$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft File: S0BcqrNLv95rjuZsYAhgxs6W8ys.mft (raw, json) Hash identifier: 8mILA8cPh+aMuYM8QbMRKx+aMI0noY2vzXyKbALYoLw= Subject key identifier: 71:52:60:24:32:2B:8F:97:DA:EC:E4:46:5A:CF:B6:79:FF:7E:A1:5D Authority key identifier: 4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B Certificate issuer: /CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b Certificate serial: 0196CF86BDD96AB5852A6E8876C2C1B8E8A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft Manifest number: 1544 Signing time: Wed 14 May 2025 16:00:36 +0000 Manifest this update: Wed 14 May 2025 16:00:36 +0000 Manifest next update: Thu 15 May 2025 16:00:36 +0000 Files and hashes: 1: 11HD7yYKcpDp91MDnZ2qx4f7DA4.roa (hash: I82O47jamEqwRmGn3/G2hhZ8d3EhBnYIg9JLsYyDdcE=) 2: EVFSBas9Aq_MdNVwUd8bGuaA3Ws.roa (hash: BhtgRPsHAejHOiiDvH3HRPbC4SYTxdKvHTv4FGSpdUs=) 3: EwIzZdJ1IhMaFw8VKQftgylzjgE.roa (hash: TssNiQ/Zpv1pzvYDHFFLNu5wfEVQ4u0fKOIDHY91aqk=) 4: LVgdGGp1BXM3wqsV9OwWixTAngw.roa (hash: yASeozzYpGQSF5fg0wPLHaGxwKLjvcatKKCkqykA4I8=) 5: MJIbLhSmNC8a874fA2nbq57HEtg.roa (hash: WaRYM9CvEVYhUP+ZoiflR5McAGOB5Og+0p9cf3/LEak=) 6: P1A1BXCqCADzQosrk4MwUKPYxTk.roa (hash: LXH4t2ODNhUtfiB03lL7Y51z/AGbNaW0Y11NO+KNqsc=) 7: QHWMs-MZjDSwChSISEL6Gl0q8mw.roa (hash: MTwg/6CPgLRHHoER9F5LK/UDna9Vp7Lok94EKexAIUI=) 8: S0BcqrNLv95rjuZsYAhgxs6W8ys.crl (hash: edajx1N6XfdhbYvZH+VN1M0iAPrqTuy05f1VPPNtYBw=) 9: Xdvj43KnSMHPF5yK-nfEWq4KZoY.roa (hash: 0KUoHz1/LcxNxADlsv04gqLb680zAS0Z8MaiKDomgYY=) 10: foffFzsX_C0XZVackxzc9TT3Ql0.roa (hash: v5tw1DCZvp0dZORs+mozhjde3hmTpwW0Pvc0v2NmjrU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.crl rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 15 May 2025 14:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:cf:86:bd:d9:6a:b5:85:2a:6e:88:76:c2:c1:b8:e8:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b Validity Not Before: May 14 16:00:36 2025 GMT Not After : May 15 16:00:36 2025 GMT Subject: CN=71526024322b8f97daece4465acfb679ff7ea15d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:22:ba:92:03:97:40:7e:34:bd:52:72:d3:ee: 85:7f:69:63:c7:0b:a3:af:3a:bb:48:e8:1f:ad:14: c1:cd:8f:10:63:fa:a1:79:c0:b3:23:19:0b:cb:36: 16:6e:a0:5e:4d:67:d7:25:31:cd:75:14:f7:1c:8b: f9:91:23:f3:2e:96:3f:b2:a1:c5:1d:2d:6f:af:ef: 61:b5:a7:13:78:ab:cb:67:9c:44:b3:54:9d:9d:f3: 53:50:39:22:23:eb:34:67:1d:ec:6c:a9:b3:dc:61: 50:ad:64:31:90:8b:ef:2b:91:91:4f:da:a0:3c:93: 95:1a:fa:ca:e0:d3:dc:84:91:aa:d1:91:45:38:8e: 28:33:5a:a5:49:fc:5b:3e:68:d0:22:1f:a8:1c:51: aa:cf:8a:e2:0a:c9:ca:5f:92:01:8e:bb:e1:73:1a: ce:83:f5:3d:be:13:17:df:27:82:0d:7d:52:dc:56: f0:d9:1b:cc:fb:bc:1b:37:9e:56:b0:88:d1:5b:b3: dd:d0:7b:e1:1c:e9:1f:6e:94:1b:a4:3b:ce:93:f8: 9d:da:aa:e9:38:39:b0:86:a1:7b:44:13:c1:4d:82: 6f:80:9e:33:1b:e1:a1:7c:c0:14:9e:31:3c:b2:22: 9c:fc:12:88:3e:5e:14:13:af:b2:35:d6:60:12:2b: 8a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:52:60:24:32:2B:8F:97:DA:EC:E4:46:5A:CF:B6:79:FF:7E:A1:5D X509v3 Authority Key Identifier: keyid:4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:a7:f7:b0:17:15:bf:a6:78:f2:ab:3b:de:74:c1:72:17:f5: 05:99:1f:8d:7a:52:04:e0:70:1e:67:88:c4:01:0c:d0:c1:c4: 9c:16:d6:16:fe:4f:a4:af:1d:42:41:67:60:a7:a8:53:25:dc: e6:49:fc:f3:df:e6:33:10:62:f3:41:9a:1b:5d:49:55:24:e2: 9f:0b:c1:67:c9:03:28:27:e8:8c:66:71:07:ed:df:37:58:ec: 2f:9d:83:87:dd:a2:11:46:b3:27:c3:1c:02:f8:0b:73:4a:00: 8f:e2:62:28:d0:21:3d:28:ad:fe:6f:60:7d:96:b2:de:4b:5e: f2:95:ce:ab:34:f5:63:a0:11:4a:4a:5a:54:83:67:cd:c2:18: 15:1a:1b:3d:ee:0f:d2:c3:c0:0c:f4:2b:d8:2c:2b:91:fb:e5: 79:c6:61:d9:94:78:08:67:b6:da:89:cf:f1:91:18:30:da:11: f4:a7:37:eb:58:10:43:f3:f0:12:ab:42:31:5c:ac:6c:20:95: fd:7e:92:19:20:a4:79:ae:71:8f:cc:18:d9:32:97:59:a9:5e: 7b:6c:2d:88:97:e8:68:60:e5:ad:f2:bd:b6:fe:d4:d9:d8:3a: 15:5e:16:43:8d:7f:a7:9e:3f:09:34:e2:ed:0b:d6:94:3d:f8: b6:d1:04:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZbPhr3ZarWFKm6IdsLBuOiiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNDA1Y2FhYjM0YmJmZGU2YjhlZTY2YzYwMDg2MGM2Y2U5 NmYzMmIwHhcNMjUwNTE0MTYwMDM2WhcNMjUwNTE1MTYwMDM2WjAzMTEwLwYDVQQD Eyg3MTUyNjAyNDMyMmI4Zjk3ZGFlY2U0NDY1YWNmYjY3OWZmN2VhMTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriK6kgOXQH40vVJy0+6Ff2ljxwuj rzq7SOgfrRTBzY8QY/qhecCzIxkLyzYWbqBeTWfXJTHNdRT3HIv5kSPzLpY/sqHF HS1vr+9htacTeKvLZ5xEs1SdnfNTUDkiI+s0Zx3sbKmz3GFQrWQxkIvvK5GRT9qg PJOVGvrK4NPchJGq0ZFFOI4oM1qlSfxbPmjQIh+oHFGqz4riCsnKX5IBjrvhcxrO g/U9vhMX3yeCDX1S3Fbw2RvM+7wbN55WsIjRW7Pd0HvhHOkfbpQbpDvOk/id2qrp ODmwhqF7RBPBTYJvgJ4zG+GhfMAUnjE8siKc/BKIPl4UE6+yNdZgEiuKcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHFSYCQyK4+X2uzkRlrPtnn/fqFdMB8GA1UdIwQY MBaAFEtAXKqzS7/ea47mbGAIYMbOlvMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzBCY3FyTkx2OTVyanVac1lBaGd4czZXOHlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS85MTRkMzktMzAyMC00Yjc5LWFkMjYt ZDg3YWZmYjhiYzYxLzEvUzBCY3FyTkx2OTVyanVac1lBaGd4czZXOHlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS85MTRkMzktMzAyMC00Yjc5LWFkMjYtZDg3YWZmYjhiYzYx LzEvUzBCY3FyTkx2OTVyanVac1lBaGd4czZXOHlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH6f3sBcV v6Z48qs73nTBchf1BZkfjXpSBOBwHmeIxAEM0MHEnBbWFv5PpK8dQkFnYKeoUyXc 5kn889/mMxBi80GaG11JVSTinwvBZ8kDKCfojGZxB+3fN1jsL52Dh92iEUazJ8Mc AvgLc0oAj+JiKNAhPSit/m9gfZay3kte8pXOqzT1Y6ARSkpaVINnzcIYFRobPe4P 0sPADPQr2CwrkfvlecZh2ZR4CGe22onP8ZEYMNoR9Kc361gQQ/PwEqtCMVysbCCV /X6SGSCkea5xj8wY2TKXWalee2wtiJfoaGDlrfK9tv7U2dg6FV4WQ41/p54/CTTi 7QvWlD34ttEEcw== -----END CERTIFICATE-----Generated at Wed May 14 23:58:42 2025 by rpki-client