$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.mft File: kvSxwL-61GuBHu5Wihj7qhSp1oc.mft (raw, json) Hash identifier: uCbEYKUF+hafxot9s4u+pF4ab6q9g/xpS8X7LQkS0Zg= Subject key identifier: F7:E2:47:24:8C:F3:6A:DC:44:FD:81:55:15:7A:40:63:CF:43:69:3C Authority key identifier: 92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87 Certificate issuer: /CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687 Certificate serial: 01964AB44A7C550475A781D611BB371ED23C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.mft Manifest number: 14FC Signing time: Fri 18 Apr 2025 21:00:51 +0000 Manifest this update: Fri 18 Apr 2025 21:00:51 +0000 Manifest next update: Sat 19 Apr 2025 21:00:51 +0000 Files and hashes: 1: 0BEzsazQz-3-fzZOXUBzFR9-SEA.roa (hash: xJdvyBzFJCzDNWN1w4SpJl++kA85g2jY9KiUG4fQa2E=) 2: 1-Oq1-4hF4yCcXZpsJGDusj_hVz4.roa (hash: OUB6/BRumx2Zsh75d5vBwXiCTv8Msk13LqoxzZruX1k=) 3: 8tP5koea75iLq4fzJTwOilUzRew.roa (hash: nuWcmB+t6L5mbRuVr1gjXyaKkJjO2CWP61eKOZ9j5qA=) 4: Q39EicWKCAbcPFSCPOWxVuicNBs.roa (hash: xkLxxvpElKUg8h/PAkiiPnxY3jd1NXP1Ti2bF3eI0Qw=) 5: YTyyNdEqtE7TLFnb5kSYtSXQ6C0.roa (hash: 5KsxEGAO2miZS2qYCAKx62LCPIMduhWMuoqvvhKuiRU=) 6: d8pyP86Y6uwqz1d9ZUqrw3D4VrQ.roa (hash: rdq5z21gij6clSNE/4yKomwJ24Ycc5gYpA5zAtS7MBw=) 7: hLpPT363pnl477GGqc5nq4BfcT0.roa (hash: BX64RFEmiS7zTWdQnQw6dnEj3jYNCJBQmKLpW7F/EpQ=) 8: jNmr_uA5Ik1ev1kitS3H0XRfSs0.roa (hash: MWQMJNqYJOs+qGkZcyXQIyfm7wzm6V1fSmAClA7kRpk=) 9: kvSxwL-61GuBHu5Wihj7qhSp1oc.crl (hash: vVkq/YK0kjwv2+D5/Dh9CGb/c4gKk2i56CPTamYswtg=) 10: o53Asxejm11sb8YF2NlsCql1ybY.roa (hash: F+bQ4Enys65hQ07aHbKIp+uPwSt+gBE59SdxChGuPUY=) 11: tCAzKxpLrkmFMZR4RRCQd9p1ADo.roa (hash: SCXqn9Sk4hWHzAcns5LvAAZM9YZ7kblGiEWX7nVj190=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.crl rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.mft rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Apr 2025 14:20:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:4a:b4:4a:7c:55:04:75:a7:81:d6:11:bb:37:1e:d2:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687 Validity Not Before: Apr 18 21:00:51 2025 GMT Not After : Apr 19 21:00:51 2025 GMT Subject: CN=f7e247248cf36adc44fd8155157a4063cf43693c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:26:47:34:38:2b:af:66:2f:ec:26:06:ba:94: dd:99:c3:91:ed:07:02:5d:46:79:92:2d:57:31:50: 42:b5:d5:60:8f:bc:1f:29:d6:48:78:e2:e8:5b:ed: 8c:3d:6f:02:b6:3d:6c:36:f0:93:08:91:4a:43:05: 28:c4:1c:60:ec:3f:3c:1c:04:13:61:fc:bb:d7:3e: 2e:99:16:ba:58:c7:9a:27:5a:aa:39:0f:94:87:8e: 77:d4:a7:a2:16:a2:c2:68:e3:ae:d9:a3:49:22:c4: a3:31:17:9f:25:1b:5d:55:8b:3d:7c:96:b6:80:29: b7:36:e4:f5:32:94:33:60:cf:19:89:dd:82:37:ba: 37:01:0e:be:06:bf:4e:10:28:4f:6f:30:47:f8:70: 07:ac:de:0f:15:1c:e9:e3:7d:e0:00:b9:03:3b:09: a4:87:cd:ee:5a:1e:48:73:9c:1e:01:b5:0c:e5:4c: 0a:88:78:8c:2f:d0:e3:46:73:fa:dd:10:b1:81:0a: 18:72:5a:e4:37:9f:ec:eb:aa:19:e1:66:1d:7b:12: a3:05:a0:2c:7a:0b:f0:67:fb:ae:f9:5a:e9:0b:84: 13:25:61:36:7c:1c:a2:60:22:ca:bd:64:74:0b:c5: 3a:b0:94:80:5e:bb:0a:d2:34:91:6f:17:41:72:99: 20:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:E2:47:24:8C:F3:6A:DC:44:FD:81:55:15:7A:40:63:CF:43:69:3C X509v3 Authority Key Identifier: keyid:92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:7f:5c:aa:b2:9d:c9:93:a2:0c:6f:63:60:b4:f9:7a:cb:23: ca:56:c6:74:07:e0:50:e1:87:fb:99:86:c9:76:ce:f5:28:fb: d2:24:58:55:eb:3f:83:3d:5e:7c:16:58:d4:6e:de:2e:bd:aa: 60:6e:6d:43:5e:56:5b:d4:05:cc:95:61:6c:a4:87:0d:c2:e9: 88:ec:49:49:5f:52:5e:cd:c3:65:3c:56:2b:14:5e:95:11:28: 74:0c:53:a9:7c:b9:de:3c:38:cc:d9:82:e1:67:be:50:f2:83: 49:78:f3:6e:4e:ab:41:f7:9a:79:cf:81:d4:6d:bb:7c:b6:70: dc:ba:1e:a6:74:f5:ff:f0:65:7a:2c:6f:e0:11:7e:81:c2:6b: d8:af:ec:f0:eb:9f:2c:14:3e:c7:c0:62:6a:4c:f6:73:52:22: 6d:9f:68:2a:35:bf:96:b4:99:ff:ab:b3:54:8a:51:22:9d:65: c0:cc:f4:41:76:a7:40:2b:e4:78:af:80:13:c0:15:ee:2c:70: 6e:a4:c8:20:76:79:72:21:44:e1:a1:59:bf:5c:e6:92:ef:96: 0e:e1:c4:0c:0d:83:ba:5a:a3:fd:b4:ba:b4:a7:84:84:15:6b: da:f3:26:89:a9:62:88:6c:d7:99:c3:e9:3b:b7:38:8e:c0:ec: 88:07:48:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZKtEp8VQR1p4HWEbs3HtI8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZjRiMWMwYmZiYWQ0NmI4MTFlZWU1NjhhMThmYmFhMTRh OWQ2ODcwHhcNMjUwNDE4MjEwMDUxWhcNMjUwNDE5MjEwMDUxWjAzMTEwLwYDVQQD EyhmN2UyNDcyNDhjZjM2YWRjNDRmZDgxNTUxNTdhNDA2M2NmNDM2OTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSZHNDgrr2Yv7CYGupTdmcOR7QcC XUZ5ki1XMVBCtdVgj7wfKdZIeOLoW+2MPW8Ctj1sNvCTCJFKQwUoxBxg7D88HAQT Yfy71z4umRa6WMeaJ1qqOQ+Uh4531KeiFqLCaOOu2aNJIsSjMRefJRtdVYs9fJa2 gCm3NuT1MpQzYM8Zid2CN7o3AQ6+Br9OEChPbzBH+HAHrN4PFRzp433gALkDOwmk h83uWh5Ic5weAbUM5UwKiHiML9DjRnP63RCxgQoYclrkN5/s66oZ4WYdexKjBaAs egvwZ/uu+VrpC4QTJWE2fByiYCLKvWR0C8U6sJSAXrsK0jSRbxdBcpkgHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPfiRySM82rcRP2BVRV6QGPPQ2k8MB8GA1UdIwQY MBaAFJL0scC/utRrgR7uVooY+6oUqdaHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3ZTeHdMLTYxR3VCSHU1V2loajdxaFNwMW9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi80Zjg1MTQtMmUyMC00OTM1LTk5NWMt YTA4NGY3NmM4ZTJiLzEva3ZTeHdMLTYxR3VCSHU1V2loajdxaFNwMW9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi80Zjg1MTQtMmUyMC00OTM1LTk5NWMtYTA4NGY3NmM4ZTJi LzEva3ZTeHdMLTYxR3VCSHU1V2loajdxaFNwMW9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY39cqrKd yZOiDG9jYLT5essjylbGdAfgUOGH+5mGyXbO9Sj70iRYVes/gz1efBZY1G7eLr2q YG5tQ15WW9QFzJVhbKSHDcLpiOxJSV9SXs3DZTxWKxRelREodAxTqXy53jw4zNmC 4We+UPKDSXjzbk6rQfeaec+B1G27fLZw3LoepnT1//Bleixv4BF+gcJr2K/s8Ouf LBQ+x8Biakz2c1IibZ9oKjW/lrSZ/6uzVIpRIp1lwMz0QXanQCvkeK+AE8AV7ixw bqTIIHZ5ciFE4aFZv1zmku+WDuHEDA2Dulqj/bS6tKeEhBVr2vMmialiiGzXmcPp O7c4jsDsiAdILQ== -----END CERTIFICATE-----Generated at Sat Apr 19 00:02:35 2025 by rpki-client