$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft File: 0d4STg-K2059lXbOrjJfZo3SJLE.mft (raw, json) Hash identifier: t4mtRhloOsAP+Pv73KXgjLvHUrPD/o0yKyIqUCfMB30= Subject key identifier: D8:9F:F1:62:0E:FC:E4:83:A1:89:F1:3B:3E:F7:0D:41:36:19:79:FC Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1 Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1 Certificate serial: 0196C6F1A07E5F7CFC1669EADE42D6D93AB4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft Manifest number: 1058 Signing time: Tue 13 May 2025 00:00:46 +0000 Manifest this update: Tue 13 May 2025 00:00:46 +0000 Manifest next update: Wed 14 May 2025 00:00:46 +0000 Files and hashes: 1: 0d4STg-K2059lXbOrjJfZo3SJLE.crl (hash: Gg2PHn1/aLZA2LxpsqrTNVMI8RtYRaziRJ7IVNCFxyU=) 2: 173-Kv1jDbMWH-4jzzP9yAxk8zA.roa (hash: RAtumuE7sBDLlYGFZheJtE3TDChYxfxrc7dviHDr/Y8=) 3: 21R7B0PZj4S2nfPcu6UWFcUKPgw.roa (hash: qB6ZX383pt5nIhJxyHETDpwIazDIAavubmmD8LzTgMY=) 4: 6caVUV-TGB9bU55p1ya71OWBwvg.roa (hash: c0tRExOUVeBF8+Pq6PhYarD4KHj6+N7f0p/w2jdUK80=) 5: NAlGVYpV8OEmdD2nIMiqn334k0M.roa (hash: XrkbVPgrR7sOnmYGzDR8m+MZN8NJUZRQwjZqOHkM5b8=) 6: dNqRqY6tmtgccI8cx_uJ4tWqiZA.roa (hash: g+K2hBhsL/swaozLRy4ek/JzzpG8kCplNhlD1lsyOeY=) 7: dm3YzK1xAmi2Sk5h8a3Khi5LGPM.roa (hash: p3jFvRhnZ5PWDigF+fLcdkZKduSSZASiccn7Ico+UoY=) 8: g8zmfO2HPSEN8YUDrAkY2r7Nlqw.roa (hash: uAg57JMTD8oD+ghOOtfACvdQoLeAHc5YjQ/CuCFoViY=) 9: hacEV-MoLT8z9KwMPWss3cGE7Ak.roa (hash: /ljDI2bMRna9vPYEiWkrDiOeR+IfW8BnSxXE9Vp7xXE=) 10: odu_cE6nPid9mTtdeynLn3Tm0LI.roa (hash: t/tnuabvUXprLV1nfI7C0+QM/zgYQu0v/clGVZKqTgc=) 11: qnoXcobTtJZawYccy6q_j_ktEjQ.roa (hash: YgqRq2TALdrM9up57j8hrsz1UPh0HBnD1px4pxGN8rs=) 12: xiZp6eivWb7x_d9W-WC8kwhVWsI.roa (hash: GvxU73beqXLMBxGmaGGngexgQ65uQMfsvmeuizGIl8o=) 13: yv08EH90nRPgnJ4aLVioWHP74iI.roa (hash: wfa+cbtIfXj/VcabZ84otkiskAuSmrS6+55fqOkIL+o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 May 2025 20:47:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:c6:f1:a0:7e:5f:7c:fc:16:69:ea:de:42:d6:d9:3a:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1 Validity Not Before: May 13 00:00:46 2025 GMT Not After : May 14 00:00:46 2025 GMT Subject: CN=d89ff1620efce483a189f13b3ef70d41361979fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:8b:fa:3d:e6:4b:23:ef:20:6b:65:9c:a7:60: ae:91:26:06:be:b0:6c:d8:fa:8e:f7:11:c0:c2:e4: 26:9c:63:81:40:4b:9e:14:a3:f9:42:ad:d9:3b:2d: 1b:57:4b:a0:e5:85:68:76:bc:01:a2:25:8b:56:81: 28:1d:93:6d:bf:fc:9c:32:97:25:41:19:1a:87:77: 9c:6c:39:b2:b4:d5:36:c0:2f:30:7d:3f:96:09:45: 52:28:e4:a7:92:d6:94:e8:61:84:7c:8f:40:e4:3b: de:f0:0b:91:5e:d6:06:6c:fb:f6:03:b1:38:9e:74: 1f:a1:72:a7:ce:c8:73:3c:15:8e:4d:43:99:0c:98: 93:33:c1:20:4c:7a:f9:b0:f2:10:6e:2c:e2:57:4f: 5c:ed:92:d2:21:5e:17:b2:08:51:a6:07:ad:c3:7c: b4:cf:55:22:f3:c4:4e:d2:9a:86:d9:8b:f6:58:6b: 47:1f:1a:e2:5b:7e:d5:88:21:72:fb:9c:1e:13:ad: ef:65:40:94:f2:b8:0b:09:08:ab:a2:33:fb:33:4d: ce:af:2a:c1:85:c5:f5:da:23:2f:16:a1:db:dd:cc: 60:e2:3c:ab:81:ce:73:52:74:29:30:85:48:fd:00: 8d:f4:94:66:1e:c0:47:56:c7:f7:71:7d:87:9a:30: eb:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:9F:F1:62:0E:FC:E4:83:A1:89:F1:3B:3E:F7:0D:41:36:19:79:FC X509v3 Authority Key Identifier: keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:80:0b:27:aa:82:14:27:e4:7c:7c:9d:4f:51:ab:50:af:ac: d1:38:79:93:70:b8:6d:04:70:51:73:7c:a1:ce:f9:25:d0:90: ec:4a:ba:04:6f:ad:2a:03:6a:cf:61:24:85:11:42:fd:ea:5f: 28:5d:fe:eb:8d:b8:21:b1:01:9d:aa:f1:d8:6f:52:92:36:7f: 10:a1:9c:fb:ef:e8:aa:2e:cc:af:cc:e4:95:00:57:e3:e9:e8: 3b:74:3c:c9:dd:fe:e9:6f:57:4e:c3:e3:97:34:a5:2f:79:e1: e7:71:09:e3:95:1e:6d:42:b8:e3:91:1c:d8:0a:70:71:2b:f2: 73:f3:9a:94:2e:d5:57:cf:8b:1a:d8:4e:f5:25:dd:bc:04:c4: 9a:69:e1:52:90:e5:9d:0c:e6:50:53:ee:8f:d7:59:45:a1:3e: bd:cb:03:4c:96:fc:1c:9f:dc:cb:b0:bd:0d:b7:0c:74:e0:ee: 62:35:69:0e:3f:ec:7c:31:45:79:2b:a8:e1:30:02:d3:97:77: 82:6a:44:0f:da:d8:d4:06:ac:5e:a6:ad:66:8e:f0:1b:a8:b2: c9:97:64:10:74:a1:75:32:e6:46:3c:f7:77:1c:7c:b5:70:5d: 06:65:a2:ab:12:b4:be:e7:e8:17:d3:05:83:d5:b1:5e:f5:69: 3b:03:2b:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZbG8aB+X3z8Fmnq3kLW2Tq0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxZGUxMjRlMGY4YWRiNGU3ZDk1NzZjZWFlMzI1ZjY2OGRk MjI0YjEwHhcNMjUwNTEzMDAwMDQ2WhcNMjUwNTE0MDAwMDQ2WjAzMTEwLwYDVQQD EyhkODlmZjE2MjBlZmNlNDgzYTE4OWYxM2IzZWY3MGQ0MTM2MTk3OWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYv6PeZLI+8ga2Wcp2CukSYGvrBs 2PqO9xHAwuQmnGOBQEueFKP5Qq3ZOy0bV0ug5YVodrwBoiWLVoEoHZNtv/ycMpcl QRkah3ecbDmytNU2wC8wfT+WCUVSKOSnktaU6GGEfI9A5Dve8AuRXtYGbPv2A7E4 nnQfoXKnzshzPBWOTUOZDJiTM8EgTHr5sPIQbiziV09c7ZLSIV4XsghRpgetw3y0 z1Ui88RO0pqG2Yv2WGtHHxriW37ViCFy+5weE63vZUCU8rgLCQirojP7M03OryrB hcX12iMvFqHb3cxg4jyrgc5zUnQpMIVI/QCN9JRmHsBHVsf3cX2HmjDrfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNif8WIO/OSDoYnxOz73DUE2GXn8MB8GA1UdIwQY MBaAFNHeEk4PittOfZV2zq4yX2aN0iSxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9hYmUxMzQtMDA5My00NjUyLTkwNTct NGY0YzliMzQzZTkwLzEvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9hYmUxMzQtMDA5My00NjUyLTkwNTctNGY0YzliMzQzZTkw LzEvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx4ALJ6qC FCfkfHydT1GrUK+s0Th5k3C4bQRwUXN8oc75JdCQ7Eq6BG+tKgNqz2EkhRFC/epf KF3+6424IbEBnarx2G9SkjZ/EKGc++/oqi7Mr8zklQBX4+noO3Q8yd3+6W9XTsPj lzSlL3nh53EJ45UebUK445Ec2ApwcSvyc/OalC7VV8+LGthO9SXdvATEmmnhUpDl nQzmUFPuj9dZRaE+vcsDTJb8HJ/cy7C9DbcMdODuYjVpDj/sfDFFeSuo4TAC05d3 gmpED9rY1AasXqatZo7wG6iyyZdkEHShdTLmRjz3dxx8tXBdBmWiqxK0vufoF9MF g9WxXvVpOwMruQ== -----END CERTIFICATE-----Generated at Tue May 13 02:20:30 2025 by rpki-client