$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft File: XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft (raw, json) Hash identifier: wd/tbBK0cfvR0bDcZZKyEOxqLnV/PEL77CILgRxWhXE= Subject key identifier: 93:FA:F1:9D:B1:41:4B:4D:87:18:E2:07:A7:AA:F0:E2:09:BE:9F:E0 Authority key identifier: 5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 Certificate issuer: /CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Certificate serial: 01961EEE2103E02A96E6102BE5577C51A013 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft Manifest number: 13C1 Signing time: Thu 10 Apr 2025 09:00:44 +0000 Manifest this update: Thu 10 Apr 2025 09:00:44 +0000 Manifest next update: Fri 11 Apr 2025 09:00:44 +0000 Files and hashes: 1: 3b4Fq6_bIamsudbItbqhSpD_K9w.roa (hash: Vh901Zhx3OCDgeqedfZ/abhYR9Rhwc8dnd6e61mW9to=) 2: DefZ__9RqwjeIQvvIG8DNEtfalk.roa (hash: 8CQeEiGOKVZsA3/HRDhtbloh6zsps5iaRDAh0kwUHcw=) 3: Ks2E1N23FL1JlkaeAWsDQ0VTeMA.roa (hash: t0ikCKjSARWk2IVi/g7K6CXdDGiaZQEnFkAP2udGzsQ=) 4: XD3pFL9Q_FZXp8mNCcZObqRMVXg.roa (hash: g5/ZHa0TuYu8Xziy6YKoSXXXe+7v69Kf3qZJF69vu/k=) 5: XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl (hash: PKkKQIQvoGgMeV2n+Bykh6hD0YQCzs3uLCExNL7iFxg=) 6: XkyRTi83DrHF6W0GS43BmD-TiuE.roa (hash: /3vDH+EU57Ijtwd/m0ZEYJQybxBHrhK4Fu38BBZHM3k=) 7: b4M2RVAScTVc0rLcQWS2TUKBQVg.roa (hash: JAXZVAloSHKdDJuVLx42Yx5DyOaYH17Fr5xV9qxOaFU=) 8: bHywZIpT6KePzqd-y04f9_gubE4.roa (hash: t+U3j3yQlSyR3lx2MZ9I+FTCYrv0GnN+ja0QXS2Zfac=) 9: nxY9K3hs4eW9wiyd2zfVyuMPTZ8.roa (hash: kvygY+cOmoK64hnXWrmGQdyj1Eanlt8CEQUra7ZV1bE=) 10: sKeEH8goKxahgJVyVEdbhgJ7n7Y.roa (hash: uvOsVNDxwiKqJjLFyenb/M2w5Vt3m+sOy2/sHUQrtIc=) 11: w5BxPGkpdUOoj6KfnZEduZETjuE.roa (hash: JPKkhDje+63ounlQ9s1rDQVa+hGWwYxm1Bd6pam4P0o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Apr 2025 09:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:1e:ee:21:03:e0:2a:96:e6:10:2b:e5:57:7c:51:a0:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Validity Not Before: Apr 10 09:00:44 2025 GMT Not After : Apr 11 09:00:44 2025 GMT Subject: CN=93faf19db1414b4d8718e207a7aaf0e209be9fe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d5:00:10:26:be:28:79:13:a9:50:de:b0:82: f6:db:e1:63:6c:c7:79:b5:18:0e:ac:f7:f6:b0:fe: 80:6a:db:a5:71:6b:8a:eb:33:fb:b0:a9:14:02:d0: be:a7:ff:e4:e3:2f:92:5a:fc:c9:3d:df:3e:fb:dd: 96:77:2c:e9:be:77:31:67:42:75:f4:9a:22:12:c0: 40:e5:61:32:1b:8e:ee:38:d3:ef:9d:b5:d0:6c:01: 4f:1d:73:39:a0:25:9e:93:f3:8d:6a:d4:a2:79:02: 71:f3:a3:54:22:14:46:69:76:0e:e7:56:66:b1:a8: 1e:c9:4c:aa:85:33:16:b7:43:bb:ce:81:6d:b0:21: 1c:2e:31:4b:fa:e4:07:c3:da:7c:99:87:61:ad:65: 7e:24:c3:2b:c9:80:05:d4:b2:84:d7:cf:21:6e:48: 71:63:1d:e0:74:f1:ca:fe:7c:0e:97:ed:73:32:4a: ae:c3:f6:af:63:9a:f1:79:95:7f:3c:60:95:7b:9a: 6e:bb:62:b1:c9:94:2e:c3:f9:9a:f0:ca:91:32:f9: 00:1e:1e:56:78:cb:ef:b8:ad:01:7c:47:61:16:c9: 7f:72:e3:1c:92:9c:9a:94:85:16:c3:00:22:76:0e: 74:d4:c0:e0:c0:41:ec:f8:a3:f1:13:d2:f9:e5:03: 88:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:FA:F1:9D:B1:41:4B:4D:87:18:E2:07:A7:AA:F0:E2:09:BE:9F:E0 X509v3 Authority Key Identifier: keyid:5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:ac:a3:06:3a:ea:2b:d9:b4:8d:2e:26:9b:4c:7a:47:87:ee: c2:4c:b4:05:ec:7e:ab:c7:65:53:90:69:93:d0:74:0f:e5:4e: 4e:c8:95:3c:7e:f6:25:b9:0c:a4:f8:16:f7:1e:3b:06:5f:23: 3e:0e:5e:eb:c4:27:5c:33:bf:d9:19:91:d8:a0:fb:a6:f1:37: f5:80:51:c4:9c:a7:9b:bd:4d:da:d0:39:35:c2:cf:98:8f:f0: 1f:a8:ed:a0:bc:67:7e:5a:92:f0:88:87:8a:cf:a2:75:7c:12: d7:c7:1d:32:19:d2:72:71:3a:2d:dc:52:69:ad:32:02:58:4c: fd:7b:97:25:92:ee:d5:29:5b:0d:90:61:50:64:6a:4d:a1:cb: fa:d6:c8:7a:9c:2f:ce:e8:a1:97:25:c7:74:2c:b6:2a:7c:ba: 7d:05:15:d9:f8:4f:f8:45:ee:97:23:b1:51:ac:d9:8c:b0:30: ad:bf:85:0a:f4:12:de:17:f8:a5:41:ac:cc:4f:c7:1e:33:31: eb:ff:4b:63:09:8d:a2:00:fa:d1:e5:e1:45:59:96:42:1e:77: bf:b4:83:b3:00:20:87:bb:f1:57:fd:0b:14:45:e0:87:f8:47: b8:c1:dc:31:89:08:9e:01:eb:d0:0c:2d:a8:05:78:8a:2e:78: d8:63:75:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYe7iED4CqW5hAr5Vd8UaATMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNDAwYWMyMzk2YWUyMjhkMmIyZTU2ZjRiMDY3Mzk5Njkz NzllNDQwHhcNMjUwNDEwMDkwMDQ0WhcNMjUwNDExMDkwMDQ0WjAzMTEwLwYDVQQD Eyg5M2ZhZjE5ZGIxNDE0YjRkODcxOGUyMDdhN2FhZjBlMjA5YmU5ZmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdUAECa+KHkTqVDesIL22+FjbMd5 tRgOrPf2sP6AatulcWuK6zP7sKkUAtC+p//k4y+SWvzJPd8++92WdyzpvncxZ0J1 9JoiEsBA5WEyG47uONPvnbXQbAFPHXM5oCWek/ONatSieQJx86NUIhRGaXYO51Zm sageyUyqhTMWt0O7zoFtsCEcLjFL+uQHw9p8mYdhrWV+JMMryYAF1LKE188hbkhx Yx3gdPHK/nwOl+1zMkquw/avY5rxeZV/PGCVe5puu2KxyZQuw/ma8MqRMvkAHh5W eMvvuK0BfEdhFsl/cuMckpyalIUWwwAidg501MDgwEHs+KPxE9L55QOITQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJP68Z2xQUtNhxjiB6eq8OIJvp/gMB8GA1UdIwQY MBaAFF5ACsI5auIo0rLlb0sGc5lpN55EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYt ZGZlZDEyZjFhMDFlLzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYtZGZlZDEyZjFhMDFl LzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcayjBjrq K9m0jS4mm0x6R4fuwky0Bex+q8dlU5Bpk9B0D+VOTsiVPH72JbkMpPgW9x47Bl8j Pg5e68QnXDO/2RmR2KD7pvE39YBRxJynm71N2tA5NcLPmI/wH6jtoLxnflqS8IiH is+idXwS18cdMhnScnE6LdxSaa0yAlhM/XuXJZLu1SlbDZBhUGRqTaHL+tbIepwv zuihlyXHdCy2Kny6fQUV2fhP+EXulyOxUazZjLAwrb+FCvQS3hf4pUGszE/HHjMx 6/9LYwmNogD60eXhRVmWQh53v7SDswAgh7vxV/0LFEXgh/hHuMHcMYkIngHr0Awt qAV4ii542GN1Hg== -----END CERTIFICATE-----Generated at Thu Apr 10 19:26:02 2025 by rpki-client