$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft File: Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft (raw, json) Hash identifier: gYaMN3ADrKbqQrzJt8g8xJFkq0ZtUNCfflB8hatkans= Subject key identifier: C5:89:2E:1A:E6:3B:7B:CE:72:39:7A:9E:3C:01:D8:21:58:ED:07:7C Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Certificate serial: 01960AC36E29C90FEE8123A292456792E447 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft Manifest number: 0D33 Signing time: Sun 06 Apr 2025 11:01:41 +0000 Manifest this update: Sun 06 Apr 2025 11:01:41 +0000 Manifest next update: Mon 07 Apr 2025 11:01:41 +0000 Files and hashes: 1: 5B4j8yKBhhDvEBdgU40qsGaWwrs.roa (hash: 5SNJTgM1hkc04DigOXVBPbCaLDFxKR5EdZH2q32FFl0=) 2: 5cshQDWiETJPEPkneLCI83DOyB8.roa (hash: LIJ1tw2uisCtRY2n9m+RNwJ+29+O3wio1q6NVdwtWkg=) 3: 8bhH-obTN3_XZdA3ZY4qEnKs6C0.roa (hash: 9hCqmB2340c+JsCnzCqxOHtXSX9acHBMNsYdRmzUUeg=) 4: A8RTU3pbGtIgr6vqM6RgMhjB6S4.roa (hash: CblthdeWJ0lL4bSVOXyipIfCv+fQM/AOSVpBlIGAJ0A=) 5: BIlQDTjBunsd7fPXD6TudWu_EEU.roa (hash: sGVBCV/UPx9VtvJuhPB1KSdcfg28Ma7r663EM0juNak=) 6: DGYTbW9Ir9KMBgCraqJM7GTIy4A.roa (hash: Mirl8dOytZmD+kKVHs6j2ofk7bwQ7qZrvcazoL5oyCw=) 7: HvYUm5LP2S0LXXYX-humbutnuI8.roa (hash: 4/iqtYVYllKBFPX1CqHXtWzhqM/KxGDaEeavinI0Y1o=) 8: NeeW1a3OUAE3Ua5ADXdv_S3lRQE.roa (hash: 33Cf2uaphAIB6YphxBLYGntEtiim3urfAS0w6mYeqhc=) 9: OoiR-n17kDohxKF4sG9PntPgQTs.roa (hash: Iy2iaD3knFRFm0z6lgIQYM+wnzj2MJQzp2rtlFberlM=) 10: WTb_e2ZbT1RhFs5jURahaZTbmG0.roa (hash: RbcCcF3mnkJdbE+uWey3rc4Y6DxWA7ai6ZTi1IMVv6k=) 11: X5-V0n6yN80zazhfKC-inEW3Q-g.roa (hash: ltmVmMUB0Wliy/gqDGqir6t9HKhl/Si7s3Wu5L76zuU=) 12: Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl (hash: 48qmJPP8O3t9HrCVVpsw914EVys6PfASHCsDGcZ1bq0=) 13: ZtIwmuJqF0ZJ2jJC2j2S68PxD6g.roa (hash: J37V1vpVdCUFrybWRqqYzjxV2+eOckvx6e6zW0T0izc=) 14: j3n-07vfKdngr7KWusBdYHtWkLA.roa (hash: I8Nyhvl9JRJ5QuyqTJAc18Z1FU3Ux5OLZnkQZ2v4dfQ=) 15: l8DcSRXFPtOCGlsZCUBXnaf6a7I.roa (hash: hui8mde2TbmU6i9u4385N80g/774iLQTBRSp8Z4JYWM=) 16: v3oEPR4WomMgLDVCPkxLfJ5Enhg.roa (hash: u3MuUfvclTAjmi8s1goH67RIHnHHg6KiQbDjeAC9CsU=) 17: xy00-4E9Mqq62hzn1xqDlknBsTc.roa (hash: rokzKmpgrbDasipoU76trp9dI5gMiW8lAlIT8cg6ZKE=) 18: yO_LKS3YNsNgJRvGl0cMzupJ0w4.roa (hash: EWK0TzEQAkMC45IBHaxXqenmmaQ9qqJ8lOmSyj9LXKw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 07 Apr 2025 07:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:0a:c3:6e:29:c9:0f:ee:81:23:a2:92:45:67:92:e4:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Validity Not Before: Apr 6 11:01:41 2025 GMT Not After : Apr 7 11:01:41 2025 GMT Subject: CN=c5892e1ae63b7bce72397a9e3c01d82158ed077c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:75:b2:95:01:72:91:a1:a5:57:5f:c4:dd:09: 25:82:ec:bc:c1:87:1d:bb:28:5f:01:64:9f:38:6b: c0:48:9a:59:0c:19:74:ed:80:82:8d:cc:28:56:2f: e5:45:5d:c7:1d:64:8d:29:12:8d:61:c1:3d:06:2c: ff:5b:ac:76:12:30:5b:a9:9d:23:14:c1:57:1d:f4: cc:69:0e:92:a7:71:21:4b:82:2e:87:9e:b4:d3:c5: 9f:32:b7:65:cb:de:59:b2:c2:10:19:a7:3b:ef:31: 6c:87:15:6d:ad:c6:92:f1:79:98:bb:9b:80:4f:97: 32:45:2d:5a:7b:41:07:d9:67:69:f7:83:19:62:92: 3f:c8:d7:c2:a4:72:f2:89:be:af:f9:88:ad:f1:0d: 0e:12:28:7e:8b:f3:83:98:18:c8:37:78:7e:c5:68: 6e:aa:48:56:8e:51:c2:3f:c7:31:55:01:72:9b:c3: c4:65:85:6e:f9:64:f3:26:4d:00:f0:9f:45:4d:a2: f3:2b:e3:1b:37:1b:97:fe:ab:b3:83:91:95:a2:9a: 3f:2c:a9:eb:53:52:07:c1:a0:d2:5d:4f:87:a9:ee: 8f:d0:b4:ff:5c:13:b1:52:bc:a0:10:87:9a:f3:80: a3:92:0f:a4:d6:29:9c:48:2a:71:15:99:97:a1:c1: 99:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:89:2E:1A:E6:3B:7B:CE:72:39:7A:9E:3C:01:D8:21:58:ED:07:7C X509v3 Authority Key Identifier: keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:20:ce:1d:9a:19:c9:3b:ad:55:de:48:60:b1:37:07:34:1b: 0d:7d:be:43:03:02:e9:d9:74:e3:e5:73:4c:85:5b:c8:d1:1f: 3b:e3:e6:db:10:c5:50:75:be:85:74:2c:89:7f:02:80:34:60: 23:7a:fe:04:13:54:54:40:42:aa:5d:db:ff:2b:de:84:76:d5: f4:7f:f6:c6:52:b8:00:1a:d2:ab:fd:70:a3:e6:5e:9d:77:2b: a8:ca:15:b4:fe:9b:70:c8:38:2e:d5:bc:a6:db:3c:98:8c:b5: a6:55:09:69:f3:61:d6:b6:d7:98:88:bc:ee:e7:32:24:58:17: 4b:b3:02:14:3e:dd:d6:1e:14:aa:72:a7:20:e7:62:28:11:90: 91:82:2a:32:6e:23:2e:af:38:b3:bd:a4:d5:d6:ef:6b:17:16: 02:25:3a:33:a8:d4:58:6d:e0:5d:03:70:b2:19:14:9a:b2:c8: 7b:0d:8d:1d:65:91:51:38:dc:c2:ee:c6:96:eb:ad:b7:8a:f8: 23:9d:17:27:2a:f1:64:ec:d1:c6:3d:73:9e:0e:f3:8c:5f:cf: 3a:f1:ee:07:0a:ae:5e:06:dc:46:91:81:8a:d4:cc:b8:ac:64: 74:d4:77:aa:d0:0e:48:31:78:85:ea:19:8b:49:52:27:8c:c7: 5d:20:d3:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYKw24pyQ/ugSOikkVnkuRHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMGZmOGFhZjc0NTMxMTQxNDcwMjhkNTRhZTFjNjkzYThh MTQ3YmMwHhcNMjUwNDA2MTEwMTQxWhcNMjUwNDA3MTEwMTQxWjAzMTEwLwYDVQQD EyhjNTg5MmUxYWU2M2I3YmNlNzIzOTdhOWUzYzAxZDgyMTU4ZWQwNzdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3WylQFykaGlV1/E3Qklguy8wYcd uyhfAWSfOGvASJpZDBl07YCCjcwoVi/lRV3HHWSNKRKNYcE9Biz/W6x2EjBbqZ0j FMFXHfTMaQ6Sp3EhS4Iuh56008WfMrdly95ZssIQGac77zFshxVtrcaS8XmYu5uA T5cyRS1ae0EH2Wdp94MZYpI/yNfCpHLyib6v+Yit8Q0OEih+i/ODmBjIN3h+xWhu qkhWjlHCP8cxVQFym8PEZYVu+WTzJk0A8J9FTaLzK+MbNxuX/quzg5GVopo/LKnr U1IHwaDSXU+Hqe6P0LT/XBOxUrygEIea84Cjkg+k1imcSCpxFZmXocGZqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMWJLhrmO3vOcjl6njwB2CFY7Qd8MB8GA1UdIwQY MBaAFF4P+Kr3RTEUFHAo1UrhxpOooUe8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEt ZDg3MjEzNzU2NDRhLzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEtZDg3MjEzNzU2NDRh LzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdCDOHZoZ yTutVd5IYLE3BzQbDX2+QwMC6dl04+VzTIVbyNEfO+Pm2xDFUHW+hXQsiX8CgDRg I3r+BBNUVEBCql3b/yvehHbV9H/2xlK4ABrSq/1wo+ZenXcrqMoVtP6bcMg4LtW8 pts8mIy1plUJafNh1rbXmIi87ucyJFgXS7MCFD7d1h4UqnKnIOdiKBGQkYIqMm4j Lq84s72k1dbvaxcWAiU6M6jUWG3gXQNwshkUmrLIew2NHWWRUTjcwu7Gluutt4r4 I50XJyrxZOzRxj1zng7zjF/POvHuBwquXgbcRpGBitTMuKxkdNR3qtAOSDF4heoZ i0lSJ4zHXSDTzA== -----END CERTIFICATE-----Generated at Sun Apr 6 13:46:37 2025 by rpki-client