$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft File: I0tUsRmns-_xUwhbcxVQfNhROg8.mft (raw, json) Hash identifier: XN4xaCvBcSjT4ja2es21ZkosZxiZlMJK0E2JpceLXfA= Subject key identifier: BD:E3:9D:DC:62:C9:9D:97:6E:98:46:FE:23:22:DE:04:C2:6A:7A:91 Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f Certificate serial: 0196BD816A9C131BD09B60EC9102B8635B3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft Manifest number: 0B74 Signing time: Sun 11 May 2025 04:01:37 +0000 Manifest this update: Sun 11 May 2025 04:01:37 +0000 Manifest next update: Mon 12 May 2025 04:01:37 +0000 Files and hashes: 1: 2tV1T5SBsSkKar1qXX5FYlQ_B9Q.roa (hash: mGLI3Jd52qgMG50087Vl0ag+Rgi85Yfd8348tK3nJlQ=) 2: 9CjEL92KVQbBIKjAH6PWgI9d9kA.roa (hash: CxlINazLO+svbCxijVW6/kRGdkNG420xQ9K3jp5I7bo=) 3: 9Q-K0yA0D9jdkGXn7ifhVh2hLe4.roa (hash: BhOE66QanPWqjjysyWqBU6hcSToV2kkgkpmWedK9Plo=) 4: BKpPZ6YhMA786wWelQvZ2FdIeg0.roa (hash: CY94cVx1ALq/cp1lEiwu3JzO7Vk53LXHozpiwU2ifHA=) 5: Gg5xBTPmG5wIfgvjDfofedqUN2I.roa (hash: 44BexOUoVzM2f1vahHLSGVHdqnL6HKMPG3ed5PmM4sw=) 6: I0tUsRmns-_xUwhbcxVQfNhROg8.crl (hash: 4HowARCn+SkXEe2exn1Q4SEv+j9/qLnjGJG29qUC9Sg=) 7: KfWHlYFQnzVI2dPuoiLZqsly00A.roa (hash: hXW7e+AyYxT2PE5t8wRUT3atz/+WaH8gt4XQgdBp/mU=) 8: LtctFlc4GRCf3PIlxO5Sz70Upcc.roa (hash: 9oaNZGvrfQP+yRIBwwcg5U7jui8/sOP7Dz6ZLTuPIgM=) 9: LxwAd59gPAFiSwQsp6U5bWHTUIA.roa (hash: sV/jv6UM3eB6Fepo8zmoDeIxV8A3Cp94EBt2zbiu7+M=) 10: M73NPvrSZwGhIOTA9SbUvHl1x90.roa (hash: ijksxiMRPCxOAqaVav7odzv/IiE5tQUZQM4rRqWGT00=) 11: P4Ngmm4fscIJdjrtcZXwEWC6af0.roa (hash: Dgr4uE36WEf5Xw9kH8tw5qMQ+ewLeqeUvdPupgorbKg=) 12: gspg21PC-Bi6SGHc2DwZhP3SxPE.roa (hash: za152yl/mt+IWnj6LxRFIHIPMleLO2z2bWoNpUAX6js=) 13: nppvTips8XGcmj9VgC_a0xkLzT8.roa (hash: +FXbEH/4T1tplmkgWcOzmoIVkqvQhGApNb34NJo2CWU=) 14: o99Nup4psTKMh8kJYocwkh14uKQ.roa (hash: lhz5Qy+hcNJDmky6RtlI26JguzX0YUJj3nMqDKA0YLM=) 15: xBeaVJYrqyxsJyBEwJgsxIF9If8.roa (hash: DlqRMUr9VXZf6onKCEDA/e64PLwtCRuMp+QIX3GytzU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 May 2025 04:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:bd:81:6a:9c:13:1b:d0:9b:60:ec:91:02:b8:63:5b:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f Validity Not Before: May 11 04:01:37 2025 GMT Not After : May 12 04:01:37 2025 GMT Subject: CN=bde39ddc62c99d976e9846fe2322de04c26a7a91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:45:2d:4b:30:67:12:65:0b:78:58:46:f7:c0: f6:90:48:23:fe:ba:dd:f9:40:b7:8e:47:e1:15:09: 05:e4:9d:75:df:84:b1:db:01:1b:d1:ea:04:7c:89: 35:f2:ee:15:fd:6b:2a:62:e0:10:36:7b:77:1f:4b: 9a:e8:b2:3d:9b:a8:b2:89:3b:e2:56:b8:db:b7:3d: 01:ef:66:b6:6e:ad:7b:b4:68:59:87:a2:30:e7:00: 33:c8:47:5d:62:3a:b2:d7:4b:08:b8:e0:b8:89:a4: a1:8f:9b:72:6a:af:30:ca:73:5a:74:86:3b:84:ac: db:2d:73:27:22:ce:f1:3d:be:d6:fb:76:c3:8d:8c: 7c:61:74:f8:ed:a0:4f:6a:89:7f:42:99:87:52:e0: c6:a5:85:02:36:78:39:80:3d:57:db:03:a6:9e:d4: d8:77:f6:09:f5:64:e9:9a:b0:0c:45:84:15:73:77: 86:13:84:47:90:c6:7d:80:5a:05:a3:4d:54:df:42: 8c:06:69:96:bd:ca:f5:b8:a5:a3:62:de:37:78:58: 16:fc:65:1b:6d:fc:3a:de:90:31:e5:cf:f7:19:b3: 98:de:cc:df:3e:87:09:5a:03:10:9f:a3:be:b2:f3: 51:e9:87:dc:2c:27:e5:a5:bb:d9:02:74:99:77:f2: 79:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:E3:9D:DC:62:C9:9D:97:6E:98:46:FE:23:22:DE:04:C2:6A:7A:91 X509v3 Authority Key Identifier: keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:fd:82:7f:3a:ca:10:d9:f3:a4:62:f6:76:df:91:0b:e0:86: 07:1a:66:53:43:2c:f0:91:a9:a3:6d:4a:8e:ea:df:c6:77:75: 66:74:e7:41:fa:fb:ef:d6:5f:9e:e9:7e:2d:cc:a0:77:c3:15: 6a:54:82:20:26:a0:88:db:97:c4:7a:0e:f5:bd:11:da:91:c8: 54:f0:c9:59:4c:06:7e:fa:76:d9:f5:e4:ab:d9:82:9c:33:91: 46:de:9f:3b:4f:d2:52:b9:c0:d7:96:45:59:4c:24:d0:3f:b2: b7:9f:5c:04:1f:fb:e9:3c:37:df:f0:f6:bb:8e:e7:c0:ab:b4: d5:63:2b:6f:a5:6b:a4:0c:69:bb:25:bf:47:4d:6b:f6:0b:4c: da:cb:91:57:6b:2d:29:8b:ad:09:fb:44:63:24:6e:d6:47:ff: 18:f6:bc:13:c9:ad:61:7b:8b:f3:64:37:08:3e:d0:24:09:22: 8c:4d:b2:a4:04:5b:79:bb:97:5f:c9:e5:37:9c:52:c2:92:2a: 7b:80:68:9a:87:4b:47:19:ae:83:7d:fc:e6:1f:4d:47:fe:e3: 37:8b:f9:59:bb:d4:7d:ed:a8:63:db:7c:61:d6:29:00:cc:40: 9c:20:69:93:5a:14:6c:36:17:eb:ec:c8:b3:73:e7:c8:07:18: 68:23:73:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa9gWqcExvQm2DskQK4Y1s6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNGI1NGIxMTlhN2IzZWZmMTUzMDg1YjczMTU1MDdjZDg1 MTNhMGYwHhcNMjUwNTExMDQwMTM3WhcNMjUwNTEyMDQwMTM3WjAzMTEwLwYDVQQD EyhiZGUzOWRkYzYyYzk5ZDk3NmU5ODQ2ZmUyMzIyZGUwNGMyNmE3YTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5UUtSzBnEmULeFhG98D2kEgj/rrd +UC3jkfhFQkF5J1134Sx2wEb0eoEfIk18u4V/WsqYuAQNnt3H0ua6LI9m6iyiTvi Vrjbtz0B72a2bq17tGhZh6Iw5wAzyEddYjqy10sIuOC4iaShj5tyaq8wynNadIY7 hKzbLXMnIs7xPb7W+3bDjYx8YXT47aBPaol/QpmHUuDGpYUCNng5gD1X2wOmntTY d/YJ9WTpmrAMRYQVc3eGE4RHkMZ9gFoFo01U30KMBmmWvcr1uKWjYt43eFgW/GUb bfw63pAx5c/3GbOY3szfPocJWgMQn6O+svNR6YfcLCflpbvZAnSZd/J5yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL3jndxiyZ2XbphG/iMi3gTCanqRMB8GA1UdIwQY MBaAFCNLVLEZp7Pv8VMIW3MVUHzYUToPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQt MWQyMWQxYmNlM2ZlLzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQtMWQyMWQxYmNlM2Zl LzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvf2CfzrK ENnzpGL2dt+RC+CGBxpmU0Ms8JGpo21Kjurfxnd1ZnTnQfr779Zfnul+Lcygd8MV alSCICagiNuXxHoO9b0R2pHIVPDJWUwGfvp22fXkq9mCnDORRt6fO0/SUrnA15ZF WUwk0D+yt59cBB/76Tw33/D2u47nwKu01WMrb6VrpAxpuyW/R01r9gtM2suRV2st KYutCftEYyRu1kf/GPa8E8mtYXuL82Q3CD7QJAkijE2ypARbebuXX8nlN5xSwpIq e4BomodLRxmug3385h9NR/7jN4v5WbvUfe2oY9t8YdYpAMxAnCBpk1oUbDYX6+zI s3PnyAcYaCNzeA== -----END CERTIFICATE-----Generated at Sun May 11 13:24:38 2025 by rpki-client