$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft File: CK8JGFi7mWUXZDmcZWXfegg0260.mft (raw, json) Hash identifier: UFEszcyKhhNBp1cR4jwSYOkVygDISlDZcUg834Y9sHs= Subject key identifier: 36:7C:E1:92:02:C7:BB:EC:CD:D0:11:F6:F3:94:97:3F:C6:E1:F9:41 Authority key identifier: 08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD Certificate issuer: /CN=08af091858bb99651764399c6565df7a0834dbad Certificate serial: 0196BC6E3B22D303ED818DCE0C1EC54363E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft Manifest number: 0800 Signing time: Sat 10 May 2025 23:01:02 +0000 Manifest this update: Sat 10 May 2025 23:01:02 +0000 Manifest next update: Sun 11 May 2025 23:01:02 +0000 Files and hashes: 1: 1YffucAnrX0zrPGVUVBeyKH78tE.roa (hash: F+0MkZW1rwniUkgJEFMqZDUVPzIQlWc77ANUG11yVk0=) 2: CK8JGFi7mWUXZDmcZWXfegg0260.crl (hash: 6zKARRsMo76ehsxwGceDmY57FMFjP0PKlx8kug9+bsk=) 3: HHgp5sq5yc4_sgJa6AXu1wOFQNM.roa (hash: 7azvHrY82JhsqK3mxuoAki0dX0VXyY18Oolw0K+QPEw=) 4: QIYUcsbQNAYJ49MS9GSzg6HzMws.roa (hash: 25Ipjti12DAizEBm/x19xImh3kKTX0L8ySHToWXRDaw=) 5: b6ZEK46tBFQpFeGihP04dAsRVEs.roa (hash: QgioZFeGRbfakufTGnBIdfmvDS/FUhl+3OYWyWgTaL4=) 6: dntaOaxuIDGd8pI8wGTFAJRgyN0.roa (hash: ZmPkwqzAaYGLrLg5+RqVjoLEOwPFE1N2kmesXzCCUwI=) 7: pM8VKNSiqXyxvrYM2CF2U0Iw0pw.roa (hash: fs4sKC29dVzpn86XWfZbe24a1J4GrvjTCH4XsQbkw6c=) 8: qQrVFVU2zYEeKI_c1sPfgRBsdws.roa (hash: Q0Q6+jTPsyoLSIpvRXxP/rur4NZVUawp72Ly9Y4IL/A=) 9: tstTYn_D9Pn-4nRlBfI2UB_WSGg.roa (hash: ZjiObePgXbEPhVg4yY+Q8sRWmDFO/c82OdQ5TNgpPAM=) 10: zEb6SCNh9IA2ZcmgZWwsmTznbFk.roa (hash: tgHdlVCEN4GvD5zc3JRTYHWhACpqWoQ7O4VCFRbyik4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 May 2025 22:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:bc:6e:3b:22:d3:03:ed:81:8d:ce:0c:1e:c5:43:63:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08af091858bb99651764399c6565df7a0834dbad Validity Not Before: May 10 23:01:02 2025 GMT Not After : May 11 23:01:02 2025 GMT Subject: CN=367ce19202c7bbeccdd011f6f394973fc6e1f941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1e:f8:e6:6e:67:5c:1f:5a:d4:fe:49:86:a7: b1:42:0b:47:84:9b:c2:9f:28:3c:14:e5:ea:6b:f9: d4:26:99:31:4d:b8:81:01:a5:c8:30:ce:1b:15:41: b9:ce:26:78:67:35:7c:c6:4c:79:bd:10:ec:de:32: b6:cc:e6:31:7a:5f:1e:e2:9f:14:0e:88:65:70:93: 39:04:65:f0:c8:52:74:44:f0:28:62:07:59:87:1d: 9c:5e:74:76:b0:4b:af:60:77:05:bf:52:35:d6:4d: 1e:14:c3:23:2a:0a:de:e2:e9:6e:ce:38:61:11:e9: 94:f4:c2:ce:96:eb:7b:e5:95:18:c5:1b:0d:1e:4d: 0e:09:ed:e5:2e:2d:cc:ba:f6:e2:f2:38:41:56:d3: 65:06:60:b7:27:21:c8:16:fb:68:ee:1a:f7:db:6c: c7:2a:77:32:05:26:64:5e:de:4f:1e:62:bb:1b:2a: 00:dc:c7:62:d7:c8:13:c5:d5:7d:73:22:c0:53:71: d9:0d:f7:b0:5a:04:f4:d6:17:a8:68:fd:ea:48:59: 57:0a:80:13:e1:39:de:54:ad:f8:53:93:9c:76:a9: 3f:19:ee:58:2d:5e:f2:b6:05:58:28:bf:71:11:b6: a2:0f:64:9e:9a:be:8c:4e:d4:6b:34:ea:3f:6c:71: d4:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:7C:E1:92:02:C7:BB:EC:CD:D0:11:F6:F3:94:97:3F:C6:E1:F9:41 X509v3 Authority Key Identifier: keyid:08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:26:d9:89:10:85:60:fc:1a:78:6b:38:8c:5c:74:cb:6b:b2: 23:79:75:7f:32:38:72:7e:1c:dd:4d:d1:5e:fb:48:09:d8:dc: ca:df:6b:b6:73:74:3a:e6:85:b4:5b:4b:91:27:ed:e6:60:a6: c3:a5:57:9b:07:b1:1f:2e:83:14:cb:d6:27:75:37:f9:e1:c8: 78:69:ec:30:39:5b:8e:80:d6:d3:24:aa:da:37:4a:a9:74:0d: 66:98:db:42:fe:ba:bf:27:c5:d9:fe:20:fa:28:8a:c6:ef:92: 4c:b5:3e:1f:6c:a9:94:72:2a:1e:17:2d:fb:17:8b:99:a9:c7: f3:25:97:37:85:ce:59:c3:fb:54:7e:13:16:06:f1:93:e1:16: a2:67:c8:6a:49:3c:b6:43:a9:8f:da:ee:e7:d9:0f:36:fd:ee: 4d:cd:6d:bc:27:2a:6e:d9:d6:3f:3a:b6:05:41:c3:e9:0f:0e: 77:99:06:dc:d5:7f:03:25:85:cd:ec:3c:7a:56:bc:14:08:af: af:1c:5f:bf:33:f5:8e:a4:c4:be:29:73:24:ea:f3:ac:37:65: 7a:55:96:41:e9:a8:ef:8b:e0:71:50:46:54:2f:b1:49:d7:64: eb:be:44:39:eb:74:b6:16:c7:9a:46:53:35:49:b1:cd:51:f5: b2:6c:2f:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa8bjsi0wPtgY3ODB7FQ2PoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4YWYwOTE4NThiYjk5NjUxNzY0Mzk5YzY1NjVkZjdhMDgz NGRiYWQwHhcNMjUwNTEwMjMwMTAyWhcNMjUwNTExMjMwMTAyWjAzMTEwLwYDVQQD EygzNjdjZTE5MjAyYzdiYmVjY2RkMDExZjZmMzk0OTczZmM2ZTFmOTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnB745m5nXB9a1P5JhqexQgtHhJvC nyg8FOXqa/nUJpkxTbiBAaXIMM4bFUG5ziZ4ZzV8xkx5vRDs3jK2zOYxel8e4p8U DohlcJM5BGXwyFJ0RPAoYgdZhx2cXnR2sEuvYHcFv1I11k0eFMMjKgre4uluzjhh EemU9MLOlut75ZUYxRsNHk0OCe3lLi3Muvbi8jhBVtNlBmC3JyHIFvto7hr322zH KncyBSZkXt5PHmK7GyoA3Mdi18gTxdV9cyLAU3HZDfewWgT01heoaP3qSFlXCoAT 4TneVK34U5Ocdqk/Ge5YLV7ytgVYKL9xEbaiD2Semr6MTtRrNOo/bHHUtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDZ84ZICx7vszdAR9vOUlz/G4flBMB8GA1UdIwQY MBaAFAivCRhYu5llF2Q5nGVl33oINNutMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0s4SkdGaTdtV1VYWkRtY1pXWGZlZ2cwMjYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS83MDBmZDMtYzM2MC00OGFiLThhMDYt NTYxMjliN2RjMDE4LzEvQ0s4SkdGaTdtV1VYWkRtY1pXWGZlZ2cwMjYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS83MDBmZDMtYzM2MC00OGFiLThhMDYtNTYxMjliN2RjMDE4 LzEvQ0s4SkdGaTdtV1VYWkRtY1pXWGZlZ2cwMjYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAISbZiRCF YPwaeGs4jFx0y2uyI3l1fzI4cn4c3U3RXvtICdjcyt9rtnN0OuaFtFtLkSft5mCm w6VXmwexHy6DFMvWJ3U3+eHIeGnsMDlbjoDW0ySq2jdKqXQNZpjbQv66vyfF2f4g +iiKxu+STLU+H2yplHIqHhct+xeLmanH8yWXN4XOWcP7VH4TFgbxk+EWomfIakk8 tkOpj9ru59kPNv3uTc1tvCcqbtnWPzq2BUHD6Q8Od5kG3NV/AyWFzew8ela8FAiv rxxfvzP1jqTEvilzJOrzrDdlelWWQemo74vgcVBGVC+xSddk675EOet0thbHmkZT NUmxzVH1smwvHA== -----END CERTIFICATE-----Generated at Sun May 11 01:19:13 2025 by rpki-client