$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft File: KXxQjSOzgxW79FtybSIFCkYSe4w.mft (raw, json) Hash identifier: +YI+gD4JEiPVA3F+70c/ZgE5vHO1PxjnwCoa9mhsef4= Subject key identifier: B9:00:AB:6D:4E:6E:1B:66:A3:8B:83:DC:71:E8:4E:AC:93:4F:D4:D6 Authority key identifier: 29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C Certificate issuer: /CN=297c508d23b38315bbf45b726d22050a46127b8c Certificate serial: 019638E4C6A89E62E211DFB0A7F933D5268B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft Manifest number: 14FB Signing time: Tue 15 Apr 2025 10:00:39 +0000 Manifest this update: Tue 15 Apr 2025 10:00:39 +0000 Manifest next update: Wed 16 Apr 2025 10:00:39 +0000 Files and hashes: 1: 6DiazTfSLwiU3nHVXB2_ipX3pSI.roa (hash: GgVQ0c2h8QmAuSALS7AfweuOCzU4KJ/qThY066+SiL8=) 2: F9Dj4BH3DTiBJqZUn9Gq6zuqgzw.roa (hash: PvC6qEA55o/ujVGgT7SwQI1kg6RiKLhNPwSFFwPuR5o=) 3: FM0AOR7qs5ReYOYfvDzPvyeOFF4.roa (hash: pyPxYA6UMvNM4UkCYSW/CeHul7I1PWvfOpcPGXbUI7A=) 4: KXxQjSOzgxW79FtybSIFCkYSe4w.crl (hash: c1UNpEvkT7j/6N8UQwrumRkdQnLSarzyfKLEKPcTo5w=) 5: LzFoDYPr7_0gEjtlfJ6xXw6t_lo.roa (hash: rXfhzDDWrE3BbdIp2NtDgdm3XDSADxRFIs8wy+p88S0=) 6: OPHuyxpO9PisbasiiAKtaHkvxVA.roa (hash: x3Qa5U665mgT3yS3jj1UddNty1CV91Oaf8NDM/bZhaM=) 7: kgi8mKAM2yCVgRH4L9W1E0GBctE.roa (hash: /x/rSNiAHNpL5ZxR6vbLMgxwW3ubNoY4GIMOdVAovVA=) 8: wN-88kHsfZoIQbMbBeQSvFTLUAA.roa (hash: TZn5hV31aDddpb82jvBnOx8ugm4e4LbJg3sHA8zL+QM=) 9: xDp3K5cwdwo-amBn4Z3yMMAdo3Y.roa (hash: eoBx0TZUtOUgkA8rEPSl3wkXkZ2dgXNZBSrXrhwvq14=) 10: zYd_cPkM9NVsX7bTQ07hSv4bWMk.roa (hash: 7m24y9mQHGr+u8/2znCaziY9Qt7M+iB4zeF7KEcBtdg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 16 Apr 2025 08:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:38:e4:c6:a8:9e:62:e2:11:df:b0:a7:f9:33:d5:26:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297c508d23b38315bbf45b726d22050a46127b8c Validity Not Before: Apr 15 10:00:39 2025 GMT Not After : Apr 16 10:00:39 2025 GMT Subject: CN=b900ab6d4e6e1b66a38b83dc71e84eac934fd4d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:41:cf:bc:92:31:15:21:06:cc:5d:84:44:f5: 49:31:a1:62:cf:12:fe:6f:1e:4a:57:7b:74:32:7c: af:6f:2d:bb:69:e4:f9:cc:ec:ca:37:f2:09:5d:cd: 86:ea:b3:c1:1d:a2:49:f0:ba:05:40:da:97:04:96: 99:6a:b3:09:17:74:dd:b1:01:38:c6:ae:cd:c6:79: 8c:9e:73:02:6a:3e:c9:34:d6:36:77:ae:62:da:7a: 64:7c:74:68:17:9f:3e:79:e9:9e:84:dc:6c:61:c9: 92:c6:63:f6:5f:a6:3b:d6:70:05:ae:e4:02:b1:95: 3e:5c:a6:f1:33:d1:65:f9:9c:1d:63:19:21:67:5b: 44:62:4b:eb:21:96:69:87:99:61:e9:9e:f6:38:9b: fc:0f:f1:c5:77:fc:0d:a1:42:52:bc:3c:2c:0a:e9: 7a:20:9f:b7:0f:e2:66:54:2d:aa:d2:42:da:c8:4e: 54:be:70:a7:8f:b8:d8:9f:6b:0e:a6:59:8f:2d:56: 22:a4:bc:12:32:ad:6b:84:62:52:08:a4:d2:6f:84: d7:b0:00:1c:0e:87:d1:29:4f:42:92:d3:f8:ff:bb: 3a:a2:91:4a:6e:e5:bb:90:58:80:48:91:74:49:ed: ac:2e:23:09:27:29:a7:92:30:28:10:3b:33:aa:63: ec:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:00:AB:6D:4E:6E:1B:66:A3:8B:83:DC:71:E8:4E:AC:93:4F:D4:D6 X509v3 Authority Key Identifier: keyid:29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:08:76:40:2e:3e:c6:51:94:a3:89:59:3c:a5:06:88:86:50: 69:d7:7f:95:4e:a0:b9:18:77:1b:1e:85:c1:48:e7:51:aa:74: 10:bd:57:7d:f4:fd:59:e0:18:01:35:e8:b3:05:e6:52:4b:80: 86:9c:0c:07:61:43:d8:b8:7c:19:1e:6e:3e:78:d9:b3:1e:dd: 4c:2d:46:89:f3:b6:72:c0:4a:9a:af:69:a0:f1:f3:60:8a:22: 90:0d:ea:82:45:94:93:91:c8:4f:e4:bd:64:83:c6:95:7b:f1: 65:b2:34:fc:dd:d6:3b:df:c8:fe:f2:7c:3e:15:2a:5d:3b:ed: 0e:bf:f0:0f:63:bd:d9:b1:3a:9c:3f:c3:39:34:79:be:cb:c0: c3:a3:f4:24:b8:4c:df:b3:66:71:0a:95:28:4e:5b:aa:2a:c2: ce:35:4b:29:88:19:ec:89:00:34:74:a2:86:8a:79:9f:1a:a5: 84:dd:05:c0:a2:9f:5c:a3:ca:10:a4:24:ed:22:0e:81:36:ce: 9a:63:94:6d:44:36:e7:8d:b6:4e:50:c3:7a:d1:c0:d2:ae:bb: ea:44:00:ca:f8:69:70:29:8d:56:c4:e3:12:d0:4d:21:b9:37: 2f:3e:b0:1a:8c:31:90:2e:55:be:59:06:2a:f1:f3:ed:82:13: f6:9d:d5:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZY45MaonmLiEd+wp/kz1SaLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2M1MDhkMjNiMzgzMTViYmY0NWI3MjZkMjIwNTBhNDYx MjdiOGMwHhcNMjUwNDE1MTAwMDM5WhcNMjUwNDE2MTAwMDM5WjAzMTEwLwYDVQQD EyhiOTAwYWI2ZDRlNmUxYjY2YTM4YjgzZGM3MWU4NGVhYzkzNGZkNGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kHPvJIxFSEGzF2ERPVJMaFizxL+ bx5KV3t0Mnyvby27aeT5zOzKN/IJXc2G6rPBHaJJ8LoFQNqXBJaZarMJF3TdsQE4 xq7NxnmMnnMCaj7JNNY2d65i2npkfHRoF58+eemehNxsYcmSxmP2X6Y71nAFruQC sZU+XKbxM9Fl+ZwdYxkhZ1tEYkvrIZZph5lh6Z72OJv8D/HFd/wNoUJSvDwsCul6 IJ+3D+JmVC2q0kLayE5UvnCnj7jYn2sOplmPLVYipLwSMq1rhGJSCKTSb4TXsAAc DofRKU9CktP4/7s6opFKbuW7kFiASJF0Se2sLiMJJymnkjAoEDszqmPs9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLkAq21Obhtmo4uD3HHoTqyTT9TWMB8GA1UdIwQY MBaAFCl8UI0js4MVu/Rbcm0iBQpGEnuMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTIt MzZlOWE3OWJkOTUwLzEvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTItMzZlOWE3OWJkOTUw LzEvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkgh2QC4+ xlGUo4lZPKUGiIZQadd/lU6guRh3Gx6FwUjnUap0EL1XffT9WeAYATXoswXmUkuA hpwMB2FD2Lh8GR5uPnjZsx7dTC1GifO2csBKmq9poPHzYIoikA3qgkWUk5HIT+S9 ZIPGlXvxZbI0/N3WO9/I/vJ8PhUqXTvtDr/wD2O92bE6nD/DOTR5vsvAw6P0JLhM 37NmcQqVKE5bqirCzjVLKYgZ7IkANHSihop5nxqlhN0FwKKfXKPKEKQk7SIOgTbO mmOUbUQ25422TlDDetHA0q676kQAyvhpcCmNVsTjEtBNIbk3Lz6wGowxkC5VvlkG KvHz7YIT9p3V5w== -----END CERTIFICATE-----Generated at Tue Apr 15 12:36:11 2025 by rpki-client