$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft File: nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft (raw, json) Hash identifier: vr+956oOCMQGhv4dNFcGcjLWd7Gc0kwuKjTQFUr830Y= Subject key identifier: E0:AA:6A:E5:AC:3B:CE:D2:3D:E1:5D:9B:F7:C6:56:5E:F5:B3:92:13 Authority key identifier: 9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31 Certificate issuer: /CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731 Certificate serial: 0196B220CE2DCB73C4B6C622A95980C0D863 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft Manifest number: 1532 Signing time: Thu 08 May 2025 23:00:16 +0000 Manifest this update: Thu 08 May 2025 23:00:16 +0000 Manifest next update: Fri 09 May 2025 23:00:16 +0000 Files and hashes: 1: 3vl8XIfuhRt73vGy6IwhrWPuLQI.roa (hash: q3Fh75KrQyoQfVHvtuNwmD855fGW6oB7xId9MSHUyb4=) 2: 6wuhUyQ6B8hcKFtpQPLF4a8xiLM.roa (hash: PVP/CIAq5vbBthYH2NgEEDe22Dw5jd7urf5cJiuVvXo=) 3: 9NNSEhajneEgbt66V0EkEE6XolA.roa (hash: xTgVQs+MsZfir4Ub3DiVbK1ClBqkcXuh9whyhrkEvAM=) 4: BzRg7cqbGCxPjaoZhAl0Moquf1Y.roa (hash: 6kEaZouendLfYXdknvUfHV20sm02LURoxyHpm7Wn7AY=) 5: G-7uTcKf4R76KSJdYf98itHFuPU.roa (hash: uB9gNVUlSjqGsS16y0z5ke/O0agEGAvuljoiA6PJrUM=) 6: QgQPTUqWSoJLC8pH1ZTpV9J6Spg.roa (hash: roAeP2l3vRUpAFpkZSsf9wX3WRLL0BI8ikMQ5kYqDxQ=) 7: ftQQpBrk0ZFia4n99q7-wX-5E0M.roa (hash: U0GhDpZiZ5saXJRfz3p+tKxwcbveFdHD/WbcCpSo+CQ=) 8: mUKuky3l-ZY5p-RPO9s2pPEyk78.roa (hash: ti7kzq8iHsvI0iGcqQO/PpqkoDoJf7orqrrfuhBfEKg=) 9: nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl (hash: ihp3yArDqOzta6zGFWN/0ETIxkNNo6mYcuuP3oYkGEo=) 10: pp90XH9ku5igKr_7gjm59WVXVs4.roa (hash: bfssuNaaIGlZ7LKFXdiYHHy+DIw/jcyEOsfVzSQEBMQ=) 11: qFB-AfrzECXh6GN5dVSZvb0x6SI.roa (hash: GzIs503Dc0bsL2WCHQKf2MOheJQNWlvUYNrT8tj73vc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 May 2025 23:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:b2:20:ce:2d:cb:73:c4:b6:c6:22:a9:59:80:c0:d8:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731 Validity Not Before: May 8 23:00:16 2025 GMT Not After : May 9 23:00:16 2025 GMT Subject: CN=e0aa6ae5ac3bced23de15d9bf7c6565ef5b39213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f2:62:4d:40:30:fe:f7:79:e3:8b:9b:c4:80: 14:16:84:80:d9:6a:d0:73:c1:08:95:f5:d7:be:32: ca:2f:a7:da:53:70:34:b8:36:a0:c6:10:2a:ea:26: 43:44:cc:4c:54:d6:5b:c1:03:4b:f7:d3:77:a3:93: c9:95:33:e3:c6:9b:c1:a1:3f:44:14:48:34:cd:09: f3:83:65:87:3e:08:a0:94:3d:bf:c2:e7:ee:ad:c9: 8a:8c:a7:f8:32:44:dc:e0:24:47:b3:cb:2f:74:8d: f7:34:aa:11:2f:e4:e0:84:82:31:05:0c:fd:60:d9: d3:88:6b:06:22:05:c1:b2:28:0f:fe:b9:1e:de:6c: 1d:b9:cf:bb:d0:ff:52:f3:96:d7:74:70:89:94:06: 72:31:01:37:f1:6c:61:7d:95:72:6e:1d:a7:0c:4d: d3:da:3d:db:2f:c1:9e:8b:40:83:bf:20:7a:54:ff: 6d:a9:72:e0:7a:79:78:2d:8e:9c:8c:9d:a4:6d:c8: b1:2f:66:69:b0:d8:55:93:dc:53:5f:be:d2:03:00: 75:22:06:13:03:c7:64:d3:a2:0a:b4:64:ae:d9:d2: f5:74:4c:14:4f:c5:a0:64:88:b0:fa:7c:66:0e:20: 24:2b:1e:f2:5c:88:d1:b9:66:fb:7e:c4:4d:61:2f: 75:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:AA:6A:E5:AC:3B:CE:D2:3D:E1:5D:9B:F7:C6:56:5E:F5:B3:92:13 X509v3 Authority Key Identifier: keyid:9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:5d:a1:1b:18:49:73:1a:c7:97:8b:61:76:fe:a6:62:98:74: de:e1:9e:89:fa:6c:1c:f6:d1:f9:1c:cc:b7:9d:44:6f:5f:04: ed:1c:4a:5e:30:60:f1:99:06:d7:41:28:18:9b:51:aa:45:d0: c1:29:54:ad:e2:33:95:e5:43:b0:0d:8d:5f:65:11:b3:fd:63: 9a:33:ba:87:51:aa:9b:55:9a:63:99:3b:51:ed:4b:41:bf:4b: 58:73:7f:57:f7:f1:b9:af:1e:89:05:50:e8:6d:56:b7:e1:2f: 68:f9:33:92:a1:04:d5:c9:e4:35:3f:58:39:15:ff:26:31:96: 03:8c:cb:3f:84:27:0a:38:cf:f0:58:ad:9b:6a:db:15:d1:4f: 31:13:a5:3d:36:a0:2f:54:f0:bf:94:3a:df:8e:66:40:c4:00: 39:2e:15:b7:50:17:94:b9:e9:3c:96:25:89:5d:67:12:52:a2: eb:67:be:5d:d8:fb:85:cc:ff:3f:4c:e2:23:6b:2d:f4:6b:fc: 8a:85:23:c1:fc:8d:b8:20:7a:32:d4:63:70:6c:e8:a5:a6:4b: 1c:13:10:8c:87:35:eb:1e:6c:2a:21:59:e4:c7:55:90:b3:9c: 67:ba:16:aa:a7:54:c1:72:76:92:05:f8:4d:01:8b:83:fb:06: 8b:76:79:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZayIM4ty3PEtsYiqVmAwNhjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNWRlNDkwZmY4NzRlOTY4OWNlY2Y3MjZjYmI0ZTJmNTFm NmM3MzEwHhcNMjUwNTA4MjMwMDE2WhcNMjUwNTA5MjMwMDE2WjAzMTEwLwYDVQQD EyhlMGFhNmFlNWFjM2JjZWQyM2RlMTVkOWJmN2M2NTY1ZWY1YjM5MjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfJiTUAw/vd544ubxIAUFoSA2WrQ c8EIlfXXvjLKL6faU3A0uDagxhAq6iZDRMxMVNZbwQNL99N3o5PJlTPjxpvBoT9E FEg0zQnzg2WHPgiglD2/wufurcmKjKf4MkTc4CRHs8svdI33NKoRL+TghIIxBQz9 YNnTiGsGIgXBsigP/rke3mwduc+70P9S85bXdHCJlAZyMQE38WxhfZVybh2nDE3T 2j3bL8Gei0CDvyB6VP9tqXLgenl4LY6cjJ2kbcixL2ZpsNhVk9xTX77SAwB1IgYT A8dk06IKtGSu2dL1dEwUT8WgZIiw+nxmDiAkKx7yXIjRuWb7fsRNYS915QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOCqauWsO87SPeFdm/fGVl71s5ITMB8GA1UdIwQY MBaAFJ1d5JD/h06Wic7Pcmy7Ti9R9scxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC83NDViZGItMTA0Yi00OWM3LTk5ZDUt Y2VjMzNiYTFiZGY1LzEvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC83NDViZGItMTA0Yi00OWM3LTk5ZDUtY2VjMzNiYTFiZGY1 LzEvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiV2hGxhJ cxrHl4thdv6mYph03uGeifpsHPbR+RzMt51Eb18E7RxKXjBg8ZkG10EoGJtRqkXQ wSlUreIzleVDsA2NX2URs/1jmjO6h1Gqm1WaY5k7Ue1LQb9LWHN/V/fxua8eiQVQ 6G1Wt+EvaPkzkqEE1cnkNT9YORX/JjGWA4zLP4QnCjjP8Fitm2rbFdFPMROlPTag L1Twv5Q6345mQMQAOS4Vt1AXlLnpPJYliV1nElKi62e+Xdj7hcz/P0ziI2st9Gv8 ioUjwfyNuCB6MtRjcGzopaZLHBMQjIc16x5sKiFZ5MdVkLOcZ7oWqqdUwXJ2kgX4 TQGLg/sGi3Z5bQ== -----END CERTIFICATE-----Generated at Fri May 9 06:53:48 2025 by rpki-client