$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft File: ge7UCROD2e1AVtn07_fSYi3c4gU.mft (raw, json) Hash identifier: 0RRMHyUVxuMcQUBANJtFW+jKX//jMPIaqsjn+EWWPOI= Subject key identifier: CA:35:C7:38:83:80:FC:24:78:25:F6:9A:1D:7A:D8:F0:9C:0A:02:61 Authority key identifier: 81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05 Certificate issuer: /CN=81eed4091383d9ed4056d9f4eff7d2622ddce205 Certificate serial: 0196A5AF27565E87A2B15C5997CCF2F3E493 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft Manifest number: 153F Signing time: Tue 06 May 2025 13:00:41 +0000 Manifest this update: Tue 06 May 2025 13:00:41 +0000 Manifest next update: Wed 07 May 2025 13:00:41 +0000 Files and hashes: 1: 1-FVNiQvWEXUQsyhSP2mXL7ZeFhI.roa (hash: h2VWp4VUz/KwikufobsIYuUTWP+PbubtA5kM1+IYNJ4=) 2: 1-cC_8sf2Sjlcbm7-DZh4XuYIArQ.roa (hash: 0N5yH6BWqUs7tPNNDSMGPx2mfE/ZRDiPQfeLQl52Wgo=) 3: GTiO-SupitdTmKiZ_HKcU4MJuTk.roa (hash: +PZAxnriWNXJlrxxhGkuM8aqghAi9SsDw/xLwTjAVR8=) 4: Oe4b0YKTYWpvik3U2IZ6qMIqY0Q.roa (hash: UL3WTeHzd5FXSU3d7socZAKRgjBZ+Jri4TxH4t/75EI=) 5: XF9ImwV6WWJIs0xQcjK4t7jAy60.roa (hash: cqd2xtXIiuriNNQV4wixCocQ/6vU5JsRpBkdhH+9z5k=) 6: f6ghH_7B3PzM3ktCIJpbMer11MQ.roa (hash: gQOe3jDJjm6Z8U0Sg1BUTciGU/YhoqXEIyyDOVhhKCY=) 7: ge7UCROD2e1AVtn07_fSYi3c4gU.crl (hash: EWCLXAB08mlDf0byWZWuKpV2ITc/7YIHJe+rFhpsnrs=) 8: i30xTo-UR4_VbHo8fjprUc4AF6g.roa (hash: a1dsNKX1kvmUfXHRJMRlL3dZirJz9clcR1rF2jPzapU=) 9: uhgMFZw8rs0tJvJzvMK6WeU68F0.roa (hash: qV6k2QQIZBdjD0SstNGQRZVonpUjQ86it1wpOl33iLI=) 10: xb_V8FoCziLwhsNf2nDbMavL4CE.roa (hash: FYXyUhIT7c2rjGPzDYmHZI9gN0Jm7MertTGE0IiU5ck=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 May 2025 13:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:a5:af:27:56:5e:87:a2:b1:5c:59:97:cc:f2:f3:e4:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81eed4091383d9ed4056d9f4eff7d2622ddce205 Validity Not Before: May 6 13:00:41 2025 GMT Not After : May 7 13:00:41 2025 GMT Subject: CN=ca35c7388380fc247825f69a1d7ad8f09c0a0261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5f:f3:cb:e7:36:e7:c5:dc:e3:ad:57:da:a5: 34:2f:19:7f:33:22:4d:f2:3a:07:c5:b8:d7:f4:b7: 94:a9:b6:50:c8:a7:c9:34:b0:0f:d4:c5:74:af:d5: 7c:c9:28:4e:3a:e3:9b:8e:78:20:14:b2:c6:b5:9b: 44:a7:12:0f:27:b6:1a:1c:92:ff:49:93:de:60:5f: 1f:ac:4c:d2:ed:b2:44:7f:bf:e1:3c:12:6d:1f:4f: 93:96:0c:e9:92:f2:0e:d5:74:5c:4e:e9:43:e6:65: 7a:e2:96:04:2d:03:3d:21:bc:28:0f:80:e6:bb:72: 63:77:7f:6d:30:23:0d:c3:76:29:0a:cf:fc:32:77: 96:8d:6f:38:b6:83:9b:5e:eb:61:be:90:66:da:bf: d5:48:d0:1a:dc:d1:ad:81:fb:9b:4e:f6:4f:8b:2b: ef:3e:05:8d:f2:7f:7c:bc:62:27:1c:bb:7d:61:57: d5:28:49:fc:48:74:ab:3c:3e:36:38:da:c0:0b:0e: 4f:cf:3d:f4:a8:17:c0:e4:47:ce:79:19:ee:6e:2f: d0:c6:a0:8e:34:70:0b:31:d4:f4:09:d6:e6:30:08: 26:2a:a8:ab:55:9a:00:e5:01:06:1b:67:44:fe:ee: 13:94:d0:36:67:8e:a8:f1:40:4a:db:60:f8:c2:2e: df:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:35:C7:38:83:80:FC:24:78:25:F6:9A:1D:7A:D8:F0:9C:0A:02:61 X509v3 Authority Key Identifier: keyid:81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:ca:7e:93:a4:f3:f1:a4:94:2c:94:5c:63:ce:b4:d6:b7:08: 7e:cd:b8:20:36:88:eb:07:b7:87:57:d8:27:73:36:19:de:1d: c6:bb:6d:40:11:3f:25:ef:37:60:ec:f3:48:03:81:4f:da:b4: 46:4c:f1:fb:22:67:14:21:9a:00:ec:20:9c:86:e6:62:38:5b: 2d:8b:ff:ea:01:81:89:9d:05:bd:c2:8e:89:fa:53:05:f1:c1: e4:1d:ff:d8:1e:72:ee:ca:e1:3f:9b:5c:f9:3e:79:4d:93:28: 54:0e:13:50:77:4c:e6:ca:67:99:e1:02:25:a6:9a:46:bb:0d: 9e:02:38:19:9b:a6:1b:0d:06:d0:79:53:e9:0d:46:9a:10:3e: d1:73:01:d9:44:e6:e8:7d:7a:31:5e:d4:50:32:a5:8d:a6:28: 24:58:6b:c4:22:5d:0b:b5:58:eb:9e:ce:8b:90:6d:d9:52:58: 59:e9:b4:54:62:ab:ef:3c:86:3c:3a:9f:d7:de:20:06:53:83: e6:76:53:7e:b9:a1:17:67:5c:78:a5:18:07:4e:e6:61:97:a7: 2c:0e:5f:cc:03:02:eb:4e:31:23:e7:a1:a5:c6:2b:20:01:6a: 10:e9:83:d8:cc:4b:99:00:1e:66:43:0b:83:33:2a:48:3b:1b: 27:a0:6d:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZalrydWXoeisVxZl8zy8+STMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxZWVkNDA5MTM4M2Q5ZWQ0MDU2ZDlmNGVmZjdkMjYyMmRk Y2UyMDUwHhcNMjUwNTA2MTMwMDQxWhcNMjUwNTA3MTMwMDQxWjAzMTEwLwYDVQQD EyhjYTM1YzczODgzODBmYzI0NzgyNWY2OWExZDdhZDhmMDljMGEwMjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1/zy+c258Xc461X2qU0Lxl/MyJN 8joHxbjX9LeUqbZQyKfJNLAP1MV0r9V8yShOOuObjnggFLLGtZtEpxIPJ7YaHJL/ SZPeYF8frEzS7bJEf7/hPBJtH0+TlgzpkvIO1XRcTulD5mV64pYELQM9IbwoD4Dm u3Jjd39tMCMNw3YpCs/8MneWjW84toObXuthvpBm2r/VSNAa3NGtgfubTvZPiyvv PgWN8n98vGInHLt9YVfVKEn8SHSrPD42ONrACw5Pzz30qBfA5EfOeRnubi/QxqCO NHALMdT0CdbmMAgmKqirVZoA5QEGG2dE/u4TlNA2Z46o8UBK22D4wi7f0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMo1xziDgPwkeCX2mh162PCcCgJhMB8GA1UdIwQY MBaAFIHu1AkTg9ntQFbZ9O/30mIt3OIFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2U3VUNST0QyZTFBVnRuMDdfZlNZaTNjNGdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS80YTljYzQtMmI5YS00ZWYyLWEzM2Et ODcyYjM3MTBjMmExLzEvZ2U3VUNST0QyZTFBVnRuMDdfZlNZaTNjNGdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS80YTljYzQtMmI5YS00ZWYyLWEzM2EtODcyYjM3MTBjMmEx LzEvZ2U3VUNST0QyZTFBVnRuMDdfZlNZaTNjNGdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAncp+k6Tz 8aSULJRcY8601rcIfs24IDaI6we3h1fYJ3M2Gd4dxrttQBE/Je83YOzzSAOBT9q0 Rkzx+yJnFCGaAOwgnIbmYjhbLYv/6gGBiZ0FvcKOifpTBfHB5B3/2B5y7srhP5tc +T55TZMoVA4TUHdM5spnmeECJaaaRrsNngI4GZumGw0G0HlT6Q1GmhA+0XMB2UTm 6H16MV7UUDKljaYoJFhrxCJdC7VY657Oi5Bt2VJYWem0VGKr7zyGPDqf194gBlOD 5nZTfrmhF2dceKUYB07mYZenLA5fzAMC604xI+ehpcYrIAFqEOmD2MxLmQAeZkML gzMqSDsbJ6Btpw== -----END CERTIFICATE-----Generated at Tue May 6 19:42:21 2025 by rpki-client