$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft File: 8E6yBPNYAEeIIk4vsY5NXnS-v40.mft (raw, json) Hash identifier: fZW2fGzL1o7fR/gRysFUZ+qG33KfaUWDmU59OsncOc8= Subject key identifier: 09:AB:AF:5C:54:1E:64:99:A5:6C:38:EF:11:8F:EB:55:C8:4B:B5:FD Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d Certificate serial: 019607C1A3F5D8C3A64196E575719A845E9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft Manifest number: 0EF5 Signing time: Sat 05 Apr 2025 21:00:52 +0000 Manifest this update: Sat 05 Apr 2025 21:00:52 +0000 Manifest next update: Sun 06 Apr 2025 21:00:52 +0000 Files and hashes: 1: 1gtsCJyHdZ_mz1Vmc6aYSOZRTug.roa (hash: i5FmepCDxpYMWJtIWumi8I2WhRPEkV925D+zrSFUKqc=) 2: 8E6yBPNYAEeIIk4vsY5NXnS-v40.crl (hash: OqjKZAQ+2QIW4R925VS8Z15Ybw2smiPS21XrETi0Lww=) 3: AFN8OqvwZcsViNN-78O6BvKElME.roa (hash: gpOsJUC88/6LJdG6QKOWEGeO9P8/YN9o1I8OET+li9E=) 4: HzrOiNg5IGbvxaY6EJtaFTiPwJc.roa (hash: YVHrJ9qFMIVBjiboinqQXWeAb+UlfN0QhYG5EqTl3JU=) 5: KuzmOknbrD4Lg71OoDCO-y0GoDQ.roa (hash: L4TpWALjC8fwxZDKVNiQiJm1WAVC/DpX7t4BNMww1vk=) 6: Xw6d5Q0Ua1XRZl5MjugABbqCL-g.roa (hash: 7lcJjOAWe6HvAJ8ku7/K4ZXcDrrbdwoOF4w1DXALzIA=) 7: Y1odvpmyDgd_SZNft3LtP_Y9m5Q.roa (hash: 6tgo1juOE3j4wf1OK40ZNiTNEBkar47yAuVkY/NJHx0=) 8: hFAl1HVJl_9l3iGKDXy7Q3YLL-4.roa (hash: t3lebss2cDykApymCPDX/VFxLKKQQSAwSa+9uLLWAvg=) 9: lmLPjrfNDPS9XohB9eEXKDTvTVw.roa (hash: YUDeNZCjz7C+nv1yj/KNPiCOaWxteb6jP1PE6tH/qfc=) 10: mHX0FmbVMRqJAlWCzCmrhY01JJs.roa (hash: lTlxWXxEQJkGJvs557CO0nbvucEpOcbcDj+JEOR5KCA=) 11: vwnatcxNwSZQjN_EAgtCA6gLjGQ.roa (hash: is+QjkNRgmAAQFm1WLdb+VI9EY3XXeS9tjv/htKBkks=) 12: wOKO5BfevHhq6oErWALub8pu8xU.roa (hash: JFoG8SyIRYLSlAyJTBoEWjYzWkPzFQdNMJLWFlUmxRU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 06 Apr 2025 21:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:07:c1:a3:f5:d8:c3:a6:41:96:e5:75:71:9a:84:5e:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d Validity Not Before: Apr 5 21:00:52 2025 GMT Not After : Apr 6 21:00:52 2025 GMT Subject: CN=09abaf5c541e6499a56c38ef118feb55c84bb5fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:43:7b:a5:76:87:4b:3f:ee:c7:d6:0e:7a:4b: 80:68:bd:42:e5:56:97:d4:f6:c9:87:be:32:40:94: f4:87:23:2b:c2:ff:3f:c2:73:3f:40:ba:f0:bb:77: 91:2c:3b:f1:c7:da:d4:03:70:3e:36:8e:af:1f:99: 0f:08:8c:09:ee:ac:1d:06:ee:8e:9c:62:0f:80:c6: bf:91:79:05:38:3a:f0:3e:00:39:56:ca:00:0f:99: 09:2f:0f:ef:de:93:87:4c:16:64:f8:a3:44:b5:66: 39:6f:64:83:1c:8d:59:2b:8d:2f:74:e0:07:6b:63: db:d9:e7:c7:c3:19:bb:22:67:2c:c1:82:2c:c1:e1: d9:ad:88:66:51:1b:bd:c3:26:20:ac:67:09:ca:25: 97:77:a6:35:fd:1e:ee:08:3e:a5:91:61:ca:23:b8: e8:38:0f:32:63:30:4b:26:d5:e3:18:92:f4:c7:96: 35:d3:28:1b:38:fc:ba:77:2e:7d:3a:35:65:b4:ff: 1c:b3:ae:3c:e4:93:2f:fc:14:ea:de:f3:8a:22:c3: 7c:3e:40:98:47:5c:58:e3:91:2e:30:f5:8a:47:69: 73:ff:8f:97:9a:9b:7f:d7:c0:2e:c7:43:b7:7a:ad: 8a:1f:c2:f9:3d:e2:66:fc:7a:7d:5d:25:fd:ac:95: 33:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:AB:AF:5C:54:1E:64:99:A5:6C:38:EF:11:8F:EB:55:C8:4B:B5:FD X509v3 Authority Key Identifier: keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:45:ae:8b:cb:e3:d5:31:c6:dc:6f:2d:b4:80:dc:85:eb:c4: 3c:45:46:4c:1c:e4:0d:44:a7:ff:ea:15:2d:8a:10:58:81:eb: ea:2b:f2:df:06:85:fc:7b:f2:28:10:2d:01:a0:6c:64:12:c4: 80:15:39:97:95:c3:9f:89:26:98:76:b9:f0:2f:d3:7d:d8:3d: 99:f7:e5:12:5c:34:ec:57:78:e4:e2:42:0e:23:eb:8a:7b:5b: 89:92:75:33:30:62:8b:ac:63:7b:28:9c:b1:0f:db:ae:15:8e: 9e:e0:24:04:57:3c:9d:07:cc:f0:cf:5d:6e:f7:a2:46:a4:a8: 62:55:23:04:64:d1:cb:4b:32:7f:1f:df:6a:8b:7f:d3:8f:25: e9:e0:30:42:41:fc:2f:51:4a:5c:51:dc:43:ca:01:f5:c0:a8: 81:95:f4:47:76:4a:27:3e:26:d0:a3:3b:33:de:76:d9:96:61: 60:6a:b6:fa:78:61:32:c7:46:78:5f:aa:97:8d:e1:e7:59:9b: eb:fc:fe:b8:49:ec:54:20:c2:53:ca:18:5d:60:c2:5e:4e:58: ad:30:ea:f0:e0:39:c7:2f:99:01:bf:a1:3e:29:15:f3:a6:2b: 7a:99:da:74:34:87:ad:2b:e0:97:06:14:f6:bc:cb:73:a3:fa: f1:70:86:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYHwaP12MOmQZbldXGahF6fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGViMjA0ZjM1ODAwNDc4ODIyNGUyZmIxOGU0ZDVlNzRi ZWJmOGQwHhcNMjUwNDA1MjEwMDUyWhcNMjUwNDA2MjEwMDUyWjAzMTEwLwYDVQQD EygwOWFiYWY1YzU0MWU2NDk5YTU2YzM4ZWYxMThmZWI1NWM4NGJiNWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UN7pXaHSz/ux9YOekuAaL1C5VaX 1PbJh74yQJT0hyMrwv8/wnM/QLrwu3eRLDvxx9rUA3A+No6vH5kPCIwJ7qwdBu6O nGIPgMa/kXkFODrwPgA5VsoAD5kJLw/v3pOHTBZk+KNEtWY5b2SDHI1ZK40vdOAH a2Pb2efHwxm7ImcswYIsweHZrYhmURu9wyYgrGcJyiWXd6Y1/R7uCD6lkWHKI7jo OA8yYzBLJtXjGJL0x5Y10ygbOPy6dy59OjVltP8cs6485JMv/BTq3vOKIsN8PkCY R1xY45EuMPWKR2lz/4+Xmpt/18Aux0O3eq2KH8L5PeJm/Hp9XSX9rJUznQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAmrr1xUHmSZpWw47xGP61XIS7X9MB8GA1UdIwQY MBaAFPBOsgTzWABHiCJOL7GOTV50vr+NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85YWI0MmEtZGY5Mi00ZTQyLTllMzMt NWM1ODkyYWZhNDg3LzEvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS85YWI0MmEtZGY5Mi00ZTQyLTllMzMtNWM1ODkyYWZhNDg3 LzEvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANEWui8vj 1THG3G8ttIDchevEPEVGTBzkDUSn/+oVLYoQWIHr6ivy3waF/HvyKBAtAaBsZBLE gBU5l5XDn4kmmHa58C/Tfdg9mfflElw07Fd45OJCDiPrintbiZJ1MzBii6xjeyic sQ/brhWOnuAkBFc8nQfM8M9dbveiRqSoYlUjBGTRy0syfx/faot/048l6eAwQkH8 L1FKXFHcQ8oB9cCogZX0R3ZKJz4m0KM7M9522ZZhYGq2+nhhMsdGeF+ql43h51mb 6/z+uEnsVCDCU8oYXWDCXk5YrTDq8OA5xy+ZAb+hPikV86YrepnadDSHrSvglwYU 9rzLc6P68XCG+A== -----END CERTIFICATE-----Generated at Sun Apr 6 07:41:33 2025 by rpki-client