$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft File: nZibOZjhn8APhnDPbJ10AXFc808.mft (raw, json) Hash identifier: T/30VMzilMF+81L1rtOMhKVbyNzSQTz4w7GQdEatz/c= Subject key identifier: 05:1A:83:C2:13:4C:B8:E2:4F:99:B4:3C:1B:23:94:5E:29:C3:FB:20 Authority key identifier: 9D:98:9B:39:98:E1:9F:C0:0F:86:70:CF:6C:9D:74:01:71:5C:F3:4F Certificate issuer: /CN=9d989b3998e19fc00f8670cf6c9d7401715cf34f Certificate serial: 0196B66C0010DDE2033339D342B42DA743EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft Manifest number: 24 Signing time: Fri 09 May 2025 19:00:53 +0000 Manifest this update: Fri 09 May 2025 19:00:53 +0000 Manifest next update: Sat 10 May 2025 19:00:53 +0000 Files and hashes: 1: 2d84iaAy9peqMc8uPtiQJUVpqhA.roa (hash: XonhU7MQtuyMxgxQYBP6Y8GxbPwqjebSF5A8W+e+9Dk=) 2: 7dhCE4YFHCUjlqkpkZY7lO72jeU.roa (hash: U8fxbXZIOaigGsLrKkx21Oe8R/4CGL6VvmyMHjpBRGE=) 3: EzmgW5SIzKZhd3gcqi5vbAQspRs.roa (hash: 9GSjRSh1NRSv4vNrPQJMwH5N/rEwdp6boN/thonioHA=) 4: OWURZZQfXBLCjrMIo9lI7C6_8rU.roa (hash: mhkt0q1UgZZPM01b3Aszei1MJkXP1Fj7gDNO1ZQ7Zg0=) 5: Oi5y3oR-zAeDQVQqnqlub4mxZBY.roa (hash: wiW5g0XVDHNy1QPGb/8FJ3EhNGUt4wPgRz1ROLxdqCE=) 6: SWb9dWC7dX_rwlK0omJMc3wlDks.roa (hash: LsnTgIHVTvCHjZWRXF28FLY3Qh1KmfRKmu1wsQo8XRo=) 7: Vkn5Fjc1blCjW36pRVzcI2dLeRM.roa (hash: b4zxuu0+PWf6Y2gL35zDWaLiEcfMZ+LL8pUvtmTR45E=) 8: VtA0sYtoBS8bGZyWtELDxZdV15w.roa (hash: qr5xc7yY1HYHlnNGTTUy5XqyOe3bNLkhXLhBpl8oti4=) 9: XqFMryLIw1x1QzwoXKE2TA0QsD8.roa (hash: 4jdqgSKXalwNBkWrPQkzkWpgRaMNA4FVpS3FsC5tqMU=) 10: YzR4bVvYuilSAsgyIIG5IHRToDw.roa (hash: aeoTN5jE2adPRR+yahq8zhU6/6Zb1ls1gStL9w3wSCY=) 11: lcQi5Bm9eFSfTGrvmV8ciQpCrmk.roa (hash: RYrQUk3+RUhAVWqgU4UejdbJ0Pp8G4DFGkckRr+4ALw=) 12: nK63OUw5HovdmnJOU8TA3IOqFXc.roa (hash: At6fl1NEh3tU3v5PbKWMv3k4BjWoFVeGE3Mdg5kqGAA=) 13: nZibOZjhn8APhnDPbJ10AXFc808.crl (hash: C1RVMORPCXoJ/gN9PvCINvxzhcZCxiM/kNotx2s9WK4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 May 2025 17:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:b6:6c:00:10:dd:e2:03:33:39:d3:42:b4:2d:a7:43:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d989b3998e19fc00f8670cf6c9d7401715cf34f Validity Not Before: May 9 19:00:53 2025 GMT Not After : May 10 19:00:53 2025 GMT Subject: CN=051a83c2134cb8e24f99b43c1b23945e29c3fb20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:68:9d:f6:76:ca:4b:b1:49:ab:f9:56:7c:45: 27:16:c6:dc:a2:c0:da:1d:d6:81:c2:23:74:04:65: e7:89:6f:82:2c:ee:f1:de:b9:8b:1f:7c:54:e8:d5: 62:c8:db:f2:50:fb:3a:92:12:44:0c:27:cd:df:93: a1:65:90:c7:e0:a6:67:a9:3b:ab:d3:f6:ad:c2:d6: ef:4a:41:4d:05:a5:eb:00:67:21:69:79:25:52:56: 85:74:f6:48:1d:64:fa:c9:c5:28:30:3c:29:a5:e5: 47:ab:05:7b:ab:54:31:0c:4a:2c:57:c1:5d:43:9a: d5:bd:ea:f9:54:7f:8c:c9:b8:f1:ac:e3:2d:6b:50: 3b:1c:e9:42:66:b8:cb:7e:7e:19:cb:79:79:87:e3: 89:6b:20:5a:8a:f5:cc:d8:86:93:df:bd:24:fb:86: 56:b5:b8:13:d8:60:b2:8e:66:3f:d8:19:16:4c:a7: d7:05:25:06:be:2f:2e:63:1c:fd:59:fb:f7:2e:08: f8:ff:8c:55:96:d0:83:aa:79:53:16:40:f1:94:da: 00:52:e1:1d:2b:18:5f:aa:8f:ea:e2:97:4b:fd:c3: 28:8e:b2:b7:7a:ec:80:70:6a:ae:cd:45:e2:11:bd: cb:3e:99:b7:4d:f0:e7:6f:15:4b:e5:e1:fd:35:a1: 87:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:1A:83:C2:13:4C:B8:E2:4F:99:B4:3C:1B:23:94:5E:29:C3:FB:20 X509v3 Authority Key Identifier: keyid:9D:98:9B:39:98:E1:9F:C0:0F:86:70:CF:6C:9D:74:01:71:5C:F3:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:96:01:ce:76:df:12:13:d7:9d:8a:c7:ad:80:39:f3:2c:59: 1b:55:e6:2a:bb:ca:8f:d3:dc:09:b1:ed:ae:16:1f:35:db:84: 3d:66:b4:b5:52:31:9a:ce:42:e8:77:13:ff:f5:94:e4:08:81: a8:20:12:0e:fc:87:22:6a:62:95:84:97:b1:71:fa:e5:39:7a: 4d:49:12:08:f8:6e:77:a3:a6:10:78:9b:09:de:c2:21:a8:44: ae:73:3d:e0:82:32:b0:46:eb:82:0a:d1:75:ab:42:11:0b:7d: 59:38:86:ae:a4:de:86:00:1f:0f:f4:b0:c7:0e:f6:17:68:da: 49:e0:24:6f:b2:8b:97:a5:49:f4:e6:24:05:cf:61:6f:f5:4d: 86:bc:e1:49:53:a6:9b:2a:40:48:ed:a9:f9:58:cf:2d:e8:da: 99:8a:3e:71:c6:56:e8:dc:36:65:43:db:b8:fe:ac:f0:a0:de: 0f:db:26:ff:09:5b:d6:c9:23:0e:b0:6f:72:c9:80:a9:c2:02: 5e:65:28:6f:27:b8:4d:c6:ca:38:09:03:2d:cc:ef:ec:1f:70: ed:6a:45:19:bd:70:88:82:13:28:16:12:85:bc:ac:2f:97:19: 46:2b:de:0e:2f:77:8a:24:5c:86:aa:e6:f6:7b:cf:1e:2e:83: 97:be:b2:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa2bAAQ3eIDMznTQrQtp0PsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkOTg5YjM5OThlMTlmYzAwZjg2NzBjZjZjOWQ3NDAxNzE1 Y2YzNGYwHhcNMjUwNTA5MTkwMDUzWhcNMjUwNTEwMTkwMDUzWjAzMTEwLwYDVQQD EygwNTFhODNjMjEzNGNiOGUyNGY5OWI0M2MxYjIzOTQ1ZTI5YzNmYjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmid9nbKS7FJq/lWfEUnFsbcosDa HdaBwiN0BGXniW+CLO7x3rmLH3xU6NViyNvyUPs6khJEDCfN35OhZZDH4KZnqTur 0/atwtbvSkFNBaXrAGchaXklUlaFdPZIHWT6ycUoMDwppeVHqwV7q1QxDEosV8Fd Q5rVver5VH+MybjxrOMta1A7HOlCZrjLfn4Zy3l5h+OJayBaivXM2IaT370k+4ZW tbgT2GCyjmY/2BkWTKfXBSUGvi8uYxz9Wfv3Lgj4/4xVltCDqnlTFkDxlNoAUuEd Kxhfqo/q4pdL/cMojrK3euyAcGquzUXiEb3LPpm3TfDnbxVL5eH9NaGH/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAUag8ITTLjiT5m0PBsjlF4pw/sgMB8GA1UdIwQY MBaAFJ2YmzmY4Z/AD4Zwz2yddAFxXPNPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC84YzVmNWEtODA0Yi00ZGY2LTgyN2It YzdjY2Q3OTQzMTA2LzEvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC84YzVmNWEtODA0Yi00ZGY2LTgyN2ItYzdjY2Q3OTQzMTA2 LzEvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyJYBznbf EhPXnYrHrYA58yxZG1XmKrvKj9PcCbHtrhYfNduEPWa0tVIxms5C6HcT//WU5AiB qCASDvyHImpilYSXsXH65Tl6TUkSCPhud6OmEHibCd7CIahErnM94IIysEbrggrR datCEQt9WTiGrqTehgAfD/Swxw72F2jaSeAkb7KLl6VJ9OYkBc9hb/VNhrzhSVOm mypASO2p+VjPLejamYo+ccZW6Nw2ZUPbuP6s8KDeD9sm/wlb1skjDrBvcsmAqcIC XmUobye4TcbKOAkDLczv7B9w7WpFGb1wiIITKBYShbysL5cZRiveDi93iiRchqrm 9nvPHi6Dl76yEw== -----END CERTIFICATE-----Generated at Sat May 10 00:36:16 2025 by rpki-client