$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft File: 9RNpzL-GsehOGutG5tM20591Kuc.mft (raw, json) Hash identifier: RzxRZLQTIMTj6zXkNUjkMzOVCQuJ4dPIARQCFJgaU1g= Subject key identifier: C6:9F:A3:B4:8C:F8:FC:8B:D4:F5:DA:31:63:9B:84:A5:01:C9:91:1B Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7 Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7 Certificate serial: 0196A8E73642DC6B7F4983C3A2CFFB6D5F7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft Manifest number: 1569 Signing time: Wed 07 May 2025 04:00:47 +0000 Manifest this update: Wed 07 May 2025 04:00:47 +0000 Manifest next update: Thu 08 May 2025 04:00:47 +0000 Files and hashes: 1: 2It_I9J9BgRnnQT5C-V712e3yx4.roa (hash: ESMa8M4XpFdW7jSu8zHJhrebxwQNF93LMCKBGt+hLE4=) 2: 9RNpzL-GsehOGutG5tM20591Kuc.crl (hash: RVHo4wu+LrnvlfSvatxJE271FZrUl/+Ft/XnOTkg31k=) 3: KnjyYVOU3YLigPxZRgN4AIoHUvQ.roa (hash: RKZNdSizbytDBkbsChEKMTDt0/k1bzP9vgLbksKhVuw=) 4: PueZ2Saibe_grnff0WyfuKxQBLM.roa (hash: ASz9qPcsScVDhnrxdRTZGa/ifE1te7I/3UbW2qncNLQ=) 5: V7pzudrBvKtyWxKZWO0x6f4_reQ.roa (hash: ad12O7f2C5d8aoYSLL5ymITCCLpvSolDNgnwjYiuMkk=) 6: bIOnLPyVT4HMkOF207Y-bxFgW_o.roa (hash: sgHv3RFNqOpH2R7wPkXbngTzHaihOut0tmB1GHo2cvM=) 7: iNeJPd86ukMD5LJRKI03IcI4aR8.roa (hash: zF30P8QynaOrv8qAmVAHNi6YCjV5/lmN6BVFSTJGcBU=) 8: julraPqS2QSJ2CA0Adqt_PgJx0U.roa (hash: NxlNqXL0wqzFcIItDSgkJqkpdEhcleIRL/5cK6P63CI=) 9: mYwzdqAY7_S9Fk60kMnWASIug-A.roa (hash: 52FaK7zJCUXQtBsYKmcDyOdvm3LIQVlGj6112gPSUr8=) 10: rSXDYdDhtGY6mAhj2Yx5dAMm9XY.roa (hash: FCFQH85pPvPZL6nivkLqilRYIo7O5H0KAY3npTX/SAo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 May 2025 04:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:a8:e7:36:42:dc:6b:7f:49:83:c3:a2:cf:fb:6d:5f:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7 Validity Not Before: May 7 04:00:47 2025 GMT Not After : May 8 04:00:47 2025 GMT Subject: CN=c69fa3b48cf8fc8bd4f5da31639b84a501c9911b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:69:4d:3a:1e:00:50:76:2b:eb:95:64:79:d6: 59:49:ed:78:42:06:f1:b5:3f:f3:a3:54:f3:5c:57: eb:b0:66:de:df:d3:94:b5:87:78:fe:e1:0c:73:3c: 89:70:2a:8b:59:2c:1b:7f:fe:e2:31:34:92:29:43: ea:ae:36:35:15:bd:76:39:7d:f4:9d:5c:48:47:94: 7a:25:4a:1d:c9:cc:95:96:ef:21:6b:8f:78:27:39: a3:44:e9:77:de:58:1a:25:86:00:8b:2f:86:24:db: d4:13:4e:ed:1a:00:70:3a:71:d2:71:9b:66:a7:23: a6:1a:09:0b:73:6b:ca:13:0c:c2:bd:b8:6c:ba:75: 12:d3:9c:e1:3f:80:4f:1c:7b:ff:50:8e:8d:7e:b1: e6:16:65:1c:18:34:52:1d:7f:f2:d7:cb:75:ea:9d: 1f:de:72:37:03:d7:99:7e:89:e4:fd:2c:51:58:be: 21:30:d6:21:d5:00:e8:3f:1b:52:5f:33:07:62:52: 24:25:51:0e:13:78:66:57:fa:07:de:6e:e0:32:0d: ea:22:90:87:9c:24:6b:0c:05:2b:7e:25:15:a4:ef: e9:52:0d:ec:b3:b1:f6:01:8c:ed:1d:93:75:4b:22: 43:95:c8:1e:15:b9:40:28:e9:85:8a:6d:f2:1b:73: 5e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:9F:A3:B4:8C:F8:FC:8B:D4:F5:DA:31:63:9B:84:A5:01:C9:91:1B X509v3 Authority Key Identifier: keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:b5:5e:ea:bc:fb:db:2f:c9:7c:e1:5b:0d:ce:76:73:03:6c: 4f:63:03:7b:ee:e9:0e:37:fe:64:f7:ed:00:8e:01:ed:4e:af: 68:9d:e6:c3:6f:13:11:ec:d8:64:da:42:a8:39:3a:ca:9e:29: 25:03:ce:12:a9:0e:f5:16:67:9d:81:06:55:5c:db:60:54:a5: f7:b1:81:e2:e3:86:3b:fe:2c:59:39:fb:dd:84:70:86:47:6e: 79:74:e6:95:08:ee:4e:5f:df:91:0f:3d:5c:96:ae:88:04:26: fd:ee:4a:27:9b:5a:2d:2d:2a:6a:1a:3b:df:61:15:ef:3f:06: 7e:a7:d3:e2:c2:23:c5:7c:23:84:0c:75:d8:95:72:d0:7a:48: 02:74:b4:dc:e4:29:c3:c9:a4:72:be:b3:61:2c:45:74:d7:09: e3:f6:ce:06:a9:4c:b1:d9:92:53:d8:f7:d7:5a:2d:8d:96:50: 75:0b:fc:b4:b9:15:a4:32:1c:7d:5f:c9:3f:6a:0a:a1:e6:99: fb:90:03:ae:f8:e6:ad:cb:23:4d:52:85:8e:63:6f:65:71:70: 0d:21:ad:00:09:c3:eb:97:92:95:a9:9b:f1:f6:cc:0e:5c:3e: 5c:c8:48:64:ad:84:79:ab:06:cc:e9:5c:fa:c0:fb:6c:67:f2: 67:37:ff:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZao5zZC3Gt/SYPDos/7bV97MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1MTM2OWNjYmY4NmIxZTg0ZTFhZWI0NmU2ZDMzNmQzOWY3 NTJhZTcwHhcNMjUwNTA3MDQwMDQ3WhcNMjUwNTA4MDQwMDQ3WjAzMTEwLwYDVQQD EyhjNjlmYTNiNDhjZjhmYzhiZDRmNWRhMzE2MzliODRhNTAxYzk5MTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmlNOh4AUHYr65VkedZZSe14Qgbx tT/zo1TzXFfrsGbe39OUtYd4/uEMczyJcCqLWSwbf/7iMTSSKUPqrjY1Fb12OX30 nVxIR5R6JUodycyVlu8ha494JzmjROl33lgaJYYAiy+GJNvUE07tGgBwOnHScZtm pyOmGgkLc2vKEwzCvbhsunUS05zhP4BPHHv/UI6NfrHmFmUcGDRSHX/y18t16p0f 3nI3A9eZfonk/SxRWL4hMNYh1QDoPxtSXzMHYlIkJVEOE3hmV/oH3m7gMg3qIpCH nCRrDAUrfiUVpO/pUg3ss7H2AYztHZN1SyJDlcgeFblAKOmFim3yG3NeBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMafo7SM+PyL1PXaMWObhKUByZEbMB8GA1UdIwQY MBaAFPUTacy/hrHoThrrRubTNtOfdSrnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8yZDViZGYtNTI2NS00OWI4LThhZmUt MmI5MjBiZGUzOTkwLzEvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8yZDViZGYtNTI2NS00OWI4LThhZmUtMmI5MjBiZGUzOTkw LzEvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIbVe6rz7 2y/JfOFbDc52cwNsT2MDe+7pDjf+ZPftAI4B7U6vaJ3mw28TEezYZNpCqDk6yp4p JQPOEqkO9RZnnYEGVVzbYFSl97GB4uOGO/4sWTn73YRwhkdueXTmlQjuTl/fkQ89 XJauiAQm/e5KJ5taLS0qaho732EV7z8GfqfT4sIjxXwjhAx12JVy0HpIAnS03OQp w8mkcr6zYSxFdNcJ4/bOBqlMsdmSU9j311otjZZQdQv8tLkVpDIcfV/JP2oKoeaZ +5ADrvjmrcsjTVKFjmNvZXFwDSGtAAnD65eSlamb8fbMDlw+XMhIZK2EeasGzOlc +sD7bGfyZzf/RQ== -----END CERTIFICATE-----Generated at Wed May 7 10:37:11 2025 by rpki-client