$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft File: nLJc5VDk2b2gW9XUXItro3Qwu7o.mft (raw, json) Hash identifier: NEkW9wVT6cTf5TGBdnVN9od2ksfTHoo+9x35Nj/Dbdw= Subject key identifier: 13:CC:76:5F:18:0C:6D:64:03:0A:B8:96:15:C1:8D:E6:41:14:9A:2F Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA Certificate issuer: /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Certificate serial: 01960867401B39311B4DEB2CEBAE9CB9C647 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft Manifest number: 0EA3 Signing time: Sun 06 Apr 2025 00:01:46 +0000 Manifest this update: Sun 06 Apr 2025 00:01:46 +0000 Manifest next update: Mon 07 Apr 2025 00:01:46 +0000 Files and hashes: 1: 5twkGWnpZ3caWcoF0F7nZ3MnxRQ.roa (hash: Hj9ctK8yUmftQlZpCOc5gcL4pBH+76rKw29EPYTV1fY=) 2: 6t_-rwl5vkceJUl9xfuErIgk5XQ.roa (hash: UgA7/ParQEm4RUB+nS1eICM0VcT/VJB2T/2XjYuyjiU=) 3: CcOTWwBfhnDK4i-Cl6vgTQ1Ne6Q.roa (hash: 0gfOeo67IeexaN6S4XXz6/wYaUsrA1sXsSwqEGJjGB8=) 4: Kkr4WQTbiLrBJjIFNHmfQjqdMFs.roa (hash: AX2E33mALAyiSH2uL+jaoucILuyqIMUcyM5PTXw0LYA=) 5: XDROFBDLzXZk58Wa7Gj_bxIFP24.roa (hash: oEZB4Wy5f3UZqEPOPaZ8r51Wy4lzW93yWdCW8EWeAw0=) 6: fsRjNoJDy9POHF18ZkBOzQiMl94.roa (hash: pTBEz/UhwNCD7057vDv5QDiSVRnDRK75JX++XfB+B70=) 7: l0gHM8GvVK6QwtZ12bJdUWZyAgA.roa (hash: EQ1dP2YRTk2eZV0a40sNzCpIDgU0CGJQGOvWRKK6OaU=) 8: lIqtXZgZb6FK3xchEu_KzpPH9HY.roa (hash: EF/nDh6v7FHlrVK+Jno0NvRyT9dpjTxvni+KKTpPgho=) 9: nLJc5VDk2b2gW9XUXItro3Qwu7o.crl (hash: 7bwfEMa+wCuCqS+UgmJrE6ZBakQW4ahB/iVEcG/TI7E=) 10: uHCer9bSYtAYzAW97IkYAtxT0oY.roa (hash: pEZrL5HUVwpESwP8P9Avj4b8s7dLWZdI+MAnQfTy42g=) 11: zLYfKKvwZksRC-Mec9uQxezCf-I.roa (hash: 7jSn1GJtzfCE3yqBQcJd/SMTsqwM51FfYe/cCLi5Z4A=) 12: zS2PBrD2vmlXLTrGFHERr-Tg3sM.roa (hash: ZKfnpYOgYarKcHUc2HZAGzDoCt3IGKzpVqNwP6NLT/8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Apr 2025 23:34:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:08:67:40:1b:39:31:1b:4d:eb:2c:eb:ae:9c:b9:c6:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Validity Not Before: Apr 6 00:01:46 2025 GMT Not After : Apr 7 00:01:46 2025 GMT Subject: CN=13cc765f180c6d64030ab89615c18de641149a2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:57:71:c6:0c:2d:f4:4e:1f:b4:bc:17:84:ae: d4:c5:05:94:71:33:91:b8:95:0e:63:75:42:02:f0: 00:a4:8a:a0:8b:11:7c:ee:d6:47:fb:61:2f:87:01: c5:20:32:6c:73:fd:f4:d0:f7:3c:93:06:28:78:0e: 82:63:90:4c:ef:23:9f:b3:d7:85:bb:fd:cb:f0:dc: 14:08:5a:d7:d8:14:fd:41:e8:84:db:70:bb:3e:ec: c4:c8:27:46:c2:dc:1f:fe:98:84:e2:d3:af:72:c9: 17:0c:c3:7a:49:83:9a:8a:b7:d9:c0:c5:0c:cb:5d: c0:2f:ae:dc:64:25:9b:da:cb:75:8c:8b:ac:0a:0d: 70:42:fb:63:cb:77:3c:a5:98:20:2c:f3:59:6d:09: a4:41:ee:20:0b:ac:c0:70:ba:7d:f1:8a:ee:9c:18: ee:63:ac:68:e5:c8:89:f8:fd:99:b6:af:b0:fa:c3: 30:17:f8:f9:fa:3f:6c:67:82:ca:6f:56:1f:9d:6a: 8e:09:aa:66:9f:28:36:2f:b0:64:4e:51:3a:30:c7: 73:7d:89:44:88:7f:73:01:61:9a:85:53:42:53:74: eb:84:cd:ab:79:0a:d7:f4:7f:c0:dd:ce:eb:77:4a: 63:1b:fa:be:c7:00:ae:ac:4f:e2:09:ff:d4:65:0c: eb:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:CC:76:5F:18:0C:6D:64:03:0A:B8:96:15:C1:8D:E6:41:14:9A:2F X509v3 Authority Key Identifier: keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:2c:03:e3:cb:87:00:60:1b:dc:60:d5:69:93:ac:b2:82:a0: 8a:53:ab:6f:8b:69:2b:fd:03:5c:17:4c:56:d0:80:dd:1d:6d: 0f:5b:74:00:16:a6:a6:cf:09:0e:21:23:e8:6b:d8:b2:a5:df: fe:c6:8f:c2:d0:35:82:4f:a1:93:e7:6c:b2:34:a8:6a:dc:71: 52:c3:09:9a:33:8a:a1:3a:f9:fd:9e:a6:4f:c9:4f:2d:62:4a: b2:d0:5e:d0:94:cd:65:99:ac:64:cf:95:a4:ab:0a:3a:b1:c4: e4:64:f4:15:6a:0f:a0:55:29:9d:59:a8:60:c1:61:9c:11:ce: 17:5f:6c:39:14:eb:37:25:05:14:6b:61:68:d9:b2:fc:39:36: c8:69:fd:f5:63:45:54:0b:47:f8:9d:e0:1c:fa:0d:7f:97:4f: f1:e7:5f:27:c5:1d:0a:f7:c5:7b:0f:0d:4b:17:eb:ca:43:2f: 95:63:29:cd:13:20:58:b0:31:f2:41:9f:1a:83:27:c2:31:ba: b8:42:3e:2f:65:b7:ca:eb:80:10:4f:b7:84:8c:df:31:b8:b5: 03:7a:ba:d4:ef:a0:0c:66:b1:5c:ce:d7:bb:d5:1d:ea:e7:52: d4:b4:57:06:0a:e5:41:cd:ea:88:07:f6:e8:22:50:7a:79:78: 8c:69:da:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYIZ0AbOTEbTess666cucZHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYjI1Y2U1NTBlNGQ5YmRhMDViZDVkNDVjOGI2YmEzNzQz MGJiYmEwHhcNMjUwNDA2MDAwMTQ2WhcNMjUwNDA3MDAwMTQ2WjAzMTEwLwYDVQQD EygxM2NjNzY1ZjE4MGM2ZDY0MDMwYWI4OTYxNWMxOGRlNjQxMTQ5YTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA61dxxgwt9E4ftLwXhK7UxQWUcTOR uJUOY3VCAvAApIqgixF87tZH+2EvhwHFIDJsc/300Pc8kwYoeA6CY5BM7yOfs9eF u/3L8NwUCFrX2BT9QeiE23C7PuzEyCdGwtwf/piE4tOvcskXDMN6SYOairfZwMUM y13AL67cZCWb2st1jIusCg1wQvtjy3c8pZggLPNZbQmkQe4gC6zAcLp98YrunBju Y6xo5ciJ+P2Ztq+w+sMwF/j5+j9sZ4LKb1YfnWqOCapmnyg2L7BkTlE6MMdzfYlE iH9zAWGahVNCU3TrhM2reQrX9H/A3c7rd0pjG/q+xwCurE/iCf/UZQzruQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBPMdl8YDG1kAwq4lhXBjeZBFJovMB8GA1UdIwQY MBaAFJyyXOVQ5Nm9oFvV1FyLa6N0MLu6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYt YmU0NWYwZDJhYmJiLzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYtYmU0NWYwZDJhYmJi LzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYywD48uH AGAb3GDVaZOssoKgilOrb4tpK/0DXBdMVtCA3R1tD1t0ABamps8JDiEj6GvYsqXf /saPwtA1gk+hk+dssjSoatxxUsMJmjOKoTr5/Z6mT8lPLWJKstBe0JTNZZmsZM+V pKsKOrHE5GT0FWoPoFUpnVmoYMFhnBHOF19sORTrNyUFFGthaNmy/Dk2yGn99WNF VAtH+J3gHPoNf5dP8edfJ8UdCvfFew8NSxfrykMvlWMpzRMgWLAx8kGfGoMnwjG6 uEI+L2W3yuuAEE+3hIzfMbi1A3q61O+gDGaxXM7Xu9Ud6udS1LRXBgrlQc3qiAf2 6CJQenl4jGnaFA== -----END CERTIFICATE-----Generated at Sun Apr 6 08:25:40 2025 by rpki-client