$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft File: CnMngF3yD7XB1vTokHR0PK6ySvc.mft (raw, json) Hash identifier: ujI9jQbh5fncDXwbZffuy8SRUVqi7rVr8PICYJOQnFE= Subject key identifier: 4C:9F:16:FD:C4:41:AC:F7:83:4B:C1:86:EE:9F:FC:C3:97:49:27:66 Authority key identifier: 0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 Certificate issuer: /CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Certificate serial: 01969E9B1A7E870B57D5834319EDDFB6B450 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft Manifest number: 1536 Signing time: Mon 05 May 2025 04:01:27 +0000 Manifest this update: Mon 05 May 2025 04:01:27 +0000 Manifest next update: Tue 06 May 2025 04:01:27 +0000 Files and hashes: 1: 3cfolha5-Y-keIgl3j-ukMRu5nQ.roa (hash: BQrU5Phy/xAtort4zjZjH8gAv4mg2agVu08FECKFlvU=) 2: CQxWaB1OicMMrqXCoQ0fopCoxdU.roa (hash: WjfHWnkqbfHKaqxUShNyRq++rhQwjg3tNVjy17YQNc4=) 3: CnMngF3yD7XB1vTokHR0PK6ySvc.crl (hash: Y4pqs2Y+UCQxsCWk9VuB0cY4OElVHiD96onDaY9z57A=) 4: GopMrpyToOz7hTEn02tSlWTChNc.roa (hash: PWyNZm9NNDQb4vDrYexwTILfoeBvuqO0/ZesnD+rBMg=) 5: Zla6xxqlwjD5HGAN16Pzo29Tijg.roa (hash: XT7/Z4sfo6kElFtdLFq3BhRYhs4vxj89ZfDzgHu8Ge4=) 6: eeob2ee4lfFzOOMEsHvp08f6qTk.roa (hash: 0B+jfajS9x0UOg+XsVtGs3LZcCLSBc/7t9eJKjvj4DM=) 7: frjt8LedxDJUCXc5Ysfa40GEUJ8.roa (hash: 3GQ9tV0AwS8SDm/KpQB1qsLcD5QUtO9EnUPb3E5qQP4=) 8: hnMtsx259zWb5DPTAskFt19vieA.roa (hash: IS/K0LmABWhq/hUi5ijfbnkS8QGQcUBWRW0f7gTisD4=) 9: izRl0EDK4B0qzWxxkTnsFaQUD9I.roa (hash: deGltujGMo6zRw49YCgwFhp3rs4UuELASdCXPlgWHmM=) 10: tbMl7oFKXcbypI4zCPH3_DIQ3z4.roa (hash: woX9zsT33PUAbbfirUNyi4tkHILBBLskTh8l2Lf5sLU=) 11: ydOhopDpEgxJrzwZy5o2ywKpW8w.roa (hash: cGNA9jtDwM6OD4vlqV4K4uD26uy/JQnhTPG3oY/YMmA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 May 2025 22:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:9e:9b:1a:7e:87:0b:57:d5:83:43:19:ed:df:b6:b4:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Validity Not Before: May 5 04:01:27 2025 GMT Not After : May 6 04:01:27 2025 GMT Subject: CN=4c9f16fdc441acf7834bc186ee9ffcc397492766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:91:32:84:83:7a:34:54:26:53:41:67:d9:ed: b2:54:ae:9f:5a:5f:c5:03:d0:94:09:41:76:af:ef: a6:1f:ee:56:50:8b:54:84:8b:d6:f5:d7:af:a9:90: b0:3e:57:ab:b4:dc:35:98:9f:b1:29:92:42:49:e8: 2d:f2:08:20:1e:8e:ef:fe:7d:9d:48:5e:00:62:51: c6:a0:c1:fc:86:57:0b:8c:4a:d7:5e:87:d1:a4:42: 7e:8f:93:f8:ee:12:63:48:4a:ab:f3:59:ee:e5:ba: c0:cb:27:cf:d3:8b:21:d8:9a:de:84:9d:ec:9d:99: 60:9a:10:61:d5:a4:20:77:d3:18:96:5d:63:03:c4: 07:a3:9a:2f:3d:3e:bd:44:60:03:40:4d:41:fd:e5: fa:23:34:17:e6:29:cd:3a:ac:ea:1a:17:5c:54:96: ec:3a:62:1b:8c:aa:34:f5:9e:1b:f2:f5:71:ee:0e: ea:42:fe:f7:06:b5:d2:8d:b6:2c:d3:ef:ae:47:92: 28:8f:49:da:d9:18:0a:0b:14:fc:21:a3:cf:66:20: 77:fb:41:3a:aa:14:32:49:9f:c7:23:89:9d:4d:92: 58:30:e0:97:f3:73:bf:0e:58:39:3d:fc:67:e7:fc: 82:de:70:e3:9e:2a:d5:1b:1f:6e:11:72:5f:49:a2: c9:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:9F:16:FD:C4:41:AC:F7:83:4B:C1:86:EE:9F:FC:C3:97:49:27:66 X509v3 Authority Key Identifier: keyid:0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:85:15:b9:15:31:d1:ed:6d:8a:d3:39:c1:21:cf:f8:7e:69: 85:5f:8f:dd:57:91:93:c3:c5:56:68:be:f7:1c:f0:d3:47:f7: 15:65:1a:42:40:a8:93:6b:1e:6e:09:1f:13:1b:bb:1f:f3:eb: 70:3d:87:76:aa:59:fa:7b:dc:4c:fa:06:f7:4a:b9:d0:7b:0b: ab:f3:6a:72:db:43:fd:ab:34:7e:41:14:71:3d:3a:22:b5:d2: 47:e7:24:9c:66:cf:af:3c:00:f9:94:31:a9:b7:1e:c1:ba:97: d9:fc:eb:dc:10:2f:a5:a9:b8:da:dc:39:02:e9:d8:91:4a:18: ae:c0:4c:3d:11:d4:f2:ba:c2:88:7d:27:d2:20:87:41:21:ba: 03:7b:77:e6:f1:a1:50:c4:90:df:b9:04:cc:7f:92:28:e1:c4: c2:6c:a3:87:62:9c:4f:7a:a3:24:d3:1f:11:83:09:1a:b9:b3: da:98:a7:1a:30:d2:be:36:96:b7:10:11:ff:38:b3:90:69:20: 0f:76:ca:12:ac:4f:b7:84:57:9c:5d:b7:b4:c8:e2:00:57:b4: 1b:0f:52:e4:f6:67:1f:4d:37:9c:5f:f0:34:27:97:d6:75:01: cb:1b:8e:07:a9:b3:bb:71:bc:42:4a:d3:59:be:e5:a5:ca:62: 2a:dd:45:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZaemxp+hwtX1YNDGe3ftrRQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNzMyNzgwNWRmMjBmYjVjMWQ2ZjRlODkwNzQ3NDNjYWVi MjRhZjcwHhcNMjUwNTA1MDQwMTI3WhcNMjUwNTA2MDQwMTI3WjAzMTEwLwYDVQQD Eyg0YzlmMTZmZGM0NDFhY2Y3ODM0YmMxODZlZTlmZmNjMzk3NDkyNzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJEyhIN6NFQmU0Fn2e2yVK6fWl/F A9CUCUF2r++mH+5WUItUhIvW9devqZCwPlertNw1mJ+xKZJCSegt8gggHo7v/n2d SF4AYlHGoMH8hlcLjErXXofRpEJ+j5P47hJjSEqr81nu5brAyyfP04sh2JrehJ3s nZlgmhBh1aQgd9MYll1jA8QHo5ovPT69RGADQE1B/eX6IzQX5inNOqzqGhdcVJbs OmIbjKo09Z4b8vVx7g7qQv73BrXSjbYs0++uR5Ioj0na2RgKCxT8IaPPZiB3+0E6 qhQySZ/HI4mdTZJYMOCX83O/Dlg5Pfxn5/yC3nDjnirVGx9uEXJfSaLJ+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEyfFv3EQaz3g0vBhu6f/MOXSSdmMB8GA1UdIwQY MBaAFApzJ4Bd8g+1wdb06JB0dDyuskr3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEt MTBiYjQ1NzlkNTI4LzEvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEtMTBiYjQ1NzlkNTI4 LzEvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUYUVuRUx 0e1titM5wSHP+H5phV+P3VeRk8PFVmi+9xzw00f3FWUaQkCok2sebgkfExu7H/Pr cD2HdqpZ+nvcTPoG90q50HsLq/NqcttD/as0fkEUcT06IrXSR+cknGbPrzwA+ZQx qbcewbqX2fzr3BAvpam42tw5AunYkUoYrsBMPRHU8rrCiH0n0iCHQSG6A3t35vGh UMSQ37kEzH+SKOHEwmyjh2KcT3qjJNMfEYMJGrmz2pinGjDSvjaWtxAR/zizkGkg D3bKEqxPt4RXnF23tMjiAFe0Gw9S5PZnH003nF/wNCeX1nUByxuOB6mzu3G8QkrT Wb7lpcpiKt1FLw== -----END CERTIFICATE-----Generated at Mon May 5 08:34:54 2025 by rpki-client