$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft File: KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft (raw, json) Hash identifier: HpzpWkiDSLXMqoBFUU+ncuRCXwP0ON0BCdnYjqrnmuA= Subject key identifier: 0E:D5:78:EB:94:37:15:D3:7A:6C:56:8A:4F:94:E7:A9:FE:02:F8:A5 Authority key identifier: 29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8 Certificate issuer: /CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8 Certificate serial: 0196BECA4DE67A00E6EAD4180FC7467E8CA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft Manifest number: 0A12 Signing time: Sun 11 May 2025 10:00:51 +0000 Manifest this update: Sun 11 May 2025 10:00:51 +0000 Manifest next update: Mon 12 May 2025 10:00:51 +0000 Files and hashes: 1: 3n7I_kSrxdGXM-Yy8kH4fsc4pN8.roa (hash: s/PREhsDL5iYmJE9h5sCUC+jgqMKpegaWts1GqNWSms=) 2: FV9U3Yv2I7_2992_Tu4mBiIQFlI.roa (hash: /WpBV6VXQYMepV5lfUa4zJ1OtPuJRJ1gNT7mbz//kPY=) 3: IvOVPi4Jk0LAA7IyC_lBmoedUPk.roa (hash: iVbMNdqQVbnDfCnhCbcyzkADBiETtoTlj0kjeIAta6w=) 4: KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl (hash: WfzbSwxOa0hjYRzQ4UrGvNSFQ0R1BUfxItb2pI23CkQ=) 5: T16pm2MQEAUE2FMbSssYLk6CkTk.roa (hash: 7uW7JXvNCvoGIxe5Z6TwqqTVQIqIp/L1A4jFvTPd0mc=) 6: UbPhv_LAVA0rwKgmHrLcoG4Owqg.roa (hash: FNzQh/BeexAfdXsFTyP2FKgRjYQQ55iXr7qpb2vEEQQ=) 7: VJKr8K21Xfen5uk1xCfGFVJrqNs.roa (hash: kXpjzIlwN+Gv44HIvCkq7vJ72G9g6c72ZjdAcBJOo5Y=) 8: _54CIVi2Yw4yngdpfKbMO07oyqo.roa (hash: TM5Ay2NTiDiELYyiOeCmFyJPSSpITIxR/LNxTfFDHDg=) 9: ca6XJ5NiIiIJ1gn26NWoBZY1OOE.roa (hash: m0MfY3W/yHtAcpQIPruy2IhGfS2aQQkvwxrvdJx1dpE=) 10: ozTUlRS2BP8xxCFNOquOdzTJVac.roa (hash: l1UJXUEegLYZKNp2zf9niVjLEqjlu26RHLObHLwCBJI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 May 2025 07:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:be:ca:4d:e6:7a:00:e6:ea:d4:18:0f:c7:46:7e:8c:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8 Validity Not Before: May 11 10:00:51 2025 GMT Not After : May 12 10:00:51 2025 GMT Subject: CN=0ed578eb943715d37a6c568a4f94e7a9fe02f8a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:97:53:76:37:85:08:a5:d8:35:d0:72:5e:34: b3:6b:95:d3:02:b4:0e:09:ba:36:80:52:87:b6:3c: 60:f0:2a:e0:16:2e:21:5c:06:42:9b:1b:66:3f:eb: 30:69:f7:b7:80:68:9a:80:7b:e4:3c:20:cc:42:30: 8d:de:57:3b:d6:71:f8:c7:9f:67:43:29:68:ee:35: 32:25:3b:4e:0f:10:d4:0e:35:1a:ea:29:a1:e4:22: f4:a7:ba:de:48:63:9a:48:54:f8:72:b1:78:86:6b: d3:ca:58:f4:50:58:be:6e:5d:6e:e9:8d:49:0a:d5: 3c:3c:07:f4:01:84:86:d9:d8:2e:a5:6d:2f:83:67: 85:5d:c1:fe:3d:9b:df:76:9d:de:e7:4d:1a:06:21: 8e:d0:a8:72:ff:17:5e:3f:2f:87:78:c4:d5:df:4f: fa:19:1d:e6:1b:93:92:45:86:e8:d2:a1:c2:c0:05: 6e:db:7f:df:ae:81:46:7b:0c:6c:bf:19:0c:a0:9a: 1d:43:37:93:ef:44:a8:3c:69:a1:36:f4:af:db:d4: 46:29:65:42:e5:96:e9:dd:2f:c4:b7:77:4f:55:dd: f4:44:a6:a6:36:58:9f:b8:37:69:b4:c5:ef:63:31: 0e:29:d5:2e:2d:ed:f0:cd:f0:41:67:9b:2e:66:0d: 7a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:D5:78:EB:94:37:15:D3:7A:6C:56:8A:4F:94:E7:A9:FE:02:F8:A5 X509v3 Authority Key Identifier: keyid:29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:b6:ad:7b:5d:d1:57:33:51:af:2e:99:83:84:1c:5b:8f:18: 5e:d3:62:e4:b5:f9:f2:2d:bd:d9:ce:2b:bc:98:b2:3f:77:48: e9:ee:24:5e:46:ce:6b:bd:ca:50:d7:31:53:0f:2c:cf:9f:a9: db:2c:dc:7b:7c:95:6f:a9:89:8f:d8:99:1b:b5:60:a4:b2:91: 12:ae:e4:eb:f1:03:69:99:1e:ee:3c:7a:67:c9:8e:95:26:07: f1:f6:b8:f6:78:dd:0f:eb:70:7d:4e:28:f7:eb:cb:69:35:a4: 58:5d:24:80:bb:14:03:86:91:aa:3e:18:21:a7:1e:0a:24:55: c2:37:cc:31:f0:8a:56:8b:f0:58:58:ea:a3:f8:4e:6e:5b:12: 32:5f:63:75:77:35:de:9b:42:cb:35:bb:9c:16:29:2b:93:54: f6:62:a8:d4:13:e2:18:1e:69:17:3a:ef:07:a5:51:ce:2c:7e: 1c:56:b4:1b:6f:cf:0c:4a:3e:89:cf:45:05:2c:e7:6f:cb:82: 45:20:db:3f:9e:63:79:ee:48:6d:92:7b:79:e7:8e:93:ab:ef: 72:35:84:7d:e3:e8:4f:01:5e:2d:51:f4:a0:9a:3d:2f:30:7d: fe:4f:af:68:55:ed:d7:50:f7:7b:58:dc:84:e2:a7:87:dc:da: 30:0a:0a:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa+yk3megDm6tQYD8dGfoypMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YTk5NjRlMGNkMzVmYjM2NzU3ZTU2NTNmZmE3NjI2YWM1 ZGVlZTgwHhcNMjUwNTExMTAwMDUxWhcNMjUwNTEyMTAwMDUxWjAzMTEwLwYDVQQD EygwZWQ1NzhlYjk0MzcxNWQzN2E2YzU2OGE0Zjk0ZTdhOWZlMDJmOGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5dTdjeFCKXYNdByXjSza5XTArQO Cbo2gFKHtjxg8CrgFi4hXAZCmxtmP+swafe3gGiagHvkPCDMQjCN3lc71nH4x59n Qylo7jUyJTtODxDUDjUa6imh5CL0p7reSGOaSFT4crF4hmvTylj0UFi+bl1u6Y1J CtU8PAf0AYSG2dgupW0vg2eFXcH+PZvfdp3e500aBiGO0Khy/xdePy+HeMTV30/6 GR3mG5OSRYbo0qHCwAVu23/froFGewxsvxkMoJodQzeT70SoPGmhNvSv29RGKWVC 5Zbp3S/Et3dPVd30RKamNlifuDdptMXvYzEOKdUuLe3wzfBBZ5suZg16fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA7VeOuUNxXTemxWik+U56n+AvilMB8GA1UdIwQY MBaAFCmplk4M01+zZ1flZT/6diasXe7oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2FtV1RnelRYN05uVi1WbFBfcDJKcXhkN3VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8yMTQwNjMtZjg4Zi00OTU4LWFlNTIt ZDliNTMzZjdmYmMzLzEvS2FtV1RnelRYN05uVi1WbFBfcDJKcXhkN3VnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy8yMTQwNjMtZjg4Zi00OTU4LWFlNTItZDliNTMzZjdmYmMz LzEvS2FtV1RnelRYN05uVi1WbFBfcDJKcXhkN3VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWbate13R VzNRry6Zg4QcW48YXtNi5LX58i292c4rvJiyP3dI6e4kXkbOa73KUNcxUw8sz5+p 2yzce3yVb6mJj9iZG7VgpLKREq7k6/EDaZke7jx6Z8mOlSYH8fa49njdD+twfU4o 9+vLaTWkWF0kgLsUA4aRqj4YIaceCiRVwjfMMfCKVovwWFjqo/hOblsSMl9jdXc1 3ptCyzW7nBYpK5NU9mKo1BPiGB5pFzrvB6VRzix+HFa0G2/PDEo+ic9FBSznb8uC RSDbP55jee5IbZJ7eeeOk6vvcjWEfePoTwFeLVH0oJo9LzB9/k+vaFXt11D3e1jc hOKnh9zaMAoKmA== -----END CERTIFICATE-----Generated at Sun May 11 16:10:03 2025 by rpki-client