$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft File: p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft (raw, json) Hash identifier: LvLsI9d3mRIvIxWW+mNlZ3mpq3xr6hOXu7CZmRwIJtI= Subject key identifier: D0:A8:D4:6A:50:A7:56:D5:7A:21:D9:26:31:19:4F:4F:AC:AA:9E:30 Authority key identifier: A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93 Certificate issuer: /CN=a79bba2805a988954e4fec42570530f16f9e7093 Certificate serial: 0196A352D24AD5912A3B5348FC470CE03CCB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft Manifest number: 153C Signing time: Tue 06 May 2025 02:00:35 +0000 Manifest this update: Tue 06 May 2025 02:00:35 +0000 Manifest next update: Wed 07 May 2025 02:00:35 +0000 Files and hashes: 1: D-RIX_FD-SN5SshOisKYwCgAV_I.roa (hash: x033PUL0ZGG5mDhT/he8/ieNNlTHX9WAHAFDtaJQ278=) 2: DzfEbFPfYy4xpas3bsxIDlFZktA.roa (hash: THhbtWRVoUEwxJC8CZKbYrVSasGjOcgtKoQ/LVP3UKA=) 3: E9n95xnL19yX1B4Vk9ExkIt3f-c.roa (hash: ouMNy3kdRPfar+w1HNS2jM0LMO/r+ZZQenoBAODEfBY=) 4: EAoNPZ8TpgdLFjCSj501GJeuEXI.roa (hash: pO6PSYGesSNZg2BIOmFMIZ89ZMsZTFVJdrF49KPq8PA=) 5: FFaDrp2TE8Iso6bJlqnb0FqxMJo.roa (hash: Jw9G+J8hnCo8w1musIzxpySO6bTcvYrzNLckyhAd2sE=) 6: FXDFb34PBHFpzXqxsfO-MRRoL1w.roa (hash: oabg5c6EyRNzxsL44FI1GqhM5cn4+01B5g9m9wTra50=) 7: IUh9_C97qpOKm_8AV-AspCaoEAg.roa (hash: c2S3m+7nRWXLhOWwBs+WGI3pFEVCypK98I+qc9J+WoQ=) 8: Nbis52_bGmBIGC7k7OWz54ZVymo.roa (hash: aH/DSjSBHo+CUhmGlittWaZYo1UBwB3kdgrpakh3geQ=) 9: PPsYUSjJ6B10FlewER5Ai8nn-_A.roa (hash: 10T1YdRCwRDgbSqL2l2y0wL7RPOmP97+IJQfqf219GY=) 10: oJr4DCeqtN2tV6Ugf36L9eXTcTI.roa (hash: vOwTJ+3Vsj2ap8ElFcEgLM26b3Nku6y6ruqjJGc7XJs=) 11: p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl (hash: ZHVkHtDgJL/Ocs1K/PSSC3xt6yJsxOEDN3Cb+lJ/jc4=) 12: pY29XiCKfPgxYFYQ6-Ey_qrcL8w.roa (hash: UStN0NQIs1Hh3GK9cdElOtzaqGJ6jlYdtTPTd6s3Eic=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 May 2025 02:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:a3:52:d2:4a:d5:91:2a:3b:53:48:fc:47:0c:e0:3c:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a79bba2805a988954e4fec42570530f16f9e7093 Validity Not Before: May 6 02:00:35 2025 GMT Not After : May 7 02:00:35 2025 GMT Subject: CN=d0a8d46a50a756d57a21d92631194f4facaa9e30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:77:b0:b5:be:a8:16:17:b9:64:03:23:70:f9: 0c:2e:8c:58:06:14:e5:2b:9c:87:f3:50:4f:8c:91: 81:72:c2:e2:ff:d3:5b:81:2b:fa:02:c5:3e:d0:4e: cd:e5:15:61:9a:89:6f:cf:8a:8c:f2:18:ef:b9:79: 5b:66:35:6f:d4:f3:51:d3:c2:3d:0a:32:0e:bd:92: ac:1b:01:c6:6c:d6:ed:85:ab:43:9d:dd:99:28:24: 95:a3:bb:7c:92:e5:ca:2b:4f:2f:a9:82:7f:08:ce: 94:6c:5f:91:7e:e8:7b:52:98:52:70:0e:9d:7b:b5: 99:c7:9c:32:8a:b9:fb:27:b2:83:13:12:df:00:89: 74:bc:dc:d4:88:2f:3f:7b:fa:7f:c1:44:93:72:82: 03:21:41:f9:99:96:65:d0:dc:c6:ae:c8:ab:b2:61: ed:c2:d9:dc:9e:f1:f9:af:10:e3:8b:40:aa:86:ad: 4c:9d:7c:a1:42:12:87:cd:6d:1f:0f:2c:33:97:d1: d9:8c:47:d7:fa:32:5e:0b:50:05:86:a0:32:b0:b7: 67:d1:66:db:dd:a3:9e:71:fc:56:ef:5b:3e:e4:05: 22:a6:3d:ee:a6:45:0a:83:b4:6e:f5:83:74:66:1b: 82:50:d0:b3:3a:9b:ab:79:57:36:07:a1:72:d3:e9: 59:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:A8:D4:6A:50:A7:56:D5:7A:21:D9:26:31:19:4F:4F:AC:AA:9E:30 X509v3 Authority Key Identifier: keyid:A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:3b:3c:c3:e2:74:67:67:43:2d:45:63:37:44:75:bc:61:00: 2b:0d:37:00:f9:56:19:cf:c7:5a:33:37:3e:e6:78:2f:36:9a: 83:00:4c:40:23:b5:02:14:b3:20:3b:bc:4b:f6:b2:e0:c0:49: 12:9b:f2:6c:7d:f4:31:90:5f:a6:27:a0:46:2e:b2:a9:76:e2: 7a:28:60:0e:53:1a:85:48:b2:33:6a:e6:3d:d3:14:fe:2b:28: 15:a0:24:5b:8d:de:b0:78:86:74:73:f0:9f:0e:a3:a4:8a:ef: 44:e9:f2:c5:c6:63:6a:a4:5c:84:0b:14:64:60:ab:5a:e9:8b: 73:5a:35:18:51:7f:7c:33:f4:96:94:38:cd:9a:20:34:46:1f: 53:e0:a0:37:e2:b9:6c:80:01:ba:57:55:b9:c8:3d:fc:1d:14: 85:55:d4:d9:ad:62:6b:43:9b:e1:eb:6c:b4:ff:84:f1:d1:bf: 20:be:95:16:ad:96:94:98:8b:58:62:37:69:6d:40:5f:fe:95: d3:42:19:1d:5e:1a:fe:9b:f3:f6:61:f9:7e:78:70:2c:60:c9: 9d:29:f4:55:be:5c:f0:54:01:60:b2:f9:ea:91:4e:fa:cd:cd: c5:e7:03:74:24:6b:f7:86:84:2b:18:98:69:3c:01:cc:93:3a: 81:12:e4:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZajUtJK1ZEqO1NI/EcM4DzLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3OWJiYTI4MDVhOTg4OTU0ZTRmZWM0MjU3MDUzMGYxNmY5 ZTcwOTMwHhcNMjUwNTA2MDIwMDM1WhcNMjUwNTA3MDIwMDM1WjAzMTEwLwYDVQQD EyhkMGE4ZDQ2YTUwYTc1NmQ1N2EyMWQ5MjYzMTE5NGY0ZmFjYWE5ZTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03ewtb6oFhe5ZAMjcPkMLoxYBhTl K5yH81BPjJGBcsLi/9NbgSv6AsU+0E7N5RVhmolvz4qM8hjvuXlbZjVv1PNR08I9 CjIOvZKsGwHGbNbthatDnd2ZKCSVo7t8kuXKK08vqYJ/CM6UbF+Rfuh7UphScA6d e7WZx5wyirn7J7KDExLfAIl0vNzUiC8/e/p/wUSTcoIDIUH5mZZl0NzGrsirsmHt wtncnvH5rxDji0Cqhq1MnXyhQhKHzW0fDywzl9HZjEfX+jJeC1AFhqAysLdn0Wbb 3aOecfxW71s+5AUipj3upkUKg7Ru9YN0ZhuCUNCzOpureVc2B6Fy0+lZlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNCo1GpQp1bVeiHZJjEZT0+sqp4wMB8GA1UdIwQY MBaAFKebuigFqYiVTk/sQlcFMPFvnnCTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDV1NktBV3BpSlZPVC14Q1Z3VXc4Vy1lY0pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9kMTQwZmItMDNhZS00NWQ5LThkZGMt ZTFlZDlkZDJhMDJhLzEvcDV1NktBV3BpSlZPVC14Q1Z3VXc4Vy1lY0pNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9kMTQwZmItMDNhZS00NWQ5LThkZGMtZTFlZDlkZDJhMDJh LzEvcDV1NktBV3BpSlZPVC14Q1Z3VXc4Vy1lY0pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVzs8w+J0 Z2dDLUVjN0R1vGEAKw03APlWGc/HWjM3PuZ4LzaagwBMQCO1AhSzIDu8S/ay4MBJ EpvybH30MZBfpiegRi6yqXbieihgDlMahUiyM2rmPdMU/isoFaAkW43esHiGdHPw nw6jpIrvROnyxcZjaqRchAsUZGCrWumLc1o1GFF/fDP0lpQ4zZogNEYfU+CgN+K5 bIABuldVucg9/B0UhVXU2a1ia0Ob4etstP+E8dG/IL6VFq2WlJiLWGI3aW1AX/6V 00IZHV4a/pvz9mH5fnhwLGDJnSn0Vb5c8FQBYLL56pFO+s3NxecDdCRr94aEKxiY aTwBzJM6gRLkGQ== -----END CERTIFICATE-----Generated at Tue May 6 11:59:34 2025 by rpki-client