$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft File: 5dbG6LztQL0DLRdxjBseOa6EGug.mft (raw, json) Hash identifier: O+JudA95DwFFnr0f6bzlB41PJBk9qKRH2KEJ5k6UEOw= Subject key identifier: 9E:4E:A8:20:58:78:5B:1A:60:88:02:16:D2:62:17:65:D6:71:8D:B9 Authority key identifier: E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8 Certificate issuer: /CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8 Certificate serial: 01964BC6BAE492FC537B281D3803FC9C26F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft Manifest number: 1501 Signing time: Sat 19 Apr 2025 02:00:37 +0000 Manifest this update: Sat 19 Apr 2025 02:00:37 +0000 Manifest next update: Sun 20 Apr 2025 02:00:37 +0000 Files and hashes: 1: 1-4thfGCfV_85lt2WZkN-l71fwv0.roa (hash: 7cUPpyEsjpN2LkemwyOwpAzp6M6Mod4nt5VJCSxBi3s=) 2: 1-U546Wnv3X2dlqBwiPgmgD5rG0Q.roa (hash: UYLMoDLmtnbaqveYEw4e1FYtKG5Xz2eS50cYOB7habA=) 3: 4wlDChlgzrgFapvpBy46MAFlefc.roa (hash: EYqlVV6MH4EbjLdFRd/br9sG35MzdZTRrWmN3sTJ6/Y=) 4: 5dbG6LztQL0DLRdxjBseOa6EGug.crl (hash: Cv9KDM6NNAqlOc4JNNvjHyuFV6ZmUKjHpw0XDZOaVEc=) 5: 8j9-L_RONYbO5pct6BaIUP49Jq8.roa (hash: TIaaBWL1jzkAtw/gcAYt5xesS4BiLd6+3AzOv7BVHgs=) 6: A-Fkuj2Ry_3wy9lszQO5iFmpTsM.roa (hash: MqXfL/IjblbyaoanvxCZ0s6/syF5tUBaoXoKEYvO5Ck=) 7: CqQsoC1jFsSbLss7hEFtLKrKDMY.roa (hash: 7YVK/zmpOd/tEBFOBPOhNo6QF1d67oChKSOQOYEoacg=) 8: Grw7nIi6RKNyYj-gX0F5si2FPWg.roa (hash: P3/krGXIhVeYouYxQBpxzM61tb05ZyoVg+B5ZJUx//k=) 9: PPn88xNGN-bL0F7MubjXlyHvb9c.roa (hash: nLdf7Pq2piaIE9RRNqGUwrSH2EAIpbdo6397rklNDK8=) 10: QmD1NuxNLYfmzuhbCU_99CJ-o-k.roa (hash: ugpwTRCdEyAoIefE/m+oUbM/pJjpH0ikF/U5tO+O/jM=) 11: W5W8H6uR-lCCEmn3v-XsPLRNVss.roa (hash: MqFZSzbOqhNyXJIgrbDDE4K1XPvGby9AbWHLANkDs8A=) 12: cKTcZs-U_VD8X5oF6KYi9vL_XPY.roa (hash: Ojplqzn5+rFkagKqgJjGg7MR261z7vGOzqJ6p2GYag4=) 13: dUjWdWqHZ3bB28SlJrHRKXOFumI.roa (hash: L5pkt5HZhPKaDfcEd3yHsIdGb5cnUbqIUW0exwEPLyc=) 14: j3rbxvXK8ctBFBgkYLP92aiT8pc.roa (hash: SkgwXJK38mScZ5LxMMAb0ANPv8t3zcxnc/zFVB7Ba0w=) 15: mza84PKMv0aUDroEfzQZip-9Um8.roa (hash: xfLnRg1sIPVix0oNDyz6FdqLtVqmjxCCvOykxKOTB0s=) 16: u0oJmkSedaonOs5uLkSqqL59uJ4.roa (hash: C6uJzJ3uiAjMgAmGSpBjfqhHJVcbN5byOHdLx08rPTM=) 17: ujwUfZi-j2E7tiXxuxPwDEMg9Do.roa (hash: ZVTJzzTXgsjt6o/MwKVQt8mq4QnG+HkM2MYUgIyYqIM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Apr 2025 19:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:4b:c6:ba:e4:92:fc:53:7b:28:1d:38:03:fc:9c:26:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8 Validity Not Before: Apr 19 02:00:37 2025 GMT Not After : Apr 20 02:00:37 2025 GMT Subject: CN=9e4ea82058785b1a60880216d2621765d6718db9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:58:1b:42:e8:8e:ae:4a:61:36:08:dd:c4:f5: cc:ad:79:36:dd:af:7c:27:fe:cd:1b:72:12:f4:24: 85:e8:ae:5f:ff:c2:a3:6f:0f:e5:5e:e5:36:55:74: 10:9b:6e:7a:42:ef:73:32:84:74:a0:28:97:54:be: c8:d8:9a:41:90:04:38:ee:c1:6c:c9:af:fc:78:e5: 8c:bf:ad:3a:c2:57:39:43:c3:53:58:04:14:85:e9: ed:8c:13:f4:18:9f:22:60:d6:71:3d:32:9f:2b:9e: f2:40:36:e7:15:ba:7b:9c:f5:47:02:7c:25:22:4e: b7:b4:37:54:f7:ed:6f:c0:8f:d6:d5:d9:5d:bd:3d: 84:d1:e6:a6:51:f6:70:d7:fc:4f:ba:b9:44:12:82: 57:83:fa:60:b4:a5:a6:7e:83:d7:1c:e6:22:37:8d: 06:b3:12:e6:bc:bf:57:15:2e:bc:3f:6e:45:1c:36: 2d:3e:29:ae:12:88:19:07:1c:5f:0c:3f:b4:77:ea: 8a:41:b5:16:1e:11:64:e5:6c:83:bb:70:af:a0:d1: e2:93:92:a1:db:bd:b6:5e:49:58:26:81:63:1c:03: 71:a4:9c:98:b4:38:07:cc:69:b8:99:cb:2a:ab:b2: 44:c3:31:2c:4c:45:2f:ac:7f:2e:75:9c:e5:30:bb: e9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:4E:A8:20:58:78:5B:1A:60:88:02:16:D2:62:17:65:D6:71:8D:B9 X509v3 Authority Key Identifier: keyid:E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:d9:0c:5a:b1:33:21:4a:28:cf:e5:88:fc:9d:c9:eb:ee:54: 85:e0:eb:d8:f1:f3:99:29:ab:6f:74:2b:fb:f0:e2:15:b8:74: c9:02:1b:f8:7e:ab:c2:16:b0:92:c5:6a:03:56:7a:32:7a:d6: 37:a4:2e:0f:d8:d6:41:8e:40:52:ed:dd:b2:ee:9a:1c:ce:ba: 0d:0e:da:8f:e7:3f:ac:93:36:45:97:f1:67:e3:d4:b8:46:c4: 5b:38:53:13:7d:0e:6f:aa:69:ea:57:b0:b9:5d:fd:c1:c5:d7: d8:5d:36:a8:41:96:f2:e1:01:74:2c:e1:30:15:6f:14:14:65: 45:72:04:3b:ea:0a:ff:c2:87:65:ad:30:9e:2c:e1:94:f7:73: 45:17:e5:8b:fa:01:15:8b:09:12:42:28:ec:63:69:85:56:a9: 03:5e:1f:46:75:ad:0b:b4:9b:55:68:1c:d9:cb:8a:ee:07:71: 7f:f2:5a:99:fd:77:cd:90:a5:2c:87:00:0a:10:34:70:1c:d4: dd:50:8f:28:90:36:0d:39:34:be:dc:f1:ab:d9:85:b6:bf:16: c7:18:ac:78:0a:6c:2c:1b:03:bc:84:3e:17:88:61:ae:76:46: e4:be:c4:0d:8f:81:f7:7d:7c:cd:e2:e5:f9:f0:61:f1:c6:fd: 8d:ca:68:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZLxrrkkvxTeygdOAP8nCbxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ZDZjNmU4YmNlZDQwYmQwMzJkMTc3MThjMWIxZTM5YWU4 NDFhZTgwHhcNMjUwNDE5MDIwMDM3WhcNMjUwNDIwMDIwMDM3WjAzMTEwLwYDVQQD Eyg5ZTRlYTgyMDU4Nzg1YjFhNjA4ODAyMTZkMjYyMTc2NWQ2NzE4ZGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVgbQuiOrkphNgjdxPXMrXk23a98 J/7NG3IS9CSF6K5f/8Kjbw/lXuU2VXQQm256Qu9zMoR0oCiXVL7I2JpBkAQ47sFs ya/8eOWMv606wlc5Q8NTWAQUhentjBP0GJ8iYNZxPTKfK57yQDbnFbp7nPVHAnwl Ik63tDdU9+1vwI/W1dldvT2E0eamUfZw1/xPurlEEoJXg/pgtKWmfoPXHOYiN40G sxLmvL9XFS68P25FHDYtPimuEogZBxxfDD+0d+qKQbUWHhFk5WyDu3CvoNHik5Kh 2722XklYJoFjHANxpJyYtDgHzGm4mcsqq7JEwzEsTEUvrH8udZzlMLvpvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ5OqCBYeFsaYIgCFtJiF2XWcY25MB8GA1UdIwQY MBaAFOXWxui87UC9Ay0XcYwbHjmuhBroMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWRiRzZMenRRTDBETFJkeGpCc2VPYTZFR3VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wODk0ZjctZTI0ZC00NzI4LThjYWQt YmQyNDliNjI1Nzk3LzEvNWRiRzZMenRRTDBETFJkeGpCc2VPYTZFR3VnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8wODk0ZjctZTI0ZC00NzI4LThjYWQtYmQyNDliNjI1Nzk3 LzEvNWRiRzZMenRRTDBETFJkeGpCc2VPYTZFR3VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbNkMWrEz IUooz+WI/J3J6+5UheDr2PHzmSmrb3Qr+/DiFbh0yQIb+H6rwhawksVqA1Z6MnrW N6QuD9jWQY5AUu3dsu6aHM66DQ7aj+c/rJM2RZfxZ+PUuEbEWzhTE30Ob6pp6lew uV39wcXX2F02qEGW8uEBdCzhMBVvFBRlRXIEO+oK/8KHZa0wnizhlPdzRRfli/oB FYsJEkIo7GNphVapA14fRnWtC7SbVWgc2cuK7gdxf/Jamf13zZClLIcAChA0cBzU 3VCPKJA2DTk0vtzxq9mFtr8WxxiseApsLBsDvIQ+F4hhrnZG5L7EDY+B9318zeLl +fBh8cb9jcpoLw== -----END CERTIFICATE-----Generated at Sat Apr 19 03:53:25 2025 by rpki-client