$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft File: bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft (raw, json) Hash identifier: HMuDd4uYt9LFYG9b/XFVoA0aLqHq2M1abDKZ5FFk254= Subject key identifier: 0C:6A:9A:8A:2B:52:F5:DC:85:36:AF:A8:22:59:18:56:4F:F5:01:46 Authority key identifier: 6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29 Certificate issuer: /CN=6f3030a4b67f95c2fed902d56657faa2494b5129 Certificate serial: 0196A051AADA904205000A9AA6DEBC86577D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft Manifest number: 15A4 Signing time: Mon 05 May 2025 12:00:28 +0000 Manifest this update: Mon 05 May 2025 12:00:28 +0000 Manifest next update: Tue 06 May 2025 12:00:28 +0000 Files and hashes: 1: GJGNGTLsLaPzo7RV9J9cGo7ZCKI.roa (hash: ycPiGraLR+oJB3cwW5Zn+sG2+Vx4fOUp8s3QYwjDHdY=) 2: LJGytq9N5LZAfsPYy6Q-7xTDnFQ.roa (hash: L8DANG0AVQkhh+LlhVF97AUo2a9H2Thg2+BhZTsZc9s=) 3: UTgRulJfmraGi0toko70wCEmGFA.roa (hash: /+qQOZA++jaLu5bGfT6khqkHyM9MBYNcQ493XjcwmbI=) 4: VdTIZg10bNsf97lJZgApyqs5rnw.roa (hash: JZmVNExP4W1uSJTEkKjxhG9IYISkRZKnN8IfaygiTvg=) 5: _RuQI5qt_gCJV8eSXJjHywGzAcM.roa (hash: DUnvGlvb0qBwrlu2PMIboP80gnaIA1d0Yg1mit2U5+4=) 6: _oIa1v5_qtgCStQ7Gr8CmdhmJJk.roa (hash: sBeGOfBKlFTzuSpkLUgZSpY0MFPhQu/DyIR2/KkHkUM=) 7: acsdEgh-dFdAGSqAE_lAYWdPdzo.roa (hash: lIvBIoA3FQRV1Et4CF8cBr7OP+IuEmQHKzZDW4s0Y6A=) 8: bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl (hash: ALNdw+Q27FXZCMZMW731eFBo6eCqmCIKOf8B39VXh+Y=) 9: mJjHdX3SCVwj6yoNCT7Dpu7pXSo.roa (hash: ccP3x4XUmUaf8il9YXiD7LEPdeAv9/EZKZYCHAVZnrA=) 10: uXeorQ0KraTFvVQlrxOSwyrTRt8.roa (hash: p6Mox6CbN3FoG5SSiyHeNVnPtI+94QgKaVPxEdmTl2o=) 11: yE8yGiOSM9_WiLeRkIg-dqNW2to.roa (hash: lSz5irzOf2/kcuzlFP5VLqCVP2LHBpJf2WHVunZKvMQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 May 2025 10:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:a0:51:aa:da:90:42:05:00:0a:9a:a6:de:bc:86:57:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f3030a4b67f95c2fed902d56657faa2494b5129 Validity Not Before: May 5 12:00:28 2025 GMT Not After : May 6 12:00:28 2025 GMT Subject: CN=0c6a9a8a2b52f5dc8536afa8225918564ff50146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5e:99:83:c9:11:c7:87:0a:1f:b5:be:a9:67: 3e:34:05:37:a2:82:29:a4:d6:01:69:0e:d9:0b:64: 75:47:3a:0a:78:91:f7:03:ba:f5:4a:ef:83:f6:c2: 1f:03:d6:71:c8:0d:d0:3d:e3:1d:5c:8a:1a:75:61: ed:bb:a8:ab:20:b7:5a:ed:90:fd:93:d8:7c:4a:b8: 0c:50:ea:87:9c:4c:7b:dc:ae:01:db:85:62:8b:d4: 5d:ca:99:79:e6:c3:70:5f:a2:e1:20:77:bd:17:61: 10:a4:7f:a5:01:04:0c:e4:8b:e6:cf:fe:4d:ca:ac: 13:c5:d5:28:85:28:b6:e3:bd:a2:8c:75:f2:95:51: 4d:53:e5:5d:81:bf:06:bf:b9:41:fa:8c:a3:85:87: 3e:a5:1e:c4:01:23:d5:d0:f3:e1:57:2c:00:e2:a9: fb:3b:cb:a1:f8:50:a2:b1:8a:6d:2a:ad:5c:52:7d: db:f4:0b:0e:60:23:64:8e:ad:24:75:82:48:89:4c: dc:09:4d:1b:41:c0:47:91:57:87:41:0e:e5:f8:25: c8:68:6a:4e:64:59:0e:ae:a6:5a:50:fc:51:63:8c: 04:0e:f0:46:06:7c:2b:eb:11:6f:28:e7:4c:b5:40: cc:df:18:f2:23:26:c7:4d:09:e3:95:20:b8:d2:74: 19:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:6A:9A:8A:2B:52:F5:DC:85:36:AF:A8:22:59:18:56:4F:F5:01:46 X509v3 Authority Key Identifier: keyid:6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:d0:7b:90:0f:29:f5:39:28:61:35:b3:c5:96:1c:ad:6e:64: 7a:6e:fe:1d:75:6f:ee:97:ce:6a:59:74:e0:58:94:27:93:1d: 00:56:3d:76:96:ac:ae:5b:58:01:5b:b5:40:db:c6:d5:c2:53: 64:29:05:49:46:e3:3c:a6:92:e5:f0:b3:0c:e3:ba:75:53:f3: b3:c4:9a:00:58:72:3f:a2:b2:ed:a9:33:05:5e:0e:e9:69:ca: 08:ad:17:da:0a:c4:1d:d3:3a:47:aa:19:16:8e:7e:51:33:90: 4f:29:46:66:c8:fe:2b:84:d2:43:c7:ac:cc:d9:be:2c:5b:48: bb:ae:2f:e8:e2:5e:eb:16:28:32:d9:01:b3:2f:51:6c:d3:06: 4c:ed:2c:28:78:38:05:22:89:59:53:5f:5b:5e:76:e2:03:07: 6e:91:07:a0:d5:2c:f9:21:ac:58:50:ea:2d:ba:ed:2d:b3:06: 64:39:84:99:86:8d:47:76:47:31:5a:8a:aa:60:26:61:bc:d6: a7:46:0c:c5:ab:2b:e4:21:9b:e5:fc:2b:44:59:35:14:79:b4: 73:04:d8:0c:c4:fd:ed:0b:05:fd:26:00:7d:8c:4f:68:e2:c5: 4c:fa:95:51:2c:4b:c9:2e:73:fd:b6:4d:e0:9a:c8:42:7b:30: 44:01:24:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZagUarakEIFAAqapt68hld9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMzAzMGE0YjY3Zjk1YzJmZWQ5MDJkNTY2NTdmYWEyNDk0 YjUxMjkwHhcNMjUwNTA1MTIwMDI4WhcNMjUwNTA2MTIwMDI4WjAzMTEwLwYDVQQD EygwYzZhOWE4YTJiNTJmNWRjODUzNmFmYTgyMjU5MTg1NjRmZjUwMTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzl6Zg8kRx4cKH7W+qWc+NAU3ooIp pNYBaQ7ZC2R1RzoKeJH3A7r1Su+D9sIfA9ZxyA3QPeMdXIoadWHtu6irILda7ZD9 k9h8SrgMUOqHnEx73K4B24Vii9Rdypl55sNwX6LhIHe9F2EQpH+lAQQM5Ivmz/5N yqwTxdUohSi2472ijHXylVFNU+Vdgb8Gv7lB+oyjhYc+pR7EASPV0PPhVywA4qn7 O8uh+FCisYptKq1cUn3b9AsOYCNkjq0kdYJIiUzcCU0bQcBHkVeHQQ7l+CXIaGpO ZFkOrqZaUPxRY4wEDvBGBnwr6xFvKOdMtUDM3xjyIybHTQnjlSC40nQZowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAxqmoorUvXchTavqCJZGFZP9QFGMB8GA1UdIwQY MBaAFG8wMKS2f5XC/tkC1WZX+qJJS1EpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yYjk5YTMtZGQ1Zi00ZmZlLTgyZWYt YmYzYjIxYTI3MGYyLzEvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8yYjk5YTMtZGQ1Zi00ZmZlLTgyZWYtYmYzYjIxYTI3MGYy LzEvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALNB7kA8p 9TkoYTWzxZYcrW5kem7+HXVv7pfOall04FiUJ5MdAFY9dpasrltYAVu1QNvG1cJT ZCkFSUbjPKaS5fCzDOO6dVPzs8SaAFhyP6Ky7akzBV4O6WnKCK0X2grEHdM6R6oZ Fo5+UTOQTylGZsj+K4TSQ8eszNm+LFtIu64v6OJe6xYoMtkBsy9RbNMGTO0sKHg4 BSKJWVNfW1524gMHbpEHoNUs+SGsWFDqLbrtLbMGZDmEmYaNR3ZHMVqKqmAmYbzW p0YMxasr5CGb5fwrRFk1FHm0cwTYDMT97QsF/SYAfYxPaOLFTPqVUSxLyS5z/bZN 4JrIQnswRAEk1w== -----END CERTIFICATE-----Generated at Mon May 5 19:01:53 2025 by rpki-client