$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.mft File: sLWoCnEG4KS4VFyBULtyxpn8yaA.mft (raw, json) Hash identifier: Sikyyx5/d3dloE0cxLlK12mextffWtW6N4N/2VoY6rA= Subject key identifier: BF:B8:73:5C:7A:E3:43:3A:37:E0:9C:E7:2E:AC:59:A9:8C:6B:EB:3B Authority key identifier: B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0 Certificate issuer: /CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0 Certificate serial: 01960B677FA4C77E58B80EE6598D26587B6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.mft Manifest number: 14F5 Signing time: Sun 06 Apr 2025 14:00:54 +0000 Manifest this update: Sun 06 Apr 2025 14:00:54 +0000 Manifest next update: Mon 07 Apr 2025 14:00:54 +0000 Files and hashes: 1: 60jG5Ay8pKNRLAaYiabGAbMAWcU.roa (hash: mGDjXdclRD6cM00fzezmu8njPZGu0i86EMmzQCWdsaI=) 2: 8NknCKB4mqEufbZ6UbHgAa8xKGk.roa (hash: +VuXhmjH2zdhVZOeQIf+1XfhIBEvtUJA5CNUFP6jbIc=) 3: Cwb1KDzjyZP06ERQCkOqE8eDn-Q.roa (hash: qEbiLSfggbr/wcV1CfVb4G8sOcwZPVPdEo2xFZT7GWw=) 4: M4GvrNf8uqUm8NINVMsgeY-dZpg.roa (hash: JFzR2ZsY7nrJvXYkxcf00jQkDAoE9ASXG53ZH1eILBw=) 5: XXx0PZbW0VSnHcKqWvct0KGeX5o.roa (hash: fg2kYbNMaJFsDmSVzEYMa+3owPgOnqiysynI+fCXGgg=) 6: XqyfpygCBb8Q3tIPPqdoPK94M0A.roa (hash: 2VTgMTAP00AWrF9/qszpE/dPLTmJ6fjO0h7TyCaHdtE=) 7: d5wYN4sqYmgKKKUN9X-8jp9PKTs.roa (hash: /7Xb7BgMP/VziPk4Q/U+uMUdmAyttT7O93i5sL6urDU=) 8: i1CU3OfnjKON64QGCajnRU5gSS0.roa (hash: YY36Gemk4OiepX/UrPW7HzLvQewBOeW3gkIiItZgQz8=) 9: jU-enqBlwHSK5LFQUkQMv3mnQ3c.roa (hash: XGjlZdDrp7Q05Es+vT4dQhjxGrAgZ9KHZykl/3VpHuk=) 10: rgPd-lPBT_KjoGNurNCPr8-tYLM.roa (hash: 7UFfmlghHed6gv5YUhlj2bi7/Km6EbVr9jqYqXUYH8o=) 11: sLWoCnEG4KS4VFyBULtyxpn8yaA.crl (hash: 6s9GztXd6KV1aqqe4w53SdSal0u08h3FjwXk3Iq52GM=) 12: uYQNZGrXH6jilfHVW7M6-uKjZF8.roa (hash: K7dbhIw3GKL8CpYsfdoECZtVDjcGxNIlpZxMSzxg0fc=) 13: zad7TKoNmHhoc0CyHOzgSXKr6f4.roa (hash: LQ6zogTRTgGoz9vqyWdA5yZND4PDb2ytjo7mWtS7rF8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.mft rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 07 Apr 2025 10:07:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:0b:67:7f:a4:c7:7e:58:b8:0e:e6:59:8d:26:58:7b:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0 Validity Not Before: Apr 6 14:00:54 2025 GMT Not After : Apr 7 14:00:54 2025 GMT Subject: CN=bfb8735c7ae3433a37e09ce72eac59a98c6beb3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ce:48:42:2c:01:86:b9:23:17:1d:83:e2:e7: d2:22:88:eb:cb:69:88:2d:f9:af:85:06:c3:99:6d: e8:41:f6:5c:0d:dd:23:e3:1b:b1:e2:29:10:cd:a4: 83:8b:3f:99:4c:60:f2:76:4c:4b:6a:11:d4:d3:b3: ab:c7:a3:9b:a5:44:ce:d1:a4:ae:7b:37:75:b1:f7: a5:bc:2f:97:e2:7f:54:58:f2:42:b6:f8:69:44:7e: d4:47:78:37:40:71:a8:2b:1d:e7:18:50:37:30:7d: ae:ab:4d:e5:00:bc:08:ee:b1:44:eb:ac:a2:a3:c6: 86:1c:b7:fd:47:35:d5:c7:47:f0:95:a9:a8:16:23: ec:02:c9:c0:42:f2:ec:ab:ae:19:b0:73:8f:9c:69: cb:dc:db:d0:a7:64:ab:64:09:cd:05:24:7a:c9:aa: 93:50:48:5c:9a:92:8a:a4:1e:e3:b0:95:4e:fc:95: 3c:c9:bf:f8:87:63:d5:34:dc:40:e5:5a:db:39:1e: 70:fe:16:2d:4a:1a:8b:cb:c3:61:04:ab:5d:cd:58: f3:db:72:d4:13:a0:a2:d5:69:ba:99:e7:69:11:d9: b9:79:77:ee:ae:d8:e6:bc:98:4d:a4:bb:49:78:63: de:93:67:56:75:76:c0:14:db:31:57:55:60:3f:1e: 33:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:B8:73:5C:7A:E3:43:3A:37:E0:9C:E7:2E:AC:59:A9:8C:6B:EB:3B X509v3 Authority Key Identifier: keyid:B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:e6:b8:74:85:c9:fb:ef:51:af:08:55:94:1f:5d:1a:9c:49: c8:3e:17:ba:d3:3b:89:56:57:bb:37:d1:90:73:bb:c9:4f:ff: 7d:bd:51:40:f4:8c:f7:c6:e4:1f:45:c0:6c:c6:86:fb:96:3f: be:e3:9b:7e:27:8a:26:36:de:2b:ac:e7:c7:fb:61:55:2c:42: 8c:76:95:bf:63:e1:3c:10:d7:69:dd:14:ab:a6:0c:41:34:9a: c1:0b:43:9b:39:2a:c9:66:cb:1d:12:9a:31:15:ad:9d:b0:bc: b8:61:43:71:90:83:ba:d7:49:9c:11:4f:09:1d:0e:1f:55:a8: 3e:58:a6:32:88:7f:ec:d8:22:e1:d4:ea:26:e2:02:02:50:8e: 96:c8:18:29:a7:6b:af:ad:ac:65:4e:62:10:db:39:b3:74:22: d7:15:e4:db:54:c5:d2:36:3e:66:ea:f0:b0:fa:5b:be:46:f3: 0d:dc:48:f1:3a:c1:98:c2:12:05:d3:b1:3c:2b:1e:4e:c6:f8: a7:dc:d0:8e:0e:e2:31:59:14:22:7b:39:0c:76:d8:4b:fb:ec: fc:77:43:73:63:f3:05:2d:97:7f:35:8c:06:81:da:c7:a9:9b: 88:85:c6:76:be:5b:ea:52:99:5d:ae:77:31:70:d3:7f:9d:78: b3:51:20:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYLZ3+kx35YuA7mWY0mWHtvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYjVhODBhNzEwNmUwYTRiODU0NWM4MTUwYmI3MmM2OTlm Y2M5YTAwHhcNMjUwNDA2MTQwMDU0WhcNMjUwNDA3MTQwMDU0WjAzMTEwLwYDVQQD EyhiZmI4NzM1YzdhZTM0MzNhMzdlMDljZTcyZWFjNTlhOThjNmJlYjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA085IQiwBhrkjFx2D4ufSIojry2mI LfmvhQbDmW3oQfZcDd0j4xux4ikQzaSDiz+ZTGDydkxLahHU07Orx6ObpUTO0aSu ezd1sfelvC+X4n9UWPJCtvhpRH7UR3g3QHGoKx3nGFA3MH2uq03lALwI7rFE66yi o8aGHLf9RzXVx0fwlamoFiPsAsnAQvLsq64ZsHOPnGnL3NvQp2SrZAnNBSR6yaqT UEhcmpKKpB7jsJVO/JU8yb/4h2PVNNxA5VrbOR5w/hYtShqLy8NhBKtdzVjz23LU E6Ci1Wm6medpEdm5eXfurtjmvJhNpLtJeGPek2dWdXbAFNsxV1VgPx4z5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL+4c1x640M6N+Cc5y6sWamMa+s7MB8GA1UdIwQY MBaAFLC1qApxBuCkuFRcgVC7csaZ/MmgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0xXb0NuRUc0S1M0VkZ5QlVMdHl4cG44eWFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9mMTUzZGMtY2JmYi00YTRmLTgwZDIt NzQ1ZTA4ZmU1OGM2LzEvc0xXb0NuRUc0S1M0VkZ5QlVMdHl4cG44eWFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9mMTUzZGMtY2JmYi00YTRmLTgwZDItNzQ1ZTA4ZmU1OGM2 LzEvc0xXb0NuRUc0S1M0VkZ5QlVMdHl4cG44eWFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi+a4dIXJ ++9RrwhVlB9dGpxJyD4XutM7iVZXuzfRkHO7yU//fb1RQPSM98bkH0XAbMaG+5Y/ vuObfieKJjbeK6znx/thVSxCjHaVv2PhPBDXad0Uq6YMQTSawQtDmzkqyWbLHRKa MRWtnbC8uGFDcZCDutdJnBFPCR0OH1WoPlimMoh/7Ngi4dTqJuICAlCOlsgYKadr r62sZU5iENs5s3Qi1xXk21TF0jY+ZurwsPpbvkbzDdxI8TrBmMISBdOxPCseTsb4 p9zQjg7iMVkUIns5DHbYS/vs/HdDc2PzBS2XfzWMBoHax6mbiIXGdr5b6lKZXa53 MXDTf514s1Egmg== -----END CERTIFICATE-----Generated at Sun Apr 6 17:56:16 2025 by rpki-client