$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft File: RklSvBZUQexuLiAQyTPcgw82FzE.mft (raw, json) Hash identifier: IcmqYb0pS8ANwsdiNo2yMIBxDMA0Lq/jpOE5kfCBDkw= Subject key identifier: 8C:08:D7:93:E4:43:3C:C5:FE:94:B8:5C:AD:F6:6C:6E:FE:A7:B8:73 Authority key identifier: 46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 Certificate issuer: /CN=464952bc165441ec6e2e2010c933dc830f361731 Certificate serial: 0196C8DFC9E34C3B04C9AEC9706682935DD0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft Manifest number: 08E1 Signing time: Tue 13 May 2025 09:00:31 +0000 Manifest this update: Tue 13 May 2025 09:00:31 +0000 Manifest next update: Wed 14 May 2025 09:00:31 +0000 Files and hashes: 1: 7HWHA8UqwHtsqDMBW-DwrAaDDjM.roa (hash: e8s5o0udkcNi/3gr4/Pby8a6BORkIl6Tk5BcUgdqf98=) 2: 7kAjdsFeoGIlffyRccGeBTEu_FE.roa (hash: V5X41O+8NhL09TYkx6MudBsqNZ4WocGTuULsSpgpD3E=) 3: 8ZU3bGrm9xWhwMuNBNg_sVSf78w.roa (hash: q1BAPF4hVnnZILV3v3GzNcOP1nX7SZBYfnbCOVjjzwo=) 4: CH-MNJ62x7kM2_t2iuWi-Pl441k.roa (hash: HaFXnQzr7MPgH+K0peJzoRzHcSdMpsIno7S1dDVTYls=) 5: F93HK3zZbjyanEiJSO9cArJniew.roa (hash: wrh+x7Klvcmq0ZMqoDo7aM3datdsQCypsCC/kWY8BG4=) 6: RklSvBZUQexuLiAQyTPcgw82FzE.crl (hash: GRs6r9gFsNFQlDUFTd+/LWMqlRvIL4srMpne4pB7YiI=) 7: RocZhE1Sgw4wWmm8LnKO4d7f68w.roa (hash: +rys+d7y9dD2VIYL252iXtWKGL/n4lME4L1WtriVBxI=) 8: U47Wz_LD2xLJywbdswHmPzRJpDo.roa (hash: qCq8pw/dLAXcMlcPqPaGHxhAYIuN8gInNQEcnd7HSIs=) 9: XVHP5qtngkOzkHHcBMfCOoE6FyE.roa (hash: U8lDjEDePEbA90E5ZD4uXWmkg3O6630794CxqDFoPBY=) 10: cSOzcJuJznyp0-yCo16vcwC-SO4.roa (hash: /BcpV3CpFg+yHnaLyG3CeUoFmA/RLptEV35Vt1SRJwQ=) 11: g8u27N4QItUirByGNIpicNOy82Y.roa (hash: 86XD7A3oPGKMoD9IAzlfVhw0nOpZrI3Tfibq7N31K6c=) 12: iH3j8qY1-071YfTwOblznlAQw6s.roa (hash: yME8emyVjusbrBjqemdlgI+CwPOa3VlHZpR5ZeMxUWc=) 13: mGSm6WnPN8htR3E3SqRmvrkDAW0.roa (hash: ma8SoOibhRfVHVvLv4aSGOKoznJfyTFPs8hixxk0hN8=) 14: ryDPDikJ1i_zY_ss9G41qhvN3jc.roa (hash: h94vj7TMlIg5ainHE5mYHmcUUj3Q1WNeWVzGbaI/3Fg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 May 2025 08:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:c8:df:c9:e3:4c:3b:04:c9:ae:c9:70:66:82:93:5d:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=464952bc165441ec6e2e2010c933dc830f361731 Validity Not Before: May 13 09:00:31 2025 GMT Not After : May 14 09:00:31 2025 GMT Subject: CN=8c08d793e4433cc5fe94b85cadf66c6efea7b873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:5c:c4:8e:1a:87:a8:b8:4b:38:da:b9:07:65: ad:06:35:d3:41:d0:52:e0:0a:5e:9f:90:3c:4c:46: a5:45:fd:54:e8:be:59:cb:65:85:52:5d:7e:84:02: e5:66:f1:44:37:ea:d8:4e:0b:cc:6f:d3:ee:c2:dc: 44:d9:2e:24:70:d2:f3:50:ba:1e:8d:de:dc:08:47: 54:b3:10:e1:2d:52:bd:67:aa:80:f3:00:22:a4:d8: 31:61:31:77:dc:f8:d2:86:fc:70:88:76:4e:bf:de: af:2e:a0:52:46:bd:3c:a8:4f:2c:5e:cc:3b:ae:df: fc:56:1e:c1:6d:60:f2:ce:54:db:b8:88:12:90:73: c9:50:d6:3f:f6:5a:b0:cd:7c:95:4d:27:95:05:b1: 8d:37:35:55:3e:5a:b1:5f:42:a5:79:5e:a8:32:80: 4f:61:83:bd:65:c1:80:db:f4:54:3f:bd:d9:91:d8: bc:8a:3d:9d:9a:bf:3b:17:f1:f6:3c:7b:a0:7a:0f: 5a:25:e5:73:a7:f9:cd:62:85:27:67:7a:85:2c:20: a6:02:22:33:ae:e3:2c:df:2b:7a:47:37:a4:2b:2f: 6f:c0:a2:34:6d:52:cc:c5:ee:71:77:1b:9b:9b:93: 43:2d:26:64:c2:8e:b1:ce:1e:42:23:e2:7f:61:ac: b3:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:08:D7:93:E4:43:3C:C5:FE:94:B8:5C:AD:F6:6C:6E:FE:A7:B8:73 X509v3 Authority Key Identifier: keyid:46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:db:59:2f:36:7e:0f:23:dc:82:53:b9:57:81:a3:9f:de:ad: 12:ec:cc:05:64:84:db:77:f3:12:1d:47:fc:01:37:6f:0b:d8: 97:ba:91:8a:c4:05:32:03:22:80:a2:8d:74:56:46:69:fc:67: 8f:24:ca:a7:3b:e1:2e:a3:d8:31:a6:5f:53:c5:c6:3a:14:c2: 05:4a:6c:04:a0:c9:7e:f7:0a:0c:bc:53:e4:d4:1a:fc:32:91: f4:55:8a:9f:bd:9a:46:48:01:64:9f:d3:83:43:a3:15:36:e5: f2:24:63:c0:9a:53:b2:3f:8c:ef:c0:58:13:0a:0f:5f:36:fd: e7:1d:21:e5:cf:49:d6:1b:6b:10:7d:ef:de:2b:fd:a9:ec:27: 4f:62:c4:b7:3e:92:e6:bb:72:04:b0:ce:5d:20:44:96:3c:6d: 68:3f:3c:ff:bb:c6:05:ed:13:c8:b4:5d:7a:e8:00:3e:3d:b1: a3:8c:e6:3c:5f:f9:9e:9b:65:8d:7e:2a:26:37:12:56:48:e2: a9:8d:2e:24:f6:31:e4:e5:8f:7c:bd:9a:8d:b3:e9:21:4a:e7: 06:42:b2:56:4a:54:3c:b7:bb:db:0c:65:fc:49:60:c2:05:d1: d5:67:da:a2:de:6a:80:1e:ff:c7:b2:b4:53:5a:8d:7e:bb:22: 94:51:b1:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZbI38njTDsEya7JcGaCk13QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NDk1MmJjMTY1NDQxZWM2ZTJlMjAxMGM5MzNkYzgzMGYz NjE3MzEwHhcNMjUwNTEzMDkwMDMxWhcNMjUwNTE0MDkwMDMxWjAzMTEwLwYDVQQD Eyg4YzA4ZDc5M2U0NDMzY2M1ZmU5NGI4NWNhZGY2NmM2ZWZlYTdiODczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7VzEjhqHqLhLONq5B2WtBjXTQdBS 4Apen5A8TEalRf1U6L5Zy2WFUl1+hALlZvFEN+rYTgvMb9PuwtxE2S4kcNLzULoe jd7cCEdUsxDhLVK9Z6qA8wAipNgxYTF33PjShvxwiHZOv96vLqBSRr08qE8sXsw7 rt/8Vh7BbWDyzlTbuIgSkHPJUNY/9lqwzXyVTSeVBbGNNzVVPlqxX0KleV6oMoBP YYO9ZcGA2/RUP73Zkdi8ij2dmr87F/H2PHugeg9aJeVzp/nNYoUnZ3qFLCCmAiIz ruMs3yt6RzekKy9vwKI0bVLMxe5xdxubm5NDLSZkwo6xzh5CI+J/YayzewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIwI15PkQzzF/pS4XK32bG7+p7hzMB8GA1UdIwQY MBaAFEZJUrwWVEHsbi4gEMkz3IMPNhcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQt ODQyODU4MTIyYmJjLzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQtODQyODU4MTIyYmJj LzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARdtZLzZ+ DyPcglO5V4Gjn96tEuzMBWSE23fzEh1H/AE3bwvYl7qRisQFMgMigKKNdFZGafxn jyTKpzvhLqPYMaZfU8XGOhTCBUpsBKDJfvcKDLxT5NQa/DKR9FWKn72aRkgBZJ/T g0OjFTbl8iRjwJpTsj+M78BYEwoPXzb95x0h5c9J1htrEH3v3iv9qewnT2LEtz6S 5rtyBLDOXSBEljxtaD88/7vGBe0TyLRdeugAPj2xo4zmPF/5nptljX4qJjcSVkji qY0uJPYx5OWPfL2ajbPpIUrnBkKyVkpUPLe72wxl/ElgwgXR1Wfaot5qgB7/x7K0 U1qNfrsilFGxWA== -----END CERTIFICATE-----Generated at Tue May 13 11:43:00 2025 by rpki-client