$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft File: Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft (raw, json) Hash identifier: 6m4BojP9okBICggzBtmA2JPBV8pPXxp+VarbC1G5bfU= Subject key identifier: B1:23:EA:75:9E:DC:B0:02:00:EF:F3:3C:FE:0D:39:EC:F7:18:67:EF Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Certificate serial: 0196BB2450A28F427AF5BDD9F06A07CF272E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft Manifest number: 1107 Signing time: Sat 10 May 2025 17:00:41 +0000 Manifest this update: Sat 10 May 2025 17:00:41 +0000 Manifest next update: Sun 11 May 2025 17:00:41 +0000 Files and hashes: 1: AjmtKVshFn4i5oudhf9_vWmAvsw.roa (hash: CuwkA+D3Ny2dECS4D0f8gIT8izPiI79T33+j6Gl48lk=) 2: NMjO7luh_VLlkiRN5_rJM9McdZU.roa (hash: F/s8ZrNFnB9cACRc/zfnUbwDpiBOuQs9t9+/CTXMuRk=) 3: NlvMkPZn5ykNcIArduldQ2gvLwk.roa (hash: 5PNzjoi0TVJoqN04xzDCOAwSudfA6d0BQM/WfLTAPFo=) 4: P9llCh8xQQOicOO52WLocuGy0qc.roa (hash: BJEexM7c83ayn0hEFmwl/zCVtTy13ZJE7DbhwPoki+4=) 5: QCWBDKlG8Io2BeH0NId31fpN2YE.roa (hash: 0NRY9EDUi1FWue8IN72u0GMUvyyjoroAoM3JlXroHao=) 6: Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl (hash: zoMEw+6p2RmuWJCoB/40ZhdG1vQQGzptDgE3hXhJZGI=) 7: XwHGUq38dDBNzTc_ge-yBwhhY1o.roa (hash: PgJwO//GwdLKnSg3NtaGlab1yN/ram5lj/PHtYxijoA=) 8: ewVsnSugCXk__789cz5d5ZAdZmc.roa (hash: o+8XbQDDA3JQsPJjR3Lfqf5ZVHX07bm5R0GYVGvsC9M=) 9: ibLzU6WOFgguTWaNZhfqPFD3yJo.roa (hash: GRnTI0UguvurZg0lBoyoqJCyaRrTY4Zz0Fz1Sh8Z0A8=) 10: nxWUk2NAoFEOBnPl0EiSfXPDs08.roa (hash: q3fdK1UzGuKqIDpgZc+BavU5BV78iYLHi960+oEFG6E=) 11: rjj0_HZqVxB9uTqBbhBOxIKPBgg.roa (hash: WNMZaUJdsacwY1k4HMEEPIuQbWIPSdxtl43riTk/HVY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 May 2025 13:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:bb:24:50:a2:8f:42:7a:f5:bd:d9:f0:6a:07:cf:27:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Validity Not Before: May 10 17:00:41 2025 GMT Not After : May 11 17:00:41 2025 GMT Subject: CN=b123ea759edcb00200eff33cfe0d39ecf71867ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:31:21:9f:4c:aa:14:59:b4:b4:0f:42:7d:be: f0:23:90:37:3b:df:e3:13:5f:b9:8e:5f:1e:6c:78: 32:43:e1:9b:2d:96:53:6d:69:9e:c5:29:65:75:16: 3b:1b:c9:4d:90:d5:ec:92:89:69:2f:a9:d7:18:bb: 29:27:e0:dc:08:28:de:c2:e9:2f:77:85:69:1b:54: 5c:58:52:25:c7:a1:da:22:b1:b5:de:ea:61:84:1c: 44:25:29:6d:f0:58:b2:6c:72:15:01:6c:18:3a:16: 6b:23:f5:d4:83:59:45:4a:fb:90:d9:e0:ca:79:7a: 72:2c:ac:52:0d:64:32:cb:ba:b8:40:54:00:b4:96: f1:a0:2e:f9:e4:78:c2:ff:38:7a:46:a2:d8:1b:7b: 86:5e:c7:26:d7:4f:14:44:88:28:40:ab:ce:64:ab: 02:7a:16:05:04:70:42:86:a1:ae:34:98:59:d8:fd: b7:d4:ee:cb:c1:d2:49:38:2e:95:6d:f1:9a:f9:72: 3d:7a:ac:8c:d2:a4:f3:6f:7a:e6:50:a5:85:db:77: b1:26:b5:54:b3:fa:f9:ee:03:b0:a5:49:bc:a2:dd: 38:95:6b:f0:a6:0c:19:02:2d:da:28:3d:d8:ee:7d: 59:6d:63:91:37:0e:6c:a2:5f:2a:f3:f9:5a:eb:55: 34:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:23:EA:75:9E:DC:B0:02:00:EF:F3:3C:FE:0D:39:EC:F7:18:67:EF X509v3 Authority Key Identifier: keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:3f:27:ce:40:9b:7b:38:09:7c:60:cf:ba:00:13:96:4b:d2: 66:1c:e0:79:1e:88:dc:0b:52:09:71:bc:4d:79:cd:b0:41:21: 53:4f:74:99:e0:6f:86:ad:92:24:b2:27:17:9c:97:c3:06:99: 7c:6b:1f:2a:ec:b3:0e:a5:38:ce:01:19:77:74:b2:e0:cc:7f: 89:1a:e3:ac:f0:6b:19:71:32:35:d9:b8:b9:aa:c9:f5:b3:b3: 1a:b0:8f:84:ae:d2:46:f0:33:1b:1c:de:76:d8:da:63:79:2d: b0:e2:90:16:5f:e8:47:f1:9d:1e:49:01:5e:3e:9c:36:ca:e4: 6e:04:22:7f:de:5b:ad:55:85:e1:1f:2f:10:59:af:c3:d1:d8: 74:0f:0f:32:6a:00:d5:18:36:3b:a7:34:22:0b:ad:6d:eb:d9: a8:0d:0d:74:9d:b7:7c:cd:2f:84:61:98:ad:02:ed:4e:1a:f2: 85:14:42:9b:f7:a8:b4:d3:17:53:15:77:24:01:96:92:3a:7d: f7:09:bc:86:08:21:f9:9f:4b:12:e5:8d:5f:a4:b6:38:e5:1c: de:7e:38:02:ac:1c:96:97:23:5f:a0:46:7c:33:d7:c2:c2:75: 99:41:f9:8d:fb:ac:cb:4f:d3:74:8e:23:b2:1f:c5:8b:8a:85: 09:75:c4:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa7JFCij0J69b3Z8GoHzycuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDZmNmQyOTliY2RlYzczZDEzZjJkODQyZmMxZGY0YmMx ZWUyZDMwHhcNMjUwNTEwMTcwMDQxWhcNMjUwNTExMTcwMDQxWjAzMTEwLwYDVQQD EyhiMTIzZWE3NTllZGNiMDAyMDBlZmYzM2NmZTBkMzllY2Y3MTg2N2VmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTEhn0yqFFm0tA9Cfb7wI5A3O9/j E1+5jl8ebHgyQ+GbLZZTbWmexSlldRY7G8lNkNXskolpL6nXGLspJ+DcCCjewukv d4VpG1RcWFIlx6HaIrG13uphhBxEJSlt8FiybHIVAWwYOhZrI/XUg1lFSvuQ2eDK eXpyLKxSDWQyy7q4QFQAtJbxoC755HjC/zh6RqLYG3uGXscm108URIgoQKvOZKsC ehYFBHBChqGuNJhZ2P231O7LwdJJOC6VbfGa+XI9eqyM0qTzb3rmUKWF23exJrVU s/r57gOwpUm8ot04lWvwpgwZAi3aKD3Y7n1ZbWORNw5sol8q8/la61U0QwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLEj6nWe3LACAO/zPP4NOez3GGfvMB8GA1UdIwQY MBaAFF3W9tKZvN7HPRPy2EL8HfS8HuLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYt NTFmNWZmODFjMTE3LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYtNTFmNWZmODFjMTE3 LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUT8nzkCb ezgJfGDPugATlkvSZhzgeR6I3AtSCXG8TXnNsEEhU090meBvhq2SJLInF5yXwwaZ fGsfKuyzDqU4zgEZd3Sy4Mx/iRrjrPBrGXEyNdm4uarJ9bOzGrCPhK7SRvAzGxze dtjaY3ktsOKQFl/oR/GdHkkBXj6cNsrkbgQif95brVWF4R8vEFmvw9HYdA8PMmoA 1Rg2O6c0IgutbevZqA0NdJ23fM0vhGGYrQLtThryhRRCm/eotNMXUxV3JAGWkjp9 9wm8hggh+Z9LEuWNX6S2OOUc3n44AqwclpcjX6BGfDPXwsJ1mUH5jfusy0/TdI4j sh/Fi4qFCXXEAQ== -----END CERTIFICATE-----Generated at Sat May 10 22:22:17 2025 by rpki-client