$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft File: iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft (raw, json) Hash identifier: bsDRMDHNtMWSJgO8ThDNpJ4lVmhdQg4QH1O2W5pKtp0= Subject key identifier: 47:99:A4:4F:76:B1:67:32:5A:51:75:5B:F1:36:CD:58:3F:EA:A6:52 Authority key identifier: 89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08 Certificate issuer: /CN=896a82a725ed22bb46847ae568912078de25c108 Certificate serial: 0196C6F130E3C9D9A8FEABE3452FDC5C5B90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft Manifest number: 1545 Signing time: Tue 13 May 2025 00:00:17 +0000 Manifest this update: Tue 13 May 2025 00:00:17 +0000 Manifest next update: Wed 14 May 2025 00:00:17 +0000 Files and hashes: 1: 1DkWoYQm2CYL8NcPditLkUCz0lY.roa (hash: WyOC+C/qv1YH3uRFOHpvx69KEYldJQ9ngZYV7GVibxI=) 2: 6qHqGf1lu-fFKG9vb1_H15ADuJo.roa (hash: gDMApq50Y9wGQLSLp13vWrDWiuCmDUvoHVz6wC2AjEE=) 3: LSo0XxjpXr0DzXCFwSii4YX0VQQ.roa (hash: 2mkDU8WQtOKRRgS6azU91vya8dzOKN960jNf5zxA1Jo=) 4: YVY9nIlUnxzvYvUHcuswYdgv-5c.roa (hash: de7Nhke3BR4RbsVq7LgDRBaPDz0mhJShPdisp8UZut0=) 5: YaHy853da93BgH6RfguxUPJfVLo.roa (hash: 0j9KCyGYrKnVsUjih9K2QETrLLFsgZaBmann0nAUaSU=) 6: h5s-RrqHnVtybQpFRQ5VYLEm6yM.roa (hash: /wt/zGlyKyo5yBKQsxdlAjFg6RgIZkpoAWM7K7t2AFA=) 7: i98iWuWx9xAdmw4XlgpiqIeaPDc.roa (hash: MY1rX1+tnTwLEb12ND0xNO/b0/tTMkEcvxBSJaeKQVM=) 8: iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl (hash: kaBjpiHJP2BF6tb3PaUL6Pmf7X9al63YMxPXYEiIr1M=) 9: kA7t86VhHLfxpZem9_pfnrfA8Jw.roa (hash: JdzmdB6Yw1EEixYlbi2OlJNyDFF6uk/A+LWmVNqQ7XY=) 10: w9tecX0WpG6EBeEQV6lN7pOizZM.roa (hash: r56/6xcnyNBLy2vRf5p/uK/JECPQgO4M3DafNXdoW0g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 May 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:c6:f1:30:e3:c9:d9:a8:fe:ab:e3:45:2f:dc:5c:5b:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=896a82a725ed22bb46847ae568912078de25c108 Validity Not Before: May 13 00:00:17 2025 GMT Not After : May 14 00:00:17 2025 GMT Subject: CN=4799a44f76b167325a51755bf136cd583feaa652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f0:9c:fd:79:16:23:82:a1:3b:95:99:42:e6: 8c:6b:06:9b:b5:08:7e:7b:b6:3b:83:ce:4f:5f:a2: c2:2b:32:a4:79:eb:b1:a6:ec:a4:b0:c7:79:72:ee: 5a:30:07:4b:23:6e:af:d8:82:93:69:7a:a0:06:35: fc:7f:4a:23:51:83:ff:60:fb:32:f0:4f:31:c8:41: 34:07:0b:e3:f6:50:b0:f0:d9:9f:81:3f:45:ba:8c: 5d:02:f7:fd:7e:cd:f0:09:43:e1:bd:74:50:3d:56: f1:5b:e5:f6:86:38:af:15:04:67:8a:15:ed:20:7f: 83:82:55:53:de:1e:d3:b8:41:5c:9a:27:a6:3c:a9: e2:4a:3c:d9:23:40:96:b1:67:2b:96:c4:5e:3f:e2: c9:85:05:07:13:2b:97:8e:17:1a:1f:b9:1c:19:4f: ad:10:34:bd:09:18:ee:40:68:48:50:b6:7d:c6:94: d9:86:15:16:05:f4:14:0b:07:e5:9a:1a:33:15:0a: e1:4e:11:f4:64:6e:ce:8a:6e:31:6a:ab:26:32:ff: be:bf:44:7e:0c:8a:cc:9b:e1:20:16:0a:4c:70:74: ab:b1:f7:16:2c:ca:43:18:3b:9c:68:5a:63:03:94: 2a:99:b4:cb:01:9b:f8:53:68:c3:2c:15:72:72:95: 3c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:99:A4:4F:76:B1:67:32:5A:51:75:5B:F1:36:CD:58:3F:EA:A6:52 X509v3 Authority Key Identifier: keyid:89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:a8:d8:c1:93:31:03:e2:7b:ef:b8:21:b7:2a:0f:48:12:fa: 49:f8:f0:2a:b0:1e:ca:8f:fc:f1:70:b2:cf:7f:2b:f0:04:74: 1d:18:b2:5e:17:d2:5f:fb:7d:39:ac:e5:f1:88:02:c4:59:1e: 48:e0:6b:ae:13:e1:12:69:3a:52:94:08:ff:3e:20:37:b7:af: e2:95:f3:f7:c8:d1:19:ca:60:66:c6:ca:81:3f:96:3b:e0:9a: c4:a7:44:8a:95:21:3e:3f:3a:58:2e:70:06:49:0f:6d:02:f5: 0b:d9:ca:84:8a:00:62:fd:c8:13:f3:cc:b8:e8:16:ce:b1:71: 00:c7:b9:c8:42:91:a1:22:c9:39:58:82:48:31:be:9e:f9:92: 22:6e:27:d5:73:02:4b:a2:ec:33:cc:69:ed:ff:69:0d:64:b6: 78:e7:31:e5:72:a7:0f:ab:15:6d:99:81:b7:a0:6d:f8:74:66: 18:d2:32:1d:e6:ce:09:15:e5:4c:34:a8:b7:4e:8b:c4:ce:3d: 2a:32:1d:78:be:e7:67:5e:38:be:7e:18:23:63:dc:30:7a:94: 47:c8:83:f4:f1:8e:da:74:7d:5e:43:7f:02:a0:b5:68:52:a4: 87:e4:c8:0b:9d:12:c8:ec:67:fd:06:fa:04:30:96:10:71:e2: 58:16:af:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZbG8TDjydmo/qvjRS/cXFuQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NmE4MmE3MjVlZDIyYmI0Njg0N2FlNTY4OTEyMDc4ZGUy NWMxMDgwHhcNMjUwNTEzMDAwMDE3WhcNMjUwNTE0MDAwMDE3WjAzMTEwLwYDVQQD Eyg0Nzk5YTQ0Zjc2YjE2NzMyNWE1MTc1NWJmMTM2Y2Q1ODNmZWFhNjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvCc/XkWI4KhO5WZQuaMawabtQh+ e7Y7g85PX6LCKzKkeeuxpuyksMd5cu5aMAdLI26v2IKTaXqgBjX8f0ojUYP/YPsy 8E8xyEE0Bwvj9lCw8NmfgT9FuoxdAvf9fs3wCUPhvXRQPVbxW+X2hjivFQRnihXt IH+DglVT3h7TuEFcmiemPKniSjzZI0CWsWcrlsReP+LJhQUHEyuXjhcaH7kcGU+t EDS9CRjuQGhIULZ9xpTZhhUWBfQUCwflmhozFQrhThH0ZG7Oim4xaqsmMv++v0R+ DIrMm+EgFgpMcHSrsfcWLMpDGDucaFpjA5QqmbTLAZv4U2jDLBVycpU8SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEeZpE92sWcyWlF1W/E2zVg/6qZSMB8GA1UdIwQY MBaAFIlqgqcl7SK7RoR65WiRIHjeJcEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8zZmM4ZGEtMzUxNS00MzRkLTlmMGUt MDQwMTI3MTAyMjA5LzEvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8zZmM4ZGEtMzUxNS00MzRkLTlmMGUtMDQwMTI3MTAyMjA5 LzEvaVdxQ3B5WHRJcnRHaEhybGFKRWdlTjRsd1FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMKjYwZMx A+J777ghtyoPSBL6SfjwKrAeyo/88XCyz38r8AR0HRiyXhfSX/t9Oazl8YgCxFke SOBrrhPhEmk6UpQI/z4gN7ev4pXz98jRGcpgZsbKgT+WO+CaxKdEipUhPj86WC5w BkkPbQL1C9nKhIoAYv3IE/PMuOgWzrFxAMe5yEKRoSLJOViCSDG+nvmSIm4n1XMC S6LsM8xp7f9pDWS2eOcx5XKnD6sVbZmBt6Bt+HRmGNIyHebOCRXlTDSot06LxM49 KjIdeL7nZ144vn4YI2PcMHqUR8iD9PGO2nR9XkN/AqC1aFKkh+TIC50SyOxn/Qb6 BDCWEHHiWBavNA== -----END CERTIFICATE-----Generated at Tue May 13 09:57:06 2025 by rpki-client