$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft File: tIUv-6fVfFqK-7bqW-r33-wMFFo.mft (raw, json) Hash identifier: yla91FZPJvsd8aOfYlcn8k+DJ8nlzliZD1Lx6PR5SlE= Subject key identifier: AF:BA:85:D2:A9:58:0C:59:FB:29:16:56:44:5E:26:8B:D0:41:B1:F2 Authority key identifier: B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A Certificate issuer: /CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a Certificate serial: 01960ED6C3BC4ED58258FA657484ED21DDB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft Manifest number: 14E5 Signing time: Mon 07 Apr 2025 06:01:17 +0000 Manifest this update: Mon 07 Apr 2025 06:01:17 +0000 Manifest next update: Tue 08 Apr 2025 06:01:17 +0000 Files and hashes: 1: 2zBG6wv0zKBe2XlbGkfLL9rOdtY.roa (hash: lxNpEB+wfb/SASGgTTjYX3zTxUdrCP8FyxAXU//G0JE=) 2: 60ZaPiBpi8SxBTjOjQUT9FiEU2Q.roa (hash: +EenJI8/Zu0itO/r18F94M+NWWU8CW03dUIDwunEbUc=) 3: 7Q9gLwoSUvmWbh9pchcvFCnXBMI.roa (hash: OqWyCVxCH/ByBizomU3lyw35etS/Okp+27Pxn29bVl8=) 4: EU2O-Gd0BV713EAdFoGJuGMnLgQ.roa (hash: DIGhFlsty46rXCRlbLUopCZPIy0Ap7bO0kln0jsUUZQ=) 5: O3sXFCWDkxRLQArJVgciZYJOH2k.roa (hash: wEiLpu8rEygqvBvHCRoBqicZ9xgf2J+eV7J8nj+KxjA=) 6: ZjHl0XpQM8CCJz6Om67G0wOmvS4.roa (hash: xCetPcOL8RFsZEGexQBgMW05eQfuM1TVnSNp6oyXZtQ=) 7: d8mFLNhZassFfsIT0V6Pg-FoNgA.roa (hash: G1lxk+WJgE19vtZBUhgAhwauP4CikNyKzPmcQ0hwXlc=) 8: hpi8FGXUqFwvyzbspUBbXSR-u5E.roa (hash: D+oqZ2gXKRa2ovM6yrY+DCG9y6qbKxbt+6ZJu7cuVlg=) 9: qttpBVUzvg-H-ScovtnzHfhab98.roa (hash: Z/Qik4bEzsKJTfqfp1D8dTDPNezW76BTvrr8ud6rEd8=) 10: tIUv-6fVfFqK-7bqW-r33-wMFFo.crl (hash: zmyKgNdjj6H4JEyO4e1/V12coP7olie92y/wBysgZ50=) 11: vqcl3DQ1E1K3lnM1bs8fqqNI4EQ.roa (hash: S9QBaWkrI9BQviKt66y8uBb8+Y6dNwU4YKfcgaHW4SE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:0e:d6:c3:bc:4e:d5:82:58:fa:65:74:84:ed:21:dd:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a Validity Not Before: Apr 7 06:01:17 2025 GMT Not After : Apr 8 06:01:17 2025 GMT Subject: CN=afba85d2a9580c59fb291656445e268bd041b1f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1f:2b:15:da:bd:0f:1c:59:91:12:10:0c:6f: d2:04:a2:8e:8d:1e:22:6a:73:0e:cc:5d:d4:6f:16: cd:b6:27:3e:43:c4:cd:9b:20:44:6f:a2:50:1b:3c: 2a:64:84:58:fc:bb:6b:75:79:68:15:19:a1:18:eb: a8:f3:b8:c9:75:67:b8:60:54:69:2b:28:be:d6:0f: 45:00:fb:50:0e:73:55:72:2a:98:cc:2f:ec:d7:c6: ec:fb:a0:fe:11:b3:61:28:70:02:16:b9:2c:34:20: d2:d8:2c:c0:8a:47:fc:20:49:04:6d:27:4a:13:96: 89:a1:5f:c5:fc:66:8d:5c:a5:3b:b4:61:5b:b4:07: 7f:b5:52:72:fb:05:9c:59:04:4f:68:e1:96:d7:7b: 5a:63:81:62:6a:3f:bb:8b:e5:10:6a:10:0d:2f:5d: 24:38:ce:3a:08:d1:6b:8f:05:4b:fd:28:0a:53:d6: 1a:98:50:3f:74:ef:ed:3f:0b:07:12:2b:75:da:27: 71:73:90:bb:70:da:37:4d:f3:20:04:7f:15:99:c4: f5:1d:6f:97:ed:ec:f3:b5:3a:53:2d:ca:6a:a0:00: 18:54:3b:2d:81:ff:64:93:36:c0:4f:61:c9:b6:1c: 06:0c:2d:2a:1e:18:9d:87:df:f5:8c:c4:50:8a:a6: bb:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:BA:85:D2:A9:58:0C:59:FB:29:16:56:44:5E:26:8B:D0:41:B1:F2 X509v3 Authority Key Identifier: keyid:B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:7b:aa:62:11:43:19:a2:a3:5c:be:38:e5:fc:b4:eb:5f:44: 18:ae:b3:5d:e2:e8:28:a7:d4:b5:62:6b:aa:6a:4c:cd:4c:4f: ba:b1:8e:aa:32:fa:80:93:c2:f3:02:f7:d0:c6:d5:16:56:13: 82:8c:8a:44:2c:c8:82:59:3b:37:ce:b0:14:eb:ff:23:00:1a: ad:b6:bd:b0:fa:7e:b2:1c:d2:89:58:9b:94:65:ab:c5:72:51: ea:4f:23:15:c6:2e:d9:ca:66:43:0e:ad:df:0c:42:04:d7:f1: 2b:be:7f:a8:43:3a:4a:f7:97:5a:fb:6f:65:49:f5:bf:24:d8: d5:e0:6b:18:40:71:4a:14:3b:bb:30:60:8f:65:ed:b7:a7:0a: db:c1:2a:83:9b:a3:10:fe:39:49:c5:71:02:cf:42:c9:b1:a3: 92:f0:a8:18:37:77:f8:8d:38:e5:ac:3f:6d:a1:2d:bd:81:eb: fb:78:6b:96:b3:2b:1b:72:f8:73:c1:5c:f5:4d:48:9a:26:fe: 42:9c:92:96:af:d7:8a:d9:84:cc:12:26:d3:3f:1f:5a:a9:60: fc:8d:52:5a:b1:6b:14:4a:3f:79:53:9e:e2:20:af:a5:16:6f: c5:f8:1a:4d:75:53:5b:7b:ae:d2:2d:2d:6c:93:67:e0:2f:79: 77:71:52:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYO1sO8TtWCWPpldITtId2wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ODUyZmZiYTdkNTdjNWE4YWZiYjZlYTViZWFmN2RmZWMw YzE0NWEwHhcNMjUwNDA3MDYwMTE3WhcNMjUwNDA4MDYwMTE3WjAzMTEwLwYDVQQD EyhhZmJhODVkMmE5NTgwYzU5ZmIyOTE2NTY0NDVlMjY4YmQwNDFiMWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxx8rFdq9DxxZkRIQDG/SBKKOjR4i anMOzF3UbxbNtic+Q8TNmyBEb6JQGzwqZIRY/LtrdXloFRmhGOuo87jJdWe4YFRp Kyi+1g9FAPtQDnNVciqYzC/s18bs+6D+EbNhKHACFrksNCDS2CzAikf8IEkEbSdK E5aJoV/F/GaNXKU7tGFbtAd/tVJy+wWcWQRPaOGW13taY4Fiaj+7i+UQahANL10k OM46CNFrjwVL/SgKU9YamFA/dO/tPwsHEit12idxc5C7cNo3TfMgBH8VmcT1HW+X 7ezztTpTLcpqoAAYVDstgf9kkzbAT2HJthwGDC0qHhidh9/1jMRQiqa7HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK+6hdKpWAxZ+ykWVkReJovQQbHyMB8GA1UdIwQY MBaAFLSFL/un1Xxaivu26lvq99/sDBRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9lNDVlMzAtZTdkOC00ZmI4LTkwYWQt ZjcxMDM4ZTk2N2E0LzEvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9lNDVlMzAtZTdkOC00ZmI4LTkwYWQtZjcxMDM4ZTk2N2E0 LzEvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsHuqYhFD GaKjXL445fy0619EGK6zXeLoKKfUtWJrqmpMzUxPurGOqjL6gJPC8wL30MbVFlYT goyKRCzIglk7N86wFOv/IwAarba9sPp+shzSiViblGWrxXJR6k8jFcYu2cpmQw6t 3wxCBNfxK75/qEM6SveXWvtvZUn1vyTY1eBrGEBxShQ7uzBgj2Xtt6cK28Eqg5uj EP45ScVxAs9CybGjkvCoGDd3+I045aw/baEtvYHr+3hrlrMrG3L4c8Fc9U1Imib+ QpySlq/XitmEzBIm0z8fWqlg/I1SWrFrFEo/eVOe4iCvpRZvxfgaTXVTW3uu0i0t bJNn4C95d3FSrg== -----END CERTIFICATE-----Generated at Mon Apr 7 09:25:12 2025 by rpki-client