$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft File: 8E6yBPNYAEeIIk4vsY5NXnS-v40.mft (raw, json) Hash identifier: zMzP1p6rpN+0EMQAxIEHsGpUOgBL6OKzJ0WGH29YgsE= Subject key identifier: 86:3C:0A:9B:2E:77:21:1E:21:71:3F:3D:8F:EB:A4:19:4A:B0:0A:B7 Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d Certificate serial: 0196BB5B37A500F24BFA2B928A25C8D21F1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft Manifest number: 0F53 Signing time: Sat 10 May 2025 18:00:39 +0000 Manifest this update: Sat 10 May 2025 18:00:39 +0000 Manifest next update: Sun 11 May 2025 18:00:39 +0000 Files and hashes: 1: 1gtsCJyHdZ_mz1Vmc6aYSOZRTug.roa (hash: i5FmepCDxpYMWJtIWumi8I2WhRPEkV925D+zrSFUKqc=) 2: 8E6yBPNYAEeIIk4vsY5NXnS-v40.crl (hash: GtzlPXUU3qn/6aIYK2kqD/6PkMnbbadH0i+uZ6nrXOY=) 3: AFN8OqvwZcsViNN-78O6BvKElME.roa (hash: gpOsJUC88/6LJdG6QKOWEGeO9P8/YN9o1I8OET+li9E=) 4: HzrOiNg5IGbvxaY6EJtaFTiPwJc.roa (hash: YVHrJ9qFMIVBjiboinqQXWeAb+UlfN0QhYG5EqTl3JU=) 5: KuzmOknbrD4Lg71OoDCO-y0GoDQ.roa (hash: L4TpWALjC8fwxZDKVNiQiJm1WAVC/DpX7t4BNMww1vk=) 6: N-Bn6UoZzfA4_e9vqjwupkidrwM.roa (hash: P0ucGjyfHx1AsSd/Hp9hPmA5fgW6WVVitbxsp2xrVOM=) 7: Xw6d5Q0Ua1XRZl5MjugABbqCL-g.roa (hash: 7lcJjOAWe6HvAJ8ku7/K4ZXcDrrbdwoOF4w1DXALzIA=) 8: Y1odvpmyDgd_SZNft3LtP_Y9m5Q.roa (hash: 6tgo1juOE3j4wf1OK40ZNiTNEBkar47yAuVkY/NJHx0=) 9: hFAl1HVJl_9l3iGKDXy7Q3YLL-4.roa (hash: t3lebss2cDykApymCPDX/VFxLKKQQSAwSa+9uLLWAvg=) 10: lmLPjrfNDPS9XohB9eEXKDTvTVw.roa (hash: YUDeNZCjz7C+nv1yj/KNPiCOaWxteb6jP1PE6tH/qfc=) 11: vwnatcxNwSZQjN_EAgtCA6gLjGQ.roa (hash: is+QjkNRgmAAQFm1WLdb+VI9EY3XXeS9tjv/htKBkks=) 12: wOKO5BfevHhq6oErWALub8pu8xU.roa (hash: JFoG8SyIRYLSlAyJTBoEWjYzWkPzFQdNMJLWFlUmxRU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 May 2025 13:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:bb:5b:37:a5:00:f2:4b:fa:2b:92:8a:25:c8:d2:1f:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d Validity Not Before: May 10 18:00:39 2025 GMT Not After : May 11 18:00:39 2025 GMT Subject: CN=863c0a9b2e77211e21713f3d8feba4194ab00ab7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5a:8e:dd:ac:a3:89:b1:e2:a3:b3:94:4f:7d: 28:0e:84:9f:20:89:45:e2:04:25:09:a9:f4:30:d0: 5d:bd:93:08:1b:f9:37:63:c9:50:f7:32:b9:d1:44: a2:e5:d8:00:a2:02:19:71:3c:ad:fb:47:40:e3:08: 39:dc:c6:ae:37:ee:1f:96:b5:33:ac:0b:68:f4:c9: f7:4b:ac:e0:39:47:f5:ae:de:17:92:35:4b:87:76: c9:b1:6f:c1:84:a7:52:89:c0:81:8a:10:0f:f9:36: 36:0f:0f:dc:9d:a2:be:ee:99:3e:dd:73:fc:f2:21: b6:d5:3f:73:9d:dc:91:7f:c4:aa:a7:4e:5f:c4:a3: a6:08:76:f3:b9:df:ec:4f:76:3c:1d:a2:63:6b:3b: df:c7:95:63:ea:f0:82:ee:af:7f:92:cf:1b:b3:de: ca:26:bf:d5:e5:e8:40:0e:3b:0b:77:9b:3e:88:db: 78:5c:7a:b1:cb:72:13:86:f1:fd:ac:c6:41:94:bc: 33:1f:50:e0:83:78:9c:4a:6c:0a:c4:c5:8e:0c:b6: ed:4a:46:38:ff:65:7b:22:e6:d4:ec:a9:de:dd:65: 1c:04:5b:8f:87:00:b3:9e:b3:64:82:81:dc:60:13: 93:2f:ad:d1:ad:d2:af:4f:49:5b:71:6f:87:9d:b5: d8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:3C:0A:9B:2E:77:21:1E:21:71:3F:3D:8F:EB:A4:19:4A:B0:0A:B7 X509v3 Authority Key Identifier: keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:4a:9d:86:46:11:f4:5c:96:42:9f:18:df:58:8b:95:cb:7e: 40:6d:b6:a7:ff:dc:1c:0a:ed:8a:04:3a:a2:0e:b1:0d:03:ee: 49:3e:4d:84:11:c5:a5:39:de:3c:07:26:85:9a:0e:f4:78:17: 67:f1:3a:cc:45:8a:e2:af:62:d4:99:70:94:52:85:f6:01:a9: ff:b9:72:aa:c7:77:4c:e9:1c:3d:88:e2:8e:b3:29:68:de:0c: bf:14:f8:9d:b9:94:69:99:ec:5d:17:10:76:9a:6f:40:de:7b: 70:a5:db:07:2f:c1:ec:88:c5:78:50:8a:f6:df:be:21:c3:70: 40:df:87:c9:f4:92:4f:14:ad:64:09:78:d7:88:3d:4e:c0:cb: 73:1d:44:64:5e:80:42:29:79:5f:87:19:db:60:33:e9:39:df: 83:bd:06:d1:96:9c:d2:45:9d:f0:c8:7a:bd:8b:bb:38:9d:fc: c0:62:42:8f:64:0c:e1:dc:d4:6a:90:43:f6:43:b3:d3:bd:fa: c1:c0:3c:e8:9d:26:75:1b:a6:c5:34:41:55:61:1a:ed:a3:ae: 59:18:21:aa:34:45:af:d3:c7:d2:1b:af:56:01:6d:99:f1:fc: 0a:a7:20:84:07:a3:f9:4d:a4:85:13:79:a0:0c:a5:04:95:ee: bc:d9:f1:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa7WzelAPJL+iuSiiXI0h8cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGViMjA0ZjM1ODAwNDc4ODIyNGUyZmIxOGU0ZDVlNzRi ZWJmOGQwHhcNMjUwNTEwMTgwMDM5WhcNMjUwNTExMTgwMDM5WjAzMTEwLwYDVQQD Eyg4NjNjMGE5YjJlNzcyMTFlMjE3MTNmM2Q4ZmViYTQxOTRhYjAwYWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1qO3ayjibHio7OUT30oDoSfIIlF 4gQlCan0MNBdvZMIG/k3Y8lQ9zK50USi5dgAogIZcTyt+0dA4wg53MauN+4flrUz rAto9Mn3S6zgOUf1rt4XkjVLh3bJsW/BhKdSicCBihAP+TY2Dw/cnaK+7pk+3XP8 8iG21T9zndyRf8Sqp05fxKOmCHbzud/sT3Y8HaJjazvfx5Vj6vCC7q9/ks8bs97K Jr/V5ehADjsLd5s+iNt4XHqxy3IThvH9rMZBlLwzH1Dgg3icSmwKxMWODLbtSkY4 /2V7IubU7Kne3WUcBFuPhwCznrNkgoHcYBOTL63RrdKvT0lbcW+HnbXYEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIY8CpsudyEeIXE/PY/rpBlKsAq3MB8GA1UdIwQY MBaAFPBOsgTzWABHiCJOL7GOTV50vr+NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85YWI0MmEtZGY5Mi00ZTQyLTllMzMt NWM1ODkyYWZhNDg3LzEvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS85YWI0MmEtZGY5Mi00ZTQyLTllMzMtNWM1ODkyYWZhNDg3 LzEvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnEqdhkYR 9FyWQp8Y31iLlct+QG22p//cHArtigQ6og6xDQPuST5NhBHFpTnePAcmhZoO9HgX Z/E6zEWK4q9i1JlwlFKF9gGp/7lyqsd3TOkcPYjijrMpaN4MvxT4nbmUaZnsXRcQ dppvQN57cKXbBy/B7IjFeFCK9t++IcNwQN+HyfSSTxStZAl414g9TsDLcx1EZF6A Qil5X4cZ22Az6Tnfg70G0Zac0kWd8Mh6vYu7OJ38wGJCj2QM4dzUapBD9kOz0736 wcA86J0mdRumxTRBVWEa7aOuWRghqjRFr9PH0huvVgFtmfH8CqcghAej+U2khRN5 oAylBJXuvNnxuQ== -----END CERTIFICATE-----Generated at Sat May 10 20:36:45 2025 by rpki-client