$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft File: CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft (raw, json) Hash identifier: zaRcgb1H6CgwDIJtRAENw9Uy5QESbOatcut/WbDqmFE= Subject key identifier: 7D:CB:E3:85:10:A7:8D:A5:7B:FE:ED:5C:90:98:1A:8B:92:05:4F:D2 Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Certificate serial: 0196BB5B137E2C9787739296042499199555 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft Manifest number: 1565 Signing time: Sat 10 May 2025 18:00:30 +0000 Manifest this update: Sat 10 May 2025 18:00:30 +0000 Manifest next update: Sun 11 May 2025 18:00:30 +0000 Files and hashes: 1: 0EWIFMkHOwPxXxJO-cVVnlFMV9M.roa (hash: H3HRfMwSGiaOC4hjRP3JPpolbe1iEtk1HgVt+tXcFJg=) 2: 1Q8S-F04ndhiDn0SGwOoAJvpcJE.roa (hash: C3Etga/0CnN14pA6mDGityRvYUsO547YlA3aweNBuiE=) 3: 2VG718T3W04-_y_DFYMb27FL8Xc.roa (hash: rc2TenqF9dc6/5xbGTLqr/wJccF1AG2cwa4tLlPDxNg=) 4: 4eUzX53KjKiFABS1AxLPvZ5r-bY.roa (hash: 7YG9ahRtvq/YQgGSsJQAoRx/DWLAGEIhFL7ghXNU9R4=) 5: 5HzzPzyXFWUltUFIxz7A1OHGi7o.roa (hash: KdXF+S8JaHRcZ3Ivt3Pqt/DXcq9oRCgLGhDICrSfT58=) 6: 9NRiEzWNWvOsqkkmj1H_nO4JtIA.roa (hash: M1EfpG0UAk+KXmH4YDb8gbqx8X4cMoL0D3M3L/57Gmk=) 7: CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl (hash: 8BHrXnAzX8IM72cO6mvGrfhvKq93USKhqLxaHYA+ky8=) 8: CdZHXMtiuXIYHPmoJY2aErxG8Z8.roa (hash: zau8aloWL7mHqdY4KBJaLbm12+SMJIeq7unHMUAtkpg=) 9: ELaIItpNMzqHS9OpyWZxQCWwejQ.roa (hash: nTU80YWNnv8w85NSUIjn+8ThW6vosJXjx8iKS04GONQ=) 10: QDnTB1-gKLLvkYk5f0mHuXK293g.roa (hash: ITp7yMZbWE36QWni9uBDxLpY4F+C9+SnVAj3E7l62Ts=) 11: XDAdp99VnBF7cnnsQ12OybJrT8Y.roa (hash: RlZg9LpMx3Sn+N/ygBjqDdQQDqiZuazZKwQVgxx0FBg=) 12: rfdo-9tZjARHX4NveRw0hMtJZi0.roa (hash: 5ECReeTc1Tc4KP4YsINLVoWJBI6UqeiVxcrFrB9M65o=) 13: tjV22hyfL6sKASeEJo6Ke2cIRMg.roa (hash: j+NWMjI7+Df8SVOaL0Iyl9IZZ4H1LL2E359iqV63je4=) 14: zCJNwAHBT-OuD8JSwLlWmHeq2i0.roa (hash: xxcu2GFnZrIoRaIL254U2SP3O3E+qALgdaalLMmqYoY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 May 2025 18:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:bb:5b:13:7e:2c:97:87:73:92:96:04:24:99:19:95:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Validity Not Before: May 10 18:00:30 2025 GMT Not After : May 11 18:00:30 2025 GMT Subject: CN=7dcbe38510a78da57bfeed5c90981a8b92054fd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:89:9c:71:69:8b:70:c6:eb:39:0f:55:9e:f8: 05:32:5b:8e:81:94:0c:3e:98:9a:2e:28:51:09:ea: 94:23:11:ce:9b:66:40:ab:73:f2:7e:e2:f8:ce:9e: ab:52:87:48:98:b4:2e:3c:3d:5f:a8:1f:fb:b0:dc: 4a:47:a7:70:0e:05:6a:f1:a6:c4:e6:f1:4f:8a:a0: e5:a9:c8:40:aa:50:a0:86:bc:a7:be:0c:04:38:6a: c7:5c:19:d5:83:f1:e1:43:3a:68:01:13:66:24:d3: e0:19:97:a7:53:1b:eb:b8:b1:53:d1:07:6b:5f:a8: 6e:05:8f:2a:43:17:6c:35:62:0e:8f:d0:65:b9:8b: 5e:c4:fe:1a:31:3d:9b:99:57:b3:57:e9:20:63:20: 61:d0:7c:17:8d:80:30:19:a0:f0:0a:bc:df:0b:53: b7:b3:5a:e4:0a:0a:69:e0:05:f8:53:2b:11:5c:59: 32:97:81:c1:c3:6b:98:24:1b:1c:c2:7f:2e:6f:5f: 32:44:13:cc:cd:e2:22:49:17:8f:98:fa:43:49:5a: d6:bb:ff:6d:d5:d6:c0:bb:df:f2:c9:31:fa:23:ea: c0:7f:e6:ea:f0:ae:d8:b3:8b:db:f7:50:b7:fa:92: 03:6c:a3:c2:3e:5c:25:7e:49:fa:ee:19:1c:81:33: ca:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:CB:E3:85:10:A7:8D:A5:7B:FE:ED:5C:90:98:1A:8B:92:05:4F:D2 X509v3 Authority Key Identifier: keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:4c:a5:25:e0:2b:91:63:3e:0c:bb:7b:59:ff:48:f9:bc:45: 8b:02:fc:20:d9:2f:08:da:ee:32:1f:ac:2a:f3:9e:b9:20:de: a3:63:47:3c:52:7f:e7:24:7a:54:5c:b7:6c:59:39:cc:d0:0f: ff:66:d9:55:08:4c:a8:47:8b:d5:fd:8d:b1:dd:c8:18:a7:74: ce:a7:2c:ef:1b:6a:1d:44:6a:9e:5c:31:d8:60:db:6e:0c:ec: a1:77:9c:42:10:da:5f:8e:1c:39:87:7c:35:4e:aa:2c:e0:ec: d0:71:57:eb:34:1e:cb:ff:3c:74:c7:b6:45:1f:f9:d1:33:ff: 32:ee:35:aa:04:1b:b6:12:d3:c3:25:53:2e:d7:01:3c:41:d2: e7:71:c2:6a:5a:9a:3c:4c:97:b2:57:dd:67:c4:56:ad:78:05: 7c:42:21:26:da:a5:cd:01:78:0b:bc:ad:81:96:23:98:3a:d3: 86:88:5e:3d:6f:1a:6e:24:b9:fa:c8:39:2d:72:7e:db:e8:e6: cb:b7:1e:fb:9a:7e:4c:75:88:78:04:b4:19:65:69:3f:89:dc: 78:8a:08:5c:2d:63:d9:f8:17:91:87:c6:e6:4a:48:1d:bf:ee: 93:e8:60:81:c7:ee:5e:a8:9e:d4:b7:11:70:c9:88:95:89:06: 69:37:19:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa7WxN+LJeHc5KWBCSZGZVVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MWI3YTIyZTUxY2ZiOWNmODQyMDVlNDQ0OTk5OGFkNTVk OGYwNjUwHhcNMjUwNTEwMTgwMDMwWhcNMjUwNTExMTgwMDMwWjAzMTEwLwYDVQQD Eyg3ZGNiZTM4NTEwYTc4ZGE1N2JmZWVkNWM5MDk4MWE4YjkyMDU0ZmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYmccWmLcMbrOQ9VnvgFMluOgZQM PpiaLihRCeqUIxHOm2ZAq3PyfuL4zp6rUodImLQuPD1fqB/7sNxKR6dwDgVq8abE 5vFPiqDlqchAqlCghrynvgwEOGrHXBnVg/HhQzpoARNmJNPgGZenUxvruLFT0Qdr X6huBY8qQxdsNWIOj9BluYtexP4aMT2bmVezV+kgYyBh0HwXjYAwGaDwCrzfC1O3 s1rkCgpp4AX4UysRXFkyl4HBw2uYJBscwn8ub18yRBPMzeIiSRePmPpDSVrWu/9t 1dbAu9/yyTH6I+rAf+bq8K7Ys4vb91C3+pIDbKPCPlwlfkn67hkcgTPKswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH3L44UQp42le/7tXJCYGouSBU/SMB8GA1UdIwQY MBaAFAgbeiLlHPuc+EIF5ESZmK1V2PBlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYt MDM2NzI2OGZmODcxLzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYtMDM2NzI2OGZmODcx LzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASEylJeAr kWM+DLt7Wf9I+bxFiwL8INkvCNruMh+sKvOeuSDeo2NHPFJ/5yR6VFy3bFk5zNAP /2bZVQhMqEeL1f2Nsd3IGKd0zqcs7xtqHURqnlwx2GDbbgzsoXecQhDaX44cOYd8 NU6qLODs0HFX6zQey/88dMe2RR/50TP/Mu41qgQbthLTwyVTLtcBPEHS53HCalqa PEyXslfdZ8RWrXgFfEIhJtqlzQF4C7ytgZYjmDrThohePW8abiS5+sg5LXJ+2+jm y7ce+5p+THWIeAS0GWVpP4nceIoIXC1j2fgXkYfG5kpIHb/uk+hggcfuXqie1LcR cMmIlYkGaTcZpQ== -----END CERTIFICATE-----Generated at Sun May 11 04:00:04 2025 by rpki-client