$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft File: bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft (raw, json) Hash identifier: iPVYOFKrRlSa6bH3Ufze2sO4QgCvifKVxFs9X73A+eg= Subject key identifier: A6:8A:BC:61:29:A8:BD:9D:F3:84:13:1D:67:52:56:A3:12:9A:CE:34 Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a Certificate serial: 01969CE2F1B4942CB1FA0BBB1144C6E7015A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft Manifest number: 154A Signing time: Sun 04 May 2025 20:00:40 +0000 Manifest this update: Sun 04 May 2025 20:00:40 +0000 Manifest next update: Mon 05 May 2025 20:00:40 +0000 Files and hashes: 1: 7RXnmyyS3vqekKTRLkrMbY5ssG0.roa (hash: 5Q0A5wPbh7lrti5wuMW3vt3LYhzQCaz/8+ZNglrRt+4=) 2: AJM-6Zm39xTWDgtragWJQRfYqM8.roa (hash: VMj18TvJaA2yJmPMgPMt6hsb7JE59Ed9FEylWh2nn3U=) 3: CIMTUhMyX5nrRkW9-NJAEdf1yN0.roa (hash: 5crkiuXzCNa5bqRqNmR9eqwI0/iv0HxGyv4mp2t+4Gw=) 4: MJHzVsg_CJVSXfOOjCBQwayhwak.roa (hash: BJpYFXc3Im46ARciyN5r9fJDfEcBRee/lHnVgG/PmkA=) 5: VGurPfZCJh4Ot-RkzdcvT72DKFk.roa (hash: temQQa5zOMU5QeSl6T48Juzkww2/UheolOo0w0utG/I=) 6: Zm2JfyTeERhBzYDvk2afv74vdbg.roa (hash: DReIJihceDuNN6dZJ5Ov64xgQFbw1n7eH/LcP0/n+IA=) 7: a9cqclGBd-sGM1DVbQMIle_rrqQ.roa (hash: LplY8V5whPCnMZSvGvrepAJoVMqSl1G+Bnp+LI/C1eU=) 8: bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl (hash: jxGSX+dotd392Y8bge5ppRbrrow5dqDP15kyn4uQiac=) 9: ceaRqIb_9jwjOB9HUZXtk4XW0N8.roa (hash: eHVzXLml0UyyfUhLhyyY4cTxdGZl4YcMu0PqzYEvlZQ=) 10: tGl_oVEvMu4RFTKmUhxguGv0x7g.roa (hash: PRe0KxLn8TbTqjw2TmvSuGH/Q6PyqmSXeZcJLI07VdI=) 11: yjOVe9P9QCIOVlHjC2af6d5hY-c.roa (hash: nPJ2ri+28FWisJhJn6NbOyOwuKF7rYFdzWnbklaw+3E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 May 2025 20:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:9c:e2:f1:b4:94:2c:b1:fa:0b:bb:11:44:c6:e7:01:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a Validity Not Before: May 4 20:00:40 2025 GMT Not After : May 5 20:00:40 2025 GMT Subject: CN=a68abc6129a8bd9df384131d675256a3129ace34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1a:50:6c:ee:32:73:ab:46:08:3c:02:51:93: 65:4b:f5:f9:91:2b:13:8f:d3:41:cc:3e:18:85:ea: fb:c4:72:4c:d1:75:f1:09:1d:86:98:7c:f7:95:3e: 4e:fe:b7:78:9e:9b:e3:3a:47:e6:4c:c5:7b:39:34: 02:ea:7a:70:50:92:cf:ff:c1:06:4b:cd:83:69:0b: 18:67:f9:37:84:da:79:6b:de:c7:9c:1d:a5:a6:c7: 44:d4:61:1f:e4:ae:6e:13:55:9b:0a:bc:fe:5e:72: 13:cd:49:43:4a:b2:25:4c:88:14:af:d1:dc:1b:fe: ff:35:68:9d:a1:42:61:79:fe:64:3b:9a:73:09:f8: ea:fa:00:8d:56:e9:18:5e:a0:20:cb:1b:91:55:43: 8c:c2:3d:0c:29:28:17:4a:eb:38:54:40:3d:cf:53: 1b:08:2f:62:07:23:9e:8d:fb:eb:df:61:f4:86:77: 11:b7:d1:b8:94:0e:7e:81:d9:e0:75:6d:35:24:03: f2:5f:a4:96:01:cd:c2:27:7c:f5:63:9e:d4:5d:49: b0:87:7f:01:49:7f:f7:68:7a:86:ac:a7:85:ab:07: 04:4a:a0:7c:e4:6a:53:b7:f7:c6:31:14:ec:36:77: e4:72:11:ee:fe:cc:0c:cb:2b:14:83:03:34:14:69: d7:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:8A:BC:61:29:A8:BD:9D:F3:84:13:1D:67:52:56:A3:12:9A:CE:34 X509v3 Authority Key Identifier: keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:40:a4:64:a3:06:c1:fc:cd:30:fc:23:6a:97:97:e9:e7:96: 72:4a:1e:3f:27:a5:c0:96:45:e9:37:d5:8f:94:56:cb:c6:e9: 11:89:f8:a0:1a:1e:c2:72:d5:57:fb:2a:ff:49:10:7f:cd:78: ee:bb:5a:04:98:8b:76:46:ae:63:e2:d2:fc:57:83:a0:70:14: 6d:a9:89:d9:ee:a8:15:ec:16:c3:d0:51:28:79:64:89:38:11: 22:f5:9c:f0:97:0a:22:9a:6d:72:67:39:c0:bd:67:6a:76:3d: 8b:1c:40:97:b2:79:05:19:9d:eb:b0:29:23:8b:e9:0b:5a:7b: 83:1e:a7:ba:b6:98:e8:ac:71:a4:1a:34:a1:6e:8a:67:54:fc: 54:1f:c2:d4:80:41:d9:72:19:03:92:23:ab:6e:ee:40:88:3f: 4d:d6:bd:77:e8:3c:95:ef:9c:60:da:db:de:3f:75:07:51:1c: 40:ef:d8:86:6a:3f:33:1e:a4:31:86:40:02:19:db:e3:63:70: 48:6d:1c:eb:13:bf:58:1a:46:4f:36:e0:1f:39:6e:45:91:16: ff:9e:e1:73:84:f3:ef:d9:e9:e4:70:63:e9:25:f8:c3:64:3c: 5e:26:83:e4:5d:2a:0c:f4:24:b3:f9:4a:6e:ab:1f:b6:3f:dd: ef:81:38:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZac4vG0lCyx+gu7EUTG5wFaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNjlkYTQ0YWUwNjdmYzFhOThhNWY2ZjA1ZjEyZTU0NWQw ZmM2MmEwHhcNMjUwNTA0MjAwMDQwWhcNMjUwNTA1MjAwMDQwWjAzMTEwLwYDVQQD EyhhNjhhYmM2MTI5YThiZDlkZjM4NDEzMWQ2NzUyNTZhMzEyOWFjZTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BpQbO4yc6tGCDwCUZNlS/X5kSsT j9NBzD4Yher7xHJM0XXxCR2GmHz3lT5O/rd4npvjOkfmTMV7OTQC6npwUJLP/8EG S82DaQsYZ/k3hNp5a97HnB2lpsdE1GEf5K5uE1WbCrz+XnITzUlDSrIlTIgUr9Hc G/7/NWidoUJhef5kO5pzCfjq+gCNVukYXqAgyxuRVUOMwj0MKSgXSus4VEA9z1Mb CC9iByOejfvr32H0hncRt9G4lA5+gdngdW01JAPyX6SWAc3CJ3z1Y57UXUmwh38B SX/3aHqGrKeFqwcESqB85GpTt/fGMRTsNnfkchHu/swMyysUgwM0FGnXNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKaKvGEpqL2d84QTHWdSVqMSms40MB8GA1UdIwQY MBaAFG1p2kSuBn/BqYpfbwXxLlRdD8YqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iMWE4MmEtNDkwZi00M2ZiLTk4NmUt MjYxNzBkYTRhMGIxLzEvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9iMWE4MmEtNDkwZi00M2ZiLTk4NmUtMjYxNzBkYTRhMGIx LzEvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL0CkZKMG wfzNMPwjapeX6eeWckoePyelwJZF6TfVj5RWy8bpEYn4oBoewnLVV/sq/0kQf814 7rtaBJiLdkauY+LS/FeDoHAUbamJ2e6oFewWw9BRKHlkiTgRIvWc8JcKIpptcmc5 wL1nanY9ixxAl7J5BRmd67ApI4vpC1p7gx6nuraY6KxxpBo0oW6KZ1T8VB/C1IBB 2XIZA5Ijq27uQIg/Tda9d+g8le+cYNrb3j91B1EcQO/Yhmo/Mx6kMYZAAhnb42Nw SG0c6xO/WBpGTzbgHzluRZEW/57hc4Tz79np5HBj6SX4w2Q8XiaD5F0qDPQks/lK bqsftj/d74E4fg== -----END CERTIFICATE-----Generated at Mon May 5 03:42:19 2025 by rpki-client