$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft File: 0d4STg-K2059lXbOrjJfZo3SJLE.mft (raw, json) Hash identifier: C63ub1z5OI54+2YtNTu/7scWp9iDnKjtQE3KGxU3Itc= Subject key identifier: 10:22:4C:9E:91:20:09:E7:FA:59:70:DD:BE:36:29:1D:9C:19:A3:70 Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1 Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1 Certificate serial: 019738E1F4CA7F7C4659DDA1C3F8F7E42276 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft Manifest number: 1093 Signing time: Wed 04 Jun 2025 03:00:21 +0000 Manifest this update: Wed 04 Jun 2025 03:00:21 +0000 Manifest next update: Thu 05 Jun 2025 03:00:21 +0000 Files and hashes: 1: 0d4STg-K2059lXbOrjJfZo3SJLE.crl (hash: fX1CVmcit75+lHfaaQrSk5LpgsO4+JQyAnnW0f9Epm0=) 2: 173-Kv1jDbMWH-4jzzP9yAxk8zA.roa (hash: RAtumuE7sBDLlYGFZheJtE3TDChYxfxrc7dviHDr/Y8=) 3: 21R7B0PZj4S2nfPcu6UWFcUKPgw.roa (hash: qB6ZX383pt5nIhJxyHETDpwIazDIAavubmmD8LzTgMY=) 4: 6caVUV-TGB9bU55p1ya71OWBwvg.roa (hash: c0tRExOUVeBF8+Pq6PhYarD4KHj6+N7f0p/w2jdUK80=) 5: NAlGVYpV8OEmdD2nIMiqn334k0M.roa (hash: XrkbVPgrR7sOnmYGzDR8m+MZN8NJUZRQwjZqOHkM5b8=) 6: dNqRqY6tmtgccI8cx_uJ4tWqiZA.roa (hash: g+K2hBhsL/swaozLRy4ek/JzzpG8kCplNhlD1lsyOeY=) 7: dm3YzK1xAmi2Sk5h8a3Khi5LGPM.roa (hash: p3jFvRhnZ5PWDigF+fLcdkZKduSSZASiccn7Ico+UoY=) 8: g8zmfO2HPSEN8YUDrAkY2r7Nlqw.roa (hash: uAg57JMTD8oD+ghOOtfACvdQoLeAHc5YjQ/CuCFoViY=) 9: hacEV-MoLT8z9KwMPWss3cGE7Ak.roa (hash: /ljDI2bMRna9vPYEiWkrDiOeR+IfW8BnSxXE9Vp7xXE=) 10: odu_cE6nPid9mTtdeynLn3Tm0LI.roa (hash: t/tnuabvUXprLV1nfI7C0+QM/zgYQu0v/clGVZKqTgc=) 11: qnoXcobTtJZawYccy6q_j_ktEjQ.roa (hash: YgqRq2TALdrM9up57j8hrsz1UPh0HBnD1px4pxGN8rs=) 12: xiZp6eivWb7x_d9W-WC8kwhVWsI.roa (hash: GvxU73beqXLMBxGmaGGngexgQ65uQMfsvmeuizGIl8o=) 13: yv08EH90nRPgnJ4aLVioWHP74iI.roa (hash: wfa+cbtIfXj/VcabZ84otkiskAuSmrS6+55fqOkIL+o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Jun 2025 03:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:38:e1:f4:ca:7f:7c:46:59:dd:a1:c3:f8:f7:e4:22:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1 Validity Not Before: Jun 4 03:00:21 2025 GMT Not After : Jun 5 03:00:21 2025 GMT Subject: CN=10224c9e912009e7fa5970ddbe36291d9c19a370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:91:ea:5c:3b:6d:5d:b8:d7:e7:02:6d:c3:ef: e9:ce:08:32:62:6b:cc:07:c9:31:68:66:f5:91:37: 45:a2:f7:27:0e:b5:c0:78:46:60:b2:c2:3b:d6:61: 9a:81:02:63:96:c3:e1:38:00:9a:af:35:4c:c0:74: 1e:6d:cd:39:36:6a:28:d0:a1:c7:ed:5a:5b:56:3d: 91:e7:02:6d:ca:22:51:07:ec:fc:cb:ae:72:38:d2: 1b:e9:04:37:10:0d:e6:7d:a4:da:03:b0:80:93:fd: 49:d1:7b:ed:71:4c:cc:43:9d:36:1f:68:d5:33:2c: 7c:98:42:64:28:ae:90:a8:fb:af:f9:6c:04:d9:f8: 6c:a4:40:5b:62:47:55:76:3d:b8:fb:c4:be:e5:31: 30:1b:1d:d9:ef:b3:40:97:e2:59:a4:ea:5a:2f:d6: 77:51:e1:3b:1b:90:4a:d0:c8:c5:32:52:de:6c:a4: 3a:54:37:38:d7:e8:21:25:77:3d:28:81:2d:9a:e8: 73:48:18:cc:19:79:73:f1:97:e3:be:e5:c0:04:7d: 13:b5:d3:9a:e8:ad:72:bf:a5:6f:4f:94:14:e2:ec: d8:ff:ca:2b:b6:08:e7:99:39:45:cd:a9:1e:f8:ee: 5a:34:bd:de:4a:36:e5:52:18:31:8c:99:37:fe:d4: c1:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:22:4C:9E:91:20:09:E7:FA:59:70:DD:BE:36:29:1D:9C:19:A3:70 X509v3 Authority Key Identifier: keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:d8:7b:7f:76:7c:09:40:dc:3a:74:34:06:61:4a:af:da:d0: b9:34:02:27:b3:6d:6d:72:29:fc:ac:63:c9:06:96:e1:7d:e2: 72:ac:66:33:c4:25:92:79:ed:fe:29:55:d4:a5:af:f8:dd:33: 4e:07:52:44:8c:62:71:28:f4:65:71:86:3b:1e:91:f1:16:5b: cb:b8:2e:2f:fc:dc:ca:01:99:55:a5:20:d9:70:74:de:8d:11: 86:6e:6b:2e:f8:35:fe:6a:69:fd:b0:5b:c7:a0:39:d0:7b:ba: e3:c8:c0:c4:cf:96:fe:1c:0e:06:49:c8:d1:78:bf:69:36:e7: fd:30:a7:a2:91:7e:04:9f:b5:f9:3a:d3:cc:c7:8b:8f:61:b3: 2e:56:1a:9e:49:8f:74:da:47:27:e7:17:c4:77:b3:ce:5a:cd: a2:69:7b:40:8d:5a:85:67:1d:96:91:6c:88:29:90:15:3f:4b: 06:b8:f3:3b:bb:d0:d3:fc:81:bf:8d:8a:51:11:95:01:62:86: 4e:ea:6c:92:9d:cb:c0:fc:ea:7f:5a:a4:5c:c8:5b:a1:fe:bd: 55:b3:67:c1:6c:df:3f:ce:34:37:ec:39:72:a9:1a:02:1d:c6: b6:8e:ac:16:6e:8b:a4:29:9e:17:e4:8f:71:b1:8b:15:85:5d: 77:74:b9:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZc44fTKf3xGWd2hw/j35CJ2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxZGUxMjRlMGY4YWRiNGU3ZDk1NzZjZWFlMzI1ZjY2OGRk MjI0YjEwHhcNMjUwNjA0MDMwMDIxWhcNMjUwNjA1MDMwMDIxWjAzMTEwLwYDVQQD EygxMDIyNGM5ZTkxMjAwOWU3ZmE1OTcwZGRiZTM2MjkxZDljMTlhMzcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZHqXDttXbjX5wJtw+/pzggyYmvM B8kxaGb1kTdFovcnDrXAeEZgssI71mGagQJjlsPhOACarzVMwHQebc05Nmoo0KHH 7VpbVj2R5wJtyiJRB+z8y65yONIb6QQ3EA3mfaTaA7CAk/1J0XvtcUzMQ502H2jV Myx8mEJkKK6QqPuv+WwE2fhspEBbYkdVdj24+8S+5TEwGx3Z77NAl+JZpOpaL9Z3 UeE7G5BK0MjFMlLebKQ6VDc41+ghJXc9KIEtmuhzSBjMGXlz8ZfjvuXABH0TtdOa 6K1yv6VvT5QU4uzY/8ortgjnmTlFzake+O5aNL3eSjblUhgxjJk3/tTBswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBAiTJ6RIAnn+llw3b42KR2cGaNwMB8GA1UdIwQY MBaAFNHeEk4PittOfZV2zq4yX2aN0iSxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9hYmUxMzQtMDA5My00NjUyLTkwNTct NGY0YzliMzQzZTkwLzEvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9hYmUxMzQtMDA5My00NjUyLTkwNTctNGY0YzliMzQzZTkw LzEvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkNh7f3Z8 CUDcOnQ0BmFKr9rQuTQCJ7NtbXIp/KxjyQaW4X3icqxmM8Qlknnt/ilV1KWv+N0z TgdSRIxicSj0ZXGGOx6R8RZby7guL/zcygGZVaUg2XB03o0Rhm5rLvg1/mpp/bBb x6A50Hu648jAxM+W/hwOBknI0Xi/aTbn/TCnopF+BJ+1+TrTzMeLj2GzLlYankmP dNpHJ+cXxHezzlrNoml7QI1ahWcdlpFsiCmQFT9LBrjzO7vQ0/yBv42KURGVAWKG Tupskp3LwPzqf1qkXMhbof69VbNnwWzfP840N+w5cqkaAh3Gto6sFm6LpCmeF+SP cbGLFYVdd3S5rQ== -----END CERTIFICATE-----Generated at Wed Jun 4 12:11:57 2025 by rpki-client