$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft File: 8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft (raw, json) Hash identifier: NlVTCFhhQTz6yBEX95tApLRxyv9wphPqCZ3D83Tv/DM= Subject key identifier: 51:5A:2C:5A:AB:39:F0:C8:DB:91:77:9F:3B:92:E1:E9:DF:6D:E9:DF Authority key identifier: F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 Certificate issuer: /CN=f0ff2c6229af763a99f5349a32510df4a4526143 Certificate serial: 019650ECAF362329EE019E856261B76CC9C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft Manifest number: 1500 Signing time: Sun 20 Apr 2025 02:00:10 +0000 Manifest this update: Sun 20 Apr 2025 02:00:10 +0000 Manifest next update: Mon 21 Apr 2025 02:00:10 +0000 Files and hashes: 1: 00x2a7vYcUP_RgzqZlJDShLq9Do.roa (hash: cq08qt5t6pt7+g4zB6xtHZuctjeJqy9pw/L/lk8TYFo=) 2: 8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl (hash: YLw1Drds3nSbHN2/h7MHODUZ+eWZhBS00VFLwvFOXLo=) 3: KVMzJG-tiBiXKGfDbX7s-fqSUcs.roa (hash: izdiO/l04uY0Tl9GP7xbaa4HsWMYkrOgbs0SiG0a1K8=) 4: OBC2jp5FIHT7G9c2m1xsJUD2ivs.roa (hash: DrwuyysosoB70lBjSllnHo3rVU0U0NusilzO8tRi9Q0=) 5: OxF-ngX6YGUArZrbAYmh9hpGzkU.roa (hash: zhEaR7GNPbf+2lOaH8uFUPJFKzbpuLS5x4CvU7dkxPs=) 6: Q2Pg2GNHELVKyFoNgxOuT8YFvLY.roa (hash: DsyRU7FSw+3XDKbBM9HrtgkzYSVPnqWwqknbD6CWVSU=) 7: RO-InVXPYoHaB1ZpM-19yr94dQs.roa (hash: 8Y6VcUcgO4alufdIJ4djN2KAnB4AyYetp1VZzDDuyNk=) 8: TbcAJ-7kgZbLEMeBArn-aI2s0Oc.roa (hash: ebCgIhbDpPxtlRtDjitUarjC0W1nxe0ujpocy11Koxs=) 9: _gM5SG_4QQqKocZtcQPCR80SAmI.roa (hash: ee8TJS3VrEj5YXrt15hISXpN3dVXM3P5ROyjlVEMHSs=) 10: fG6If6WZh4pXAVRu1gEQ7wbPbEs.roa (hash: OIBSpF8oXZotrR8RVX6KacBPnJZCoNiFLIZ7aWyayQU=) 11: gfQeyx6Q7sjS4Xpny9IUQ8tQxLY.roa (hash: zrq/geD7ajZHxMLm7OvFbnGGXeIS14GfMNfAscurlR8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 20 Apr 2025 22:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:50:ec:af:36:23:29:ee:01:9e:85:62:61:b7:6c:c9:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0ff2c6229af763a99f5349a32510df4a4526143 Validity Not Before: Apr 20 02:00:10 2025 GMT Not After : Apr 21 02:00:10 2025 GMT Subject: CN=515a2c5aab39f0c8db91779f3b92e1e9df6de9df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:70:18:70:ee:87:e1:68:7b:ef:ae:43:8d:2c: be:3e:ad:78:91:53:32:c5:cd:29:8e:bf:98:7c:81: 0c:31:38:b6:26:6c:bc:7b:a0:0c:79:ac:63:43:7e: 41:51:91:1f:24:c7:7f:df:26:51:6a:c8:b6:f5:bc: 90:0a:88:21:12:2b:65:00:73:fb:8a:21:42:e0:2f: db:d4:92:74:5c:26:ed:64:6e:f3:1e:f1:13:2c:ef: a5:96:c2:13:12:28:e4:36:41:f3:4a:68:bd:cd:05: 60:dd:c5:b1:71:2d:01:54:99:7d:ed:d4:3b:12:00: ec:b0:d7:f3:84:ee:5d:25:dc:b9:58:2e:df:5c:67: 70:e8:95:c8:0b:e3:4a:4d:32:33:22:c9:14:14:0e: ec:55:a6:ba:cc:e8:f3:94:0e:01:cb:88:28:19:d0: 51:f8:51:14:30:5a:6e:f7:16:d7:32:f9:db:21:90: e1:bd:92:5f:03:09:69:c2:f2:e1:1f:67:fd:f1:89: 10:30:15:0a:e8:b1:f8:26:d2:6f:8b:da:04:94:87: 4f:3d:66:3f:8b:b7:9d:06:07:37:38:46:53:87:cf: 0a:6b:c5:8e:cf:e0:cb:45:00:77:50:41:9d:53:73: 1f:61:7d:9a:9b:57:16:b7:eb:f5:ad:f7:78:28:e6: 78:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:5A:2C:5A:AB:39:F0:C8:DB:91:77:9F:3B:92:E1:E9:DF:6D:E9:DF X509v3 Authority Key Identifier: keyid:F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:d4:29:92:37:f5:9d:dc:11:48:4b:9d:bf:a5:bd:85:2d:cf: 91:42:d5:c6:8b:9d:6e:89:1b:6c:24:31:ba:87:e6:75:91:84: 40:5f:01:92:df:74:bc:f3:8a:7b:15:45:9e:a1:37:6c:5f:66: 36:ae:c3:bc:63:7c:7b:73:da:15:c1:c7:5b:2a:90:32:68:59: c9:6e:1e:bb:28:8e:4e:07:63:90:23:3b:e1:6f:ae:de:20:80: 34:f5:8b:64:c5:48:53:75:2c:ca:16:00:29:9f:e3:8a:b3:f1: 69:db:7c:b3:39:08:b3:94:3d:b4:ed:cf:52:06:11:af:9b:aa: 78:70:cf:00:2d:2f:cb:92:5c:1c:b0:b3:9c:24:74:e9:26:c0: 80:a9:49:24:67:fa:5e:52:a6:40:4a:b2:03:6a:1e:66:65:48: 7b:b0:a4:dc:d0:63:18:e4:76:a1:df:9c:86:20:9e:d0:ac:9d: 91:cc:e5:30:25:39:37:bd:b5:84:45:cb:7c:b1:df:e0:19:e8: 3d:b3:74:8c:07:93:48:30:8f:49:b1:67:50:69:05:69:b8:40: a3:13:7f:9f:25:95:7a:bf:3c:ff:69:83:7b:af:9d:fa:d7:f8: 90:da:e9:5f:c3:5b:70:54:e5:48:c1:50:6d:06:f3:c7:a1:df: a6:79:ac:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZQ7K82IynuAZ6FYmG3bMnEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZmYyYzYyMjlhZjc2M2E5OWY1MzQ5YTMyNTEwZGY0YTQ1 MjYxNDMwHhcNMjUwNDIwMDIwMDEwWhcNMjUwNDIxMDIwMDEwWjAzMTEwLwYDVQQD Eyg1MTVhMmM1YWFiMzlmMGM4ZGI5MTc3OWYzYjkyZTFlOWRmNmRlOWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3AYcO6H4Wh7765DjSy+Pq14kVMy xc0pjr+YfIEMMTi2Jmy8e6AMeaxjQ35BUZEfJMd/3yZRasi29byQCoghEitlAHP7 iiFC4C/b1JJ0XCbtZG7zHvETLO+llsITEijkNkHzSmi9zQVg3cWxcS0BVJl97dQ7 EgDssNfzhO5dJdy5WC7fXGdw6JXIC+NKTTIzIskUFA7sVaa6zOjzlA4By4goGdBR +FEUMFpu9xbXMvnbIZDhvZJfAwlpwvLhH2f98YkQMBUK6LH4JtJvi9oElIdPPWY/ i7edBgc3OEZTh88Ka8WOz+DLRQB3UEGdU3MfYX2am1cWt+v1rfd4KOZ4VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFFaLFqrOfDI25F3nzuS4enfbenfMB8GA1UdIwQY MBaAFPD/LGIpr3Y6mfU0mjJRDfSkUmFDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYt ZTY5ZjdhNWQyZDkwLzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYtZTY5ZjdhNWQyZDkw LzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL9Qpkjf1 ndwRSEudv6W9hS3PkULVxoudbokbbCQxuofmdZGEQF8Bkt90vPOKexVFnqE3bF9m Nq7DvGN8e3PaFcHHWyqQMmhZyW4euyiOTgdjkCM74W+u3iCANPWLZMVIU3UsyhYA KZ/jirPxadt8szkIs5Q9tO3PUgYRr5uqeHDPAC0vy5JcHLCznCR06SbAgKlJJGf6 XlKmQEqyA2oeZmVIe7Ck3NBjGOR2od+chiCe0KydkczlMCU5N721hEXLfLHf4Bno PbN0jAeTSDCPSbFnUGkFabhAoxN/nyWVer88/2mDe6+d+tf4kNrpX8NbcFTlSMFQ bQbzx6HfpnmsSw== -----END CERTIFICATE-----Generated at Sun Apr 20 04:18:46 2025 by rpki-client