$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft File: hPgk0y3xpRE9ghATRdeFo4rdveU.mft (raw, json) Hash identifier: ZtxxCLXxMp/pf+yXEqZp4jFSXUSoSOkwAExJ1BVb9cw= Subject key identifier: 08:DF:12:64:42:51:1F:92:10:05:1C:D5:BF:A7:13:D2:A1:DC:CB:50 Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5 Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5 Certificate serial: 0196A878DD6C0225F3CDBE71AAB5896953C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft Manifest number: 15AA Signing time: Wed 07 May 2025 02:00:15 +0000 Manifest this update: Wed 07 May 2025 02:00:15 +0000 Manifest next update: Thu 08 May 2025 02:00:15 +0000 Files and hashes: 1: 1-ULSrC7qERPJ5s0LHG6wQSokzXA.roa (hash: M565zMsE8K/YoAfcIK7Sfb56kLhbnQFGZfCJXZeA4+c=) 2: 4CDpfs04Q6BhM73eRs3ynYW0oqc.roa (hash: SptP34QoXw99zxxZStKLiJW4s4aN8DzBBvEgnUw9cUs=) 3: PNjb4X8kJscwHMXMiyuXtbGZX5o.roa (hash: t6ZmoP2V9ihNwE35xzcIYI2VvpWaOI2bhHX5db7NWXc=) 4: RJwe2BfOH2L8b2xvYWAb7A5I8YI.roa (hash: Ua7R/78tPOt1hUU0nncJ70Fr//DWyVNm+5rSWWhtzSo=) 5: SNFt0lB0U4IpDK2M6jbg0nixPuw.roa (hash: ZkAQcXTk1wy7KfuKPlx7eg9LZ93/MdGfH+lnC1SNvbA=) 6: ZpIOx5_wULQ6fk_u3FoWz7KE0YQ.roa (hash: xlJGrnQ3RAzHyUU8Evq1z4uBR31JBslascWxforueJ0=) 7: c39OdSugEhhkTfEPcCwd1BnFeWg.roa (hash: D3rVYMF6ZEkgIoR+XLBvFbt0BnRz80lo8KFUojO0nhs=) 8: hPgk0y3xpRE9ghATRdeFo4rdveU.crl (hash: XY3MGf/UEv3NmgnIXoqRnCL86ZgM37GkJ6doRrAqBqw=) 9: jZZQ117MrYD6QSdQsNATRgEh9Js.roa (hash: F74W3mlUaYmiXG4eRCyJ8iNyFuD8U//X0zL2pTBsPr0=) 10: kSIH-t1YlaXWMTafK3y9G8k2BtE.roa (hash: u8I0qLPnotq4HtUH8xPoZUCuSzCQZnlgK1v3TzivBbU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 May 2025 23:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:a8:78:dd:6c:02:25:f3:cd:be:71:aa:b5:89:69:53:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5 Validity Not Before: May 7 02:00:15 2025 GMT Not After : May 8 02:00:15 2025 GMT Subject: CN=08df126442511f9210051cd5bfa713d2a1dccb50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0e:49:81:b3:6e:30:05:8c:14:7f:52:1a:36: 9d:ee:01:95:f8:7e:93:33:c3:64:da:31:53:6b:75: d6:2c:79:39:49:17:50:ce:7c:87:d8:7a:17:61:bc: cc:e5:47:49:9f:48:88:76:a1:e2:f1:ee:4e:33:8f: bb:0c:fb:15:e4:a8:13:eb:ce:54:4b:62:9c:fb:67: fa:bd:cb:d4:d8:75:e8:d5:82:14:ac:22:69:a4:0c: a4:f0:37:de:48:b8:b3:cd:49:20:46:9b:d9:c7:5c: ef:b7:6e:78:ae:d9:85:3b:57:05:c0:75:06:ae:4d: ce:d5:c7:30:a8:1c:7d:d2:f2:85:25:82:ba:b1:35: 01:d9:da:85:7d:6d:3a:52:19:36:e9:bd:8c:fd:d5: e2:d6:cc:c9:28:d9:7e:0b:09:25:2e:db:f6:41:54: 3d:61:a2:b5:25:ad:95:9c:53:15:b2:92:3b:77:d9: 54:a5:cf:30:33:17:07:2c:8a:9e:8b:68:30:1c:d7: 25:8a:0b:59:7e:f3:9e:08:3e:8e:43:d7:5e:ae:97: 43:7d:37:51:fb:95:c1:38:d7:4b:65:e9:a3:85:b5: b4:cb:21:05:1e:79:68:d3:a5:08:66:d6:04:6b:60: 63:c6:13:03:66:6c:5b:c6:fe:94:1c:8f:de:d0:d6: bd:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:DF:12:64:42:51:1F:92:10:05:1C:D5:BF:A7:13:D2:A1:DC:CB:50 X509v3 Authority Key Identifier: keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:ec:ba:30:87:9e:5f:a2:7a:ae:2b:6b:e7:09:9c:d2:39:17: 49:36:7d:66:ce:77:98:05:1a:e6:2d:12:07:19:b5:06:9c:80: 6d:96:e0:23:48:86:4c:06:9a:ee:1d:e1:71:42:a6:d7:5b:9f: 38:87:e4:58:9a:96:82:06:5d:13:7c:8d:9f:a6:e8:02:0f:15: 2a:95:ba:4e:54:81:6d:da:d9:2d:07:55:d2:b3:30:71:74:92: 52:d7:74:d9:9d:1d:3c:bd:6f:3c:0d:49:cf:b4:11:71:c7:9c: 3b:34:ec:56:fe:57:c7:2e:ad:c4:eb:1e:fb:11:36:d6:b8:0c: 87:fc:e5:97:bc:ac:e9:63:d5:67:e7:c0:c8:ed:8b:53:7c:88: ed:ba:c0:4a:d6:f4:64:3a:a4:c2:6f:44:1d:41:3d:b1:a6:d8: 5e:c5:72:6f:28:7d:74:e2:2f:a1:53:7b:51:4e:0a:93:88:b4: 98:c7:b6:64:a3:60:ed:f6:82:9a:3d:b6:e8:c6:18:fb:be:f0: 3d:7b:60:77:a7:02:64:30:6a:c5:73:72:4e:a0:fe:62:cc:69: eb:ad:07:b8:be:07:2a:9b:da:3c:45:74:c5:e3:6f:df:3f:13: 2c:65:3f:a3:d0:e7:e2:c8:9f:f3:f9:2d:93:9d:60:c6:70:13: 4a:aa:8c:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZaoeN1sAiXzzb5xqrWJaVPDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0ZjgyNGQzMmRmMWE1MTEzZDgyMTAxMzQ1ZDc4NWEzOGFk ZGJkZTUwHhcNMjUwNTA3MDIwMDE1WhcNMjUwNTA4MDIwMDE1WjAzMTEwLwYDVQQD EygwOGRmMTI2NDQyNTExZjkyMTAwNTFjZDViZmE3MTNkMmExZGNjYjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxw5JgbNuMAWMFH9SGjad7gGV+H6T M8Nk2jFTa3XWLHk5SRdQznyH2HoXYbzM5UdJn0iIdqHi8e5OM4+7DPsV5KgT685U S2Kc+2f6vcvU2HXo1YIUrCJppAyk8DfeSLizzUkgRpvZx1zvt254rtmFO1cFwHUG rk3O1ccwqBx90vKFJYK6sTUB2dqFfW06Uhk26b2M/dXi1szJKNl+CwklLtv2QVQ9 YaK1Ja2VnFMVspI7d9lUpc8wMxcHLIqei2gwHNcligtZfvOeCD6OQ9derpdDfTdR +5XBONdLZemjhbW0yyEFHnlo06UIZtYEa2BjxhMDZmxbxv6UHI/e0Na98wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAjfEmRCUR+SEAUc1b+nE9Kh3MtQMB8GA1UdIwQY MBaAFIT4JNMt8aURPYIQE0XXhaOK3b3lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85ZDY1YmItYWI0Zi00M2FhLWJiYTgt NDM3Mzk0OTM4YzUyLzEvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS85ZDY1YmItYWI0Zi00M2FhLWJiYTgtNDM3Mzk0OTM4YzUy LzEvaFBnazB5M3hwUkU5Z2hBVFJkZUZvNHJkdmVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQuy6MIee X6J6ritr5wmc0jkXSTZ9Zs53mAUa5i0SBxm1BpyAbZbgI0iGTAaa7h3hcUKm11uf OIfkWJqWggZdE3yNn6boAg8VKpW6TlSBbdrZLQdV0rMwcXSSUtd02Z0dPL1vPA1J z7QRccecOzTsVv5Xxy6txOse+xE21rgMh/zll7ys6WPVZ+fAyO2LU3yI7brAStb0 ZDqkwm9EHUE9sabYXsVybyh9dOIvoVN7UU4Kk4i0mMe2ZKNg7faCmj226MYY+77w PXtgd6cCZDBqxXNyTqD+Ysxp660HuL4HKpvaPEV0xeNv3z8TLGU/o9Dn4sif8/kt k51gxnATSqqMGQ== -----END CERTIFICATE-----Generated at Wed May 7 05:20:54 2025 by rpki-client