$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.mft File: K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.mft (raw, json) Hash identifier: Pslubj4ptDBLXmHelr0R/J6VMsY2lj+KQoegEppsP6I= Subject key identifier: 89:5D:06:ED:0B:B4:03:B2:6A:69:F0:99:4A:73:18:48:13:8C:30:4D Authority key identifier: 2B:96:7E:77:2C:C7:29:83:05:A1:1F:FA:65:DD:18:5F:6A:58:91:0B Certificate issuer: /CN=2b967e772cc7298305a11ffa65dd185f6a58910b Certificate serial: 0196090B8933147243C1C6CC4C9E40ABD393 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.mft Manifest number: 0C8C Signing time: Sun 06 Apr 2025 03:01:12 +0000 Manifest this update: Sun 06 Apr 2025 03:01:12 +0000 Manifest next update: Mon 07 Apr 2025 03:01:12 +0000 Files and hashes: 1: 1ehPzZKxF1UYBJMFREeIsWSe-0E.roa (hash: +fEfnPMqQYMaOaxEiaDX2H+smUyU5o+FiuHqTI6a8Fg=) 2: 2GYZY3YmP4Z9CrbeYrsEBS4WPvQ.roa (hash: 5GQk+W5w5aJknyyML0N7FECeUlVHN3WA+aoitU2P1JY=) 3: 2catgB5VK787sqGbIW3dngQFHEE.roa (hash: B+SFn1cOjP49uHmdVYtQOuuR22NDQQ5ZSYkwXBcG4Xw=) 4: 9RSLkQ5wyeSzJcCtl7FXYXufiXg.roa (hash: C23nJYoJlpERYjPPrIl4nUFaowb3JdwHKbCCgwPR7Fc=) 5: A-23JzA-7G9IJRx7L7gZ2EsiZXs.roa (hash: 6GMUeHfmdErm/sIramac3F+jFlRdAFwxAZz+asqiZFE=) 6: K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.crl (hash: El2VhIqOdLu45mEHqV1/DjmYSO6ds531/WUH+348DFY=) 7: NLONGxWCaDncCXl5R1oWg-KTHPI.roa (hash: wEU6hkf61GZGgIuFGLQHCPpd8fVGVUdNGM1QqUlTpzA=) 8: Q0coXhksYsiHyus7jkG0H1rCOhs.roa (hash: GLAs1yGQZUPoiQEpZ9WyTQNtMvFVhBPCXGqgjPd+Ip8=) 9: QZYtXBxzzLLwx6OP96338EZQNhM.roa (hash: 38l/EW42Cd8oOnZZH6RtDcfG0bGHq+MKq8reh5+yb4I=) 10: S5EvGcwDHH7zGUGD1TsxliOQ844.roa (hash: 9ucAO/aS27/vji8pCgT0q2aazFzXGf3O5LSygR5bboY=) 11: SNTwxjZqoj--loyRtn4U5ryS2tg.roa (hash: 7LntTAbrkB4D7sGOEefKUsodkOG7eI/vXEBkRmusiyk=) 12: TjRVD4eTC9ou630w_SogsYsS2i8.roa (hash: MzxiND3DLT/Z9YUtjr+3wENZnheDLjvzlFroyg2KDBQ=) 13: XSI-Z3sxC2MvxPG4GMpF-oGP6N4.roa (hash: 0PggDg6sAbSQ+x8mdqKRdmh/0V9nEdI3VW8yE7LWoS0=) 14: i2WjIkNXUPeX7xGHYrjhSSYgFy4.roa (hash: C+2xN+JP/GjkI/37xlqqEgKPEWpo/BcSUMTEOcKEDPs=) 15: sFCDhJ4M_6ODBJmgIs3kz42jtuI.roa (hash: 0A6uuIGu+YVQFGSi7WdcioqNabGg+Lb7uc7Kf+2F0zs=) 16: we2Sx3tWkTHYty4_DjZ0SNeayeE.roa (hash: rCq+X7txc0pJndWQs8B/o3cENUKX8Fo1V3HT1kcpm3Y=) 17: xLUb8C8bVOkpr7q64SBm-78jn6A.roa (hash: 2KEYFJdXXETiYVBhmOpcuh0u5oPPV72Mle9moFbgm4Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.mft rsync://rpki.ripe.net/repository/DEFAULT/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Apr 2025 22:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:09:0b:89:33:14:72:43:c1:c6:cc:4c:9e:40:ab:d3:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b967e772cc7298305a11ffa65dd185f6a58910b Validity Not Before: Apr 6 03:01:12 2025 GMT Not After : Apr 7 03:01:12 2025 GMT Subject: CN=895d06ed0bb403b26a69f0994a731848138c304d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fb:3e:65:4a:c0:6c:2a:e8:22:f5:99:a7:11: bd:63:eb:aa:f1:f8:d1:23:05:eb:60:b6:46:2a:72: d0:14:e6:7e:85:96:26:43:02:b2:79:d7:7c:99:1f: ae:7d:cb:70:8f:25:8c:8e:71:86:1b:ff:39:d6:11: f7:e5:a0:d5:54:c6:8d:4d:9f:24:2f:d9:6e:a4:f3: 8b:91:04:2e:74:fe:ba:0c:5b:20:21:eb:f7:4a:a8: 0e:94:ca:92:60:b8:8a:b8:7e:8c:3a:f1:cc:83:72: a6:3c:14:38:f1:db:86:0f:b8:9c:e9:e3:6e:6a:4d: c9:ac:5b:67:b1:9c:5c:9b:3d:86:11:bd:2f:10:44: 96:a9:c6:db:06:b3:d9:10:40:c1:b9:21:1b:80:93: 31:56:82:85:0b:b9:58:a2:9e:59:3c:0b:d9:a1:b3: 27:83:56:a9:0b:fa:4c:d5:a9:9a:11:26:c0:b1:8d: 93:79:78:4a:6e:c6:b5:7a:d3:35:0d:db:8e:d5:4f: 74:23:86:b8:f9:09:67:79:b2:b5:8e:fd:06:6f:09: 33:c4:ef:a5:fa:22:52:9c:de:dd:cb:28:df:c6:12: 19:c7:07:95:8c:e4:e8:2f:7f:40:65:ad:ae:6b:8a: e5:01:3e:a2:25:0d:73:35:19:e4:8c:fc:66:ad:e1: e6:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:5D:06:ED:0B:B4:03:B2:6A:69:F0:99:4A:73:18:48:13:8C:30:4D X509v3 Authority Key Identifier: keyid:2B:96:7E:77:2C:C7:29:83:05:A1:1F:FA:65:DD:18:5F:6A:58:91:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:08:96:fb:82:67:e7:ee:00:2d:f1:e4:d1:60:d9:d2:ee:47: 7e:ad:45:6a:b7:55:07:21:00:64:3d:27:2d:0a:d2:f6:42:d5: 78:04:db:ac:5f:8c:3f:3f:91:38:48:2d:60:8f:35:60:16:14: e4:60:94:49:4a:14:6d:53:10:79:c6:20:80:1c:b5:c3:3c:a5: 7f:c0:98:34:84:a9:b1:64:33:4f:50:9b:08:3e:76:1c:f1:25: 5e:df:45:01:f6:60:d6:09:d4:ab:31:98:be:91:c5:99:e3:dc: 10:fd:75:5d:79:99:16:ab:8c:e1:0e:49:25:45:e0:b1:fd:43: 9a:cd:20:7b:74:01:ec:82:88:91:42:e8:ff:28:00:ce:d5:bc: 07:7e:37:3e:8a:88:66:44:fc:84:83:1a:7e:f8:49:b7:2c:60: d9:1f:e4:63:73:56:31:e6:06:bd:30:d5:2c:07:96:99:c8:6a: 95:01:02:44:79:ff:9d:24:66:ae:2a:cf:0b:77:89:1c:58:14: ca:c8:31:9a:9f:99:94:fa:cf:83:1b:0b:ec:0c:03:b4:e7:0f: 2e:0d:31:fb:d3:a8:a6:64:f2:53:5d:bd:23:15:43:c4:4f:e9: 70:12:6c:67:5f:6a:87:aa:2e:ef:74:a5:00:f4:4b:2b:4c:77: 70:3f:4a:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYJC4kzFHJDwcbMTJ5Aq9OTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiOTY3ZTc3MmNjNzI5ODMwNWExMWZmYTY1ZGQxODVmNmE1 ODkxMGIwHhcNMjUwNDA2MDMwMTEyWhcNMjUwNDA3MDMwMTEyWjAzMTEwLwYDVQQD Eyg4OTVkMDZlZDBiYjQwM2IyNmE2OWYwOTk0YTczMTg0ODEzOGMzMDRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPs+ZUrAbCroIvWZpxG9Y+uq8fjR IwXrYLZGKnLQFOZ+hZYmQwKyedd8mR+ufctwjyWMjnGGG/851hH35aDVVMaNTZ8k L9lupPOLkQQudP66DFsgIev3SqgOlMqSYLiKuH6MOvHMg3KmPBQ48duGD7ic6eNu ak3JrFtnsZxcmz2GEb0vEESWqcbbBrPZEEDBuSEbgJMxVoKFC7lYop5ZPAvZobMn g1apC/pM1amaESbAsY2TeXhKbsa1etM1DduO1U90I4a4+QlnebK1jv0GbwkzxO+l +iJSnN7dyyjfxhIZxweVjOToL39AZa2ua4rlAT6iJQ1zNRnkjPxmreHmqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIldBu0LtAOyamnwmUpzGEgTjDBNMB8GA1UdIwQY MBaAFCuWfncsxymDBaEf+mXdGF9qWJELMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzVaLWR5ekhLWU1Gb1JfNlpkMFlYMnBZa1FzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS82NjBlNzQtYTNiYy00NDRiLTljNmEt NThjOTZkNjZmMGExLzEvSzVaLWR5ekhLWU1Gb1JfNlpkMFlYMnBZa1FzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS82NjBlNzQtYTNiYy00NDRiLTljNmEtNThjOTZkNjZmMGEx LzEvSzVaLWR5ekhLWU1Gb1JfNlpkMFlYMnBZa1FzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcQiW+4Jn 5+4ALfHk0WDZ0u5Hfq1FardVByEAZD0nLQrS9kLVeATbrF+MPz+ROEgtYI81YBYU 5GCUSUoUbVMQecYggBy1wzylf8CYNISpsWQzT1CbCD52HPElXt9FAfZg1gnUqzGY vpHFmePcEP11XXmZFquM4Q5JJUXgsf1Dms0ge3QB7IKIkULo/ygAztW8B343PoqI ZkT8hIMafvhJtyxg2R/kY3NWMeYGvTDVLAeWmchqlQECRHn/nSRmrirPC3eJHFgU ysgxmp+ZlPrPgxsL7AwDtOcPLg0x+9OopmTyU129IxVDxE/pcBJsZ19qh6ou73Sl APRLK0x3cD9KPw== -----END CERTIFICATE-----Generated at Sun Apr 6 07:10:32 2025 by rpki-client