$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft File: 5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft (raw, json) Hash identifier: zGBFNxFbpBuAuqScxSvJ/0e23Mls9d2G+ryRBTEa9Dg= Subject key identifier: 74:7E:50:F0:04:50:7D:AE:D0:AE:AE:48:EE:31:12:77:FB:3D:B4:16 Authority key identifier: E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA Certificate issuer: /CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba Certificate serial: 0196B8230D4F044BBFDA27DBEA49ED5710D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft Manifest number: 0A31 Signing time: Sat 10 May 2025 03:00:26 +0000 Manifest this update: Sat 10 May 2025 03:00:26 +0000 Manifest next update: Sun 11 May 2025 03:00:26 +0000 Files and hashes: 1: 2m_CYVmLsPzF7bcN6vIid84YZD8.roa (hash: LBmz6BkcC+hYAgg9NpyTpTiVYvW2FI/a+Z33OiNH3bM=) 2: 4nVbm_9mW8-MAn0I_kGjdBfxhVw.roa (hash: pTL9FLQm2ArdSOx4IvTJl5dYC4wcCTYCswuw3GEGHMQ=) 3: 5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl (hash: GB0OIxTAbNZv3SR1/PG9mziVX6zGLfvlp6Q3su6BT4o=) 4: ASUGNfdEr-zmHuBMKbmczWEEyX0.roa (hash: XbBf6Nfds25faGeda9A9EZrA0jUpRsOTRIO73TfrGdU=) 5: D_RGKNjU3HO1804H_N4lL39f8xU.roa (hash: lQxsMyLpAGFJHo/y+xtaq8v1/ZEVry9ym0LdrZC/Bgk=) 6: Di4BCmfwCebJmpiiwQVl8kD1SGY.roa (hash: YROnCwrXQNQ5Na/T+Qstm6PeSLYo1KpF7+7yHOQYHZY=) 7: GPFpap7M0DbSFtJBpaKp67RfOgs.roa (hash: 6C0EKVC4/wJ0awCJ51hmh22riQaO8QV9e+LjKWFhq3o=) 8: IrnZpWugwiVaDWE0Y8y2HTk6myM.roa (hash: hz4dzGEJlp9nAI/PksWqX4be/cNB9cFXoUk0RTppUW4=) 9: UPL7qImi1Ys3kJpNeUneyjua3iE.roa (hash: yEbc7GI9w/HHKG7S49YH0IbZWjyzBWFPN0Ij4so55ao=) 10: Wqi1dLZsHvoMXUpSlZaZNHPgS_4.roa (hash: uMbe0TM0fIuYtnHf63Llp9sJ+CZVXJ/tOzlQU2AOjts=) 11: gqYJ1QlxZp2sfbvxF5yVPiDZ3Dk.roa (hash: +mkHl1F4HLXN9PfWQktZtYiROfsgXfptEmlNuP4F0GM=) 12: hrJ9G8LdPfpuv4HEnlrj0UM1FZI.roa (hash: Ap/wGOk300z33ESWLkwykljx6YcmZDQ+kuaPYGOBuOE=) 13: ip51KpcMdfOcRWLVf2HbT1-y1Tk.roa (hash: w96a29aqdZpAZsW1TalxljppYBFpY8XCQQF21I+O+bg=) 14: qOKY-IzakK8b3r-fGGAM7SuFUFM.roa (hash: 0xmS3lTVgR47MEU89O0ODLmZ+nEhlRcq1hkGVTaLD7U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 May 2025 03:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:b8:23:0d:4f:04:4b:bf:da:27:db:ea:49:ed:57:10:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba Validity Not Before: May 10 03:00:26 2025 GMT Not After : May 11 03:00:26 2025 GMT Subject: CN=747e50f004507daed0aeae48ee311277fb3db416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:20:87:48:f7:44:76:98:22:4b:5c:e5:b4:c1: 82:8c:3e:05:0d:d2:91:8c:21:ef:4e:7e:8f:fb:45: 30:84:f2:51:fc:c0:53:0b:c1:64:6e:8f:dd:22:a3: 04:26:32:b8:90:9c:b5:e8:7d:6c:12:7b:26:c6:89: 33:72:bd:c6:c0:2b:61:46:13:20:55:fd:eb:02:60: 8c:5d:99:d1:85:df:2f:b8:91:f0:7b:f1:7b:e6:76: 63:f1:b6:b6:6c:a5:b1:5e:0a:55:94:be:80:97:80: 3b:86:db:1b:e9:1b:9d:89:12:de:89:cd:0d:b6:20: d0:12:81:ed:65:44:07:cf:5c:b4:31:d2:09:7a:46: 4a:0a:2e:4c:a9:88:06:75:78:73:2a:3d:54:41:cf: 21:2c:a8:60:92:01:7d:d2:60:bb:ed:e2:6d:fe:10: 03:70:a7:fa:26:a2:23:2e:3f:4e:a9:25:5e:aa:12: ce:ee:eb:45:37:2e:92:cc:0f:39:8b:e7:16:a0:5a: ce:5b:e9:86:d2:dc:d7:80:86:d5:f8:48:37:ac:36: 6b:0c:b6:c3:d9:86:4c:63:96:68:b3:e5:ee:34:7c: f1:7d:53:35:e5:5e:81:98:67:de:d0:fe:be:0d:c6: 87:75:97:cf:71:65:5d:42:44:54:58:2f:52:95:fe: b9:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:7E:50:F0:04:50:7D:AE:D0:AE:AE:48:EE:31:12:77:FB:3D:B4:16 X509v3 Authority Key Identifier: keyid:E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:9f:28:5c:24:da:ac:c2:32:3b:97:bb:ed:34:b7:b0:45:bd: d8:69:ab:18:09:74:ec:dd:9b:52:77:e0:76:8b:91:a0:d1:36: 2e:12:ea:e2:df:50:82:b6:b7:32:40:e5:19:b0:0f:8d:87:0c: f5:67:e5:f0:e0:76:c6:60:40:16:14:bc:68:e6:cb:af:a0:cd: 84:da:9a:5a:bd:38:0b:79:d6:3b:fa:92:71:25:24:a1:cc:ee: 54:b4:fd:ee:33:54:ee:3f:41:70:21:d6:af:e4:e8:33:93:c0: 60:a7:bc:ab:ee:d0:02:15:ac:e5:c3:54:03:72:c6:9e:d9:ea: b7:28:5f:76:9a:54:5e:e7:cb:da:ad:13:95:cc:08:55:4e:42: 08:5e:a8:98:9d:12:d1:94:57:a4:af:b0:74:e2:58:c4:a1:34: b0:cd:3e:db:34:53:9d:5b:a0:c5:28:2b:7c:fa:f0:21:2f:53: e2:cd:57:29:89:f2:81:31:c6:43:31:c1:68:55:60:a2:57:5d: 3d:86:6f:48:2c:58:d4:22:c1:cc:ad:cd:b6:fc:fc:93:37:c3: a9:c2:25:b2:ac:a8:da:1b:ee:87:16:1c:4f:8c:c3:f1:d5:73: 71:26:71:71:7d:3f:46:a9:e3:33:02:71:24:7e:7f:9f:44:cb: 93:a9:c2:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa4Iw1PBEu/2ifb6kntVxDWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YmU4ZWZlYzFmYjAzZDhhZjk3OWFmMWNiYTEzYTA4NDVh N2IwYmEwHhcNMjUwNTEwMDMwMDI2WhcNMjUwNTExMDMwMDI2WjAzMTEwLwYDVQQD Eyg3NDdlNTBmMDA0NTA3ZGFlZDBhZWFlNDhlZTMxMTI3N2ZiM2RiNDE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSCHSPdEdpgiS1zltMGCjD4FDdKR jCHvTn6P+0UwhPJR/MBTC8Fkbo/dIqMEJjK4kJy16H1sEnsmxokzcr3GwCthRhMg Vf3rAmCMXZnRhd8vuJHwe/F75nZj8ba2bKWxXgpVlL6Al4A7htsb6RudiRLeic0N tiDQEoHtZUQHz1y0MdIJekZKCi5MqYgGdXhzKj1UQc8hLKhgkgF90mC77eJt/hAD cKf6JqIjLj9OqSVeqhLO7utFNy6SzA85i+cWoFrOW+mG0tzXgIbV+Eg3rDZrDLbD 2YZMY5Zos+XuNHzxfVM15V6BmGfe0P6+DcaHdZfPcWVdQkRUWC9Slf65gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHR+UPAEUH2u0K6uSO4xEnf7PbQWMB8GA1UdIwQY MBaAFOS+jv7B+wPYr5ea8cuhOghFp7C6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUt ZGZiZmEzZmNmMDIxLzEvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUtZGZiZmEzZmNmMDIx LzEvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACZ8oXCTa rMIyO5e77TS3sEW92GmrGAl07N2bUnfgdouRoNE2LhLq4t9Qgra3MkDlGbAPjYcM 9Wfl8OB2xmBAFhS8aObLr6DNhNqaWr04C3nWO/qScSUkoczuVLT97jNU7j9BcCHW r+ToM5PAYKe8q+7QAhWs5cNUA3LGntnqtyhfdppUXufL2q0TlcwIVU5CCF6omJ0S 0ZRXpK+wdOJYxKE0sM0+2zRTnVugxSgrfPrwIS9T4s1XKYnygTHGQzHBaFVgoldd PYZvSCxY1CLBzK3Ntvz8kzfDqcIlsqyo2hvuhxYcT4zD8dVzcSZxcX0/RqnjMwJx JH5/n0TLk6nCUg== -----END CERTIFICATE-----Generated at Sat May 10 12:32:47 2025 by rpki-client