$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft File: S0BcqrNLv95rjuZsYAhgxs6W8ys.mft (raw, json) Hash identifier: xFCJ9D5O6CYKB8qCnxXnUH6Irzn24RrWVmLr21fpFUQ= Subject key identifier: 7D:1D:0E:BF:18:EB:EF:67:62:54:6C:7F:9B:93:CA:60:B1:98:9B:F2 Authority key identifier: 4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B Certificate issuer: /CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b Certificate serial: 019659B950D477FC6D75F47233A6C9A95AD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft Manifest number: 1507 Signing time: Mon 21 Apr 2025 19:00:39 +0000 Manifest this update: Mon 21 Apr 2025 19:00:39 +0000 Manifest next update: Tue 22 Apr 2025 19:00:39 +0000 Files and hashes: 1: 11HD7yYKcpDp91MDnZ2qx4f7DA4.roa (hash: I82O47jamEqwRmGn3/G2hhZ8d3EhBnYIg9JLsYyDdcE=) 2: EVFSBas9Aq_MdNVwUd8bGuaA3Ws.roa (hash: BhtgRPsHAejHOiiDvH3HRPbC4SYTxdKvHTv4FGSpdUs=) 3: EwIzZdJ1IhMaFw8VKQftgylzjgE.roa (hash: TssNiQ/Zpv1pzvYDHFFLNu5wfEVQ4u0fKOIDHY91aqk=) 4: LVgdGGp1BXM3wqsV9OwWixTAngw.roa (hash: yASeozzYpGQSF5fg0wPLHaGxwKLjvcatKKCkqykA4I8=) 5: MJIbLhSmNC8a874fA2nbq57HEtg.roa (hash: WaRYM9CvEVYhUP+ZoiflR5McAGOB5Og+0p9cf3/LEak=) 6: P1A1BXCqCADzQosrk4MwUKPYxTk.roa (hash: LXH4t2ODNhUtfiB03lL7Y51z/AGbNaW0Y11NO+KNqsc=) 7: QHWMs-MZjDSwChSISEL6Gl0q8mw.roa (hash: MTwg/6CPgLRHHoER9F5LK/UDna9Vp7Lok94EKexAIUI=) 8: S0BcqrNLv95rjuZsYAhgxs6W8ys.crl (hash: YIf7OW6dU7TI8/dpaqiBW+od981krOVqtm+KBnG+KHY=) 9: Xdvj43KnSMHPF5yK-nfEWq4KZoY.roa (hash: 0KUoHz1/LcxNxADlsv04gqLb680zAS0Z8MaiKDomgYY=) 10: foffFzsX_C0XZVackxzc9TT3Ql0.roa (hash: v5tw1DCZvp0dZORs+mozhjde3hmTpwW0Pvc0v2NmjrU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.crl rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Apr 2025 19:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:59:b9:50:d4:77:fc:6d:75:f4:72:33:a6:c9:a9:5a:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b Validity Not Before: Apr 21 19:00:39 2025 GMT Not After : Apr 22 19:00:39 2025 GMT Subject: CN=7d1d0ebf18ebef6762546c7f9b93ca60b1989bf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ae:27:be:d1:d2:66:50:5e:7f:db:1e:6e:e0: 29:b2:d5:b7:64:e4:1b:2e:4d:0a:e2:1e:90:d1:a9: 73:dc:d4:6d:65:6b:b3:cc:30:dc:41:b4:87:c2:51: 95:09:04:1d:d7:ea:f5:ce:4f:81:4c:cc:9b:d0:0f: 08:b5:df:ac:9c:a1:84:5b:2e:91:30:e2:20:49:ac: a4:a3:89:a0:37:99:31:c7:4b:93:0b:bf:b5:89:fb: 86:11:f8:7a:22:14:da:ff:34:58:1e:f9:90:e7:8c: f1:38:5d:21:3e:ca:0d:84:4d:f9:62:84:4f:ee:65: 3b:bd:b8:0a:8c:07:92:e0:8d:b3:11:1f:b2:b8:8d: 2b:b0:0b:f3:67:2e:18:6e:95:92:25:33:00:67:94: 2f:e8:03:af:e6:91:93:eb:04:f3:31:1f:14:73:5e: 97:b2:49:e2:bc:10:e6:dd:2d:ce:ae:c5:4a:4d:23: 89:a5:9c:43:4f:93:e4:62:42:58:6f:9b:56:38:63: 50:19:39:34:83:93:73:37:eb:df:c9:99:bc:23:b8: 87:43:7a:23:51:40:a0:cb:a1:19:93:0c:29:79:0e: f9:be:03:30:c4:39:97:2d:de:4e:ee:67:9e:a2:37: 56:91:fd:a7:d9:4d:cd:01:27:fc:a8:f3:25:fa:32: 99:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:1D:0E:BF:18:EB:EF:67:62:54:6C:7F:9B:93:CA:60:B1:98:9B:F2 X509v3 Authority Key Identifier: keyid:4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:dc:11:f3:44:2b:bd:3c:a2:b5:49:df:27:a4:ca:cf:cd:29: a3:82:9b:06:b8:f8:14:07:51:b4:ba:9f:ab:58:03:1b:f2:24: 99:72:6c:31:ec:3e:41:2a:82:7a:da:45:80:30:6c:f0:a0:ef: ce:79:39:6c:05:eb:34:bb:52:87:94:1e:d0:36:16:f8:9a:f2: 1b:b6:ff:8c:23:c1:93:32:06:50:11:00:b0:d4:45:f2:e8:c5: 0d:23:05:36:69:02:e5:34:3c:3e:dd:c0:fa:1c:56:5d:72:2a: 8c:69:d6:22:9a:91:1d:19:8d:3a:87:8b:bb:84:5f:a9:e5:36: 87:28:52:20:e4:1e:cf:a8:5e:99:42:97:7b:ed:b5:e2:e0:e2: fd:ee:d2:35:07:24:5c:83:29:c0:74:5a:7d:15:1c:55:8d:01: ae:e1:42:18:46:be:4b:c3:c5:7d:29:53:e4:37:8e:9f:ac:e6: a8:7b:d7:7b:58:35:be:08:9b:cb:f2:22:a6:70:1b:b6:d4:cb: a3:4f:df:db:69:15:45:c8:8e:81:fd:7f:63:3b:ec:bc:82:0d: d1:9c:70:7d:5f:56:dc:a4:06:0f:86:eb:1c:00:da:ec:de:be: 76:46:77:1e:aa:b8:bc:5b:59:3d:19:f6:c5:0d:fe:f5:0d:9d: 99:b7:b5:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZZuVDUd/xtdfRyM6bJqVrTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNDA1Y2FhYjM0YmJmZGU2YjhlZTY2YzYwMDg2MGM2Y2U5 NmYzMmIwHhcNMjUwNDIxMTkwMDM5WhcNMjUwNDIyMTkwMDM5WjAzMTEwLwYDVQQD Eyg3ZDFkMGViZjE4ZWJlZjY3NjI1NDZjN2Y5YjkzY2E2MGIxOTg5YmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoK4nvtHSZlBef9sebuApstW3ZOQb Lk0K4h6Q0alz3NRtZWuzzDDcQbSHwlGVCQQd1+r1zk+BTMyb0A8Itd+snKGEWy6R MOIgSayko4mgN5kxx0uTC7+1ifuGEfh6IhTa/zRYHvmQ54zxOF0hPsoNhE35YoRP 7mU7vbgKjAeS4I2zER+yuI0rsAvzZy4YbpWSJTMAZ5Qv6AOv5pGT6wTzMR8Uc16X sknivBDm3S3OrsVKTSOJpZxDT5PkYkJYb5tWOGNQGTk0g5NzN+vfyZm8I7iHQ3oj UUCgy6EZkwwpeQ75vgMwxDmXLd5O7meeojdWkf2n2U3NASf8qPMl+jKZAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH0dDr8Y6+9nYlRsf5uTymCxmJvyMB8GA1UdIwQY MBaAFEtAXKqzS7/ea47mbGAIYMbOlvMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzBCY3FyTkx2OTVyanVac1lBaGd4czZXOHlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS85MTRkMzktMzAyMC00Yjc5LWFkMjYt ZDg3YWZmYjhiYzYxLzEvUzBCY3FyTkx2OTVyanVac1lBaGd4czZXOHlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS85MTRkMzktMzAyMC00Yjc5LWFkMjYtZDg3YWZmYjhiYzYx LzEvUzBCY3FyTkx2OTVyanVac1lBaGd4czZXOHlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACtwR80Qr vTyitUnfJ6TKz80po4KbBrj4FAdRtLqfq1gDG/IkmXJsMew+QSqCetpFgDBs8KDv znk5bAXrNLtSh5Qe0DYW+JryG7b/jCPBkzIGUBEAsNRF8ujFDSMFNmkC5TQ8Pt3A +hxWXXIqjGnWIpqRHRmNOoeLu4RfqeU2hyhSIOQez6hemUKXe+214uDi/e7SNQck XIMpwHRafRUcVY0BruFCGEa+S8PFfSlT5DeOn6zmqHvXe1g1vgiby/IipnAbttTL o0/f22kVRciOgf1/YzvsvIIN0ZxwfV9W3KQGD4brHADa7N6+dkZ3Hqq4vFtZPRn2 xQ3+9Q2dmbe1zw== -----END CERTIFICATE-----Generated at Tue Apr 22 02:16:00 2025 by rpki-client