$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft File: jRrIPuOj-WjWatL99GFue7Hk0dc.mft (raw, json) Hash identifier: auxvA3NjG9dI0nE1G0e5WKW7i+bjRUDHQaLQY5FpIXY= Subject key identifier: 9F:B0:C7:6B:8C:3E:3B:FB:D9:91:BA:3B:E3:81:15:69:26:C0:C0:55 Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7 Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7 Certificate serial: 0196A3C0E5DC45D7517EC6B8B2C7B9070F87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft Manifest number: 0AA8 Signing time: Tue 06 May 2025 04:00:50 +0000 Manifest this update: Tue 06 May 2025 04:00:50 +0000 Manifest next update: Wed 07 May 2025 04:00:50 +0000 Files and hashes: 1: 0hcYkFvLnPnX3tJPZIl-Uhot1i0.roa (hash: 6/eHz/J+k5SuDY5b5eslxHZpd3P/l7+bfENiu84Xo/Y=) 2: 2MTjWcnAZaBZxr6B57_xkNelCyo.roa (hash: LwS+Lia49xksIy+sqAnEnU2btZ36QZE/qsN4N2FlYK8=) 3: A3vCnLdcCAHsjG0TKS7PepEiSRQ.roa (hash: 8/8TxF0wXw7stYTcBeXGRpf0HZpKR5xHMrhdKNPhjb4=) 4: Eb3nQCsubyrRRwgtef25b2tcJbQ.roa (hash: sgX7PEOSSTdMVUw2kIAqvpDSoV+TN56cGW37Ykizvek=) 5: FQFiaH-Uhznyo9tuv-39hg1SgIc.roa (hash: AaAgvoQWwsBdEDlzs9JJLKseENMJxUCvDZ1+feCaadI=) 6: JtkTsuHPsoBKn0hRChOrC4JXTN4.roa (hash: M9uGhnRBSZAnmB8BCT/jdRx465I3Ctf37Vtgm+Jt4nc=) 7: LNIAH1MylX8WQQ-W8xfPHTlOsW0.roa (hash: GFXXpakvt3mJ4yGbBFawI3+WVF7sKNF14A1lgtziIek=) 8: Lxv8RdYN9P2vj1nZyAjFF9lNkU8.roa (hash: xMtpILHpW8icGyga3EnNkKUNmrRxGITTuJWIIZqDxDI=) 9: MudRzNeUk2R859eEP09GJeDExf0.roa (hash: 2o3NbfW7AkgEJtAc91HUgnIB/5KesUMTjVvuVU09fp4=) 10: RTZYU-7DG4fUoipBd0qSh8BirjI.roa (hash: 3eo6AFVTXAYcIIpYV9OFjF0R4DRTO3nfrXKCxpb3Q8c=) 11: jRrIPuOj-WjWatL99GFue7Hk0dc.crl (hash: Ue8NcRenDVEg819UlYoAMgssT91lL7oTxxRGDUemZ5Y=) 12: koWcD6_YJsplq6MpdAuoeyxurzM.roa (hash: 2bTDDvlz5M3JHeYmPpa6SlfroaAlw505uc1zw7/pXCU=) 13: lO8z4PUnAAW_FQZ30LG2G_SaC34.roa (hash: TP4CK9avYURoeZBLUriM0sZhHgj7m8xB680P8/Q/778=) 14: nHSye6xLjTJdy1NFMQ9UNlBR1r0.roa (hash: x+w+bpNcYVfLYVFpFJoqaG3bmPwP5KeEN+TuOk91gTE=) 15: ptIzMM5pGR32qdt6NWym3eUNiak.roa (hash: bSsM8QyZGEjlRqx/UPAoekl3qkyD03EUapHU3WIbdX4=) 16: tesrxSIX8wDOD0usavdzlelTyC8.roa (hash: 2mw6qDJEVPvk2SB5Frfa2IZ+DHf6Rgtla+C91qwtmwA=) 17: w3XEj_DV9fIFRhmFROarQCdn6Ms.roa (hash: pKXXHhO9um6IJQVBaI4Bp8t0iIi+/wHe5zvkyl8qHy8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 May 2025 04:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:a3:c0:e5:dc:45:d7:51:7e:c6:b8:b2:c7:b9:07:0f:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7 Validity Not Before: May 6 04:00:50 2025 GMT Not After : May 7 04:00:50 2025 GMT Subject: CN=9fb0c76b8c3e3bfbd991ba3be381156926c0c055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:62:a5:51:e6:00:36:e0:c9:4f:c1:47:aa:68: db:84:13:ed:d6:bb:e7:83:f1:59:dc:91:1f:dc:86: 0c:25:18:0b:b1:09:8b:a8:74:87:b5:c6:e9:7e:65: 40:24:d1:c4:92:70:36:7b:59:8f:75:d1:e1:43:d0: 6a:ba:6c:5f:86:6c:64:c6:a9:24:3d:4c:54:b3:45: da:65:ac:ff:cf:30:90:19:cf:67:46:da:6b:41:c7: b6:ec:3e:6d:10:3f:0a:c9:76:ac:1a:6c:c6:b5:92: 81:cc:91:ff:e4:fa:59:82:44:a1:ee:9d:5b:1d:3c: 8d:fd:4f:0e:62:8f:8f:80:45:45:bc:dd:37:1a:fc: 47:79:e5:7a:9e:68:5b:f4:a6:ce:5b:61:95:0d:1a: ed:91:89:d5:59:93:4d:99:f7:80:b3:7c:e9:16:f9: cb:d3:2d:18:25:21:96:b0:4f:30:07:28:11:89:c0: 54:da:c8:77:d5:00:66:91:19:ce:59:69:37:b7:68: f0:a8:e9:22:5d:65:23:88:40:34:1d:fd:cd:d7:7b: ac:78:aa:55:c5:03:b3:57:a2:56:54:4c:fc:9f:4a: f4:ac:00:6b:8f:dd:77:89:8f:be:d3:b6:7e:ae:59: 07:4f:2a:53:cf:28:6d:7d:13:23:d1:d8:8b:23:04: b6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:B0:C7:6B:8C:3E:3B:FB:D9:91:BA:3B:E3:81:15:69:26:C0:C0:55 X509v3 Authority Key Identifier: keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:51:59:8a:6d:6d:b5:00:5a:59:4d:2c:4f:0f:21:61:fa:85: 65:23:fb:9e:ed:40:88:52:29:3b:e0:f5:97:1b:0f:4f:54:b8: fc:56:74:72:ed:c0:4e:ec:3f:05:38:ac:64:1f:c1:f4:cd:bb: 96:04:76:02:1f:6f:97:ba:51:50:76:51:98:e3:c6:d0:fa:39: 75:c0:78:be:ff:0d:32:19:da:38:5f:9d:e3:5e:fa:97:c3:34: a1:24:1b:33:c6:11:d9:f5:ae:a5:19:f1:a2:fe:33:97:00:df: 94:37:80:8d:90:13:42:ba:bb:aa:6b:c4:1e:ff:a5:8d:c5:34: 6d:bd:42:3c:47:78:38:89:5b:45:b4:da:e7:c2:04:14:97:d4: 24:d0:bc:12:95:eb:7b:37:f0:d0:73:8b:60:64:93:b5:d8:79: 24:3e:ea:0f:b4:57:35:02:bb:ae:78:e8:5d:d9:ac:7d:a3:c5: f8:b8:4a:3c:f4:d7:65:32:c2:e7:85:de:f6:af:43:1b:4e:89: 09:1e:4d:ad:9f:c2:93:c3:ff:f2:18:d4:45:31:28:19:74:f0: d9:c8:79:58:96:b6:27:a3:5d:58:d7:8f:da:7a:be:c1:b9:ac: f9:95:ff:de:be:4a:9a:8f:a7:0c:af:c1:fe:87:16:0a:89:0f: 46:c0:c4:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZajwOXcRddRfsa4sse5Bw+HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMWFjODNlZTNhM2Y5NjhkNjZhZDJmZGY0NjE2ZTdiYjFl NGQxZDcwHhcNMjUwNTA2MDQwMDUwWhcNMjUwNTA3MDQwMDUwWjAzMTEwLwYDVQQD Eyg5ZmIwYzc2YjhjM2UzYmZiZDk5MWJhM2JlMzgxMTU2OTI2YzBjMDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2KlUeYANuDJT8FHqmjbhBPt1rvn g/FZ3JEf3IYMJRgLsQmLqHSHtcbpfmVAJNHEknA2e1mPddHhQ9Bqumxfhmxkxqkk PUxUs0XaZaz/zzCQGc9nRtprQce27D5tED8KyXasGmzGtZKBzJH/5PpZgkSh7p1b HTyN/U8OYo+PgEVFvN03GvxHeeV6nmhb9KbOW2GVDRrtkYnVWZNNmfeAs3zpFvnL 0y0YJSGWsE8wBygRicBU2sh31QBmkRnOWWk3t2jwqOkiXWUjiEA0Hf3N13useKpV xQOzV6JWVEz8n0r0rABrj913iY++07Z+rlkHTypTzyhtfRMj0diLIwS2zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ+wx2uMPjv72ZG6O+OBFWkmwMBVMB8GA1UdIwQY MBaAFI0ayD7jo/lo1mrS/fRhbnux5NHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWIt ZGRmNTY3ZWRlZDAzLzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWItZGRmNTY3ZWRlZDAz LzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABFFZim1t tQBaWU0sTw8hYfqFZSP7nu1AiFIpO+D1lxsPT1S4/FZ0cu3ATuw/BTisZB/B9M27 lgR2Ah9vl7pRUHZRmOPG0Po5dcB4vv8NMhnaOF+d4176l8M0oSQbM8YR2fWupRnx ov4zlwDflDeAjZATQrq7qmvEHv+ljcU0bb1CPEd4OIlbRbTa58IEFJfUJNC8EpXr ezfw0HOLYGSTtdh5JD7qD7RXNQK7rnjoXdmsfaPF+LhKPPTXZTLC54Xe9q9DG06J CR5NrZ/Ck8P/8hjURTEoGXTw2ch5WJa2J6NdWNeP2nq+wbms+ZX/3r5Kmo+nDK/B /ocWCokPRsDEFg== -----END CERTIFICATE-----Generated at Tue May 6 12:21:56 2025 by rpki-client