$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft File: ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft (raw, json) Hash identifier: 8xg7RLkbswrFEToQiUIbe3Qu4zPDHMCjTD4Q5oHTcVI= Subject key identifier: B2:67:66:07:9B:0B:77:B5:2D:FC:5F:C0:DF:60:58:DA:0D:9B:80:8B Authority key identifier: 44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16 Certificate issuer: /CN=44e888a76e99851b01fb86cec537d4d8e610de16 Certificate serial: 01960F7B87484388FDEDDC6242716BC75F8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft Manifest number: 14E1 Signing time: Mon 07 Apr 2025 09:01:15 +0000 Manifest this update: Mon 07 Apr 2025 09:01:15 +0000 Manifest next update: Tue 08 Apr 2025 09:01:15 +0000 Files and hashes: 1: 0HtxlG1tnNzIep81031kd9p-fBw.roa (hash: OXzBPa2feSryqGHpXn/FEvG/w29ffxoaGIUchPvm3mk=) 2: 15E544iqbijbzQkYAdS47aYrD9A.roa (hash: UqW9jr3a9GHG7Uy8FuE2NGM92ysT2U6k57t/AfdIbps=) 3: DIg21dc1dVm_1EL8Uz7ZqrMj12U.roa (hash: j71JN0QzxLq1nQDYGrddtXWmn2JSxcJYC6OlLCXnmhY=) 4: HLg6VWsPMYDiVDNc71bln7BtlmI.roa (hash: zOH/eTKTLW5itJCzaK8r7su+5axAuuxkhBxsE0F25B8=) 5: QeYOzxISXgl6M7OixDgTpfZERu4.roa (hash: s4UEY+I5WghrV5P9V2zo2Pa66DhiVa+5TyKkmVvFOc4=) 6: ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl (hash: g6turobvDuZvRV1DBpBSIZ3jsyo2dj4/SGTWJkaUjyQ=) 7: eemUGRUYW7MNIIBVrAM7WAtHk60.roa (hash: SXzbJeZMYQE3HuAfnB9DA2zo/eUl42o9VNZpCcIkC3Q=) 8: iVpmbRMejTGUfDF-Oj_sVv26rNM.roa (hash: 1p8ViB52qnwGOZfoqxvFyvMaRfbwGTRlAo1t3TSQgzY=) 9: mb6SEFuusb8ccfPkUgnr1G-16Gg.roa (hash: Cbmq4R34rOxE+s++uid9OxtsaiHFlr2Tu54+IMtMuXI=) 10: oD5ktIApamXxgwjGSpDfwIhQqYQ.roa (hash: yFFoY0qvHYFgL03wlalkQiMq33WT4afE35wQSaZE/qI=) 11: xHPbbeon1SNsE_0gmuT8lFya0kY.roa (hash: m7FtBUaCPAlNvC/LFbXZEFv5bG9Pb/Vc9bKRiuxNTq8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 08 Apr 2025 09:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:0f:7b:87:48:43:88:fd:ed:dc:62:42:71:6b:c7:5f:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44e888a76e99851b01fb86cec537d4d8e610de16 Validity Not Before: Apr 7 09:01:15 2025 GMT Not After : Apr 8 09:01:15 2025 GMT Subject: CN=b26766079b0b77b52dfc5fc0df6058da0d9b808b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3b:28:d8:17:09:c1:61:11:88:81:21:9e:80: ae:ef:14:71:85:0c:b7:4c:52:19:2d:41:77:29:30: 58:ee:9e:4a:39:bd:f0:22:ec:e3:b8:74:9e:2b:1e: d1:40:bb:27:d2:17:be:4a:0b:b7:18:68:7f:3a:94: e2:36:a5:c4:d3:5d:87:14:39:df:35:a9:25:16:15: c8:44:7d:b7:87:d9:2a:e1:03:c6:36:f1:ba:a7:36: 26:f2:f8:7a:6d:73:a9:47:d0:1b:e4:1c:75:1e:5c: eb:32:10:b4:88:fd:d2:cd:3e:88:12:d1:4c:88:aa: cb:a6:c6:6f:2b:2a:41:b6:23:8b:4b:91:4f:df:25: 0a:97:f6:6b:a6:1d:c8:c0:ad:e7:c7:36:de:2b:30: 7d:ee:34:42:ac:3d:e1:3c:4d:b8:33:a2:7b:2c:4b: 8e:f7:8a:bf:ed:99:97:91:98:0b:0c:93:58:d4:15: 7f:b2:c9:6c:02:ee:1b:c4:36:d7:87:2a:7c:ff:d7: cd:9d:07:02:e9:68:ef:a1:02:9a:e0:42:93:ad:62: 70:0d:00:d6:fe:0f:5a:10:0a:fb:ca:e1:57:b9:8e: a6:14:28:66:29:7a:74:4e:dc:65:d7:ad:3c:34:c3: 11:c6:67:c0:37:1a:89:75:61:dd:33:05:32:15:9e: 8e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:67:66:07:9B:0B:77:B5:2D:FC:5F:C0:DF:60:58:DA:0D:9B:80:8B X509v3 Authority Key Identifier: keyid:44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:6d:e5:38:63:bf:09:06:c9:17:fb:b2:eb:5c:65:65:2e:5a: d2:a0:6a:b0:d2:ee:f1:5e:81:5e:89:1c:9e:23:67:e8:86:c8: 39:88:78:3b:8f:a6:02:e7:7d:0e:97:db:68:58:1a:64:65:99: d5:c9:8d:2c:a2:95:ff:a5:6a:89:54:e0:c8:55:df:fb:20:2d: 01:09:64:ea:ff:67:b2:de:f9:24:91:b0:82:66:d2:bc:b9:16: 9f:9b:52:e4:a8:89:60:e4:a9:f8:1a:37:fd:73:79:7e:77:4b: b3:03:e9:14:6e:30:3c:60:4e:cb:81:03:d7:26:b1:1a:f3:14: 01:94:8f:0f:36:06:e1:cf:57:64:a4:dc:7a:e4:f8:2c:90:39: 05:62:d8:db:97:f1:7b:12:84:0e:43:ad:72:7b:8a:61:aa:f1: 88:47:bc:c0:da:38:5e:6f:d3:c8:45:65:92:ad:89:53:a0:51: 01:7d:43:5d:b0:30:42:9c:41:7b:d8:a0:be:6a:46:d0:3d:df: 9a:43:0a:74:6d:e0:ac:75:37:49:c3:bb:db:4b:04:46:4f:60: c0:b2:08:8b:7a:60:76:cb:ed:d1:6c:29:a3:82:ef:20:48:28: 63:ea:64:14:be:d4:b7:cc:74:6c:7f:1b:c2:3f:03:bb:47:58: cf:31:fc:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYPe4dIQ4j97dxiQnFrx1+OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0ZTg4OGE3NmU5OTg1MWIwMWZiODZjZWM1MzdkNGQ4ZTYx MGRlMTYwHhcNMjUwNDA3MDkwMTE1WhcNMjUwNDA4MDkwMTE1WjAzMTEwLwYDVQQD EyhiMjY3NjYwNzliMGI3N2I1MmRmYzVmYzBkZjYwNThkYTBkOWI4MDhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjso2BcJwWERiIEhnoCu7xRxhQy3 TFIZLUF3KTBY7p5KOb3wIuzjuHSeKx7RQLsn0he+Sgu3GGh/OpTiNqXE012HFDnf NaklFhXIRH23h9kq4QPGNvG6pzYm8vh6bXOpR9Ab5Bx1HlzrMhC0iP3SzT6IEtFM iKrLpsZvKypBtiOLS5FP3yUKl/Zrph3IwK3nxzbeKzB97jRCrD3hPE24M6J7LEuO 94q/7ZmXkZgLDJNY1BV/sslsAu4bxDbXhyp8/9fNnQcC6WjvoQKa4EKTrWJwDQDW /g9aEAr7yuFXuY6mFChmKXp0Ttxl1608NMMRxmfANxqJdWHdMwUyFZ6OkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLJnZgebC3e1LfxfwN9gWNoNm4CLMB8GA1UdIwQY MBaAFEToiKdumYUbAfuGzsU31NjmEN4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUk9pSXAyNlpoUnNCLTRiT3hUZlUyT1lRM2hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS84MmUyYmEtNDQyYy00MmIwLTkzMTUt YmMwZGJhOTMyYjM1LzEvUk9pSXAyNlpoUnNCLTRiT3hUZlUyT1lRM2hZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS84MmUyYmEtNDQyYy00MmIwLTkzMTUtYmMwZGJhOTMyYjM1 LzEvUk9pSXAyNlpoUnNCLTRiT3hUZlUyT1lRM2hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAG3lOGO/ CQbJF/uy61xlZS5a0qBqsNLu8V6BXokcniNn6IbIOYh4O4+mAud9DpfbaFgaZGWZ 1cmNLKKV/6VqiVTgyFXf+yAtAQlk6v9nst75JJGwgmbSvLkWn5tS5KiJYOSp+Bo3 /XN5fndLswPpFG4wPGBOy4ED1yaxGvMUAZSPDzYG4c9XZKTceuT4LJA5BWLY25fx exKEDkOtcnuKYarxiEe8wNo4Xm/TyEVlkq2JU6BRAX1DXbAwQpxBe9igvmpG0D3f mkMKdG3grHU3ScO720sERk9gwLIIi3pgdsvt0Wwpo4LvIEgoY+pkFL7Ut8x0bH8b wj8Du0dYzzH88Q== -----END CERTIFICATE-----Generated at Mon Apr 7 15:21:33 2025 by rpki-client