$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft File: ORnyrZFYS6_wRnRHusj7l40fndM.mft (raw, json) Hash identifier: QZEQF0DGZQ1uxMPzA0yeQx/Fm59iuLVzHWEsV1jQHqQ= Subject key identifier: D9:FA:5F:93:45:50:33:81:DB:4E:9B:55:AE:64:13:5E:14:4F:FF:43 Authority key identifier: 39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3 Certificate issuer: /CN=3919f2ad91584baff0467447bac8fb978d1f9dd3 Certificate serial: 0196BE92EE1F3F3146A0245ECE85D8C4FF7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft Manifest number: 155A Signing time: Sun 11 May 2025 09:00:22 +0000 Manifest this update: Sun 11 May 2025 09:00:22 +0000 Manifest next update: Mon 12 May 2025 09:00:22 +0000 Files and hashes: 1: 3Xkfgsy5F0IowNcy1PedAB3Q6w0.roa (hash: iyJL5cuUJjZvE75tBtKfcWvyK2dmPiVKM7BX3wZGQos=) 2: 4EDvDSCIPe0YYvYx7Str0IpAPeM.roa (hash: A9xeZgyOfSqqIMRvaPEIhp5b1RhtdrlitB+v147UkT4=) 3: 5pue0s9j8lhdVuO6m6E92d4GwDU.roa (hash: CSkd5pFYexGISl0uc2qVJpocMMmmGw3Zguf0ypv5Owk=) 4: M5hYRJhvdGCKvhvMAGC4jWTJSXA.roa (hash: VGkxa4pTyEqZCbbcRS6HnlUuOo2QmctHYBT+vvYYBDg=) 5: ORnyrZFYS6_wRnRHusj7l40fndM.crl (hash: KDJVd1eqwzW9h6iCl9jbbYks57E19ddAC01MgiLK0U8=) 6: UfCPGY0KJE6274iAqACixLj9Gmw.roa (hash: DEe7CtPUt0XEDknWoFEE8OaasnbG+ag0I4mAzR/inaE=) 7: WBerlCoyvzWnSx7AM9uVxy9XUro.roa (hash: FyOYZU8Lcu6m3tCIEh8spxjddiJiAmITHkAJjSq/GW0=) 8: hWosbOoApl7V_Bhpe5UlA20sERA.roa (hash: PkJmNJ/LtXuQwtW6f6gFggLl9YMZJgAspupTTJw2DD0=) 9: m-oD5AGGiKc-qI8F9BHOsqfUhwQ.roa (hash: ZivLa2r1rkIhgA7nnzvSrie3rkSLQvNS6UhWQpi2o50=) 10: r4CnQQx_zbdBDGpIsGGdqEuowRg.roa (hash: Cf3KdUglzAXq3AND0kUcTnVm0D52NG4w3f87gIFdSQg=) 11: uot90FkBP8Y3Y-x6-7brjjoB-rU.roa (hash: 0JXXSAl/uFfrD7KxeCsCoDWgeiNKlIuga4IDFWQXH2c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 May 2025 07:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:be:92:ee:1f:3f:31:46:a0:24:5e:ce:85:d8:c4:ff:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3919f2ad91584baff0467447bac8fb978d1f9dd3 Validity Not Before: May 11 09:00:22 2025 GMT Not After : May 12 09:00:22 2025 GMT Subject: CN=d9fa5f9345503381db4e9b55ae64135e144fff43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:21:78:03:d4:7d:4c:1f:af:9b:a4:11:60:17: 26:20:37:64:0b:7c:0b:f8:65:28:da:7d:c8:8f:79: a5:4f:cb:af:4f:42:62:1a:c5:87:38:87:e8:f9:e4: e8:eb:06:9c:75:df:6a:4f:3d:fc:99:3b:2d:08:85: 07:28:ba:ec:79:47:a9:80:a0:af:90:74:1c:a0:5d: de:2b:81:00:15:a1:06:b8:41:bb:20:d3:41:ff:a8: ad:be:70:12:2c:03:08:79:23:4e:7b:d3:85:f8:4a: 23:e4:34:ff:f1:ae:0c:52:63:9f:9c:8a:f2:83:2d: 3b:23:57:b2:f7:f1:0f:85:f9:64:53:a6:8c:93:9d: 07:13:6b:e2:b4:c2:dd:15:1b:64:16:8b:38:6f:23: 63:fb:0d:aa:8f:43:88:6a:eb:1d:59:b0:bc:da:9b: ad:26:f9:45:4d:10:98:57:3f:4a:4f:94:b9:32:8b: 41:78:ed:f7:e3:c3:4d:d1:70:85:5e:35:07:ae:00: a6:da:47:49:a3:71:9a:81:ce:5c:d0:51:0b:3e:6e: fa:7b:b3:3d:f4:97:33:71:5c:ed:3e:c4:0f:22:46: 74:7e:c5:71:15:30:f1:87:a5:bf:8d:55:43:0f:14: 5c:56:cc:cc:57:f8:7d:0b:6e:d3:69:28:05:a4:27: dd:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:FA:5F:93:45:50:33:81:DB:4E:9B:55:AE:64:13:5E:14:4F:FF:43 X509v3 Authority Key Identifier: keyid:39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:20:b6:1b:75:d7:80:87:e6:d9:13:95:2f:d3:2f:71:18:0f: d1:45:9e:1a:be:a0:17:99:5c:df:3e:d3:ae:3a:e9:7b:03:7b: 6c:43:33:4f:c7:d5:65:a7:fe:c0:a1:1c:02:5d:a2:06:62:a9: ad:8a:64:60:0d:66:15:b5:76:59:53:e6:a3:03:72:2a:a3:6f: 1a:a9:59:2e:08:73:77:14:3d:ce:e3:c9:f5:04:ff:69:10:56: 37:64:1f:3b:08:68:58:81:26:ed:b5:75:1c:3c:d8:23:16:33: 24:5c:5d:fc:e9:0c:5f:79:af:22:45:6e:07:83:b6:05:ae:30: 6a:0d:cc:99:0a:28:0c:be:77:0f:e7:b7:8d:82:ad:f0:06:0d: 15:eb:49:94:8e:c2:1a:0e:58:83:c0:76:ba:c8:c9:b1:a6:1a: d5:b2:a7:ee:f2:e1:88:2a:e3:d2:22:8f:3c:1a:88:6d:ce:f0: ee:49:35:fa:e8:09:3a:a2:c3:8d:5d:44:49:18:ef:e7:30:cd: 30:a4:15:1f:09:f4:2a:74:d5:a5:ec:45:a0:f5:00:0b:3a:94: 7e:31:58:2a:6d:4f:42:ab:a7:72:21:da:ab:e8:3a:61:41:82: 72:5e:1d:e8:af:01:8c:32:9d:3c:e8:de:28:0f:1e:91:72:3b: 36:55:cb:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa+ku4fPzFGoCRezoXYxP99MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MTlmMmFkOTE1ODRiYWZmMDQ2NzQ0N2JhYzhmYjk3OGQx ZjlkZDMwHhcNMjUwNTExMDkwMDIyWhcNMjUwNTEyMDkwMDIyWjAzMTEwLwYDVQQD EyhkOWZhNWY5MzQ1NTAzMzgxZGI0ZTliNTVhZTY0MTM1ZTE0NGZmZjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CF4A9R9TB+vm6QRYBcmIDdkC3wL +GUo2n3Ij3mlT8uvT0JiGsWHOIfo+eTo6wacdd9qTz38mTstCIUHKLrseUepgKCv kHQcoF3eK4EAFaEGuEG7INNB/6itvnASLAMIeSNOe9OF+Eoj5DT/8a4MUmOfnIry gy07I1ey9/EPhflkU6aMk50HE2vitMLdFRtkFos4byNj+w2qj0OIausdWbC82put JvlFTRCYVz9KT5S5MotBeO3348NN0XCFXjUHrgCm2kdJo3Gagc5c0FELPm76e7M9 9JczcVztPsQPIkZ0fsVxFTDxh6W/jVVDDxRcVszMV/h9C27TaSgFpCfdvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNn6X5NFUDOB206bVa5kE14UT/9DMB8GA1UdIwQY MBaAFDkZ8q2RWEuv8EZ0R7rI+5eNH53TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85MTE4ZTItYWU3NC00YzI0LWE3NzUt MzJhYTY3MzFjMjkxLzEvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS85MTE4ZTItYWU3NC00YzI0LWE3NzUtMzJhYTY3MzFjMjkx LzEvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARyC2G3XX gIfm2ROVL9MvcRgP0UWeGr6gF5lc3z7TrjrpewN7bEMzT8fVZaf+wKEcAl2iBmKp rYpkYA1mFbV2WVPmowNyKqNvGqlZLghzdxQ9zuPJ9QT/aRBWN2QfOwhoWIEm7bV1 HDzYIxYzJFxd/OkMX3mvIkVuB4O2Ba4wag3MmQooDL53D+e3jYKt8AYNFetJlI7C Gg5Yg8B2usjJsaYa1bKn7vLhiCrj0iKPPBqIbc7w7kk1+ugJOqLDjV1ESRjv5zDN MKQVHwn0KnTVpexFoPUACzqUfjFYKm1PQqunciHaq+g6YUGCcl4d6K8BjDKdPOje KA8ekXI7NlXLTQ== -----END CERTIFICATE-----Generated at Sun May 11 15:46:32 2025 by rpki-client