$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft File: VCltI970yFIcZH3Giss8Ej9hHYk.mft (raw, json) Hash identifier: 75D/PzVUQDTowQwKnmCM0L3DLPxngdFyCHvEzJR/dVo= Subject key identifier: B1:AF:20:E7:F4:B5:CD:9E:04:8C:CF:E8:76:3E:6B:BB:1C:C7:2D:A7 Authority key identifier: 54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89 Certificate issuer: /CN=54296d23def4c8521c647dc68acb3c123f611d89 Certificate serial: 0196C23984AC26900B8757C9F400969FED88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft Manifest number: 1180 Signing time: Mon 12 May 2025 02:01:11 +0000 Manifest this update: Mon 12 May 2025 02:01:11 +0000 Manifest next update: Tue 13 May 2025 02:01:11 +0000 Files and hashes: 1: 1SldOKbELOjKigiDwKOX9yrln5w.roa (hash: fmEO0ohhPTmh26Uu49kFiwQxzt5GJqHO94Hmm4ImaNw=) 2: 7CzbNrtp5RtnUa0QvVDrCiB4-GQ.roa (hash: MSGYg43Lpi2l9kj2jvxvbrmtu1KoOP76L+2QcLwRLTY=) 3: 9lCeO4TUjBNc1nJhioNR2Srwqjc.roa (hash: Fg6u79AASkerccVWXjCGzoOYhRTs135qG7S8Ln7z22s=) 4: HIGaJFZVTqANpoUrum_XWo9Khps.roa (hash: 2mkcqMxs62ge1s9tiYFXxw5tu5EZ+UKfCmkGRyd/frI=) 5: HeuY-063QK_nNTZBJsl2N9nPT0Y.roa (hash: cNW0QUKkOECAhom7mEwINa2XXTLvyYriHy+M/7EUYUc=) 6: LorY4n0U-aZMcbhTfwzw87yq2Uc.roa (hash: +fw8Kk7QrRma5kjO6L7XYIo8vAhLOEhcDfP55yYODiI=) 7: VCltI970yFIcZH3Giss8Ej9hHYk.crl (hash: ti0LGgFNdGzlNQ/tQ65+dTW+910z/Sfpb2oUnAPhciQ=) 8: WPkCAe56qcayLw7OSJ39BmQs3dc.roa (hash: aYDDBvFy7ps2t01cjyeWqbWteq/VAxNlg5mzuMH4OGk=) 9: eZijdgAhwuy-ZHRdobMyGcqAvoA.roa (hash: S0x+KVIu+g/l2rZQeyvQLaSq7XxKaGP3nRvfj6m7jNs=) 10: j6WIbMvfpSuER9TZDV1ZY6J-TKg.roa (hash: ObBYTSyTFGBKG+ev+DE2prDLFfsdLKDktKAoj4ncZrw=) 11: t74IIjbKINA8KWETbMX1Yua90lo.roa (hash: g1G25OsuDaHKu2krUemJKYVo40kgh5xmhUKpIWtaI5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 May 2025 01:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:c2:39:84:ac:26:90:0b:87:57:c9:f4:00:96:9f:ed:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54296d23def4c8521c647dc68acb3c123f611d89 Validity Not Before: May 12 02:01:11 2025 GMT Not After : May 13 02:01:11 2025 GMT Subject: CN=b1af20e7f4b5cd9e048ccfe8763e6bbb1cc72da7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:75:64:c2:85:50:79:58:07:b6:ea:d5:4c:83: 24:dd:b7:e3:52:cd:d1:af:da:8d:66:7c:a3:a3:10: 6e:10:10:53:32:58:60:7e:6c:e7:43:d3:55:5d:b5: 97:bc:1f:4c:0d:56:ec:18:68:cf:75:d0:53:74:87: cf:de:9e:bf:3b:26:8b:f4:f4:40:ac:7d:10:41:fd: 40:73:82:7f:61:76:00:e8:9f:92:14:76:6f:c6:cb: 46:83:78:9b:5c:e1:31:f4:ff:13:4e:af:b8:d7:e0: 56:2c:8c:b6:eb:85:fc:d5:aa:a0:9f:19:93:5a:20: 45:e9:36:58:9b:ef:25:9b:27:b5:54:5d:59:35:e6: 3b:c6:f3:9f:ed:25:91:74:ac:3f:8c:15:64:49:f6: 1c:65:43:06:04:18:ec:18:80:33:bd:b5:2d:e5:63: b5:2d:c1:39:ef:f9:e5:3d:39:88:ea:65:d1:c4:eb: 09:10:54:6a:36:d6:28:25:48:44:da:e9:31:26:5e: e9:f7:75:c5:6a:dc:e8:65:0c:01:0c:b5:49:c7:81: f5:75:0f:af:ad:6c:8e:52:01:09:1a:22:e9:48:55: cf:2d:ce:11:c6:2b:5e:4c:9f:18:6a:3d:18:56:11: 6e:e8:23:d4:12:6a:0b:cd:e5:fb:9f:c0:5d:4b:00: a2:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:AF:20:E7:F4:B5:CD:9E:04:8C:CF:E8:76:3E:6B:BB:1C:C7:2D:A7 X509v3 Authority Key Identifier: keyid:54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:61:98:83:1f:f1:e8:aa:39:87:ca:d7:c0:f5:9c:9a:fe:6a: 1e:82:22:c5:9b:0d:24:2a:f1:2c:0c:0f:91:a2:93:bd:27:86: fa:60:ce:f0:ae:dc:4d:e1:af:46:25:78:52:70:a9:08:53:06: 22:4d:d6:54:9a:45:a2:a8:c2:58:e2:4e:95:23:69:fe:a1:be: 45:37:1d:d6:04:fb:d8:47:ca:6d:ef:47:e0:47:96:90:dd:85: f4:2b:6e:cd:f5:fe:9d:94:f7:fa:fa:7a:d0:4d:58:14:43:33: bf:c5:dc:24:fb:84:1b:36:36:d7:01:16:14:64:2f:82:6d:7a: f2:34:c9:b1:d1:20:60:c6:25:ac:34:fb:80:d9:d9:1c:30:15: 7e:ec:01:31:92:5b:8b:2f:aa:55:80:2a:d4:01:86:9b:38:06: c9:02:22:71:b2:5e:dc:a1:88:b6:96:2c:f8:49:d3:b3:1b:02: 8d:f9:86:c6:b0:57:1e:e8:b1:f1:65:f8:d7:df:56:a9:f5:ea: bf:b6:04:56:2e:c7:f6:d3:92:9c:24:c7:82:f0:98:c1:84:fe: 83:38:44:27:38:1e:93:79:41:77:1f:f1:16:3e:40:bf:95:34: 88:46:9b:13:11:fa:d2:d3:06:58:7d:a5:07:56:2f:15:93:7d: 12:44:e4:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZbCOYSsJpALh1fJ9ACWn+2IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Mjk2ZDIzZGVmNGM4NTIxYzY0N2RjNjhhY2IzYzEyM2Y2 MTFkODkwHhcNMjUwNTEyMDIwMTExWhcNMjUwNTEzMDIwMTExWjAzMTEwLwYDVQQD EyhiMWFmMjBlN2Y0YjVjZDllMDQ4Y2NmZTg3NjNlNmJiYjFjYzcyZGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3VkwoVQeVgHturVTIMk3bfjUs3R r9qNZnyjoxBuEBBTMlhgfmznQ9NVXbWXvB9MDVbsGGjPddBTdIfP3p6/OyaL9PRA rH0QQf1Ac4J/YXYA6J+SFHZvxstGg3ibXOEx9P8TTq+41+BWLIy264X81aqgnxmT WiBF6TZYm+8lmye1VF1ZNeY7xvOf7SWRdKw/jBVkSfYcZUMGBBjsGIAzvbUt5WO1 LcE57/nlPTmI6mXRxOsJEFRqNtYoJUhE2ukxJl7p93XFatzoZQwBDLVJx4H1dQ+v rWyOUgEJGiLpSFXPLc4RxiteTJ8Yaj0YVhFu6CPUEmoLzeX7n8BdSwCiiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLGvIOf0tc2eBIzP6HY+a7scxy2nMB8GA1UdIwQY MBaAFFQpbSPe9MhSHGR9xorLPBI/YR2JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUt OTQyNDgyZjhkMmVhLzEvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUtOTQyNDgyZjhkMmVh LzEvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQGGYgx/x 6Ko5h8rXwPWcmv5qHoIixZsNJCrxLAwPkaKTvSeG+mDO8K7cTeGvRiV4UnCpCFMG Ik3WVJpFoqjCWOJOlSNp/qG+RTcd1gT72EfKbe9H4EeWkN2F9CtuzfX+nZT3+vp6 0E1YFEMzv8XcJPuEGzY21wEWFGQvgm168jTJsdEgYMYlrDT7gNnZHDAVfuwBMZJb iy+qVYAq1AGGmzgGyQIicbJe3KGItpYs+EnTsxsCjfmGxrBXHuix8WX4199WqfXq v7YEVi7H9tOSnCTHgvCYwYT+gzhEJzgek3lBdx/xFj5Av5U0iEabExH60tMGWH2l B1YvFZN9EkTkCg== -----END CERTIFICATE-----Generated at Mon May 12 10:24:47 2025 by rpki-client