$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft File: SeFL929C2k8qwAOmxp1hwjIOLNg.mft (raw, json) Hash identifier: J8IGqjA1zVWq2dc82ZSWm/QRXHaijbCVnsT5h1mheDA= Subject key identifier: F8:6B:18:5A:F7:C6:EF:6C:A1:C2:80:B9:E1:F1:E0:E2:96:47:0C:52 Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8 Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8 Certificate serial: 0196ACFAAA3A10EEDBA9C15EBAADD3EA3041 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft Manifest number: 0F9A Signing time: Wed 07 May 2025 23:00:30 +0000 Manifest this update: Wed 07 May 2025 23:00:30 +0000 Manifest next update: Thu 08 May 2025 23:00:30 +0000 Files and hashes: 1: 1JBbxjT9LW1M45TfUBltflWXjYo.roa (hash: +kWM+UT9oOWnxVo332YivS+2g4/PD34pohQWp5gFo5E=) 2: Ns_2WTykJXWBKeAZy8ZQQTGIZ4g.roa (hash: zHFP35lrOV5ykmqGRdLeDFScFpQtr+Xab1k7m30xSdw=) 3: OANXXNT4d7OJ6o497Ctf48xykTY.roa (hash: aZ2NtskCeNGxotOVm0/S/doAkEWhZqM1q8mtGb9yHS0=) 4: RI77ZK3aqTLPg2W-XBkxR7T7p4Q.roa (hash: nk2g70SgrOg1E7ZHO+z50BOPQEJsdzJ7hk5jt1A6+b0=) 5: SeFL929C2k8qwAOmxp1hwjIOLNg.crl (hash: rbaJ3RWkSqUhGlsdcsaA7Z1zgrBrBL/s5cj9qUtWgP4=) 6: X6bDse8LmUftPmqQf4kw_btsOvE.roa (hash: j651kWeKBdPGwLMPF+EPghkkL3051eJwiT7QuhCps4o=) 7: _GcWVg1NloetvFlVnnsXCsqW9jA.roa (hash: 8fDT+HFMs22XfNV5rWe49DrDAkwxKtbv8tRmabSl16Q=) 8: h6nXxCojgmG6H44QUolSl46rG3Q.roa (hash: Jg0E3EWR0gqOThcjNWzxcD0juv44xUicy/wOavdwVH4=) 9: kLzXL1ZkV5i7SczjHie-nPdTakk.roa (hash: KSQB5UsbV0dtTyrjqQ8bJx4qGPsJFrVxBc1ZJaVStDg=) 10: zGWw5y3QtBedo3lJVh0hQTzv87w.roa (hash: LJqgZZZrONstDDkOQIUQr4bq2xXQX5fdOe5gdv77tuI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 May 2025 20:38:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:ac:fa:aa:3a:10:ee:db:a9:c1:5e:ba:ad:d3:ea:30:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8 Validity Not Before: May 7 23:00:30 2025 GMT Not After : May 8 23:00:30 2025 GMT Subject: CN=f86b185af7c6ef6ca1c280b9e1f1e0e296470c52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3d:6d:05:14:89:22:03:d3:28:f9:07:27:c7: 97:27:2f:27:2a:7b:1c:c7:88:37:c0:62:d8:9a:f5: 42:f8:9f:bc:ce:30:c3:47:46:af:7b:0c:15:25:9b: 14:02:48:f9:37:83:48:e1:7d:1c:75:27:b9:dc:f1: a0:38:8b:59:95:a7:43:c5:f2:ba:3d:d1:ae:b0:a2: da:36:ee:3f:14:e2:5b:08:fb:d6:c1:7f:b3:3c:14: b0:a3:5e:f4:dc:8f:f0:47:b7:b2:84:27:1f:10:36: ce:49:3a:3f:73:52:e8:85:d9:6d:fe:66:a6:ce:09: 1e:5c:5f:54:18:4a:bf:98:e6:98:3e:90:ec:fe:3f: 97:1d:19:af:a2:33:43:9f:ee:7e:ff:cb:7e:3b:6f: e1:53:53:86:09:d1:73:89:21:41:b0:97:e3:6c:92: 9d:45:75:7e:c4:7f:5c:dd:01:72:b4:27:f7:48:7f: 14:97:79:ab:f3:d6:c3:5c:36:2e:42:61:34:1d:8e: ed:4f:4c:c0:5a:03:fe:67:ee:4c:97:a9:a9:b3:36: c8:20:61:a1:8a:80:d6:38:87:1b:9f:8e:fb:c4:93: dd:de:23:48:d2:57:30:cd:dd:e1:46:99:99:b4:5b: d2:30:7c:55:8f:bb:7c:92:d0:21:40:fd:17:07:7d: d0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:6B:18:5A:F7:C6:EF:6C:A1:C2:80:B9:E1:F1:E0:E2:96:47:0C:52 X509v3 Authority Key Identifier: keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:8b:32:2a:ae:a9:53:53:a1:9c:02:f9:34:db:13:40:fe:65: 73:05:cd:8b:03:d6:59:e7:83:41:48:04:f6:5c:a4:ef:9d:40: 36:9d:df:9c:4a:f3:ac:e3:a8:dc:9d:1b:e5:a3:08:2f:42:a1: 3b:e9:b6:a8:c4:ac:6f:89:c7:5e:ad:b7:a4:a6:af:07:78:9d: 80:56:a3:1d:9a:13:b7:35:12:e9:bf:19:35:ae:21:aa:93:20: 83:87:94:23:cf:97:72:b4:bf:79:e9:a2:71:1b:2a:91:7f:31: a3:33:28:f5:c2:83:9d:88:43:65:3f:9e:c3:65:27:89:bd:52: 8f:2a:43:e1:6b:f1:e8:86:fa:df:ab:56:da:47:be:f2:bc:94: c5:24:cb:f4:88:8d:3b:81:9a:59:7b:08:38:63:20:10:23:a6: bc:31:26:71:0e:00:09:97:57:f4:66:5a:3f:37:3c:b5:a6:83: 86:f1:48:74:d6:b8:27:3f:a3:35:ba:66:7f:87:fa:1d:c6:5f: c1:d1:7c:0e:a1:1a:46:03:0b:99:a4:fa:49:eb:01:07:1b:37: 33:ac:95:c1:06:7f:2b:84:c8:28:c3:dd:6b:eb:4e:56:6c:37: 9e:e0:be:98:a1:88:1b:fa:a2:0f:91:83:7c:36:32:91:1b:0f: 35:9c:f2:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZas+qo6EO7bqcFeuq3T6jBBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZTE0YmY3NmY0MmRhNGYyYWMwMDNhNmM2OWQ2MWMyMzIw ZTJjZDgwHhcNMjUwNTA3MjMwMDMwWhcNMjUwNTA4MjMwMDMwWjAzMTEwLwYDVQQD EyhmODZiMTg1YWY3YzZlZjZjYTFjMjgwYjllMWYxZTBlMjk2NDcwYzUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuD1tBRSJIgPTKPkHJ8eXJy8nKnsc x4g3wGLYmvVC+J+8zjDDR0avewwVJZsUAkj5N4NI4X0cdSe53PGgOItZladDxfK6 PdGusKLaNu4/FOJbCPvWwX+zPBSwo1703I/wR7eyhCcfEDbOSTo/c1Lohdlt/mam zgkeXF9UGEq/mOaYPpDs/j+XHRmvojNDn+5+/8t+O2/hU1OGCdFziSFBsJfjbJKd RXV+xH9c3QFytCf3SH8Ul3mr89bDXDYuQmE0HY7tT0zAWgP+Z+5Ml6mpszbIIGGh ioDWOIcbn477xJPd3iNI0lcwzd3hRpmZtFvSMHxVj7t8ktAhQP0XB33QnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPhrGFr3xu9socKAueHx4OKWRwxSMB8GA1UdIwQY MBaAFEnhS/dvQtpPKsADpsadYcIyDizYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2VGTDkyOUMyazhxd0FPbXhwMWh3aklPTE5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC81NjE2N2YtNTMyNy00Yzg4LWI0ZWEt M2JlY2NhYWUzMzZkLzEvU2VGTDkyOUMyazhxd0FPbXhwMWh3aklPTE5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC81NjE2N2YtNTMyNy00Yzg4LWI0ZWEtM2JlY2NhYWUzMzZk LzEvU2VGTDkyOUMyazhxd0FPbXhwMWh3aklPTE5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn4syKq6p U1OhnAL5NNsTQP5lcwXNiwPWWeeDQUgE9lyk751ANp3fnErzrOOo3J0b5aMIL0Kh O+m2qMSsb4nHXq23pKavB3idgFajHZoTtzUS6b8ZNa4hqpMgg4eUI8+XcrS/eemi cRsqkX8xozMo9cKDnYhDZT+ew2Unib1SjypD4Wvx6Ib636tW2ke+8ryUxSTL9IiN O4GaWXsIOGMgECOmvDEmcQ4ACZdX9GZaPzc8taaDhvFIdNa4Jz+jNbpmf4f6HcZf wdF8DqEaRgMLmaT6SesBBxs3M6yVwQZ/K4TIKMPda+tOVmw3nuC+mKGIG/qiD5GD fDYykRsPNZzycw== -----END CERTIFICATE-----Generated at Thu May 8 03:23:58 2025 by rpki-client