$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft File: 9LdilQ63kWZou_qNG4cFYLHKdzk.mft (raw, json) Hash identifier: me6ImXhtQpnZQ5CmaLSc+ufDjQ/R5RnoT14CSR3uQSc= Subject key identifier: 09:06:F9:86:1A:FD:E6:75:D1:FF:72:D0:F6:4F:F9:DD:69:C9:0C:B4 Authority key identifier: F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39 Certificate issuer: /CN=f4b762950eb7916668bbfa8d1b870560b1ca7739 Certificate serial: 0196A4653FF55455F8C2B3411B91615EDBAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft Manifest number: 13C4 Signing time: Tue 06 May 2025 07:00:20 +0000 Manifest this update: Tue 06 May 2025 07:00:20 +0000 Manifest next update: Wed 07 May 2025 07:00:20 +0000 Files and hashes: 1: 2I_gyEpNZ4JuV81yJRUXBVu-KOA.roa (hash: r49ywNskr+Vb41Ou7x0XARQgE2G5ZH5biPRfE9u4cAc=) 2: 2tZ8QlZM2m2IpNLIvJ0W7pbf-Z0.roa (hash: 9Uhvy9O+l0zHDpQPVkCj98q8JIdj7ZhjiR3rxLVvfII=) 3: 9LdilQ63kWZou_qNG4cFYLHKdzk.crl (hash: SyWgwaHURW7FvsuAFNj6uVUxUAw1d0SoUJ6btJ2y6n8=) 4: Cqe38rpbTYcW3IBIj3GE-axW20k.roa (hash: rFb4HKGqgMrSh0TmO+Kz12Dni5W90nAeu/GsQNE5QbI=) 5: QvUi-uUyEPClIhL14Tjl4e8kcJ8.roa (hash: JHsP9SRn0z74odoNftVjEsPtUj5FZk/4tMrWE3fymP0=) 6: RW6wxE8PmfS_l7583dlKYTuULiM.roa (hash: NA5N2aFRPb0HCLNpvXiULoI8i28V3/zHm+oTFj2hW9U=) 7: XViXWtM4Qca08fEngqnKAjV8_6k.roa (hash: FX1LXPYDV9yZbUiSRuPd/ffSUdla1CU7pMstvEpaovA=) 8: YcddWRNkcNBtg2GRMDNHHw9mFJ4.roa (hash: G/xopPnzXkAvpcbYnZmulnHRu0yyJM+YK09jXPq59tw=) 9: t292OmKp-GnX0MyFpL72FnDc9MA.roa (hash: uIDL5vQGM8ia+mjLC9CmEE4toRqUWbIawZ8YzQbIFpY=) 10: vyCGGnsFvqliTEx12jYp6lwRAek.roa (hash: l5raYrCV5cZJwg0Ik6+6Zpw1vWa9xl0dKA9pFd0Ksa8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 May 2025 04:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:a4:65:3f:f5:54:55:f8:c2:b3:41:1b:91:61:5e:db:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4b762950eb7916668bbfa8d1b870560b1ca7739 Validity Not Before: May 6 07:00:20 2025 GMT Not After : May 7 07:00:20 2025 GMT Subject: CN=0906f9861afde675d1ff72d0f64ff9dd69c90cb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:26:a0:f5:4a:7c:f5:02:88:88:63:e8:62:32: 20:e0:d7:43:29:cb:54:25:2d:52:a7:58:a4:91:74: 7c:75:57:bd:8a:a5:c2:d4:01:63:3f:46:62:5d:6a: e9:78:7a:42:fd:89:79:3e:c2:e4:eb:a3:6e:2b:c6: bb:96:56:cf:d0:36:14:b7:2a:6b:9d:2e:09:98:d4: eb:ff:22:4b:d4:76:59:35:66:20:d9:33:d1:be:1f: 8d:f7:be:f5:49:88:ca:d8:e8:ba:63:2e:81:44:10: 65:1d:48:32:44:ce:1b:82:98:81:87:63:f5:7c:8c: 8d:ef:f7:d9:3d:dc:fc:20:25:34:61:66:f0:97:40: 0e:78:ff:59:3a:ae:c7:96:01:d5:27:54:33:ec:fc: 49:d2:96:8e:e1:9a:d1:29:45:d2:86:fd:b0:d6:07: ea:e1:46:8e:21:1d:47:ee:69:0d:4c:63:14:d7:3e: ae:6c:7c:f2:34:7e:c5:d9:14:f0:c8:06:c1:74:15: 1c:87:4a:47:d3:25:08:0f:dd:e8:0d:f5:3f:37:93: be:61:4c:2c:63:27:8f:69:cf:62:7d:52:87:04:57: 14:36:22:7f:66:bf:00:a1:a2:35:33:bf:0a:7b:b7: 5a:83:bd:06:2e:12:02:2b:12:d3:75:e2:a8:c4:eb: 0b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:06:F9:86:1A:FD:E6:75:D1:FF:72:D0:F6:4F:F9:DD:69:C9:0C:B4 X509v3 Authority Key Identifier: keyid:F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:3b:39:cb:58:3c:65:cd:11:0f:e4:16:a3:77:a9:b4:a5:7b: 7a:f5:c3:7f:5b:31:d0:06:da:a7:11:f6:81:74:cb:8a:c7:9b: 68:c4:9d:6a:38:00:89:b7:82:8f:b1:c7:a0:ef:0b:0e:0a:b5: e1:a3:71:2d:23:97:ec:57:19:02:3f:fe:14:4e:dd:8d:73:b2: 98:60:c3:5f:36:aa:ca:9c:27:b7:30:ed:07:6f:d9:63:dc:21: 84:f4:ec:d0:d7:12:97:ab:0d:11:e1:e2:af:4c:90:13:49:e9: e8:6d:f1:ee:77:37:7b:8e:68:b0:56:30:5a:05:8b:c3:aa:90: d8:a0:ee:10:6f:da:b3:aa:b6:20:b5:4c:67:25:24:41:b7:4d: 3c:3e:e5:9e:8f:4b:df:99:8e:c0:28:52:b2:48:9c:8b:c6:46: e2:38:4d:b1:91:a3:cb:d4:ba:e3:26:a1:5e:38:f8:be:d4:7d: 1b:f1:26:30:8a:c4:5d:96:03:e1:2a:57:6b:4b:30:dd:42:1f: 75:77:ae:f2:0b:88:be:51:25:78:93:8e:27:5f:98:7b:26:7e: c5:26:23:ac:5e:4c:ce:40:08:78:4a:77:4f:06:4b:ad:72:75: 88:ff:21:4e:ca:74:38:be:36:4d:d7:a1:be:ac:0b:b6:01:3b: fa:07:1b:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZakZT/1VFX4wrNBG5FhXtusMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0Yjc2Mjk1MGViNzkxNjY2OGJiZmE4ZDFiODcwNTYwYjFj YTc3MzkwHhcNMjUwNTA2MDcwMDIwWhcNMjUwNTA3MDcwMDIwWjAzMTEwLwYDVQQD EygwOTA2Zjk4NjFhZmRlNjc1ZDFmZjcyZDBmNjRmZjlkZDY5YzkwY2I0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iag9Up89QKIiGPoYjIg4NdDKctU JS1Sp1ikkXR8dVe9iqXC1AFjP0ZiXWrpeHpC/Yl5PsLk66NuK8a7llbP0DYUtypr nS4JmNTr/yJL1HZZNWYg2TPRvh+N9771SYjK2Oi6Yy6BRBBlHUgyRM4bgpiBh2P1 fIyN7/fZPdz8ICU0YWbwl0AOeP9ZOq7HlgHVJ1Qz7PxJ0paO4ZrRKUXShv2w1gfq 4UaOIR1H7mkNTGMU1z6ubHzyNH7F2RTwyAbBdBUch0pH0yUID93oDfU/N5O+YUws YyePac9ifVKHBFcUNiJ/Zr8AoaI1M78Ke7dag70GLhICKxLTdeKoxOsLXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAkG+YYa/eZ10f9y0PZP+d1pyQy0MB8GA1UdIwQY MBaAFPS3YpUOt5FmaLv6jRuHBWCxync5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUxkaWxRNjNrV1pvdV9xTkc0Y0ZZTEhLZHprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8wYjIzYzUtMjFiNS00YWIzLTk3YTAt MmY4ZGYxODdmOThiLzEvOUxkaWxRNjNrV1pvdV9xTkc0Y0ZZTEhLZHprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8wYjIzYzUtMjFiNS00YWIzLTk3YTAtMmY4ZGYxODdmOThi LzEvOUxkaWxRNjNrV1pvdV9xTkc0Y0ZZTEhLZHprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKDs5y1g8 Zc0RD+QWo3eptKV7evXDf1sx0AbapxH2gXTLisebaMSdajgAibeCj7HHoO8LDgq1 4aNxLSOX7FcZAj/+FE7djXOymGDDXzaqypwntzDtB2/ZY9whhPTs0NcSl6sNEeHi r0yQE0np6G3x7nc3e45osFYwWgWLw6qQ2KDuEG/as6q2ILVMZyUkQbdNPD7lno9L 35mOwChSskici8ZG4jhNsZGjy9S64yahXjj4vtR9G/EmMIrEXZYD4SpXa0sw3UIf dXeu8guIvlEleJOOJ1+YeyZ+xSYjrF5MzkAIeEp3TwZLrXJ1iP8hTsp0OL42Tdeh vqwLtgE7+gcbsA== -----END CERTIFICATE-----Generated at Tue May 6 12:59:06 2025 by rpki-client