$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft File: _EQpfpJxxu3wZJFfYYCuEmkN2os.mft (raw, json) Hash identifier: jl8lhgw04aEfkFT0CmU8w/7v2UjQiNBnR7/UOzwNjpY= Subject key identifier: 20:60:CA:81:F8:1E:FB:DF:2E:5A:4F:C6:E7:B3:71:52:46:87:18:A7 Authority key identifier: FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B Certificate issuer: /CN=fc44297e9271c6edf064915f6180ae12690dda8b Certificate serial: 0196C0B86DA7644858929D72B02042DA7C88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft Manifest number: 154B Signing time: Sun 11 May 2025 19:00:34 +0000 Manifest this update: Sun 11 May 2025 19:00:34 +0000 Manifest next update: Mon 12 May 2025 19:00:34 +0000 Files and hashes: 1: 32yhRz_S8ITRiOsBYkmV4NnQCYc.roa (hash: dVgxRZDbIbYdq2fLtDV8WTt0Yh4BvCJtbiIWE/I7V9o=) 2: 3YfXMGxAROTBpSHK0nXhT4XXVLA.roa (hash: t9FN1AE/iUXMjLgMElEEh/Ci+Kik/9ynPh+dOX7Z5u8=) 3: 4CRh1_CvU86oKkepqeWz0p8Z20g.roa (hash: eECawWd/eK8DTrkxHmdqWQ83awsrOYEANzuH8VdAHYk=) 4: 4yVwhdNr1x7QWhuQZt7jnU3WVfU.roa (hash: Avv1mWPFCgDH8L+bShCZ3laRZSIOjbCtfz5vWH2fX7s=) 5: 7hrowrIyQ_yhCn7NqJyPwlbnjvU.roa (hash: jaDUXbK3NwGZnP8kMILOfU6k2MmyLuZSMbC+5y9ZUnQ=) 6: EC4-LQ6kidGJzuS4NcMwvpf6NbU.roa (hash: p11JEQANSGpxSsSCC9KDVq2xpHH5TNvaJmupLy6k704=) 7: He_wIqs9WbeGj8B22HW3VzQspCQ.roa (hash: tlw/MPCRV5MVLGPRtjnV6Ynl8QAazIvng9cpXGa9Jjc=) 8: HuL3gMV6_zC2v4RtUtbhqokAt3o.roa (hash: oOaz6NQBz4nDsaAkIEoLusftKpiuLlvRyaHsm/ZmfH4=) 9: QOp8bh5ZPSuznKCRrGZLlhCTgcs.roa (hash: 7hAuGp/9PxCmWRCRnl/vszI74VutrV1FkyouYG2D0Ok=) 10: VoBqKFmkzHKUMH66kT01ur4Okdk.roa (hash: wrQGRmCWA6MmV9E979fU5JGLxSuHzNsXWbXUIKZWDCY=) 11: ZWOY1CQejAaInI5dPiW91XYX-d8.roa (hash: 99cY9onRLW//cQHI0vGgH4e5SQS2hb6TJu75LNYg/pg=) 12: _EQpfpJxxu3wZJFfYYCuEmkN2os.crl (hash: uH/xKYm7iH7pBR6tkGPPUIw2JAVLT6K53dSfdm4MNbg=) 13: bvGIb4I9tPNSFQAgMarPZLbQdco.roa (hash: z2ND/X4p7VMdJla0AX/t4QpyjiykeGek/GP7iei/AGM=) 14: tineMtUjOADbmljZnXO2AjKqXkc.roa (hash: 0BfJzskVZ3BO+kzng4r5uCUBjRTYeY/YcraQ9f9oslk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 May 2025 16:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:c0:b8:6d:a7:64:48:58:92:9d:72:b0:20:42:da:7c:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc44297e9271c6edf064915f6180ae12690dda8b Validity Not Before: May 11 19:00:34 2025 GMT Not After : May 12 19:00:34 2025 GMT Subject: CN=2060ca81f81efbdf2e5a4fc6e7b37152468718a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f2:43:6f:7e:fe:25:c6:95:4b:5d:99:8e:95: eb:ce:30:43:52:0e:74:2a:9d:52:ea:e5:47:9a:8e: dc:03:fe:75:54:45:01:a0:75:29:04:1d:dd:0a:92: 8b:dc:84:02:45:68:fd:10:1e:3f:6c:09:84:98:92: 02:47:41:43:e3:b0:b9:8a:2d:1e:e3:9c:79:73:5d: 9c:d1:61:d5:20:8b:d3:af:16:55:f2:73:7d:52:24: ce:4e:74:da:3d:1a:93:e8:25:45:91:b4:52:52:43: 6e:4c:8e:0d:85:9d:4c:c0:14:ee:d8:65:b3:21:4d: e6:d7:71:a8:3b:34:6b:4f:cd:8b:fc:16:c2:2d:56: 20:65:f3:31:9f:3f:a8:41:22:9b:2c:11:02:9a:46: 33:21:67:fb:6b:64:97:1f:f8:5d:f4:2f:55:ce:de: c9:28:ee:8a:0f:e5:e9:a8:e9:7a:31:1d:b0:7e:bd: 9f:b3:71:c3:3b:69:5e:85:a4:12:6f:49:5c:49:e0: 7e:3d:06:78:67:37:29:45:47:2e:41:5e:f1:43:6e: e2:7f:18:6a:e7:1c:be:c0:24:28:74:34:fd:48:f9: 3d:73:fc:10:32:ff:f0:50:4c:6a:b9:e6:b2:53:4a: 10:cd:cd:42:db:7b:de:3a:33:c4:05:23:08:27:72: 4a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:60:CA:81:F8:1E:FB:DF:2E:5A:4F:C6:E7:B3:71:52:46:87:18:A7 X509v3 Authority Key Identifier: keyid:FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:d7:75:82:93:d6:5b:cc:8a:92:84:aa:71:6e:88:be:67:79: 82:a5:3a:e5:40:e5:84:cb:3c:68:3f:72:a9:42:a1:2e:3b:60: 70:9c:68:73:23:45:cd:3f:73:5a:b0:18:88:ed:5e:14:50:e3: d8:e1:58:a6:77:79:e6:6b:35:60:d8:26:c0:d9:0d:e4:5d:3a: fc:98:60:d1:ac:73:a8:f8:08:df:41:c8:8c:4d:4b:52:e3:83: cd:94:68:be:84:e0:35:95:2e:20:27:c3:a6:ee:ad:39:9f:92: 18:74:09:29:b0:76:9c:24:69:62:e7:c1:d5:a3:4b:7c:64:5b: 54:1e:6d:2d:01:c2:d3:3b:40:b0:54:60:87:c9:1e:77:aa:e8: 89:e0:4a:08:3d:bb:f8:77:4d:66:fb:e2:91:35:7d:50:99:cd: e9:48:c9:8a:c0:79:e1:69:17:5e:59:be:e7:ab:17:60:bd:8c: 86:66:f2:79:96:0c:4f:79:3c:3c:35:a9:ce:7f:9a:6c:22:f9: 94:1c:bf:30:05:e4:f1:74:08:a9:3e:27:7b:5f:a0:1f:ee:c2: 24:24:84:d0:1a:a4:18:4a:60:93:c6:5b:9b:d5:82:3f:36:ef: 0e:a7:17:c5:c9:63:e8:fe:6a:63:b2:f6:d9:43:cb:34:83:23: 88:e1:8d:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZbAuG2nZEhYkp1ysCBC2nyIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjNDQyOTdlOTI3MWM2ZWRmMDY0OTE1ZjYxODBhZTEyNjkw ZGRhOGIwHhcNMjUwNTExMTkwMDM0WhcNMjUwNTEyMTkwMDM0WjAzMTEwLwYDVQQD EygyMDYwY2E4MWY4MWVmYmRmMmU1YTRmYzZlN2IzNzE1MjQ2ODcxOGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PJDb37+JcaVS12ZjpXrzjBDUg50 Kp1S6uVHmo7cA/51VEUBoHUpBB3dCpKL3IQCRWj9EB4/bAmEmJICR0FD47C5ii0e 45x5c12c0WHVIIvTrxZV8nN9UiTOTnTaPRqT6CVFkbRSUkNuTI4NhZ1MwBTu2GWz IU3m13GoOzRrT82L/BbCLVYgZfMxnz+oQSKbLBECmkYzIWf7a2SXH/hd9C9Vzt7J KO6KD+XpqOl6MR2wfr2fs3HDO2lehaQSb0lcSeB+PQZ4ZzcpRUcuQV7xQ27ifxhq 5xy+wCQodDT9SPk9c/wQMv/wUExqueayU0oQzc1C23veOjPEBSMIJ3JK+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCBgyoH4HvvfLlpPxuezcVJGhxinMB8GA1UdIwQY MBaAFPxEKX6Sccbt8GSRX2GArhJpDdqLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0VRcGZwSnh4dTN3WkpGZllZQ3VFbWtOMm9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi83Y2IxNzktYWQyYy00ODI0LWExZTUt YWUwN2YzMmU0MTAyLzEvX0VRcGZwSnh4dTN3WkpGZllZQ3VFbWtOMm9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi83Y2IxNzktYWQyYy00ODI0LWExZTUtYWUwN2YzMmU0MTAy LzEvX0VRcGZwSnh4dTN3WkpGZllZQ3VFbWtOMm9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVNd1gpPW W8yKkoSqcW6Ivmd5gqU65UDlhMs8aD9yqUKhLjtgcJxocyNFzT9zWrAYiO1eFFDj 2OFYpnd55ms1YNgmwNkN5F06/Jhg0axzqPgI30HIjE1LUuODzZRovoTgNZUuICfD pu6tOZ+SGHQJKbB2nCRpYufB1aNLfGRbVB5tLQHC0ztAsFRgh8ked6roieBKCD27 +HdNZvvikTV9UJnN6UjJisB54WkXXlm+56sXYL2MhmbyeZYMT3k8PDWpzn+abCL5 lBy/MAXk8XQIqT4ne1+gH+7CJCSE0BqkGEpgk8Zbm9WCPzbvDqcXxclj6P5qY7L2 2UPLNIMjiOGN/Q== -----END CERTIFICATE-----Generated at Sun May 11 23:27:46 2025 by rpki-client