$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft File: 1DdYFDRN8L9tAXczrNxIjwAmMbI.mft (raw, json) Hash identifier: SkA//hItE29I8eECkZhLm32OiDfOiQKw22Bqk+UjuD0= Subject key identifier: 20:1F:BC:E1:EE:37:B9:6F:55:40:A8:57:86:F6:75:53:A1:BF:E8:96 Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2 Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2 Certificate serial: 0196BD80A15E09C9FCC6930D9643FBB1B959 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft Manifest number: 154F Signing time: Sun 11 May 2025 04:00:45 +0000 Manifest this update: Sun 11 May 2025 04:00:45 +0000 Manifest next update: Mon 12 May 2025 04:00:45 +0000 Files and hashes: 1: 1DdYFDRN8L9tAXczrNxIjwAmMbI.crl (hash: SvXRcsi2+JvZuV4ncdrvPyeB76e4nu+6074TIALdYlM=) 2: Dx5FhBrZZELGzOEoOYjOQgEtqO0.roa (hash: KCgCEgctUS7Rpr5Y2lyKXbnXeeBrDbnuOsvXdWPfJZo=) 3: KQPVZjd8uXoJ_0dV4AjDeWiqQQI.roa (hash: 9hWXYGll9zn/YFmZU7mBxZ+s82nTPV++un3qIDJzhn0=) 4: KiHM655f38tlRDuTKUKhZarH3cQ.roa (hash: DesJG/l9Po0CCy0ULE0mL9VGWvENzCQXp94ltpb8KIE=) 5: TU-pNgBZBmjZJy6cvCLq3hsqXqo.roa (hash: IurjiHHpmFVL5GOkWmRoizqX2Oq069GXNpmvPbK0lRE=) 6: atn5vU-LUDLVuG9_jCJwAEGbEYc.roa (hash: Se1mBbI1MkbJDFobm6H8aQSyPPadkVuTf7O6JGFke8o=) 7: brY4nnZyBTnIJY3z6C6ymKubOY0.roa (hash: pc5OYc6oXnHxBvDdnE06MSd2CPJ6fIkq22aelBFfNl8=) 8: e6SEtk0abHJpIIPSZrkKDZg95R0.roa (hash: kM/7bJruXzijo8AO7ozJ/bVJBpuUfOvwamojNF2t4fk=) 9: eG6lGs3HW3538S6xf6efhbiNBwU.roa (hash: EljzBa62R9WVgp11mW3s0fULx5478xnOUnHVwm+wE7Y=) 10: seE_QBv0ygPjzgaL3rSesYLY_0A.roa (hash: a0LlQt6AmApHnlV4lK2J/7kzRpmbLO4Rryqmz0kEEGc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 May 2025 04:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:bd:80:a1:5e:09:c9:fc:c6:93:0d:96:43:fb:b1:b9:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2 Validity Not Before: May 11 04:00:45 2025 GMT Not After : May 12 04:00:45 2025 GMT Subject: CN=201fbce1ee37b96f5540a85786f67553a1bfe896 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:dd:18:fb:df:f0:e4:e6:01:54:3e:dd:45:80: c4:16:92:97:43:32:fb:cf:62:af:79:de:ba:68:8d: 2c:47:fb:b4:b0:8a:3b:c9:68:e0:99:3c:c8:e5:86: 15:c2:6a:88:ba:89:05:d0:6e:da:67:35:8b:be:d6: 45:7f:d6:37:b5:ce:7c:fc:f1:4e:32:88:6f:12:76: d8:c2:d7:c9:d6:60:b2:34:0a:de:34:40:d3:46:3e: 3a:2f:3c:e9:a7:43:04:6d:59:15:58:d8:9f:64:ce: 4a:23:13:b0:71:f0:06:01:64:b7:b7:78:91:3a:05: 23:57:9b:c8:8d:ee:fc:d8:40:09:75:cf:e9:62:47: 80:75:a0:ea:86:d7:cb:96:c1:ff:4a:18:8b:21:15: 5a:f0:80:dc:48:d0:1f:30:c7:e2:b2:86:4d:88:5c: 33:ab:bc:1b:73:c8:66:9e:b9:2d:8a:3a:64:a2:00: 81:cf:cb:7c:55:d8:ec:ff:bd:cf:5a:93:09:80:06: f1:24:39:f8:7d:69:ca:2d:dc:9a:b5:c4:fc:65:ae: 97:c4:75:52:09:37:d3:38:f9:46:b6:e1:d8:d3:6e: 6f:36:20:1e:a5:b7:9f:f5:52:e8:43:9b:01:c9:2a: 3c:9f:1a:ac:c7:4e:81:c5:91:5d:c5:5c:2e:6d:0c: 4c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:1F:BC:E1:EE:37:B9:6F:55:40:A8:57:86:F6:75:53:A1:BF:E8:96 X509v3 Authority Key Identifier: keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:cf:f2:ba:f1:b9:24:8f:9e:f7:b6:75:d4:30:6f:ca:69:a4: 53:bf:f6:a8:19:27:54:be:bf:37:0c:12:da:c7:cc:af:18:38: 2f:bb:7a:ad:47:d6:52:dc:d4:fc:09:ec:e7:0c:75:04:bd:94: d4:d7:70:c1:98:87:2e:d0:da:8d:33:57:7b:4f:06:9c:a2:e1: 08:f4:11:a3:ea:29:c8:17:1c:06:6a:3f:38:a4:5c:8f:5f:d4: a3:81:be:42:17:22:48:b9:35:b9:79:85:ba:b1:82:4e:c0:27: d1:8d:46:61:e9:9d:81:93:ac:33:e6:0a:28:a2:ec:e0:2f:33: 5f:ff:8d:ec:67:b4:b8:a4:04:de:39:91:dd:f9:5e:86:a0:21: f1:6b:ae:a2:3b:ad:32:db:c6:29:59:9c:6c:71:6b:0d:5f:e7: 9f:63:03:c0:a8:c8:a0:f3:6b:e3:e9:04:50:68:4c:92:35:ea: ee:f4:1a:bc:6f:b9:5b:91:cc:cd:cb:bd:94:41:7c:11:8f:af: e7:20:a2:22:2e:59:07:58:12:e9:bc:b1:7f:b1:c4:9d:4a:fe: 55:a4:2c:41:98:d9:ee:6f:e5:8c:23:1c:2a:59:33:87:75:85: 36:3e:1a:03:11:aa:c9:4f:3c:10:33:7d:67:43:8b:ce:c3:72: 5e:1a:9f:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa9gKFeCcn8xpMNlkP7sblZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Mzc1ODE0MzQ0ZGYwYmY2ZDAxNzczM2FjZGM0ODhmMDAy NjMxYjIwHhcNMjUwNTExMDQwMDQ1WhcNMjUwNTEyMDQwMDQ1WjAzMTEwLwYDVQQD EygyMDFmYmNlMWVlMzdiOTZmNTU0MGE4NTc4NmY2NzU1M2ExYmZlODk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxd0Y+9/w5OYBVD7dRYDEFpKXQzL7 z2Kved66aI0sR/u0sIo7yWjgmTzI5YYVwmqIuokF0G7aZzWLvtZFf9Y3tc58/PFO MohvEnbYwtfJ1mCyNAreNEDTRj46Lzzpp0MEbVkVWNifZM5KIxOwcfAGAWS3t3iR OgUjV5vIje782EAJdc/pYkeAdaDqhtfLlsH/ShiLIRVa8IDcSNAfMMfisoZNiFwz q7wbc8hmnrktijpkogCBz8t8Vdjs/73PWpMJgAbxJDn4fWnKLdyatcT8Za6XxHVS CTfTOPlGtuHY025vNiAepbef9VLoQ5sBySo8nxqsx06BxZFdxVwubQxMWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCAfvOHuN7lvVUCoV4b2dVOhv+iWMB8GA1UdIwQY MBaAFNQ3WBQ0TfC/bQF3M6zcSI8AJjGyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMURkWUZEUk44TDl0QVhjenJOeElqd0FtTWJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9iMjRiMmQtMzUyMy00MjJlLTliY2Yt MzY3MWQ2N2ViOWY4LzEvMURkWUZEUk44TDl0QVhjenJOeElqd0FtTWJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9iMjRiMmQtMzUyMy00MjJlLTliY2YtMzY3MWQ2N2ViOWY4 LzEvMURkWUZEUk44TDl0QVhjenJOeElqd0FtTWJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbs/yuvG5 JI+e97Z11DBvymmkU7/2qBknVL6/NwwS2sfMrxg4L7t6rUfWUtzU/Ans5wx1BL2U 1NdwwZiHLtDajTNXe08GnKLhCPQRo+opyBccBmo/OKRcj1/Uo4G+QhciSLk1uXmF urGCTsAn0Y1GYemdgZOsM+YKKKLs4C8zX/+N7Ge0uKQE3jmR3flehqAh8Wuuojut MtvGKVmcbHFrDV/nn2MDwKjIoPNr4+kEUGhMkjXq7vQavG+5W5HMzcu9lEF8EY+v 5yCiIi5ZB1gS6byxf7HEnUr+VaQsQZjZ7m/ljCMcKlkzh3WFNj4aAxGqyU88EDN9 Z0OLzsNyXhqfuQ== -----END CERTIFICATE-----Generated at Sun May 11 10:21:27 2025 by rpki-client