$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft File: HO6RKWyUmS0VGiMiQObPOhdtIDk.mft (raw, json) Hash identifier: oDIUdwq1wZsCfCXjVkvQBfLW9jZzkaImO0awbUpKOV8= Subject key identifier: 03:5A:20:16:03:B2:4E:53:47:2A:78:23:2D:6C:E4:45:6B:C1:94:0D Authority key identifier: 1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39 Certificate issuer: /CN=1cee91296c94992d151a232240e6cf3a176d2039 Certificate serial: 0196BA11E536FBCA72C1FC4DA561B5FF8E45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft Manifest number: 0FFF Signing time: Sat 10 May 2025 12:00:57 +0000 Manifest this update: Sat 10 May 2025 12:00:57 +0000 Manifest next update: Sun 11 May 2025 12:00:57 +0000 Files and hashes: 1: 102Rcb8KW1Pgg5SOwqYp5kasBLk.roa (hash: y7m1QcMceHxmu8M/v2wfuOKJTXQndwbvVHTDN4L1lSE=) 2: 1mc01k4JB9mO_uUxoDo8i1hWS0E.roa (hash: 8wTCoFuyYANLWW2D/EVqLWg408oEqbUMAtp374e3yJQ=) 3: 88P_skAGBFp7OKZHRnG0KVJmPoI.roa (hash: tGiqK/XqC0JOJiX2Em9KLLavk6JfLtdyVgtUQOZcMls=) 4: Gm_cS8iJj-tFJXP1V0-jwGNEWbI.roa (hash: Mek1+m4iEtpLgT/StSNohRI7JnRBASyUnmLHmN4630g=) 5: HO6RKWyUmS0VGiMiQObPOhdtIDk.crl (hash: qnH0Hc1AxQxRzxq654AlR9j8lxKmlWG0brO3soofw7g=) 6: M5xSNSg74xAiPhHirIDMnYyKKDI.roa (hash: kFY18cM1/c9JgLsf0tF1GX9g3u8AHSeqmtNVMWpdTXM=) 7: Npd-hacRQ57Kduiqr1RWMbXhGmA.roa (hash: WabQYFdWc7dGq5W0nQkAEwuDtxytEQkZlmuQjmPaRbg=) 8: bge-I_W1NXO4wXcUD8wO2q8GORE.roa (hash: QczRVPNbfyo75luxG1p381iR6nIvpAPPLqlT8W5S9ag=) 9: kKXRYJxwMMXbPNKSde4f-CErN8I.roa (hash: vsnRE4FK7Q7v85LDHKqSHekGSg54JFxZp3g76izUfTw=) 10: kaRHNamZXPJCw_g8nY9b4j30k2Y.roa (hash: 4Wp2FhFr3sOAxEWUnXlXchKEwJ5dKGkuJJKV3L/ukrM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 May 2025 12:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:ba:11:e5:36:fb:ca:72:c1:fc:4d:a5:61:b5:ff:8e:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cee91296c94992d151a232240e6cf3a176d2039 Validity Not Before: May 10 12:00:57 2025 GMT Not After : May 11 12:00:57 2025 GMT Subject: CN=035a201603b24e53472a78232d6ce4456bc1940d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3a:c0:6c:65:2d:b6:ab:6b:9d:50:a9:17:42: 98:9d:bf:52:ce:b7:dc:0a:3c:c0:99:0a:1d:07:25: e2:64:c8:0c:16:6e:89:2a:9a:0f:18:f7:7a:f9:48: 2f:be:cc:74:92:4b:a1:a0:cb:d0:09:6d:e8:d5:00: 33:f2:30:3c:ab:a3:05:ac:3c:8a:ec:3e:22:50:e4: 1c:cf:73:87:aa:4c:3a:1b:b9:ad:67:08:c3:ab:f6: f8:bc:10:b7:80:d3:76:4a:5d:d0:b0:3d:bf:c9:dc: 57:f1:c5:05:8e:85:83:70:65:80:2d:b7:69:48:66: bd:ee:56:62:74:04:59:79:2c:e3:7c:20:ef:e2:b5: d1:42:d2:2a:f6:cd:4a:7e:0c:34:11:6d:81:9e:bd: 0b:be:75:b9:30:08:37:fb:e3:cc:98:f2:ae:ed:61: 74:2f:13:2a:86:da:4a:21:4a:90:7c:82:6f:6c:af: 76:60:85:1c:a5:d1:fe:ef:b9:58:e5:a9:0b:ac:66: 47:c1:8d:b2:6b:e9:7d:27:fc:fc:3d:35:92:d3:0e: 89:c8:db:84:ce:51:a4:6c:f5:b4:61:6d:43:a8:cf: f9:86:1c:85:1a:60:56:a3:ad:46:75:90:f6:ff:ed: f1:56:68:b6:e9:07:fa:14:f2:4f:08:e6:7d:fb:81: 31:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:5A:20:16:03:B2:4E:53:47:2A:78:23:2D:6C:E4:45:6B:C1:94:0D X509v3 Authority Key Identifier: keyid:1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:45:23:06:01:ff:8d:45:aa:70:2b:aa:ab:52:38:6a:d8:46: 80:70:6f:21:d6:0d:6f:e7:42:1f:b7:1d:20:f4:63:a0:01:67: 9e:83:b7:d4:33:50:a7:d9:a7:64:e2:2e:84:02:1b:34:db:fa: d9:72:51:f4:8b:00:0c:02:fa:78:c0:43:cf:6c:9c:da:e5:62: 21:9a:6e:3f:7f:13:fc:de:d5:4a:80:d5:9d:e2:42:2a:7e:11: ae:25:c0:78:87:6d:4e:e9:f2:3e:ec:37:be:e4:60:36:94:6c: 32:6d:9f:4c:25:c0:2d:9b:32:cf:28:fb:ad:75:68:6d:29:18: 43:8b:c0:8b:7b:d0:c1:d6:0e:8f:9e:66:dd:d6:fc:c7:e9:3d: 7a:70:de:f0:fc:79:3a:80:1f:03:15:b5:f6:f9:62:cf:91:d1: 64:04:30:47:8c:81:ef:2b:05:18:57:9f:d6:59:73:12:1f:49: 3d:be:0d:12:66:cc:0e:cc:87:53:01:a5:af:2f:ea:da:cd:3b: 6a:6e:da:93:8a:bc:17:47:18:97:44:88:ca:41:c6:49:8e:f9: e9:5b:84:27:c0:19:fe:c7:43:67:bb:68:72:32:0b:0f:9a:80: c8:12:59:9f:ef:e5:37:6c:1d:34:a3:d0:b9:32:db:3e:c3:0f: 44:61:f1:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa6EeU2+8pywfxNpWG1/45FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjZWU5MTI5NmM5NDk5MmQxNTFhMjMyMjQwZTZjZjNhMTc2 ZDIwMzkwHhcNMjUwNTEwMTIwMDU3WhcNMjUwNTExMTIwMDU3WjAzMTEwLwYDVQQD EygwMzVhMjAxNjAzYjI0ZTUzNDcyYTc4MjMyZDZjZTQ0NTZiYzE5NDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDrAbGUttqtrnVCpF0KYnb9Szrfc CjzAmQodByXiZMgMFm6JKpoPGPd6+Ugvvsx0kkuhoMvQCW3o1QAz8jA8q6MFrDyK 7D4iUOQcz3OHqkw6G7mtZwjDq/b4vBC3gNN2Sl3QsD2/ydxX8cUFjoWDcGWALbdp SGa97lZidARZeSzjfCDv4rXRQtIq9s1Kfgw0EW2Bnr0LvnW5MAg3++PMmPKu7WF0 LxMqhtpKIUqQfIJvbK92YIUcpdH+77lY5akLrGZHwY2ya+l9J/z8PTWS0w6JyNuE zlGkbPW0YW1DqM/5hhyFGmBWo61GdZD2/+3xVmi26Qf6FPJPCOZ9+4ExiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFANaIBYDsk5TRyp4Iy1s5EVrwZQNMB8GA1UdIwQY MBaAFBzukSlslJktFRojIkDmzzoXbSA5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9jOTFlYzMtMjgyMC00MTdiLTlhYWQt YmFjYWI0NzVlNmNjLzEvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9jOTFlYzMtMjgyMC00MTdiLTlhYWQtYmFjYWI0NzVlNmNj LzEvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVEUjBgH/ jUWqcCuqq1I4athGgHBvIdYNb+dCH7cdIPRjoAFnnoO31DNQp9mnZOIuhAIbNNv6 2XJR9IsADAL6eMBDz2yc2uViIZpuP38T/N7VSoDVneJCKn4RriXAeIdtTunyPuw3 vuRgNpRsMm2fTCXALZsyzyj7rXVobSkYQ4vAi3vQwdYOj55m3db8x+k9enDe8Px5 OoAfAxW19vliz5HRZAQwR4yB7ysFGFef1llzEh9JPb4NEmbMDsyHUwGlry/q2s07 am7ak4q8F0cYl0SIykHGSY756VuEJ8AZ/sdDZ7tocjILD5qAyBJZn+/lN2wdNKPQ uTLbPsMPRGHxmQ== -----END CERTIFICATE-----Generated at Sat May 10 21:03:44 2025 by rpki-client