$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft File: XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft (raw, json) Hash identifier: MOl/rsuo5M8JOl5lta8Kb6Kh5HEyqJfpVuwWIzTpE0g= Subject key identifier: 70:DD:B8:B2:FB:11:00:26:65:8C:D0:C1:7B:99:6B:E4:AA:D5:3D:05 Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61 Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361 Certificate serial: 0196B36A9FC56A874D5A5E48BED3F7666871 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft Manifest number: 0CA9 Signing time: Fri 09 May 2025 05:00:31 +0000 Manifest this update: Fri 09 May 2025 05:00:31 +0000 Manifest next update: Sat 10 May 2025 05:00:31 +0000 Files and hashes: 1: 2eSn5y27ldEmC0Gd_54Bd8_I9JY.roa (hash: 1Gj1gucEHIQe5/suhFpq18I0KHQmpiCbAT8OEer2XJY=) 2: 4zijRX3qFSJj7GUPzn2tNtVGEqU.roa (hash: G11+LD/eIulIMC02GT0rOyORwsGurEkPCQfgsNssMY4=) 3: 6wQs6-0w-fWJLJ0hVPQK6QCCGkY.roa (hash: rb19DmwWMRxoIZtq3fo28eOFDkPmJthIUG0I+8TP2AM=) 4: AuOqSBFQao1XdeScaH_pzc2oidA.roa (hash: KCgCD5VjXUJcoI9zPUC+HgqfHioM6+FN7vkkVzOcdHA=) 5: BOI1awQxdXwnD-j71lBbNJhD_Lc.roa (hash: RDggKzi5X4GzB5qxGRZl8jlJFnbQqP70OHVTn4IeWCs=) 6: BjsuLgGQNhMD4InbUJY9wvy3euM.roa (hash: HQnpHX6hfakLbQoTyAQapgMmds3GLNhUneOg7VrLXNA=) 7: EliH32nM72jk5o8srlCb9Qn8SIg.roa (hash: Rtb7C9DazwCLvPY2asNPyAzR9ypSlDn7TK9tDgFH01c=) 8: JDi96XtBmi1E-eUX4bd0z2rNMAQ.roa (hash: g67c4gAiqig1Iyele/QFecJvszyajLNwbzJcH0zM3As=) 9: N1kPa63Y6FcbIG4ZFA6vBaVC4N4.roa (hash: ADzkv6QiLNzt6CZ3/NGstYTNCCFuWgTGZZVgBsDhSg0=) 10: XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl (hash: eEsGpYi1gawjVYpVSTGWN54AcYUygHXuKmZxav4lWqM=) 11: ZbwUWjs9o76pI3kjzXXqiUmfJWs.roa (hash: z8UzCAWnCWtYZdQcdAh+iDVTaruSoFX/I30w0uTUKuY=) 12: c5Kgx9M_pZoyC-FuKyzrc0aGPI4.roa (hash: qo5ZvreioWLB6l4kqymHWyEjF1uBdQswYAIK4BkA1Q8=) 13: jurUKjOgqPlKTPlS6z_hV6r5Fec.roa (hash: mK/2mFnvM6PHbw/5fnMHl0N0FSkbsHgl6zx5ITdWUqk=) 14: n_rP7jWTS4Z479ne6IAs1NmLMNk.roa (hash: tJkrT8kWq9nKGSWE25BO34wrEprXE5qoElSyxJPmjJc=) 15: ya1Qvlz0z2yIW3rWpmZNZE0Mahw.roa (hash: pUh8tSNEyZT8qdNgsK70xOXvpKS7aoBqKqdEgq1Za3o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 May 2025 00:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:b3:6a:9f:c5:6a:87:4d:5a:5e:48:be:d3:f7:66:68:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361 Validity Not Before: May 9 05:00:31 2025 GMT Not After : May 10 05:00:31 2025 GMT Subject: CN=70ddb8b2fb110026658cd0c17b996be4aad53d05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:0c:58:6c:33:87:3a:c7:b8:e3:e8:ea:30:39: bf:ea:22:41:cb:cf:21:46:cb:fa:84:3d:87:13:2c: 99:4a:ce:0d:f7:49:fe:bd:bf:bc:20:68:09:eb:86: 18:e0:d7:5b:0d:7a:16:95:df:1c:21:63:50:2a:92: e4:96:a7:fb:18:b1:9e:05:7e:ef:b4:74:6e:49:1d: 82:16:4a:e2:94:c8:eb:16:3d:ea:24:9e:12:c9:14: 47:3c:c8:5d:b8:25:d5:95:0f:8f:10:1d:7d:0f:f0: 99:20:45:f5:15:af:fc:b2:61:26:04:a1:61:6a:e0: 90:0a:6e:10:94:17:0f:f1:f8:da:46:53:70:3a:09: 45:8e:b9:69:04:39:ba:11:fb:23:c4:e0:6c:ef:ff: fd:c0:d1:b3:14:26:25:1d:13:50:84:d9:f7:46:ca: aa:af:b2:ac:03:60:d4:24:5d:91:d7:25:d7:e6:d6: 34:0b:fb:52:2b:82:a2:da:5f:ad:8e:91:75:1b:74: 05:ff:cf:b0:53:d2:53:09:f5:a8:69:63:02:ad:82: ee:39:57:17:c3:f8:15:10:ff:68:54:3a:ed:0c:e2: 0f:79:c4:58:20:dc:81:e9:3a:01:0f:a8:20:03:63: 86:d9:da:72:6d:04:16:b5:81:a4:6e:28:4e:a9:4d: 35:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:DD:B8:B2:FB:11:00:26:65:8C:D0:C1:7B:99:6B:E4:AA:D5:3D:05 X509v3 Authority Key Identifier: keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:29:4d:86:66:18:d7:4e:9a:89:e4:2d:0b:d6:28:a0:0c:77: 7d:ad:1c:8e:80:05:e0:ab:95:b4:6f:6c:a0:e8:6b:2e:1e:91: ac:fa:28:7a:2f:2c:01:56:6f:ed:0c:5e:99:99:bf:4f:9b:ad: 27:3b:8e:d3:05:51:b4:68:f7:16:54:96:ea:bf:7b:f0:6e:d9: bf:77:42:57:04:bb:dd:e3:b9:b5:be:9f:ca:89:7e:5e:26:e8: 29:26:7d:ac:5a:22:44:b7:c1:2e:8a:f1:14:45:ec:49:06:97: e7:00:93:a5:a2:f2:93:6b:4b:e1:2e:fa:b8:40:e5:65:c5:a5: 48:97:35:fc:71:db:c1:9b:4b:4e:1a:8c:bd:ff:52:3a:10:cf: ac:f3:7b:b4:e1:8f:9f:eb:4a:12:9d:9a:fa:72:9a:64:59:07: ce:e4:1f:29:69:a6:69:af:12:ad:17:ec:21:ea:ad:7b:43:25: c9:8b:cc:96:c6:e9:15:50:db:70:32:3d:b5:c5:a1:b3:d7:4f: ae:40:5f:8f:b3:b9:57:b4:5b:f8:bd:e2:11:f5:92:09:3f:94: 5b:40:63:67:47:f2:bd:7b:6e:b9:ff:f0:9a:75:81:83:ab:7e: 45:4b:f5:2e:11:14:17:9c:0d:fe:e9:51:85:8c:8a:16:51:c7: 39:46:d2:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZazap/FaodNWl5IvtP3ZmhxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjODkyYWVkMzgzM2U2MTAwZjVlMGNmMTIyNzFmZDgwYjc1 NWMzNjEwHhcNMjUwNTA5MDUwMDMxWhcNMjUwNTEwMDUwMDMxWjAzMTEwLwYDVQQD Eyg3MGRkYjhiMmZiMTEwMDI2NjU4Y2QwYzE3Yjk5NmJlNGFhZDUzZDA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgxYbDOHOse44+jqMDm/6iJBy88h Rsv6hD2HEyyZSs4N90n+vb+8IGgJ64YY4NdbDXoWld8cIWNQKpLklqf7GLGeBX7v tHRuSR2CFkrilMjrFj3qJJ4SyRRHPMhduCXVlQ+PEB19D/CZIEX1Fa/8smEmBKFh auCQCm4QlBcP8fjaRlNwOglFjrlpBDm6EfsjxOBs7//9wNGzFCYlHRNQhNn3Rsqq r7KsA2DUJF2R1yXX5tY0C/tSK4Ki2l+tjpF1G3QF/8+wU9JTCfWoaWMCrYLuOVcX w/gVEP9oVDrtDOIPecRYINyB6ToBD6ggA2OG2dpybQQWtYGkbihOqU01xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHDduLL7EQAmZYzQwXuZa+Sq1T0FMB8GA1UdIwQY MBaAFFyJKu04M+YQD14M8SJx/YC3VcNhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWElrcTdUZ3o1aEFQWGd6eEluSDlnTGRWdzJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi84NmZiNDYtZDcxMi00NjAyLTljY2Ut M2FhN2RhYTlkM2VjLzEvWElrcTdUZ3o1aEFQWGd6eEluSDlnTGRWdzJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi84NmZiNDYtZDcxMi00NjAyLTljY2UtM2FhN2RhYTlkM2Vj LzEvWElrcTdUZ3o1aEFQWGd6eEluSDlnTGRWdzJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnylNhmYY 106aieQtC9YooAx3fa0cjoAF4KuVtG9soOhrLh6RrPooei8sAVZv7QxemZm/T5ut JzuO0wVRtGj3FlSW6r978G7Zv3dCVwS73eO5tb6fyol+XiboKSZ9rFoiRLfBLorx FEXsSQaX5wCTpaLyk2tL4S76uEDlZcWlSJc1/HHbwZtLThqMvf9SOhDPrPN7tOGP n+tKEp2a+nKaZFkHzuQfKWmmaa8SrRfsIeqte0MlyYvMlsbpFVDbcDI9tcWhs9dP rkBfj7O5V7Rb+L3iEfWSCT+UW0BjZ0fyvXtuuf/wmnWBg6t+RUv1LhEUF5wN/ulR hYyKFlHHOUbS7w== -----END CERTIFICATE-----Generated at Fri May 9 07:29:24 2025 by rpki-client