmr1GGPPP9Wff+TODGtnyNi3C86bVfFAtVrwA= Subject key identifier: 3D:14:A5:EE:E0:74:09:46:1C:F3:5D:AA:8C:CA:4D:5A:FE:09:BF:7D Authority key identifier: 45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2 Certificate issuer: /CN=458d12f095053c35876b88b47685d6435421fcf2 Certificate serial: 0196BAED5C27C38BC1DC6703B134DABBF134 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft Manifest number: 1540 Signing time: Sat 10 May 2025 16:00:39 +0000 Manifest this update: Sat 10 May 2025 16:00:39 +0000 Manifest next update: Sun 11 May 2025 16:00:39 +0000 Files and hashes: 1: 0bSG1GbQSr3JP2M9BW2A6zWEmWQ.roa (hash: m8/KEzPrRo4PqG3DFfILeyvmSqlK6Zrphut5P8ccG8c=) 2: 9lwL98-HDVBrZzYLRCpSdOAFXpo.roa (hash: Za/9eX9VNb3FiSxJk6MAE/CpFGWxRO5mjghE1elRivc=) 3: B0iUIhkwv2ZZdyXRyu9yUh7Z61o.roa (hash: F6O6OkDRyyyGqFimHsLztSYsh0AUNFPNkRW3jSPwvEw=) 4: I1EoUAseUd3MHO-sI_txqICBiwc.roa (hash: khM+HdjIw9WozXCqEk/wtCOtMrpNfxWXErjSXn8BT5M=) 5: KQ7nGqqdl8DwDw35UdDbOJPZhfY.roa (hash: 8pIf1gsysAeCO62ayw5k2bU+b1g8t0mrR6+zNCtTibQ=) 6: LS_oKjOyENRZwn9y786G7x_fDEc.roa (hash: qwrjawF9Z67WE+ivjm8mPIl3xqaLReHxca9+SNnwKPE=) 7: Pvub5ztTS47f0XG6tBZE9ngX8Rw.roa (hash: euQ5dqT6xwCfoTsPu9P7kfQ9UGdbPzkkEJWSyFwCBTw=) 8: RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl (hash: cJM337KRh53KZxAHsoH/iGbkxggdrHBVga4NQE58NvY=) 9: lqxGizsVmZbvi7xpd3yzs2I4ILw.roa (hash: aTi4SECMvkjegR9/FyzL9HTmeGkM0AsiVgyipWCsYrY=) 10: sFnlwbiQ75y8_114DKwn3kP_iWc.roa (hash: dkHr9wKemXLLSQfaJK2+kCvWwELtA6u+nMBynz2rXgQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 May 2025 13:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:ba:ed:5c:27:c3:8b:c1:dc:67:03:b1:34:da:bb:f1:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458d12f095053c35876b88b47685d6435421fcf2 Validity Not Before: May 10 16:00:39 2025 GMT Not After : May 11 16:00:39 2025 GMT Subject: CN=3d14a5eee07409461cf35daa8cca4d5afe09bf7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7f:5e:69:14:35:36:18:71:68:43:5a:44:ca: f2:8a:74:74:03:73:d9:6d:7c:83:4d:28:93:c3:57: d7:a9:a6:c9:04:83:0a:03:b1:76:d9:fc:1f:bb:b3: 93:f5:e7:ee:e6:b8:79:7d:69:4a:f1:98:a9:24:83: 76:cd:89:88:f9:30:25:ec:64:00:5b:cf:78:10:cc: 10:f2:f7:61:a2:b5:d2:0d:a8:dc:fe:c7:b8:d8:5b: 15:66:25:02:0b:c8:8b:3f:a3:96:f2:5d:b2:b6:ee: 36:85:0f:26:be:b0:fc:17:96:a5:d1:75:2e:28:b0: 7a:91:d7:2f:a1:fb:3a:57:43:d3:66:ff:be:3e:36: 8d:28:6a:bb:37:93:4f:ba:ae:6f:90:6d:bf:4f:0a: 8c:8a:cd:35:bc:6d:eb:61:96:5a:28:b3:69:e7:d6: 9a:50:7e:b8:94:ea:c0:72:13:d6:46:6c:d5:25:4b: 13:62:b0:16:42:b4:8d:8b:ff:0c:95:6c:ba:05:93: 2f:2a:6c:a4:43:4d:84:9d:bf:64:00:5f:97:fc:c7: 8c:45:55:e5:84:75:54:c7:4e:28:2f:68:90:5a:c1: 25:5b:d1:47:31:85:e2:fa:e1:b2:cf:ca:e9:e8:c8: 26:ea:6d:a1:5a:ba:4f:7c:29:2e:6e:56:e6:03:74: 3e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:14:A5:EE:E0:74:09:46:1C:F3:5D:AA:8C:CA:4D:5A:FE:09:BF:7D X509v3 Authority Key Identifier: keyid:45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:63:05:11:1e:68:de:49:d8:b5:68:0a:72:37:a3:cf:16:8a: 24:10:16:12:76:ae:11:95:db:b9:e4:52:fb:c8:37:b5:32:c2: 1f:5e:65:a3:ce:4d:42:9d:9b:84:c1:c9:a0:02:24:ea:25:f5: 81:eb:cb:9e:e8:d2:c6:ee:7b:d9:07:c1:df:a7:42:52:2a:71: c8:34:e6:53:dd:5a:fd:a3:4a:4b:48:6b:1b:21:ba:85:0c:60: 5c:f0:59:ce:0b:46:f6:90:3a:ab:23:2f:c0:b1:80:8d:62:63: 83:b1:b0:66:84:3d:3e:40:ca:19:a4:93:eb:ea:9a:22:69:d0: 31:22:27:18:6c:ee:47:a0:40:c4:63:ce:d7:4c:42:c7:cc:38: 0f:a0:16:2b:c6:53:93:f6:42:5b:c1:2c:bb:fb:36:94:ce:0e: da:f9:44:95:1a:d7:d1:76:4d:c2:07:27:8b:b3:74:8d:9b:e3: 94:65:51:7f:29:43:a4:83:08:df:d0:26:38:20:a7:94:4b:dd: 36:13:4e:bf:e9:8f:3d:5b:e6:20:75:7f:7b:60:0d:dd:e0:73: ac:11:88:48:f4:41:85:1d:a9:3b:ef:04:46:e7:a4:27:23:7c: bb:28:ca:81:86:32:5b:aa:51:c1:7f:9a:ed:cd:6a:8a:71:e0: 83:38:b0:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa67Vwnw4vB3GcDsTTau/E0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OGQxMmYwOTUwNTNjMzU4NzZiODhiNDc2ODVkNjQzNTQy MWZjZjIwHhcNMjUwNTEwMTYwMDM5WhcNMjUwNTExMTYwMDM5WjAzMTEwLwYDVQQD EygzZDE0YTVlZWUwNzQwOTQ2MWNmMzVkYWE4Y2NhNGQ1YWZlMDliZjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtn9eaRQ1NhhxaENaRMryinR0A3PZ bXyDTSiTw1fXqabJBIMKA7F22fwfu7OT9efu5rh5fWlK8ZipJIN2zYmI+TAl7GQA W894EMwQ8vdhorXSDajc/se42FsVZiUCC8iLP6OW8l2ytu42hQ8mvrD8F5al0XUu KLB6kdcvofs6V0PTZv++PjaNKGq7N5NPuq5vkG2/TwqMis01vG3rYZZaKLNp59aa UH64lOrAchPWRmzVJUsTYrAWQrSNi/8MlWy6BZMvKmykQ02Enb9kAF+X/MeMRVXl hHVUx04oL2iQWsElW9FHMYXi+uGyz8rp6Mgm6m2hWrpPfCkublbmA3Q+sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD0Upe7gdAlGHPNdqozKTVr+Cb99MB8GA1UdIwQY MBaAFEWNEvCVBTw1h2uItHaF1kNUIfzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83Y2VjYzctZjYzZC00M2ZjLWIyMTkt Mzk1NTk1OWVhZjgxLzEvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS83Y2VjYzctZjYzZC00M2ZjLWIyMTktMzk1NTk1OWVhZjgx LzEvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASWMFER5o 3knYtWgKcjejzxaKJBAWEnauEZXbueRS+8g3tTLCH15lo85NQp2bhMHJoAIk6iX1 gevLnujSxu572QfB36dCUipxyDTmU91a/aNKS0hrGyG6hQxgXPBZzgtG9pA6qyMv wLGAjWJjg7GwZoQ9PkDKGaST6+qaImnQMSInGGzuR6BAxGPO10xCx8w4D6AWK8ZT k/ZCW8Esu/s2lM4O2vlElRrX0XZNwgcni7N0jZvjlGVRfylDpIMI39AmOCCnlEvd NhNOv+mPPVvmIHV/e2AN3eBzrBGISPRBhR2pO+8ERuekJyN8uyjKgYYyW6pRwX+a 7c1qinHggziweA== -----END CERTIFICATE-----Generated at Sat May 10 19:49:09 2025 by rpki-client