$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft File: q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft (raw, json) Hash identifier: /QHfNsqrdxsyV1A8kIcJRxn8Tmux+UWixqgqzA4Y35o= Subject key identifier: AB:0C:88:F3:ED:4A:C6:24:F9:F3:1D:7C:D3:F3:83:73:6F:38:E4:11 Authority key identifier: AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14 Certificate issuer: /CN=ab8c6c58b607ff23ae7175a61682c75480f1e214 Certificate serial: 0196BA48621FF61D49E20458053D05CFE14D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft Manifest number: 1240 Signing time: Sat 10 May 2025 13:00:27 +0000 Manifest this update: Sat 10 May 2025 13:00:27 +0000 Manifest next update: Sun 11 May 2025 13:00:27 +0000 Files and hashes: 1: Ay4048oOGOLd8W5gLDDEAyTF8CE.roa (hash: NXsQAFwkRa/GC3TqDmqhOZeN3qNn6FtRxq658PxTeSo=) 2: EbvXq4EM8hAgSkGiFLRqaY-G0EU.roa (hash: zajtrIP7Ewp9NW7IyVXFEVPjCtiQ0d/m581bkbpxnPI=) 3: FDdC23f-QMX8x6wvwKf2MaftED4.roa (hash: h9m2qsiGkrW+4l59GNkStG6h59aEcnuwE/KLJqr7Cgk=) 4: FHjjaCL7QaSxR7Yf_uDdz3cQhuA.roa (hash: Brv6WLVF3QRBSayqPg/J2H5JWwF8VVYLp0UA1sg3bSA=) 5: GanbvvtqSZENbmIdtfbYun4fuOo.roa (hash: a9IMBYKg4BFPWfGPrEQ1nIFRtJtRWqf5txg0Sr68Odk=) 6: HeWtxOQwTN1uf0xfcq_bZw71XkA.roa (hash: Q3cAdwW00NmkMkDNixCTZhHEBzWnPkDYpvdoFVzzSP4=) 7: LPXBlOJ83SUZetduCUkP3lDmZb8.roa (hash: Xahh/YPbtY5jZR0nw8MkUj4SXBdb+qHLE/N+aHg/zLg=) 8: MBaWylrBVCifHO75NhqX3hwA3gI.roa (hash: rBGbEwve3PVfVzEgeSB6FNde2V4Ej5oriQNU2JdSej4=) 9: TNZjVfkoPHNGWuPROUhTApW2tS4.roa (hash: HeS2ECV8xSlPFS6ZfzpvaJlw7gUvm2q+HDJoDgc0tag=) 10: VEkecCYWX-3eJbHzfXRPqIguSrU.roa (hash: y+HxKa51lXccWcF8YAwZEEpBtkvi4YQc9qp84HUBYjU=) 11: bJOubptyDCUoksZUBTEQqGVmM9c.roa (hash: 5AtXcXlAprhgr08DWqOvaQo1UWB8kRpiaZt7z80DD44=) 12: gY7ZGvPzoH-CX9GeUSTzaqQXovY.roa (hash: 2Y8QhFV1RfXgwz+9zPSSImXIf02O6QwrVpawBy0GOpo=) 13: j5_CqMmkt1DG3j-liA9ojTF-2zk.roa (hash: 9/Skv7dfWWCpzLOyfdQVA/mAMx0mIp9bCVvdrEzkMLY=) 14: ktsWW1aNW0Ka2r1y8DatRgdAjnQ.roa (hash: B9kQb2mez0Ho2ienkmxwkosyQ4vYDt/9bZEi638La00=) 15: pWYX2715Q-5BkbFDg0Sh9v9WvPs.roa (hash: TgnvC3W5sZgU6RXpmwyf5MNyrmOzs/Lefze2pwDj6yc=) 16: pdqJCRLiJ7NUW64tDbwue3bHfpU.roa (hash: ljeRCKKswXVLuB5MoRwzN0UCpzG2Fbx/CHdpqjKSohM=) 17: q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl (hash: lrxQrcBmNBPIWXWyItxmYJyXhl9mXxeffiepIAZfvis=) 18: tuLu-KxTyWECQsa7jsPHvbBC7-c.roa (hash: sICitbN0hdJLsCXmDSmpQhmRlzSQyxGdXNXHPCYmLv0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 May 2025 13:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:ba:48:62:1f:f6:1d:49:e2:04:58:05:3d:05:cf:e1:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8c6c58b607ff23ae7175a61682c75480f1e214 Validity Not Before: May 10 13:00:27 2025 GMT Not After : May 11 13:00:27 2025 GMT Subject: CN=ab0c88f3ed4ac624f9f31d7cd3f383736f38e411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:10:70:80:18:bd:34:9f:4a:9a:90:b4:77:ee: 68:b6:b7:81:76:dc:bb:56:b9:15:c2:43:ca:24:0e: a5:b2:da:54:9e:61:3d:8b:d7:4b:16:56:90:00:f7: 22:d8:7e:74:bb:2d:ef:3b:0f:92:66:ee:d6:70:c2: a0:55:75:74:d6:78:78:ab:ee:4e:a5:7e:de:f3:e7: 05:0b:21:48:cf:23:a6:d3:4c:58:2d:0a:ff:a6:92: 9e:75:09:9c:4a:e0:fb:ca:a1:a7:f3:70:0b:b7:a1: d6:56:dc:5e:40:c9:5e:98:b5:69:bd:79:49:38:17: 0e:38:c8:48:0f:0f:53:f8:60:0b:51:4f:af:ec:83: 2e:33:02:31:3a:0b:c6:d1:0e:13:c1:bf:77:96:b5: 8f:91:70:f2:d6:c8:a7:b8:83:b5:35:9e:c8:d4:43: f8:c1:95:a0:6b:33:8f:c4:8f:4a:ea:ac:eb:82:a1: c8:bb:bf:1b:a4:38:5f:ed:81:57:ec:a0:6e:0f:e0: 70:02:dc:dd:91:9d:aa:c9:43:c2:63:8e:87:e6:db: 46:e2:b7:3c:cd:43:c7:ea:5c:6e:2a:25:26:ce:38: 9b:74:2e:23:92:62:4a:57:a6:d4:ac:c0:14:70:32: cc:a9:b0:ae:d4:fb:3d:82:5d:4d:71:ed:aa:41:c4: 68:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:0C:88:F3:ED:4A:C6:24:F9:F3:1D:7C:D3:F3:83:73:6F:38:E4:11 X509v3 Authority Key Identifier: keyid:AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:30:f4:bc:a4:65:c4:dc:2f:57:93:92:b9:84:04:f1:7b:d2: 03:6b:05:63:8f:f5:19:fb:4c:ae:fd:cc:2f:a3:32:20:5f:d1: b2:ed:69:83:59:5e:b4:d7:9b:ee:eb:66:e0:eb:3b:bb:f3:7b: c1:e1:93:f6:53:09:eb:dd:7a:b1:8e:c4:9d:61:d5:b3:a6:92: eb:e8:fc:b0:d4:5e:78:fb:08:0d:2d:0a:bc:18:08:f3:b8:c1: d9:fd:8b:7e:54:a4:da:21:91:fd:46:7b:41:b6:ba:5a:78:4f: 4a:b8:96:55:4c:29:47:87:d7:ba:49:9f:a4:89:5f:d2:ce:d9: 30:cf:56:17:9e:1d:90:b3:52:76:1e:29:cd:ad:a9:2f:5a:4b: 2d:a2:9e:e4:31:e4:5f:c4:8f:f0:29:2e:63:b2:06:b4:4f:71: 21:fc:05:f3:83:b6:8c:d1:96:36:87:75:90:a9:07:24:43:77: 78:12:a4:df:9b:2a:88:87:40:d7:88:01:6d:1c:d1:36:00:a8: cb:a1:3f:c7:cd:a0:89:24:d9:97:5e:e9:58:ad:b6:96:73:71: fa:67:18:ba:1c:ab:76:86:4a:be:bf:a8:96:8b:44:6d:02:f7: 01:b1:ad:52:be:3a:00:5b:24:60:8d:f7:79:0d:cb:a8:be:c8: 95:3c:7d:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa6SGIf9h1J4gRYBT0Fz+FNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiOGM2YzU4YjYwN2ZmMjNhZTcxNzVhNjE2ODJjNzU0ODBm MWUyMTQwHhcNMjUwNTEwMTMwMDI3WhcNMjUwNTExMTMwMDI3WjAzMTEwLwYDVQQD EyhhYjBjODhmM2VkNGFjNjI0ZjlmMzFkN2NkM2YzODM3MzZmMzhlNDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxBwgBi9NJ9KmpC0d+5otreBdty7 VrkVwkPKJA6lstpUnmE9i9dLFlaQAPci2H50uy3vOw+SZu7WcMKgVXV01nh4q+5O pX7e8+cFCyFIzyOm00xYLQr/ppKedQmcSuD7yqGn83ALt6HWVtxeQMlemLVpvXlJ OBcOOMhIDw9T+GALUU+v7IMuMwIxOgvG0Q4Twb93lrWPkXDy1sinuIO1NZ7I1EP4 wZWgazOPxI9K6qzrgqHIu78bpDhf7YFX7KBuD+BwAtzdkZ2qyUPCY46H5ttG4rc8 zUPH6lxuKiUmzjibdC4jkmJKV6bUrMAUcDLMqbCu1Ps9gl1Nce2qQcRoYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKsMiPPtSsYk+fMdfNPzg3NvOOQRMB8GA1UdIwQY MBaAFKuMbFi2B/8jrnF1phaCx1SA8eIUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9lZmI4ZWUtYzVjNC00NDY3LWEwY2Mt ODhhM2M0MWZhZWUyLzEvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9lZmI4ZWUtYzVjNC00NDY3LWEwY2MtODhhM2M0MWZhZWUy LzEvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjTD0vKRl xNwvV5OSuYQE8XvSA2sFY4/1GftMrv3ML6MyIF/Rsu1pg1letNeb7utm4Os7u/N7 weGT9lMJ6916sY7EnWHVs6aS6+j8sNReePsIDS0KvBgI87jB2f2LflSk2iGR/UZ7 Qba6WnhPSriWVUwpR4fXukmfpIlf0s7ZMM9WF54dkLNSdh4pza2pL1pLLaKe5DHk X8SP8CkuY7IGtE9xIfwF84O2jNGWNod1kKkHJEN3eBKk35sqiIdA14gBbRzRNgCo y6E/x82giSTZl17pWK22lnNx+mcYuhyrdoZKvr+olotEbQL3AbGtUr46AFskYI33 eQ3LqL7IlTx9Aw== -----END CERTIFICATE-----Generated at Sat May 10 19:44:24 2025 by rpki-client