$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft File: SAXxfC1xM9La06jffjUxXjfvXa8.mft (raw, json) Hash identifier: c+URkV0XYe1E3Gdq6YnOegGSvH/zCvNDBSG5/AOYKG4= Subject key identifier: AB:0C:7B:27:C1:FB:7A:44:FD:53:02:A2:57:26:EC:BA:BE:3F:6C:51 Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf Certificate serial: 0196B822D7BF4E50F2EC1CA278E5B7E951D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft Manifest number: 15D7 Signing time: Sat 10 May 2025 03:00:13 +0000 Manifest this update: Sat 10 May 2025 03:00:13 +0000 Manifest next update: Sun 11 May 2025 03:00:13 +0000 Files and hashes: 1: 0Ku6hM-uBGPbIB_elC1-63mAMPQ.roa (hash: COta24brNXG7Hg0yqxT50IIeRD/EU1T0z8f77M/W0Yo=) 2: EkFoJFaGBhEamXzDueIrcP26LBc.roa (hash: PQO2ZDlIaJ7jCYwx8vtlK6hg74IbDpuCQQjGUuzjVhU=) 3: Lcu6ir7Tj9YBKclNd5yCQDyZYdA.roa (hash: Auoo76FRPPWoH0S0B9YJ3Yza2c1mTAhQ5423VpfHxOE=) 4: PLHlOEI8OTEsrWEb9gcEoJkppTI.roa (hash: HqryYXEFzx4Aim3Zpzxpc+c6ErO0nPq1Js+lyJLuXYs=) 5: R3xayF97XK3f6WN53ZX5sxR54jo.roa (hash: 3PZ+HViUokDQMZxJmaE1uzBy+pQRq/4nLFWrCe3sMjU=) 6: SAXxfC1xM9La06jffjUxXjfvXa8.crl (hash: QyDi1FJ+gXAcebbM7wSS0s7+Ads/1RG7oO03ADmvguU=) 7: U9JKjRKHCxdIsPDNQPOR88OqmCg.roa (hash: lajLKbejzI40eVa7BHAS4fdbPpPskr27n+GpeXAUSBk=) 8: V5zbutGfbh5lgD5tOB55BSZL6mM.roa (hash: 8dfbuUOKEzC/ptg0//A1zNKfTmzKWKS3nTLCemG3GRo=) 9: VgwcNuoBbQF8vGnu87-98unWzYI.roa (hash: xzpL3I9r8p4R1FCkPrlQ5XYcS0wswEmNqu/eM1IOMwU=) 10: WclbZXzoRolOPnP1txTGa2N2wfw.roa (hash: bkUop8nfZL+I8FoNjqYPn2viT45YyNvKLtfeDigIXyI=) 11: Zj4JwFMN6H5YeHt4cvNXltyCdE4.roa (hash: CWOsIZG4hIEMhn5XzXUXZbhFt0Yejg6in7qKXYgJegA=) 12: _yzn5oDusX2X0X7GKZBcg6brbLE.roa (hash: 3Zb9XtEnFpg2ZnedyDM6Fmzs7qviCkwqPZ3m1FKhSy0=) 13: b81Y2U7ou3gE7qnhOIrH6wzIwHE.roa (hash: evIbesfBnQDx6fK9X24u14Wb1m4RUjoEvZ0+mfP0N8E=) 14: bZniM2QlgkpTXR-OwANLXtwZtPE.roa (hash: 1uGphNb2cimTL54FLmsjWSi2OJxcMRM81uY8UPnrcpo=) 15: pzkAj4_zAVXkRe0C_QHjEgzBj0Y.roa (hash: 3G1cxIfKvcRktJjL1ylmN8MQ4xGHLKTVnlOoY7cNz5o=) 16: uE7Yr0mrdBcUX1IW6FuzHWklFWE.roa (hash: Txuv8knFAVKbDTm6XQpLWHHm/zIqEkh3sPLdu38MgYQ=) 17: ulYg4AG1ul90cUDOSHCVqM9kgX0.roa (hash: YyEEkcY+cM/W31h/eE29O/fYkGie+5JT9vHD80X8ftc=) 18: wwlt2hK8l53pvlwYMtoaW4Ty7wo.roa (hash: OS5MPuFmrI+TPRKuwjrDIui0RjzgE9QrGAKYQntJtcY=) 19: yF60MXomOPXicQ4dVy_gu3Jce0c.roa (hash: 5FKE6qFccFKdKUpBcGBwVGHo07CqDvWyXp8ktMwwG+M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 May 2025 19:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:b8:22:d7:bf:4e:50:f2:ec:1c:a2:78:e5:b7:e9:51:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf Validity Not Before: May 10 03:00:13 2025 GMT Not After : May 11 03:00:13 2025 GMT Subject: CN=ab0c7b27c1fb7a44fd5302a25726ecbabe3f6c51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6b:d6:72:69:79:21:46:28:dd:db:ac:14:b1: 7f:06:81:29:da:12:a4:ca:45:30:26:82:c5:a1:e4: db:d9:50:e0:13:4a:0e:2a:34:16:3e:fa:f9:3d:0b: b1:d8:aa:7b:f4:34:d2:19:e7:1c:6f:4f:95:12:e9: 7a:fc:9b:61:dc:95:65:a3:88:77:cb:f2:4f:c8:7c: 93:95:df:2c:89:ce:27:f0:e2:0a:04:9a:ab:80:54: 85:49:1f:a8:31:6d:0c:28:d2:2e:4f:f5:99:5b:3b: 60:5a:cb:27:b2:ad:d9:0a:06:36:48:f1:8d:c7:6a: 7d:da:ab:c9:98:3a:70:57:d1:63:5b:d9:ce:25:2d: 50:10:72:c3:bc:94:ed:92:bd:0b:6a:ad:82:9b:19: 35:85:b7:ec:6e:da:67:b9:ac:ab:ee:11:5d:2d:89: 67:76:fb:76:a6:b7:ee:c8:70:ba:de:10:3c:c7:ee: a7:b2:ab:e6:7a:a0:41:80:dc:9c:7e:11:25:f9:dd: db:6b:4b:e8:90:2f:e7:93:76:e5:c7:ef:ea:b3:6f: bf:33:86:27:7f:ef:c2:90:f1:0a:2f:32:97:fe:d9: c8:8f:53:76:69:23:33:e6:e6:96:50:4b:05:b6:8b: cc:a3:ec:8a:e9:e5:4b:f3:da:bf:d5:ce:84:0c:14: 06:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:0C:7B:27:C1:FB:7A:44:FD:53:02:A2:57:26:EC:BA:BE:3F:6C:51 X509v3 Authority Key Identifier: keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:37:e0:fa:6c:b5:be:2c:f3:e6:49:0a:47:4c:a8:6d:95:6b: 66:44:74:96:78:61:4e:f5:fd:52:db:3c:b9:7e:2e:a7:95:91: 81:d1:93:28:7a:6e:47:dd:a8:d9:a2:30:6e:f3:29:e6:d8:cc: 00:e4:de:bf:09:b7:5c:45:7d:f1:8a:fb:54:2f:b8:f9:7e:a2: 8b:5e:2f:bd:4b:cf:cc:e9:d4:88:a1:6b:46:99:71:56:21:56: e6:88:09:15:1f:82:8f:89:10:99:37:06:fa:2c:bf:70:5f:14: fa:9c:cb:31:79:7e:1e:a0:63:8a:e7:7e:72:af:66:e6:6d:7a: fe:0a:de:f1:b4:ff:6e:51:69:d2:d6:f2:36:a2:55:4c:bc:52: 50:8c:07:52:c3:1f:2e:81:36:dd:fa:eb:a7:3e:6b:e4:48:35: 03:91:9d:88:4a:26:1c:b2:29:14:4d:49:91:74:b1:ba:eb:33: f3:fb:54:56:72:27:ea:85:a3:a6:e1:9a:34:f3:67:a4:7e:3a: 20:68:92:a3:29:de:cd:00:3a:f1:26:12:2c:bf:8a:ed:83:cb: 69:2d:66:10:94:ea:f3:38:08:d0:5e:b6:60:36:d1:57:0d:81: ca:a8:47:49:03:de:6a:3b:9e:92:5d:5d:b4:d6:0b:23:78:8c: a2:f6:b1:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa4Ite/TlDy7ByieOW36VHTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl ZjVkYWYwHhcNMjUwNTEwMDMwMDEzWhcNMjUwNTExMDMwMDEzWjAzMTEwLwYDVQQD EyhhYjBjN2IyN2MxZmI3YTQ0ZmQ1MzAyYTI1NzI2ZWNiYWJlM2Y2YzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GvWcml5IUYo3dusFLF/BoEp2hKk ykUwJoLFoeTb2VDgE0oOKjQWPvr5PQux2Kp79DTSGeccb0+VEul6/Jth3JVlo4h3 y/JPyHyTld8sic4n8OIKBJqrgFSFSR+oMW0MKNIuT/WZWztgWssnsq3ZCgY2SPGN x2p92qvJmDpwV9FjW9nOJS1QEHLDvJTtkr0Laq2Cmxk1hbfsbtpnuayr7hFdLYln dvt2prfuyHC63hA8x+6nsqvmeqBBgNycfhEl+d3ba0vokC/nk3blx+/qs2+/M4Yn f+/CkPEKLzKX/tnIj1N2aSMz5uaWUEsFtovMo+yK6eVL89q/1c6EDBQGSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKsMeyfB+3pE/VMColcm7Lq+P2xRMB8GA1UdIwQY MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt NWRkNmUyMmViYWIwLzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaDfg+my1 vizz5kkKR0yobZVrZkR0lnhhTvX9Uts8uX4up5WRgdGTKHpuR92o2aIwbvMp5tjM AOTevwm3XEV98Yr7VC+4+X6ii14vvUvPzOnUiKFrRplxViFW5ogJFR+Cj4kQmTcG +iy/cF8U+pzLMXl+HqBjiud+cq9m5m16/gre8bT/blFp0tbyNqJVTLxSUIwHUsMf LoE23frrpz5r5Eg1A5GdiEomHLIpFE1JkXSxuusz8/tUVnIn6oWjpuGaNPNnpH46 IGiSoynezQA68SYSLL+K7YPLaS1mEJTq8zgI0F62YDbRVw2ByqhHSQPeajuekl1d tNYLI3iMovaxYA== -----END CERTIFICATE-----Generated at Sat May 10 04:49:27 2025 by rpki-client