$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft File: 7jE2ffbRhhBxySuucmUjMm9Fuio.mft (raw, json) Hash identifier: LO8mCkHMUuhW4GZ0ys6zeje0V7ZHrMjCkDF2s3YvVCA= Subject key identifier: 62:C8:5B:6A:01:3D:C0:0E:34:5A:0F:A3:47:8B:C4:4E:AB:89:C0:23 Authority key identifier: EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A Certificate issuer: /CN=ee31367df6d1861071c92bae726523326f45ba2a Certificate serial: 0196B6346B37195AAA3F20124C08E1FE2E12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft Manifest number: 1541 Signing time: Fri 09 May 2025 18:00:10 +0000 Manifest this update: Fri 09 May 2025 18:00:10 +0000 Manifest next update: Sat 10 May 2025 18:00:10 +0000 Files and hashes: 1: 2moa6mH80qm3IguzeOVfriRFI-w.roa (hash: j1fSM40RJhYQeBXMR1k4sve6WbFK63q8AmH4WPbC0Tk=) 2: 7jE2ffbRhhBxySuucmUjMm9Fuio.crl (hash: gZn0DqJ/FfdxDOWctuFFN1jR42TfCmU7fy9B+IbNc7M=) 3: CXoFElZwW4PWs_hTQ87v6bEKvR4.roa (hash: 1SVSIuQGG2HcuOnMn4jS+KIa5ua4QSXf9ENt7KvsOQk=) 4: FMaPqE5TIdnmZNocYxdc5fwMWSY.roa (hash: JA/2EVWKbOQSq1/3vVw4VHdOS4gY4KVxfI8Zlx03fcw=) 5: OQadFX-qT3gCoM0N-bZt3P6oHFk.roa (hash: 46o7jeEMiMdTNObDyI76FFzvM1LIe1/KQjE4TCfjPsc=) 6: P8zXUAaQks5p-XgYDOvceaS5lbk.roa (hash: Z62eQfzzFQBfWvdsKjtVKModn2zABInZxrMBevoUQ4Y=) 7: PoBO5x_Ygu-AT9DvSuiJTf_ttjA.roa (hash: qtTisIWpOzmReY6w2mAnrMMzLySXI6rOsYAaJcyqeeo=) 8: T-lrle-lMMn_3ceJvqi204wvJBg.roa (hash: pfDjaYpc+cz+oMEPVwyi0YHOySPdXXVVjni9rDotFgo=) 9: XNkz6ZVHIVynkp_0EBDRKs20yRg.roa (hash: AkJazMwGlN/vrZ2JnBw7g2g2XhDrm0alHaLhRcLDCi0=) 10: __OxFEyH1FYcvs1JCgS-JD7OZlw.roa (hash: YSuGVAn8QITI9B6yQeEMR6fNv8UQPFQ3OllUy3lS53Q=) 11: fFcReiDCZvGq5LR_cyZOKyKXGlY.roa (hash: ukxchoy/na4y4RwXvsuBg69N9jB1OiY5O6m03uaDW3A=) 12: fcBtkXfjS9kQlveEGfiEVLIB7J0.roa (hash: ROEERJqLb1vPSxawZ1IsC8sK1RVt08mmNavrdqSvxsY=) 13: hvDxWczJSCD1N66X4dBRt3gG1t8.roa (hash: MPSonopmIFoV4IaEMBT6BZbRxseta+ksAG7ucEI2WUU=) 14: jndEHNZ2x0pbxmjtnUN_iL0EOgg.roa (hash: VNMFBQYDM78mD696fWYXbt5tsmZPIllrl31MY4LZBZs=) 15: ohTlEE-9-hCPb5DTk-_fGsRCE_A.roa (hash: x8jCPCcQdObbaBTAaMbUaPRjH4TWD/Pqc9qCuIKOouA=) 16: pTHe5z_UC5Rv2zAgyZz5PhBBbIc.roa (hash: LCSm3osyvHakBWxSlCUH1WcECMjCvAEncqaI0o/t+nY=) 17: zPy0xYpq_RYYV72dvP_8iEtD_Lw.roa (hash: i7Cn4wrgMzgR1e+oHe7mzJfihR1BEwwDViBupY0xQNw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 May 2025 17:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:b6:34:6b:37:19:5a:aa:3f:20:12:4c:08:e1:fe:2e:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee31367df6d1861071c92bae726523326f45ba2a Validity Not Before: May 9 18:00:10 2025 GMT Not After : May 10 18:00:10 2025 GMT Subject: CN=62c85b6a013dc00e345a0fa3478bc44eab89c023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ad:b3:64:ed:e3:45:e8:56:4c:5a:fa:9b:20: 92:58:15:d4:56:14:74:f7:a2:00:4b:47:21:c5:0a: e1:44:4d:cd:37:e8:04:35:56:9f:13:8f:72:1b:89: 1d:45:cd:9a:58:2c:4c:12:1d:a7:62:4f:7c:16:57: 5b:eb:9e:5d:a2:4f:15:44:fe:4b:8b:f0:c1:2a:6f: e3:a6:e0:47:84:b3:17:3e:92:54:3d:57:d6:a6:9b: 70:87:83:86:a3:3d:de:90:4a:b6:28:33:c8:6e:06: f8:ab:e4:43:8d:f3:d6:21:fd:d8:1a:47:0f:42:46: fa:2f:11:7d:20:bd:5c:81:f5:34:5a:2c:c3:fb:83: 6c:aa:d0:df:f4:79:86:7f:6a:3b:9e:9d:3f:a3:28: 12:70:38:f5:dc:99:d6:6d:bb:a0:7e:25:3e:58:b5: 84:e3:b4:9c:ca:4a:d5:b8:90:d5:c6:ca:64:e3:93: 4d:73:77:00:21:0a:d2:28:d9:82:29:6b:e4:10:41: 24:1e:a9:4f:0c:94:38:01:7b:f2:39:15:be:1b:c8: d1:06:4a:f0:25:83:7a:94:ad:8e:e1:28:ae:14:83: 92:86:39:24:12:ed:ae:0f:24:14:bb:2c:3e:3f:04: 29:68:d4:b7:02:f3:be:66:a6:ba:12:66:6f:c4:18: ee:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:C8:5B:6A:01:3D:C0:0E:34:5A:0F:A3:47:8B:C4:4E:AB:89:C0:23 X509v3 Authority Key Identifier: keyid:EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:9f:aa:eb:bd:ee:c6:01:6b:2c:95:d0:40:c8:60:50:3f:91: 6d:11:7a:a0:df:fa:6a:48:b0:92:6a:18:ac:7b:e8:a0:e1:14: 23:ac:5d:18:74:d9:e6:cd:4e:2c:58:a5:36:8e:9f:f4:ac:15: c8:64:35:28:bc:24:9c:97:42:60:c4:60:c4:d4:87:b9:d1:0c: 3c:b0:57:27:58:97:1f:4f:98:ab:48:5e:b6:7d:1c:1b:d5:20: a8:14:6b:22:52:5b:90:60:04:ca:f1:a0:6a:45:46:50:44:ff: ba:61:80:03:0e:f1:91:2a:e5:a3:45:bd:a2:40:94:43:b6:e9: 4c:6e:2a:d2:ae:6d:18:5c:fa:63:18:d7:f7:e5:cf:16:24:ad: cd:37:0a:6d:c5:9d:d9:22:b3:cd:3a:de:11:bc:2b:6e:84:bb: 44:d8:f1:8a:e9:63:0a:32:84:ed:cc:f8:ad:d4:0a:44:62:15: 04:51:50:42:52:2f:30:c8:6b:f1:1c:c9:80:17:e8:fb:0d:bb: b8:98:df:c9:f8:57:d6:16:44:5e:83:c0:27:30:f5:86:69:74: 10:58:d7:99:a7:fc:dc:3f:7e:16:fb:19:a5:3d:07:ac:b1:0d: 8f:73:96:7d:ef:57:bc:61:22:67:9f:76:a6:38:66:68:68:29: f1:e1:b3:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa2NGs3GVqqPyASTAjh/i4SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMzEzNjdkZjZkMTg2MTA3MWM5MmJhZTcyNjUyMzMyNmY0 NWJhMmEwHhcNMjUwNTA5MTgwMDEwWhcNMjUwNTEwMTgwMDEwWjAzMTEwLwYDVQQD Eyg2MmM4NWI2YTAxM2RjMDBlMzQ1YTBmYTM0NzhiYzQ0ZWFiODljMDIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhK2zZO3jRehWTFr6myCSWBXUVhR0 96IAS0chxQrhRE3NN+gENVafE49yG4kdRc2aWCxMEh2nYk98Fldb655dok8VRP5L i/DBKm/jpuBHhLMXPpJUPVfWpptwh4OGoz3ekEq2KDPIbgb4q+RDjfPWIf3YGkcP Qkb6LxF9IL1cgfU0WizD+4NsqtDf9HmGf2o7np0/oygScDj13JnWbbugfiU+WLWE 47ScykrVuJDVxspk45NNc3cAIQrSKNmCKWvkEEEkHqlPDJQ4AXvyORW+G8jRBkrw JYN6lK2O4SiuFIOShjkkEu2uDyQUuyw+PwQpaNS3AvO+Zqa6EmZvxBju0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGLIW2oBPcAONFoPo0eLxE6ricAjMB8GA1UdIwQY MBaAFO4xNn320YYQcckrrnJlIzJvRboqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8xYmI0ZGQtZTljNC00ZDNkLTlhM2It MTE1OWRiZmJlZDU0LzEvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8xYmI0ZGQtZTljNC00ZDNkLTlhM2ItMTE1OWRiZmJlZDU0 LzEvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACp+q673u xgFrLJXQQMhgUD+RbRF6oN/6akiwkmoYrHvooOEUI6xdGHTZ5s1OLFilNo6f9KwV yGQ1KLwknJdCYMRgxNSHudEMPLBXJ1iXH0+Yq0hetn0cG9UgqBRrIlJbkGAEyvGg akVGUET/umGAAw7xkSrlo0W9okCUQ7bpTG4q0q5tGFz6YxjX9+XPFiStzTcKbcWd 2SKzzTreEbwrboS7RNjxiuljCjKE7cz4rdQKRGIVBFFQQlIvMMhr8RzJgBfo+w27 uJjfyfhX1hZEXoPAJzD1hml0EFjXmaf83D9+FvsZpT0HrLENj3OWfe9XvGEiZ592 pjhmaGgp8eGzng== -----END CERTIFICATE-----Generated at Sat May 10 03:06:08 2025 by rpki-client