$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft File: u6Nc-KtvPqoq663Z4jc97AiTYl4.mft (raw, json) Hash identifier: O3NKZhTaK/+1Od7OlEVM+uxKnbLM0SPPOYStIeIqAjc= Subject key identifier: CB:26:B8:4B:CF:4B:D1:07:73:52:15:EF:04:B4:20:D0:B5:0B:38:F4 Authority key identifier: BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E Certificate issuer: /CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e Certificate serial: 0196C013CF79164F7E5340C69B5B0ADAA16F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft Manifest number: 1303 Signing time: Sun 11 May 2025 16:00:45 +0000 Manifest this update: Sun 11 May 2025 16:00:45 +0000 Manifest next update: Mon 12 May 2025 16:00:45 +0000 Files and hashes: 1: GtppMOhe-qj4-qKPQwYM7Bndra0.roa (hash: DZ7bcQ1MagW/CKYzAoT3tgdmQpZud4AtQbSCkk/MCKU=) 2: IICQjXJW2EEkB1v0o8BM6izDgbM.roa (hash: 7Xb1rw7YXZ8yAd+5aXbmrrlzp2Uxli0xSynXq48MEYc=) 3: PZNxNz45jwhU2f2Vk-rUkU1xuZQ.roa (hash: F+PZJf4GxvF8kf0ckwm9Pxo9WyYXyL9ytkInNQ2bSTY=) 4: _8UTREX8Q0a63ua_dGhbhojBdUA.roa (hash: DL1eDSZaMbokl5Ydp9t7oF5cl2AwIO6gEepk09/TZDc=) 5: _kZUir8n1AqIU0qtCf0tRxbZpds.roa (hash: i0Gwqdkr5/j/wsvWbuGrhf4MKjNKMEm96rfhCoH477Y=) 6: c7nY0rggG6raEqDRkehzGz_VYtA.roa (hash: EhNdOxX4vcohdV7gKrHWK7+fsvt8pGFZe0311VfzJ1M=) 7: clWD5iSFcHwGMTWctP6MgbhffFI.roa (hash: XeY9jpVy1coomoksHYwsuAsFdSJEnTf0ShOjmRYUnB0=) 8: hEnYun4dBmY4NXRm3bASEYEJDP0.roa (hash: 9ED8ExgB7hEhZTw92vukURu1ltjtyM6wWC7Qc0GRBP4=) 9: tTkbfZxula834alUiiKULvFUhEY.roa (hash: 53gfHOJtFDupMS3Pl17R4clQixHqHEmtoBj+F2KX9dc=) 10: u6Nc-KtvPqoq663Z4jc97AiTYl4.crl (hash: huEe/qI2934tppcQ1ZJbJokMAlEbpTIcqvqg6i0Pt4Y=) 11: uZ3gLoi-baUsKV1SOOe_6eXbk4A.roa (hash: DF0imGw170/tpFF5iP4nGcWrEFYm61EvjaRvJ/3jKZA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 May 2025 16:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:c0:13:cf:79:16:4f:7e:53:40:c6:9b:5b:0a:da:a1:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e Validity Not Before: May 11 16:00:45 2025 GMT Not After : May 12 16:00:45 2025 GMT Subject: CN=cb26b84bcf4bd107735215ef04b420d0b50b38f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:3e:89:c1:54:37:1e:cd:07:f4:a4:05:54:1b: fe:f3:5b:a1:b1:2e:01:f9:8f:6c:3f:c8:42:62:b4: 1b:91:b5:fc:a8:93:c4:13:97:cf:04:a0:0d:cd:7e: 38:3d:0e:c4:4d:53:4e:08:f4:5f:4f:3b:d2:8b:d5: ce:2c:a5:8a:0c:fa:e8:47:eb:08:b7:5d:e4:f8:f3: e0:e5:9a:fa:1d:6d:c6:db:a8:65:47:3d:de:38:9b: c2:93:4a:e7:83:6b:f3:ae:f5:d4:d2:04:d1:2d:15: 45:e8:b9:81:d3:0a:bf:3e:a2:67:de:f6:fa:84:67: b4:0e:b9:ad:7e:da:5e:ea:3e:96:a2:23:19:ef:2a: ee:74:7a:6d:37:7b:39:f2:81:f5:a5:08:f9:41:9b: b1:82:f1:06:11:36:76:46:bc:a6:84:a0:d2:63:3f: 04:c7:4d:19:ba:98:e0:65:57:e7:42:b2:a2:46:a0: 02:d2:7c:c3:f6:eb:6b:41:b3:cb:df:4f:85:4f:21: 79:00:fd:49:3a:27:b5:86:64:42:00:ad:d6:1b:c0: f3:e3:be:4f:ce:80:a8:07:1c:8a:80:d6:e6:94:03: 05:d2:af:ef:2c:11:37:7b:d1:7f:f4:ee:28:24:7a: 4c:ac:7e:43:80:30:04:e2:98:7c:88:72:1d:9f:a0: dc:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:26:B8:4B:CF:4B:D1:07:73:52:15:EF:04:B4:20:D0:B5:0B:38:F4 X509v3 Authority Key Identifier: keyid:BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:5e:74:48:8a:2b:c9:c1:fa:b0:94:92:2f:80:d4:5c:8d:ef: 69:e8:ad:6e:d9:92:35:f0:d2:22:c2:c7:e0:1e:51:ad:f0:db: 48:74:31:f8:f2:7b:94:e0:2c:00:10:95:ae:8b:e1:3e:7f:04: 86:44:53:5d:c4:29:c6:6a:3f:73:43:cc:07:4f:7f:5a:55:0c: 85:be:5b:72:91:12:36:8f:03:6e:63:1e:ff:9d:d2:fd:f0:98: 80:d1:54:da:53:4c:b9:76:47:dc:24:17:cb:47:2f:a2:9c:0f: 0b:22:7b:1f:83:3b:8a:73:e8:15:fb:91:02:45:77:da:d1:77: 54:7b:39:6f:30:27:a0:a6:5f:61:37:23:77:8e:35:cc:7d:af: a8:0a:90:94:d6:bd:07:9d:0c:91:42:61:95:c7:73:36:19:56: a4:c2:7e:c1:1f:ae:17:b5:89:35:c5:69:e2:03:87:fe:db:47: 09:a9:76:87:f5:24:79:49:33:eb:46:4f:85:b5:6f:eb:39:c9: 34:24:2d:18:ad:e1:c1:b0:49:ac:c2:44:25:ff:75:a2:b6:0d: dc:a2:06:c8:d2:e1:5e:a8:16:93:38:7d:40:44:33:40:32:ae: 63:b4:e9:ab:24:e2:c6:31:c9:1c:4f:91:bd:89:a0:c6:95:ec: b3:d1:d9:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZbAE895Fk9+U0DGm1sK2qFvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiYTM1Y2Y4YWI2ZjNlYWEyYWViYWRkOWUyMzczZGVjMDg5 MzYyNWUwHhcNMjUwNTExMTYwMDQ1WhcNMjUwNTEyMTYwMDQ1WjAzMTEwLwYDVQQD EyhjYjI2Yjg0YmNmNGJkMTA3NzM1MjE1ZWYwNGI0MjBkMGI1MGIzOGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAij6JwVQ3Hs0H9KQFVBv+81uhsS4B +Y9sP8hCYrQbkbX8qJPEE5fPBKANzX44PQ7ETVNOCPRfTzvSi9XOLKWKDProR+sI t13k+PPg5Zr6HW3G26hlRz3eOJvCk0rng2vzrvXU0gTRLRVF6LmB0wq/PqJn3vb6 hGe0Drmtftpe6j6WoiMZ7yrudHptN3s58oH1pQj5QZuxgvEGETZ2RrymhKDSYz8E x00ZupjgZVfnQrKiRqAC0nzD9utrQbPL30+FTyF5AP1JOie1hmRCAK3WG8Dz475P zoCoBxyKgNbmlAMF0q/vLBE3e9F/9O4oJHpMrH5DgDAE4ph8iHIdn6DcowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMsmuEvPS9EHc1IV7wS0INC1Czj0MB8GA1UdIwQY MBaAFLujXPirbz6qKuut2eI3PewIk2JeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9hMGUwMWEtOWJiYy00NGVlLTk4YTMt NTk3YjZlMjQ5MmFiLzEvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9hMGUwMWEtOWJiYy00NGVlLTk4YTMtNTk3YjZlMjQ5MmFi LzEvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh150SIor ycH6sJSSL4DUXI3vaeitbtmSNfDSIsLH4B5RrfDbSHQx+PJ7lOAsABCVrovhPn8E hkRTXcQpxmo/c0PMB09/WlUMhb5bcpESNo8DbmMe/53S/fCYgNFU2lNMuXZH3CQX y0cvopwPCyJ7H4M7inPoFfuRAkV32tF3VHs5bzAnoKZfYTcjd441zH2vqAqQlNa9 B50MkUJhlcdzNhlWpMJ+wR+uF7WJNcVp4gOH/ttHCal2h/UkeUkz60ZPhbVv6znJ NCQtGK3hwbBJrMJEJf91orYN3KIGyNLhXqgWkzh9QEQzQDKuY7TpqyTixjHJHE+R vYmgxpXss9HZqw== -----END CERTIFICATE-----Generated at Sun May 11 22:06:55 2025 by rpki-client