$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft File: opAORlWrNJpGMrFAcZ3JcjBDFyU.mft (raw, json) Hash identifier: NoNLtA0slHh8vDxyFmFhl9O1V3rJVzxskkbl/79d9oI= Subject key identifier: 2E:46:D1:F2:7F:38:BF:69:84:B7:75:EC:C9:2F:B1:55:CD:40:53:F6 Authority key identifier: A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25 Certificate issuer: /CN=a2900e4655ab349a4632b140719dc97230431725 Certificate serial: 0196B5C7E4CF9B9D2587EA233702F4E55A2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft Manifest number: 1536 Signing time: Fri 09 May 2025 16:01:38 +0000 Manifest this update: Fri 09 May 2025 16:01:38 +0000 Manifest next update: Sat 10 May 2025 16:01:38 +0000 Files and hashes: 1: 8loW5HN3rlQsgDTApUmX4zxMYVo.roa (hash: LKWZ8SK1V+gZE1QR5SYwO3Jiw4zJ7265yXeEGQlZ8zw=) 2: Ah3KLJm-LKDPU2A-ukfbltAbHHE.roa (hash: swE4PQqkYwr3g++5aj4+DHREVDMSOVCdaIbmuqijBx8=) 3: DDAn0V8SSoUAqqE5fzd6yTf6vio.roa (hash: rVCSbprtHlhgRB9AzbTbTHTH0ZbS3aC9A5gq4r3O14U=) 4: EFQvVvsmK2CnxaFWECLQzIRuaoA.roa (hash: z5MySgQN1+YGDxUko6xG8KGFZh9NwMFl3FNcAcreE/w=) 5: Ptk1juvR6AU_vl6lr4RswBAQK74.roa (hash: 7usWDVylXyYylG7CWiaUKOpGSZfMt4/Ahvv6lHEknXQ=) 6: aQrQOxkAHRHWvV6SAv8MhUo2FEk.roa (hash: A+zK69O6Xa28jcWgz6jSMTN0CwLXk1uRy8YJFifVFB8=) 7: gH9l_Olu7Z11QNfATlwel8_lHng.roa (hash: Qy7a8ybAWRGH/C9L4lBi8o0qao1M7eUnSgkK9WeGPzo=) 8: jtloUH3GHj6agPnwXpuohh661-Y.roa (hash: KrxUqRlvQiFZKDH37ecvZbfFbOWCQq6UJlz8kh7LUL8=) 9: kwOU6n2U0tlOOT5S3nqF-ntVFYQ.roa (hash: tJWykZcdes0s9amE0to1DThjyvp5rw7kHFWEXdqGdBw=) 10: opAORlWrNJpGMrFAcZ3JcjBDFyU.crl (hash: U+4cihXZY63o1U0ekNV6NaI8UwqOwPIcdE0suZj0GSc=) 11: u3fVEc-RK0U4DFHiTlygDyKj4rI.roa (hash: Us98OeKKFK/pD4hLHv0TSn5RO0cC7LOagG2XI+ndne0=) 12: v40G9p22ghWMe8UKdX_wMiyNMek.roa (hash: jreCJmIVZHIjE2eJf4y2q1RHo2Hv3JjWpFOiAElZPd0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 May 2025 10:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:b5:c7:e4:cf:9b:9d:25:87:ea:23:37:02:f4:e5:5a:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2900e4655ab349a4632b140719dc97230431725 Validity Not Before: May 9 16:01:38 2025 GMT Not After : May 10 16:01:38 2025 GMT Subject: CN=2e46d1f27f38bf6984b775ecc92fb155cd4053f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e2:bf:fb:d3:00:8d:18:65:40:0d:76:e8:72: 88:9c:1d:e2:1a:6d:f1:a2:72:36:6a:98:87:df:1e: 1e:81:ce:08:c2:46:69:c5:e2:20:e8:d0:47:3b:60: 65:43:8f:57:55:54:ba:dd:e0:e9:20:c6:f4:dc:3b: a2:5a:3a:dc:6b:28:d8:78:c7:53:b1:bc:e8:7c:00: f5:3e:2e:2d:2d:1f:61:7d:46:04:a7:f1:18:03:87: 28:a2:8e:7a:17:b4:9a:8f:9e:e9:66:53:4b:8d:08: d2:ee:aa:30:47:80:ee:23:c6:e4:72:17:0a:ad:2f: 02:c9:44:94:fe:02:9d:1f:f9:b7:c5:01:e4:cc:b9: 5d:6e:72:e8:b5:24:b1:19:89:e0:60:98:76:0b:db: 9b:e0:21:4b:27:83:ad:d5:d5:87:7d:dc:b5:f5:37: 50:e0:39:7e:ef:af:27:a6:5f:63:8c:2e:50:bf:4c: 8e:c7:f7:79:8d:60:60:de:b9:b8:15:6e:e4:15:78: 3e:8d:4a:0e:bd:2f:d6:e5:84:39:65:fa:58:39:8e: fd:84:23:e3:7d:7b:20:e2:a8:c4:ae:db:dc:05:48: ea:7d:60:a3:79:ef:c5:da:76:de:ca:c0:a0:89:42: 8f:f5:48:38:b5:c0:5a:70:9a:d6:1f:0f:a4:fd:c6: 23:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:46:D1:F2:7F:38:BF:69:84:B7:75:EC:C9:2F:B1:55:CD:40:53:F6 X509v3 Authority Key Identifier: keyid:A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:19:48:a7:dd:41:10:60:f3:cd:7f:e0:e1:a1:dd:d1:73:72: 55:c6:ea:f3:ae:8c:de:6c:93:02:68:0b:00:27:46:11:a9:e1: 8c:46:da:fa:93:9e:56:f7:0a:83:ed:02:7b:3b:db:bc:f5:93: b4:33:a3:2c:e1:df:4b:30:aa:b8:34:61:2d:c2:5d:f7:57:2c: 09:35:88:9c:9a:9d:6a:8f:21:ef:b5:8b:11:97:a8:10:86:a1: 21:b6:b2:06:f9:df:8d:71:34:c8:16:2b:e9:cb:26:d3:cc:1b: 7a:e5:d4:2b:df:a5:9d:a4:be:66:a7:af:03:76:89:63:ca:5e: 0a:76:86:4a:d3:61:9d:20:c6:60:bc:79:89:c4:e3:96:5e:71: 41:06:53:67:3e:31:d9:b6:f0:e5:29:79:30:7c:4b:0e:01:64: 4b:68:22:5f:f1:83:20:df:a2:55:7d:fd:8d:9a:2b:ae:96:75: 94:e9:0e:11:ea:45:ef:93:4c:5a:a7:2c:2c:f6:2f:e4:14:8c: 93:d0:6b:db:c4:52:da:8e:40:3f:c4:0c:f5:2e:07:92:dc:8a: 18:9b:d3:51:b7:be:10:b7:f5:c9:42:d9:b1:22:63:3e:d3:c7: 07:db:3d:51:ea:e4:ed:97:5f:d6:a9:75:a3:f0:2c:98:71:3b: ac:67:1d:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa1x+TPm50lh+ojNwL05VotMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyOTAwZTQ2NTVhYjM0OWE0NjMyYjE0MDcxOWRjOTcyMzA0 MzE3MjUwHhcNMjUwNTA5MTYwMTM4WhcNMjUwNTEwMTYwMTM4WjAzMTEwLwYDVQQD EygyZTQ2ZDFmMjdmMzhiZjY5ODRiNzc1ZWNjOTJmYjE1NWNkNDA1M2Y2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuK/+9MAjRhlQA126HKInB3iGm3x onI2apiH3x4egc4IwkZpxeIg6NBHO2BlQ49XVVS63eDpIMb03DuiWjrcayjYeMdT sbzofAD1Pi4tLR9hfUYEp/EYA4cooo56F7Saj57pZlNLjQjS7qowR4DuI8bkchcK rS8CyUSU/gKdH/m3xQHkzLldbnLotSSxGYngYJh2C9ub4CFLJ4Ot1dWHfdy19TdQ 4Dl+768npl9jjC5Qv0yOx/d5jWBg3rm4FW7kFXg+jUoOvS/W5YQ5ZfpYOY79hCPj fXsg4qjErtvcBUjqfWCjee/F2nbeysCgiUKP9Ug4tcBacJrWHw+k/cYjOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC5G0fJ/OL9phLd17MkvsVXNQFP2MB8GA1UdIwQY MBaAFKKQDkZVqzSaRjKxQHGdyXIwQxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80ZjcwMWEtZWQ2Zi00N2M4LWJmNzMt ZjRjNWZjM2NhMmM0LzEvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC80ZjcwMWEtZWQ2Zi00N2M4LWJmNzMtZjRjNWZjM2NhMmM0 LzEvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtRlIp91B EGDzzX/g4aHd0XNyVcbq866M3myTAmgLACdGEanhjEba+pOeVvcKg+0CezvbvPWT tDOjLOHfSzCquDRhLcJd91csCTWInJqdao8h77WLEZeoEIahIbayBvnfjXE0yBYr 6csm08wbeuXUK9+lnaS+ZqevA3aJY8peCnaGStNhnSDGYLx5icTjll5xQQZTZz4x 2bbw5Sl5MHxLDgFkS2giX/GDIN+iVX39jZorrpZ1lOkOEepF75NMWqcsLPYv5BSM k9Br28RS2o5AP8QM9S4HktyKGJvTUbe+ELf1yULZsSJjPtPHB9s9Uerk7Zdf1ql1 o/AsmHE7rGcdTw== -----END CERTIFICATE-----Generated at Fri May 9 19:25:28 2025 by rpki-client