$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft File: snJh1xU0i_1zzp27ckiGVpk7ovE.mft (raw, json) Hash identifier: faefLoGdDPYofPg/FjvPXy6YXmqz1RCtlFnbnTcCIIE= Subject key identifier: 29:2A:BD:71:EA:6B:C1:1B:90:97:99:B4:9D:AB:1C:24:0C:EC:00:53 Authority key identifier: B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1 Certificate issuer: /CN=b27261d715348bfd73ce9dbb72488656993ba2f1 Certificate serial: 0196CD2A63207F609EFA5FCB20F8A1CC2B1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft Manifest number: 1069 Signing time: Wed 14 May 2025 05:00:29 +0000 Manifest this update: Wed 14 May 2025 05:00:29 +0000 Manifest next update: Thu 15 May 2025 05:00:29 +0000 Files and hashes: 1: 54iLRsUEYQSLlV8kHVTer9P4keA.roa (hash: Oib7LJlXh4bUMGiTPxF+59IQOdwF+fvCUOmQ1Sv5YqM=) 2: 83ZfI9Fyoy0-0Ed7XViCJUVWAUk.roa (hash: x5Erfp0LUGN9evcbs1ECyXblatyvnAhrnm8OrbCDB8k=) 3: DtWqKYrRCyGx6dsd9f2L7CKfIRc.roa (hash: O7NemdIlDZpd4quz6YecLMnjW1CyD/u06cKhcBOTRro=) 4: GrZCo-Pl-pKds5zmwg7ubalVFTA.roa (hash: XSM4rBpjvcsUyAb/r/u55Oo3ZCJqxZNIGwjYsJQ68bw=) 5: M80ufUXhkNHfa9K4zU6X6k_ofZQ.roa (hash: 4dQl+qST57nUFs67WwcEmlUV01oY2iEO29630JMqbwE=) 6: OcXOGlX2Gc26JEdm5iWVWnBYg58.roa (hash: /vGDKbgE4iZUS4BzIvVP16inipE2apdXrS0M45rcngw=) 7: QpucqboD9L8Uv9-I8wC2eqyytjM.roa (hash: QJ36JcAEae+tPmwoLHxsrKQ/qHkNlapv2iTQudy3nXg=) 8: VLrSYlONO7JZUvaeI6OzgjRksA0.roa (hash: LTkUIoLhvOTPKcASxWAtrGL8orynFjazuB3yg7c0ZYo=) 9: W95VCieFrYA-UWvQbNSL7N3Y2Cg.roa (hash: YvWvtJ9d+roXNfi60DzUNUYY7G9jfkQp1ZTCPAwbx+g=) 10: Yw4yz2qvg4rQujrK-dIx_KPixQM.roa (hash: rPOdhOXTd0LJkvjvgXHjpfcSX15w4WKfBaBl0s4PykM=) 11: mMdAkncXd62KSLEMH5-GZ2xifmI.roa (hash: BsiKxHj0OcEVg20ZYqrvGiqQgj+ynivI6054d313+QE=) 12: snJh1xU0i_1zzp27ckiGVpk7ovE.crl (hash: ZI0ZW0ykRgMROBP9BlILJq+h2sK/NHAYam+i7vhqPiw=) 13: tXmj_lk4J_cxjq5mg9Y-DnR4g68.roa (hash: FkJnyg1Nbp4kUP6A2c71ys6CgKIoTjWwYiDec6OD1BY=) 14: x93oIxwN7f9CnY5MK-gEMFA9RCs.roa (hash: iUrM+UkqfotbOBAOD6sNrVDAFzEQJnu2I0F39zCKGjM=) 15: x_9TAtatN7OaJxTBmrfHpUlXZDA.roa (hash: 2gG4s/omQ5P0Lbi33p1Th/x4L/bao6YkNKtuc6UmamA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 15 May 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:cd:2a:63:20:7f:60:9e:fa:5f:cb:20:f8:a1:cc:2b:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b27261d715348bfd73ce9dbb72488656993ba2f1 Validity Not Before: May 14 05:00:29 2025 GMT Not After : May 15 05:00:29 2025 GMT Subject: CN=292abd71ea6bc11b909799b49dab1c240cec0053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:4b:bf:2f:b5:df:05:96:84:5b:4d:0f:8a:3d: ca:c6:f6:c1:cc:0d:0f:07:63:97:74:45:77:49:28: f7:76:26:50:d7:b5:7c:d1:cc:92:03:ce:af:45:ab: 3f:13:73:e6:db:e4:6e:c3:d5:25:92:c1:f8:28:03: ac:50:16:17:b2:c1:c9:4b:35:82:f0:78:f1:95:38: 37:88:88:fb:39:c1:ee:6b:a2:99:4f:a4:8f:bd:60: 17:de:6a:26:53:27:c2:e4:b5:c0:41:85:36:6c:ae: 4a:84:c1:4e:d5:45:da:5d:b5:84:1c:3b:79:23:16: 8b:c9:76:bf:64:bb:2f:97:83:fb:c4:70:2f:cf:99: ef:5e:25:98:d7:8a:cf:61:40:ef:14:0c:5a:d6:7e: 70:f9:ea:b5:80:59:06:21:f8:da:8e:c2:c4:ab:7d: 96:fe:71:fc:5c:b1:77:e4:0c:4e:3c:e6:66:03:19: c7:02:ed:39:87:3c:ac:33:ce:46:42:97:13:9f:e0: b3:54:d0:8e:b6:de:b5:6e:32:89:37:45:16:d1:98: e3:f3:48:bc:d2:50:53:d0:54:2e:0c:5d:47:1a:2c: 89:62:dc:90:ac:30:03:37:ff:88:69:ab:40:6f:20: fa:b6:76:32:c0:19:6a:be:04:44:80:5e:d0:dc:7e: 6f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:2A:BD:71:EA:6B:C1:1B:90:97:99:B4:9D:AB:1C:24:0C:EC:00:53 X509v3 Authority Key Identifier: keyid:B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:8f:5a:39:45:15:b0:98:56:ff:e2:6a:0c:9b:0c:1d:de:3a: e7:fc:89:dd:58:20:09:4b:6c:a8:be:f6:31:01:33:e7:57:60: d1:ed:4c:e6:9d:b6:3d:07:2f:71:7e:69:81:c3:03:0e:50:e5: 06:13:37:c8:68:c6:d1:fe:8a:3d:04:9b:26:fc:05:b4:6f:46: 6e:19:d4:52:76:72:c8:02:29:bf:67:6c:dd:6c:2b:6a:2f:d5: 4a:bd:96:e6:2a:52:0f:f8:83:bb:41:17:85:c5:98:b3:c9:fc: 34:12:a7:78:db:38:78:19:90:c4:58:62:d3:ee:01:9b:55:95: 88:9f:4f:20:c4:40:2f:6e:0e:74:ef:1f:93:25:9e:55:47:5f: e6:3e:5f:da:2f:2e:62:32:df:5a:7b:3f:07:ed:ea:76:63:b5: 7d:4d:d4:8c:aa:63:3a:3d:e4:40:51:af:78:f3:89:f6:b3:09: 7b:a1:78:d7:1e:bf:e4:8f:be:92:f2:6e:f3:46:cf:47:20:d2: cf:08:b5:5a:da:da:23:c2:0c:9a:f0:b3:16:5f:0a:64:70:2e: 28:9a:84:1e:16:dc:88:ed:ac:64:08:59:e0:ef:7e:8d:1a:f2: a8:8e:06:d9:53:77:94:57:e6:0c:43:d9:01:21:6a:8c:f2:08: 48:c3:5b:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZbNKmMgf2Ce+l/LIPihzCscMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyNzI2MWQ3MTUzNDhiZmQ3M2NlOWRiYjcyNDg4NjU2OTkz YmEyZjEwHhcNMjUwNTE0MDUwMDI5WhcNMjUwNTE1MDUwMDI5WjAzMTEwLwYDVQQD EygyOTJhYmQ3MWVhNmJjMTFiOTA5Nzk5YjQ5ZGFiMWMyNDBjZWMwMDUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlku/L7XfBZaEW00Pij3KxvbBzA0P B2OXdEV3SSj3diZQ17V80cySA86vRas/E3Pm2+Ruw9UlksH4KAOsUBYXssHJSzWC 8HjxlTg3iIj7OcHua6KZT6SPvWAX3momUyfC5LXAQYU2bK5KhMFO1UXaXbWEHDt5 IxaLyXa/ZLsvl4P7xHAvz5nvXiWY14rPYUDvFAxa1n5w+eq1gFkGIfjajsLEq32W /nH8XLF35AxOPOZmAxnHAu05hzysM85GQpcTn+CzVNCOtt61bjKJN0UW0Zjj80i8 0lBT0FQuDF1HGiyJYtyQrDADN/+IaatAbyD6tnYywBlqvgREgF7Q3H5vdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCkqvXHqa8EbkJeZtJ2rHCQM7ABTMB8GA1UdIwQY MBaAFLJyYdcVNIv9c86du3JIhlaZO6LxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hYmE1MDItZDE5MS00ZmQ3LWE3Y2Yt NTA0ZjI3NjY3NjBmLzEvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9hYmE1MDItZDE5MS00ZmQ3LWE3Y2YtNTA0ZjI3NjY3NjBm LzEvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYo9aOUUV sJhW/+JqDJsMHd465/yJ3VggCUtsqL72MQEz51dg0e1M5p22PQcvcX5pgcMDDlDl BhM3yGjG0f6KPQSbJvwFtG9GbhnUUnZyyAIpv2ds3Wwrai/VSr2W5ipSD/iDu0EX hcWYs8n8NBKneNs4eBmQxFhi0+4Bm1WViJ9PIMRAL24OdO8fkyWeVUdf5j5f2i8u YjLfWns/B+3qdmO1fU3UjKpjOj3kQFGvePOJ9rMJe6F41x6/5I++kvJu80bPRyDS zwi1WtraI8IMmvCzFl8KZHAuKJqEHhbciO2sZAhZ4O9+jRryqI4G2VN3lFfmDEPZ ASFqjPIISMNbUQ== -----END CERTIFICATE-----Generated at Wed May 14 11:19:55 2025 by rpki-client