$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft File: pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft (raw, json) Hash identifier: xB6PMYwQfLwze6nZgVJ+s/3DqPq+1yPAsSvQpBbGdf4= Subject key identifier: E0:05:9C:83:86:3D:3E:06:48:91:F8:20:DF:29:A7:C9:CF:A8:BC:CE Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6 Certificate issuer: /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6 Certificate serial: 0196C5A7B828770854ED7F23EB8E6ED7814B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft Manifest number: 153C Signing time: Mon 12 May 2025 18:00:25 +0000 Manifest this update: Mon 12 May 2025 18:00:25 +0000 Manifest next update: Tue 13 May 2025 18:00:25 +0000 Files and hashes: 1: 2HkBnlanOdUzmWf9Hl_U6GG-UuE.roa (hash: 1Wufa6HiHvWpFQaG3Xl8fTsSYIf48lD7RqqgQlltU14=) 2: 5WrJ_uE8kyfBBg-3rwJlJ6xmp_8.roa (hash: akdPzsnTgH7KtcZBNqPU1osdDy68HWzdp9bPm2mowoQ=) 3: BNK50FDIwLul7LRBqtaICEr9khw.roa (hash: ShN2ExZBctzcXHciSMYpuLHy7sMW4gajHqdp4SmGKwY=) 4: Igsn8_GzxEpyZvyNiTStn1VsWkE.roa (hash: cE10F5ee4Fxy6sxZfixjPiEnOAJr26pMrzQhtmiwXq0=) 5: KkXUwS_4I3ayhd69cP94FHMIKt8.roa (hash: LxyBIOit8HMNZzSJZEvDwuJO4yhxg3p4QU3YOVadKu8=) 6: NkCEdq2ndobm6VmDQa-IZfuAZDY.roa (hash: qOcbuXOI6PfGqV0fypc3sx8Dz5dzMIOt/A/FbNV5s0s=) 7: VO04moXAuIXDmP-FmAZqJ4sbq3E.roa (hash: 1XK9VHT2ZgrrEZxAyHMR/9/4dzcq7U5D/O87NBOUp3A=) 8: YUWzsfvcGYX0_uMBwsz_UtSEvoQ.roa (hash: I2+ZceVVB5u+gR2ocAD4lll8BHqWUKoQ7I2fsyabCm4=) 9: cPX1rLru3EhLpPPW1MnKD3WDdJU.roa (hash: FlPB3PisSixKS60KrufI9cZqpGdplL3+VEjQPrfxXDw=) 10: dP7R-pLAHJv2fxQ8stLMnaNCaIU.roa (hash: ttCIQ6x9upS1QYi3S99yjmOdJpA4nSRRgEVZ9+6A5jo=) 11: gMOwF2mtPRPPpZ-NEq9tmTPMYvM.roa (hash: 9I06ya03N63sQNTiVWhF2hYWAac083jSJyEUOO+Wtd8=) 12: kC3rNl_UHdn-CNb6aCHsLrxS98Q.roa (hash: 1HQePVd4oj57DlYrJg866ZwBO3ttz1hacWXVoenAvOE=) 13: nf8wv6xh5ICDlagRQQtQeDyX7AI.roa (hash: IeriVdC3WPiFlh9qajSZSa5F78gurX6jx9EVck9sDTQ=) 14: pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl (hash: ERiVg74jgyGVcg10lChL80uGPSwHH6Bgehd1dvseyVQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 May 2025 18:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:c5:a7:b8:28:77:08:54:ed:7f:23:eb:8e:6e:d7:81:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6 Validity Not Before: May 12 18:00:25 2025 GMT Not After : May 13 18:00:25 2025 GMT Subject: CN=e0059c83863d3e064891f820df29a7c9cfa8bcce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:dc:3b:6c:3a:b5:b1:31:ea:e8:75:18:d2:a1: e4:95:cb:0e:50:d7:db:99:3a:7e:83:25:b0:e5:13: 8d:f7:b7:51:5e:da:3d:90:1d:e8:0e:c1:a9:80:fa: 0b:be:9a:3f:b0:57:31:21:21:56:c1:91:eb:28:c9: 9f:62:e2:53:ca:4c:3f:9b:3f:ad:77:de:bb:34:2e: fa:91:cc:13:ec:ed:7e:5b:7c:a8:3e:15:b1:15:5a: 7c:b6:f1:55:64:8a:f4:b1:cb:69:e9:06:ac:dc:4f: ab:b1:88:6d:1c:ed:85:42:42:72:3c:97:35:29:51: ee:8d:ab:84:62:08:c7:18:5e:e2:de:10:80:eb:d2: a1:c1:3a:4d:55:f0:7f:b9:88:d5:ae:d8:3f:8c:c7: 85:16:0d:16:ba:e5:65:01:1b:a5:f3:85:2e:95:57: 69:97:79:21:0d:90:2f:6c:85:65:a7:68:3c:60:65: b2:b6:c6:1b:9c:f0:b1:40:f3:fa:ce:e7:5e:e7:bc: 00:e6:f3:59:63:74:12:34:da:e2:bd:f5:d4:00:d4: db:23:7e:23:a8:2c:b3:6b:c5:92:ba:fe:e6:69:dd: d2:2e:70:16:9e:40:a3:5f:23:9b:70:b1:92:80:46: 18:fa:41:58:da:aa:76:45:63:66:74:53:08:62:94: 31:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:05:9C:83:86:3D:3E:06:48:91:F8:20:DF:29:A7:C9:CF:A8:BC:CE X509v3 Authority Key Identifier: keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:e1:e6:02:76:b1:93:04:5e:45:58:b9:20:84:e6:c0:6a:30: 36:d2:61:6f:90:be:cf:c4:bb:70:70:eb:8d:0f:57:5a:8a:9e: 8e:c5:58:11:b5:8b:62:14:e3:09:f1:71:6f:86:c0:c8:f0:a7: 0e:a3:b0:5b:42:17:d8:04:74:40:0d:5b:12:f5:e9:88:6a:d3: c6:87:53:23:df:ae:16:e9:14:93:ef:5d:65:df:67:73:2d:8f: 00:bd:9a:73:83:de:46:38:b2:5d:61:f5:bd:bd:6e:01:46:3d: 00:dd:ba:bf:80:5d:60:fe:5a:52:0d:a9:41:22:b2:34:40:3b: d6:57:cd:32:7b:bc:d5:5b:e9:ba:49:08:3a:68:69:ec:ae:70: e5:00:7e:14:d7:d2:5e:f8:c5:ba:ea:f1:4b:78:d6:89:32:fa: 02:03:0c:23:74:84:4a:93:6d:4f:3b:ab:93:91:7c:4a:94:0e: df:72:a4:ce:6f:70:d7:39:a9:f4:e3:14:9b:68:fb:3f:f6:55: 76:18:c7:b7:77:e9:bc:81:97:ee:94:33:94:a4:5b:4c:2d:af: 37:2e:2b:f0:4e:0a:8f:aa:0c:3f:54:ec:86:df:89:35:62:a2: f6:43:4a:6d:a0:21:ba:95:fa:54:d1:84:1a:c1:bc:83:03:46: c2:84:b0:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZbFp7godwhU7X8j645u14FLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YmNjMTJhZmE0ZjA1NzM5ZjQ1ZjYwNWUyMjFjNjRjM2Mw ZDJlZDYwHhcNMjUwNTEyMTgwMDI1WhcNMjUwNTEzMTgwMDI1WjAzMTEwLwYDVQQD EyhlMDA1OWM4Mzg2M2QzZTA2NDg5MWY4MjBkZjI5YTdjOWNmYThiY2NlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldw7bDq1sTHq6HUY0qHklcsOUNfb mTp+gyWw5RON97dRXto9kB3oDsGpgPoLvpo/sFcxISFWwZHrKMmfYuJTykw/mz+t d967NC76kcwT7O1+W3yoPhWxFVp8tvFVZIr0sctp6Qas3E+rsYhtHO2FQkJyPJc1 KVHujauEYgjHGF7i3hCA69KhwTpNVfB/uYjVrtg/jMeFFg0WuuVlARul84UulVdp l3khDZAvbIVlp2g8YGWytsYbnPCxQPP6zude57wA5vNZY3QSNNrivfXUANTbI34j qCyza8WSuv7mad3SLnAWnkCjXyObcLGSgEYY+kFY2qp2RWNmdFMIYpQx4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOAFnIOGPT4GSJH4IN8pp8nPqLzOMB8GA1UdIwQY MBaAFKS8wSr6TwVzn0X2BeIhxkw8DS7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9iYjE0MGEtMmEyMS00ZjVmLWJkY2Mt ODhiMDE2YmJkNTgxLzEvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9iYjE0MGEtMmEyMS00ZjVmLWJkY2MtODhiMDE2YmJkNTgx LzEvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARuHmAnax kwReRVi5IITmwGowNtJhb5C+z8S7cHDrjQ9XWoqejsVYEbWLYhTjCfFxb4bAyPCn DqOwW0IX2AR0QA1bEvXpiGrTxodTI9+uFukUk+9dZd9ncy2PAL2ac4PeRjiyXWH1 vb1uAUY9AN26v4BdYP5aUg2pQSKyNEA71lfNMnu81VvpukkIOmhp7K5w5QB+FNfS XvjFuurxS3jWiTL6AgMMI3SESpNtTzurk5F8SpQO33Kkzm9w1zmp9OMUm2j7P/ZV dhjHt3fpvIGX7pQzlKRbTC2vNy4r8E4Kj6oMP1Tsht+JNWKi9kNKbaAhupX6VNGE GsG8gwNGwoSw8A== -----END CERTIFICATE-----Generated at Tue May 13 04:34:22 2025 by rpki-client