$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.mft File: XaQypOw7CsTKTk7OwOn01GtJevA.mft (raw, json) Hash identifier: r/rwQcDOxk4r1CMrxxIVPGDRkcCWcK14qYsL6jGXbGg= Subject key identifier: BC:F8:A8:67:1B:17:54:9D:A3:15:56:A0:16:46:7F:DA:96:94:49:3F Authority key identifier: 5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0 Certificate issuer: /CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0 Certificate serial: 019644E8AD1DB82C9A0436BE9429FCD0C026 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.mft Manifest number: 150C Signing time: Thu 17 Apr 2025 18:00:21 +0000 Manifest this update: Thu 17 Apr 2025 18:00:21 +0000 Manifest next update: Fri 18 Apr 2025 18:00:21 +0000 Files and hashes: 1: 0Je5Z-nMCx0Zkd418v5HueEhd54.roa (hash: pEX7Z7nPaiJOWyIs9b/nPIQ3gi19xivW2mZ533J3DJo=) 2: 14hghSYuKbF7DLMEPWygMHVGP7A.roa (hash: +lIfYCGzEu7fKfBEKYs45/U/OMBrFfQnzzBOsngrbkg=) 3: 7wCIILVV_KizMvEXiqEvvxC6Jr4.roa (hash: QBaOmpq6h8G9bZnJd7hH6tV1LQuldiouVWbU53bSAF8=) 4: NX-lJMVuq0hFJuXhiTDNigiTMiI.roa (hash: 32i5zz/HrQnOcYVXyjhBgA5WXVmw5qyUgDPkRo/rTuU=) 5: PCD0p_UNZon9aCxoq1egSeAnxBA.roa (hash: i0uT3nEejd+UeJVQ6gjyXxFUUCw66ysdAWzGYAGx+Mk=) 6: PYemKJWEUk-HkJO5Mj9UiDiPJ_4.roa (hash: QhKEDEG5e1WSPoJeyCcT8wLZHkvtF03JkUepmJw6Zxw=) 7: Rr0zbCWANGdldNBvrAd88RpS1U4.roa (hash: 9No9czOGF999cDISmqzMXCL5W1XMeYJzBnZLfRLwac4=) 8: Vl_3r99z42NwQ-24ZhXRiYXhqjY.roa (hash: GXmfSPtN6tufP5/kLCHIzO4q0RbIH3Sr/fl4Xj29EAo=) 9: WZNFgwpO480t4avTSei-zYnVVOY.roa (hash: 373H0BKFYtzTiKGrZaryv56z6bhznrJd/cnBel6rbT0=) 10: XaQypOw7CsTKTk7OwOn01GtJevA.crl (hash: fibZHoLMKSje3Fd79FY9Tl1oCqdcSYOcFaHC3WtLyzM=) 11: _uatClMcwC0uM9W8YXO5Qitmm-A.roa (hash: k5ie8fXmVl+ckXH05aUk9WqiZ3RnKPMqOUpy2XuoG7w=) 12: aHlGWauXADsFIjPBDWSnc29nHv8.roa (hash: y3CvDF1nTLBg2ldBPSyHCPUtAaI+qzww7+4uWAz8ztY=) 13: ea0vEI_fGMyg1jPZV-hKH8IC-2Q.roa (hash: lMsvTL1IJXE7hi4D1D2VQP7nQy14aHmJmR8i7R04mRU=) 14: sZ40szF_81b8iZ343Q6aVpk7QZc.roa (hash: ieSiCVj+T4ruST7AZXMVQI1ECh5LKhbuRyks+nO6HIc=) 15: xf4c83s9BhHDRES5-deoHo90fx8.roa (hash: Nc+I2Laa6OeGUM7r8e6LlLMHSt+btJK/FMAVLnkCxPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.crl rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.mft rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 18 Apr 2025 16:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:44:e8:ad:1d:b8:2c:9a:04:36:be:94:29:fc:d0:c0:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0 Validity Not Before: Apr 17 18:00:21 2025 GMT Not After : Apr 18 18:00:21 2025 GMT Subject: CN=bcf8a8671b17549da31556a016467fda9694493f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ea:3e:dd:c2:61:6b:80:3c:53:99:2a:4d:a4: a8:98:78:1c:f3:f8:2d:44:20:02:3a:e5:3d:eb:9b: 3a:52:25:90:25:26:2c:43:0f:4b:06:65:2a:37:a6: 3a:18:03:8e:26:57:a4:72:6a:11:38:d1:c1:7a:f4: 98:f9:02:6f:3b:d2:cd:50:cf:ae:99:e6:b4:63:02: 94:38:41:f9:eb:6a:a4:ba:4d:4b:73:3e:ed:d4:31: 06:20:64:35:db:03:9f:f9:09:ce:7a:e2:d3:d3:e4: a3:39:fd:74:9b:8d:d9:74:ae:0b:33:32:bb:e4:ab: 8e:1e:35:28:44:5b:f6:69:2e:1a:25:8f:3b:36:61: b4:3b:97:84:d0:20:46:8a:7f:08:08:4c:fb:c7:a3: 3d:bf:31:da:41:1c:0e:dd:a1:b6:e4:08:a3:aa:ad: 31:2d:21:ce:92:b5:41:e3:cd:71:b2:2d:14:5b:16: 7e:74:db:c7:7c:bd:f0:73:aa:ca:1f:08:7d:ef:c9: 62:05:b0:b8:25:97:db:c0:06:82:b4:30:a1:dc:dc: 71:5b:f2:7f:ce:e7:5b:6b:49:07:87:97:83:d9:df: 81:12:ef:06:80:bc:4a:86:f9:bb:d2:37:ca:7a:18: e4:d5:5c:6a:36:4f:7a:09:97:90:06:be:ab:e8:31: 3e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:F8:A8:67:1B:17:54:9D:A3:15:56:A0:16:46:7F:DA:96:94:49:3F X509v3 Authority Key Identifier: keyid:5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:78:b6:73:d7:24:97:d8:f9:37:f3:74:d5:69:5c:54:f1:2a: d7:96:46:28:44:f7:fb:dd:af:94:c0:a9:e4:97:0f:c1:31:2a: 05:35:72:d4:d3:5e:a7:06:03:31:97:8f:da:77:55:67:7c:61: d0:2e:f8:69:a7:f8:8c:c6:d3:97:f4:c1:da:24:22:50:91:20: 78:96:0a:2f:2d:3e:c5:2d:47:ea:46:29:16:df:7e:48:37:13: 3a:0f:62:4c:b7:5d:c9:77:41:9e:3e:92:dc:0e:5c:49:a2:aa: a6:d4:18:b6:e5:8a:b3:08:f2:9c:31:ca:4c:be:26:29:32:2b: 28:d1:61:21:68:88:15:6d:ad:0a:17:5d:17:24:f2:a1:71:60: dd:1f:1e:75:f5:61:bf:52:e4:2d:b1:42:30:47:96:e0:fa:4c: fa:26:98:65:17:45:cd:2f:fa:b5:d0:fa:0c:62:c1:1b:4b:12: e4:c3:b3:7c:d4:41:56:98:5f:30:36:0f:2e:3b:36:d9:db:6d: a6:b5:01:95:72:fc:bd:fb:5b:21:c4:5d:81:2f:22:d7:8b:94: 8a:5e:f2:79:78:65:22:c3:22:48:8d:d6:37:48:93:8b:ff:f4: a4:8b:bd:52:a2:b3:b1:60:09:fd:26:4a:b8:4d:e5:42:ab:c0: 24:a9:0e:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZE6K0duCyaBDa+lCn80MAmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkYTQzMmE0ZWMzYjBhYzRjYTRlNGVjZWMwZTlmNGQ0NmI0 OTdhZjAwHhcNMjUwNDE3MTgwMDIxWhcNMjUwNDE4MTgwMDIxWjAzMTEwLwYDVQQD EyhiY2Y4YTg2NzFiMTc1NDlkYTMxNTU2YTAxNjQ2N2ZkYTk2OTQ0OTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Oo+3cJha4A8U5kqTaSomHgc8/gt RCACOuU965s6UiWQJSYsQw9LBmUqN6Y6GAOOJlekcmoRONHBevSY+QJvO9LNUM+u mea0YwKUOEH562qkuk1Lcz7t1DEGIGQ12wOf+QnOeuLT0+SjOf10m43ZdK4LMzK7 5KuOHjUoRFv2aS4aJY87NmG0O5eE0CBGin8ICEz7x6M9vzHaQRwO3aG25Aijqq0x LSHOkrVB481xsi0UWxZ+dNvHfL3wc6rKHwh978liBbC4JZfbwAaCtDCh3NxxW/J/ zudba0kHh5eD2d+BEu8GgLxKhvm70jfKehjk1VxqNk96CZeQBr6r6DE+rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLz4qGcbF1SdoxVWoBZGf9qWlEk/MB8GA1UdIwQY MBaAFF2kMqTsOwrEyk5OzsDp9NRrSXrwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGFReXBPdzdDc1RLVGs3T3dPbjAxR3RKZXZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85ZTg0N2YtNDE0Ni00NTY2LThjM2Ut MWJhNTQzZWVhZWQ3LzEvWGFReXBPdzdDc1RLVGs3T3dPbjAxR3RKZXZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85ZTg0N2YtNDE0Ni00NTY2LThjM2UtMWJhNTQzZWVhZWQ3 LzEvWGFReXBPdzdDc1RLVGs3T3dPbjAxR3RKZXZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATXi2c9ck l9j5N/N01WlcVPEq15ZGKET3+92vlMCp5JcPwTEqBTVy1NNepwYDMZeP2ndVZ3xh 0C74aaf4jMbTl/TB2iQiUJEgeJYKLy0+xS1H6kYpFt9+SDcTOg9iTLddyXdBnj6S 3A5cSaKqptQYtuWKswjynDHKTL4mKTIrKNFhIWiIFW2tChddFyTyoXFg3R8edfVh v1LkLbFCMEeW4PpM+iaYZRdFzS/6tdD6DGLBG0sS5MOzfNRBVphfMDYPLjs22dtt prUBlXL8vftbIcRdgS8i14uUil7yeXhlIsMiSI3WN0iTi//0pIu9UqKzsWAJ/SZK uE3lQqvAJKkOyQ== -----END CERTIFICATE-----Generated at Thu Apr 17 22:55:23 2025 by rpki-client