$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft File: rr85Ti8bJRyI2YiocWEIRYB4bvU.mft (raw, json) Hash identifier: /sDRznhluTgGFMEY7UWt1DB+zuDuOOP1ZWKrgKxduc0= Subject key identifier: 44:43:FF:04:6D:69:AF:5C:E7:33:8F:73:B2:A4:63:17:EA:9F:77:FC Authority key identifier: AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5 Certificate issuer: /CN=aebf394e2f1b251c88d988a87161084580786ef5 Certificate serial: 01969F07FC3507B98E1FB2F28F766CDBF512 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft Manifest number: 1539 Signing time: Mon 05 May 2025 06:00:22 +0000 Manifest this update: Mon 05 May 2025 06:00:22 +0000 Manifest next update: Tue 06 May 2025 06:00:22 +0000 Files and hashes: 1: 1-_mCNfP9_HNiBcEsvWHOFnGkC9I.roa (hash: JsQNy89vRBMXhfgHBZLMyPK1KVQmDn747eH7PkqTbv4=) 2: 499vYtwuw8upiAA2ubHtry-MPMw.roa (hash: Z3mdQWlNWDCy7MpQvjVwxOFHXRgVUsKCd9CYyZydkdQ=) 3: BV9MkYw-noIEhqphKumJe_rAYPw.roa (hash: cTycQR7uMvIZ+ka9U/Z707XPur1pq5RdGRaj9s/WBEk=) 4: BqTGXwEy0NGO0YDBi2enWJEpe9k.roa (hash: NYaAEL0V4uNdZmz3A2gD5aCaRjRzazsS2Zn8GlYp1k0=) 5: C9bq6HqiO8wvPt8Ohvw7Ya0CzfI.roa (hash: eBedAMyLvvyEc8yS2VDwWUUS44f1pIhLP9yn06vWvAA=) 6: L3ZGNHnhgVbtJA6v9_KfCLPdQu4.roa (hash: tRfv/CcITA5fhGSfuor8bEI1B/6QYSwrTAH88Vxz5+8=) 7: c_qSQSef9yQq7ko-zsOrz05POQI.roa (hash: FNYiHqlJ6193udyi9UzOaM0voKaXuvqgwAhp2rGz6i4=) 8: imE36QLRTMX_BQ-hGxHCq-HzUSs.roa (hash: 9oBmGg8MmifOi5UePbS9lDJePGL5vAfP7BimBla3w98=) 9: lmrSRQ5ihg55QvYqat1AjaV_GvQ.roa (hash: hnfw4d4vCZD3abd8/WtjTv2gdPGfcl5xx0Mpy2oIhPc=) 10: rr85Ti8bJRyI2YiocWEIRYB4bvU.crl (hash: 0M0/eFMiLG3Bm85pXvrXhy24YhCeoJ+r62Fdm3zOQeU=) 11: uFaCHWPgxrsotozK3-PvWIlEI14.roa (hash: E71w1Kj/9g7CI68LBGPMUUdmv1Dhxwi441Gs522xPmQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 May 2025 01:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:9f:07:fc:35:07:b9:8e:1f:b2:f2:8f:76:6c:db:f5:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aebf394e2f1b251c88d988a87161084580786ef5 Validity Not Before: May 5 06:00:22 2025 GMT Not After : May 6 06:00:22 2025 GMT Subject: CN=4443ff046d69af5ce7338f73b2a46317ea9f77fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:01:58:b2:96:c2:98:ed:d5:a0:36:80:42:e8: 6d:68:5c:81:57:30:1b:a4:83:df:c9:f7:da:4b:70: e4:db:79:76:61:33:bc:9a:2b:a2:d1:a2:c1:7f:93: 73:e0:da:e2:e1:07:3d:48:56:9b:32:7f:d7:6f:c8: a1:df:41:f7:35:1a:2b:51:f3:a2:51:89:b9:20:73: 25:e3:57:46:db:6a:07:89:53:5f:e4:5c:35:bd:05: 24:9d:5d:fd:e6:ed:89:ba:33:02:ca:57:42:ca:99: 72:80:76:ac:7b:e5:09:17:32:e1:77:43:81:3a:58: 5f:22:00:9e:0d:c9:17:68:5b:65:e7:22:2e:02:d3: c0:55:8f:15:47:2f:c2:cf:06:ab:00:75:06:bb:0d: 56:03:43:b5:18:a0:8a:59:42:e9:71:e6:68:50:2c: 47:97:c6:a4:4e:f0:2b:64:05:a9:5a:18:3a:01:69: ef:6e:8c:c9:75:86:38:95:5c:b7:7d:65:7a:cd:3c: 44:2d:96:10:3a:85:a6:c4:6c:1f:9f:9d:e4:75:47: 27:c2:bb:c2:2b:0a:e0:bc:1d:16:f6:1f:22:1d:42: 64:e6:38:65:db:74:d6:bc:60:71:ff:86:6e:d6:e6: 7f:e3:91:8f:90:91:64:d4:c8:0a:b9:ab:dd:e8:dd: e9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:43:FF:04:6D:69:AF:5C:E7:33:8F:73:B2:A4:63:17:EA:9F:77:FC X509v3 Authority Key Identifier: keyid:AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:f2:b5:d9:04:7f:e8:24:7a:43:a5:00:ce:cf:91:cb:87:bb: 2a:2d:97:ad:2b:8d:9b:82:67:9b:a3:d8:74:3d:ec:dd:97:7a: 0d:70:16:06:5f:e2:08:fa:b2:1d:6a:ee:da:a8:17:46:e2:d5: 44:38:06:01:14:4a:2a:7e:20:df:2b:f3:48:f9:cc:57:f1:1a: f5:52:fe:0f:f8:5c:88:7e:b9:6a:2d:2c:66:fe:55:9e:1a:0d: d0:ec:b9:dd:6f:39:f9:0e:b1:b9:6d:fa:85:89:17:fb:12:04: 3b:e7:cc:e2:82:43:af:d3:4a:38:11:58:72:b0:0d:6d:ed:45: f0:0a:83:0e:5e:3a:ce:7a:3a:fe:f2:80:c3:9a:73:c6:da:67: f3:89:3b:1c:22:fd:ea:46:ef:55:1b:c2:61:fb:44:1d:ec:70: f9:45:29:91:d8:ea:9a:56:d4:b3:a5:71:6c:70:d7:90:1e:1e: aa:25:42:f7:e7:d4:2b:48:e4:c5:49:d1:3d:7c:1b:24:fa:e1: 2a:51:fb:83:5d:37:e8:47:ed:a5:d2:b8:a1:a3:68:18:ef:8b: 5d:4e:00:f2:34:a0:17:21:6c:28:44:18:f7:50:4c:e6:8d:fe: 8f:48:eb:2e:4c:ff:7c:a3:3c:1b:b2:d4:c4:bb:d8:bf:9b:a8: 28:b3:63:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZafB/w1B7mOH7Lyj3Zs2/USMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYmYzOTRlMmYxYjI1MWM4OGQ5ODhhODcxNjEwODQ1ODA3 ODZlZjUwHhcNMjUwNTA1MDYwMDIyWhcNMjUwNTA2MDYwMDIyWjAzMTEwLwYDVQQD Eyg0NDQzZmYwNDZkNjlhZjVjZTczMzhmNzNiMmE0NjMxN2VhOWY3N2ZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAFYspbCmO3VoDaAQuhtaFyBVzAb pIPfyffaS3Dk23l2YTO8miui0aLBf5Nz4Nri4Qc9SFabMn/Xb8ih30H3NRorUfOi UYm5IHMl41dG22oHiVNf5Fw1vQUknV395u2JujMCyldCyplygHase+UJFzLhd0OB OlhfIgCeDckXaFtl5yIuAtPAVY8VRy/CzwarAHUGuw1WA0O1GKCKWULpceZoUCxH l8akTvArZAWpWhg6AWnvbozJdYY4lVy3fWV6zTxELZYQOoWmxGwfn53kdUcnwrvC KwrgvB0W9h8iHUJk5jhl23TWvGBx/4Zu1uZ/45GPkJFk1MgKuavd6N3pjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFERD/wRtaa9c5zOPc7KkYxfqn3f8MB8GA1UdIwQY MBaAFK6/OU4vGyUciNmIqHFhCEWAeG71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS80MDQ5OGUtZDFjMC00ODRjLWFiY2It NjFlN2Y0MGQ1ZGQ2LzEvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS80MDQ5OGUtZDFjMC00ODRjLWFiY2ItNjFlN2Y0MGQ1ZGQ2 LzEvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAivK12QR/ 6CR6Q6UAzs+Ry4e7Ki2XrSuNm4Jnm6PYdD3s3Zd6DXAWBl/iCPqyHWru2qgXRuLV RDgGARRKKn4g3yvzSPnMV/Ea9VL+D/hciH65ai0sZv5VnhoN0Oy53W85+Q6xuW36 hYkX+xIEO+fM4oJDr9NKOBFYcrANbe1F8AqDDl46zno6/vKAw5pzxtpn84k7HCL9 6kbvVRvCYftEHexw+UUpkdjqmlbUs6VxbHDXkB4eqiVC9+fUK0jkxUnRPXwbJPrh KlH7g1036EftpdK4oaNoGO+LXU4A8jSgFyFsKEQY91BM5o3+j0jrLkz/fKM8G7LU xLvYv5uoKLNjgQ== -----END CERTIFICATE-----Generated at Mon May 5 09:03:07 2025 by rpki-client