$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft File: KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft (raw, json) Hash identifier: T/NdK/c8bQllNaZqv99kvNYcx4WsPzoGa+YA+hNObtw= Subject key identifier: 38:51:A9:80:6B:7D:E3:A3:9D:91:6C:A4:F8:7C:8B:52:29:8D:BC:AC Authority key identifier: 29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8 Certificate issuer: /CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8 Certificate serial: 01965E3ABA91701DD5606B23DC5970F8AFCA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft Manifest number: 09E0 Signing time: Tue 22 Apr 2025 16:00:29 +0000 Manifest this update: Tue 22 Apr 2025 16:00:29 +0000 Manifest next update: Wed 23 Apr 2025 16:00:29 +0000 Files and hashes: 1: 3n7I_kSrxdGXM-Yy8kH4fsc4pN8.roa (hash: s/PREhsDL5iYmJE9h5sCUC+jgqMKpegaWts1GqNWSms=) 2: FV9U3Yv2I7_2992_Tu4mBiIQFlI.roa (hash: /WpBV6VXQYMepV5lfUa4zJ1OtPuJRJ1gNT7mbz//kPY=) 3: IvOVPi4Jk0LAA7IyC_lBmoedUPk.roa (hash: iVbMNdqQVbnDfCnhCbcyzkADBiETtoTlj0kjeIAta6w=) 4: KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl (hash: 0Z7hGy99hjTHXtGxU8Yn6QA2OsyGEg9crCPTyiz3Kxk=) 5: T16pm2MQEAUE2FMbSssYLk6CkTk.roa (hash: 7uW7JXvNCvoGIxe5Z6TwqqTVQIqIp/L1A4jFvTPd0mc=) 6: UbPhv_LAVA0rwKgmHrLcoG4Owqg.roa (hash: FNzQh/BeexAfdXsFTyP2FKgRjYQQ55iXr7qpb2vEEQQ=) 7: VJKr8K21Xfen5uk1xCfGFVJrqNs.roa (hash: kXpjzIlwN+Gv44HIvCkq7vJ72G9g6c72ZjdAcBJOo5Y=) 8: _54CIVi2Yw4yngdpfKbMO07oyqo.roa (hash: TM5Ay2NTiDiELYyiOeCmFyJPSSpITIxR/LNxTfFDHDg=) 9: ca6XJ5NiIiIJ1gn26NWoBZY1OOE.roa (hash: m0MfY3W/yHtAcpQIPruy2IhGfS2aQQkvwxrvdJx1dpE=) 10: ozTUlRS2BP8xxCFNOquOdzTJVac.roa (hash: l1UJXUEegLYZKNp2zf9niVjLEqjlu26RHLObHLwCBJI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Apr 2025 14:46:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:5e:3a:ba:91:70:1d:d5:60:6b:23:dc:59:70:f8:af:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8 Validity Not Before: Apr 22 16:00:29 2025 GMT Not After : Apr 23 16:00:29 2025 GMT Subject: CN=3851a9806b7de3a39d916ca4f87c8b52298dbcac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ab:ee:e0:76:d0:9c:2f:1e:b4:f7:ba:e4:4e: b7:37:50:13:f7:8d:56:6b:d1:ef:3d:22:e1:3d:bb: ad:04:e1:8b:8a:e7:cb:74:a0:81:34:b5:94:88:31: b9:5a:3f:7d:b9:b2:8d:47:e7:37:08:b8:26:84:11: 1e:50:16:6e:1c:b7:33:f6:3b:10:1f:47:57:ab:e1: 0b:c6:eb:4e:36:da:d8:6c:b3:20:a8:e1:35:4f:d7: ca:48:d5:96:63:80:98:09:f2:31:59:ab:fb:c9:55: 46:4e:3d:8d:55:d0:05:54:06:19:8d:b5:12:6b:f2: 32:c3:0d:43:82:d9:a8:26:85:96:dd:7d:2c:2a:54: 44:8a:40:13:03:85:ad:60:f1:a6:08:2d:06:ae:60: 7b:ce:cc:86:84:9a:39:40:e2:4f:ab:8d:ac:32:f5: 2d:42:8c:4d:ce:c5:f6:e3:fd:e0:2f:3a:98:ba:47: 70:9a:54:f7:d5:01:09:de:38:2a:a1:57:e7:9e:87: 22:91:1b:01:d3:a7:04:35:d5:ae:9b:0b:35:8e:95: 44:87:13:68:00:fc:cc:ce:21:6a:04:2b:f4:10:5f: dc:34:68:47:a7:5c:24:0c:91:b8:ef:b8:ea:9b:78: 1c:fc:c1:38:18:00:7d:dc:35:1a:53:4d:50:2b:d1: 8d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:51:A9:80:6B:7D:E3:A3:9D:91:6C:A4:F8:7C:8B:52:29:8D:BC:AC X509v3 Authority Key Identifier: keyid:29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:36:02:25:77:1f:ee:5f:f8:a1:57:da:e8:03:cd:4c:5d:46: 71:66:3b:5e:ec:e3:82:01:fc:9c:fb:22:d7:38:3b:94:01:88: 01:b2:23:2e:0d:56:72:ae:b7:61:52:ab:98:9d:3e:56:c2:16: 4c:07:c8:7a:1a:c3:91:55:72:fb:0f:11:af:15:00:01:49:28: 9d:7b:9d:83:7e:cc:c7:59:68:21:b1:70:b1:76:c4:5d:9b:5b: 72:08:de:57:80:07:69:8f:03:27:4b:77:bf:f2:9d:1a:6f:d7: f3:6c:26:02:cf:f2:20:08:c5:50:17:de:06:2a:fd:ba:d3:e2: 59:01:d4:18:e1:09:b6:96:6f:5c:06:81:60:89:3d:99:17:d5: be:e5:d9:90:aa:5a:71:96:72:be:1e:bd:91:4f:0e:cb:ad:e6: d3:75:fd:22:31:41:f8:38:b2:c4:7d:c5:9b:1a:fb:f4:c9:da: b2:e1:53:7b:2b:b9:89:d4:d7:ff:b0:ef:50:db:83:88:f9:65: 4c:09:25:6b:e0:05:42:39:b4:eb:bd:a5:dc:97:0b:ec:5b:e7: da:7b:2d:e3:f9:06:9c:db:0e:56:5b:b0:4c:eb:2a:19:fd:d7: 85:21:b6:92:67:8a:6e:d4:89:19:91:f5:a3:9e:f2:79:47:6a: de:a3:51:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZeOrqRcB3VYGsj3Flw+K/KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YTk5NjRlMGNkMzVmYjM2NzU3ZTU2NTNmZmE3NjI2YWM1 ZGVlZTgwHhcNMjUwNDIyMTYwMDI5WhcNMjUwNDIzMTYwMDI5WjAzMTEwLwYDVQQD EygzODUxYTk4MDZiN2RlM2EzOWQ5MTZjYTRmODdjOGI1MjI5OGRiY2FjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqvu4HbQnC8etPe65E63N1AT941W a9HvPSLhPbutBOGLiufLdKCBNLWUiDG5Wj99ubKNR+c3CLgmhBEeUBZuHLcz9jsQ H0dXq+ELxutONtrYbLMgqOE1T9fKSNWWY4CYCfIxWav7yVVGTj2NVdAFVAYZjbUS a/Iyww1DgtmoJoWW3X0sKlREikATA4WtYPGmCC0GrmB7zsyGhJo5QOJPq42sMvUt QoxNzsX24/3gLzqYukdwmlT31QEJ3jgqoVfnnocikRsB06cENdWumws1jpVEhxNo APzMziFqBCv0EF/cNGhHp1wkDJG477jqm3gc/ME4GAB93DUaU01QK9GNFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDhRqYBrfeOjnZFspPh8i1IpjbysMB8GA1UdIwQY MBaAFCmplk4M01+zZ1flZT/6diasXe7oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2FtV1RnelRYN05uVi1WbFBfcDJKcXhkN3VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8yMTQwNjMtZjg4Zi00OTU4LWFlNTIt ZDliNTMzZjdmYmMzLzEvS2FtV1RnelRYN05uVi1WbFBfcDJKcXhkN3VnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy8yMTQwNjMtZjg4Zi00OTU4LWFlNTItZDliNTMzZjdmYmMz LzEvS2FtV1RnelRYN05uVi1WbFBfcDJKcXhkN3VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeTYCJXcf 7l/4oVfa6APNTF1GcWY7XuzjggH8nPsi1zg7lAGIAbIjLg1Wcq63YVKrmJ0+VsIW TAfIehrDkVVy+w8RrxUAAUkonXudg37Mx1loIbFwsXbEXZtbcgjeV4AHaY8DJ0t3 v/KdGm/X82wmAs/yIAjFUBfeBir9utPiWQHUGOEJtpZvXAaBYIk9mRfVvuXZkKpa cZZyvh69kU8Oy63m03X9IjFB+DiyxH3Fmxr79MnasuFTeyu5idTX/7DvUNuDiPll TAkla+AFQjm0672l3JcL7Fvn2nst4/kGnNsOVluwTOsqGf3XhSG2kmeKbtSJGZH1 o57yeUdq3qNRkA== -----END CERTIFICATE-----Generated at Tue Apr 22 20:54:07 2025 by rpki-client