$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft File: dBX-xK52sk5PApkWSZF7mbdABEo.mft (raw, json) Hash identifier: PKSgwXdg1DguWhrwX7CAqEJwNjKg1sIDSIVHnqNatKM= Subject key identifier: 9A:86:70:1B:0F:4D:96:FC:C4:4D:D6:99:14:83:18:B2:AD:CF:06:52 Authority key identifier: 74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A Certificate issuer: /CN=7415fec4ae76b24e4f02991649917b99b740044a Certificate serial: 0196B9A43E622968C818C52B11F2355A6B20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft Manifest number: 097E Signing time: Sat 10 May 2025 10:01:10 +0000 Manifest this update: Sat 10 May 2025 10:01:10 +0000 Manifest next update: Sun 11 May 2025 10:01:10 +0000 Files and hashes: 1: 7hJlVvAGbCOpuMIAbRPmhI1LyJk.roa (hash: kwYrJ2B8iMONESsXhh99M7N/9TNCRx/vPINN+t9MxVk=) 2: BPmOKccK3wxsyXop4Fdn5FojVoQ.roa (hash: c0AjkjhURWDz0MoTRfs5io6YXuUePztpcaDJ7boNtz0=) 3: SUOAfAQ0XA-NwcRtQiSTfyb4Wy8.roa (hash: e05e72W3+Ol/fZOV0pLIuKL4jo9MMxa/XkoeJUlntxg=) 4: VqZeFvbbX-KsOWD9GK-fycFhuOI.roa (hash: xgMvcAX7GnHhnhehwxi81Z4YyETizwcdtzJzWTQwg/k=) 5: XfXYE2n3ELZ7eIeoL9PKepcHwZA.roa (hash: ut79u4UtHuRrzodBIel85yFEnEYdSmRF8b/BMJ7pJ+c=) 6: _FZRXOMw8cJ5_jns8AW1s_1FtCE.roa (hash: tvzyoc9Jq37JTxjl0iHcbwfaS6YqsrLUixFkGTWwE0I=) 7: dBX-xK52sk5PApkWSZF7mbdABEo.crl (hash: qhuda3QEjzK0cCTAr3QHf/vWhM8rqDmGnY52AAAz67c=) 8: gpd7OTySBF88_ieGeC5xgwx4qHQ.roa (hash: RdN9I6MEx1szFl28V6LeCBYwwmv66RX788uJxkiR1Mc=) 9: j9h-3RCYA4GR973gJlvT0ea106k.roa (hash: lz+NUP8jcmTPiXhlt9xOtXKaOts84TsRJsY+TEWUVuU=) 10: jUEYHb-GuhXwiI1SopLXVRt5GiY.roa (hash: N8zIemkmgk5a0TVxAU9OTz5oZOkNeALYs1e0nI4AZAE=) 11: zrOybo8OUdo1YWpvdexahXHtucc.roa (hash: EWyOKZff8iXaRwsSXU+RwbJXdez1LiNZod4BRpq2JDU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 May 2025 04:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:b9:a4:3e:62:29:68:c8:18:c5:2b:11:f2:35:5a:6b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7415fec4ae76b24e4f02991649917b99b740044a Validity Not Before: May 10 10:01:10 2025 GMT Not After : May 11 10:01:10 2025 GMT Subject: CN=9a86701b0f4d96fcc44dd699148318b2adcf0652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:44:62:10:83:16:b5:72:44:8a:b8:43:a4:53: 7f:33:84:45:24:71:72:65:a7:cf:d7:22:53:6f:30: 94:84:a1:ec:a6:1c:7c:5f:0a:49:dd:fb:ec:ba:b9: aa:44:fc:53:ee:e0:7e:ec:fa:1c:75:b8:52:f5:f7: 54:81:2b:0f:e6:df:d8:16:3e:e9:ef:39:89:ab:44: ea:fe:85:cf:0f:63:65:40:80:2b:95:c2:1a:f4:bb: b6:b5:62:5f:2e:36:11:17:26:f2:ca:00:40:fe:36: f7:ef:85:e7:54:bc:c2:23:a7:8c:0f:84:49:c3:7c: 95:b3:78:99:05:2d:79:23:32:30:97:d8:d6:b6:8f: d6:52:47:82:44:81:c1:69:69:b8:44:c4:dd:d9:56: 2a:aa:4f:a2:15:09:ad:3c:ba:68:75:53:1e:a2:6c: e9:07:c1:03:0a:5c:b4:1c:e7:1e:32:64:97:4b:9d: cc:b8:39:e2:6b:c4:8e:d1:bc:18:61:e1:db:a8:72: d9:dc:0e:5b:a7:a2:e5:9f:ea:a3:37:3c:e5:1b:ae: c2:94:2a:6c:47:f6:01:d0:1f:7d:c1:d6:4a:f2:75: 33:16:f5:75:a5:df:a3:57:9b:2f:98:0a:f0:09:d2: 63:44:c4:f6:3f:b2:ab:20:3b:f3:fd:d3:7c:31:50: c3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:86:70:1B:0F:4D:96:FC:C4:4D:D6:99:14:83:18:B2:AD:CF:06:52 X509v3 Authority Key Identifier: keyid:74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:69:d3:cb:9e:c0:f7:da:e1:a2:6e:32:cb:bb:a6:dd:75:53: 57:70:14:0b:d4:6b:3b:f7:af:d7:64:2c:e1:85:4c:f2:59:c5: 4e:d1:0b:ce:8d:8f:22:73:dc:0c:e6:50:ce:cf:21:8a:77:cd: 30:93:34:48:87:9a:c0:f4:29:50:1f:d1:a3:3c:8a:29:4e:73: db:d9:c5:5d:ca:d8:89:e9:f1:27:5c:4e:e9:32:4b:12:46:63: 2f:c1:d4:30:f5:41:4e:2f:28:32:20:79:47:fe:c1:f1:eb:ce: 36:1c:c5:12:47:b5:05:71:cc:93:d3:a3:6e:ca:69:65:1b:23: ad:95:c3:e5:1c:e4:b1:e5:f1:86:33:3b:1d:ca:a7:84:9a:39: 66:45:19:bd:4f:d0:1a:85:f4:4f:10:a2:43:8f:e9:4d:8d:0a: a0:a3:9c:b6:9b:19:87:fb:3b:65:79:1a:0a:6c:6d:b0:31:5f: 04:05:31:22:cf:5c:78:e8:a9:fd:1e:a7:24:e6:2e:c3:4e:97: f9:90:63:c6:05:2f:7a:4d:22:0d:f1:4b:c9:b8:27:0e:7e:6d: 7f:19:b6:64:a8:60:fd:2e:66:8f:0e:99:19:5e:c1:e7:45:39: c0:92:5f:47:57:f1:90:7b:7c:58:b8:78:a3:71:f7:3e:2d:1d: e2:e0:4a:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa5pD5iKWjIGMUrEfI1WmsgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0MTVmZWM0YWU3NmIyNGU0ZjAyOTkxNjQ5OTE3Yjk5Yjc0 MDA0NGEwHhcNMjUwNTEwMTAwMTEwWhcNMjUwNTExMTAwMTEwWjAzMTEwLwYDVQQD Eyg5YTg2NzAxYjBmNGQ5NmZjYzQ0ZGQ2OTkxNDgzMThiMmFkY2YwNjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkRiEIMWtXJEirhDpFN/M4RFJHFy ZafP1yJTbzCUhKHsphx8XwpJ3fvsurmqRPxT7uB+7PocdbhS9fdUgSsP5t/YFj7p 7zmJq0Tq/oXPD2NlQIArlcIa9Lu2tWJfLjYRFybyygBA/jb374XnVLzCI6eMD4RJ w3yVs3iZBS15IzIwl9jWto/WUkeCRIHBaWm4RMTd2VYqqk+iFQmtPLpodVMeomzp B8EDCly0HOceMmSXS53MuDnia8SO0bwYYeHbqHLZ3A5bp6Lln+qjNzzlG67ClCps R/YB0B99wdZK8nUzFvV1pd+jV5svmArwCdJjRMT2P7KrIDvz/dN8MVDDAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJqGcBsPTZb8xE3WmRSDGLKtzwZSMB8GA1UdIwQY MBaAFHQV/sSudrJOTwKZFkmRe5m3QARKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEJYLXhLNTJzazVQQXBrV1NaRjdtYmRBQkVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy85ODc5NzktOTY5My00NWUzLTg1YmEt ZWQ1MzU4YjZkYTMxLzEvZEJYLXhLNTJzazVQQXBrV1NaRjdtYmRBQkVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy85ODc5NzktOTY5My00NWUzLTg1YmEtZWQ1MzU4YjZkYTMx LzEvZEJYLXhLNTJzazVQQXBrV1NaRjdtYmRBQkVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALmnTy57A 99rhom4yy7um3XVTV3AUC9RrO/ev12Qs4YVM8lnFTtELzo2PInPcDOZQzs8hinfN MJM0SIeawPQpUB/RozyKKU5z29nFXcrYienxJ1xO6TJLEkZjL8HUMPVBTi8oMiB5 R/7B8evONhzFEke1BXHMk9OjbsppZRsjrZXD5RzkseXxhjM7HcqnhJo5ZkUZvU/Q GoX0TxCiQ4/pTY0KoKOctpsZh/s7ZXkaCmxtsDFfBAUxIs9ceOip/R6nJOYuw06X +ZBjxgUvek0iDfFLybgnDn5tfxm2ZKhg/S5mjw6ZGV7B50U5wJJfR1fxkHt8WLh4 o3H3Pi0d4uBKng== -----END CERTIFICATE-----Generated at Sat May 10 12:48:39 2025 by rpki-client