$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft File: s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft (raw, json) Hash identifier: 5p5Q/sCxr0hBfg3ToQUq9FhCFY1CakZXakizIbKBjoI= Subject key identifier: 10:B8:BC:A9:4D:19:09:5B:19:32:C4:89:C4:99:D4:F8:42:69:7A:31 Authority key identifier: B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2 Certificate issuer: /CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2 Certificate serial: 019609E766E7FA548CE23821978040B9F418 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft Manifest number: 14ED Signing time: Sun 06 Apr 2025 07:01:22 +0000 Manifest this update: Sun 06 Apr 2025 07:01:22 +0000 Manifest next update: Mon 07 Apr 2025 07:01:22 +0000 Files and hashes: 1: 1IyxB14_QkLsvmLRx3j-3a6Zjk4.roa (hash: htWKauGvhiwmC3uhHI9F9baGTADLWNpjXIog5aUAkzA=) 2: Hrw24NCuWIUCpkj_ixSA3ykRPr4.roa (hash: EL86DxycBZAbHkapsC+FVYde7DJDbg6IvsLrlIhK4Mg=) 3: HzkqLbs1liYqOOnORyYsONDUWCk.roa (hash: uXYRvHJ6LJgN5jTlxHsTjXJyetqQoAXwubqH0//UAWg=) 4: KW8HM7Vt-viFSQssh-MaAGQ56LI.roa (hash: LVB3HoG1zrGwq6DA6Whlqb+iZJnipajeWgJUkFDtgQ8=) 5: N8YU9P6afQ3l1ax9yLIDe6D0fIk.roa (hash: EU77Dk5F7GrtkJ85p7yvIHvzXNj6aNgdhN+Tn5j+zs0=) 6: NxaezdRi3ofV0Ea6FtmKMCg4Xno.roa (hash: OxfdQ+cdMI49CYY0Q1jeMkKHuJPcs1w/NoTD4eAZ2MA=) 7: jGaeQ05R3hLIsxNTb7dpc8FaO6w.roa (hash: 4TEbxdiinYCpm4mycPqOwDmBBxQQxUxqZfGO0t4kbOg=) 8: mSsD_9FMfN2LP7M_Mwsa2ue8f54.roa (hash: 9X0dNAuuQyEHvxBMN4gp2QewnB9NGpB0KtQCW0IE4VU=) 9: oRsHwl0lqDdQsW8I1c5igLUyNzs.roa (hash: 8g9A+Hdue1idAErOv1qWZKgEKPMgG/A4+RlDqNfgnkI=) 10: oreGjQwv74g6OpxObQTCv-MnU1M.roa (hash: d1IJwSRdqQjA5VA/VLC7+miffsmnB8Nxer6G7ClHfMc=) 11: p2_R78qfiRDhzvxPsVGCBtVmaJE.roa (hash: AfONkYdMNZkN9Er/D4pbys1uxPQQYlJm+sdpKa5QxNI=) 12: s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl (hash: qaqH2MtYWPZvjlZuEKYmSzZMhvB5voI4lWByW1/0FoE=) 13: vxg-yi7SqRx3q3DlZJY82nlINbw.roa (hash: 8Tp3GLDI+FIAlBt1x2bg1AA0ZulV2JjhMEdWi/PMtGA=) 14: wjy1-qmg6rYR0UilXbPOrktmKnc.roa (hash: OCHLZL4VOIDtWxajhki14b+EkeW6juZq6cOYKpzs8QI=) 15: xMcgE5el8x0M_rTEbVyhY3X3x1c.roa (hash: PGLJrZJLBXcLan5LC1jzJXTcMWQ+drrbyWZOiA3GgNU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 07 Apr 2025 07:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:09:e7:66:e7:fa:54:8c:e2:38:21:97:80:40:b9:f4:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2 Validity Not Before: Apr 6 07:01:22 2025 GMT Not After : Apr 7 07:01:22 2025 GMT Subject: CN=10b8bca94d19095b1932c489c499d4f842697a31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c3:2e:b5:b9:df:d6:29:7a:3f:11:4b:df:39: d4:bd:cf:7d:46:82:cd:c9:9c:e6:39:91:d2:ac:01: c4:f4:38:e9:43:dd:21:c4:33:bb:d6:41:40:61:67: 98:f0:60:b9:f3:df:9f:7b:ee:97:be:55:ba:ff:a7: 96:96:e5:55:12:59:79:18:dc:77:6c:69:9e:25:ce: 35:9d:97:21:63:11:2b:c0:45:81:4c:84:08:c4:85: 2f:af:82:49:e7:83:b3:f2:fe:de:e1:af:c7:03:15: ce:98:da:a2:ae:42:82:d6:f1:24:49:4e:ed:0c:ba: 14:05:b1:99:68:04:f8:8e:0f:3e:9b:7a:a9:56:a6: 12:e2:e2:9a:69:bf:f2:2f:0f:4b:ec:d7:85:45:b7: af:c5:9c:af:8e:f9:57:46:97:a9:4b:36:fb:24:7c: 02:ac:42:76:06:ec:67:e2:06:9e:b7:b0:c3:04:ed: d1:98:78:a2:40:3b:fc:bd:e4:ca:90:87:00:a8:79: 1a:38:55:b5:54:6e:38:3a:50:59:92:09:42:fd:11: b2:42:de:b0:bc:07:e4:c1:7e:1d:42:86:75:73:6c: f2:b1:aa:a6:c4:d5:93:74:02:cb:e0:d9:42:25:6f: 81:94:97:ea:eb:dd:02:70:e9:69:a4:0b:a7:b9:92: 93:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:B8:BC:A9:4D:19:09:5B:19:32:C4:89:C4:99:D4:F8:42:69:7A:31 X509v3 Authority Key Identifier: keyid:B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:83:33:10:d3:3c:47:30:1e:c9:6b:71:12:a5:95:0c:79:4c: 59:0d:a2:a4:18:89:36:5f:69:2e:9f:9e:5a:93:75:47:c4:0a: 02:00:a4:34:bc:a2:7d:15:9b:0d:b3:1b:86:1a:ab:63:6d:5c: fe:57:3e:f3:dd:2d:4c:a2:d4:4d:57:f7:07:52:91:f0:c0:b2: 9e:f3:4b:71:63:50:64:00:b0:6e:9c:9b:6f:0f:95:37:26:b1: 79:9f:96:15:a6:dc:89:87:9f:51:4f:21:26:23:4b:65:7e:e6: ab:26:d5:db:3a:48:9d:c4:b3:92:9d:56:ef:b0:39:ab:0f:00: 8d:9c:31:cb:3d:23:9f:1b:5b:9e:ef:54:2a:e9:66:fa:93:81: f9:23:8f:33:b0:96:c8:da:19:5a:57:3f:8a:43:99:6f:1b:2b: 60:5b:c4:97:c5:8a:a4:12:c7:d1:a4:6b:0a:dc:e5:0f:96:06: 7a:b2:9c:ea:d9:72:83:ee:33:b2:a6:9b:0d:b3:8f:d6:a5:25: 44:1b:a5:1b:45:b0:7f:97:16:70:73:fc:7a:ee:db:fa:e1:83: 14:f6:bd:70:6f:d5:1a:f0:eb:93:48:9e:a1:cc:b5:48:47:ce: d4:ac:c9:79:09:9e:b9:1c:2a:35:1b:b5:3b:83:cc:ba:5e:7b: 88:13:05:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYJ52bn+lSM4jghl4BAufQYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYTVkOTk4NjNkYjJlNDliNDRmNmMzMjRlYjA0Mzg4ZmM3 NTE1ZDIwHhcNMjUwNDA2MDcwMTIyWhcNMjUwNDA3MDcwMTIyWjAzMTEwLwYDVQQD EygxMGI4YmNhOTRkMTkwOTViMTkzMmM0ODljNDk5ZDRmODQyNjk3YTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsMutbnf1il6PxFL3znUvc99RoLN yZzmOZHSrAHE9DjpQ90hxDO71kFAYWeY8GC589+fe+6XvlW6/6eWluVVEll5GNx3 bGmeJc41nZchYxErwEWBTIQIxIUvr4JJ54Oz8v7e4a/HAxXOmNqirkKC1vEkSU7t DLoUBbGZaAT4jg8+m3qpVqYS4uKaab/yLw9L7NeFRbevxZyvjvlXRpepSzb7JHwC rEJ2Buxn4gaet7DDBO3RmHiiQDv8veTKkIcAqHkaOFW1VG44OlBZkglC/RGyQt6w vAfkwX4dQoZ1c2zysaqmxNWTdALL4NlCJW+BlJfq690CcOlppAunuZKTBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBC4vKlNGQlbGTLEicSZ1PhCaXoxMB8GA1UdIwQY MBaAFLOl2Zhj2y5JtE9sMk6wQ4j8dRXSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczZYWm1HUGJMa20wVDJ3eVRyQkRpUHgxRmRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8yOWU5YmMtYjE5MC00MDllLTg2YjAt ZWVjNWQ1MGVmYTk0LzEvczZYWm1HUGJMa20wVDJ3eVRyQkRpUHgxRmRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8yOWU5YmMtYjE5MC00MDllLTg2YjAtZWVjNWQ1MGVmYTk0 LzEvczZYWm1HUGJMa20wVDJ3eVRyQkRpUHgxRmRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv4MzENM8 RzAeyWtxEqWVDHlMWQ2ipBiJNl9pLp+eWpN1R8QKAgCkNLyifRWbDbMbhhqrY21c /lc+890tTKLUTVf3B1KR8MCynvNLcWNQZACwbpybbw+VNyaxeZ+WFabciYefUU8h JiNLZX7mqybV2zpIncSzkp1W77A5qw8AjZwxyz0jnxtbnu9UKulm+pOB+SOPM7CW yNoZWlc/ikOZbxsrYFvEl8WKpBLH0aRrCtzlD5YGerKc6tlyg+4zsqabDbOP1qUl RBulG0Wwf5cWcHP8eu7b+uGDFPa9cG/VGvDrk0ieocy1SEfO1KzJeQmeuRwqNRu1 O4PMul57iBMFVw== -----END CERTIFICATE-----Generated at Sun Apr 6 17:21:15 2025 by rpki-client