$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft File: _2mO6y5J_LX5xlqZhXrynOBmQdk.mft (raw, json) Hash identifier: kU8yjEk5blXhukpA6+IxGm3dWPuqLo3ZgLqi8w2ATDo= Subject key identifier: 59:9E:E1:AC:E5:C4:3F:17:45:A9:55:56:85:52:15:84:99:54:EF:9C Authority key identifier: FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9 Certificate issuer: /CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9 Certificate serial: 0196B2C59452251336652D937AABF638E743 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft Manifest number: 1539 Signing time: Fri 09 May 2025 02:00:15 +0000 Manifest this update: Fri 09 May 2025 02:00:15 +0000 Manifest next update: Sat 10 May 2025 02:00:15 +0000 Files and hashes: 1: 0nspkNZBD4AF3c6BuZHawbNEn4s.roa (hash: uIJdsMvT5D3zL8bAjl80cE2Pwz5BnxnpyFyZ11QSq50=) 2: 54-UEvGfxV4WPcy4WxLxIFxxE-U.roa (hash: ojna0RnGjI7OjDPWs+roB1Amf6WKyl5pMZi5IPEPWP8=) 3: 5Tf-mqxbzy7qofAM2dNl7l1t3mU.roa (hash: 6mVr252OaOJiHsmGk/+j0aXnhIUGcpjMKQ+02iLXgcA=) 4: HIpztZT__B_f9n2gN6auamR5pIU.roa (hash: rJY52okWB1TeezbKU/iuTbv7tjIWb1W5p6bbeWIcdzo=) 5: LuyH1oX8EXWypVZ7iAaDpvRYVVc.roa (hash: PwqXxZGK4PUOy9TXRGdRnGJ0Q9f2SZmolPNVfAk0WgM=) 6: NkdsfBqVz48X5H2Y1WQJSu8vlt4.roa (hash: tuiwHFcQQ4SB/tCeR0sJ8nBN9XREzDRoO1cXDj6kEqo=) 7: UjPxDMGW7lYqCuTCh7JHOA6hizY.roa (hash: ANkRdXMj6bkHEGkvb/XWLCpMoxX6nYg0dbetuBTbz8U=) 8: _2mO6y5J_LX5xlqZhXrynOBmQdk.crl (hash: FTbP8EP4DHfn481EPfmqkzIcHjJQc55NZH/g7Ew3X8c=) 9: jqfbqOe3Dnj2fXOhZ9LOHypCFAI.roa (hash: /x0Hcf4qFuhf8+J5QzDuB3C52+I2nDMc1dbR/JkR1Cw=) 10: meQ5SBMnqJBkFHe-JOcEGhCsKFY.roa (hash: TMc5toGudrJJLzHO6dJLOGc8MvIeTEaZ3Nzvom9Ftsw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 May 2025 01:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:b2:c5:94:52:25:13:36:65:2d:93:7a:ab:f6:38:e7:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9 Validity Not Before: May 9 02:00:15 2025 GMT Not After : May 10 02:00:15 2025 GMT Subject: CN=599ee1ace5c43f1745a95556855215849954ef9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:88:e0:b5:5d:de:12:32:4f:b9:7d:78:d6:d2: fe:1c:af:7b:8d:54:d8:da:d9:0e:77:0e:9b:06:85: 00:0a:00:d8:6b:78:33:6b:aa:28:2f:91:0f:d0:4b: 52:5c:0b:60:65:e0:cf:3d:57:4d:03:4e:3f:b6:af: 7b:af:45:34:ba:ce:e4:44:f7:9c:b0:1f:3d:af:06: 64:30:3e:2e:85:de:d1:6c:ad:67:8f:2b:64:63:4f: b0:5f:02:d8:ea:4d:96:2a:48:1a:d9:d0:67:f9:7b: c5:55:8f:08:08:f9:e4:c2:a8:c0:41:b0:51:47:bb: 36:0b:cb:67:3c:3d:c2:c0:0a:40:94:19:3b:fc:10: 63:98:6d:a4:f3:5b:7e:3a:49:6f:36:94:fe:b6:11: a0:11:37:ac:d7:63:a0:45:fb:95:0f:9b:0b:ef:21: 77:6f:53:7e:33:e8:2b:60:a8:34:fc:34:d9:0f:38: 7c:49:af:42:5f:1e:e2:08:d2:67:b8:7a:f8:cb:12: 56:1a:7c:b3:68:da:e2:82:12:7f:8a:5e:77:c7:28: 24:64:ff:16:ff:9c:f7:65:cf:55:11:f6:4d:72:de: 08:ed:df:52:9f:86:92:fe:71:50:80:ac:2f:3d:af: 4a:ce:26:87:ad:a7:4a:a2:87:5e:ec:f5:c7:4a:76: 10:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:9E:E1:AC:E5:C4:3F:17:45:A9:55:56:85:52:15:84:99:54:EF:9C X509v3 Authority Key Identifier: keyid:FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:4e:f2:19:7a:37:dc:1e:bc:39:35:d4:37:bf:b1:b0:29:e0: a2:0a:60:28:7e:b2:9a:99:83:7c:5e:8f:06:3a:c5:77:1f:44: 27:a2:ed:80:42:4f:97:68:89:42:61:0c:76:31:9c:56:65:a1: 70:50:0e:a3:83:67:bf:6c:39:79:29:e5:d6:57:e6:d6:35:d8: 77:fe:ab:98:94:2e:72:a5:1c:68:a2:20:9f:5c:c5:df:99:f7: 46:f9:52:ae:3f:50:a2:5a:60:e9:1d:b4:f7:64:af:4f:42:6c: ac:49:55:fd:19:74:4f:f1:96:6b:45:35:7d:46:58:bd:85:6e: ca:db:f0:36:5a:ff:d6:43:6a:8e:db:39:48:62:c4:b3:57:44: cf:21:48:1b:03:96:e1:fc:c5:f7:78:a9:86:77:d1:b3:78:4b: 88:6f:0e:c4:59:98:78:95:54:a6:b0:01:3e:03:bf:c6:ca:cd: 42:54:7f:7a:30:bd:db:e6:a9:46:61:3c:9d:31:26:f5:74:d9: 26:93:5f:2d:1a:4f:0f:91:7f:fd:07:84:1a:20:e6:fc:5a:78: be:e2:90:7d:9f:3e:5d:5e:ff:8e:f4:f2:eb:df:5f:4c:7e:4c: 7d:65:42:46:56:ba:47:7d:72:5c:7e:24:bc:92:69:0c:d1:c7: 92:c9:eb:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZayxZRSJRM2ZS2Teqv2OOdDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNjk4ZWViMmU0OWZjYjVmOWM2NWE5OTg1N2FmMjljZTA2 NjQxZDkwHhcNMjUwNTA5MDIwMDE1WhcNMjUwNTEwMDIwMDE1WjAzMTEwLwYDVQQD Eyg1OTllZTFhY2U1YzQzZjE3NDVhOTU1NTY4NTUyMTU4NDk5NTRlZjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIjgtV3eEjJPuX141tL+HK97jVTY 2tkOdw6bBoUACgDYa3gza6ooL5EP0EtSXAtgZeDPPVdNA04/tq97r0U0us7kRPec sB89rwZkMD4uhd7RbK1njytkY0+wXwLY6k2WKkga2dBn+XvFVY8ICPnkwqjAQbBR R7s2C8tnPD3CwApAlBk7/BBjmG2k81t+OklvNpT+thGgETes12OgRfuVD5sL7yF3 b1N+M+grYKg0/DTZDzh8Sa9CXx7iCNJnuHr4yxJWGnyzaNrighJ/il53xygkZP8W /5z3Zc9VEfZNct4I7d9Sn4aS/nFQgKwvPa9KziaHradKoode7PXHSnYQjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFme4azlxD8XRalVVoVSFYSZVO+cMB8GA1UdIwQY MBaAFP9pjusuSfy1+cZamYV68pzgZkHZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4Mzkt NTdjZDY4ZDljYjRlLzEvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4MzktNTdjZDY4ZDljYjRl LzEvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaU7yGXo3 3B68OTXUN7+xsCngogpgKH6ympmDfF6PBjrFdx9EJ6LtgEJPl2iJQmEMdjGcVmWh cFAOo4Nnv2w5eSnl1lfm1jXYd/6rmJQucqUcaKIgn1zF35n3RvlSrj9Qolpg6R20 92SvT0JsrElV/Rl0T/GWa0U1fUZYvYVuytvwNlr/1kNqjts5SGLEs1dEzyFIGwOW 4fzF93iphnfRs3hLiG8OxFmYeJVUprABPgO/xsrNQlR/ejC92+apRmE8nTEm9XTZ JpNfLRpPD5F//QeEGiDm/Fp4vuKQfZ8+XV7/jvTy699fTH5MfWVCRla6R31yXH4k vJJpDNHHksnrrA== -----END CERTIFICATE-----Generated at Fri May 9 10:20:45 2025 by rpki-client