$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft File: KdLa_xxbthoKyLPK6tS4ofooTQ8.mft (raw, json) Hash identifier: DYSKWaI0/osvcUgfBz4dDCSdyNUSULy9m7msaOjclr0= Subject key identifier: C6:6D:CA:2D:9D:C2:7A:9E:C2:1D:68:99:AF:A8:A0:11:24:3F:CE:71 Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Certificate serial: 01960A8C456FD5B3B1F54BA3E0ED4CF78441 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft Manifest number: 1292 Signing time: Sun 06 Apr 2025 10:01:26 +0000 Manifest this update: Sun 06 Apr 2025 10:01:26 +0000 Manifest next update: Mon 07 Apr 2025 10:01:26 +0000 Files and hashes: 1: 1-HzcOlZYHywi14fDPbDX6exNCeU.roa (hash: ELnvsKzxWGNae7K6jdqt03ktBDs9zdidvLja2xmdHHE=) 2: 12aip6Xg3MRpBHrAo9qI_8lGl6A.roa (hash: IURDLmEl8ceZMqFbp565iUYmMlWKc2UmtDtWI+jSndg=) 3: 2SY-qe-5SBhHKk51B06H3d7WW8A.roa (hash: 6/DIJ50Cnk+nITM4AUHonNPdQnw8AUu3PQWc0gDk/RE=) 4: 6AVaCjHyXzCmX9RKvsJNeBRWsX0.roa (hash: BmkvGfb9KA/kpLVgShUXMCUOS/qU/B+L76KUE0JlgVE=) 5: 6OuCHCa3lBl0qUzzvMzNI-pMEZ4.roa (hash: j9i6HiiS4nI4wcr2RV5FEZkxxBV0ISD5E9GgIlD6ABE=) 6: AT1NLNUZ8X0xD6RcwZMdLdIz2ZM.roa (hash: fjnVFsPrVhpcbyIspcCLA5dZQu2SV1yINQliobo6yxc=) 7: GUuYC7cVlHvArBzfO7tfpAP5D60.roa (hash: MBqPwcxZe15O5TCcnQP4rabYZ863Bmk75b+fN9uibnE=) 8: JugFLe6jENz0xFJw2G6fMpeVf-I.roa (hash: LY3Ikb4Kwnv22unGatoglkrWDxveEyc5iDX1fxnI/Kc=) 9: KSdWPEt9fB_iBluYNf4K7txBQrE.roa (hash: YJ0c3CPnKgl+QFgMB6tD+ii2GX7vwrvuc49Rrz/E7uI=) 10: KdLa_xxbthoKyLPK6tS4ofooTQ8.crl (hash: PMOZ3MzYKZUVolwFMxJY/0YDX4pQCYSHT5L1X6nALbI=) 11: Mf9Ftgoq8hNaUlnWSE1OgssDPng.roa (hash: 2OpCIxzpIQdhVjJD4azKWQqbRjrwZgvvuIiGX67bBpw=) 12: NcWtmNHRiYuhKShMZ2FiNOKfbAw.roa (hash: 6KR850hMO0L6chqV9/ieA2lf65V6cwC4jHYlXOitS7g=) 13: RPKuIuiwLUOTopNmIn4BOJGs7i0.roa (hash: lIg6TqObzFxbqNZ5fchVzBYqOiLD6H6xqfkDU6vs6XY=) 14: U0kXOYQlCT4siDrxC7rmBYTDjYg.roa (hash: /xFFXqatUzxXHWrxa+teKUB4rwy5tb/b0xZ64HTl1uY=) 15: dsuGlLVHMB7I47kgKa74SXE1REc.roa (hash: 7Qj6mOC4uog0qj785J6KkN+zNyCNyHyzGiCvkAMiApI=) 16: hGqZ-FRlI55t4voAlR-n3NqPej0.roa (hash: B71Rb7BaHyLXQqMJQJiZSZS0lT82TbCVQONz7Ndp5cM=) 17: iOyP_Db0F92sxD2S4x9jDUy18wI.roa (hash: 6Iwr8wDrVOHgqwu2HaRDU/1SoUQAFZ31io4JJpWIzCM=) 18: izV8LD-KWyx4ph9YXGyEe0qtgqI.roa (hash: 2FIdcaPo0XlL7Qk8UA/+1ue/720HntDktGQmgSyMUIw=) 19: raPkT2KWJeKCRGMnLBqXVOcCh6c.roa (hash: AxKEGemelOmDh2SMtY0ZCfbnhb9j8WRYHJt5TuaikL8=) 20: sd89zYJ1j-RCLpU1z7-DyfQxZL8.roa (hash: UzEpFC1Sc2lK9fjFosdwjJq/oDCr+18i93FGOSEJQN4=) 21: t7kFFxrGX7b_8JY79xsh7QWePnI.roa (hash: 3NaS6l21qtRZhafFxfFpDNUW1OP8TUGIeUDERM2ms5M=) 22: voV1pHSGjiHjmQ5rvvOxR7Je57c.roa (hash: vGBPYlDzvYjcVIBYHyOvwD8dXv9By2X73KVyoLfQW34=) 23: yIMKEplFh6ZEkcubfWX7y2IKKyQ.roa (hash: ZSj+jK0d68aj2QlmnuWYii9Xy8EIUlDgGvMMdbL9Elo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 07 Apr 2025 07:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:0a:8c:45:6f:d5:b3:b1:f5:4b:a3:e0:ed:4c:f7:84:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Validity Not Before: Apr 6 10:01:26 2025 GMT Not After : Apr 7 10:01:26 2025 GMT Subject: CN=c66dca2d9dc27a9ec21d6899afa8a011243fce71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5a:46:cb:8d:69:20:55:46:18:fe:b8:ee:fa: e3:18:75:94:fd:26:2e:b9:1a:4b:c0:01:c3:8e:34: bb:25:50:67:a0:0c:9a:e0:90:ff:a6:f8:34:97:eb: 0d:b5:2a:62:9a:58:09:8b:1c:a3:7b:fd:8b:6e:31: a3:d4:93:a4:20:de:8c:93:53:13:f6:fa:7f:39:b1: c6:67:20:0c:2b:69:f4:0f:8d:85:49:b0:14:46:af: b5:24:7d:f5:09:54:df:25:24:18:5b:3a:74:f3:a6: 87:6c:ac:ad:bf:2b:46:86:06:60:6e:96:82:d7:26: 04:a1:86:da:97:72:66:8a:f5:bd:89:99:6c:fc:9f: ef:8d:7c:6e:ee:4a:9b:a7:30:ad:f8:1b:38:0a:3b: 7f:e6:bb:d7:c0:91:7b:b7:76:b6:99:26:5b:3f:a8: 1d:6c:db:c3:75:ee:e1:a0:af:e3:c7:d0:ae:bf:ca: 00:a4:f2:47:b6:c0:7b:bf:a4:e8:93:21:28:ba:ab: 0b:10:53:42:d6:78:82:7d:76:8a:7d:b4:b4:fd:84: bd:78:51:96:16:ad:06:ba:89:85:40:be:48:29:0a: b1:c9:c1:92:1f:7f:ce:1f:02:a8:e6:a5:f2:97:86: 81:5e:c3:e3:91:2e:58:e9:5a:2e:da:94:1d:15:f9: 27:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:6D:CA:2D:9D:C2:7A:9E:C2:1D:68:99:AF:A8:A0:11:24:3F:CE:71 X509v3 Authority Key Identifier: keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:b9:22:2c:13:66:e5:58:a3:42:60:52:db:98:8d:2d:7c:96: aa:b1:e4:7b:9b:5a:b7:d1:a6:5e:b9:60:ed:0d:81:57:88:d2: 06:1b:6e:7f:f3:c3:1b:da:4e:79:98:c5:45:ce:4c:fd:ca:74: ee:a1:d1:47:3b:ec:0d:bc:d1:da:1f:b5:2e:7f:be:8d:22:20: ef:50:2c:08:bc:1f:c2:4a:32:d9:48:8a:61:04:5a:16:5a:7d: 39:a1:f2:04:95:ce:b1:3a:1c:2b:fa:98:80:aa:93:0b:51:d4: 31:2a:9f:7e:7a:04:99:5a:91:fb:97:a9:fe:10:a6:69:22:f6: 67:e0:ff:b7:cd:7b:b3:fc:cb:d8:f3:31:4c:f6:ff:97:3b:2e: 13:f4:ad:94:ee:6b:4c:f1:e7:5b:a9:76:cc:1f:1d:7c:cd:d7: dc:e5:71:0f:17:70:78:6c:8d:14:a0:a4:73:bc:13:c9:21:7e: 1f:be:9a:5e:6e:62:d1:ac:c4:ae:dc:7f:9a:3b:95:38:91:d7: 33:c7:97:2b:5c:11:5a:ad:47:03:e8:58:ac:69:ac:fe:54:ec: d4:f1:02:47:f9:6d:12:ff:8f:16:d9:64:76:d6:1e:d6:e0:17: 28:48:04:96:8c:2c:ef:76:4f:08:81:f1:74:ba:ee:d3:c6:d7: 1e:e2:ca:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYKjEVv1bOx9Uuj4O1M94RBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZDJkYWZmMWM1YmI2MWEwYWM4YjNjYWVhZDRiOGExZmEy ODRkMGYwHhcNMjUwNDA2MTAwMTI2WhcNMjUwNDA3MTAwMTI2WjAzMTEwLwYDVQQD EyhjNjZkY2EyZDlkYzI3YTllYzIxZDY4OTlhZmE4YTAxMTI0M2ZjZTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1pGy41pIFVGGP647vrjGHWU/SYu uRpLwAHDjjS7JVBnoAya4JD/pvg0l+sNtSpimlgJixyje/2LbjGj1JOkIN6Mk1MT 9vp/ObHGZyAMK2n0D42FSbAURq+1JH31CVTfJSQYWzp086aHbKytvytGhgZgbpaC 1yYEoYbal3JmivW9iZls/J/vjXxu7kqbpzCt+Bs4Cjt/5rvXwJF7t3a2mSZbP6gd bNvDde7hoK/jx9Cuv8oApPJHtsB7v6TokyEouqsLEFNC1niCfXaKfbS0/YS9eFGW Fq0GuomFQL5IKQqxycGSH3/OHwKo5qXyl4aBXsPjkS5Y6Vou2pQdFfknMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMZtyi2dwnqewh1oma+ooBEkP85xMB8GA1UdIwQY MBaAFCnS2v8cW7YaCsizyurUuKH6KE0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3Zjgt NGY1N2Q5Y2Y1Y2FhLzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3ZjgtNGY1N2Q5Y2Y1Y2Fh LzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnbkiLBNm 5VijQmBS25iNLXyWqrHke5tat9GmXrlg7Q2BV4jSBhtuf/PDG9pOeZjFRc5M/cp0 7qHRRzvsDbzR2h+1Ln++jSIg71AsCLwfwkoy2UiKYQRaFlp9OaHyBJXOsTocK/qY gKqTC1HUMSqffnoEmVqR+5ep/hCmaSL2Z+D/t817s/zL2PMxTPb/lzsuE/StlO5r TPHnW6l2zB8dfM3X3OVxDxdweGyNFKCkc7wTySF+H76aXm5i0azErtx/mjuVOJHX M8eXK1wRWq1HA+hYrGms/lTs1PECR/ltEv+PFtlkdtYe1uAXKEgElows73ZPCIHx dLru08bXHuLKjw== -----END CERTIFICATE-----Generated at Sun Apr 6 12:37:57 2025 by rpki-client