$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft File: CjfYB9T3zdPgr-SryO5aiAxgkPE.mft (raw, json) Hash identifier: Xs5alclxAC2pYkSVk+dR7drvYz4WvpmfUldPgMR2Qhg= Subject key identifier: E6:96:6A:F0:28:00:96:48:61:5E:A4:4E:38:56:29:27:70:C5:B7:81 Authority key identifier: 0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1 Certificate issuer: /CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1 Certificate serial: 0196BE935E130C05A1E6091BCC52B27594C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft Manifest number: 153E Signing time: Sun 11 May 2025 09:00:50 +0000 Manifest this update: Sun 11 May 2025 09:00:50 +0000 Manifest next update: Mon 12 May 2025 09:00:50 +0000 Files and hashes: 1: CjfYB9T3zdPgr-SryO5aiAxgkPE.crl (hash: EV0+qxDBHFwUTe4wzk+t0rIRMmOpyFxDVTYLYjk0nMY=) 2: FNMboaNFS4dq_J98ARIGXoPZgMk.roa (hash: g+DjQQe5PR9O6yvqsBwCFmOG/XGs/TtjlyZg5KiU2nw=) 3: Kd7tkS6D6OIC_ttNItP7c_fNa-k.roa (hash: N1BVy/KuUFpEDCoGKJGNcVR+kViJHNXU5UmQd9NSKDM=) 4: ZSplNm_9GeMJ-OaOGXwYKQxixBM.roa (hash: iyy46lwnRVbko1Ii+0Qc3g2qVyE+yV7nOcFx1D7pckk=) 5: bljFw_6M0rhdvdyihFkoTkuQtkQ.roa (hash: c38udhGlPf0mBbFYPwiBR6YW6q0bRhJQiglvxGlNEOE=) 6: cCAi-yLWOl7KTLvjcgv4I9u3nD8.roa (hash: pzgBJKQlY+wSbZatuzP8YX/UnGaDdO5COchDt+eC4hU=) 7: grw1j9-8samWWiChPkyufP-sl-E.roa (hash: NBZBfXg3sE94wmS64tQlSrQjbH2DFUT/GlOy2NVgQiI=) 8: gtPZlYI7w3coAzc-MlHuuU1oFOM.roa (hash: kHvdU6CJOqssI35/ez8kLYqLbyhabXcTkrkqWWbKmw8=) 9: mId092quyOB83VO8NTOLuLTrwCU.roa (hash: 4ZYjaMOtkO7JVCo9djGezfRPkTYQYlB89pHbn+Vlkh4=) 10: u0jBRb9Z9H3ccoDY49s5ChaWPsY.roa (hash: LuRfHIMnClX5LQuIAIIT+Sg8y8Bhb70AVLwndT4yCAQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 May 2025 07:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:be:93:5e:13:0c:05:a1:e6:09:1b:cc:52:b2:75:94:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1 Validity Not Before: May 11 09:00:50 2025 GMT Not After : May 12 09:00:50 2025 GMT Subject: CN=e6966af028009648615ea44e3856292770c5b781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bd:30:ef:0c:c0:4e:50:bf:91:61:af:91:01: 5b:01:6b:36:8c:dd:79:68:13:4e:3c:d6:7a:a3:c5: 56:9d:64:ac:02:83:e2:a2:db:b8:48:1b:6b:59:66: d7:ef:0e:61:50:79:d9:f3:d6:de:4b:e0:4a:bc:fc: 74:77:cb:db:69:17:0c:af:b1:72:8e:7e:5c:e3:17: 97:d4:fd:ef:a7:07:67:4a:9a:90:c6:35:2d:4a:dc: af:e0:78:bc:b2:3a:60:22:4b:82:af:e9:5d:b2:ce: b7:6a:c7:c4:01:6e:5b:4f:5c:14:4b:da:cb:0a:3c: 55:07:ed:a0:4f:70:95:38:c7:67:06:68:e2:4c:65: fe:fa:fc:7c:ad:96:3b:e9:47:fa:06:0d:6f:47:db: cb:d9:95:1f:91:ac:07:10:20:ca:32:1e:f3:7a:0e: b2:a0:02:a0:71:16:f0:94:9c:2b:65:76:b5:ab:bb: a8:57:fe:70:c9:aa:5f:fc:9f:2d:a5:dc:48:33:c8: f5:1f:eb:85:42:de:c4:ed:2d:de:51:e1:9a:33:1e: ee:de:3a:ed:c8:04:64:ef:95:de:0d:62:17:60:44: 73:5b:00:40:64:a1:6d:f4:72:7d:da:33:b6:4e:23: 0f:fd:0c:59:7e:e2:8e:a8:5a:80:a7:f7:87:1d:ec: c9:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:96:6A:F0:28:00:96:48:61:5E:A4:4E:38:56:29:27:70:C5:B7:81 X509v3 Authority Key Identifier: keyid:0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:dc:1c:2b:e9:d5:39:eb:d0:00:18:43:34:32:e4:7a:9d:a2: 80:03:df:fd:87:a3:3e:35:f6:84:1b:9f:7a:82:26:8b:ee:a5: a5:7b:5c:c5:12:ae:67:f1:0d:1e:30:83:65:77:0f:86:e3:c3: 3d:af:7b:bf:9d:e5:ac:07:03:3d:6c:18:d7:dc:10:d9:39:64: dc:27:55:d5:10:e9:96:6d:54:d1:a0:6b:3a:59:1d:7a:d0:a8: 53:ca:13:cd:95:26:98:1e:97:71:96:19:bf:e8:cf:f3:f5:14: 25:3d:9a:e0:7c:73:83:6d:8b:41:3f:71:ac:8a:7e:70:74:c4: ec:90:bd:91:2e:89:e2:76:44:b3:48:c0:b6:d9:1c:87:45:c5: 6e:b4:cd:7f:b3:77:3d:7e:5e:8b:fe:b1:ae:d0:f3:f0:3b:0e: e2:11:4a:60:84:f2:fa:2f:c0:68:57:d1:fe:15:8f:62:46:50: e7:f2:08:e1:7f:66:a4:47:ee:24:8b:f7:1b:a1:b8:de:dd:a6: ac:d3:e3:2c:30:09:c2:c9:46:8f:4c:61:52:ea:04:9a:2a:64: 48:0f:2d:1b:73:20:36:94:b0:c5:af:29:2a:5a:57:0b:26:02: 61:78:58:43:6d:f1:95:b9:12:81:24:28:7f:40:c4:89:40:f0: 8f:cc:cc:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa+k14TDAWh5gkbzFKydZTJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMzdkODA3ZDRmN2NkZDNlMGFmZTRhYmM4ZWU1YTg4MGM2 MDkwZjEwHhcNMjUwNTExMDkwMDUwWhcNMjUwNTEyMDkwMDUwWjAzMTEwLwYDVQQD EyhlNjk2NmFmMDI4MDA5NjQ4NjE1ZWE0NGUzODU2MjkyNzcwYzViNzgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqb0w7wzATlC/kWGvkQFbAWs2jN15 aBNOPNZ6o8VWnWSsAoPiotu4SBtrWWbX7w5hUHnZ89beS+BKvPx0d8vbaRcMr7Fy jn5c4xeX1P3vpwdnSpqQxjUtStyv4Hi8sjpgIkuCr+ldss63asfEAW5bT1wUS9rL CjxVB+2gT3CVOMdnBmjiTGX++vx8rZY76Uf6Bg1vR9vL2ZUfkawHECDKMh7zeg6y oAKgcRbwlJwrZXa1q7uoV/5wyapf/J8tpdxIM8j1H+uFQt7E7S3eUeGaMx7u3jrt yARk75XeDWIXYERzWwBAZKFt9HJ92jO2TiMP/QxZfuKOqFqAp/eHHezJUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOaWavAoAJZIYV6kTjhWKSdwxbeBMB8GA1UdIwQY MBaAFAo32AfU983T4K/kq8juWogMYJDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9iYzI2OGQtNjFmMC00NzFmLWFhYjkt ODAwZWRhMmNmYjM2LzEvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9iYzI2OGQtNjFmMC00NzFmLWFhYjktODAwZWRhMmNmYjM2 LzEvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGdwcK+nV OevQABhDNDLkep2igAPf/YejPjX2hBufeoImi+6lpXtcxRKuZ/ENHjCDZXcPhuPD Pa97v53lrAcDPWwY19wQ2Tlk3CdV1RDplm1U0aBrOlkdetCoU8oTzZUmmB6XcZYZ v+jP8/UUJT2a4Hxzg22LQT9xrIp+cHTE7JC9kS6J4nZEs0jAttkch0XFbrTNf7N3 PX5ei/6xrtDz8DsO4hFKYITy+i/AaFfR/hWPYkZQ5/II4X9mpEfuJIv3G6G43t2m rNPjLDAJwslGj0xhUuoEmipkSA8tG3MgNpSwxa8pKlpXCyYCYXhYQ23xlbkSgSQo f0DEiUDwj8zMkw== -----END CERTIFICATE-----Generated at Sun May 11 13:54:17 2025 by rpki-client