$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft File: UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft (raw, json) Hash identifier: iL3B0qBas8ob+taZQQxgaKqJ0v4qCWESXfjQScWbN84= Subject key identifier: CA:A7:9C:5A:27:55:A3:FF:64:C2:F4:16:FC:11:F1:33:98:89:D9:55 Authority key identifier: 50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7 Certificate issuer: /CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7 Certificate serial: 01965CF0FF6FCE8F4FF180C678BA3FD43479 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft Manifest number: 15D7 Signing time: Tue 22 Apr 2025 10:00:19 +0000 Manifest this update: Tue 22 Apr 2025 10:00:19 +0000 Manifest next update: Wed 23 Apr 2025 10:00:19 +0000 Files and hashes: 1: 2D8GskUOctsT18ewUQERiVKSyqY.roa (hash: 81yC075gcHWBzZ9r1FLaXrPHKC2rS2Rq+/AZd9LK1O0=) 2: 3rRM1UU67-NncVP3_LftMbl2hFY.roa (hash: CmDqzWxPDccHaO9H4nIQm1+mJLI9vAQm75ESbo4gAFw=) 3: 6MsDvK1-WGC9RDIaMU0NJQXi_WA.roa (hash: N4CgWW54RCc4pQhXmSwerDVdxqnSumkj3/I4KPyGdXw=) 4: HJ2Ej1XnMez_6zjEhFT9gySMGiM.roa (hash: Tk//MwFVEMDrbw7kPqT+aJGJ2AwGRLjUiZiXfu/Ik0U=) 5: LCoaRYu9DxIUBXpbvJI8a4H_GsA.roa (hash: YtRwAS6vM4QTLulJMYf1drayxvcsSxBt1ktByHpBUnU=) 6: RwVHWwSzn5cEtTMvBXbeyg5LgzM.roa (hash: PlQEa5Yv7Hdu/qza17JsAuF4+tuue8CA4jUsFZ77sfQ=) 7: TmtbffGKJCoB6KaITSDYwVaNuwg.roa (hash: 9FENVzGrCx3+V6le/ReQ6+C3ptJBYI3u30nI4IXsVV4=) 8: UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl (hash: x2ckdO4pIdIJpifXPFSv79fu8juBfDo+6wB8RNf0bew=) 9: dw6fYArhndr9OHyiwkGdN32rJ08.roa (hash: 9uc2Yj3dajQn3veP+iEA8czeMrzLkCSGvgH42cP6lcs=) 10: pdE9jYgps_x2zZleZNeiVBZrLS4.roa (hash: 2tpInmxNwOGO6jkHQZzD8hPYsZ+9KF9Fp+XqzI+5N4A=) 11: pzO_vf4S85qGYsEOeaoc-NqBUG4.roa (hash: dQpCMi5DIsAy32ym2T+shCsk+2yMX+WZ0xQ8KadnYks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Apr 2025 04:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:5c:f0:ff:6f:ce:8f:4f:f1:80:c6:78:ba:3f:d4:34:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7 Validity Not Before: Apr 22 10:00:19 2025 GMT Not After : Apr 23 10:00:19 2025 GMT Subject: CN=caa79c5a2755a3ff64c2f416fc11f1339889d955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:fd:a7:45:ae:ce:eb:ca:47:ce:78:ec:a2:75: 7e:b9:09:78:38:50:3d:9a:82:04:3b:c6:83:f2:5c: 8d:40:c3:c2:21:9b:e1:83:94:8e:20:c4:06:c2:43: 0c:ec:ca:89:6d:f0:53:9a:28:7d:af:24:4a:4d:12: 55:4c:f4:c0:d8:8c:d7:5d:bc:70:84:02:f7:da:02: de:ae:c4:50:b5:64:c5:46:e6:9c:90:57:17:e2:d6: 31:d4:b0:85:74:b2:55:61:dd:5c:37:fe:bf:92:e9: 35:e8:cc:a9:1f:f9:f1:9c:4f:0f:c6:54:58:b9:c5: 56:a2:a0:50:2e:17:4b:6d:28:8c:7c:a0:22:59:24: 2e:a4:cd:b0:13:7a:89:3a:fa:fc:e4:df:55:e7:07: 8d:82:35:80:bf:a1:30:80:f9:25:81:c5:2c:a8:62: 8f:d7:bd:5b:2e:c6:2f:d8:86:f8:b4:75:19:4e:f4: b1:44:a4:5e:cd:ac:27:57:4a:e3:c2:65:35:a1:cb: 97:f8:a1:2f:6b:ab:b7:96:cf:76:30:67:ad:c1:29: 8e:53:96:1d:e4:a7:ef:fb:ff:db:1c:e1:ec:3e:13: 8d:5e:f3:e2:ae:f3:bb:3d:7d:f6:9f:61:6d:b0:6a: 9e:a3:5b:af:a6:d8:50:3b:84:69:ac:d9:9d:61:2a: 3c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:A7:9C:5A:27:55:A3:FF:64:C2:F4:16:FC:11:F1:33:98:89:D9:55 X509v3 Authority Key Identifier: keyid:50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:09:06:b1:f1:58:c3:5f:34:83:86:d8:11:60:3a:22:49:b1: 6b:0f:81:52:e4:cb:e5:50:eb:5c:59:75:8a:a7:fd:24:06:2b: a2:08:1b:ad:56:8e:c7:4c:af:fd:80:43:1b:ef:aa:e7:55:56: 9d:3b:9a:1e:0b:b6:53:9b:5b:4b:ff:2d:18:eb:4e:77:0a:5b: 31:d0:a3:d2:8f:8e:64:0e:62:a9:17:bb:ae:ca:ea:8d:f9:30: be:02:20:5e:24:7f:80:62:70:8e:01:a9:a9:38:1d:ea:03:55: 6a:5b:fc:15:f5:55:99:b0:65:52:b2:d0:ae:d0:d1:b9:7a:26: d2:cb:c2:23:4e:1a:2f:44:a4:15:4a:b6:96:99:33:3a:f7:46: 9c:0a:9c:15:a0:d7:9f:23:5b:f9:6d:ce:d4:af:f7:19:4c:18: b7:ef:84:49:f2:9a:19:57:ce:13:d3:bd:53:7b:4c:45:bc:e9: 2d:a4:06:df:2d:5f:8d:a8:34:e4:ed:35:bf:54:9f:95:d8:77: e2:6e:41:dd:fe:d3:86:c0:21:9a:e8:a7:d1:d0:d8:c1:a3:aa: 71:58:4d:af:0d:53:82:e4:f0:e2:12:c0:d5:62:2c:90:46:d0: 26:55:7c:e6:7e:35:a9:70:a4:81:f0:26:28:c2:e4:c6:00:91: e2:9d:58:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZc8P9vzo9P8YDGeLo/1DR5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwMTgyYmVlOWFhMDEwYzFmZmQyZDgwNGY2YWE3YjE0YmRk YjkxZjcwHhcNMjUwNDIyMTAwMDE5WhcNMjUwNDIzMTAwMDE5WjAzMTEwLwYDVQQD EyhjYWE3OWM1YTI3NTVhM2ZmNjRjMmY0MTZmYzExZjEzMzk4ODlkOTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0v2nRa7O68pHznjsonV+uQl4OFA9 moIEO8aD8lyNQMPCIZvhg5SOIMQGwkMM7MqJbfBTmih9ryRKTRJVTPTA2IzXXbxw hAL32gLersRQtWTFRuackFcX4tYx1LCFdLJVYd1cN/6/kuk16MypH/nxnE8PxlRY ucVWoqBQLhdLbSiMfKAiWSQupM2wE3qJOvr85N9V5weNgjWAv6EwgPklgcUsqGKP 171bLsYv2Ib4tHUZTvSxRKRezawnV0rjwmU1ocuX+KEva6u3ls92MGetwSmOU5Yd 5Kfv+//bHOHsPhONXvPirvO7PX32n2FtsGqeo1uvpthQO4RprNmdYSo8nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMqnnFonVaP/ZML0FvwR8TOYidlVMB8GA1UdIwQY MBaAFFAYK+6aoBDB/9LYBPaqexS925H3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUJncjdwcWdFTUhfMHRnRTlxcDdGTDNia2ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9iZDQ1NjYtYWMyNy00NmY4LTk0Zjkt MTlkMWJiNjFkOWE3LzEvVUJncjdwcWdFTUhfMHRnRTlxcDdGTDNia2ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9iZDQ1NjYtYWMyNy00NmY4LTk0ZjktMTlkMWJiNjFkOWE3 LzEvVUJncjdwcWdFTUhfMHRnRTlxcDdGTDNia2ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJgkGsfFY w180g4bYEWA6Ikmxaw+BUuTL5VDrXFl1iqf9JAYroggbrVaOx0yv/YBDG++q51VW nTuaHgu2U5tbS/8tGOtOdwpbMdCj0o+OZA5iqRe7rsrqjfkwvgIgXiR/gGJwjgGp qTgd6gNValv8FfVVmbBlUrLQrtDRuXom0svCI04aL0SkFUq2lpkzOvdGnAqcFaDX nyNb+W3O1K/3GUwYt++ESfKaGVfOE9O9U3tMRbzpLaQG3y1fjag05O01v1Sfldh3 4m5B3f7ThsAhmuin0dDYwaOqcVhNrw1TguTw4hLA1WIskEbQJlV85n41qXCkgfAm KMLkxgCR4p1YdA== -----END CERTIFICATE-----Generated at Tue Apr 22 11:49:15 2025 by rpki-client