$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft File: mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft (raw, json) Hash identifier: /fmNi7ocei3psLetdjvQsFcDG+OlJdo3iG/RMLYYK9k= Subject key identifier: 6B:71:E9:11:47:32:CD:38:20:34:99:30:42:CB:B4:DE:B2:27:EE:F8 Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E Certificate issuer: /CN=99ce569a14c2db3772f23187ce68e6541ec0048e Certificate serial: 0196A3F76298CDCBA45B60844E8ADC646E54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft Manifest number: 1547 Signing time: Tue 06 May 2025 05:00:20 +0000 Manifest this update: Tue 06 May 2025 05:00:20 +0000 Manifest next update: Wed 07 May 2025 05:00:20 +0000 Files and hashes: 1: 7hlWKm8vTIF0LH1H2oS6Admh1TI.roa (hash: JGgMMA+OZIrWq67kkKcLVk/aNndkz3SnG1R5RYOVvj8=) 2: 8Okcs_WzeZSlRzql6-e5V5V7syA.roa (hash: Bgf74cz9Nwo/ctlxM9vVhY3z4DibfYQP6Uszu31EXc8=) 3: AJpw_2i3EoQNYD9kunMPYOdByi8.roa (hash: 2y+udfjFmNVer5C4pJzKndxIM53KHs0ELdljGNxXclM=) 4: FjCA5Ak9pc8iYQAo2kd8vxWMg2c.roa (hash: LWHCt8fi0ffLNOHRJ69hCW6DNWkN+nY4S8kMpRaQ7ss=) 5: Ik8Kqt-zKfrsdQjyrAjHXX-mlLc.roa (hash: Zg9C0+0W8n0QIjR6RRPkp/OJIpBk8iu2+syGMIoxQyg=) 6: P82-6fcmXy1vqdLrwWWqytTl0TM.roa (hash: z01aDruR3yMRSRzpiGY2CGLWYQwuEAMQJV+YU0LBGGA=) 7: RYdEtsOojE3SXyShhqAjMIQl9xQ.roa (hash: bxAZYk1bj8j4gGSsg9+CUkCHFq1GRl7baVopFxolE0s=) 8: WBeAt2UOvPgAdfpllYF8DBrXsx8.roa (hash: IGhLKO/rQTI4tOBHJDgWqI73xTyqxuZsgF0ztyC/dOc=) 9: bbmenZqkY_bNQyceoK-fLvwWxdc.roa (hash: 5/uuA7PsJ4CyNOajTBR0J1Bkylsmq9V39AJtX9hFgFU=) 10: dMlBq16YcIM7-JR7sVrQGjUo5Ts.roa (hash: i7NU7NT4PhY/w3tg6T+Z3qdRHBm2oFSaLm/74+Urx2g=) 11: f4e7IUwG3JkPasx3oPPOpKnw014.roa (hash: oT75cSQjF7ggxHOJOkz6Sxjs0hfilCF0H6NE1nJtUfo=) 12: mNguxrQSssFTgOvDx-TtVJcngJ0.roa (hash: p4yScE1NaP9LVRZLGH/RikX/bIEDOl76JK/45ns5C9Q=) 13: mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl (hash: gpu7C5ysSMPLqPlKzJXEqaz8b90EPCZlOFgM4U7rchM=) 14: u_mqTybwgy-hqVDwwCNi1Bf-8tI.roa (hash: JZzfV1nFUUQsICoBUJ9//kJmxjSvH3d3D7ybB8QQr/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 May 2025 04:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:a3:f7:62:98:cd:cb:a4:5b:60:84:4e:8a:dc:64:6e:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e Validity Not Before: May 6 05:00:20 2025 GMT Not After : May 7 05:00:20 2025 GMT Subject: CN=6b71e9114732cd382034993042cbb4deb227eef8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1e:da:97:7c:18:69:da:20:40:a4:46:2c:8d: a6:94:99:a7:72:27:e4:42:24:fb:54:05:39:5f:39: af:73:b2:30:88:a6:b3:ff:45:50:fa:d4:b0:ec:c7: 0a:ed:ce:13:9d:5f:db:df:9c:c3:bc:d1:3e:62:d7: 6d:bd:92:61:a0:f9:2e:b0:b7:ac:06:31:ee:79:92: 72:17:e3:8c:4c:a4:9d:a2:91:0f:21:b7:85:f1:c1: d1:f3:dd:69:73:1d:d0:17:3b:63:e5:26:38:a5:bb: 30:f2:55:c0:09:8a:61:53:f0:e7:c3:74:14:ca:fb: 79:e3:7b:50:bb:43:ab:da:04:fb:a5:24:83:43:c6: ef:f9:5c:e9:20:06:20:c9:e0:d5:6a:ab:b2:d6:1b: 9f:76:c7:57:03:80:08:e7:8d:7e:e3:af:5f:fd:fd: aa:91:f4:a3:75:01:7b:fd:1c:27:ed:93:ab:05:fe: 57:8a:22:19:86:27:7e:04:08:a3:64:47:39:26:3c: de:ef:3d:9f:22:74:94:5c:b2:2e:9b:8a:8e:1d:0e: 19:7b:08:7a:51:36:36:b9:58:ad:4d:71:b6:b5:e7: 40:6d:6a:90:98:43:20:e9:3d:4f:17:65:50:ab:4c: 4b:dc:51:c6:20:16:89:11:3d:97:06:a0:35:32:b6: 9c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:71:E9:11:47:32:CD:38:20:34:99:30:42:CB:B4:DE:B2:27:EE:F8 X509v3 Authority Key Identifier: keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:8d:43:ec:2c:84:81:16:8b:78:9d:de:e0:99:fe:6c:d5:36: 2d:44:a9:4b:a4:53:7f:9e:d7:a1:80:17:ab:4b:00:49:f7:2d: 02:6a:78:d3:ec:fe:9c:dc:5c:10:f0:53:3e:b1:80:3f:7a:39: 33:b3:c8:fd:d6:23:7c:9e:6c:23:89:c5:34:ed:43:3c:cb:db: 1c:f0:a4:68:ae:41:17:38:f3:c3:22:40:59:68:3e:93:d9:cc: 14:4c:fd:40:b1:fe:21:0a:75:6b:05:7c:97:96:3e:66:31:09: af:ee:d0:81:67:bd:c1:a6:1b:7b:b3:ea:43:6a:59:47:24:47: 69:c2:08:af:c1:f2:08:ef:85:7c:07:9c:5e:85:a9:75:38:af: 6e:dc:eb:9f:f9:65:9b:79:48:2e:3f:d0:e6:dd:65:86:3f:2c: cc:98:0f:b5:a6:f9:55:a7:11:30:de:06:9f:3c:88:9a:b6:1f: 72:3f:6f:12:01:d6:01:74:ae:66:fc:a5:c7:f4:11:68:b5:d1: 32:4e:5e:2d:35:4d:4d:99:58:3b:80:ea:31:62:56:82:12:f8: 6c:8c:9d:04:72:a1:2d:51:f6:c1:97:b2:4e:73:d0:3d:0a:ca: e7:52:e5:26:d8:e3:1f:c0:da:af:74:19:73:b4:5e:96:42:81: ff:49:d1:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZaj92KYzcukW2CETorcZG5UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5Y2U1NjlhMTRjMmRiMzc3MmYyMzE4N2NlNjhlNjU0MWVj MDA0OGUwHhcNMjUwNTA2MDUwMDIwWhcNMjUwNTA3MDUwMDIwWjAzMTEwLwYDVQQD Eyg2YjcxZTkxMTQ3MzJjZDM4MjAzNDk5MzA0MmNiYjRkZWIyMjdlZWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB7al3wYadogQKRGLI2mlJmncifk QiT7VAU5Xzmvc7IwiKaz/0VQ+tSw7McK7c4TnV/b35zDvNE+YtdtvZJhoPkusLes BjHueZJyF+OMTKSdopEPIbeF8cHR891pcx3QFztj5SY4pbsw8lXACYphU/Dnw3QU yvt543tQu0Or2gT7pSSDQ8bv+VzpIAYgyeDVaquy1hufdsdXA4AI541+469f/f2q kfSjdQF7/Rwn7ZOrBf5XiiIZhid+BAijZEc5Jjze7z2fInSUXLIum4qOHQ4Zewh6 UTY2uVitTXG2tedAbWqQmEMg6T1PF2VQq0xL3FHGIBaJET2XBqA1MracCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGtx6RFHMs04IDSZMELLtN6yJ+74MB8GA1UdIwQY MBaAFJnOVpoUwts3cvIxh85o5lQewASOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9jYzZlOTktNmU1Zi00MDFiLTkxMmQt MTA5NTU0NGM2YzUwLzEvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9jYzZlOTktNmU1Zi00MDFiLTkxMmQtMTA5NTU0NGM2YzUw LzEvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHo1D7CyE gRaLeJ3e4Jn+bNU2LUSpS6RTf57XoYAXq0sASfctAmp40+z+nNxcEPBTPrGAP3o5 M7PI/dYjfJ5sI4nFNO1DPMvbHPCkaK5BFzjzwyJAWWg+k9nMFEz9QLH+IQp1awV8 l5Y+ZjEJr+7QgWe9waYbe7PqQ2pZRyRHacIIr8HyCO+FfAecXoWpdTivbtzrn/ll m3lILj/Q5t1lhj8szJgPtab5VacRMN4GnzyImrYfcj9vEgHWAXSuZvylx/QRaLXR Mk5eLTVNTZlYO4DqMWJWghL4bIydBHKhLVH2wZeyTnPQPQrK51LlJtjjH8Dar3QZ c7RelkKB/0nRFg== -----END CERTIFICATE-----Generated at Tue May 6 07:11:28 2025 by rpki-client