$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.mft File: XaOUHCfP5cI0xL8iHssqV5st6qs.mft (raw, json) Hash identifier: MFsQrK0+zUk8sXf1boDchliXMET/7096OfbT/4MKoQw= Subject key identifier: B3:63:E6:92:AB:1B:73:43:11:F0:89:8F:53:B1:AC:E2:B4:AF:BA:10 Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab Certificate serial: 0196AD689F8E685C7C05E32A785DEB293EFA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.mft Manifest number: 1280 Signing time: Thu 08 May 2025 01:00:36 +0000 Manifest this update: Thu 08 May 2025 01:00:36 +0000 Manifest next update: Fri 09 May 2025 01:00:36 +0000 Files and hashes: 1: 0NDg7PSFqCtlOZYcAWca7yUfVmo.roa (hash: vxdlDismxivb7YjpnzIGBIMoDZ842tr8eSQHVdPZSK0=) 2: 44V-jFpveDwCvRSgY1bGyBKxKMg.roa (hash: SBBRS+535H/ER4FEKoyxl+HX5+uiiatZ4OyNmO8omfM=) 3: 6xMWEeYr9awMZ7yx3GEOzN5dhPY.roa (hash: i3EKCietWlgVwKiSYdpzAk0qUO8A42y+4Xa5mI7nNOE=) 4: 7uT6U1lLurQEaJor-cFGlwsDu_k.roa (hash: Ui1tug0NBabKJLVWvbF+wZA/W7tLCJHrULtI5KVfo4U=) 5: CJWoMIuHhVD-Efxrbw0jAFhbe-w.roa (hash: Kgwm9eLnChXzut1Wvo58jSxKdzv5IWvQsGfIpc5SNrY=) 6: GaPhNmCLCg6FDzOqGOsmTwzEr2s.roa (hash: s8h3O6KnSTgtqyfNfNsxD91VQjj/kAw0losU0p/2szw=) 7: SnJnvCbTNrEMF1kRlYnaQpP1-CM.roa (hash: M/883UPP+y+ETclB7OhwNjCUVOl1P7x38ODsI02JpL0=) 8: VwscqchdEAmsVSyV2eD8RGldRmQ.roa (hash: VdjKB9pG2pwAZNShYBPvCakHnXSVowEhPi3XTbCbuyI=) 9: XaOUHCfP5cI0xL8iHssqV5st6qs.crl (hash: E/PLBGzoFs5aEV+vbJhi81+ieczo/ALCKRmJjgLY9jE=) 10: YPXYjBAH_6CTa2PRzt8FUXSv0uc.roa (hash: 6zYw4RGhgL5oXoJxuJXImN5CehSpcJqIUUxqFJsp5EQ=) 11: bYPfKSp3uay7u1IBGQCfz9PB7s8.roa (hash: cQdCPGlvEZyuveyWWb2XndmUwLnId4QzQGpaXozykOM=) 12: fX9UYKZO6xd52hU0CG_6QfKAnlI.roa (hash: PeN61zex2Sw5DInmZiyUVF6K0j8DWMly0+OvVLBpOMI=) 13: hSWUv1huf0ZgdEoupOzoYiR-xRY.roa (hash: fUUm9WVh4RT1Bif3s0lLxfArOXO1kV1fWL5woYLGALo=) 14: kFVkpx97TB72EKQ4ruzAfgCkmLQ.roa (hash: 1FA9Vl6Gc5MRJ5uyClcUL5q5Uvzb9XvC2S9BIvyjxzc=) 15: u1fx_e153PBDwPgyvx0qhpf_7-c.roa (hash: rIfGEdBSwuolAjKZu/D3tV9dA5ieH7tsIwRBMyCCMhA=) 16: uAEY8yf0-OduNKClmzmQfAo_KIE.roa (hash: qEIbThjEj3GBtZEd/ntxaTMGkdBP7P2YKculyoqC1h8=) 17: vQBa0DHzLolz37NUtVTr3McGXdM.roa (hash: jEeBKTmQJb632hn3aeDSG3q3Hax58EZ7ZkfrXZDB5r0=) 18: zLLnY-dQIRtqYuPaqhFMWu0P24Q.roa (hash: NAwFEB8VGQ8kHJYhy4abt4dV8wltJt8R0PlTbgI+GD0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.mft rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 May 2025 22:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:ad:68:9f:8e:68:5c:7c:05:e3:2a:78:5d:eb:29:3e:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab Validity Not Before: May 8 01:00:36 2025 GMT Not After : May 9 01:00:36 2025 GMT Subject: CN=b363e692ab1b734311f0898f53b1ace2b4afba10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ca:09:70:fc:cb:bd:21:24:25:98:83:7c:fb: e6:2b:83:64:81:69:09:d1:61:26:0d:e0:b8:98:14: 73:d8:41:1e:b8:ad:8f:41:4c:73:5e:5f:e7:20:c1: 21:ea:f3:ac:6f:9a:71:43:78:7f:0f:30:df:52:41: e1:d8:5f:20:0c:48:ee:90:ce:d9:30:fd:e2:fc:9f: e5:8d:6a:af:a6:e6:cd:34:08:90:cf:cb:b5:8d:1e: f9:41:04:5d:c7:c7:2a:13:42:25:33:f8:9f:35:98: ca:f7:d0:bc:0e:a5:e0:c5:42:ce:ca:42:91:5e:3e: ee:d6:06:c1:69:80:b7:9d:62:8d:f4:78:3c:d8:42: b9:ea:f5:6e:72:2f:08:59:4a:33:20:70:25:e1:2b: ea:c8:bf:48:b4:ab:35:cb:32:40:65:27:d9:91:eb: f2:69:95:4e:c6:2e:4e:75:a7:1d:42:97:d0:c5:e0: 5f:fe:d2:f7:9f:ac:c6:73:c1:a9:96:0c:b4:d3:04: fc:a0:9a:54:b1:9d:58:d8:2d:1b:88:7a:45:a4:79: da:4b:af:1a:62:68:32:9d:f8:f9:b7:cf:38:44:71: f9:f9:c1:16:1e:ab:93:a9:b7:47:65:bf:05:4d:ab: 55:c2:3a:c9:f9:e4:f0:5c:b1:98:8f:eb:be:46:b7: 99:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:63:E6:92:AB:1B:73:43:11:F0:89:8F:53:B1:AC:E2:B4:AF:BA:10 X509v3 Authority Key Identifier: keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:90:b1:25:a7:44:19:55:d9:57:44:4f:97:1f:ed:fc:e0:85: cf:fb:e3:cf:f1:29:c7:5e:47:1e:c5:77:b1:a3:2d:4b:46:e6: c7:e3:27:d1:a9:0e:f6:bd:64:37:53:0c:cf:bb:da:0a:35:57: 47:80:36:65:e9:42:41:07:f7:fc:29:fe:4e:92:d3:aa:4e:e1: ab:a3:cc:69:b8:c0:72:f6:60:8b:f5:7c:bb:08:06:a2:82:33: 3e:6c:9d:c6:d7:7f:03:b5:51:01:0d:a2:92:f3:d1:f8:65:cc: 49:c7:bc:38:b2:7e:52:03:d1:01:92:5e:b1:84:38:ee:e6:b5: 80:2e:71:7d:3c:d9:13:5e:79:d5:3f:f1:fd:af:74:bb:02:5b: ef:7f:bd:58:3f:7f:9b:c6:6e:1c:bd:d6:5a:e6:a5:91:bf:eb: 78:48:75:16:4d:19:77:97:9f:b4:5e:27:f3:08:08:01:63:4f: 11:4f:85:7f:03:6c:53:aa:d3:cd:6a:20:dc:47:b9:e8:cc:4a: a7:fc:e4:72:59:27:39:f9:5d:c3:e4:f0:5f:92:ed:a2:39:e5: f0:97:dd:5e:b5:0b:5f:65:0e:63:46:3f:5a:16:30:ac:2e:b1: 38:ed:20:94:e6:57:a0:39:cd:4a:e3:78:cc:bc:dc:36:25:a0: 89:4a:70:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZataJ+OaFx8BeMqeF3rKT76MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkYTM5NDFjMjdjZmU1YzIzNGM0YmYyMjFlY2IyYTU3OWIy ZGVhYWIwHhcNMjUwNTA4MDEwMDM2WhcNMjUwNTA5MDEwMDM2WjAzMTEwLwYDVQQD EyhiMzYzZTY5MmFiMWI3MzQzMTFmMDg5OGY1M2IxYWNlMmI0YWZiYTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5soJcPzLvSEkJZiDfPvmK4NkgWkJ 0WEmDeC4mBRz2EEeuK2PQUxzXl/nIMEh6vOsb5pxQ3h/DzDfUkHh2F8gDEjukM7Z MP3i/J/ljWqvpubNNAiQz8u1jR75QQRdx8cqE0IlM/ifNZjK99C8DqXgxULOykKR Xj7u1gbBaYC3nWKN9Hg82EK56vVuci8IWUozIHAl4SvqyL9ItKs1yzJAZSfZkevy aZVOxi5OdacdQpfQxeBf/tL3n6zGc8Gplgy00wT8oJpUsZ1Y2C0biHpFpHnaS68a Ymgynfj5t884RHH5+cEWHquTqbdHZb8FTatVwjrJ+eTwXLGYj+u+RreZkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLNj5pKrG3NDEfCJj1OxrOK0r7oQMB8GA1UdIwQY MBaAFF2jlBwnz+XCNMS/Ih7LKlebLeqrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGFPVUhDZlA1Y0kweEw4aUhzc3FWNXN0NnFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8zMGVkM2UtYzRjNC00ZGU4LWI0ZjEt ZjExYTM5ZjI2YzNiLzEvWGFPVUhDZlA1Y0kweEw4aUhzc3FWNXN0NnFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC8zMGVkM2UtYzRjNC00ZGU4LWI0ZjEtZjExYTM5ZjI2YzNi LzEvWGFPVUhDZlA1Y0kweEw4aUhzc3FWNXN0NnFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVZCxJadE GVXZV0RPlx/t/OCFz/vjz/Epx15HHsV3saMtS0bmx+Mn0akO9r1kN1MMz7vaCjVX R4A2ZelCQQf3/Cn+TpLTqk7hq6PMabjAcvZgi/V8uwgGooIzPmydxtd/A7VRAQ2i kvPR+GXMSce8OLJ+UgPRAZJesYQ47ua1gC5xfTzZE1551T/x/a90uwJb73+9WD9/ m8ZuHL3WWualkb/reEh1Fk0Zd5eftF4n8wgIAWNPEU+FfwNsU6rTzWog3Ee56MxK p/zkclknOfldw+TwX5Ltojnl8JfdXrULX2UOY0Y/WhYwrC6xOO0glOZXoDnNSuN4 zLzcNiWgiUpwvQ== -----END CERTIFICATE-----Generated at Thu May 8 08:26:41 2025 by rpki-client