$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft File: p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft (raw, json) Hash identifier: 4lI2pUr6hET9Gc0na1yqKjvXYDQQeZOzCr5tf9UgQbA= Subject key identifier: CB:2F:FC:7E:78:9D:78:C8:DE:BD:7C:8E:84:B1:A2:CB:DA:39:53:2E Authority key identifier: A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93 Certificate issuer: /CN=a79bba2805a988954e4fec42570530f16f9e7093 Certificate serial: 019642C33D5936BEBB8F9A45CF7122286B73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft Manifest number: 150A Signing time: Thu 17 Apr 2025 08:00:13 +0000 Manifest this update: Thu 17 Apr 2025 08:00:13 +0000 Manifest next update: Fri 18 Apr 2025 08:00:13 +0000 Files and hashes: 1: D-RIX_FD-SN5SshOisKYwCgAV_I.roa (hash: x033PUL0ZGG5mDhT/he8/ieNNlTHX9WAHAFDtaJQ278=) 2: DzfEbFPfYy4xpas3bsxIDlFZktA.roa (hash: THhbtWRVoUEwxJC8CZKbYrVSasGjOcgtKoQ/LVP3UKA=) 3: E9n95xnL19yX1B4Vk9ExkIt3f-c.roa (hash: ouMNy3kdRPfar+w1HNS2jM0LMO/r+ZZQenoBAODEfBY=) 4: EAoNPZ8TpgdLFjCSj501GJeuEXI.roa (hash: pO6PSYGesSNZg2BIOmFMIZ89ZMsZTFVJdrF49KPq8PA=) 5: FFaDrp2TE8Iso6bJlqnb0FqxMJo.roa (hash: Jw9G+J8hnCo8w1musIzxpySO6bTcvYrzNLckyhAd2sE=) 6: FXDFb34PBHFpzXqxsfO-MRRoL1w.roa (hash: oabg5c6EyRNzxsL44FI1GqhM5cn4+01B5g9m9wTra50=) 7: IUh9_C97qpOKm_8AV-AspCaoEAg.roa (hash: c2S3m+7nRWXLhOWwBs+WGI3pFEVCypK98I+qc9J+WoQ=) 8: Nbis52_bGmBIGC7k7OWz54ZVymo.roa (hash: aH/DSjSBHo+CUhmGlittWaZYo1UBwB3kdgrpakh3geQ=) 9: PPsYUSjJ6B10FlewER5Ai8nn-_A.roa (hash: 10T1YdRCwRDgbSqL2l2y0wL7RPOmP97+IJQfqf219GY=) 10: oJr4DCeqtN2tV6Ugf36L9eXTcTI.roa (hash: vOwTJ+3Vsj2ap8ElFcEgLM26b3Nku6y6ruqjJGc7XJs=) 11: p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl (hash: hG3UZV0xDlXqecSBULQn0ri3wWeudi8oWb/knHuk5yc=) 12: pY29XiCKfPgxYFYQ6-Ey_qrcL8w.roa (hash: UStN0NQIs1Hh3GK9cdElOtzaqGJ6jlYdtTPTd6s3Eic=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 18 Apr 2025 07:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:42:c3:3d:59:36:be:bb:8f:9a:45:cf:71:22:28:6b:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a79bba2805a988954e4fec42570530f16f9e7093 Validity Not Before: Apr 17 08:00:13 2025 GMT Not After : Apr 18 08:00:13 2025 GMT Subject: CN=cb2ffc7e789d78c8debd7c8e84b1a2cbda39532e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4d:00:96:e8:87:f8:3f:24:9d:4f:06:bb:50: 3f:d3:1d:ff:07:58:76:88:33:24:84:97:5d:9c:4a: fa:bf:1c:2e:c6:3f:01:55:a6:5f:2e:28:15:8b:2a: b2:0d:39:88:2f:d6:9f:ee:7d:b2:9c:89:b5:4c:8f: 72:7d:fa:72:6d:66:57:2e:2b:a8:72:00:aa:95:bc: 18:c5:7b:60:9c:9c:af:b9:c4:ac:8e:ec:97:7f:63: ca:b3:8a:5a:96:4c:56:f8:18:89:2c:db:64:05:62: b0:b2:90:3a:d4:43:20:98:f3:0d:d4:2a:1b:de:10: f9:d9:82:11:5c:a1:86:78:c1:8e:39:48:55:fd:14: df:84:93:22:08:32:f3:39:70:b5:99:ee:5d:39:5e: 60:7b:ad:b9:78:08:49:63:94:d3:28:ac:ca:35:e0: 15:93:5e:6b:2b:8e:d3:7c:32:f8:52:f7:e0:89:ce: a6:6c:93:11:79:75:fa:c7:2b:a4:4e:82:92:6f:8b: 0f:9e:b0:cc:90:bf:5b:18:25:97:6d:d4:f7:17:68: b2:f5:88:ab:0a:24:19:0c:b1:65:d5:f1:25:f0:a3: 54:97:bf:ca:1f:04:2f:69:a9:e3:c6:4b:2e:76:df: 4c:0f:1f:ca:c5:b1:25:ec:c1:f0:29:b1:17:33:73: b3:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:2F:FC:7E:78:9D:78:C8:DE:BD:7C:8E:84:B1:A2:CB:DA:39:53:2E X509v3 Authority Key Identifier: keyid:A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:ab:37:6d:63:be:b0:ab:31:a2:55:40:74:77:5a:b7:67:04: 45:50:b9:9d:29:5d:fa:24:8a:d1:df:e4:f9:cc:5d:be:63:1c: 57:d9:9f:ba:81:fc:12:31:b1:3e:c2:36:ff:36:01:e8:70:ca: 0f:9e:7d:8b:c7:7e:66:74:4d:a0:ec:1e:ca:04:cc:45:02:b3: 4f:48:72:43:db:de:89:8d:b9:da:36:11:07:df:03:78:2d:b9: 38:15:77:3d:9c:13:16:cf:3c:44:bd:7e:e3:e2:0c:6a:d7:d9: c0:55:33:a5:de:5d:43:1d:37:82:91:72:8b:74:34:e0:bb:82: fe:37:fd:cc:13:3c:02:ac:0a:96:79:cb:8c:f6:cf:12:50:4e: e3:36:c7:f6:1f:0a:1e:16:2c:5b:9b:27:fb:3d:5b:42:5d:53: 6e:e1:a5:70:3d:68:bc:c4:60:84:b5:fa:7c:37:b6:12:00:91: ff:a6:12:08:9b:13:a1:52:21:ee:96:2c:dc:d8:a5:4b:f8:18: 88:5b:84:fd:8a:09:a1:a2:41:d7:24:fa:c2:9b:9f:8a:79:d9: 11:16:76:d6:b7:35:f5:66:a6:cb:a0:86:05:7f:52:d3:da:27: ae:a8:c4:18:89:ed:25:b7:ec:cc:06:d3:e0:eb:ef:e2:6f:cc: cb:c1:f4:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZCwz1ZNr67j5pFz3EiKGtzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3OWJiYTI4MDVhOTg4OTU0ZTRmZWM0MjU3MDUzMGYxNmY5 ZTcwOTMwHhcNMjUwNDE3MDgwMDEzWhcNMjUwNDE4MDgwMDEzWjAzMTEwLwYDVQQD EyhjYjJmZmM3ZTc4OWQ3OGM4ZGViZDdjOGU4NGIxYTJjYmRhMzk1MzJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtk0AluiH+D8knU8Gu1A/0x3/B1h2 iDMkhJddnEr6vxwuxj8BVaZfLigViyqyDTmIL9af7n2ynIm1TI9yffpybWZXLiuo cgCqlbwYxXtgnJyvucSsjuyXf2PKs4palkxW+BiJLNtkBWKwspA61EMgmPMN1Cob 3hD52YIRXKGGeMGOOUhV/RTfhJMiCDLzOXC1me5dOV5ge625eAhJY5TTKKzKNeAV k15rK47TfDL4Uvfgic6mbJMReXX6xyukToKSb4sPnrDMkL9bGCWXbdT3F2iy9Yir CiQZDLFl1fEl8KNUl7/KHwQvaanjxksudt9MDx/KxbEl7MHwKbEXM3OzRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMsv/H54nXjI3r18joSxosvaOVMuMB8GA1UdIwQY MBaAFKebuigFqYiVTk/sQlcFMPFvnnCTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDV1NktBV3BpSlZPVC14Q1Z3VXc4Vy1lY0pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9kMTQwZmItMDNhZS00NWQ5LThkZGMt ZTFlZDlkZDJhMDJhLzEvcDV1NktBV3BpSlZPVC14Q1Z3VXc4Vy1lY0pNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9kMTQwZmItMDNhZS00NWQ5LThkZGMtZTFlZDlkZDJhMDJh LzEvcDV1NktBV3BpSlZPVC14Q1Z3VXc4Vy1lY0pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK6s3bWO+ sKsxolVAdHdat2cERVC5nSld+iSK0d/k+cxdvmMcV9mfuoH8EjGxPsI2/zYB6HDK D559i8d+ZnRNoOweygTMRQKzT0hyQ9veiY252jYRB98DeC25OBV3PZwTFs88RL1+ 4+IMatfZwFUzpd5dQx03gpFyi3Q04LuC/jf9zBM8AqwKlnnLjPbPElBO4zbH9h8K HhYsW5sn+z1bQl1TbuGlcD1ovMRghLX6fDe2EgCR/6YSCJsToVIh7pYs3NilS/gY iFuE/YoJoaJB1yT6wpufinnZERZ21rc19Wamy6CGBX9S09onrqjEGIntJbfszAbT 4Ovv4m/My8H0sQ== -----END CERTIFICATE-----Generated at Thu Apr 17 13:26:38 2025 by rpki-client