$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft File: 2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft (raw, json) Hash identifier: o6m9sQG2paRHB0MaPbHE4T8MTBN9sbNlBLZiqr6CMQw= Subject key identifier: 49:93:19:38:C2:81:3A:76:80:22:12:E6:61:4F:39:0D:D5:13:FC:05 Authority key identifier: D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 Certificate issuer: /CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Certificate serial: 0196B2C5BB5F4BC6CE8811E13334A75C746B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft Manifest number: 03DD Signing time: Fri 09 May 2025 02:00:25 +0000 Manifest this update: Fri 09 May 2025 02:00:25 +0000 Manifest next update: Sat 10 May 2025 02:00:25 +0000 Files and hashes: 1: 2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl (hash: fI4kbtSz9vYf9v8IYYrZ5vaf7tj3vGX3TXU2aFwPGT8=) 2: 2EXD27DpUxyiZCH4jnp8jx42t1A.roa (hash: 7hpsUKGtRqERcNOmrniPJovdneB4WTHHimklpq6Yc/k=) 3: 3NKK36OzbyCVvAW6QnBXCk0vC-E.roa (hash: gHjjORGkqgV1v9V5gvG+Gu8C2uJp9VohURGk9hhqXCY=) 4: 8iXU5D7pqB0d57qygRs63MZknmk.roa (hash: XLxO/uwC+4ZlL0rXFqAajGUTAt+XMI9UYoDlUJW9JS8=) 5: DWnysDNu_v7yNNJ1aIjDqps-5LM.roa (hash: JPD53SzaSyMUMEmsWnAbUrfvGclz72WlfPM6q3RIsCk=) 6: EVR1g7g_6ShkZ-G0slxr47V122I.roa (hash: OE8gSI9PUAIyHUczWwUS2FGixNNsUvDNFuftsFbcP6w=) 7: SOWcqaYhZ7YX4OOHhJe96In9itw.roa (hash: UaSEArJ4Ty/99oB9k6ZnmXrGKJLGr0L+yE1xo+K6dEg=) 8: f7lR2qdNzNhMHZctwhySnx52rh8.roa (hash: uc/3dtcmzwA7XSJMfP+6pPiS8XT6tGwBC3iJr2Zlmhg=) 9: kcbMP36K9zR3OAqVvtstfD6Qc1E.roa (hash: kKzo7D93m1wQVJ52FPItkIqrFxN6fMh/dyqt/5KaXWw=) 10: p8WEIwXo7Clnw_lkUVuyGNIeOvM.roa (hash: Ur1mz6OTaNWSYai5Ah9bPYej/Ck8pv/XZW+9ZEpR3q8=) 11: qJyacpBlbWQwXSv5l4Lxk3gU7sA.roa (hash: A2lDMN5zFwbdpcFJxDl5a8uW8CFGyTpmaP19LpWfeHE=) 12: r9xTyNget5zcXlE9TLs7M3SNT04.roa (hash: AESrTW2Rp0Ova6EIN8mRWsiWri5RUSzYkj7e2h2UwnM=) 13: wBcaC1_PamN7lirmMN3fzCp6jH4.roa (hash: G/3j6WArnTAj7/DCB5dCgU40hqdUmgoP9O96RyuFd1M=) 14: xQ1rwm6oO8jHA9kZhQvVDEfMToU.roa (hash: rR/azYUh2GUL8HTdYkb3GDWX8S5vRgxNHhornEovZ9o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 May 2025 00:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:b2:c5:bb:5f:4b:c6:ce:88:11:e1:33:34:a7:5c:74:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Validity Not Before: May 9 02:00:25 2025 GMT Not After : May 10 02:00:25 2025 GMT Subject: CN=49931938c2813a76802212e6614f390dd513fc05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:27:ac:4b:b5:79:31:a2:80:8b:21:65:11:95: cf:fa:0e:71:b6:63:2f:95:c6:89:27:93:ca:3a:bb: b1:34:4a:89:40:e8:ec:b1:6e:b1:b3:c2:56:0b:1e: 99:f4:6b:65:18:ea:9f:8d:aa:5a:9d:eb:0f:c9:40: 4e:0b:ca:77:5a:84:85:7f:ca:ed:17:af:68:38:4c: 1e:08:70:82:0a:72:b9:ef:aa:c2:e3:ea:b9:fb:18: e2:b2:a1:ff:77:f0:8b:a5:c4:a3:c6:ae:aa:98:92: 61:3d:92:b2:ce:bc:26:5d:fe:41:b0:9a:29:35:60: 2c:41:57:67:6f:af:db:24:28:10:b9:be:d1:42:50: 78:80:f5:67:55:f8:e8:50:2f:66:90:2d:1a:29:25: cb:42:df:00:d5:b0:46:0b:cc:03:56:0a:b7:61:5c: e6:fe:bb:d1:14:f9:61:9d:ee:84:63:3a:a0:a5:42: d3:b6:27:f3:0a:9e:63:fa:15:77:46:07:af:3a:4c: 36:5d:22:76:a8:2c:73:02:99:99:d7:25:5d:9d:f8: 5e:4b:c7:9f:e2:cb:01:86:5b:b6:ad:5b:ab:cd:5a: 53:3b:0e:91:0e:bf:66:14:83:07:e5:d0:24:dc:7c: 43:97:d9:e9:5f:58:c5:5e:8a:81:3c:fb:2d:ef:c1: cf:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:93:19:38:C2:81:3A:76:80:22:12:E6:61:4F:39:0D:D5:13:FC:05 X509v3 Authority Key Identifier: keyid:D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:0c:b2:87:2d:e7:f8:f3:61:58:c2:44:cc:52:e3:2b:01:ac: b6:6d:37:9b:d7:61:d4:3d:7f:28:96:57:c4:66:be:8c:6d:ce: a8:a5:1c:6c:b4:4b:f3:3a:6b:74:26:98:d7:7a:36:82:95:ff: 31:ce:75:2b:57:a0:3c:1f:66:62:03:3b:3d:aa:4b:85:1a:25: 9e:66:ae:35:e4:33:8c:75:91:8b:52:8b:aa:f2:72:c9:d7:aa: da:6c:a7:d9:23:d5:bd:c5:03:c5:f9:d6:fd:75:0a:9b:a1:df: 40:77:d1:ed:b0:09:ed:eb:cb:74:32:24:a2:f2:49:51:48:7f: 10:1b:ae:3e:52:df:44:d5:05:4e:fc:12:19:d5:39:dc:cc:b4: 3d:95:18:f2:d5:77:94:0a:b1:56:3a:54:02:f1:92:1d:bf:db: e7:56:ca:17:fb:91:4f:54:a7:00:4d:42:3f:ee:39:b0:a7:f9: aa:9c:f6:21:2e:de:a9:1f:23:e0:2c:fa:8a:92:82:41:f1:59: e1:9f:c1:de:4e:20:50:b1:90:d1:06:20:9c:55:6a:aa:aa:a1: cf:e1:27:97:8a:ee:6c:cb:51:2d:50:28:ea:6b:a8:9d:e0:bc: b0:28:a4:df:24:7b:15:3a:8a:92:e8:7b:88:f2:5c:f8:c5:12: cb:40:12:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZayxbtfS8bOiBHhMzSnXHRrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MmNiNDNjYTNjMGM1NzgxNmNlZTM2MDQ3OGQwY2Y4ODIy MDdmZDIwHhcNMjUwNTA5MDIwMDI1WhcNMjUwNTEwMDIwMDI1WjAzMTEwLwYDVQQD Eyg0OTkzMTkzOGMyODEzYTc2ODAyMjEyZTY2MTRmMzkwZGQ1MTNmYzA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliesS7V5MaKAiyFlEZXP+g5xtmMv lcaJJ5PKOruxNEqJQOjssW6xs8JWCx6Z9GtlGOqfjapanesPyUBOC8p3WoSFf8rt F69oOEweCHCCCnK576rC4+q5+xjisqH/d/CLpcSjxq6qmJJhPZKyzrwmXf5BsJop NWAsQVdnb6/bJCgQub7RQlB4gPVnVfjoUC9mkC0aKSXLQt8A1bBGC8wDVgq3YVzm /rvRFPlhne6EYzqgpULTtifzCp5j+hV3RgevOkw2XSJ2qCxzApmZ1yVdnfheS8ef 4ssBhlu2rVurzVpTOw6RDr9mFIMH5dAk3HxDl9npX1jFXoqBPPst78HPpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEmTGTjCgTp2gCIS5mFPOQ3VE/wFMB8GA1UdIwQY MBaAFNgstDyjwMV4Fs7jYEeNDPiCIH/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAt MTVmMTNlM2Y3ZDg1LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAtMTVmMTNlM2Y3ZDg1 LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdQyyhy3n +PNhWMJEzFLjKwGstm03m9dh1D1/KJZXxGa+jG3OqKUcbLRL8zprdCaY13o2gpX/ Mc51K1egPB9mYgM7PapLhRolnmauNeQzjHWRi1KLqvJyydeq2myn2SPVvcUDxfnW /XUKm6HfQHfR7bAJ7evLdDIkovJJUUh/EBuuPlLfRNUFTvwSGdU53My0PZUY8tV3 lAqxVjpUAvGSHb/b51bKF/uRT1SnAE1CP+45sKf5qpz2IS7eqR8j4Cz6ipKCQfFZ 4Z/B3k4gULGQ0QYgnFVqqqqhz+Enl4rubMtRLVAo6muoneC8sCik3yR7FTqKkuh7 iPJc+MUSy0ASOA== -----END CERTIFICATE-----Generated at Fri May 9 08:29:56 2025 by rpki-client