$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft File: xoxl5pm1dqsROnm-iCiUjx5swmA.mft (raw, json) Hash identifier: kIHbddVa5yffxx/WgJCgOfJC1vOPoijmtGxHWUMGgWs= Subject key identifier: 5B:86:DF:CD:83:41:46:3C:E4:33:2D:0A:9F:B8:9E:C0:16:54:2D:8E Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260 Certificate serial: 01960565AB64E8626DD8AA01F8686C1B87B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft Manifest number: 14EE Signing time: Sat 05 Apr 2025 10:01:11 +0000 Manifest this update: Sat 05 Apr 2025 10:01:11 +0000 Manifest next update: Sun 06 Apr 2025 10:01:11 +0000 Files and hashes: 1: 1-MSRWSQtqSdDykFqgK028cizJi0.roa (hash: WqD5qb/jOk/ShamzzXPrgMl7YDZhBR7eUlMqzZQm2Dc=) 2: OnXz6WgfuRiDu5-Y3YnMkk3kcO0.roa (hash: zjtP8G1YewfWQQsF2jtG3Q4Y+lx5iFA26+Blbps5UAk=) 3: iSE8VzIXYTA3-dooaxmYWKpS0qo.roa (hash: IeDZRrl6CgL8vBwDH71W6sMJaMN7Vdw8hCmmUYyI5IA=) 4: kV9BaaJp3bhAo4tQDSQdD_KGKA8.roa (hash: f3JiebE8gczSZgpVGp2jkCNZn7S8iorDwX6Di/s1kP8=) 5: nULdL8xjB16vfCp-N77OS9ijtts.roa (hash: Q9emnLmKgjXDvnlXHjQW3LysE+69K7L9y44jhFRbDQI=) 6: n_Up9lnfTJMz-js3Cbgk_K52fyw.roa (hash: ecIKB8OiEWMj8aNDIiv7lS/1mdAO1io7fStA2u1k86M=) 7: pPdITgISwe1ls0n4B9Wg40Ntg08.roa (hash: NBh0wXAnQnIFqGvw4LVqk54dGRKPT/MfixOxmNNyNJU=) 8: q7L_5WyvnyBOLyUjnhDU9nBD9B8.roa (hash: pr1LjoRubfJ5RCqICApgGf7peGcCrhGApgNtsgmVs3Q=) 9: rotm5S1yeVh_byhtZ0TuP8nb1lI.roa (hash: bGH5+ZfT48IjV7Cmls3wXMYIr6+sn0IXhXcbuXsyl58=) 10: xoxl5pm1dqsROnm-iCiUjx5swmA.crl (hash: YSA+IU96ihXWTDBZJXh3iCAWn+ZtVNooTNZBBHvRI2Q=) 11: y4UTVrbv13sP5rGkuwiRwwFMthg.roa (hash: L96Jgm8W9VYPegZ+vaGCTBJpUDWh8fXSkJC40yErhWU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Apr 2025 10:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:05:65:ab:64:e8:62:6d:d8:aa:01:f8:68:6c:1b:87:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260 Validity Not Before: Apr 5 10:01:11 2025 GMT Not After : Apr 6 10:01:11 2025 GMT Subject: CN=5b86dfcd8341463ce4332d0a9fb89ec016542d8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4c:a5:c2:6f:5e:80:f2:42:ea:f5:5f:bd:f1: be:a0:79:93:ae:03:84:34:e5:49:7a:a2:01:a0:f0: 04:36:2b:17:f2:33:52:3a:0d:08:c6:d4:67:9e:5c: a5:95:e6:b0:28:9d:5a:7e:46:d2:ff:c3:20:6e:b7: 03:49:7f:64:c7:23:b9:7a:7f:45:31:df:db:69:49: d2:eb:83:14:46:34:18:fd:67:0d:c6:e9:58:c8:d0: 9d:81:fc:66:63:7b:f9:6d:fe:84:39:54:11:69:2e: 47:e9:22:25:44:4d:c3:d1:64:d8:09:6a:fa:ad:40: e5:a5:ae:d8:d3:c9:df:4e:e7:38:33:70:53:32:85: 07:3e:88:9c:53:25:92:49:12:fc:23:df:17:e9:2a: 9a:ad:b3:2d:ef:d4:f5:09:3b:d6:6b:9b:0f:05:79: fd:d8:00:ad:16:c5:f5:cc:5f:17:cb:0b:ec:45:ef: 78:02:1c:b6:81:df:bb:7f:67:63:b4:a8:1b:0c:51: 1d:5f:78:13:94:5b:84:86:cb:0c:cd:f7:6a:c5:dc: f0:bc:87:d6:bf:6a:14:e7:d7:b6:0b:bc:5a:a5:b1: eb:59:e6:45:10:94:2e:bc:c8:dc:6d:2a:70:e2:b0: 86:9c:fd:83:e6:43:1b:97:d0:fc:35:0c:89:98:cd: e1:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:86:DF:CD:83:41:46:3C:E4:33:2D:0A:9F:B8:9E:C0:16:54:2D:8E X509v3 Authority Key Identifier: keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dc:50:8b:80:20:43:cc:f3:ef:31:9d:87:4b:dd:82:06:26:9a: fa:e6:1e:e1:71:3f:b1:7d:87:fc:75:ee:9a:2b:37:9a:0d:2d: 10:9e:e9:ec:4f:84:af:f0:89:cf:b8:50:8b:a9:89:e9:af:f0: 2f:17:c4:cd:7b:e2:ca:a1:05:28:b9:30:23:a1:3f:19:89:1b: 75:08:bd:06:b1:79:99:aa:e5:a8:08:a5:bc:b5:70:1a:92:98: 4f:fc:e2:27:7c:f7:b9:02:49:53:9d:f5:40:e1:7d:25:1c:6c: 84:fa:06:87:9c:1f:9a:e8:5c:0a:d9:55:03:5e:55:2a:d8:f6: 81:47:73:7c:99:4d:7a:06:e1:5d:69:38:1d:bd:8b:ef:60:95: 9b:cb:24:b8:b6:82:d9:51:34:42:0d:fb:b2:7e:1f:3c:fe:1d: 41:1f:cf:82:99:5d:13:13:8c:53:81:49:5e:69:87:9d:68:5e: 8e:36:a8:77:42:48:35:5b:56:14:6d:f8:5c:0d:5f:06:c8:4e: 21:fe:03:53:fa:5c:ac:98:04:a2:c2:7f:3c:fa:76:4d:50:f5: 8f:7c:ae:20:36:30:27:3b:3f:ae:4c:72:98:d2:b3:9f:9e:7c: 56:d8:13:e9:a8:26:a2:f7:b2:1e:b8:78:31:ab:f6:87:36:55: fb:4a:9d:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYFZatk6GJt2KoB+GhsG4exMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2OGM2NWU2OTliNTc2YWIxMTNhNzliZTg4Mjg5NDhmMWU2 Y2MyNjAwHhcNMjUwNDA1MTAwMTExWhcNMjUwNDA2MTAwMTExWjAzMTEwLwYDVQQD Eyg1Yjg2ZGZjZDgzNDE0NjNjZTQzMzJkMGE5ZmI4OWVjMDE2NTQyZDhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkylwm9egPJC6vVfvfG+oHmTrgOE NOVJeqIBoPAENisX8jNSOg0IxtRnnlylleawKJ1afkbS/8MgbrcDSX9kxyO5en9F Md/baUnS64MURjQY/WcNxulYyNCdgfxmY3v5bf6EOVQRaS5H6SIlRE3D0WTYCWr6 rUDlpa7Y08nfTuc4M3BTMoUHPoicUyWSSRL8I98X6SqarbMt79T1CTvWa5sPBXn9 2ACtFsX1zF8XywvsRe94Ahy2gd+7f2djtKgbDFEdX3gTlFuEhssMzfdqxdzwvIfW v2oU59e2C7xapbHrWeZFEJQuvMjcbSpw4rCGnP2D5kMbl9D8NQyJmM3hawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFuG382DQUY85DMtCp+4nsAWVC2OMB8GA1UdIwQY MBaAFMaMZeaZtXarETp5vogolI8ebMJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYt NjA3ZDRmMzdmNTlmLzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYtNjA3ZDRmMzdmNTlm LzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3FCLgCBD zPPvMZ2HS92CBiaa+uYe4XE/sX2H/HXumis3mg0tEJ7p7E+Er/CJz7hQi6mJ6a/w LxfEzXviyqEFKLkwI6E/GYkbdQi9BrF5marlqAilvLVwGpKYT/ziJ3z3uQJJU531 QOF9JRxshPoGh5wfmuhcCtlVA15VKtj2gUdzfJlNegbhXWk4Hb2L72CVm8skuLaC 2VE0Qg37sn4fPP4dQR/PgpldExOMU4FJXmmHnWhejjaod0JINVtWFG34XA1fBshO If4DU/pcrJgEosJ/PPp2TVD1j3yuIDYwJzs/rkxymNKzn558VtgT6agmoveyHrh4 Mav2hzZV+0qd5A== -----END CERTIFICATE-----Generated at Sat Apr 5 16:47:10 2025 by rpki-client