$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft File: q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft (raw, json) Hash identifier: czYbEcDbyeVB1B/+Vc3ouCQOCH/HaLhYk13jBKjytj0= Subject key identifier: 34:EC:5C:C1:5C:70:C9:57:72:BD:DB:E6:E3:A4:72:F1:41:77:5A:1D Authority key identifier: AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14 Certificate issuer: /CN=ab8c6c58b607ff23ae7175a61682c75480f1e214 Certificate serial: 019610571279CD5F667C415B8D78A8DD9122 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft Manifest number: 11E8 Signing time: Mon 07 Apr 2025 13:01:03 +0000 Manifest this update: Mon 07 Apr 2025 13:01:03 +0000 Manifest next update: Tue 08 Apr 2025 13:01:03 +0000 Files and hashes: 1: Ay4048oOGOLd8W5gLDDEAyTF8CE.roa (hash: NXsQAFwkRa/GC3TqDmqhOZeN3qNn6FtRxq658PxTeSo=) 2: EbvXq4EM8hAgSkGiFLRqaY-G0EU.roa (hash: zajtrIP7Ewp9NW7IyVXFEVPjCtiQ0d/m581bkbpxnPI=) 3: FDdC23f-QMX8x6wvwKf2MaftED4.roa (hash: h9m2qsiGkrW+4l59GNkStG6h59aEcnuwE/KLJqr7Cgk=) 4: FHjjaCL7QaSxR7Yf_uDdz3cQhuA.roa (hash: Brv6WLVF3QRBSayqPg/J2H5JWwF8VVYLp0UA1sg3bSA=) 5: GanbvvtqSZENbmIdtfbYun4fuOo.roa (hash: a9IMBYKg4BFPWfGPrEQ1nIFRtJtRWqf5txg0Sr68Odk=) 6: HeWtxOQwTN1uf0xfcq_bZw71XkA.roa (hash: Q3cAdwW00NmkMkDNixCTZhHEBzWnPkDYpvdoFVzzSP4=) 7: LPXBlOJ83SUZetduCUkP3lDmZb8.roa (hash: Xahh/YPbtY5jZR0nw8MkUj4SXBdb+qHLE/N+aHg/zLg=) 8: MBaWylrBVCifHO75NhqX3hwA3gI.roa (hash: rBGbEwve3PVfVzEgeSB6FNde2V4Ej5oriQNU2JdSej4=) 9: TNZjVfkoPHNGWuPROUhTApW2tS4.roa (hash: HeS2ECV8xSlPFS6ZfzpvaJlw7gUvm2q+HDJoDgc0tag=) 10: VEkecCYWX-3eJbHzfXRPqIguSrU.roa (hash: y+HxKa51lXccWcF8YAwZEEpBtkvi4YQc9qp84HUBYjU=) 11: bJOubptyDCUoksZUBTEQqGVmM9c.roa (hash: 5AtXcXlAprhgr08DWqOvaQo1UWB8kRpiaZt7z80DD44=) 12: gY7ZGvPzoH-CX9GeUSTzaqQXovY.roa (hash: 2Y8QhFV1RfXgwz+9zPSSImXIf02O6QwrVpawBy0GOpo=) 13: j5_CqMmkt1DG3j-liA9ojTF-2zk.roa (hash: 9/Skv7dfWWCpzLOyfdQVA/mAMx0mIp9bCVvdrEzkMLY=) 14: ktsWW1aNW0Ka2r1y8DatRgdAjnQ.roa (hash: B9kQb2mez0Ho2ienkmxwkosyQ4vYDt/9bZEi638La00=) 15: pWYX2715Q-5BkbFDg0Sh9v9WvPs.roa (hash: TgnvC3W5sZgU6RXpmwyf5MNyrmOzs/Lefze2pwDj6yc=) 16: pdqJCRLiJ7NUW64tDbwue3bHfpU.roa (hash: ljeRCKKswXVLuB5MoRwzN0UCpzG2Fbx/CHdpqjKSohM=) 17: q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl (hash: Q7UYtP7iAe1iei2JhGJ/L+JQ+sRogaesHLop/RKZse0=) 18: tuLu-KxTyWECQsa7jsPHvbBC7-c.roa (hash: sICitbN0hdJLsCXmDSmpQhmRlzSQyxGdXNXHPCYmLv0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 08 Apr 2025 13:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:10:57:12:79:cd:5f:66:7c:41:5b:8d:78:a8:dd:91:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8c6c58b607ff23ae7175a61682c75480f1e214 Validity Not Before: Apr 7 13:01:03 2025 GMT Not After : Apr 8 13:01:03 2025 GMT Subject: CN=34ec5cc15c70c95772bddbe6e3a472f141775a1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:79:d5:7e:aa:ba:74:58:1d:14:72:d6:68:59: 39:2d:09:45:fe:9a:2d:b5:f6:b2:f9:a7:4a:c6:e4: 63:08:4b:71:87:39:f3:24:17:49:9d:ca:08:76:88: d6:ce:fb:eb:87:f6:8a:d8:cb:7a:ab:28:92:af:87: 44:0d:91:e5:43:44:0d:9c:c0:fc:a2:94:5d:52:c6: 19:51:85:d6:64:12:b7:9f:f2:4a:c4:95:88:c8:53: 57:c9:a3:74:46:da:dc:c8:db:12:e7:49:81:15:bb: 54:cb:5c:b4:0c:5c:12:37:66:20:1c:fd:37:e1:8b: 34:c2:a3:42:90:d1:63:fc:be:3d:49:0b:37:17:69: d7:ed:9e:f7:c4:8a:0b:a6:74:e4:a2:81:62:68:74: 90:2c:db:80:95:a7:7b:72:59:46:5e:51:59:3b:1b: e6:d4:4f:55:19:54:82:17:1e:4c:f0:91:2b:6f:52: 2b:35:b4:0a:f4:f0:be:32:6b:4f:7f:1d:d7:b2:f1: 52:fd:df:66:3f:e6:b4:34:f8:4f:32:6e:72:9a:16: cf:72:14:27:39:d6:9d:24:d2:6f:e0:c3:7e:ed:27: 5b:c6:21:b5:aa:55:b9:32:4c:71:94:40:4d:2f:58: d0:f0:9d:80:08:0f:97:ef:9a:48:7f:4b:07:57:8b: ae:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:EC:5C:C1:5C:70:C9:57:72:BD:DB:E6:E3:A4:72:F1:41:77:5A:1D X509v3 Authority Key Identifier: keyid:AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:08:c6:d0:07:d6:9b:cb:d6:37:6f:72:ec:de:3b:83:8a:43: 18:91:5e:f0:c2:2c:89:ef:9a:63:06:31:0b:57:3f:ae:0b:c5: 8d:c0:7a:7c:41:fb:ca:6f:98:43:58:31:59:0f:3e:92:bc:ed: 27:d8:d1:a8:74:ff:d4:82:77:17:77:0b:83:4d:7b:e4:04:b8: 3f:93:c5:16:13:86:ee:db:3d:58:7f:b7:53:2a:5c:99:2c:41: 89:cd:04:04:b3:e8:02:d2:47:5b:76:53:3b:72:dc:4c:5d:45: 6c:82:02:61:4a:0c:30:1c:2d:9f:8c:45:af:6a:f6:61:69:0e: da:7e:a6:23:f8:fc:b6:4f:0c:83:1e:c8:d2:50:38:5d:55:d6: 52:e4:3a:19:9b:33:b1:86:86:7b:2a:cf:1e:79:78:b8:6c:6e: 5c:d9:5e:ca:f4:57:54:e2:8e:cf:3e:a8:da:1c:3b:cc:83:35: 6f:ac:56:66:be:72:6a:12:4d:7a:5e:f9:ba:0d:7f:f9:e1:25: 03:90:81:9d:1b:c3:00:ff:a8:f9:a9:80:7c:d9:61:58:9d:87: 2f:c3:63:b3:18:60:ff:7e:5a:4c:2d:84:21:4c:6e:65:35:3e: 23:2c:25:5b:3f:0d:17:8f:9d:f8:23:89:e8:a0:61:69:87:0d: 83:f0:9f:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYQVxJ5zV9mfEFbjXio3ZEiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiOGM2YzU4YjYwN2ZmMjNhZTcxNzVhNjE2ODJjNzU0ODBm MWUyMTQwHhcNMjUwNDA3MTMwMTAzWhcNMjUwNDA4MTMwMTAzWjAzMTEwLwYDVQQD EygzNGVjNWNjMTVjNzBjOTU3NzJiZGRiZTZlM2E0NzJmMTQxNzc1YTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XnVfqq6dFgdFHLWaFk5LQlF/pot tfay+adKxuRjCEtxhznzJBdJncoIdojWzvvrh/aK2Mt6qyiSr4dEDZHlQ0QNnMD8 opRdUsYZUYXWZBK3n/JKxJWIyFNXyaN0RtrcyNsS50mBFbtUy1y0DFwSN2YgHP03 4Ys0wqNCkNFj/L49SQs3F2nX7Z73xIoLpnTkooFiaHSQLNuAlad7cllGXlFZOxvm 1E9VGVSCFx5M8JErb1IrNbQK9PC+MmtPfx3XsvFS/d9mP+a0NPhPMm5ymhbPchQn OdadJNJv4MN+7SdbxiG1qlW5MkxxlEBNL1jQ8J2ACA+X75pIf0sHV4uuswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDTsXMFccMlXcr3b5uOkcvFBd1odMB8GA1UdIwQY MBaAFKuMbFi2B/8jrnF1phaCx1SA8eIUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9lZmI4ZWUtYzVjNC00NDY3LWEwY2Mt ODhhM2M0MWZhZWUyLzEvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9lZmI4ZWUtYzVjNC00NDY3LWEwY2MtODhhM2M0MWZhZWUy LzEvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhQjG0AfW m8vWN29y7N47g4pDGJFe8MIsie+aYwYxC1c/rgvFjcB6fEH7ym+YQ1gxWQ8+krzt J9jRqHT/1IJ3F3cLg0175AS4P5PFFhOG7ts9WH+3UypcmSxBic0EBLPoAtJHW3ZT O3LcTF1FbIICYUoMMBwtn4xFr2r2YWkO2n6mI/j8tk8Mgx7I0lA4XVXWUuQ6GZsz sYaGeyrPHnl4uGxuXNleyvRXVOKOzz6o2hw7zIM1b6xWZr5yahJNel75ug1/+eEl A5CBnRvDAP+o+amAfNlhWJ2HL8Njsxhg/35aTC2EIUxuZTU+IywlWz8NF4+d+COJ 6KBhaYcNg/CfEA== -----END CERTIFICATE-----Generated at Mon Apr 7 16:56:26 2025 by rpki-client