$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft File: F7UEL8INm6sWduCa9_8bpb-trnU.mft (raw, json) Hash identifier: Hagf96CmtmSV4oo44Vn+kj4leZmAcsaLo92Krf+Ot4s= Subject key identifier: B7:35:11:57:CC:56:BC:7E:55:91:4E:15:CF:00:AD:DC:4E:B5:A7:B8 Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75 Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75 Certificate serial: 0196AFFBECF72013F53F10769B7AF951D689 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft Manifest number: 0E98 Signing time: Thu 08 May 2025 13:00:44 +0000 Manifest this update: Thu 08 May 2025 13:00:44 +0000 Manifest next update: Fri 09 May 2025 13:00:44 +0000 Files and hashes: 1: 5bIFsErhPSlmM37nhrp-eU9l5Y4.roa (hash: W0LEviwE6sQ3/HTSMFGMNopeuLD+ieboT1WS/XkZF1E=) 2: 7rGZ7Kn81ZZ9VKoeH0eLU-kXt9M.roa (hash: wbrR267hltnIltfZnIqap+bK1X+30aRn2vIaMwlZYl0=) 3: 8B9wa-TamsFPX-b9Sjwq2JWmpu0.roa (hash: mYWGy6vPQqUonSl/lzSA7r99GqgJfzuS4OhPL383spw=) 4: A39EZrrDrXLk3J8BZLUN7wQ6C50.roa (hash: Ark/uTgt37FRO8Utnxml8XHzzu9fwVEDGjmOjqbxT4E=) 5: Chb74JL8JJmMbGzdCWsV1I9XTHM.roa (hash: uqlIkNtybKQGK6oYFgs8Gcl/3LifaWUOWXgUOaIWjq4=) 6: F7UEL8INm6sWduCa9_8bpb-trnU.crl (hash: CPr/DPxkoOmnM48f1ZNJ5VH2ytMnyIWyfgCxDug+dtY=) 7: H-wI8WViyvhQ58migChLNEMEYb4.roa (hash: 55jO9FPLyHdmA0ZhDHMAOcwTS+Ma+ZmiF+DkbWOEkzk=) 8: JY2Qbmj2mgX3KDG39J6yIxJr0tc.roa (hash: 1KGhpD1HwCPZtP8VkVF45re3cg2JKrviwS59Vb+WzQ4=) 9: N2B1iU0YSzB2x_40oFW-BcBZpSE.roa (hash: 3Bt9biLCnw654O83mAV6T9k7ZnWMTrPShbMbJlnWNIs=) 10: QnOCtXAVmX13ibu9GQu1nSs9w-k.roa (hash: 2ja4/uzYhdT+ao7xdjqgdrp8HFOJkvXcfpdXCeeEDmY=) 11: YRRXPoENpmdtt6jCnuMjG8rrikY.roa (hash: DbDzgUZdi2jed/+3x8UofBswoXpqS+WPTmkA9M7K92c=) 12: bA2-1nnLbrWRGqFV2afM2bzGsYs.roa (hash: FCcUA1F21qdmoEMQzczm0l/NGWKzFMZ3eCmf0F/+Cd0=) 13: blSvVBOfQQX8HPgRw9s7J2WaT7U.roa (hash: vl3RTDfDlA0AmENRkgmM8JLJlNA1WYfzNQBSFmihkQU=) 14: xZC_xBRdyqTElb8rKCSQViw1QQk.roa (hash: Am0BFTFCqKQ+R9vTI46rJ2D1DFX8Hh5BkVmp7WNJvlQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 May 2025 13:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:af:fb:ec:f7:20:13:f5:3f:10:76:9b:7a:f9:51:d6:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75 Validity Not Before: May 8 13:00:44 2025 GMT Not After : May 9 13:00:44 2025 GMT Subject: CN=b7351157cc56bc7e55914e15cf00addc4eb5a7b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:53:e6:d2:31:ed:83:c0:4b:c7:9b:ec:3a:b9: e8:4e:ce:27:74:18:df:27:a3:ac:3d:3f:8e:17:6e: 9f:bb:06:1a:a5:61:75:ef:c4:2e:6a:52:02:88:dd: c1:97:a1:43:df:f8:f7:7c:b7:01:1d:57:65:4b:9d: 80:ac:1d:b2:6c:20:af:de:68:b6:90:ba:e3:a7:b8: 29:83:10:ac:82:62:a3:ad:32:8c:f4:4d:a6:89:c2: a7:10:0d:72:de:0c:16:11:27:00:c1:58:79:84:a1: d7:7e:81:09:e8:3b:44:58:4f:b6:68:e8:72:cf:59: 6d:07:c1:dd:85:4d:33:25:9b:fa:91:0a:81:43:90: 8d:16:28:2e:63:59:d2:43:22:77:0d:33:4d:f5:03: cb:d6:45:1d:68:83:06:f3:6c:a5:04:ed:5e:67:f9: c1:9f:71:30:82:3b:9b:e5:32:88:9a:1e:08:25:bb: 90:ee:0d:ab:93:d6:1a:7a:bb:ed:42:b9:23:3f:00: b5:ef:ed:b5:8f:15:33:49:c0:92:14:57:5a:05:ba: 0d:62:ce:e4:3b:78:da:5b:4e:8a:35:31:bc:34:81: 3c:a7:7b:90:45:8e:b4:06:f1:67:fb:da:c0:73:c0: b2:11:31:dd:8c:92:92:03:06:65:8b:f8:1c:fa:82: d2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:35:11:57:CC:56:BC:7E:55:91:4E:15:CF:00:AD:DC:4E:B5:A7:B8 X509v3 Authority Key Identifier: keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:7f:d3:ed:53:11:f5:94:3f:09:21:7a:0a:b9:a5:a5:f6:b4: 37:f1:a9:dd:02:b5:9f:6b:f4:e1:0b:51:cc:31:49:1f:b5:a2: ab:bc:b4:46:a0:11:c3:61:c0:5e:80:33:21:1e:1e:06:bd:92: 40:c5:46:02:d1:8e:b9:e5:25:db:ae:af:8f:96:9e:81:4e:93: 39:68:ba:8b:2e:b7:34:df:81:0f:ed:88:21:97:13:cc:aa:8f: 45:da:fb:92:87:d4:bb:3b:87:d4:82:74:93:dc:16:3d:f3:cc: 8d:0f:8e:94:ec:73:64:24:14:78:8c:e0:ef:ab:dc:9e:eb:ac: 39:f3:a6:9a:0c:2d:26:ee:f6:6b:51:54:34:2a:3c:7f:9d:59: c2:83:13:8f:8a:12:e2:6b:4c:02:dd:8c:76:2b:20:fe:e8:9c: 89:d6:a7:cb:ef:b0:2a:78:93:38:8a:a6:b1:5d:7f:ea:6f:1a: 72:16:89:7a:b6:97:b1:72:61:94:f5:c7:17:85:a3:fd:46:38: 43:28:69:90:dd:14:da:7e:05:39:28:53:7b:d6:83:d1:9f:f8: 02:64:fa:f0:24:11:c7:cd:d5:45:48:f9:96:7b:c3:bd:22:cf: 5c:4e:e3:53:4c:02:d9:35:ef:b3:84:42:e1:57:4f:fe:38:ac: d3:be:74:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZav++z3IBP1PxB2m3r5UdaJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3YjUwNDJmYzIwZDliYWIxNjc2ZTA5YWY3ZmYxYmE1YmZh ZGFlNzUwHhcNMjUwNTA4MTMwMDQ0WhcNMjUwNTA5MTMwMDQ0WjAzMTEwLwYDVQQD EyhiNzM1MTE1N2NjNTZiYzdlNTU5MTRlMTVjZjAwYWRkYzRlYjVhN2I4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulPm0jHtg8BLx5vsOrnoTs4ndBjf J6OsPT+OF26fuwYapWF178QualICiN3Bl6FD3/j3fLcBHVdlS52ArB2ybCCv3mi2 kLrjp7gpgxCsgmKjrTKM9E2micKnEA1y3gwWEScAwVh5hKHXfoEJ6DtEWE+2aOhy z1ltB8HdhU0zJZv6kQqBQ5CNFiguY1nSQyJ3DTNN9QPL1kUdaIMG82ylBO1eZ/nB n3Ewgjub5TKImh4IJbuQ7g2rk9YaervtQrkjPwC17+21jxUzScCSFFdaBboNYs7k O3jaW06KNTG8NIE8p3uQRY60BvFn+9rAc8CyETHdjJKSAwZli/gc+oLSvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLc1EVfMVrx+VZFOFc8ArdxOtae4MB8GA1UdIwQY MBaAFBe1BC/CDZurFnbgmvf/G6W/ra51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQt YmM2Nzk0ZTk1ZTVhLzEvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQtYmM2Nzk0ZTk1ZTVh LzEvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATn/T7VMR 9ZQ/CSF6Crmlpfa0N/Gp3QK1n2v04QtRzDFJH7Wiq7y0RqARw2HAXoAzIR4eBr2S QMVGAtGOueUl266vj5aegU6TOWi6iy63NN+BD+2IIZcTzKqPRdr7kofUuzuH1IJ0 k9wWPfPMjQ+OlOxzZCQUeIzg76vcnuusOfOmmgwtJu72a1FUNCo8f51ZwoMTj4oS 4mtMAt2Mdisg/uicidany++wKniTOIqmsV1/6m8achaJeraXsXJhlPXHF4Wj/UY4 QyhpkN0U2n4FOShTe9aD0Z/4AmT68CQRx83VRUj5lnvDvSLPXE7jU0wC2TXvs4RC 4VdP/jis0750kw== -----END CERTIFICATE-----Generated at Thu May 8 20:31:03 2025 by rpki-client