$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft File: UXoMloQrr8n2MLoUuD6nm9EqU7k.mft (raw, json) Hash identifier: S8KDDMVUR8B+zpgS0YMV/1gadmJ3F2nvpuaQogjeeVk= Subject key identifier: B8:5F:58:97:66:C0:34:12:E8:4C:A9:14:30:CA:48:37:DF:41:DA:D6 Authority key identifier: 51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9 Certificate issuer: /CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9 Certificate serial: 0196C917B5EFE9F889DD9192521E43ED9FA3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft Manifest number: 06B4 Signing time: Tue 13 May 2025 10:01:36 +0000 Manifest this update: Tue 13 May 2025 10:01:36 +0000 Manifest next update: Wed 14 May 2025 10:01:36 +0000 Files and hashes: 1: A9TOJi7Bxz7veSOLUDGsJ4pL9R0.roa (hash: L1seqI8odM9ZXYKfLuYv3ZPKHIsiVVU+zJszizfd+7A=) 2: MXgEjfNqzg4ibHIgBnMu6L6lCSM.roa (hash: fVgHiU9asEnxImlxkLsSy6Pf5pU0/2RHygcrCBHFKNY=) 3: QGrd388-C11MqeKLf5zSPmftmu8.roa (hash: eIGajnhQKVymGKeREUlczNnZhMIZNge0+YaIwRrctAo=) 4: UO7xryDol2p3krIKMCkv999_urQ.roa (hash: Xy7Upoc2VsccaTx0EC/kw72OW1M9o27lrsbWbdMHCVw=) 5: UXoMloQrr8n2MLoUuD6nm9EqU7k.crl (hash: rhFFdnfCJQ8Iw+fDAMA9AbbVu5pY85nHDGp5PFHvJ2g=) 6: Z6Jf9Ju__GKHYgYU0JPOtkpxCIE.roa (hash: vXcwZv2fW/39KxdDX07V5N5I3gjDwIq6vz3aw5sXRWM=) 7: ZIUzaNeA-dqB_cS44MLnf0HuawA.roa (hash: q8f9plPLOl0nPVToevY6P1epucVG2NTh0o+Jv1i4WmQ=) 8: _aaePr1gPuxwX3K-rn7ikqUJzEA.roa (hash: Z8VGyqgSTuNPPT27lOIg4P0ar4keL30ubWNYxtuW/fo=) 9: kOLB1EphrfqUXSkkLaUwaVvFrU4.roa (hash: YkPfWUPXu7p+n7Mg+8D2wVjpEqFMWVXtcvGvgRRvDac=) 10: mz7ehAUqOsrRqbJ9VvPWwqk2XIY.roa (hash: 7X9X318pIV2mGDTJzxJQrlTxR4fXmcyTvYHm7BSWjog=) 11: nZXVIEL0exaI0r9M1rnJ3WGAF8E.roa (hash: z9Y7z19RIBK56yiGgo7dXHB1kgsXjY6R1AlYACsMqoU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 May 2025 10:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:c9:17:b5:ef:e9:f8:89:dd:91:92:52:1e:43:ed:9f:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9 Validity Not Before: May 13 10:01:36 2025 GMT Not After : May 14 10:01:36 2025 GMT Subject: CN=b85f589766c03412e84ca91430ca4837df41dad6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:46:5a:63:c7:aa:5f:c5:f4:7b:4e:02:0a:96: 2b:a2:05:74:88:8d:a9:10:a4:f2:88:39:1b:6a:d7: d4:f3:b9:49:0b:6a:9d:44:92:8a:0a:a6:1f:b6:fe: b7:88:dc:90:fc:0d:48:3e:49:af:29:eb:28:19:9f: 60:c7:87:ce:5f:51:66:3e:aa:b5:e5:94:71:46:81: 89:e1:db:39:05:3b:d6:5b:e9:fe:fd:c2:f0:6e:ba: 6c:46:38:cb:12:fe:84:16:7b:0e:1f:8e:5a:76:1c: f4:17:2b:c9:fc:c1:d0:1f:99:89:f0:c6:03:37:fd: 92:d0:70:5f:48:8a:08:1d:65:48:78:a2:36:04:57: d1:b1:8b:6b:37:69:a4:fe:c3:7a:7b:68:70:26:a3: 54:68:8e:80:0f:be:7c:2b:12:76:b1:d8:8f:90:85: 42:00:53:a5:65:11:60:d0:66:01:59:70:af:9a:94: 68:a6:55:ee:27:b6:a0:ff:b7:21:01:fc:3e:b2:d5: 31:c6:e8:7c:42:0d:e1:4f:2c:98:3e:29:5a:6d:91: 62:7e:9d:b6:93:83:e7:38:6e:b2:e3:50:67:0d:3f: e9:2f:73:49:d4:ec:84:40:05:e5:33:66:cf:69:9c: 55:4e:84:d9:eb:2a:43:b0:20:1a:05:2d:53:11:cd: b4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:5F:58:97:66:C0:34:12:E8:4C:A9:14:30:CA:48:37:DF:41:DA:D6 X509v3 Authority Key Identifier: keyid:51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:00:ed:e6:a7:77:f5:59:b5:c1:99:94:0d:5b:9f:67:ff:19: 29:4d:1f:fb:e8:e2:03:b0:46:df:62:3d:27:67:e8:2f:8f:56: 39:10:3d:5c:b5:93:e7:72:44:c6:ee:86:71:ac:27:6b:c6:e5: 69:b2:d8:13:7b:3c:10:13:72:0c:0a:e9:bc:a4:53:b6:a5:a0: 2e:8e:70:ec:0c:46:03:7c:3b:4d:42:52:da:7c:ea:dd:94:a3: 60:2f:6f:72:63:05:98:80:89:29:54:49:21:85:02:ed:60:40: f4:46:bc:24:da:5d:cb:76:64:76:c0:fe:2b:83:0d:fd:5a:d2: c6:bc:69:0d:a2:39:ff:a6:f2:dd:d1:18:1f:9e:32:43:fe:17: 45:64:4b:cc:cf:cc:f9:aa:64:cd:7d:5d:1d:24:db:9b:7b:46: ee:a4:0f:e2:3b:7d:4a:cf:b3:83:cb:be:39:b4:8a:90:df:a7: 8b:44:19:18:a3:91:cd:4d:12:0f:13:b0:67:d0:e3:e7:af:ad: e2:3a:bb:68:c5:2e:e1:5f:e3:42:36:e6:83:e9:77:f1:d8:48: f4:aa:e0:94:71:bf:2d:90:4a:05:e4:d5:33:40:9c:9a:20:0a: 65:11:a7:c0:3c:34:13:e5:73:6c:ed:bd:6e:d3:e2:4e:b1:a7: 71:ad:2f:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZbJF7Xv6fiJ3ZGSUh5D7Z+jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxN2EwYzk2ODQyYmFmYzlmNjMwYmExNGI4M2VhNzliZDEy YTUzYjkwHhcNMjUwNTEzMTAwMTM2WhcNMjUwNTE0MTAwMTM2WjAzMTEwLwYDVQQD EyhiODVmNTg5NzY2YzAzNDEyZTg0Y2E5MTQzMGNhNDgzN2RmNDFkYWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUZaY8eqX8X0e04CCpYrogV0iI2p EKTyiDkbatfU87lJC2qdRJKKCqYftv63iNyQ/A1IPkmvKesoGZ9gx4fOX1FmPqq1 5ZRxRoGJ4ds5BTvWW+n+/cLwbrpsRjjLEv6EFnsOH45adhz0FyvJ/MHQH5mJ8MYD N/2S0HBfSIoIHWVIeKI2BFfRsYtrN2mk/sN6e2hwJqNUaI6AD758KxJ2sdiPkIVC AFOlZRFg0GYBWXCvmpRoplXuJ7ag/7chAfw+stUxxuh8Qg3hTyyYPilabZFifp22 k4PnOG6y41BnDT/pL3NJ1OyEQAXlM2bPaZxVToTZ6ypDsCAaBS1TEc20zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLhfWJdmwDQS6EypFDDKSDffQdrWMB8GA1UdIwQY MBaAFFF6DJaEK6/J9jC6FLg+p5vRKlO5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xNGU0OTItODUyNS00ZWVjLTg0YmMt YjBlYjY3MTVlMGFmLzEvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8xNGU0OTItODUyNS00ZWVjLTg0YmMtYjBlYjY3MTVlMGFm LzEvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGQDt5qd3 9Vm1wZmUDVufZ/8ZKU0f++jiA7BG32I9J2foL49WORA9XLWT53JExu6Gcawna8bl abLYE3s8EBNyDArpvKRTtqWgLo5w7AxGA3w7TUJS2nzq3ZSjYC9vcmMFmICJKVRJ IYUC7WBA9Ea8JNpdy3ZkdsD+K4MN/VrSxrxpDaI5/6by3dEYH54yQ/4XRWRLzM/M +apkzX1dHSTbm3tG7qQP4jt9Ss+zg8u+ObSKkN+ni0QZGKORzU0SDxOwZ9Dj56+t 4jq7aMUu4V/jQjbmg+l38dhI9KrglHG/LZBKBeTVM0CcmiAKZRGnwDw0E+VzbO29 btPiTrGnca0vCA== -----END CERTIFICATE-----Generated at Tue May 13 15:24:10 2025 by rpki-client