$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft File: JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft (raw, json) Hash identifier: ZdzrNyCKyyGjbjv3FZeJYjqk2g2XSkV0IBj8QvE3xUI= Subject key identifier: 11:D5:BB:CF:54:CB:A0:67:43:AC:26:E9:14:33:D4:31:28:E7:18:11 Authority key identifier: 26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43 Certificate issuer: /CN=26a5aa918cbfeb3e12997f33890feb258907b343 Certificate serial: 0196C1941590123F8646295297FED7B8C6FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft Manifest number: 11E7 Signing time: Sun 11 May 2025 23:00:29 +0000 Manifest this update: Sun 11 May 2025 23:00:29 +0000 Manifest next update: Mon 12 May 2025 23:00:29 +0000 Files and hashes: 1: Cuo_4OmB5hqfWI_WnYCCpNWLrgY.roa (hash: 3ZR1eIgUuJPainUs4mhe9MePZiakCaM69xOhHdIrRiI=) 2: IzLkhR_yv-v1GWTNh9mHUxrH6l4.roa (hash: Gz5yahpviiaRhf/uooYdv+kvLqcJz9y4V27m2bP2qhQ=) 3: JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl (hash: S2w6gzXLFir7NG+9YiXsWbAyRtoSZy0bhf1EQWJd2l0=) 4: LM4Pk0L89FT4bKCAnT5Pam60X3A.roa (hash: 15JH8Jc4TtNGcpNeD66bPIeSCBDAVTNv6bCkpCrYf1k=) 5: LzqzV901FJ7L-pE2io0JnQT7BO4.roa (hash: GQqWNE02zR7Pp1sxpXbJtIEQadxv84uYnIivoQsK42g=) 6: PSAVpGqbLcX36nvl195Ht9uZru0.roa (hash: zB4ZQEbAnrwd223bn2HnWhFXbaVVIUWcshlHHT8Vv9g=) 7: ZPRKsrk_LO1Kz1FxSXf4yoBYhVE.roa (hash: MuaQpB8L7R2Qx8jUBzVEMelRet/5/uaTnFy0z9JGEOY=) 8: exSqcqToVirE26kLGdF-HPjamps.roa (hash: HQsC+Mewyu8X71olEoQS/oWx63H6y6cZFOsC8HgKsMc=) 9: juhHhfMZKtMv7VJHZvSyHbChAaI.roa (hash: TVL933SmsCckOHxjM78yEFmonP+viUg+iondjs0ZENY=) 10: wwkTxtvy8y_gre1LyntK82_wg2o.roa (hash: 06SNxlJKLopu/TY42bvthXJuhwNZOlr+SWZ0JQeMj5o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 May 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:c1:94:15:90:12:3f:86:46:29:52:97:fe:d7:b8:c6:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26a5aa918cbfeb3e12997f33890feb258907b343 Validity Not Before: May 11 23:00:29 2025 GMT Not After : May 12 23:00:29 2025 GMT Subject: CN=11d5bbcf54cba06743ac26e91433d43128e71811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6a:c4:13:00:b1:7a:ab:1e:3a:a0:f6:e9:74: 97:7f:c7:af:9d:95:81:f2:18:90:ba:ce:f1:d8:ff: 91:51:83:b8:48:24:ff:2c:4d:22:4e:ac:04:2b:2b: ba:ad:87:b5:ed:23:cd:06:9f:27:7a:17:e6:09:e9: 8c:ef:5a:db:45:3f:22:d1:48:f2:a3:2c:fc:5f:29: dd:48:92:25:d6:cd:45:fe:3e:80:e9:f1:3d:7b:5f: ec:38:ae:5d:55:7e:0b:be:e9:74:df:c0:8c:88:5c: 0d:57:7e:f4:85:6b:7a:bd:5d:5b:a1:6b:00:b1:70: 02:89:f1:93:07:c9:9c:db:68:c0:99:24:0a:9e:79: d1:cd:f4:4b:86:4e:66:56:42:b7:04:3d:2f:0a:7b: 7d:23:39:00:cd:8f:10:e9:37:b9:10:7b:2a:8d:d6: ad:4e:87:56:57:d8:fb:3a:5a:e1:3e:95:7f:43:22: f5:11:26:49:42:fa:a9:03:62:b4:b9:68:f7:fc:ea: 9b:6a:46:44:8d:bc:ce:90:86:64:7c:20:fe:b8:64: e7:01:dd:83:ff:00:7d:50:eb:f0:d6:54:ff:23:d8: 00:83:d8:87:76:d6:76:58:6e:ac:ba:28:96:0e:2f: b6:55:de:d4:74:77:22:cc:5c:4f:62:ad:ca:f5:9e: 74:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:D5:BB:CF:54:CB:A0:67:43:AC:26:E9:14:33:D4:31:28:E7:18:11 X509v3 Authority Key Identifier: keyid:26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:c0:48:1a:63:b7:f9:18:3c:c5:52:fd:32:e4:11:c2:f0:61: 05:0a:f4:e0:8e:3a:bb:8c:09:9d:1b:e3:42:64:8a:1d:12:fc: 96:33:34:a0:52:08:d5:a3:ee:f6:4a:f5:d1:b4:ac:ca:ba:f6: 8d:0b:49:62:48:1f:f0:13:bd:38:54:b6:39:a1:86:48:54:9e: 6c:de:6f:06:7b:d3:02:4a:e2:5c:87:34:17:70:41:d0:7b:44: 46:a7:46:6c:ed:20:81:0e:58:df:a1:bf:45:3e:01:6d:b5:c5: 84:1c:f7:16:4f:e7:0b:af:51:6e:10:3e:42:d6:69:49:c5:d7: 50:61:e5:28:1a:02:92:68:f1:df:0b:ff:a7:ae:61:f8:8f:d5: 60:73:30:c4:15:5d:b5:f3:ab:57:f2:6e:6f:26:c1:21:51:8d: a9:7a:95:51:5a:f3:c5:10:c0:ca:18:f2:b7:e3:a3:9a:b9:f5: 5c:a2:97:a3:f1:6c:f4:72:56:38:9a:4b:f0:e6:06:e5:a4:75: ce:70:ca:aa:18:05:30:e8:ae:f8:7c:46:6f:16:0c:1c:3e:bb: 27:d1:92:cb:cb:de:90:26:f8:7e:d8:0a:74:ae:81:78:41:a2: 1f:b2:60:ca:a6:46:e1:2d:a6:25:7d:74:1b:42:85:bd:06:fb: 63:bc:ee:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZbBlBWQEj+GRilSl/7XuMb+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2YTVhYTkxOGNiZmViM2UxMjk5N2YzMzg5MGZlYjI1ODkw N2IzNDMwHhcNMjUwNTExMjMwMDI5WhcNMjUwNTEyMjMwMDI5WjAzMTEwLwYDVQQD EygxMWQ1YmJjZjU0Y2JhMDY3NDNhYzI2ZTkxNDMzZDQzMTI4ZTcxODExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWrEEwCxeqseOqD26XSXf8evnZWB 8hiQus7x2P+RUYO4SCT/LE0iTqwEKyu6rYe17SPNBp8nehfmCemM71rbRT8i0Ujy oyz8XyndSJIl1s1F/j6A6fE9e1/sOK5dVX4Lvul038CMiFwNV370hWt6vV1boWsA sXACifGTB8mc22jAmSQKnnnRzfRLhk5mVkK3BD0vCnt9IzkAzY8Q6Te5EHsqjdat TodWV9j7OlrhPpV/QyL1ESZJQvqpA2K0uWj3/OqbakZEjbzOkIZkfCD+uGTnAd2D /wB9UOvw1lT/I9gAg9iHdtZ2WG6suiiWDi+2Vd7UdHcizFxPYq3K9Z50IQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBHVu89Uy6BnQ6wm6RQz1DEo5xgRMB8GA1UdIwQY MBaAFCalqpGMv+s+Epl/M4kP6yWJB7NDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnFXcWtZeV82ejRTbVg4emlRX3JKWWtIczBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8xNDMzZWEtMTA4MC00NmU1LWI2MTIt Mjk3ZTI4MmQ2NmE4LzEvSnFXcWtZeV82ejRTbVg4emlRX3JKWWtIczBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC8xNDMzZWEtMTA4MC00NmU1LWI2MTItMjk3ZTI4MmQ2NmE4 LzEvSnFXcWtZeV82ejRTbVg4emlRX3JKWWtIczBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX8BIGmO3 +Rg8xVL9MuQRwvBhBQr04I46u4wJnRvjQmSKHRL8ljM0oFII1aPu9kr10bSsyrr2 jQtJYkgf8BO9OFS2OaGGSFSebN5vBnvTAkriXIc0F3BB0HtERqdGbO0ggQ5Y36G/ RT4BbbXFhBz3Fk/nC69RbhA+QtZpScXXUGHlKBoCkmjx3wv/p65h+I/VYHMwxBVd tfOrV/JubybBIVGNqXqVUVrzxRDAyhjyt+Ojmrn1XKKXo/Fs9HJWOJpL8OYG5aR1 znDKqhgFMOiu+HxGbxYMHD67J9GSy8vekCb4ftgKdK6BeEGiH7JgyqZG4S2mJX10 G0KFvQb7Y7zuwA== -----END CERTIFICATE-----Generated at Mon May 12 04:29:12 2025 by rpki-client