$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft File: 8uKBD0mzb91kHDJr0d5OQtEosEY.mft (raw, json) Hash identifier: MP9Df4S7um6eni2uFQXLYxl+5bnKV2TEOv1ov0JDc8s= Subject key identifier: C0:F5:F6:17:93:7C:7E:9C:4C:3D:D5:B1:75:44:B4:DB:11:59:EE:4D Authority key identifier: F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46 Certificate issuer: /CN=f2e2810f49b36fdd641c326bd1de4e42d128b046 Certificate serial: 0196C8DFA2BF1F3F39316277F31F3B427B94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft Manifest number: 1545 Signing time: Tue 13 May 2025 09:00:21 +0000 Manifest this update: Tue 13 May 2025 09:00:21 +0000 Manifest next update: Wed 14 May 2025 09:00:21 +0000 Files and hashes: 1: 1nLm5M5xfJ_suNGM5E1Zv1P9buc.roa (hash: 8x4G+E8iExmOXonfPhkgFAssRVwUmXgRDU/QwrPhfTc=) 2: 8uKBD0mzb91kHDJr0d5OQtEosEY.crl (hash: VvQHIG+6P+VNJ/yhU0MvqWNJgb5zrsOymadN7EJDSpg=) 3: Lfi2kFGwKCjTFh-UgGwG9fE3y28.roa (hash: vsaKPg/3Dci9H1drLTZRN5KQySI72yp3XcQ7k6Dlcjo=) 4: _nUioJBQYiP_fVr8BJqtm1b4PRs.roa (hash: 8TwcjLFByQyQOwz+CZFr+OHfzp46TUFKqsAmkEkj8SM=) 5: aTc8S3bYqZoD9jiepL9oUB_LXc8.roa (hash: ZM0nvVCM2yUnFFGdw51jOTnM2p1Qj9SS/GteRoRmdLI=) 6: cSIsSraiS7nIkZaNHDPeLhmfWzw.roa (hash: 6RDnXeZI7Aggjdy420rt58R6tW8oEB+ao9gxbA9zhLY=) 7: cT2NBd6CzvlyjEEfvaGsHGPxIbc.roa (hash: 5qkGkFqB6MaSnnKFQR4ILKQDwkrOhYsEol0WfvvJ+hs=) 8: mgsVdxyrFBjubnGQwn9ZD0Aa8KQ.roa (hash: WUYiTP5VTCdXuJgIU+Sgp6znUUnvoPyUsuU1tYAduHA=) 9: qhtmZa0GBJu-LNeg5d5k1hem6bE.roa (hash: Uh/IbFG52qMt7jSUYgnpbLvKrotH1qlqQb6PDTI4TP4=) 10: wodM1-EUQJUVgPu2FeLNzhcjNAQ.roa (hash: oqpoLkjU7X7RENp32UMSCTEvk2YhpXGRDxHAfJ9Hiks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 May 2025 09:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:c8:df:a2:bf:1f:3f:39:31:62:77:f3:1f:3b:42:7b:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2e2810f49b36fdd641c326bd1de4e42d128b046 Validity Not Before: May 13 09:00:21 2025 GMT Not After : May 14 09:00:21 2025 GMT Subject: CN=c0f5f617937c7e9c4c3dd5b17544b4db1159ee4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:37:6b:e8:98:29:4c:ab:45:39:19:3f:55:17: 60:b5:fd:9f:17:2f:ca:0f:4d:0c:46:1f:7f:24:b7: 52:ac:db:7f:16:57:33:a6:71:f8:1d:18:0d:90:f5: 62:7c:b0:31:25:a9:a1:28:f2:d7:1c:ca:36:90:cf: 8a:b8:9e:3d:1a:a5:4c:1a:27:74:85:f1:e4:a2:b4: 65:86:96:64:96:c5:ef:9d:55:08:ba:c4:97:85:16: 53:be:88:61:96:5c:c7:cc:bb:78:3f:b5:75:64:00: 11:66:b3:f4:b7:2d:1e:48:74:f2:61:5a:fa:d8:a8: b4:be:97:79:88:63:58:b8:fc:3e:30:fa:f2:ab:8a: 19:c1:27:e6:4b:ee:8a:0b:67:55:4f:be:7d:a0:94: 51:33:4e:e9:74:61:e2:ed:f3:65:09:3a:1a:ec:53: 11:e5:1b:99:9e:69:84:5b:42:9c:cb:fc:c2:27:31: 93:13:19:c5:81:7b:70:b4:66:c5:92:91:18:dc:e7: b8:c7:79:52:19:0c:c4:f5:ad:bf:8b:cf:5a:11:20: 79:a5:b8:0c:df:bc:2f:19:fd:1b:4f:32:d4:01:8d: d6:f3:c7:8d:cb:a7:6f:d5:93:ab:88:f9:7b:54:40: 5b:7e:da:4b:39:d8:8e:a9:d4:3c:80:2f:0a:2f:da: 80:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:F5:F6:17:93:7C:7E:9C:4C:3D:D5:B1:75:44:B4:DB:11:59:EE:4D X509v3 Authority Key Identifier: keyid:F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:4f:3a:53:1d:82:12:4d:1d:51:2e:a4:4d:06:0f:1d:4b:78: 3c:b2:eb:c4:d9:11:ce:74:2b:63:9c:59:ce:59:b6:3c:ad:35: 62:1e:fa:46:59:27:b4:a8:f4:c4:4f:1c:af:ff:e0:92:fd:f6: 44:e6:b0:aa:3b:19:24:40:f3:38:2f:31:60:5e:12:87:ef:de: 7b:13:45:44:e1:c6:ca:c8:20:42:d5:f2:a6:7a:db:bf:df:2b: 54:c6:bc:b0:cd:b8:97:d9:c0:b9:73:ea:97:2f:78:7d:3c:e0: f9:3b:9f:12:13:72:4a:6b:12:eb:78:f9:96:45:93:19:d9:b2: 54:ef:7f:d6:be:bb:2e:3d:9a:be:c8:b7:bb:97:da:76:18:34: da:4c:31:d7:b1:7f:9a:00:5b:f1:62:90:77:da:aa:01:bd:1e: 97:ba:8e:09:58:62:60:f1:a9:9c:07:ae:7c:09:07:13:f7:73: 4a:ef:5f:68:e6:8c:ad:54:8c:e8:45:16:52:8e:49:dd:39:93: 0b:94:ff:c3:5e:19:4c:98:fc:9c:d9:74:be:6f:b2:50:15:e6: 8e:5c:ef:e9:65:05:1c:f2:bf:72:39:60:37:69:af:da:8f:e7: 9f:14:68:96:ee:04:f1:f2:3f:06:2a:ad:b0:0f:61:a7:9c:a7: 1d:91:d9:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZbI36K/Hz85MWJ38x87QnuUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyZTI4MTBmNDliMzZmZGQ2NDFjMzI2YmQxZGU0ZTQyZDEy OGIwNDYwHhcNMjUwNTEzMDkwMDIxWhcNMjUwNTE0MDkwMDIxWjAzMTEwLwYDVQQD EyhjMGY1ZjYxNzkzN2M3ZTljNGMzZGQ1YjE3NTQ0YjRkYjExNTllZTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDdr6JgpTKtFORk/VRdgtf2fFy/K D00MRh9/JLdSrNt/FlczpnH4HRgNkPVifLAxJamhKPLXHMo2kM+KuJ49GqVMGid0 hfHkorRlhpZklsXvnVUIusSXhRZTvohhllzHzLt4P7V1ZAARZrP0ty0eSHTyYVr6 2Ki0vpd5iGNYuPw+MPryq4oZwSfmS+6KC2dVT759oJRRM07pdGHi7fNlCToa7FMR 5RuZnmmEW0Kcy/zCJzGTExnFgXtwtGbFkpEY3Oe4x3lSGQzE9a2/i89aESB5pbgM 37wvGf0bTzLUAY3W88eNy6dv1ZOriPl7VEBbftpLOdiOqdQ8gC8KL9qAowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMD19heTfH6cTD3VsXVEtNsRWe5NMB8GA1UdIwQY MBaAFPLigQ9Js2/dZBwya9HeTkLRKLBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHVLQkQwbXpiOTFrSERKcjBkNU9RdEVvc0VZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi83OWU5MDUtZmIwZC00YjhiLTkzOTAt NTBkMmI3MGJjZjMxLzEvOHVLQkQwbXpiOTFrSERKcjBkNU9RdEVvc0VZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi83OWU5MDUtZmIwZC00YjhiLTkzOTAtNTBkMmI3MGJjZjMx LzEvOHVLQkQwbXpiOTFrSERKcjBkNU9RdEVvc0VZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQU86Ux2C Ek0dUS6kTQYPHUt4PLLrxNkRznQrY5xZzlm2PK01Yh76RlkntKj0xE8cr//gkv32 ROawqjsZJEDzOC8xYF4Sh+/eexNFROHGysggQtXypnrbv98rVMa8sM24l9nAuXPq ly94fTzg+TufEhNySmsS63j5lkWTGdmyVO9/1r67Lj2avsi3u5fadhg02kwx17F/ mgBb8WKQd9qqAb0el7qOCVhiYPGpnAeufAkHE/dzSu9faOaMrVSM6EUWUo5J3TmT C5T/w14ZTJj8nNl0vm+yUBXmjlzv6WUFHPK/cjlgN2mv2o/nnxRolu4E8fI/Biqt sA9hp5ynHZHZRQ== -----END CERTIFICATE-----Generated at Tue May 13 17:35:47 2025 by rpki-client