$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft File: tyWIwA7vcVgJ61_dbWcXzCjA36w.mft (raw, json) Hash identifier: aNBnVOc4eF+4DTlnNXcXDbykgfIWsVpr6H4FS+jKoiU= Subject key identifier: CF:A2:A7:58:8F:B9:06:5D:76:F7:BD:89:DC:6B:30:C3:CF:B4:E3:1C Authority key identifier: B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC Certificate issuer: /CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac Certificate serial: 0196150FD135A9D51BB9AD0E13F53C902AEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft Manifest number: 14EF Signing time: Tue 08 Apr 2025 11:01:20 +0000 Manifest this update: Tue 08 Apr 2025 11:01:20 +0000 Manifest next update: Wed 09 Apr 2025 11:01:20 +0000 Files and hashes: 1: 30BxK6_jpie3YrLCVwh_L1trwzk.roa (hash: X9FbkEMlA2QphV+O7rBHZ0meCsmOLXe9r7nPMvJuQcE=) 2: 57saHwwtMFtKDHtko2YaGKrGjJo.roa (hash: tuKl3wIrDMzULngL+WH+D2haKacyphB+9VZ5+FTHHpM=) 3: Dbj9xuGjig4FQD4z5CtOr-cvTeI.roa (hash: Kh8CzaShn4hw0xJ/eT2H0TnUMB7Vdu0F94Rtfvnict8=) 4: EuktsmR6HvXm2m5YsC5Wyo5ecw4.roa (hash: JZi+DlaPt3ZWFPrgsMEzdF/6HYunSwsq7ugQUzVGcAU=) 5: F-P_HvBB3WeH7KniyH81o28KKbo.roa (hash: 8sYaDjHEHJUFW2fXpmzCzQDMt9L045SyDdjIlOEUNco=) 6: WBOYQCAoKRyLsa6JAYAHwgmZIqI.roa (hash: lyZfLnKwP7kxcM63676+jKHGePevi3n5oMgldGNu5qA=) 7: WR7z7m7JZCweB81LV8VsoLwZDDI.roa (hash: n+zNUpOUwgPN3iy+Ul6bCia4Bw0P9Lb0d3EbTWyw+/I=) 8: eNRtwGVQ1VdkNKBRZ8o9uf4Ec24.roa (hash: syspd0kan424RvhNNvOMRktLryIova5s5SuLnxOMs4I=) 9: inKVgfg6tkDW3-Ko2Fj1q9U9rjM.roa (hash: m3IZ4E9iTFBEvHgMwMmb/F3F5jQFINfkwm1zng7j3wE=) 10: jmu-RUwAGlfdjyuIX4pdgwp2S_c.roa (hash: 0w/XwzNScEN/vprJx5SJRgxW5WArgctvQM2YSDSFtog=) 11: tLlGubJJap72E2l8gRh9Uuu4S8A.roa (hash: jBh5pu7FnbvAeJHH3DMpIfaMMsMyb9LyPf0qd9sE/90=) 12: tyWIwA7vcVgJ61_dbWcXzCjA36w.crl (hash: sFhlTd9aG53Sfi15gM+W6iP9ncqpcASdSNcAeXLkMac=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 09 Apr 2025 11:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:15:0f:d1:35:a9:d5:1b:b9:ad:0e:13:f5:3c:90:2a:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac Validity Not Before: Apr 8 11:01:20 2025 GMT Not After : Apr 9 11:01:20 2025 GMT Subject: CN=cfa2a7588fb9065d76f7bd89dc6b30c3cfb4e31c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:59:6b:98:d4:74:ec:2c:09:08:4d:b8:96:fe: af:00:ba:35:12:58:5f:8b:b9:59:5d:e7:59:f6:d9: 24:6f:ad:70:3d:9a:ad:3a:8c:df:79:e2:4a:d4:96: 16:f6:69:8a:c6:c4:42:2a:8b:40:06:c2:8c:c9:0e: 6f:98:d0:b3:6d:1e:0a:1f:17:57:f3:72:a4:12:d3: 74:ea:4b:fa:02:30:bb:d3:7b:f2:64:0f:5e:59:bd: a5:2a:8a:91:bc:3d:5e:ff:69:f1:9f:d9:96:65:0c: 03:3d:d0:6f:c7:c3:ee:1f:e7:7f:e5:eb:1a:23:ae: 51:20:da:6b:72:81:3c:e4:05:fb:97:cd:18:27:ed: 0f:29:cb:c3:c3:db:51:c4:f3:93:49:ab:0b:7e:d9: ce:37:08:56:9b:66:34:b8:71:16:0d:26:04:17:e4: 82:d2:7d:67:a3:17:01:c5:5d:89:16:99:95:d6:9f: e0:43:bf:01:30:37:21:f0:97:81:f0:b3:99:4a:73: 08:85:a3:88:ab:0d:4b:1a:c4:31:62:2f:26:b0:80: c3:fb:53:7c:5d:99:c9:43:81:53:f4:fe:a2:31:67: 27:5f:5c:36:68:cd:45:c6:26:7e:36:c4:cc:2a:08: d8:ad:66:75:71:bd:c2:ed:e9:bd:d6:27:72:ff:f6: 14:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:A2:A7:58:8F:B9:06:5D:76:F7:BD:89:DC:6B:30:C3:CF:B4:E3:1C X509v3 Authority Key Identifier: keyid:B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:7c:44:ed:8c:6f:00:18:b0:f3:a3:90:17:15:a9:96:fc:5b: a0:f0:fe:0d:b6:14:86:8e:6d:0d:a4:1f:c6:27:09:f7:4d:a0: 5f:11:d7:eb:8a:be:bd:1a:0e:84:a6:aa:aa:4c:43:f1:b6:2e: 5f:a7:67:85:d7:bf:9e:33:7b:70:f9:35:65:02:d3:71:f4:b5: 48:5b:ce:60:2e:d4:cb:bb:54:84:ae:03:3f:a4:cb:1b:6a:31: 7a:36:fe:16:c7:8c:dc:3d:47:bf:af:99:e0:d1:08:2b:40:ab: 96:ce:f9:ce:64:63:a2:42:e9:90:62:ef:5a:83:de:d8:bb:88: 7b:ee:c0:de:77:45:a6:80:18:c9:6d:db:cb:01:47:e2:0d:4e: 20:e4:c0:5c:d7:52:35:96:ff:85:ca:46:91:ba:53:bd:72:a4: d1:74:b9:25:cc:56:f8:32:c3:56:89:13:0a:40:b9:10:b6:0c: 9f:8f:3d:a4:3e:49:1d:f8:f9:7a:a9:23:19:ce:03:d5:43:30: 9e:df:63:15:0a:70:85:c4:cb:c7:bd:9c:b6:d0:56:29:f1:a9: 68:dc:f2:d3:d0:49:24:52:d5:90:82:30:73:99:9b:4c:5c:69: 86:66:32:ed:45:3d:00:9d:b0:66:a3:21:8c:5d:d5:2e:a1:51: 4d:4a:ea:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYVD9E1qdUbua0OE/U8kCrsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MjU4OGMwMGVlZjcxNTgwOWViNWZkZDZkNjcxN2NjMjhj MGRmYWMwHhcNMjUwNDA4MTEwMTIwWhcNMjUwNDA5MTEwMTIwWjAzMTEwLwYDVQQD EyhjZmEyYTc1ODhmYjkwNjVkNzZmN2JkODlkYzZiMzBjM2NmYjRlMzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFlrmNR07CwJCE24lv6vALo1Elhf i7lZXedZ9tkkb61wPZqtOozfeeJK1JYW9mmKxsRCKotABsKMyQ5vmNCzbR4KHxdX 83KkEtN06kv6AjC703vyZA9eWb2lKoqRvD1e/2nxn9mWZQwDPdBvx8PuH+d/5esa I65RINprcoE85AX7l80YJ+0PKcvDw9tRxPOTSasLftnONwhWm2Y0uHEWDSYEF+SC 0n1noxcBxV2JFpmV1p/gQ78BMDch8JeB8LOZSnMIhaOIqw1LGsQxYi8msIDD+1N8 XZnJQ4FT9P6iMWcnX1w2aM1FxiZ+NsTMKgjYrWZ1cb3C7em91idy//YU/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM+ip1iPuQZddve9idxrMMPPtOMcMB8GA1UdIwQY MBaAFLcliMAO73FYCetf3W1nF8wowN+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUt N2E0MTI1NGVhYWNhLzEvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUtN2E0MTI1NGVhYWNh LzEvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlHxE7Yxv ABiw86OQFxWplvxboPD+DbYUho5tDaQfxicJ902gXxHX64q+vRoOhKaqqkxD8bYu X6dnhde/njN7cPk1ZQLTcfS1SFvOYC7Uy7tUhK4DP6TLG2oxejb+FseM3D1Hv6+Z 4NEIK0Crls75zmRjokLpkGLvWoPe2LuIe+7A3ndFpoAYyW3bywFH4g1OIOTAXNdS NZb/hcpGkbpTvXKk0XS5JcxW+DLDVokTCkC5ELYMn489pD5JHfj5eqkjGc4D1UMw nt9jFQpwhcTLx72cttBWKfGpaNzy09BJJFLVkIIwc5mbTFxphmYy7UU9AJ2wZqMh jF3VLqFRTUrqtw== -----END CERTIFICATE-----Generated at Tue Apr 8 21:10:59 2025 by rpki-client