$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft File: sa8S9cp1ySKkql2stJwEqTI39O0.mft (raw, json) Hash identifier: +f7qtiuyaWsXp77otl28ttilMo4jIm+KMJYEUIBtX7c= Subject key identifier: F8:CB:4D:90:A3:28:D6:4E:E5:22:D4:1B:74:92:C4:69:1A:D2:BA:A8 Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Certificate serial: 0196C7964CE253FF0C99F0E162FA164A50B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft Manifest number: 113A Signing time: Tue 13 May 2025 03:00:38 +0000 Manifest this update: Tue 13 May 2025 03:00:38 +0000 Manifest next update: Wed 14 May 2025 03:00:38 +0000 Files and hashes: 1: 0Masll6bbXJowlWVdStYbs2tx6E.roa (hash: Rro7robf4OQi2SafD/+wvUIv6rGO8rIKSIcGQQxuDhQ=) 2: GbtphNgjK0vdnL4zh4ndNFpMq98.roa (hash: u7HLBqxJEFs0R6rzUwZQDioPq2mneZLMKiZ7WWFYBQg=) 3: HIdYT19grrvIrsLvbv9c-RyNoYM.roa (hash: gMWRLPsAhHALB5C0CyTnC2YpfuJ8OqfVcPAvIC+/69E=) 4: OUt5ZB5ErN_qim9RPT1gdy6_fsA.roa (hash: jUTt0o3pm+pyLvb6Ukj+eNNJ2nE69gsAdM4+2ox59R8=) 5: R_OlpiLM8AchN0LvgG-brNSPeok.roa (hash: Ha2jaeCRdAo3cD1S+TwOcwXV50R2/YikiY9fj+5QfSk=) 6: T-i1HnnAiZlugAgaa37LNPgeYyA.roa (hash: JZrI/oiF2iHcbj3PFgspIgoRlLncbc7mtmuIlUx+R6U=) 7: Ud1-qg4EKtzsyzWQNEDC3VcBphk.roa (hash: tG3V/2PvCU18KU7wZhF4EU3GKrtt9KLBzuF/XDqtx0A=) 8: euxOi9Xp3n7AyiSfCEP-xOv9hDo.roa (hash: hqClLQ+yTS1bqIE58Fj5bi8zXosgwwjJT2D8au7VfQ0=) 9: oTdRqWCGB_YZL-zzysNmCsUI8OU.roa (hash: Z3CxIW13t+FC0u78Ynw/b8NpKjP4IiiiZzM5isLuBQ4=) 10: opjBwsfQwaZJKVugJJ6MF-vgLQw.roa (hash: MNlxdTCVbR2yhgEH9HVAaomJahjdfDcmr5j99PJZjnc=) 11: piqnuODF7lhN690__V-7lYt7O9g.roa (hash: bJ0by5gF5+d/INxTw0HKrWzPPNlfAOi7lGQ6bR/NpSU=) 12: qjtTNxOEgSr0b6Weeb9JJHyFnhM.roa (hash: Eb0gxKs3qeMLVvYaIgIGm1oY4DsjaHktiucw1gfNHns=) 13: sa8S9cp1ySKkql2stJwEqTI39O0.crl (hash: H7NKjw2WiTAaz8HuOZI9/kNKoAhpsPDQUvcfPMEh4+0=) 14: saFbFhTUuPzFfFtMaOygiXjsdjQ.roa (hash: TDWnbYHUGSQ6GnqoY3kIyLDGpSZVRvMCUWL7dARQ87Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 May 2025 03:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:c7:96:4c:e2:53:ff:0c:99:f0:e1:62:fa:16:4a:50:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Validity Not Before: May 13 03:00:38 2025 GMT Not After : May 14 03:00:38 2025 GMT Subject: CN=f8cb4d90a328d64ee522d41b7492c4691ad2baa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3f:9b:3f:ed:b1:1a:bc:98:e4:3e:dc:de:03: dc:3d:04:2d:d9:93:b0:6a:cb:cd:37:33:6c:7f:5f: f6:fa:ea:7e:a2:1e:d9:6b:88:8c:5b:7e:91:c8:70: e3:23:fe:e5:31:02:f0:3e:ed:de:df:ba:98:10:06: c6:96:0e:52:cb:c9:b3:ac:18:67:bd:99:4c:bc:a2: fd:75:6f:c7:01:b2:c2:45:99:2f:49:7f:2a:b5:79: e3:15:14:da:fa:75:44:e3:3c:21:04:83:4e:af:16: eb:b6:2e:81:71:6a:96:e2:bc:b9:a8:bb:a6:5d:6e: 44:c8:3b:06:df:f0:fa:34:be:26:db:2c:74:72:6a: 02:e2:13:47:46:72:13:a8:96:5d:9b:a5:ed:b9:96: ed:bf:e7:be:1e:af:2d:b5:b8:73:b2:af:c5:62:20: 46:ec:5f:be:21:3b:9e:51:44:ce:51:85:34:2b:ea: 81:fe:f7:62:f4:19:f5:73:b9:79:2c:bb:32:28:60: 79:f6:1f:c9:68:53:2c:c9:30:19:d7:11:43:5e:cc: fd:ea:06:1a:9f:14:04:50:17:75:d6:23:c8:ea:9b: 54:2e:34:8a:80:4c:96:11:54:d5:66:14:4f:d2:f4: 09:0d:e5:28:94:d5:4b:fd:b9:04:3e:9c:f0:1e:04: fe:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:CB:4D:90:A3:28:D6:4E:E5:22:D4:1B:74:92:C4:69:1A:D2:BA:A8 X509v3 Authority Key Identifier: keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:fa:ef:22:54:fe:88:5c:f1:ab:e3:96:45:de:24:61:1a:7b: 96:99:6f:f0:a4:8c:53:09:68:01:4a:fb:46:5a:6c:b6:85:d4: d8:32:13:a6:26:31:c3:b8:26:ab:ee:f2:8f:91:2b:2a:fb:de: 6f:82:38:0f:08:2d:7a:76:53:b3:b6:b1:8c:be:c8:1f:7b:00: 36:fd:d3:0a:fb:ab:23:ee:b6:b6:56:c2:5e:a0:9d:28:af:53: e5:9a:bf:0f:14:92:87:3d:00:d5:df:67:b9:cc:75:48:c0:9f: fa:3f:bd:bb:52:18:83:07:c2:67:7d:db:df:9b:b5:63:0e:dc: 32:5c:43:da:b6:31:e6:02:f0:d0:fd:6f:92:5d:71:15:ee:7b: fe:8f:19:22:fd:4f:69:54:06:de:94:27:d4:51:35:1e:87:c2: 6c:a4:87:b4:de:fb:f5:c4:be:1d:c2:b7:26:dd:73:17:8c:c1: e2:80:49:4d:86:da:5e:f4:21:f3:03:da:3c:81:14:05:53:56: 7a:cd:64:29:3d:34:6a:a1:ce:89:0b:69:ca:0a:f0:a1:b2:d8: 01:c4:7b:42:ea:9f:88:7a:6f:4a:72:95:c1:0c:e3:d0:f0:b9: 14:e9:ef:0f:03:f8:1b:51:19:f3:b0:19:fe:51:c4:1f:1d:93: c0:02:c0:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZbHlkziU/8MmfDhYvoWSlCyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYWYxMmY1Y2E3NWM5MjJhNGFhNWRhY2I0OWMwNGE5MzIz N2Y0ZWQwHhcNMjUwNTEzMDMwMDM4WhcNMjUwNTE0MDMwMDM4WjAzMTEwLwYDVQQD EyhmOGNiNGQ5MGEzMjhkNjRlZTUyMmQ0MWI3NDkyYzQ2OTFhZDJiYWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0D+bP+2xGryY5D7c3gPcPQQt2ZOw asvNNzNsf1/2+up+oh7Za4iMW36RyHDjI/7lMQLwPu3e37qYEAbGlg5Sy8mzrBhn vZlMvKL9dW/HAbLCRZkvSX8qtXnjFRTa+nVE4zwhBINOrxbrti6BcWqW4ry5qLum XW5EyDsG3/D6NL4m2yx0cmoC4hNHRnITqJZdm6XtuZbtv+e+Hq8ttbhzsq/FYiBG 7F++ITueUUTOUYU0K+qB/vdi9Bn1c7l5LLsyKGB59h/JaFMsyTAZ1xFDXsz96gYa nxQEUBd11iPI6ptULjSKgEyWEVTVZhRP0vQJDeUolNVL/bkEPpzwHgT+XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPjLTZCjKNZO5SLUG3SSxGka0rqoMB8GA1UdIwQY MBaAFLGvEvXKdckipKpdrLScBKkyN/TtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUt NTc2MGVmYmNjNjU0LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUtNTc2MGVmYmNjNjU0 LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVPrvIlT+ iFzxq+OWRd4kYRp7lplv8KSMUwloAUr7RlpstoXU2DITpiYxw7gmq+7yj5ErKvve b4I4DwgtenZTs7axjL7IH3sANv3TCvurI+62tlbCXqCdKK9T5Zq/DxSShz0A1d9n ucx1SMCf+j+9u1IYgwfCZ33b35u1Yw7cMlxD2rYx5gLw0P1vkl1xFe57/o8ZIv1P aVQG3pQn1FE1HofCbKSHtN779cS+HcK3Jt1zF4zB4oBJTYbaXvQh8wPaPIEUBVNW es1kKT00aqHOiQtpygrwobLYAcR7QuqfiHpvSnKVwQzj0PC5FOnvDwP4G1EZ87AZ /lHEHx2TwALAuA== -----END CERTIFICATE-----Generated at Tue May 13 12:25:01 2025 by rpki-client