$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft File: zMR43ZzNYWL4JIisb8UMIdNp8qA.mft (raw, json) Hash identifier: 8cMRFylad/mGDWviB793C8FZk/xodjdeAoiG55iT/BM= Subject key identifier: A7:79:D2:A6:78:DD:DB:FF:4D:1C:8B:94:ED:40:9E:41:3F:4F:3C:78 Authority key identifier: CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0 Certificate issuer: /CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0 Certificate serial: 0196C1CAE20C1BB190828292D3672C181E91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft Manifest number: 1540 Signing time: Mon 12 May 2025 00:00:20 +0000 Manifest this update: Mon 12 May 2025 00:00:20 +0000 Manifest next update: Tue 13 May 2025 00:00:20 +0000 Files and hashes: 1: 6ve9ZdOx9-Jbfmi44W3M8-3fyYA.roa (hash: dVVun+kF/7beMen84cbPjTHH6kjQfKs3AUC1Xd2wQ2A=) 2: J2wVE-ysPom5E_5lF4tJldYNa-0.roa (hash: oUIFr0+ZyYlkYGUaUpe52i+2V6CsiaUkgkNDD+7+LeQ=) 3: UKCOK-W3ox3wQ-_xQp6Nu_DwCz4.roa (hash: gPrsrWnRzFL4kuQaY4M1gIUFgKd8cdPjv6qajYb7JnQ=) 4: YwzWinKJc46_U8FICjJOYyamFbE.roa (hash: 6RpEEVsTkHPSo1dAN1+8+s2LqtjPnGEmS34LuQumwbI=) 5: a5CofPxS02DnAUUS9BR-MfOlQu4.roa (hash: LylucOp1UfCFOp+5ipOtc4LcLveZAw9S3wnaBKPFnAA=) 6: aTxnMurrHnoJZlgUyPTNHT4Ir8Q.roa (hash: HeEFk1qtIJz6ps6s2w4DpyvOfJGSvhT8ioiircXVR2o=) 7: c_P4sr3Opke1mWU78BvJMlMDps8.roa (hash: epdNIDM+10/qxHg1G8njFcHs1LoWUpUQmmausYhNxGY=) 8: iI8DgizVWpbEfLLZJw23cwOMtao.roa (hash: gWEZpZ6NinOCicsU6XwwO/9pb7/TViv+n+2ETM0yooY=) 9: p1mSMR7xN9m1jztS6WxG27UANcc.roa (hash: 4Bmm+a1YgG6FugC5k/i8MnSCpfdQHkbijQGY6Yl+j+g=) 10: sYAfD4BV-6irRlKQSwMoXHjm0Mc.roa (hash: T1/WiR0D/YUKPRxlOtYq/pfY4c0SddtxyI4tXYaUGdg=) 11: wZigKiFSFg2jf4ybn-aNCM9AUoc.roa (hash: 7ZXKjf9bxY5hwxObMzg74iYfXa92Z7QeLKS7Y869myY=) 12: xuKZJebXbxs55nxOb7ZrfE7zGKE.roa (hash: Jt/lG0DwTTw8LOe3o8IYDXO60+0YpLwITYi+cEFQ4h0=) 13: zMR43ZzNYWL4JIisb8UMIdNp8qA.crl (hash: +oPsbuJv8mz0XMSX1UocVefHPLZpbXSN/N158BXMRkQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 May 2025 00:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:c1:ca:e2:0c:1b:b1:90:82:82:92:d3:67:2c:18:1e:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0 Validity Not Before: May 12 00:00:20 2025 GMT Not After : May 13 00:00:20 2025 GMT Subject: CN=a779d2a678dddbff4d1c8b94ed409e413f4f3c78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:31:d7:0b:65:43:78:6e:a9:98:c8:b9:50:7f: 8d:e9:a0:67:4b:57:19:23:02:f3:5f:48:d7:19:d1: 14:01:d3:28:25:47:5c:cb:09:be:5f:51:08:e3:40: 7d:2e:d2:28:fe:91:55:8a:ee:d9:3e:ec:ca:c0:d0: c4:00:8c:31:76:a0:2d:2f:74:e1:fb:d9:dd:e9:bb: 17:e4:a0:2a:70:a1:96:92:df:64:9d:78:ed:b6:ee: 13:5c:08:5c:57:41:72:f3:fc:d2:32:d3:7d:2a:e2: c7:ce:6a:64:9f:37:f0:1b:a5:5f:6f:23:5d:98:35: a9:fb:40:bb:c6:51:0a:d0:af:10:3d:db:be:f4:5e: d9:9f:09:c1:63:8a:db:e0:47:8a:a9:32:1d:f4:a5: 9e:89:18:db:59:c9:53:e3:74:d5:13:47:74:b4:4d: 80:0f:8c:a4:b2:05:c4:bf:53:c5:53:48:3b:bf:ae: ec:08:ab:b0:7c:fe:fb:2e:b6:52:de:47:33:63:8f: e2:3a:f8:53:59:15:62:0c:d4:b6:a0:0d:c2:bf:3d: f5:e9:7c:c7:35:ea:03:af:85:63:16:b9:7c:88:0b: 25:a7:64:4c:48:5b:c9:0d:34:5f:c6:af:4b:a4:2f: 5f:bd:01:97:fa:01:6f:71:d2:e9:7c:aa:fb:93:c6: e6:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:79:D2:A6:78:DD:DB:FF:4D:1C:8B:94:ED:40:9E:41:3F:4F:3C:78 X509v3 Authority Key Identifier: keyid:CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:7c:99:78:32:d9:29:f8:c0:3a:17:06:aa:60:8d:03:49:f7: 51:c5:18:0e:75:b9:a5:de:1a:00:c2:b9:91:80:ed:b6:6d:d9: 70:2c:2a:25:fd:fa:b7:d1:2b:eb:c2:3f:5a:03:2b:fc:fe:ef: be:af:5c:86:cd:11:6b:59:52:8b:23:6b:19:57:e6:71:f9:10: f2:1c:70:cc:b8:82:6f:c4:6f:31:12:69:20:5d:fa:5a:96:68: 1a:6b:d6:68:d5:57:b3:a1:3e:4d:a0:77:1b:ef:49:9c:9b:ed: 79:4a:cf:40:88:2d:88:f1:34:5f:41:2f:56:21:c8:eb:af:b8: eb:be:bc:d8:7c:28:65:51:fc:e6:21:4a:95:4a:b0:d5:9f:27: f8:1e:58:35:78:48:24:35:04:b6:26:66:84:3d:40:ab:d9:ba: 12:86:37:9f:0f:28:c1:7f:5a:88:9f:aa:17:c6:81:23:2a:54: 69:42:39:16:7f:11:ac:22:65:40:30:7a:ae:f3:c5:1c:9e:6a: ba:2c:25:d2:9f:a7:83:ed:3a:c1:a9:bc:9a:aa:a4:c2:7d:55: bf:32:ca:ef:5c:54:d0:ae:f6:97:21:35:5f:05:31:d9:4c:6b: 21:bb:e6:e2:1f:cc:21:91:c8:53:a7:b6:1a:4d:2b:06:51:09: 84:99:e3:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZbByuIMG7GQgoKS02csGB6RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjYzQ3OGRkOWNjZDYxNjJmODI0ODhhYzZmYzUwYzIxZDM2 OWYyYTAwHhcNMjUwNTEyMDAwMDIwWhcNMjUwNTEzMDAwMDIwWjAzMTEwLwYDVQQD EyhhNzc5ZDJhNjc4ZGRkYmZmNGQxYzhiOTRlZDQwOWU0MTNmNGYzYzc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6THXC2VDeG6pmMi5UH+N6aBnS1cZ IwLzX0jXGdEUAdMoJUdcywm+X1EI40B9LtIo/pFViu7ZPuzKwNDEAIwxdqAtL3Th +9nd6bsX5KAqcKGWkt9knXjttu4TXAhcV0Fy8/zSMtN9KuLHzmpknzfwG6VfbyNd mDWp+0C7xlEK0K8QPdu+9F7ZnwnBY4rb4EeKqTId9KWeiRjbWclT43TVE0d0tE2A D4yksgXEv1PFU0g7v67sCKuwfP77LrZS3kczY4/iOvhTWRViDNS2oA3Cvz316XzH NeoDr4VjFrl8iAslp2RMSFvJDTRfxq9LpC9fvQGX+gFvcdLpfKr7k8bmgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKd50qZ43dv/TRyLlO1AnkE/Tzx4MB8GA1UdIwQY MBaAFMzEeN2czWFi+CSIrG/FDCHTafKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUt NDI4NTk5ODM5MmQzLzEvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUtNDI4NTk5ODM5MmQz LzEvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqHyZeDLZ KfjAOhcGqmCNA0n3UcUYDnW5pd4aAMK5kYDttm3ZcCwqJf36t9Er68I/WgMr/P7v vq9chs0Ra1lSiyNrGVfmcfkQ8hxwzLiCb8RvMRJpIF36WpZoGmvWaNVXs6E+TaB3 G+9JnJvteUrPQIgtiPE0X0EvViHI66+467682HwoZVH85iFKlUqw1Z8n+B5YNXhI JDUEtiZmhD1Aq9m6EoY3nw8owX9aiJ+qF8aBIypUaUI5Fn8RrCJlQDB6rvPFHJ5q uiwl0p+ng+06wam8mqqkwn1VvzLK71xU0K72lyE1XwUx2UxrIbvm4h/MIZHIU6e2 Gk0rBlEJhJnj5Q== -----END CERTIFICATE-----Generated at Mon May 12 04:16:06 2025 by rpki-client