$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft File: uw1OhZN7eg8nEFTShhTyk01OpQA.mft (raw, json) Hash identifier: NauWTSecoOtF/IhENJbIUUVmdIL/vYYrTwflYg8idIU= Subject key identifier: E3:F1:66:41:72:23:38:43:E2:1A:89:92:62:85:73:67:FB:66:B8:ED Authority key identifier: BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00 Certificate issuer: /CN=bb0d4e85937b7a0f271054d28614f2934d4ea500 Certificate serial: 01960309C0610316877CCC4936C659E9FDA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft Manifest number: 14ED Signing time: Fri 04 Apr 2025 23:01:32 +0000 Manifest this update: Fri 04 Apr 2025 23:01:32 +0000 Manifest next update: Sat 05 Apr 2025 23:01:32 +0000 Files and hashes: 1: 01HtAuMUxuqrbi-RYDMlgiph8hQ.roa (hash: lGVEELYtg5rZM3t1Qq83ZACS5uXbK+Qjh7HwfOV+WDc=) 2: 3RRxCGORhxJUfcVq4tpq0XZragY.roa (hash: y6TouJV1sDEJ98HnKmVFWXfBdYGdQF1hzAEK2639To8=) 3: GYodMieh8Gfbfq2hLI5KhvEaFHY.roa (hash: CZAsAUa04Szvy+CPZOLDpgA58sS4VlmBo7Rcp6UE57A=) 4: JkWwBURcFGhQXBTXcyXYeBLRT88.roa (hash: nL/v19wxGJvKXuA4YZlDQPHgwxgDJO16wPSvgDXWLog=) 5: LjPTtXACZzIXUrAHmmcGaTSoJX0.roa (hash: hU58ToAOVO8bZ1ShSsstYoflDj5E/scFC015sKbb9KM=) 6: NQcZZcex_ckVBDVfUO9h5l4bn_0.roa (hash: sFlT0ZyQmXGdOwtr2nIXrN6+TeuiCTpZ+teimAOiato=) 7: SC-XsxdAgu2J1rxvQLaYfHoW1SE.roa (hash: 5FD3bfkZCZGPoE+1Wlr2La0Az/eQkkz+JwW46jnyGyE=) 8: anCAVFrU6QU0WXm-Tf9Rgd2lCjk.roa (hash: o4eJwkX3D001t3lWuQpnvXZPwiotWwCUXp0dU8d6pBU=) 9: jHTP33yl1wRqWX8GtFt4mY-Ujqk.roa (hash: ZmeIR/HiMPo2cRoFPWUYH8GvupvDGcgqNg9sL2L7rpM=) 10: uw1OhZN7eg8nEFTShhTyk01OpQA.crl (hash: +mpYQoxyeeoZQIJb/qpxQiaNPbHONJ5aMBQgkiUo0Xc=) 11: wp3kuECOmL-Xa_CvP6f2avXNhKE.roa (hash: M/TCrE4Hu3Cb7omMvcKliDEBNDpnBTh4puc7wgjBDtw=) 12: zDiDdQidrsVi9EGom3KTj1C2EMU.roa (hash: gTHzGIwoR29tUryXTFuhCmFlurDWmdDpwhItmXV0euE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 21:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:03:09:c0:61:03:16:87:7c:cc:49:36:c6:59:e9:fd:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb0d4e85937b7a0f271054d28614f2934d4ea500 Validity Not Before: Apr 4 23:01:32 2025 GMT Not After : Apr 5 23:01:32 2025 GMT Subject: CN=e3f1664172233843e21a899262857367fb66b8ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a7:ee:bc:53:b4:f7:cc:2a:bd:1e:0b:e4:ba: 4d:eb:a6:ce:27:fd:4b:ee:8c:fc:a4:c3:99:3f:a0: e2:4d:62:e8:11:1d:80:75:c6:93:cc:fe:3c:d6:8d: 01:17:7e:94:b8:c3:05:15:1c:8e:24:09:c6:18:a3: 31:1b:42:f9:88:53:ff:a6:42:11:43:1c:e5:d5:fd: fb:03:11:f3:e1:ca:eb:1c:44:13:c7:df:fb:77:f8: 3a:96:6c:a5:b7:66:61:bb:a5:9d:40:e4:0d:8a:10: 07:bd:5f:2e:df:b4:b5:9d:20:b5:62:40:57:b7:27: 39:f9:31:18:c4:f5:2d:c2:dc:ad:95:77:3d:f6:de: 95:99:45:ac:b7:c4:40:6a:90:cd:29:97:9f:4c:d0: ca:40:85:e3:72:4e:25:71:ed:ff:26:7b:84:74:e0: 22:c6:91:98:dd:ff:63:ea:bb:a9:71:2d:c5:ee:0f: bd:20:de:b2:71:9b:32:2a:49:08:ac:57:ff:82:91: 37:6e:94:75:38:37:d1:d8:8a:5c:5f:7a:28:51:99: 3c:ff:c4:4a:00:04:b0:3f:27:96:d5:f5:1b:02:f6: 55:fc:37:cb:d9:6f:15:b6:76:23:b2:7a:c8:bb:24: 59:76:69:6c:4e:3c:06:5b:be:a7:2b:a5:a6:66:b7: 76:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:F1:66:41:72:23:38:43:E2:1A:89:92:62:85:73:67:FB:66:B8:ED X509v3 Authority Key Identifier: keyid:BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:f2:cc:99:50:6f:44:52:8e:26:65:42:e2:b5:47:6e:c3:13: 1e:0e:4c:e2:bd:77:43:b2:87:a5:35:aa:30:bb:e9:64:cf:f5: 69:3e:5d:bc:fc:7f:cb:e4:f0:5a:de:00:de:4b:9d:53:7d:d8: a1:4f:6a:a0:d5:74:fc:12:c6:9b:68:f2:60:0a:54:38:2c:56: e9:68:7a:4a:13:c0:1a:ab:7f:9d:99:7b:54:10:53:08:3a:3f: 1e:84:4d:42:17:80:47:b6:a6:29:6e:87:0c:17:e4:e1:51:e1: 8d:16:a6:f2:43:7e:a3:75:84:ff:40:98:86:4c:22:b5:aa:6d: cb:19:a1:fc:0f:5a:7d:07:fc:be:a3:f2:f5:e8:1b:51:c2:ff: 67:f5:94:09:f9:2c:a8:d7:82:fd:cb:bd:a3:d8:44:b6:57:63: 3f:bd:9b:66:df:ab:a4:3a:24:71:5e:5f:5b:62:dc:1c:31:45: 8b:8b:ad:00:10:05:e1:53:6e:77:81:74:73:00:d6:67:04:d0: 21:23:24:74:89:92:6e:9b:f0:3e:83:1e:77:c3:c6:f0:72:fb: 0f:be:df:62:07:be:9c:82:28:07:6e:01:66:11:da:de:39:49: ac:49:e1:30:97:50:63:86:cc:b4:bd:f7:4a:2c:7e:50:5e:3a: f2:57:40:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYDCcBhAxaHfMxJNsZZ6f2mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiMGQ0ZTg1OTM3YjdhMGYyNzEwNTRkMjg2MTRmMjkzNGQ0 ZWE1MDAwHhcNMjUwNDA0MjMwMTMyWhcNMjUwNDA1MjMwMTMyWjAzMTEwLwYDVQQD EyhlM2YxNjY0MTcyMjMzODQzZTIxYTg5OTI2Mjg1NzM2N2ZiNjZiOGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6fuvFO098wqvR4L5LpN66bOJ/1L 7oz8pMOZP6DiTWLoER2AdcaTzP481o0BF36UuMMFFRyOJAnGGKMxG0L5iFP/pkIR Qxzl1f37AxHz4crrHEQTx9/7d/g6lmylt2Zhu6WdQOQNihAHvV8u37S1nSC1YkBX tyc5+TEYxPUtwtytlXc99t6VmUWst8RAapDNKZefTNDKQIXjck4lce3/JnuEdOAi xpGY3f9j6rupcS3F7g+9IN6ycZsyKkkIrFf/gpE3bpR1ODfR2IpcX3ooUZk8/8RK AASwPyeW1fUbAvZV/DfL2W8VtnYjsnrIuyRZdmlsTjwGW76nK6WmZrd2nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOPxZkFyIzhD4hqJkmKFc2f7ZrjtMB8GA1UdIwQY MBaAFLsNToWTe3oPJxBU0oYU8pNNTqUAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXcxT2haTjdlZzhuRUZUU2hoVHlrMDFPcFFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9kMTc1MjctY2Y5OC00ZDM3LTg2NmYt OGU5Yjk4YTk5Y2RiLzEvdXcxT2haTjdlZzhuRUZUU2hoVHlrMDFPcFFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9kMTc1MjctY2Y5OC00ZDM3LTg2NmYtOGU5Yjk4YTk5Y2Ri LzEvdXcxT2haTjdlZzhuRUZUU2hoVHlrMDFPcFFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf/LMmVBv RFKOJmVC4rVHbsMTHg5M4r13Q7KHpTWqMLvpZM/1aT5dvPx/y+TwWt4A3kudU33Y oU9qoNV0/BLGm2jyYApUOCxW6Wh6ShPAGqt/nZl7VBBTCDo/HoRNQheAR7amKW6H DBfk4VHhjRam8kN+o3WE/0CYhkwitaptyxmh/A9afQf8vqPy9egbUcL/Z/WUCfks qNeC/cu9o9hEtldjP72bZt+rpDokcV5fW2LcHDFFi4utABAF4VNud4F0cwDWZwTQ ISMkdImSbpvwPoMed8PG8HL7D77fYge+nIIoB24BZhHa3jlJrEnhMJdQY4bMtL33 Six+UF468ldABw== -----END CERTIFICATE-----Generated at Sat Apr 5 06:34:21 2025 by rpki-client