$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft File: FgVYAbd153QwYyFFX9Rj-9knPEw.mft (raw, json) Hash identifier: n9tpf1d4VD8Wy1P6zmeS4znNCiQNiK1t/rGM2ezYqao= Subject key identifier: DA:12:CB:FB:14:FD:2F:DD:E0:4C:63:64:B7:A2:64:FE:CD:AC:68:32 Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c Certificate serial: 0196BFA5DDFF3BF0E202AD80686C27D4B530 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft Manifest number: 02B0 Signing time: Sun 11 May 2025 14:00:40 +0000 Manifest this update: Sun 11 May 2025 14:00:40 +0000 Manifest next update: Mon 12 May 2025 14:00:40 +0000 Files and hashes: 1: 1KQdLQdqSavQ8opOsJBCC_LRSmI.roa (hash: sDbjsiQHm8jFEXwFUnfwIQmQndNvaybGYHSFGwTIBNw=) 2: 2KRS8xNg1n3MiFJIQWdojz6XlS0.roa (hash: VaIgVtBIZ8x0cTFrgwuhgZXExSOoccJFrVYDCE79DMA=) 3: 7eZORb2xG-sQKXJcNZskPYKDrBc.roa (hash: a5zVFhpvITqqNq78/1p6QoMdwiTdRHyY02UFP9KVFTg=) 4: CGF1BIeHy8IT5aGPGNEOXrLnJlM.roa (hash: 8VwJdcpb3DlrQc7aqH1TphMMsq6OhgM+K3smNx7xgHw=) 5: FgVYAbd153QwYyFFX9Rj-9knPEw.crl (hash: 4XB/eidT3CZ1mJH6tZ2taq3tzBsBZUcb+thW9mXsv/M=) 6: HlqaX9y1cpjv0wxGrlQZeagT5Q0.roa (hash: dZjid0DCr3cVa0kusKQlx9flhXPy/L6bL7wDHQcf1TY=) 7: HtWPks8re8wT-Qc0p_2vGh8QeMQ.roa (hash: hj+XgnyJ0Da4wSkZgTsnnXr4WcLVInfl1QD5sz921GI=) 8: IPNs4r7YUZxV5NpIkqvmn9Gf_j8.roa (hash: eljg7xKNgSCPrc+bo072dY8jKxGWkC+mVsqyqY2hDQA=) 9: VhykJr3iGtJe14xyVuqvvCapaNo.roa (hash: kzFiZWS6t+iaz12TBNlwLt+jTollGPfCjhtGoJB0BAA=) 10: YHFPa4m9LoYQNM2l3WlbuD8BYSE.roa (hash: 5XWwisKeDA6C6nc4lZ8NdYHFutqiAayALt9LORpK7T0=) 11: aNo1lorx6tVQ1LtbDZZYpwG98bI.roa (hash: M/dPr78yQy8Oq7tst5W5cmGPYp+8hAOwwdyPVs5Qgpw=) 12: dLLdJHfLRdBvTQ5Mas71bcVObuM.roa (hash: iV9p6i7r3SL/cG5e8TC6Oo03GJiKkuIKFe0TcbhjK4s=) 13: fFxd6IjDHrKSpZrz2bhYu6DxRZM.roa (hash: RE/gCi0xRSTT+cmlqllde9+LarwQAFnH3GWtWOYEpmY=) 14: fSWa-E56rPsvXpxm4lV1vYh0Zzo.roa (hash: AF0SIbunEv6qwTCIoooyXnm3T+bSgX8bxBEnorAvol4=) 15: v-rqs7oKLAdttjzKh5X_lYEEDjk.roa (hash: yOJtrRQ6QxMyuem5lTDltD4HmX2wA9mBUwovNzlCxlk=) 16: zOhruI3f8CmZnvrfikkp_umvSCQ.roa (hash: NEbucM5c57bMZLBETD9r4o+f8o+xAOVGhz7z1f9K4Ww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 May 2025 14:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:bf:a5:dd:ff:3b:f0:e2:02:ad:80:68:6c:27:d4:b5:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16055801b775e774306321455fd463fbd9273c4c Validity Not Before: May 11 14:00:40 2025 GMT Not After : May 12 14:00:40 2025 GMT Subject: CN=da12cbfb14fd2fdde04c6364b7a264fecdac6832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d0:4a:08:3b:21:a9:8b:6d:29:35:52:a6:8a: 58:b5:3b:61:e0:7b:85:3d:fa:72:b2:92:0f:67:53: 8d:84:ec:6a:67:89:d5:87:9d:39:4c:2d:ee:1f:6d: b9:68:22:97:a7:bd:d7:ca:93:20:27:9e:55:22:b8: 7e:1e:93:f7:13:fb:85:90:b9:26:78:a3:04:bf:06: 61:94:72:a1:39:28:4c:ce:03:4a:d2:d1:a0:4e:1d: 37:6a:65:41:18:68:e9:4c:4e:bd:94:fd:7d:e0:7d: 5f:0e:80:a4:50:6e:e6:96:d8:6b:35:f7:e0:79:02: f9:31:8d:0e:3f:64:46:5f:a3:7d:ff:9a:75:51:ad: 94:95:f0:b6:97:99:28:54:ef:f5:65:b9:4c:4b:ab: 5f:2a:83:48:b6:e8:0c:e0:e2:8b:b4:7f:d8:1e:34: a8:53:ca:45:90:ad:43:af:f4:e1:dd:62:ac:f3:7c: e8:e5:4a:ed:bf:fb:79:a3:f3:f8:79:b7:92:67:07: db:b3:15:a4:b4:7c:df:fa:40:9d:eb:6a:27:60:e8: 48:8d:78:72:b4:b7:96:10:44:f1:9d:20:30:29:2d: 85:1f:2e:9e:0e:40:0b:56:e9:3a:36:65:77:57:69: f7:0c:e7:14:dd:e7:82:c7:f6:b6:ee:f0:b6:94:78: af:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:12:CB:FB:14:FD:2F:DD:E0:4C:63:64:B7:A2:64:FE:CD:AC:68:32 X509v3 Authority Key Identifier: keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:fd:92:98:4a:7a:23:1e:ad:c5:6a:b7:f9:25:06:e3:48:6e: 3c:c1:84:6a:73:84:d5:af:6d:ed:82:5a:29:a7:9b:95:92:f5: cd:10:41:97:18:8b:bc:c8:4b:8d:f7:ad:a5:78:60:05:ff:c0: 52:9c:ba:f9:c8:9e:d4:39:6e:ad:2a:17:71:a8:f3:07:cd:dc: 2b:fe:34:ab:ad:8d:7b:ad:7b:36:b6:fb:4e:7a:65:d7:4e:3d: 85:e6:99:83:55:a7:a5:a1:2a:94:5f:4c:2f:4e:05:d8:09:a0: ed:b5:92:bc:b2:e8:83:09:e9:6b:cf:f5:f3:db:9e:bc:31:83: 98:ca:67:92:93:3e:21:d8:20:a5:05:74:d0:01:d8:77:0e:34: be:6e:0e:ee:6e:71:e9:42:8a:0b:17:3a:83:bf:8a:dc:c0:6f: 43:6e:69:43:78:32:99:19:00:4b:55:60:7c:7b:84:d1:0e:c0: d0:e7:66:93:81:3b:8c:fb:e9:af:b8:74:ae:48:45:22:86:77: 1c:3a:ec:32:6e:23:8b:e5:bc:5b:66:9f:9b:8c:fb:2d:3f:b4: 26:97:36:dd:59:15:fb:aa:dd:a9:81:93:73:0c:8a:e4:6a:f1: 4b:23:ac:42:96:1a:93:64:91:34:8a:a0:3d:b3:b3:b3:75:14: 77:ed:68:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa/pd3/O/DiAq2AaGwn1LUwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MDU1ODAxYjc3NWU3NzQzMDYzMjE0NTVmZDQ2M2ZiZDky NzNjNGMwHhcNMjUwNTExMTQwMDQwWhcNMjUwNTEyMTQwMDQwWjAzMTEwLwYDVQQD EyhkYTEyY2JmYjE0ZmQyZmRkZTA0YzYzNjRiN2EyNjRmZWNkYWM2ODMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNBKCDshqYttKTVSpopYtTth4HuF PfpyspIPZ1ONhOxqZ4nVh505TC3uH225aCKXp73XypMgJ55VIrh+HpP3E/uFkLkm eKMEvwZhlHKhOShMzgNK0tGgTh03amVBGGjpTE69lP194H1fDoCkUG7mlthrNffg eQL5MY0OP2RGX6N9/5p1Ua2UlfC2l5koVO/1ZblMS6tfKoNItugM4OKLtH/YHjSo U8pFkK1Dr/Th3WKs83zo5Urtv/t5o/P4ebeSZwfbsxWktHzf+kCd62onYOhIjXhy tLeWEETxnSAwKS2FHy6eDkALVuk6NmV3V2n3DOcU3eeCx/a27vC2lHivtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNoSy/sU/S/d4ExjZLeiZP7NrGgyMB8GA1UdIwQY MBaAFBYFWAG3ded0MGMhRV/UY/vZJzxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgt MTM1NzE3ZWYzODhhLzEvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgtMTM1NzE3ZWYzODhh LzEvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfP2SmEp6 Ix6txWq3+SUG40huPMGEanOE1a9t7YJaKaeblZL1zRBBlxiLvMhLjfetpXhgBf/A Upy6+cie1DlurSoXcajzB83cK/40q62Ne617Nrb7Tnpl1049heaZg1WnpaEqlF9M L04F2Amg7bWSvLLogwnpa8/189uevDGDmMpnkpM+IdggpQV00AHYdw40vm4O7m5x 6UKKCxc6g7+K3MBvQ25pQ3gymRkAS1VgfHuE0Q7A0Odmk4E7jPvpr7h0rkhFIoZ3 HDrsMm4ji+W8W2afm4z7LT+0Jpc23VkV+6rdqYGTcwyK5GrxSyOsQpYak2SRNIqg PbOzs3UUd+1oTw== -----END CERTIFICATE-----Generated at Sun May 11 22:05:30 2025 by rpki-client