$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft File: xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft (raw, json) Hash identifier: kl/MkAIL+ps8tZaQn5neykm4BAlCc4tDUVC4s+H1eII= Subject key identifier: 95:98:52:22:F6:6B:07:A1:A0:5E:5C:5B:3E:4D:EF:61:2A:31:2B:99 Authority key identifier: C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8 Certificate issuer: /CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8 Certificate serial: 0196C34C44418504A7634DC97513309FBF7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft Manifest number: 1546 Signing time: Mon 12 May 2025 07:01:17 +0000 Manifest this update: Mon 12 May 2025 07:01:17 +0000 Manifest next update: Tue 13 May 2025 07:01:17 +0000 Files and hashes: 1: 1d9PCrI-4OIWZHlndWAF-BFZeRg.roa (hash: Iw4tosd5c4tKjF6tKkdj+Nm6L4yubj6pDN7RhIdr5OM=) 2: 9irhpoo7t3RuQsofnh453Wz9yzc.roa (hash: PhvRYsh7H1rsPmbcRRJi8HgMHZoVZsvvG8rw54V1xv8=) 3: QlG1TVRz55diqUdGl7g_uO4xh_Q.roa (hash: fgvqjVsU5zRnz0bSGyWJaFmUvSDnHcvgLRxyVqmSVT4=) 4: ZyvSvqBO_CRtrjVV5g_m38QqdF0.roa (hash: EMjT9dIsrbauUL5Ml+fcJBjE3Hsiqb5K2tYe1FIy+Zk=) 5: nnciRjVheF08s398UKSonGItpsk.roa (hash: R1OwPDHsbFUiJTJpwPW1Uer2AhB7tNd3rerNZf5joWI=) 6: pzeazRaM8Z6SjrjO6Q79mNPUlRs.roa (hash: /9lKkXVgAMejZaK+X1dNcf57k6lh360Swbxh+XCM3Ik=) 7: shBa9JrmFrbHIJ50XFqnyAIX03Q.roa (hash: ZX0cowj/X8/UKH2s85v3mEfUGDpRbJzNCB3///lxrIs=) 8: tJb8Ts4XgvLq7IFd612PdAoSex8.roa (hash: /2oqwW8TIewEulnC/YwP+6MDX06JT0RuhBb946Sy6pg=) 9: xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl (hash: HB0ftsf8zY2kAPdyg5FYmGJjsI1n3ENKRevMcoKl6mc=) 10: zag9EMVMQmmPCVwwU3_0aOJuzic.roa (hash: ffeNrZA6EtrT2ro+QuAB6ElVQs7TfooiMECDOqyyyqs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 May 2025 01:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:c3:4c:44:41:85:04:a7:63:4d:c9:75:13:30:9f:bf:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8 Validity Not Before: May 12 07:01:17 2025 GMT Not After : May 13 07:01:17 2025 GMT Subject: CN=95985222f66b07a1a05e5c5b3e4def612a312b99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:cf:4b:e6:ad:87:8d:3e:63:04:a8:df:a6:00: 21:9c:72:95:3c:a0:b0:e8:4d:3f:3e:16:64:47:9b: 51:4d:da:d8:0e:e6:2c:2b:59:21:d6:1d:23:c2:f2: 17:39:eb:15:df:44:b2:b2:e5:63:f3:24:c4:05:e4: 75:3b:7f:8d:ca:76:44:be:5c:57:71:52:51:89:5c: 47:9c:22:75:ab:0d:fe:d3:a6:45:88:ad:a7:c1:1b: ec:f5:10:b3:54:b1:d3:bf:bc:9c:88:90:88:96:10: a0:be:a4:21:5e:a8:d1:09:ac:e5:a5:11:0f:0c:21: b3:7f:02:9e:b3:0b:7d:07:aa:16:0d:ea:d0:db:04: cb:11:b8:2f:67:8b:5c:52:ba:6e:3c:9f:29:26:e6: d6:9d:dd:f1:2c:e5:d0:d9:11:1b:37:b0:79:53:ce: ef:83:63:36:8e:cc:18:f5:e6:de:ec:07:1c:a5:3c: 99:c5:b9:10:32:fa:00:d5:d6:64:b4:cb:e2:46:c8: d2:c2:30:87:da:39:2b:9c:0e:ec:6e:93:45:fa:db: 85:c1:7d:18:27:09:c6:8a:5d:db:94:66:f0:2c:5e: 7a:dd:1c:71:3c:f7:11:fe:23:f8:6c:00:a7:12:13: 4d:cc:47:28:0f:c0:62:0d:17:ef:a2:26:8d:69:f7: af:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:98:52:22:F6:6B:07:A1:A0:5E:5C:5B:3E:4D:EF:61:2A:31:2B:99 X509v3 Authority Key Identifier: keyid:C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:cb:58:5c:81:cf:7d:90:47:63:9b:5d:39:5e:7e:39:99:db: 95:cb:c1:9e:21:92:13:5e:52:b7:01:cf:5f:b9:4d:1f:2e:52: b5:09:c7:97:af:b2:b6:70:12:9c:25:fb:a6:91:f5:68:b8:cd: 60:b5:22:dd:9a:d1:27:7f:0b:80:a7:5a:00:3d:6b:a5:fe:2d: 80:e2:35:d2:bd:58:0b:cc:31:79:25:cb:ff:33:be:93:73:e6: 61:cf:20:a2:85:b3:89:3e:e1:45:34:ad:62:da:5c:83:61:5d: 22:07:3b:f7:74:2b:ed:94:4d:22:64:6e:a2:3e:d0:64:c5:ed: ff:48:53:8d:07:be:f1:b1:5b:5d:2d:f8:24:5c:bf:05:ef:bd: 04:d9:15:ab:2c:c0:02:42:ea:61:cf:ce:cc:85:27:c9:e5:8a: b5:0d:74:42:6f:ac:f6:3a:42:53:f0:d7:31:82:ef:80:8d:81: d5:7e:0c:e8:68:42:7c:f7:ce:d3:8d:82:07:eb:f6:a5:1a:5d: 1f:27:a8:8c:f0:4c:8e:b5:df:3d:aa:b3:46:3c:c9:b0:f9:8e: 15:e4:d0:be:0a:a4:f8:db:00:2d:7d:3e:d1:b8:5e:3e:e8:86: b7:99:3a:0f:65:9a:e1:0e:7f:5b:18:dc:1a:e9:78:d8:20:51: 18:ad:95:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZbDTERBhQSnY03JdRMwn796MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NWM2ODNjYjFlYjljMGY0OWI5NjdlM2JkOWI4Yjg0Y2Yw OTliYjgwHhcNMjUwNTEyMDcwMTE3WhcNMjUwNTEzMDcwMTE3WjAzMTEwLwYDVQQD Eyg5NTk4NTIyMmY2NmIwN2ExYTA1ZTVjNWIzZTRkZWY2MTJhMzEyYjk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAns9L5q2HjT5jBKjfpgAhnHKVPKCw 6E0/PhZkR5tRTdrYDuYsK1kh1h0jwvIXOesV30SysuVj8yTEBeR1O3+NynZEvlxX cVJRiVxHnCJ1qw3+06ZFiK2nwRvs9RCzVLHTv7yciJCIlhCgvqQhXqjRCazlpREP DCGzfwKeswt9B6oWDerQ2wTLEbgvZ4tcUrpuPJ8pJubWnd3xLOXQ2REbN7B5U87v g2M2jswY9ebe7AccpTyZxbkQMvoA1dZktMviRsjSwjCH2jkrnA7sbpNF+tuFwX0Y JwnGil3blGbwLF563RxxPPcR/iP4bACnEhNNzEcoD8BiDRfvoiaNafevbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJWYUiL2awehoF5cWz5N72EqMSuZMB8GA1UdIwQY MBaAFMRcaDyx65wPSbln472bi4TPCZu4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC80MzlhMTAtNjBjNC00YzI4LTkxYmYt ODhkMmRmMTBkMTViLzEveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC80MzlhMTAtNjBjNC00YzI4LTkxYmYtODhkMmRmMTBkMTVi LzEveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZMtYXIHP fZBHY5tdOV5+OZnblcvBniGSE15StwHPX7lNHy5StQnHl6+ytnASnCX7ppH1aLjN YLUi3ZrRJ38LgKdaAD1rpf4tgOI10r1YC8wxeSXL/zO+k3PmYc8gooWziT7hRTSt Ytpcg2FdIgc793Qr7ZRNImRuoj7QZMXt/0hTjQe+8bFbXS34JFy/Be+9BNkVqyzA AkLqYc/OzIUnyeWKtQ10Qm+s9jpCU/DXMYLvgI2B1X4M6GhCfPfO042CB+v2pRpd HyeojPBMjrXfPaqzRjzJsPmOFeTQvgqk+NsALX0+0bhePuiGt5k6D2Wa4Q5/Wxjc Gul42CBRGK2VOg== -----END CERTIFICATE-----Generated at Mon May 12 10:03:43 2025 by rpki-client