$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft File: ueqJNvjlMGO0s73w87FbKuZn7xM.mft (raw, json) Hash identifier: K/P5DXwD/Si/nUwVMfhYMlArVXq38tDjlc2nuxortl0= Subject key identifier: F6:87:6F:67:3E:58:29:17:D3:0E:C3:2B:05:6D:BB:40:A2:F6:06:80 Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13 Certificate issuer: /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13 Certificate serial: 0196B634F7E059D9263A38B1C7CC15C55343 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft Manifest number: 10DF Signing time: Fri 09 May 2025 18:00:46 +0000 Manifest this update: Fri 09 May 2025 18:00:46 +0000 Manifest next update: Sat 10 May 2025 18:00:46 +0000 Files and hashes: 1: 1-yC-3OHn3v-G1smlX40MjBLjtIk.roa (hash: a65aVWnVNxmwRG3dcoSw93hwzHCpqxRPcFAazQc55Uw=) 2: 1Z8mxBJ-5mF0e5QEPAGyZpCKFxU.roa (hash: 6P4lvJGk11v0OAwMwa6Dw3iNwzGZi6eZ4h8l5OgG/a4=) 3: 6YyTiJSPbv1UicGAUpUrIjUSl7s.roa (hash: ywn3zNCMDdDSXu4XFpg6gkYa11yzJumgJ7B2JgWvpHQ=) 4: 8RH3qUKE88xn5HbZw6qudmUS57M.roa (hash: 2XUgMZycB/m/voP6J2TdO00CC19oe6XDb8VlW5+rmh4=) 5: EL8NwIW4ynHKuDJKgSdS-YOLUw0.roa (hash: myxXdWA4+IfOZijb00R5q5cEaLQsxJLVjp4payzucnw=) 6: FnKylUr6R_VPycGaWtm0ZgdzgFs.roa (hash: anhVyOcar+oGd9A/1X9bq9qCt93XDdGRp5RsP7BWo9k=) 7: VCAwWZ9rCpOgRbWaR-Mt_XNvoAs.roa (hash: AOA1cevRwpbH9c1Y3qkh8PFtO7TKkCHa9V08cN+S9so=) 8: Vtno6vek4R1iYxrs_iTCKNXbvV4.roa (hash: yuyPRcKOieLl5HUe7kBKDY9ApeZ5pBE7VliV6ltXJ/I=) 9: c6eHaiXiRvnVAbCikD-QIkjcWys.roa (hash: tOo0YRqhlyq81kcBT/wqHTaOL3woOVGxvlxCwePoeKQ=) 10: ueqJNvjlMGO0s73w87FbKuZn7xM.crl (hash: /uHEbBXdr4PwfA87RXQIEgNZIkHP87Eb0uApn0nKeDk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 May 2025 17:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:b6:34:f7:e0:59:d9:26:3a:38:b1:c7:cc:15:c5:53:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13 Validity Not Before: May 9 18:00:46 2025 GMT Not After : May 10 18:00:46 2025 GMT Subject: CN=f6876f673e582917d30ec32b056dbb40a2f60680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:78:e0:2f:7c:27:db:cc:4c:da:d2:ff:25:da: ff:1a:14:24:fb:7a:71:f4:a9:16:28:50:a5:ac:12: 70:eb:19:06:4b:30:a4:85:21:aa:33:b9:62:74:05: a4:15:be:37:79:cd:e6:cd:07:d5:57:61:73:32:fb: 0f:03:c1:b0:3a:ec:a0:54:a2:fa:33:c2:7e:d5:3f: 81:69:35:e8:f2:63:d1:60:e1:9c:4e:86:70:16:98: a7:1f:d8:3b:6c:a3:65:e4:57:b5:3d:48:59:fa:47: 64:34:26:bf:39:af:7d:7a:22:0c:49:1e:84:98:6e: b9:91:be:3c:aa:96:90:56:1f:fb:67:93:72:b3:6d: 56:ca:d4:2c:15:8c:62:9d:1c:3d:d3:ff:30:57:8a: d3:f8:f2:45:6e:48:da:64:a8:b7:8a:48:ee:46:17: 9c:d5:fb:4b:b2:0d:aa:2b:6e:4e:ab:f9:46:63:0d: 56:a9:77:5e:1e:ee:d8:dd:75:63:12:87:7a:19:2a: 3a:0a:42:d6:19:58:af:c7:84:1e:e5:a7:e3:a1:dc: f9:31:59:61:38:e0:1c:a5:b3:67:1b:05:71:8e:6e: 45:78:f8:38:87:fb:5c:c0:1c:31:90:1d:66:69:0b: db:d5:b0:89:52:8f:52:a6:1f:78:fc:58:21:27:eb: bf:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:87:6F:67:3E:58:29:17:D3:0E:C3:2B:05:6D:BB:40:A2:F6:06:80 X509v3 Authority Key Identifier: keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:d8:d4:67:06:3a:40:31:08:d6:93:d8:a2:ee:49:ba:11:c9: 70:f8:bf:c7:31:d8:37:f5:ed:8f:7f:92:8c:e2:35:a4:a8:3b: 3f:85:07:88:73:e8:4a:0f:5a:e7:ec:b0:05:36:e3:71:06:0b: 82:93:66:6c:19:5a:d7:1d:39:ab:af:1d:0b:ec:28:18:84:e4: 4b:3c:de:50:fa:f4:c8:47:b1:e1:ce:d2:6a:e4:f1:eb:70:ed: 94:7e:72:3e:b3:8c:7c:6b:09:01:f7:f4:9c:cc:15:cd:87:8f: 39:9c:be:e2:10:5b:f1:e1:3e:90:30:7e:df:8d:e3:e5:90:fd: 9d:b0:9f:ec:1e:38:e0:34:d0:ce:86:ab:c9:3b:6e:d1:1c:58: f6:82:71:05:75:db:0d:64:26:d0:6b:99:ff:d9:5e:0a:25:e8: fd:ca:9b:96:42:0e:39:c0:b3:1a:97:8e:fc:97:8a:cb:2a:cb: b3:ae:5f:96:a6:ce:e8:a9:b8:fd:3c:e6:52:b0:2d:05:9a:1c: 19:08:64:96:05:ee:ed:21:b5:52:31:4d:d7:37:d0:05:f5:d6: 7c:4f:15:66:39:2a:b5:e8:d0:0a:98:f8:42:53:da:b2:da:b1: 44:1e:1e:93:db:b8:a5:ab:29:26:64:f5:eb:52:77:83:4d:f9: ed:dc:3a:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa2NPfgWdkmOjixx8wVxVNDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5ZWE4OTM2ZjhlNTMwNjNiNGIzYmRmMGYzYjE1YjJhZTY2 N2VmMTMwHhcNMjUwNTA5MTgwMDQ2WhcNMjUwNTEwMTgwMDQ2WjAzMTEwLwYDVQQD EyhmNjg3NmY2NzNlNTgyOTE3ZDMwZWMzMmIwNTZkYmI0MGEyZjYwNjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinjgL3wn28xM2tL/Jdr/GhQk+3px 9KkWKFClrBJw6xkGSzCkhSGqM7lidAWkFb43ec3mzQfVV2FzMvsPA8GwOuygVKL6 M8J+1T+BaTXo8mPRYOGcToZwFpinH9g7bKNl5Fe1PUhZ+kdkNCa/Oa99eiIMSR6E mG65kb48qpaQVh/7Z5Nys21WytQsFYxinRw90/8wV4rT+PJFbkjaZKi3ikjuRhec 1ftLsg2qK25Oq/lGYw1WqXdeHu7Y3XVjEod6GSo6CkLWGVivx4Qe5afjodz5MVlh OOAcpbNnGwVxjm5FePg4h/tcwBwxkB1maQvb1bCJUo9Sph94/FghJ+u/hQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPaHb2c+WCkX0w7DKwVtu0Ci9gaAMB8GA1UdIwQY MBaAFLnqiTb45TBjtLO98POxWyrmZ+8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lYzI5ZTItMzQ0MC00MDlhLTk4NmEt YjI1MDk5N2ZjNzVkLzEvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9lYzI5ZTItMzQ0MC00MDlhLTk4NmEtYjI1MDk5N2ZjNzVk LzEvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAutjUZwY6 QDEI1pPYou5JuhHJcPi/xzHYN/Xtj3+SjOI1pKg7P4UHiHPoSg9a5+ywBTbjcQYL gpNmbBla1x05q68dC+woGITkSzzeUPr0yEex4c7SauTx63DtlH5yPrOMfGsJAff0 nMwVzYePOZy+4hBb8eE+kDB+343j5ZD9nbCf7B444DTQzoaryTtu0RxY9oJxBXXb DWQm0GuZ/9leCiXo/cqblkIOOcCzGpeO/JeKyyrLs65flqbO6Km4/TzmUrAtBZoc GQhklgXu7SG1UjFN1zfQBfXWfE8VZjkqtejQCpj4QlPastqxRB4ek9u4paspJmT1 61J3g0357dw6Yg== -----END CERTIFICATE-----Generated at Fri May 9 23:48:50 2025 by rpki-client