$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft File: _97EpGpubk-aktC6Lgs6tWWL4b0.mft (raw, json) Hash identifier: /Z5ta1TELGoqOEXvVnrjv6rXDQJ7UtufVo0vkte6CBs= Subject key identifier: 97:EF:ED:72:69:E4:23:B9:82:EE:24:09:F6:45:EA:5F:B1:6B:07:2B Authority key identifier: FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD Certificate issuer: /CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd Certificate serial: 0196B93583743E2F917C2C1A02CD5B1D9C91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft Manifest number: 154A Signing time: Sat 10 May 2025 08:00:14 +0000 Manifest this update: Sat 10 May 2025 08:00:14 +0000 Manifest next update: Sun 11 May 2025 08:00:14 +0000 Files and hashes: 1: 1P2Zej4pxQtuIhEVIdzvWNHoMjM.roa (hash: 1V31P+tFYcgF/AzLiAsVDYFl2+asLT680sp7HqmRmh0=) 2: 54NJy94JvBBL15s0csboVd4UQiE.roa (hash: wn2NTaQY7LuuAW+WGTrkVMpGh4ZshJJa9jmzKiQ5he0=) 3: 9LGSNE38RZCTyouOtHVx3qVP6lw.roa (hash: ugV2YTVWDidN8y0vBVq2PfGkhQx7PuXVEwNoZCBbGX8=) 4: OsAkT1Bjc6Bx57ink5LVscASSVM.roa (hash: Me3jYRS4jKNnlOdyWwLlCaXNsCc57NzdmZ5lT79t3Rw=) 5: RmwlFKm2A6wCOU2tiPLTSzuhAA8.roa (hash: NB+w6tJSmFPHFd2FMxkqFpCOapIk+qQqzfmt3QzOsMk=) 6: UobB1JoTOzUGFpCCZFbxasjgqAA.roa (hash: ms0cbPIRl6WuE78I/a1I+geJkM+CYYhZiVIqQ6+fwVY=) 7: VuROyrWs92eKXOizp2Q-0fnpLR0.roa (hash: fMjWZ/dM7054cYWsnjZNa6zVf7FPSoCGvOyM76Sl6Mc=) 8: VxRGHdP__z9RHajqH60awAUqQgg.roa (hash: tIdE9ZmAuCmbV7t2it8DIWQnm6yvOgpE7cprrHK2On0=) 9: _97EpGpubk-aktC6Lgs6tWWL4b0.crl (hash: YB8J9qhumebHFwAU58o0xNSXRrc7hFHOpgWqfmb1JQQ=) 10: iP8ql6ZvDkSsBTs1J-PrJpdHpKo.roa (hash: tXTXKqH5Aew+pK21GPBswq4NS3nwUUaBaQxJqd2WYgg=) 11: pJnO9Ba6alCVKMIllyGL5_n-nHo.roa (hash: cF7/LpWh8txlnJKiWf+FQfbAzOZvclLDIIzD8uyNUD0=) 12: vWqmka3oaZQE1cXhvhKJIPN3ikY.roa (hash: wwmYNtR3Cqpxb6sHd4D0z140EddAwpyxzJ7dHxOqth4=) 13: zwTIjW4kVksFhIqqz0Hm86Td_eI.roa (hash: 4Gmw/YEt79d2ifSjcQjjCNUl4cViPsDbJFWDQ996oV4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 May 2025 04:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:b9:35:83:74:3e:2f:91:7c:2c:1a:02:cd:5b:1d:9c:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd Validity Not Before: May 10 08:00:14 2025 GMT Not After : May 11 08:00:14 2025 GMT Subject: CN=97efed7269e423b982ee2409f645ea5fb16b072b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6c:70:f0:12:e3:0d:08:ae:33:af:59:e7:84: c1:a1:2d:5e:65:0c:d5:38:3b:47:5f:52:1c:c9:9a: a4:2b:18:42:54:bb:54:5d:97:ed:2e:20:f6:66:45: 94:14:a5:f0:1a:15:58:c3:46:aa:73:7f:6d:12:57: 43:d9:7f:b8:06:c6:4c:80:af:4e:45:b4:e3:19:06: bf:db:72:4c:fe:eb:84:e2:47:83:c6:82:49:6c:91: 15:00:e6:12:46:13:f2:64:98:0a:f0:20:eb:83:27: 04:aa:33:7b:92:50:e1:a9:f3:de:8d:d0:f5:ba:0f: 23:e1:a2:93:37:1e:2d:a4:c6:4a:f0:91:e6:30:4c: 0c:a9:0d:f1:6e:f5:97:4c:df:a7:46:1c:12:48:b9: d2:2d:49:7c:d1:b7:b9:0a:30:85:be:38:d0:7e:f1: c9:17:64:fe:09:cc:1b:6d:eb:ea:62:04:4e:f3:9d: 40:bb:bc:50:4d:69:93:9c:4a:99:b6:2e:97:2f:fc: 77:1d:45:ab:de:c7:d4:2b:79:75:47:e2:cc:93:e3: 3c:09:1b:bb:c2:e1:f5:bc:3d:aa:fe:79:51:eb:ba: 12:0e:f9:82:9d:41:7d:64:1d:ee:9b:1d:82:5d:14: 9e:f6:56:f4:b9:63:00:cf:47:8e:0b:e1:5d:c9:1d: 4c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:EF:ED:72:69:E4:23:B9:82:EE:24:09:F6:45:EA:5F:B1:6B:07:2B X509v3 Authority Key Identifier: keyid:FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:7c:26:64:e8:a2:20:4f:3a:53:7e:68:a4:76:ed:e8:62:35: cd:07:e6:27:14:0f:83:64:98:c6:84:46:aa:f4:20:4d:78:b2: d8:18:ac:40:3f:27:5b:06:17:4d:1b:3a:99:5f:a4:5a:25:fb: 45:c0:5d:c9:0f:c8:76:8c:31:56:ca:a7:c3:8a:f8:c4:84:02: a5:2d:79:5f:9b:11:f4:ce:89:e2:f1:b7:86:54:7a:45:53:b8: dc:0c:76:2d:19:00:c3:33:8a:97:f3:52:ef:22:ef:ec:db:45: d8:01:70:45:ac:5f:ab:89:a0:3f:99:ef:17:ea:01:cf:bd:cc: a3:cb:d8:60:b3:fb:19:d2:24:74:ca:d9:fe:be:c8:35:9e:f5: a3:9d:d4:45:c6:22:ec:d8:cb:ba:4d:89:c9:0f:d8:dd:6d:e3: ad:9b:5d:22:47:6f:f1:20:82:55:e5:6f:fb:37:7f:60:5b:56: 0b:5a:88:6d:27:c6:b1:ad:dd:a1:2a:46:79:b9:8f:be:dd:02: 55:f7:c2:bf:74:82:f1:dc:ff:22:11:62:cf:9f:9c:ca:5a:2a: bb:f9:cc:e8:20:f1:2a:c5:6d:b9:04:e1:95:fb:f7:e7:38:2e: ba:ac:fe:3b:ab:77:4d:4a:62:a2:2d:bd:01:66:cb:58:62:d1: 2d:75:05:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa5NYN0Pi+RfCwaAs1bHZyRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZGVjNGE0NmE2ZTZlNGY5YTkyZDBiYTJlMGIzYWI1NjU4 YmUxYmQwHhcNMjUwNTEwMDgwMDE0WhcNMjUwNTExMDgwMDE0WjAzMTEwLwYDVQQD Eyg5N2VmZWQ3MjY5ZTQyM2I5ODJlZTI0MDlmNjQ1ZWE1ZmIxNmIwNzJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2xw8BLjDQiuM69Z54TBoS1eZQzV ODtHX1IcyZqkKxhCVLtUXZftLiD2ZkWUFKXwGhVYw0aqc39tEldD2X+4BsZMgK9O RbTjGQa/23JM/uuE4keDxoJJbJEVAOYSRhPyZJgK8CDrgycEqjN7klDhqfPejdD1 ug8j4aKTNx4tpMZK8JHmMEwMqQ3xbvWXTN+nRhwSSLnSLUl80be5CjCFvjjQfvHJ F2T+CcwbbevqYgRO851Au7xQTWmTnEqZti6XL/x3HUWr3sfUK3l1R+LMk+M8CRu7 wuH1vD2q/nlR67oSDvmCnUF9ZB3umx2CXRSe9lb0uWMAz0eOC+FdyR1MbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJfv7XJp5CO5gu4kCfZF6l+xawcrMB8GA1UdIwQY MBaAFP/exKRqbm5PmpLQui4LOrVli+G9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEt N2U4YzZkNGQ5YmVmLzEvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEtN2U4YzZkNGQ5YmVm LzEvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB3wmZOii IE86U35opHbt6GI1zQfmJxQPg2SYxoRGqvQgTXiy2BisQD8nWwYXTRs6mV+kWiX7 RcBdyQ/IdowxVsqnw4r4xIQCpS15X5sR9M6J4vG3hlR6RVO43Ax2LRkAwzOKl/NS 7yLv7NtF2AFwRaxfq4mgP5nvF+oBz73Mo8vYYLP7GdIkdMrZ/r7INZ71o53URcYi 7NjLuk2JyQ/Y3W3jrZtdIkdv8SCCVeVv+zd/YFtWC1qIbSfGsa3doSpGebmPvt0C VffCv3SC8dz/IhFiz5+cyloqu/nM6CDxKsVtuQThlfv35zguuqz+O6t3TUpioi29 AWbLWGLRLXUFCA== -----END CERTIFICATE-----Generated at Sat May 10 12:24:02 2025 by rpki-client