$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft File: b8UNDUIGe3arGi6OUz_4SbZdVvU.mft (raw, json) Hash identifier: /KCCe8j5cS7JNHV6QKjD74NE1YhlCfoSfiv2gXsxMHA= Subject key identifier: 23:D2:FF:C0:27:CA:E4:E4:80:47:1B:69:79:EF:0A:52:7B:54:A5:89 Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5 Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5 Certificate serial: 0196A7665E693D0BF3C2A32E44E4C8841C49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft Manifest number: 154F Signing time: Tue 06 May 2025 21:00:25 +0000 Manifest this update: Tue 06 May 2025 21:00:25 +0000 Manifest next update: Wed 07 May 2025 21:00:25 +0000 Files and hashes: 1: 0Abj6PSR4FyJUqM6LoN6KFa-26E.roa (hash: 3N4/akmiC/u7gL1HF+D/mYuikLJRGoPmYVruDqzajtA=) 2: 1-HYjW61poyKPMhvfx7U4CngkbXQ.roa (hash: FgaQ7pllPxrtYs+K7a4T0YujtsmGhQlX0nAW+eszuLQ=) 3: 1X78ozO3_5ULJTTX4ARholYkMtY.roa (hash: 1YfjPO55+mmSYnYEpQNn/8Y7Ymp0JTDMtIPTDKYWHh8=) 4: 2Wsgqp2TGokFCZ_NeFbUK_NoCUE.roa (hash: K9LAQ/2ByjkjvTgzSFNqu6Nlr4OuYkpg3jDQS8wh9cw=) 5: 3yeC5jM2ksuqKR2Zh5IvhgGT7kM.roa (hash: aly6yVEpJfsikwPOCEOA8sYqzyulJ58cobvGMlp3Pfc=) 6: CRniCcWOMEu_O5DQOvVrjuaGUUY.roa (hash: O0dkbyqYi64iii79jbjPeoIAejefEkUri+ePo9W2qtM=) 7: H6AhUHbx8OlryRkBD15AK_97AFI.roa (hash: aVuSxMtEE3jtCIFUPkZzKs9s0u5aGihLcG9skQiW4iU=) 8: IE5Ot6kXSpSm_XTJaCWCEcClZ1E.roa (hash: ecVDNUR7HlsILjWVcvUtVx/095hxRc4P38CIzJWANj8=) 9: K8brr-FPsMEnGF0kbZo88qS6lTk.roa (hash: qW/T11RMV283PJtyNsGcccWeoOYrXus8SlIyII3hPJA=) 10: OQtVR-cBTyQL6VvIXAOtawOW2cA.roa (hash: Y4JxghrLsZ564AFIbmlJP5QHypmTlarb7NM9FNTmN7A=) 11: RzzP2UDDSAPrZWNFm6aBz91iMgQ.roa (hash: 1RDkfiEzt2ZEB4LXorNIAFk4fcDKeMEBcQ7w1edzRtU=) 12: XKHgN2jT3_6QMfOgHKrS1JlPtdM.roa (hash: 0/lku7LnO6lIZwW3HNYBW2LCc3aSui+jPA3GCkogDfQ=) 13: b8UNDUIGe3arGi6OUz_4SbZdVvU.crl (hash: IqhnLyc1DAROKWw++99Ou/6XyjQmHOyuONiHWHcKA2w=) 14: hz97jgo9bqt0uT-ArAt9KzOXsP4.roa (hash: bhze+d6pD3xd6tpzBiM9HUGCjaef6tJylvnHETr5GxE=) 15: wEFBReYub_TeCbtnkjQHEDS6zaQ.roa (hash: 5e2lfQsxA6BsgP6dDtPIK0Ql9foij6lPOeMn2Q1JhkI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 May 2025 21:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:a7:66:5e:69:3d:0b:f3:c2:a3:2e:44:e4:c8:84:1c:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5 Validity Not Before: May 6 21:00:25 2025 GMT Not After : May 7 21:00:25 2025 GMT Subject: CN=23d2ffc027cae4e480471b6979ef0a527b54a589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f0:52:2a:de:75:8d:ad:0a:75:16:a2:78:89: 79:00:e5:29:f1:8d:e4:ac:32:0c:6f:b3:b3:05:a9: c7:66:9f:88:b4:78:d1:94:0c:11:e4:b8:3d:2d:f7: 92:1a:fc:ae:f4:71:a6:e2:17:a3:ea:d5:30:38:1f: a2:93:ca:8b:7f:41:f9:25:0d:4f:76:af:14:84:a6: 3a:b9:79:75:f3:4f:d4:7c:d4:8c:2d:b4:e7:c5:34: ca:ea:b1:75:8e:d9:b8:c6:ff:ff:64:4a:2c:b0:31: b5:8a:99:b6:54:92:99:a4:d9:65:27:a4:15:e4:0c: fc:17:da:2d:d8:99:b6:ab:02:c9:e2:48:ce:e0:bf: 3b:bb:0f:e6:fc:7f:00:39:94:34:8c:4a:20:d7:83: 76:c6:3f:f1:85:8c:a2:f1:8e:18:d2:16:60:2f:e2: f1:09:35:bb:a7:81:dd:9d:23:bb:fc:b2:fa:ac:98: b4:31:4b:3c:14:cd:e9:74:b9:a7:0f:e3:8f:0b:28: 78:c7:24:01:e3:85:e1:5a:fa:53:58:b2:a6:f6:41: 20:3d:14:65:05:dc:1c:55:d3:d6:5e:cb:48:d0:c7: 56:99:33:b8:a2:cf:19:c1:5d:a8:b3:f0:b1:d8:2c: bc:c6:45:86:24:03:f3:0f:e6:13:51:8d:d9:9c:71: c6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:D2:FF:C0:27:CA:E4:E4:80:47:1B:69:79:EF:0A:52:7B:54:A5:89 X509v3 Authority Key Identifier: keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:0f:6a:72:e4:7d:2c:a4:ba:a0:f4:ce:32:70:42:5e:40:75: dd:fb:a6:cd:64:09:27:58:f9:09:e3:10:26:83:49:04:78:e7: 20:04:ac:ca:ee:bd:b1:63:8b:38:8e:0e:58:1f:85:c7:99:6c: 27:52:de:86:dc:cf:55:69:1b:3f:49:0f:9f:71:ba:1f:61:65: 53:ad:9c:8b:5e:eb:7b:55:e2:5e:fe:ea:03:da:19:e6:e8:71: de:e2:f8:33:e7:5f:ae:3c:c0:b5:5d:b3:71:f6:e4:d0:b6:82: 39:66:94:35:1b:74:d3:6a:2f:fa:e3:4d:97:aa:76:79:59:03: 48:c0:31:b5:f0:b2:a7:37:6b:28:81:fb:9f:bb:26:ba:f0:8d: 2e:c7:0e:30:9a:eb:86:e9:f5:65:a9:92:28:c9:89:36:1b:1b: 96:d9:bf:76:7b:62:c5:e1:26:70:ef:30:be:32:5d:6e:a0:de: 58:cb:a6:71:a8:ba:82:f5:2e:34:36:0c:87:78:28:3e:10:ed: 94:18:9d:b3:77:1c:af:1a:7d:21:82:89:ae:19:1a:d8:cb:89: 17:c7:0c:0e:e6:f3:19:9f:d4:68:2a:b9:5a:e5:1b:9d:14:e2: 2d:db:ab:48:a1:67:a9:1e:a9:4e:e9:f4:2d:ac:9c:df:eb:60: b3:de:d5:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZanZl5pPQvzwqMuROTIhBxJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYzUwZDBkNDIwNjdiNzZhYjFhMmU4ZTUzM2ZmODQ5YjY1 ZDU2ZjUwHhcNMjUwNTA2MjEwMDI1WhcNMjUwNTA3MjEwMDI1WjAzMTEwLwYDVQQD EygyM2QyZmZjMDI3Y2FlNGU0ODA0NzFiNjk3OWVmMGE1MjdiNTRhNTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPBSKt51ja0KdRaieIl5AOUp8Y3k rDIMb7OzBanHZp+ItHjRlAwR5Lg9LfeSGvyu9HGm4hej6tUwOB+ik8qLf0H5JQ1P dq8UhKY6uXl180/UfNSMLbTnxTTK6rF1jtm4xv//ZEossDG1ipm2VJKZpNllJ6QV 5Az8F9ot2Jm2qwLJ4kjO4L87uw/m/H8AOZQ0jEog14N2xj/xhYyi8Y4Y0hZgL+Lx CTW7p4HdnSO7/LL6rJi0MUs8FM3pdLmnD+OPCyh4xyQB44XhWvpTWLKm9kEgPRRl BdwcVdPWXstI0MdWmTO4os8ZwV2os/Cx2Cy8xkWGJAPzD+YTUY3ZnHHGAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCPS/8AnyuTkgEcbaXnvClJ7VKWJMB8GA1UdIwQY MBaAFG/FDQ1CBnt2qxoujlM/+Em2XVb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDkt M2MxNmZmODQxYWIyLzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDktM2MxNmZmODQxYWIy LzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAQ9qcuR9 LKS6oPTOMnBCXkB13fumzWQJJ1j5CeMQJoNJBHjnIASsyu69sWOLOI4OWB+Fx5ls J1LehtzPVWkbP0kPn3G6H2FlU62ci17re1XiXv7qA9oZ5uhx3uL4M+dfrjzAtV2z cfbk0LaCOWaUNRt002ov+uNNl6p2eVkDSMAxtfCypzdrKIH7n7smuvCNLscOMJrr hun1ZamSKMmJNhsbltm/dntixeEmcO8wvjJdbqDeWMumcai6gvUuNDYMh3goPhDt lBids3ccrxp9IYKJrhka2MuJF8cMDubzGZ/UaCq5WuUbnRTiLdurSKFnqR6pTun0 Layc3+tgs97Vnw== -----END CERTIFICATE-----Generated at Wed May 7 06:24:59 2025 by rpki-client