$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft File: xCcI35OVSqxgGu8YNb1daSRfsC8.mft (raw, json) Hash identifier: bdm1UUIP5FiS7veSwOvBphrJqas+SXRtaEeGwJnpLc8= Subject key identifier: AC:9A:92:6E:FE:5B:3A:E0:97:63:52:56:02:8C:AB:5B:CD:C6:73:B2 Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f Certificate serial: 0196BA48BE5118E84FCE980D99765B701FCC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft Manifest number: 1569 Signing time: Sat 10 May 2025 13:00:51 +0000 Manifest this update: Sat 10 May 2025 13:00:51 +0000 Manifest next update: Sun 11 May 2025 13:00:51 +0000 Files and hashes: 1: 74nFwIKFH3uKtRT845-Vm7iNpI0.roa (hash: dwaCUFData8ya0Po2dQ83XVjExSGr6tN155fGNNRXuQ=) 2: 8Vw-Hgob2gJJzFxw4N_7kn5Uv2U.roa (hash: yu7qW8GzkV3Hti3WFulLSHqkbPCHZbtH3t3UW9Lux70=) 3: EB1wuDmeUHpHHXGPcvwMNdqGnvs.roa (hash: S/BpxLczs5GDrHvkHydPA/TMOCqSJ4TvOwz6gx4BBLU=) 4: FF91gUN8QFsi0UjNb0hbhpegU4Q.roa (hash: rux40oh7ImTDen+JjsxYObPPdlN/NaOxBM5bJfSToH0=) 5: J0w5SdH9yfaXfZI27FnFWkxgcvQ.roa (hash: 8pwS1Eqt/nPpkIuSrw8GLk2/EWvlTk77ReSYaV8Jvi0=) 6: JNFYYPi5M46N7HWysvZAoIiQkYQ.roa (hash: 4FX/U+mKmibgMicQQFx15cVtRoPongw+FzcAthP3n5w=) 7: bUw7vUVn4cQiT9NfW716xSywuCE.roa (hash: 0o28YQYCqCXv7+7/uFNPlbdyY5SL/GVENUzDTrCxP4I=) 8: czhipXlSFQv2XtrizeOL4AkYjfQ.roa (hash: ktVLYCwHgnxekvZAuH8b1E8sdw3k+FPYtERYCRAoDw8=) 9: eiMLI2dh0653C-exQQO-o2bZ2eQ.roa (hash: IkhvxHI6cJnLtKgglasp3yMcL7l7unzpx1bcMF9QrRQ=) 10: m3NytSFQ3M-7elbGFk6F36SJ_Q8.roa (hash: rnZuJDJK8WGs0bsROLYdsrz2g2AqOwxzQCBo6kRxe1U=) 11: pKbsDSCcPoTPV9a3xyEwiNaa7KM.roa (hash: wFWQhX064Lr1eYYNNXVk7O6211MDK7H1lvoD2jj+zbk=) 12: xCcI35OVSqxgGu8YNb1daSRfsC8.crl (hash: /4qZ2/dxACgySaBEo4RdsADlA2bbaS3dxcWdQXNQHYQ=) 13: xVaoOo9WsmEpdGw7xGgi0JzmgcI.roa (hash: hhPTOcVJyofro9aVTmZ/Tc5fqLyU0/BYOcCQnrqIhRM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 May 2025 13:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:ba:48:be:51:18:e8:4f:ce:98:0d:99:76:5b:70:1f:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f Validity Not Before: May 10 13:00:51 2025 GMT Not After : May 11 13:00:51 2025 GMT Subject: CN=ac9a926efe5b3ae097635256028cab5bcdc673b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d1:44:96:07:bd:72:21:5d:7d:73:c9:e3:3f: 46:3e:1e:75:26:bd:79:2b:c7:55:b7:0d:f4:cb:70: 90:ac:68:20:8d:8c:75:d5:0e:58:3a:26:b8:38:04: a6:b0:f7:36:29:2e:d2:c7:5a:c0:95:5d:07:34:8e: 79:45:b2:09:da:39:3e:1c:0e:81:d0:43:1d:5d:c2: 27:d1:0b:b5:76:ff:0b:24:9c:de:37:25:37:ec:33: f9:ae:64:02:3d:eb:5c:ea:f0:4b:dc:ec:85:02:47: 9a:20:e8:c9:9c:e5:79:49:c3:ca:86:d9:ad:9d:7f: e5:33:81:73:a0:cd:ab:76:4c:0d:73:90:83:fe:ee: c4:e5:4d:0d:7d:ad:4a:f1:05:43:81:73:a8:bf:b3: e9:b6:ed:74:c4:8d:44:4c:36:d3:7e:3e:d4:af:f5: 1c:ce:29:b3:86:c8:d9:a5:b1:f0:45:5b:f2:45:dc: 23:a5:e7:9d:6c:7c:5e:af:09:c2:8a:e5:08:83:b6: b9:41:e8:82:11:e7:05:91:a2:0f:1a:89:9a:30:cd: 2c:04:90:58:e3:ff:a1:37:3b:01:02:57:44:c0:89: 3f:23:9a:ea:c8:35:15:96:14:4d:25:45:da:06:d5: 98:9c:be:22:42:c8:86:ef:33:87:e6:12:72:b6:fe: 09:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:9A:92:6E:FE:5B:3A:E0:97:63:52:56:02:8C:AB:5B:CD:C6:73:B2 X509v3 Authority Key Identifier: keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:37:07:c1:8d:b9:18:09:77:16:96:a6:ae:61:7e:58:78:91: bc:dc:af:32:cc:c6:92:1c:b5:73:fc:9e:6d:0e:f5:6b:82:60: c4:7c:00:fd:c6:e2:d4:eb:6a:fc:a3:8b:74:da:fb:38:26:ca: 5f:03:76:9b:c9:30:2a:66:e2:3d:ea:fb:e1:a7:b3:ad:1d:07: 66:74:a3:50:1f:d7:35:be:ea:76:f4:1e:8b:0c:29:37:d5:ea: 25:36:7a:33:4d:8b:49:3c:c0:56:ce:2b:9c:5c:19:c7:cb:a5: 45:df:08:04:7e:f0:af:12:22:d2:3f:76:4d:a4:b4:28:49:0e: 9a:b7:60:53:b8:ec:8a:53:89:62:4b:fa:ff:d4:82:ed:34:d9: 87:7e:57:28:c2:b5:35:9b:ac:f7:db:2b:9a:aa:53:22:0e:bf: 56:80:e6:e0:a0:86:c9:af:c3:d6:6b:06:1b:8c:2f:7b:32:9d: fc:97:e2:5e:34:de:eb:4e:29:8f:c2:eb:a2:16:4a:ff:b8:ef: 6b:2d:db:56:b5:e7:8c:0f:c7:9a:6f:ce:d6:a4:99:bf:d7:cc: 94:0a:cc:44:54:40:60:14:f4:dd:ac:e7:a8:12:cf:fb:2a:4a: a7:53:1f:23:e7:bc:38:a8:49:c4:6b:0f:28:4b:87:01:ab:80: 87:1e:7c:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa6SL5RGOhPzpgNmXZbcB/MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MjcwOGRmOTM5NTRhYWM2MDFhZWYxODM1YmQ1ZDY5MjQ1 ZmIwMmYwHhcNMjUwNTEwMTMwMDUxWhcNMjUwNTExMTMwMDUxWjAzMTEwLwYDVQQD EyhhYzlhOTI2ZWZlNWIzYWUwOTc2MzUyNTYwMjhjYWI1YmNkYzY3M2IyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9FElge9ciFdfXPJ4z9GPh51Jr15 K8dVtw30y3CQrGggjYx11Q5YOia4OASmsPc2KS7Sx1rAlV0HNI55RbIJ2jk+HA6B 0EMdXcIn0Qu1dv8LJJzeNyU37DP5rmQCPetc6vBL3OyFAkeaIOjJnOV5ScPKhtmt nX/lM4FzoM2rdkwNc5CD/u7E5U0Nfa1K8QVDgXOov7Pptu10xI1ETDbTfj7Ur/Uc zimzhsjZpbHwRVvyRdwjpeedbHxerwnCiuUIg7a5QeiCEecFkaIPGomaMM0sBJBY 4/+hNzsBAldEwIk/I5rqyDUVlhRNJUXaBtWYnL4iQsiG7zOH5hJytv4JFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKyakm7+Wzrgl2NSVgKMq1vNxnOyMB8GA1UdIwQY MBaAFMQnCN+TlUqsYBrvGDW9XWkkX7AvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYt NzQxYzFkOGRlYTJiLzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYtNzQxYzFkOGRlYTJi LzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATjcHwY25 GAl3FpamrmF+WHiRvNyvMszGkhy1c/yebQ71a4JgxHwA/cbi1Otq/KOLdNr7OCbK XwN2m8kwKmbiPer74aezrR0HZnSjUB/XNb7qdvQeiwwpN9XqJTZ6M02LSTzAVs4r nFwZx8ulRd8IBH7wrxIi0j92TaS0KEkOmrdgU7jsilOJYkv6/9SC7TTZh35XKMK1 NZus99srmqpTIg6/VoDm4KCGya/D1msGG4wvezKd/JfiXjTe604pj8LrohZK/7jv ay3bVrXnjA/Hmm/O1qSZv9fMlArMRFRAYBT03aznqBLP+ypKp1MfI+e8OKhJxGsP KEuHAauAhx58EA== -----END CERTIFICATE-----Generated at Sat May 10 20:12:51 2025 by rpki-client