$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft File: eXmGPOqCrrjp3zhLOapRdvS8-mE.mft (raw, json) Hash identifier: UYaCxueuS6LVaC50U1ig2K3W+0+E2ryBBc0Q8ihGkpQ= Subject key identifier: 0D:52:FC:1F:A8:52:E1:E8:20:5C:BC:34:AA:6A:84:3E:E3:52:0A:29 Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61 Certificate issuer: /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61 Certificate serial: 0196C8E00BEFE3DF3C814FE9CD88C4EDCC62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft Manifest number: 155B Signing time: Tue 13 May 2025 09:00:48 +0000 Manifest this update: Tue 13 May 2025 09:00:48 +0000 Manifest next update: Wed 14 May 2025 09:00:48 +0000 Files and hashes: 1: 2cSeSi_Xs9nxENINXXMmVW1DasQ.roa (hash: NILYBWHjcUi2YMu0b6KQQ7GSdlhIfBjAKlI5QryWGe8=) 2: 31B5K7vkAfS9R2wkGuV5dcAnL2Y.roa (hash: O89Ry4yQ6lrE+ydQl9ey5gr4XCsYEJZz/2ZEEVTUklM=) 3: 8rBNukWPHPmFUpvlkGmzTz1-HwA.roa (hash: tMcco5dxWlTIQfy3zxbp0EQ9rOWiTqcDWIU/jeQq+bM=) 4: DrV2xA7Yd-hZFiq3pO9rygl2qg0.roa (hash: TVf6eSJU2syGlD0lzcyv3W0pP95vSrCKIhPdX0AUyh0=) 5: GGh-0xxwn6ceElDQMHRGmEsQE-s.roa (hash: P3CSh7y+NvPz/ZjtWmpED7vAzzUGfZNIvd2EgvFxP9s=) 6: NmG_HXr74xhss_g6667RcEUKRLI.roa (hash: w4iJzBXqF4+nBtbBp9H18XsHRW5050KpbO/LhdFePIo=) 7: OeWAQhxz5E883h7RJjR3cmkBM6o.roa (hash: SpK+6FCkO+sEnLY+zrox32fWgUHKX5y3hElZSDHvkaU=) 8: OllQNmMawdArtrTwZHIJNF4T5jM.roa (hash: +uevr5/ThP6vpFGT/Sd5hxkcaCeLUtP4ogWvmijr4m8=) 9: eXmGPOqCrrjp3zhLOapRdvS8-mE.crl (hash: hY4o+k4HhTKHhAK3Iew2pBty2cqJNQZ7+g5SyIfPL5I=) 10: jRyIBgdtXReJ9oHBVuw4FaEWM-0.roa (hash: ZszsBIs7CJREdsDcllx0N3t5IqBzFvq0JJZ2fLMu8PY=) 11: pGXlBe8mvqpUo_lCHeYFkShv2K8.roa (hash: rjd6cps92Ja94+46vbe5lft5y/2s10gUp3FV0e699LY=) 12: zIH5sPlMx70fyP1Az3Csaj7WyTI.roa (hash: 2aeoW9K+GdEGc7tRsUNmCwR+CPzyrfG3s/F0EGb6/Pk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 May 2025 08:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:c8:e0:0b:ef:e3:df:3c:81:4f:e9:cd:88:c4:ed:cc:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61 Validity Not Before: May 13 09:00:48 2025 GMT Not After : May 14 09:00:48 2025 GMT Subject: CN=0d52fc1fa852e1e8205cbc34aa6a843ee3520a29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b5:42:d8:dd:5b:f5:f3:9c:42:f2:28:bd:92: ea:15:33:b1:8a:de:95:db:8a:80:66:e2:ea:13:96: 88:65:73:87:8b:88:92:58:8c:4b:5d:13:49:05:3e: 4f:45:31:97:e1:fd:d1:ef:88:0d:d9:b2:62:cc:33: 2e:6c:57:d1:9a:06:18:9b:82:59:74:45:40:f2:06: 36:96:11:c1:ca:08:4f:3d:af:c2:a3:29:9c:67:8c: 19:43:f0:a0:35:fd:23:78:a3:74:68:da:a3:3b:6a: 8b:f5:7f:89:72:72:1e:65:16:1f:6a:76:2a:49:74: e5:73:77:38:48:96:c7:3e:c8:e5:1b:a1:17:4a:7a: 8f:47:6b:a1:cf:40:f3:06:a9:78:97:a7:07:12:9d: 09:e3:d5:8b:9d:3a:d0:5f:12:32:cc:55:93:79:eb: a8:bb:83:6b:06:31:a2:11:8f:2e:51:59:59:f8:dd: 4d:99:37:c1:54:0c:93:4c:61:f9:6f:47:91:11:08: d4:5b:d7:95:6b:04:aa:3f:86:29:7b:07:9c:31:48: 1d:c4:bd:83:a8:68:50:f5:b8:6f:bf:e8:6f:92:76: 48:28:ac:f8:0a:84:7a:fd:48:84:e0:3c:9c:ce:f7: 80:82:f5:e2:ad:98:71:e6:b0:97:d1:d4:27:82:11: a4:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:52:FC:1F:A8:52:E1:E8:20:5C:BC:34:AA:6A:84:3E:E3:52:0A:29 X509v3 Authority Key Identifier: keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:ac:ce:97:af:7c:96:61:67:e8:44:90:ea:d9:51:56:68:e0: 15:ae:3c:95:c8:7b:dd:e3:d5:41:1d:64:52:5d:90:11:1f:cf: da:02:09:47:1b:f5:d1:13:41:64:0d:b5:d2:3d:09:97:6e:38: f9:a5:c1:3f:81:5a:13:31:43:47:0a:a3:25:91:bb:fa:7f:79: 5f:34:94:34:b4:e1:a3:fa:9c:a9:9e:b6:1d:3b:7c:1a:fc:34: 41:35:bb:88:02:bc:5f:16:3f:89:86:2c:00:13:a1:09:59:b4: 03:ea:81:9a:e7:13:0f:e6:a2:db:1a:5b:d0:fd:0a:00:f5:c7: 6d:72:a6:25:44:1e:d9:63:1a:55:63:3b:07:45:9c:68:7c:19: 72:7a:ee:0e:0a:1a:ca:0b:92:90:32:fd:52:06:47:ba:41:7a: 7a:44:3f:b1:5a:5f:62:eb:ac:bf:3e:3a:24:d8:fc:08:e3:96: eb:09:2b:12:dd:90:59:c9:60:b5:a3:39:35:6c:d5:df:c0:bb: 2c:94:eb:27:ee:d4:b6:97:57:11:ed:92:75:17:b0:2e:de:ed: 65:1e:21:46:57:bc:0b:cc:59:2b:a2:ce:37:7a:21:3d:51:a2: 2c:74:33:94:24:b4:e2:57:93:72:80:59:3d:cf:5f:0c:4d:76: 5e:e2:e3:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZbI4Avv4988gU/pzYjE7cxiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5Nzk4NjNjZWE4MmFlYjhlOWRmMzg0YjM5YWE1MTc2ZjRi Y2ZhNjEwHhcNMjUwNTEzMDkwMDQ4WhcNMjUwNTE0MDkwMDQ4WjAzMTEwLwYDVQQD EygwZDUyZmMxZmE4NTJlMWU4MjA1Y2JjMzRhYTZhODQzZWUzNTIwYTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07VC2N1b9fOcQvIovZLqFTOxit6V 24qAZuLqE5aIZXOHi4iSWIxLXRNJBT5PRTGX4f3R74gN2bJizDMubFfRmgYYm4JZ dEVA8gY2lhHByghPPa/CoymcZ4wZQ/CgNf0jeKN0aNqjO2qL9X+JcnIeZRYfanYq SXTlc3c4SJbHPsjlG6EXSnqPR2uhz0DzBql4l6cHEp0J49WLnTrQXxIyzFWTeeuo u4NrBjGiEY8uUVlZ+N1NmTfBVAyTTGH5b0eREQjUW9eVawSqP4YpewecMUgdxL2D qGhQ9bhvv+hvknZIKKz4CoR6/UiE4DyczveAgvXirZhx5rCX0dQnghGktwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA1S/B+oUuHoIFy8NKpqhD7jUgopMB8GA1UdIwQY MBaAFHl5hjzqgq646d84SzmqUXb0vPphMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xY2NmMjUtMjBkZS00YjJlLWEwZTEt ZGU0YWNmNDQ3ZmFlLzEvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8xY2NmMjUtMjBkZS00YjJlLWEwZTEtZGU0YWNmNDQ3ZmFl LzEvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALqzOl698 lmFn6ESQ6tlRVmjgFa48lch73ePVQR1kUl2QER/P2gIJRxv10RNBZA210j0Jl244 +aXBP4FaEzFDRwqjJZG7+n95XzSUNLTho/qcqZ62HTt8Gvw0QTW7iAK8XxY/iYYs ABOhCVm0A+qBmucTD+ai2xpb0P0KAPXHbXKmJUQe2WMaVWM7B0WcaHwZcnruDgoa yguSkDL9UgZHukF6ekQ/sVpfYuusvz46JNj8COOW6wkrEt2QWclgtaM5NWzV38C7 LJTrJ+7UtpdXEe2SdRewLt7tZR4hRle8C8xZK6LON3ohPVGiLHQzlCS04leTcoBZ Pc9fDE12XuLjaw== -----END CERTIFICATE-----Generated at Tue May 13 11:50:13 2025 by rpki-client