$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft File: UtycIYtRDAe8Zlmwn70yr-aKv9I.mft (raw, json) Hash identifier: pwXQXGKXBnIyx48LigspmsW8+EvneANNN3Xa93Ocz7E= Subject key identifier: 2B:EB:25:44:59:5A:B1:71:27:8C:D0:1F:5A:C3:9D:C3:C5:47:10:5E Authority key identifier: 52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2 Certificate issuer: /CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2 Certificate serial: 0195FF9A90F3C27A7EE94AD8BCF12A915B15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft Manifest number: 138B Signing time: Fri 04 Apr 2025 07:01:14 +0000 Manifest this update: Fri 04 Apr 2025 07:01:14 +0000 Manifest next update: Sat 05 Apr 2025 07:01:14 +0000 Files and hashes: 1: 6MBDcuhfmEWVptjguMTmf9iInNA.roa (hash: ymivKpyMNbe7aJ1PuJXw7gwW1NiqWvyizlFzmK9d/qY=) 2: ASEl7JqkqClmtX95ZbF2n_f_sMc.roa (hash: ml87fD1oXz3GGfpvMxIZMFvwwbtQeqmI4KZWPfbpWPA=) 3: FtX2scKMFKjrlX1-jGtQnQQTwEk.roa (hash: kMq1Imts+/ufR0HSWw6rQ0w6zUFocDzOGoNnOCcrl1Y=) 4: HSnWcSNOZ4OY_CttGpyQfNSZAZs.roa (hash: CcLUNhxOoVn4MfFa9d/eD1RrOw7AjPt46Gfl/NCHsbA=) 5: IpHtDFjEB_RXTZiNG6lT--ks0Ig.roa (hash: HxwuSEEfngriOWjFBxSRTVt8Bh+JF8Q1YRC9y08+mY4=) 6: NCn2lq5cktD_7ygfHIEl8kG0BGw.roa (hash: QVkLVYRylQrSQOKAeM/S18wN4GiAOMJzthGR51UDN7s=) 7: UtycIYtRDAe8Zlmwn70yr-aKv9I.crl (hash: /N4cnNxKAXrxt8VuH0O49qfYrbABxe/JQgiv08IRkW4=) 8: lbrPEbSuq8MGiugfDCfuWsxoHWM.roa (hash: aEziOZhVwJ11tjsb9rfj1shhPuYeS1ripLduKA6Erwo=) 9: lkKfm_f_wEEUNGQ-mYrqpjp6pn0.roa (hash: 1IEa2ddZDnV+Za6fAq2QN5r69jM42zaWvCVu/tVx9UM=) 10: ppkwZSnQe_B1w9UhP5ke1_jD4Vk.roa (hash: hVKC9oxQ4TOks3wr3lJFJ2Whe3zItAMI4ja6SGb5ZM4=) 11: uRkfgF_A6CqJRrBsGaN5ZRsc3pQ.roa (hash: U64dqyheSLqIXH63bjPi11po8JDmbOls6AydyTR+Q/k=) 12: wQQ_d2GjHPxfeuZhiPq0NlQrsUc.roa (hash: X6PXX89iZwx82Sdz6LkQl0Ci0LO6DvoxlhCySztAfS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 07:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:95:ff:9a:90:f3:c2:7a:7e:e9:4a:d8:bc:f1:2a:91:5b:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2 Validity Not Before: Apr 4 07:01:14 2025 GMT Not After : Apr 5 07:01:14 2025 GMT Subject: CN=2beb2544595ab171278cd01f5ac39dc3c547105e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d6:69:eb:1e:9d:2f:68:f1:2b:5a:dc:02:6b: 2e:c3:f8:68:68:8a:3f:ab:56:bf:7d:9b:a4:b9:05: 8a:36:7d:43:96:a8:74:e5:de:ca:16:50:4c:81:df: a5:55:26:11:be:a9:8c:0a:d8:40:3f:fa:d6:2d:bb: ae:0f:e9:8d:0c:f6:e4:a9:bd:db:78:68:24:1e:68: 4d:ba:30:6f:67:61:c6:f9:71:55:fd:ba:ab:2b:38: 65:db:fc:b0:fa:d4:fe:10:57:d1:0a:ae:2a:80:43: 6f:05:e9:d2:57:b3:86:9c:0d:8f:67:01:68:c8:cd: fa:22:67:0e:e7:f0:6f:d9:db:ce:69:81:71:30:40: 96:c3:54:b6:67:bd:a8:7f:b1:c8:0f:4e:d1:42:54: 15:2c:65:3d:2e:0e:e6:7a:46:5b:73:bf:6f:b0:f7: cf:a7:44:f7:38:80:7c:8d:34:6c:49:28:27:7c:81: 3b:6f:74:f4:2f:2e:a4:a5:22:6f:a3:14:6a:fb:05: e5:5b:de:ac:c5:06:e2:02:82:31:a6:b1:6c:e4:0c: a1:0b:47:69:1a:79:88:0e:5e:f4:f2:03:b2:c6:0d: ab:ee:94:fc:9a:5c:a5:f1:73:bc:ca:06:e1:16:54: b6:0f:d1:41:48:2c:29:1c:b2:cd:24:89:f6:4c:dc: bb:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:EB:25:44:59:5A:B1:71:27:8C:D0:1F:5A:C3:9D:C3:C5:47:10:5E X509v3 Authority Key Identifier: keyid:52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:28:76:c2:e7:84:d4:ce:fa:03:16:7b:02:94:dc:45:9d:06: 06:9e:35:23:25:f8:70:30:ad:c4:9f:a3:ab:d5:f7:2a:58:5d: 6b:f4:cc:07:3d:2f:f9:4d:d4:82:74:32:a0:f6:dd:08:ed:f6: d1:0a:d8:64:0c:0a:98:80:d1:11:c5:bf:b6:bb:ff:d9:ba:ab: 1f:f4:34:90:1b:0b:e9:67:37:b3:3d:19:e2:96:ac:a1:62:d5: 83:c8:74:87:ca:46:43:6a:23:8b:b0:92:76:b0:17:54:a3:97: 09:9f:dd:28:03:71:bb:08:6d:08:d7:32:87:f0:e7:bd:75:49: b9:75:45:91:8d:18:c8:4d:25:12:d0:1b:9c:9b:9c:19:49:31: c2:25:31:56:aa:bd:7f:55:62:3f:0e:b4:c5:81:9f:73:52:1c: c4:db:95:5e:9b:dd:59:c8:2a:2e:b2:bc:e6:97:4b:48:7c:ca: 5c:68:75:4c:01:84:1c:f1:8d:00:a4:be:75:7a:17:d0:7d:37: ad:34:cf:15:49:50:fc:46:37:99:21:39:35:44:af:17:93:20: 8a:25:77:80:98:ef:5f:e1:41:13:52:26:b9:a4:fb:73:03:81: 4c:46:69:57:0c:10:d7:7c:37:6a:4f:3b:cd:4a:33:ed:bd:cb: 15:04:81:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZX/mpDzwnp+6UrYvPEqkVsVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyZGM5YzIxOGI1MTBjMDdiYzY2NTliMDlmYmQzMmFmZTY4 YWJmZDIwHhcNMjUwNDA0MDcwMTE0WhcNMjUwNDA1MDcwMTE0WjAzMTEwLwYDVQQD EygyYmViMjU0NDU5NWFiMTcxMjc4Y2QwMWY1YWMzOWRjM2M1NDcxMDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtZp6x6dL2jxK1rcAmsuw/hoaIo/ q1a/fZukuQWKNn1Dlqh05d7KFlBMgd+lVSYRvqmMCthAP/rWLbuuD+mNDPbkqb3b eGgkHmhNujBvZ2HG+XFV/bqrKzhl2/yw+tT+EFfRCq4qgENvBenSV7OGnA2PZwFo yM36ImcO5/Bv2dvOaYFxMECWw1S2Z72of7HID07RQlQVLGU9Lg7mekZbc79vsPfP p0T3OIB8jTRsSSgnfIE7b3T0Ly6kpSJvoxRq+wXlW96sxQbiAoIxprFs5AyhC0dp GnmIDl708gOyxg2r7pT8mlyl8XO8ygbhFlS2D9FBSCwpHLLNJIn2TNy7iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCvrJURZWrFxJ4zQH1rDncPFRxBeMB8GA1UdIwQY MBaAFFLcnCGLUQwHvGZZsJ+9Mq/mir/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC80MDliN2UtMTI3NS00M2VkLWFmMGYt NTJmOTdiMjc3ZDFmLzEvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC80MDliN2UtMTI3NS00M2VkLWFmMGYtNTJmOTdiMjc3ZDFm LzEvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASCh2wueE 1M76AxZ7ApTcRZ0GBp41IyX4cDCtxJ+jq9X3Klhda/TMBz0v+U3UgnQyoPbdCO32 0QrYZAwKmIDREcW/trv/2bqrH/Q0kBsL6Wc3sz0Z4pasoWLVg8h0h8pGQ2oji7CS drAXVKOXCZ/dKANxuwhtCNcyh/DnvXVJuXVFkY0YyE0lEtAbnJucGUkxwiUxVqq9 f1ViPw60xYGfc1IcxNuVXpvdWcgqLrK85pdLSHzKXGh1TAGEHPGNAKS+dXoX0H03 rTTPFUlQ/EY3mSE5NUSvF5MgiiV3gJjvX+FBE1ImuaT7cwOBTEZpVwwQ13w3ak87 zUoz7b3LFQSBLQ== -----END CERTIFICATE-----Generated at Fri Apr 4 16:07:52 2025 by rpki-client