$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft File: kiIItHtqhk2dH_M-BqqB0TgZp04.mft (raw, json) Hash identifier: DpqaDGzkaEG7mOJ32chU0HVZIyCGbjMMFoPKM0oR2y4= Subject key identifier: 04:68:91:CA:4C:96:8E:92:23:F4:C4:4D:8D:71:F4:7A:B3:FB:3C:9F Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e Certificate serial: 0196BAED7ECFA4A13778F83C0AE7A33E6068 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft Manifest number: 1576 Signing time: Sat 10 May 2025 16:00:48 +0000 Manifest this update: Sat 10 May 2025 16:00:48 +0000 Manifest next update: Sun 11 May 2025 16:00:48 +0000 Files and hashes: 1: 1-rtI9dIBDPGpB7XLgp5LO6PPhNw.roa (hash: ZOyoK37XAa4AMrftPMDpS57217i8QyMPPSqOrLIuDh0=) 2: 1MqnWOr2XX863k_xrrBNGhpSTM8.roa (hash: ZAHJz2QsnnKlOkhGF4MOgyBVqnyxAgqsRswDwRAbn1Q=) 3: ETJiLj_FPEXG5No5WrAoxGg_y_w.roa (hash: 662t7NLUufLVnPvlW5VowqyxEXMWNP4WIugo2zvrIGE=) 4: QX1PzB0slLNh42gV_9Uq9W7-NNU.roa (hash: 42Me4JYy4dGGMwi/uXUY8iDNdYDcztDyEjfKcP1cPGo=) 5: XPCmvArgHR13v_k02Z1LW1lWJx8.roa (hash: 9yrs8EgUGCgumASichQb2a43gXVQMGz8ZJNkpOkb3cg=) 6: XWYIJ6UuSY9_AQiT-hJINBObDQE.roa (hash: PdxLhxNEU7vSAkCuLaQWVId/t5OMWmj8bekrOqUDrSs=) 7: cOLPd5Lu_3ww7o-cdhWB7-TfdNY.roa (hash: S/36KJdTMQ8aIP0tPHIBx2zWJTQd/RRNG/oJA1iTyvo=) 8: iCgmGpyhGXjIvVkyeLmT7N8_y-4.roa (hash: jOahkOswhpSU7ry2oaBtzcTaxYOf5EimbWn3HXDfD9I=) 9: j-60Smkd34pUp65Reim9QN1pXBY.roa (hash: M2tsmNC79ATfwuHh7j2unUzS2isZxvxmhlA+F7YtpNY=) 10: jT8TtCFNTlKwPMmqlrycg4pd3Ks.roa (hash: Z/6XZMJC3dE7VsH6nt9a6dKmCPvrRaks+OkbIUHxD+w=) 11: kOf_R9Qy1GVQ1glrjJm4uNqNh1g.roa (hash: aNoVCmKQ4VNgL/AQ07xn/ExPi8moeVmlmmFfwgj7rOw=) 12: kiIItHtqhk2dH_M-BqqB0TgZp04.crl (hash: Zk90QZPRe+IEfZws4zJw6fxyfgCq17dYSsumRIglJN4=) 13: knSytMRDBBEnCJmSSPDhHWtHg0c.roa (hash: xgKSyUyWK6rR5NEa7nVIywiPdyu/cPSGzuk49MX8f0A=) 14: vBAure0FxWxWdTfj2W3O6_7De24.roa (hash: yikPG1Koq3q/WuhD/GCuT4mpPwhtQgx1jshmNW1jKHY=) 15: yyPUAj_dCWAktPW0jmBjCiRvIJg.roa (hash: H8oCA9x6vnmIvl4HatB3uvnypYSjgIN9/CrfMgatutI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 May 2025 16:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:ba:ed:7e:cf:a4:a1:37:78:f8:3c:0a:e7:a3:3e:60:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e Validity Not Before: May 10 16:00:48 2025 GMT Not After : May 11 16:00:48 2025 GMT Subject: CN=046891ca4c968e9223f4c44d8d71f47ab3fb3c9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3e:c9:75:e6:af:c6:74:b1:f9:8d:38:9f:db: 2c:17:2a:57:f9:bb:81:24:8e:9d:85:cb:96:a1:f7: 0b:9c:60:52:db:e3:c9:36:0e:0a:a0:8b:d6:9c:dd: ae:27:56:58:06:15:66:b5:bf:29:68:f6:26:da:4e: d3:9f:06:9d:57:fc:20:64:56:2f:47:03:61:fd:9d: 1a:d0:10:7d:8b:49:89:52:e6:95:ed:8f:97:8d:ca: d2:1b:a0:32:c8:77:55:90:11:94:32:40:a0:0d:e1: fd:db:45:e9:e7:1f:83:60:95:ff:e6:26:ec:e0:a1: b9:96:96:e6:0a:c0:75:3c:f5:44:7e:68:49:7e:8a: e3:73:f8:74:aa:e5:c3:29:8f:5e:c5:b7:79:69:ce: 49:2e:39:f6:07:bb:f2:95:1c:bd:f5:af:83:27:08: db:98:08:77:9f:6e:a2:fb:bc:ef:29:3c:bc:1d:8f: c5:f5:a8:0f:00:68:45:c7:a8:d0:21:20:e0:ee:8e: 25:83:a8:f2:e9:3d:91:30:8f:d5:ec:71:63:1f:38: 25:4f:e1:20:91:33:03:b6:66:5b:0a:42:9f:a9:4f: ed:fa:26:53:fb:e1:90:f7:27:f2:ef:59:8a:2b:55: 10:a5:81:63:c4:49:a0:77:a5:2e:00:2e:7d:7e:e0: ab:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:68:91:CA:4C:96:8E:92:23:F4:C4:4D:8D:71:F4:7A:B3:FB:3C:9F X509v3 Authority Key Identifier: keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:5c:50:c5:ea:6b:53:ff:09:4b:6a:cc:b1:8b:6c:d3:04:1f: d4:e2:30:49:a1:ab:2e:a9:1e:a1:7c:91:a7:10:28:d0:3c:f4: 76:04:8c:f5:e9:c1:4c:ab:1d:b1:5c:65:1a:94:0c:3b:f1:fc: 2b:c3:7d:e9:44:7e:ff:e0:b0:b2:0e:f8:37:96:64:e4:6b:03: 17:14:8b:af:a1:2b:7e:be:da:e6:5d:24:d8:3a:d6:ea:53:4d: 03:37:96:1b:5b:f3:10:7f:fa:26:1c:25:cd:7a:30:52:94:02: 84:9b:e6:80:4e:8a:ac:16:f6:2a:15:bb:2b:bf:97:00:29:04: e8:5f:f1:0b:e4:1a:d6:df:37:b3:13:18:e1:37:64:6a:43:11: ec:c2:1f:b8:fe:b6:b9:00:c0:a7:9f:79:b1:8a:bc:88:78:a4: 5f:97:92:8f:10:9c:0e:79:e5:83:4d:ee:5b:34:4d:3c:26:07: fd:b2:81:f4:1f:e4:bc:8c:0a:da:2c:67:53:b0:33:61:03:db: 82:86:82:92:68:e0:42:71:d6:3d:e7:bd:5f:d9:12:b4:c1:f8: 39:36:91:68:30:ee:56:b8:8a:2d:fa:fe:34:ef:7d:c1:46:35: d7:ba:52:1b:8f:88:37:d2:0f:53:6d:be:c4:ab:b1:9c:e3:cf: 26:e0:3b:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa67X7PpKE3ePg8CuejPmBoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMjIwOGI0N2I2YTg2NGQ5ZDFmZjMzZTA2YWE4MWQxMzgx OWE3NGUwHhcNMjUwNTEwMTYwMDQ4WhcNMjUwNTExMTYwMDQ4WjAzMTEwLwYDVQQD EygwNDY4OTFjYTRjOTY4ZTkyMjNmNGM0NGQ4ZDcxZjQ3YWIzZmIzYzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxT7JdeavxnSx+Y04n9ssFypX+buB JI6dhcuWofcLnGBS2+PJNg4KoIvWnN2uJ1ZYBhVmtb8paPYm2k7TnwadV/wgZFYv RwNh/Z0a0BB9i0mJUuaV7Y+XjcrSG6AyyHdVkBGUMkCgDeH920Xp5x+DYJX/5ibs 4KG5lpbmCsB1PPVEfmhJforjc/h0quXDKY9exbd5ac5JLjn2B7vylRy99a+DJwjb mAh3n26i+7zvKTy8HY/F9agPAGhFx6jQISDg7o4lg6jy6T2RMI/V7HFjHzglT+Eg kTMDtmZbCkKfqU/t+iZT++GQ9yfy71mKK1UQpYFjxEmgd6UuAC59fuCr2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFARokcpMlo6SI/TETY1x9Hqz+zyfMB8GA1UdIwQY MBaAFJIiCLR7aoZNnR/zPgaqgdE4GadOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTct OTViMDhlMzY2MGNmLzEva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTctOTViMDhlMzY2MGNm LzEva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASVxQxepr U/8JS2rMsYts0wQf1OIwSaGrLqkeoXyRpxAo0Dz0dgSM9enBTKsdsVxlGpQMO/H8 K8N96UR+/+Cwsg74N5Zk5GsDFxSLr6Erfr7a5l0k2DrW6lNNAzeWG1vzEH/6Jhwl zXowUpQChJvmgE6KrBb2KhW7K7+XACkE6F/xC+Qa1t83sxMY4TdkakMR7MIfuP62 uQDAp595sYq8iHikX5eSjxCcDnnlg03uWzRNPCYH/bKB9B/kvIwK2ixnU7AzYQPb goaCkmjgQnHWPee9X9kStMH4OTaRaDDuVriKLfr+NO99wUY117pSG4+IN9IPU22+ xKuxnOPPJuA7iA== -----END CERTIFICATE-----Generated at Sun May 11 01:42:10 2025 by rpki-client