$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft File: KX75vv0afiTAzJcpmH_AZda3Ey8.mft (raw, json) Hash identifier: 48VAM7gWjZg/k2viSM/EWcQMGkBvgC0HVz0bgZVorN0= Subject key identifier: 4E:B5:00:F2:41:6D:5E:D5:BD:E4:09:27:49:F6:2E:63:59:85:D3:10 Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f Certificate serial: 01969D50F654D8383670E5414CD7F74C1E0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft Manifest number: 04C1 Signing time: Sun 04 May 2025 22:00:50 +0000 Manifest this update: Sun 04 May 2025 22:00:50 +0000 Manifest next update: Mon 05 May 2025 22:00:50 +0000 Files and hashes: 1: 95yykwwXcTdfVTNtHSPE4pPfaP4.roa (hash: 1GDUJnazqonbvkMqjJPZO71YIfe2Ck+uEPOiP3nR7HA=) 2: DC8CWnfWr0kQCJUXXP37JYlG3bs.roa (hash: hIJ82Bht26+DJ40TdTwMmY9/6cclogWpDkPQZ7x1T3M=) 3: H_D-F9H9qkVTvnZv4CfQRltBb5w.roa (hash: PiMHHCzc4EPLDkYnKgKADo5O/sWTyR5QCsz73IjSeGQ=) 4: KX75vv0afiTAzJcpmH_AZda3Ey8.crl (hash: oq3AinpjC6iLqtnaqXLOQExwfe1JWbzz/t966niNAfA=) 5: Ow6xOfingvBCtHoNkaHGobxC5yY.roa (hash: NhFSRa+v/S1zW+iyQy+gxANBr6Bnqty2hhUOwum97Kc=) 6: QChegxRLNPsgM4aZ3Xr6VhdLIWc.roa (hash: bRcFRsu1/yeWRw6CVou2c0H6TdcYO6U68qWIBkemHjQ=) 7: V0aRJCOG2a9twiI1SK4HfmRChII.roa (hash: xPnpahcVRHcbxfnhq7t0F7epLdK24cqdjPN51uTlfmE=) 8: YYA24Gwpmr6WLrK2sHYyV54Dc0A.roa (hash: y8Fe2VWfAJFVAfPInM4iGd7JSb+2Rg0aP2L6gGF+qEQ=) 9: gTCMGlEBaJnK_2v-ik7gS35iBzs.roa (hash: QXJwtioFv7s2GD1uhn3oxTL2Gh369K9TIAfdIfeidBQ=) 10: hKRvEPMVo2ukUILwmPta9_N3Dm4.roa (hash: qTgr935WkDSGh45Ek2R2g/eV9pnfadByRLqS2Wh5HdI=) 11: loy5Snyw-iUVPzzHRVWXXXo15_o.roa (hash: HapHLXp4oAYGR81r+nU701ZcjYxsNP2uFcUwMFCofYE=) 12: nendNgfVYn3Er_Jx5FR9_K0MhAI.roa (hash: Zo4nTYqJK3HMiwWvWWXaOyWIMzLwcZzzdn6p7ZMhRf0=) 13: ws65NnH7cc5LX3ZtkutF5lwgOTo.roa (hash: 3tggzgIge6V0BsIfvy+BLekh4WUZ+47Y39glMLBsTTE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 May 2025 22:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:9d:50:f6:54:d8:38:36:70:e5:41:4c:d7:f7:4c:1e:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f Validity Not Before: May 4 22:00:50 2025 GMT Not After : May 5 22:00:50 2025 GMT Subject: CN=4eb500f2416d5ed5bde4092749f62e635985d310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e5:4e:c7:f0:f4:36:e7:70:50:e4:46:b4:df: 2b:7f:b3:23:a7:e7:69:07:de:1c:24:b2:15:6c:9e: 10:23:e3:30:0b:d7:2a:00:7e:7d:74:6a:4e:b5:01: 5a:59:6a:e6:80:71:01:8f:06:07:44:03:d0:e9:d7: 18:6f:5c:d6:8f:4f:09:9c:2c:7d:09:b3:94:cc:fb: 42:9c:51:a9:cf:19:a0:13:c3:30:35:e4:17:92:b1: 48:30:b9:a7:ee:14:7f:94:7b:5f:f6:2a:1e:3b:79: 34:26:7c:b0:4f:19:07:13:bd:11:e5:17:da:20:d9: 22:88:90:94:ff:38:a8:2e:f7:ee:43:ad:e3:9c:e7: 20:7b:2f:f9:93:d2:ce:bd:85:a7:f7:95:d0:b6:37: 51:c9:c5:d6:ae:91:66:06:ed:62:13:f0:ff:3c:31: 6c:b5:55:ee:3f:5e:0f:d2:ad:1a:0a:9a:74:ad:35: c5:93:72:23:0b:92:19:31:29:12:b0:b5:7f:20:77: ed:28:c3:d4:dc:40:32:b2:cc:89:bb:16:12:64:c7: c0:5d:cc:61:94:df:d8:82:2b:8b:91:3b:45:c1:97: 93:82:64:f2:5e:a8:9f:1a:ed:b9:dc:25:e4:20:48: 03:1e:d1:0d:41:c1:3a:fa:9b:49:bf:72:5e:82:a0: a5:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:B5:00:F2:41:6D:5E:D5:BD:E4:09:27:49:F6:2E:63:59:85:D3:10 X509v3 Authority Key Identifier: keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:c1:8f:7e:63:a2:14:49:20:fd:9c:45:03:9f:54:84:fe:0e: f6:bb:e4:5f:28:41:e5:33:4d:1e:63:53:ce:69:c8:14:b6:5f: 5c:b9:c8:11:9a:bf:66:8a:1f:53:b5:e5:45:e0:72:d4:6a:ee: 9c:fc:49:d8:dc:b2:4e:df:3b:00:64:33:09:c3:95:56:b6:52: cb:fe:dc:0a:c1:65:97:85:fb:15:20:6f:7a:ce:2e:63:f4:0b: a6:c1:26:42:03:34:ab:44:5d:e0:28:41:b3:fe:7a:4c:29:ae: c6:ba:97:82:cc:df:d0:67:98:00:b7:2f:25:33:5e:8c:f7:5f: 1a:ba:6a:9b:10:70:33:cd:53:aa:03:b5:d9:e4:bb:89:bf:89: 85:1a:bb:f4:29:ea:0b:66:59:7f:7d:58:29:ba:b8:b9:88:c4: ca:d6:06:9c:83:8e:be:5e:d3:8a:94:06:28:3a:fc:d6:49:91: 65:a2:70:18:40:61:79:13:36:85:bd:41:ab:c8:5b:90:ef:69: ef:23:1a:25:53:b5:4b:7d:98:48:cb:1e:64:e9:8d:de:af:c4: 72:94:c3:53:61:55:10:01:55:12:62:3a:db:d7:4d:7a:a9:24: 28:bb:e8:5a:25:58:e9:65:b5:77:e8:09:ea:6a:89:2c:b1:b6: ce:f1:18:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZadUPZU2Dg2cOVBTNf3TB4LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2VmOWJlZmQxYTdlMjRjMGNjOTcyOTk4N2ZjMDY1ZDZi NzEzMmYwHhcNMjUwNTA0MjIwMDUwWhcNMjUwNTA1MjIwMDUwWjAzMTEwLwYDVQQD Eyg0ZWI1MDBmMjQxNmQ1ZWQ1YmRlNDA5Mjc0OWY2MmU2MzU5ODVkMzEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+VOx/D0NudwUORGtN8rf7Mjp+dp B94cJLIVbJ4QI+MwC9cqAH59dGpOtQFaWWrmgHEBjwYHRAPQ6dcYb1zWj08JnCx9 CbOUzPtCnFGpzxmgE8MwNeQXkrFIMLmn7hR/lHtf9ioeO3k0JnywTxkHE70R5Rfa INkiiJCU/zioLvfuQ63jnOcgey/5k9LOvYWn95XQtjdRycXWrpFmBu1iE/D/PDFs tVXuP14P0q0aCpp0rTXFk3IjC5IZMSkSsLV/IHftKMPU3EAyssyJuxYSZMfAXcxh lN/YgiuLkTtFwZeTgmTyXqifGu253CXkIEgDHtENQcE6+ptJv3JegqClSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE61APJBbV7VveQJJ0n2LmNZhdMQMB8GA1UdIwQY MBaAFCl++b79Gn4kwMyXKZh/wGXWtxMvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWIt ZGVlNzY4NjAwMTNkLzEvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWItZGVlNzY4NjAwMTNk LzEvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHcGPfmOi FEkg/ZxFA59UhP4O9rvkXyhB5TNNHmNTzmnIFLZfXLnIEZq/ZoofU7XlReBy1Gru nPxJ2NyyTt87AGQzCcOVVrZSy/7cCsFll4X7FSBves4uY/QLpsEmQgM0q0Rd4ChB s/56TCmuxrqXgszf0GeYALcvJTNejPdfGrpqmxBwM81TqgO12eS7ib+JhRq79Cnq C2ZZf31YKbq4uYjEytYGnIOOvl7TipQGKDr81kmRZaJwGEBheRM2hb1Bq8hbkO9p 7yMaJVO1S32YSMseZOmN3q/EcpTDU2FVEAFVEmI629dNeqkkKLvoWiVY6WW1d+gJ 6mqJLLG2zvEY3w== -----END CERTIFICATE-----Generated at Mon May 5 06:21:48 2025 by rpki-client