$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft File: tIUv-6fVfFqK-7bqW-r33-wMFFo.mft (raw, json) Hash identifier: L8/VPjITGaE8BUplMs2i55d7Jn9g4aBGM25tQl91TEo= Subject key identifier: 0D:66:52:53:91:1D:D3:10:7B:C7:0B:11:54:32:F2:AB:65:96:14:20 Authority key identifier: B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A Certificate issuer: /CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a Certificate serial: 0196AD317455527D9FA3113D2E1A67F040B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft Manifest number: 1537 Signing time: Thu 08 May 2025 00:00:21 +0000 Manifest this update: Thu 08 May 2025 00:00:21 +0000 Manifest next update: Fri 09 May 2025 00:00:21 +0000 Files and hashes: 1: 2zBG6wv0zKBe2XlbGkfLL9rOdtY.roa (hash: lxNpEB+wfb/SASGgTTjYX3zTxUdrCP8FyxAXU//G0JE=) 2: 60ZaPiBpi8SxBTjOjQUT9FiEU2Q.roa (hash: +EenJI8/Zu0itO/r18F94M+NWWU8CW03dUIDwunEbUc=) 3: 7Q9gLwoSUvmWbh9pchcvFCnXBMI.roa (hash: OqWyCVxCH/ByBizomU3lyw35etS/Okp+27Pxn29bVl8=) 4: EU2O-Gd0BV713EAdFoGJuGMnLgQ.roa (hash: DIGhFlsty46rXCRlbLUopCZPIy0Ap7bO0kln0jsUUZQ=) 5: O3sXFCWDkxRLQArJVgciZYJOH2k.roa (hash: wEiLpu8rEygqvBvHCRoBqicZ9xgf2J+eV7J8nj+KxjA=) 6: ZjHl0XpQM8CCJz6Om67G0wOmvS4.roa (hash: xCetPcOL8RFsZEGexQBgMW05eQfuM1TVnSNp6oyXZtQ=) 7: d8mFLNhZassFfsIT0V6Pg-FoNgA.roa (hash: G1lxk+WJgE19vtZBUhgAhwauP4CikNyKzPmcQ0hwXlc=) 8: hpi8FGXUqFwvyzbspUBbXSR-u5E.roa (hash: D+oqZ2gXKRa2ovM6yrY+DCG9y6qbKxbt+6ZJu7cuVlg=) 9: qttpBVUzvg-H-ScovtnzHfhab98.roa (hash: Z/Qik4bEzsKJTfqfp1D8dTDPNezW76BTvrr8ud6rEd8=) 10: tIUv-6fVfFqK-7bqW-r33-wMFFo.crl (hash: skb2sqQsUF1wp9u4hX+XxnZaPKrc4b0+1soWLcTH+sY=) 11: vqcl3DQ1E1K3lnM1bs8fqqNI4EQ.roa (hash: S9QBaWkrI9BQviKt66y8uBb8+Y6dNwU4YKfcgaHW4SE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 May 2025 20:38:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:ad:31:74:55:52:7d:9f:a3:11:3d:2e:1a:67:f0:40:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a Validity Not Before: May 8 00:00:21 2025 GMT Not After : May 9 00:00:21 2025 GMT Subject: CN=0d665253911dd3107bc70b115432f2ab65961420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1f:86:cb:4e:e3:b7:ad:68:13:60:14:67:46: b8:71:c2:e8:7b:16:fb:53:22:c6:0f:d1:67:33:20: 1e:5f:43:a8:a7:51:27:1b:b9:5e:34:6f:ae:ad:d4: cc:cb:96:ad:51:21:ad:e7:f8:c2:53:be:72:b4:08: f9:81:7d:5c:db:be:bd:7c:d9:57:03:e2:d4:d4:99: ba:0d:ff:de:7b:c6:d4:02:14:23:fe:53:74:22:b3: e3:4a:f9:21:a0:3a:86:8d:78:22:7a:4a:92:33:e4: ed:e7:26:58:66:af:5a:46:da:bc:e3:bb:53:40:07: 33:09:b2:6a:e0:eb:c0:e5:b5:c7:1d:7a:d6:6e:88: 48:b7:5c:c7:16:cb:d9:d5:c6:05:19:ad:bf:99:26: d4:1b:1a:1d:34:25:ca:74:fd:12:ae:27:8e:92:d4: 39:5d:0e:5e:48:53:b2:8f:c7:a7:cb:fe:68:b3:ee: 8b:34:7a:90:29:2d:32:5c:b6:84:41:e2:4a:57:ae: ea:92:0b:ad:39:9d:52:0f:bb:31:5e:66:a4:19:26: 71:2a:0a:95:86:98:24:dc:57:41:ef:09:d9:e8:c5: 7e:ef:4a:8f:3f:00:32:e9:37:8f:20:ff:b7:4e:9f: 1b:38:62:ae:a3:fb:c5:2f:35:76:ae:d5:aa:fb:86: 3f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:66:52:53:91:1D:D3:10:7B:C7:0B:11:54:32:F2:AB:65:96:14:20 X509v3 Authority Key Identifier: keyid:B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:39:2c:68:55:ae:94:a2:fc:e7:5e:06:87:9f:c0:85:7b:0a: d3:5c:12:2f:64:dc:25:b0:9d:d1:fc:32:a2:3b:7d:d6:a8:bb: 23:57:d0:ec:81:f6:92:60:b0:94:7c:d3:a3:87:f9:c9:5e:9c: 4a:bf:1b:8a:d9:a1:44:fb:12:ca:52:16:ce:6c:b5:60:06:92: b8:3a:b4:46:9f:11:a6:9b:48:ba:7c:98:5c:e2:20:e2:dc:db: 5f:9c:a6:0e:7d:34:da:29:20:fa:33:95:b2:7a:f0:3e:21:92: ee:96:d0:85:40:4a:18:ab:d9:0c:d2:a9:e5:17:68:7d:a8:bf: 81:38:5a:c4:af:40:be:4c:7e:3d:b3:91:91:55:45:1f:99:6b: 57:a0:6d:d8:df:8b:e5:56:91:4f:b4:59:13:33:93:b5:c1:e6: df:ce:84:0d:4e:6f:ce:85:01:86:b6:4f:91:38:f9:d8:cf:74: 1d:58:3b:f1:fc:5b:a7:d3:be:5e:fc:b0:ae:c2:e7:bb:8f:97: e0:b8:28:11:07:8f:f1:6b:16:be:08:a2:83:4c:52:a1:7d:bf: 58:b3:79:99:aa:1c:d8:56:5c:00:8b:04:9d:39:2e:9b:80:39: b0:65:e2:db:81:d0:16:88:04:83:70:49:df:8a:b6:ad:c7:9f: 9e:77:2b:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZatMXRVUn2foxE9Lhpn8ECxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ODUyZmZiYTdkNTdjNWE4YWZiYjZlYTViZWFmN2RmZWMw YzE0NWEwHhcNMjUwNTA4MDAwMDIxWhcNMjUwNTA5MDAwMDIxWjAzMTEwLwYDVQQD EygwZDY2NTI1MzkxMWRkMzEwN2JjNzBiMTE1NDMyZjJhYjY1OTYxNDIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArx+Gy07jt61oE2AUZ0a4ccLoexb7 UyLGD9FnMyAeX0Oop1EnG7leNG+urdTMy5atUSGt5/jCU75ytAj5gX1c2769fNlX A+LU1Jm6Df/ee8bUAhQj/lN0IrPjSvkhoDqGjXgiekqSM+Tt5yZYZq9aRtq847tT QAczCbJq4OvA5bXHHXrWbohIt1zHFsvZ1cYFGa2/mSbUGxodNCXKdP0SrieOktQ5 XQ5eSFOyj8eny/5os+6LNHqQKS0yXLaEQeJKV67qkgutOZ1SD7sxXmakGSZxKgqV hpgk3FdB7wnZ6MV+70qPPwAy6TePIP+3Tp8bOGKuo/vFLzV2rtWq+4Y/1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA1mUlORHdMQe8cLEVQy8qtllhQgMB8GA1UdIwQY MBaAFLSFL/un1Xxaivu26lvq99/sDBRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9lNDVlMzAtZTdkOC00ZmI4LTkwYWQt ZjcxMDM4ZTk2N2E0LzEvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9lNDVlMzAtZTdkOC00ZmI4LTkwYWQtZjcxMDM4ZTk2N2E0 LzEvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOzksaFWu lKL8514Gh5/AhXsK01wSL2TcJbCd0fwyojt91qi7I1fQ7IH2kmCwlHzTo4f5yV6c Sr8bitmhRPsSylIWzmy1YAaSuDq0Rp8RpptIunyYXOIg4tzbX5ymDn002ikg+jOV snrwPiGS7pbQhUBKGKvZDNKp5Rdofai/gThaxK9Avkx+PbORkVVFH5lrV6Bt2N+L 5VaRT7RZEzOTtcHm386EDU5vzoUBhrZPkTj52M90HVg78fxbp9O+XvywrsLnu4+X 4LgoEQeP8WsWvgiig0xSoX2/WLN5maoc2FZcAIsEnTkum4A5sGXi24HQFogEg3BJ 34q2rcefnncrtQ== -----END CERTIFICATE-----Generated at Thu May 8 02:39:56 2025 by rpki-client