$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft File: a8XefXJVt9WCYMZaEgsWTvEO-QM.mft (raw, json) Hash identifier: RIuApTw/2A2tk7Jvr4FaNwCWIT+bQYl5DpWlEI1v96I= Subject key identifier: 9F:5E:41:62:98:44:48:3F:8B:A8:41:B2:D9:6B:F6:92:D2:64:2D:E0 Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03 Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903 Certificate serial: 0196B7EC492B75185A20D3551EA89CDB16E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft Manifest number: 1506 Signing time: Sat 10 May 2025 02:00:37 +0000 Manifest this update: Sat 10 May 2025 02:00:37 +0000 Manifest next update: Sun 11 May 2025 02:00:37 +0000 Files and hashes: 1: 12ToQcSPt7mcdwlwu8cks0_4omc.roa (hash: Iyr2cE2tf2K+xaBK2dhfD2MWZhPJHAOvhdyF3JqR+/g=) 2: 5ZYhCNxqOm04hmY0BhngKxN9rig.roa (hash: 83J35QD4/t+gUfggZnoS3qCNRY62Cfjrx/Jm442KIdY=) 3: DNFKKqPzY2tTxyq4ZF-e6ESwWBk.roa (hash: ONyXaG/qy9WX6Bit7PbMeuasymNM8i3asJe1STaYw+o=) 4: EHiB4q1Vo4oqGAjQtZT7i18dBvs.roa (hash: abzX5lFNPVhGuyGSiOTcu5+TTen+fgBo8SzNpUg+bbw=) 5: HQby7lGCxVhcsYrFBxtLvu1Nq1s.roa (hash: OEoyOXMuUI9gzJHQlRaFw5QR3hyZ9zizJ0Zhg109soQ=) 6: KEB7URRNcLIkdHFl8_NaQFzoCUc.roa (hash: 8o0J9qbfKon/Y8q8sQm0uMymQ1kVnwb8u5ia9INGr/U=) 7: RVuh9Ovnia6HGIxuY5C4mqQkVzw.roa (hash: 7MdQXOdkGadK2Vo4n1LYddNyvg9R887clmJN5QnKDO0=) 8: _4iJCnTkrZTLi3Znw6No51nUp0U.roa (hash: q5ypixYuURsWaauidvKopOxQLyMvMh9Ff8agaEGE8Z8=) 9: a8XefXJVt9WCYMZaEgsWTvEO-QM.crl (hash: 5bcm1gffdNmwJYk7VGUmqN1CVtdK/eNE2aO3d4PvJiM=) 10: egyYxAR3bwmsGgeknwOtvs63Vmw.roa (hash: XurIkmwZSfSrHBi1j2SOabRmxdimDBrxAVpSXYwSmK8=) 11: fU80OsVtjHUcYFzJWtlJs69eD_g.roa (hash: HvQM/fxcMSZwx7rz3J1gO6JjkLyJY0laHos/X8/ejmw=) 12: gCwZCj5y4eEHhiE3OdNG143EtPw.roa (hash: bJxdVgp0WUK1yUG+3MFHdMNTBJUCc3SJjDGJmr3bN5s=) 13: kWxL8-0FaQ5asnDLfivzWKH4-z8.roa (hash: aTbkIB4IPS1IGAIXN2uxEpuYorOcI3bZmMM6X6TsyjM=) 14: wM1Yw5nFuvuJTOAzQjCj5rN5Pm0.roa (hash: ent4AXHk/p6bQe6GuoAZTq2KLI9u7gMCUsO1EmVjq8w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 May 2025 02:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:b7:ec:49:2b:75:18:5a:20:d3:55:1e:a8:9c:db:16:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903 Validity Not Before: May 10 02:00:37 2025 GMT Not After : May 11 02:00:37 2025 GMT Subject: CN=9f5e41629844483f8ba841b2d96bf692d2642de0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5a:42:de:6b:11:c0:f5:ab:b3:e3:03:ae:bf: 34:68:05:42:22:2b:0e:03:40:50:e4:3c:7c:a9:6b: 23:bd:38:6d:24:3a:9c:70:ee:b6:e5:4c:f6:25:e3: ed:3c:88:0d:97:50:cb:44:26:16:e8:c8:06:fa:f3: ba:e7:d4:c6:70:62:51:1c:b5:11:82:0a:3e:f1:69: dc:97:60:46:08:fa:5c:37:de:45:88:bb:c8:5d:af: 82:6e:6c:37:e9:42:41:a7:cb:43:a0:20:00:f7:3f: 37:1e:51:d4:6d:a1:36:89:58:5c:01:d5:f1:72:96: 07:1c:c8:68:95:c3:1d:c7:85:bf:b7:c7:61:98:6f: 14:b6:0e:6d:52:7d:ca:ff:b7:b2:ce:1e:20:ca:47: b3:60:8d:13:45:dc:ab:c6:97:00:17:0a:d9:97:b1: 18:0f:b5:9c:ff:fe:ed:6d:31:06:11:40:fd:f6:37: 57:25:10:3a:bb:6b:61:3d:4a:44:e7:1b:ea:f9:67: d1:d5:32:f5:7e:5d:3a:ef:5c:39:0b:bf:08:b2:41: 34:79:c0:50:23:f6:30:09:70:07:7e:19:c7:99:af: 84:50:00:03:59:c3:fa:6a:11:0a:62:93:17:e9:ed: d3:4f:ba:ff:ac:51:82:19:60:c7:29:04:0f:f0:72: 52:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:5E:41:62:98:44:48:3F:8B:A8:41:B2:D9:6B:F6:92:D2:64:2D:E0 X509v3 Authority Key Identifier: keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:ab:6f:2e:4d:ab:e1:79:69:39:7d:c0:0d:b9:12:69:36:0c: 3c:5e:04:2b:75:3e:e5:f9:be:81:aa:b2:f0:95:6e:19:ca:f8: 9d:3c:45:bc:fb:92:59:79:2e:20:d3:09:f2:08:61:b7:5b:4e: 0d:b1:04:b1:2b:d9:f1:26:a0:6d:67:5b:76:86:9b:b6:ba:3a: 9e:ee:af:41:12:0c:fb:8c:fe:6e:09:60:b0:17:5d:e6:f0:d9: 32:08:86:7b:9a:d5:5e:14:3b:ee:38:c9:73:0f:5a:5d:c7:78: b0:1e:1f:88:25:4f:e5:d6:07:72:42:6d:cc:80:ca:e6:d9:93: 50:b1:e5:d8:31:d8:33:78:a5:da:8b:9d:51:02:c8:62:e5:8e: c9:4a:ba:09:f7:fc:c6:ae:f7:ef:8e:69:7b:a3:25:9a:33:ea: 15:6b:52:62:1c:7d:6b:33:99:54:c2:aa:01:29:e7:c2:f0:fd: b3:33:6a:ff:1c:1c:e9:cf:fa:87:02:27:5a:4b:94:8d:23:09: 23:70:f0:26:27:af:4c:d3:35:ca:22:b3:0e:a8:22:f9:ec:e9: 0e:ce:be:1f:10:4c:2f:ff:6a:1e:e9:93:9e:94:20:ba:b5:99: 6c:0f:2d:cb:4a:90:f5:d4:0d:a9:f4:91:99:7f:4b:0b:38:b3: 39:7f:ad:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa37EkrdRhaINNVHqic2xbpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYzVkZTdkNzI1NWI3ZDU4MjYwYzY1YTEyMGIxNjRlZjEw ZWY5MDMwHhcNMjUwNTEwMDIwMDM3WhcNMjUwNTExMDIwMDM3WjAzMTEwLwYDVQQD Eyg5ZjVlNDE2Mjk4NDQ0ODNmOGJhODQxYjJkOTZiZjY5MmQyNjQyZGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1pC3msRwPWrs+MDrr80aAVCIisO A0BQ5Dx8qWsjvThtJDqccO625Uz2JePtPIgNl1DLRCYW6MgG+vO659TGcGJRHLUR ggo+8Wncl2BGCPpcN95FiLvIXa+Cbmw36UJBp8tDoCAA9z83HlHUbaE2iVhcAdXx cpYHHMholcMdx4W/t8dhmG8Utg5tUn3K/7eyzh4gykezYI0TRdyrxpcAFwrZl7EY D7Wc//7tbTEGEUD99jdXJRA6u2thPUpE5xvq+WfR1TL1fl0671w5C78IskE0ecBQ I/YwCXAHfhnHma+EUAADWcP6ahEKYpMX6e3TT7r/rFGCGWDHKQQP8HJS7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ9eQWKYREg/i6hBstlr9pLSZC3gMB8GA1UdIwQY MBaAFGvF3n1yVbfVgmDGWhILFk7xDvkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgt ZmRmNjYzOGQyYzA0LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgtZmRmNjYzOGQyYzA0 LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGatvLk2r 4XlpOX3ADbkSaTYMPF4EK3U+5fm+gaqy8JVuGcr4nTxFvPuSWXkuINMJ8ghht1tO DbEEsSvZ8SagbWdbdoabtro6nu6vQRIM+4z+bglgsBdd5vDZMgiGe5rVXhQ77jjJ cw9aXcd4sB4fiCVP5dYHckJtzIDK5tmTULHl2DHYM3il2oudUQLIYuWOyUq6Cff8 xq73745pe6MlmjPqFWtSYhx9azOZVMKqASnnwvD9szNq/xwc6c/6hwInWkuUjSMJ I3DwJievTNM1yiKzDqgi+ezpDs6+HxBML/9qHumTnpQgurWZbA8ty0qQ9dQNqfSR mX9LCzizOX+tqQ== -----END CERTIFICATE-----Generated at Sat May 10 11:56:33 2025 by rpki-client