$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.mft File: sLWoCnEG4KS4VFyBULtyxpn8yaA.mft (raw, json) Hash identifier: /iLpQBcz+XfwwbXCIWkYq6k0oFVtn3gJRBRRUrgCbqY= Subject key identifier: 98:21:F7:09:1A:32:10:F6:9A:2F:B7:E1:51:60:9F:49:D0:BA:B4:E9 Authority key identifier: B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0 Certificate issuer: /CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0 Certificate serial: 0196BF0127DF30763894F20A3842A7E39A34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.mft Manifest number: 1552 Signing time: Sun 11 May 2025 11:00:45 +0000 Manifest this update: Sun 11 May 2025 11:00:45 +0000 Manifest next update: Mon 12 May 2025 11:00:45 +0000 Files and hashes: 1: 60jG5Ay8pKNRLAaYiabGAbMAWcU.roa (hash: mGDjXdclRD6cM00fzezmu8njPZGu0i86EMmzQCWdsaI=) 2: 8NknCKB4mqEufbZ6UbHgAa8xKGk.roa (hash: +VuXhmjH2zdhVZOeQIf+1XfhIBEvtUJA5CNUFP6jbIc=) 3: Cwb1KDzjyZP06ERQCkOqE8eDn-Q.roa (hash: qEbiLSfggbr/wcV1CfVb4G8sOcwZPVPdEo2xFZT7GWw=) 4: M4GvrNf8uqUm8NINVMsgeY-dZpg.roa (hash: JFzR2ZsY7nrJvXYkxcf00jQkDAoE9ASXG53ZH1eILBw=) 5: XXx0PZbW0VSnHcKqWvct0KGeX5o.roa (hash: fg2kYbNMaJFsDmSVzEYMa+3owPgOnqiysynI+fCXGgg=) 6: XqyfpygCBb8Q3tIPPqdoPK94M0A.roa (hash: 2VTgMTAP00AWrF9/qszpE/dPLTmJ6fjO0h7TyCaHdtE=) 7: d5wYN4sqYmgKKKUN9X-8jp9PKTs.roa (hash: /7Xb7BgMP/VziPk4Q/U+uMUdmAyttT7O93i5sL6urDU=) 8: i1CU3OfnjKON64QGCajnRU5gSS0.roa (hash: YY36Gemk4OiepX/UrPW7HzLvQewBOeW3gkIiItZgQz8=) 9: jU-enqBlwHSK5LFQUkQMv3mnQ3c.roa (hash: XGjlZdDrp7Q05Es+vT4dQhjxGrAgZ9KHZykl/3VpHuk=) 10: rgPd-lPBT_KjoGNurNCPr8-tYLM.roa (hash: 7UFfmlghHed6gv5YUhlj2bi7/Km6EbVr9jqYqXUYH8o=) 11: sLWoCnEG4KS4VFyBULtyxpn8yaA.crl (hash: deIOx4pPiPDN3DcluWfJmaXnF1A8yVGUaorNI056cjs=) 12: uYQNZGrXH6jilfHVW7M6-uKjZF8.roa (hash: K7dbhIw3GKL8CpYsfdoECZtVDjcGxNIlpZxMSzxg0fc=) 13: zad7TKoNmHhoc0CyHOzgSXKr6f4.roa (hash: LQ6zogTRTgGoz9vqyWdA5yZND4PDb2ytjo7mWtS7rF8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.mft rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 May 2025 07:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:bf:01:27:df:30:76:38:94:f2:0a:38:42:a7:e3:9a:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0 Validity Not Before: May 11 11:00:45 2025 GMT Not After : May 12 11:00:45 2025 GMT Subject: CN=9821f7091a3210f69a2fb7e151609f49d0bab4e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:72:05:1a:cc:be:45:1b:4a:d7:f4:77:b7:f0: 57:f5:d2:0d:a6:b1:20:1d:ec:1f:95:dd:0f:8b:12: da:4e:80:ae:1f:aa:6e:06:8c:e9:62:96:90:0d:5d: bc:40:55:7b:77:26:da:8e:a6:82:60:58:60:fe:b6: bf:6d:0e:c1:44:75:f7:c9:0e:c7:65:76:f5:6e:8a: 48:60:e9:c3:ca:fc:1e:61:4c:58:4f:60:71:e5:80: 50:41:ba:fc:cf:2c:e6:c9:95:5e:92:1f:29:fe:fd: d7:04:35:2e:d0:70:cf:81:16:91:6b:86:99:e5:bc: 7d:fb:bf:ea:bf:cc:bc:0b:d5:86:d9:45:43:34:c0: aa:b0:a5:b6:61:93:dd:89:5a:f7:2f:cb:45:fa:7b: 7c:ec:b8:cd:17:5f:e5:9a:f5:96:3c:88:4e:62:4b: bd:ed:99:f0:38:10:29:e7:80:5f:ae:90:da:14:58: 2a:15:d5:9d:a5:21:06:c8:9f:ce:15:42:ec:80:f0: de:2e:29:dc:14:ad:83:13:bc:99:86:c7:99:02:cf: ea:3c:52:bd:a0:4a:5d:a4:51:ae:fb:f2:d7:d3:cf: 33:03:f9:a3:9e:4a:25:33:c6:bc:25:77:40:95:11: 05:89:52:3f:1d:77:f8:c3:97:1d:1d:81:b7:5b:f4: cf:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:21:F7:09:1A:32:10:F6:9A:2F:B7:E1:51:60:9F:49:D0:BA:B4:E9 X509v3 Authority Key Identifier: keyid:B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:16:f8:ed:98:7d:24:b9:f8:20:ac:9b:4e:c1:94:d8:be:10: 1a:a8:00:ae:09:2f:4f:3b:96:42:6b:e3:ea:f6:b2:58:b6:70: 85:80:1d:51:11:7a:32:8c:b9:47:19:82:25:e2:24:dc:84:95: c2:41:86:18:0b:f6:6f:1e:ff:9c:95:c1:b0:1f:80:56:8d:73: 45:f6:66:96:1f:43:cf:dc:96:ab:be:82:c4:96:ca:f6:dd:b2: 03:f6:87:74:f4:e9:5c:d1:47:1a:d0:89:38:98:79:2d:56:32: 5d:48:33:b0:0d:8d:80:25:d4:59:aa:f5:e1:c5:d1:65:96:66: b0:77:cb:79:04:ed:04:33:6b:f8:fd:08:62:aa:7b:dc:85:44: 54:77:7d:63:9f:d6:70:bd:47:68:fb:91:24:b5:04:dc:cb:d8: 49:b9:4b:f3:68:0d:63:0a:53:96:4c:52:86:3f:ad:2e:b8:86: cb:68:22:a0:c7:33:1f:eb:b1:42:57:84:27:f7:9f:9c:31:12: 68:7f:d2:22:9c:d1:10:d6:b1:fa:57:e5:ad:02:17:29:7a:de: 03:e2:61:87:02:a1:3b:b0:31:d9:15:88:92:84:7e:86:a8:76: d8:d1:4f:e3:98:b1:ad:7c:c2:62:65:d2:b6:5d:b9:ab:9c:5b: 6c:98:59:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa/ASffMHY4lPIKOEKn45o0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYjVhODBhNzEwNmUwYTRiODU0NWM4MTUwYmI3MmM2OTlm Y2M5YTAwHhcNMjUwNTExMTEwMDQ1WhcNMjUwNTEyMTEwMDQ1WjAzMTEwLwYDVQQD Eyg5ODIxZjcwOTFhMzIxMGY2OWEyZmI3ZTE1MTYwOWY0OWQwYmFiNGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHIFGsy+RRtK1/R3t/BX9dINprEg Hewfld0PixLaToCuH6puBozpYpaQDV28QFV7dybajqaCYFhg/ra/bQ7BRHX3yQ7H ZXb1bopIYOnDyvweYUxYT2Bx5YBQQbr8zyzmyZVekh8p/v3XBDUu0HDPgRaRa4aZ 5bx9+7/qv8y8C9WG2UVDNMCqsKW2YZPdiVr3L8tF+nt87LjNF1/lmvWWPIhOYku9 7ZnwOBAp54BfrpDaFFgqFdWdpSEGyJ/OFULsgPDeLincFK2DE7yZhseZAs/qPFK9 oEpdpFGu+/LX088zA/mjnkolM8a8JXdAlREFiVI/HXf4w5cdHYG3W/TP5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJgh9wkaMhD2mi+34VFgn0nQurTpMB8GA1UdIwQY MBaAFLC1qApxBuCkuFRcgVC7csaZ/MmgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0xXb0NuRUc0S1M0VkZ5QlVMdHl4cG44eWFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9mMTUzZGMtY2JmYi00YTRmLTgwZDIt NzQ1ZTA4ZmU1OGM2LzEvc0xXb0NuRUc0S1M0VkZ5QlVMdHl4cG44eWFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9mMTUzZGMtY2JmYi00YTRmLTgwZDItNzQ1ZTA4ZmU1OGM2 LzEvc0xXb0NuRUc0S1M0VkZ5QlVMdHl4cG44eWFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOxb47Zh9 JLn4IKybTsGU2L4QGqgArgkvTzuWQmvj6vayWLZwhYAdURF6Moy5RxmCJeIk3ISV wkGGGAv2bx7/nJXBsB+AVo1zRfZmlh9Dz9yWq76CxJbK9t2yA/aHdPTpXNFHGtCJ OJh5LVYyXUgzsA2NgCXUWar14cXRZZZmsHfLeQTtBDNr+P0IYqp73IVEVHd9Y5/W cL1HaPuRJLUE3MvYSblL82gNYwpTlkxShj+tLriGy2gioMczH+uxQleEJ/efnDES aH/SIpzRENax+lflrQIXKXreA+JhhwKhO7Ax2RWIkoR+hqh22NFP45ixrXzCYmXS tl25q5xbbJhZ4A== -----END CERTIFICATE-----Generated at Sun May 11 17:05:48 2025 by rpki-client