$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft File: UXoMloQrr8n2MLoUuD6nm9EqU7k.mft (raw, json) Hash identifier: TV3MUUsXa94/s/TdaO/NxUTG0FCyIixfErZDBed4Tuc= Subject key identifier: B9:57:A1:EE:D7:55:43:06:DD:8B:EB:69:C0:24:D3:36:25:FE:A4:97 Authority key identifier: 51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9 Certificate issuer: /CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9 Certificate serial: 01963463A3D2F4239DD24E4E30456FC17E5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft Manifest number: 0667 Signing time: Mon 14 Apr 2025 13:01:07 +0000 Manifest this update: Mon 14 Apr 2025 13:01:07 +0000 Manifest next update: Tue 15 Apr 2025 13:01:07 +0000 Files and hashes: 1: A9TOJi7Bxz7veSOLUDGsJ4pL9R0.roa (hash: L1seqI8odM9ZXYKfLuYv3ZPKHIsiVVU+zJszizfd+7A=) 2: MXgEjfNqzg4ibHIgBnMu6L6lCSM.roa (hash: fVgHiU9asEnxImlxkLsSy6Pf5pU0/2RHygcrCBHFKNY=) 3: QGrd388-C11MqeKLf5zSPmftmu8.roa (hash: eIGajnhQKVymGKeREUlczNnZhMIZNge0+YaIwRrctAo=) 4: UO7xryDol2p3krIKMCkv999_urQ.roa (hash: Xy7Upoc2VsccaTx0EC/kw72OW1M9o27lrsbWbdMHCVw=) 5: UXoMloQrr8n2MLoUuD6nm9EqU7k.crl (hash: lYzmqocK/3qRvz85Y3MhrFoHnkpYg8YXfbzo/eJhK9A=) 6: Z6Jf9Ju__GKHYgYU0JPOtkpxCIE.roa (hash: vXcwZv2fW/39KxdDX07V5N5I3gjDwIq6vz3aw5sXRWM=) 7: ZIUzaNeA-dqB_cS44MLnf0HuawA.roa (hash: q8f9plPLOl0nPVToevY6P1epucVG2NTh0o+Jv1i4WmQ=) 8: _aaePr1gPuxwX3K-rn7ikqUJzEA.roa (hash: Z8VGyqgSTuNPPT27lOIg4P0ar4keL30ubWNYxtuW/fo=) 9: kOLB1EphrfqUXSkkLaUwaVvFrU4.roa (hash: YkPfWUPXu7p+n7Mg+8D2wVjpEqFMWVXtcvGvgRRvDac=) 10: mz7ehAUqOsrRqbJ9VvPWwqk2XIY.roa (hash: 7X9X318pIV2mGDTJzxJQrlTxR4fXmcyTvYHm7BSWjog=) 11: nZXVIEL0exaI0r9M1rnJ3WGAF8E.roa (hash: z9Y7z19RIBK56yiGgo7dXHB1kgsXjY6R1AlYACsMqoU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 15 Apr 2025 13:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:34:63:a3:d2:f4:23:9d:d2:4e:4e:30:45:6f:c1:7e:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9 Validity Not Before: Apr 14 13:01:07 2025 GMT Not After : Apr 15 13:01:07 2025 GMT Subject: CN=b957a1eed7554306dd8beb69c024d33625fea497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ed:09:dc:c1:ba:9d:2b:7a:a8:77:e0:28:dc: db:f3:bc:3e:e0:86:86:f3:c1:ec:f8:77:b7:24:b0: 43:61:bb:8d:1c:6c:01:b3:b1:99:ab:14:c2:a7:0f: 50:95:bf:56:d0:81:07:e1:47:7f:48:d5:8f:73:ef: 8b:f0:4a:3e:29:b1:e0:98:2d:fa:8f:d1:4f:50:91: ec:05:e6:cf:fe:80:de:40:8b:8b:fc:f2:7e:9c:ff: c2:59:c4:f2:73:fc:56:dd:d9:51:2e:73:26:01:0a: 33:c3:ef:5c:b4:0d:8b:94:43:61:a4:e2:64:6e:4a: a0:9a:5b:de:cf:0f:57:0a:83:fa:ae:22:b7:11:fe: 51:1b:c9:f5:d7:64:9f:e4:8f:f9:e4:e6:3e:11:8c: 16:8d:b0:e0:d4:9c:ed:3b:37:43:13:d5:eb:70:21: 91:81:eb:ee:1b:30:e3:33:a5:5a:fb:f2:43:a5:b0: dc:73:8b:37:0f:52:f1:4d:0a:f6:93:bb:17:4d:78: 06:a5:1b:5e:a9:6a:e4:b8:f7:33:3b:d2:1e:3f:2f: 7e:c9:f7:86:5d:57:45:c9:a3:e0:33:ff:1f:90:38: fb:86:5c:a2:76:1a:8d:9b:e2:b3:f0:8a:0c:6e:13: d3:2e:db:1a:8e:af:93:dc:1b:5e:14:97:33:5c:f7: 94:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:57:A1:EE:D7:55:43:06:DD:8B:EB:69:C0:24:D3:36:25:FE:A4:97 X509v3 Authority Key Identifier: keyid:51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:9f:91:0d:94:84:d1:b4:d1:a7:97:da:d1:77:c2:cd:ad:98: 7e:cb:da:0c:6f:23:cc:8f:b6:c7:66:2b:06:bf:f3:ed:5f:a4: 16:4a:b4:f1:9f:b5:5c:73:59:8b:f1:de:42:7c:d3:e9:4e:63: 10:22:63:34:f8:57:eb:1e:c2:aa:5c:ec:77:84:ab:37:88:a2: 36:ef:24:f2:4a:49:91:b0:d3:93:f1:26:f7:5e:38:fb:08:a3: 93:69:89:4e:f6:99:3e:cb:4e:e3:1a:bb:16:12:5a:35:09:d9: f1:d0:4f:05:e2:1e:12:2e:0f:08:11:d7:59:99:9a:20:da:8b: a6:09:b4:f8:22:32:17:ee:9c:5d:57:49:45:59:9f:f0:e0:1e: 69:34:1e:ee:4d:f2:f9:3e:e9:42:a1:31:6f:57:d4:f6:61:64: cc:81:9c:ef:ab:3d:1f:c5:13:d2:be:d6:c8:00:07:01:e4:f9: 8f:8f:af:69:82:d0:19:61:5f:db:98:13:75:f0:5d:67:5d:ff: 28:f3:da:1f:8e:85:4e:8b:97:56:9d:39:b8:9f:2d:ec:ec:4f: de:02:6d:a7:83:7f:32:11:c3:60:6f:6f:ba:f5:5d:7e:68:6c: 3d:98:66:00:ba:50:be:41:f0:21:9e:08:ac:4f:a7:7d:a0:06: be:6d:49:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZY0Y6PS9COd0k5OMEVvwX5fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxN2EwYzk2ODQyYmFmYzlmNjMwYmExNGI4M2VhNzliZDEy YTUzYjkwHhcNMjUwNDE0MTMwMTA3WhcNMjUwNDE1MTMwMTA3WjAzMTEwLwYDVQQD EyhiOTU3YTFlZWQ3NTU0MzA2ZGQ4YmViNjljMDI0ZDMzNjI1ZmVhNDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqO0J3MG6nSt6qHfgKNzb87w+4IaG 88Hs+He3JLBDYbuNHGwBs7GZqxTCpw9Qlb9W0IEH4Ud/SNWPc++L8Eo+KbHgmC36 j9FPUJHsBebP/oDeQIuL/PJ+nP/CWcTyc/xW3dlRLnMmAQozw+9ctA2LlENhpOJk bkqgmlvezw9XCoP6riK3Ef5RG8n112Sf5I/55OY+EYwWjbDg1JztOzdDE9XrcCGR gevuGzDjM6Va+/JDpbDcc4s3D1LxTQr2k7sXTXgGpRteqWrkuPczO9IePy9+yfeG XVdFyaPgM/8fkDj7hlyidhqNm+Kz8IoMbhPTLtsajq+T3BteFJczXPeUuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLlXoe7XVUMG3YvracAk0zYl/qSXMB8GA1UdIwQY MBaAFFF6DJaEK6/J9jC6FLg+p5vRKlO5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xNGU0OTItODUyNS00ZWVjLTg0YmMt YjBlYjY3MTVlMGFmLzEvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8xNGU0OTItODUyNS00ZWVjLTg0YmMtYjBlYjY3MTVlMGFm LzEvVVhvTWxvUXJyOG4yTUxvVXVENm5tOUVxVTdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIp+RDZSE 0bTRp5fa0XfCza2YfsvaDG8jzI+2x2YrBr/z7V+kFkq08Z+1XHNZi/HeQnzT6U5j ECJjNPhX6x7Cqlzsd4SrN4iiNu8k8kpJkbDTk/Em9144+wijk2mJTvaZPstO4xq7 FhJaNQnZ8dBPBeIeEi4PCBHXWZmaINqLpgm0+CIyF+6cXVdJRVmf8OAeaTQe7k3y +T7pQqExb1fU9mFkzIGc76s9H8UT0r7WyAAHAeT5j4+vaYLQGWFf25gTdfBdZ13/ KPPaH46FTouXVp05uJ8t7OxP3gJtp4N/MhHDYG9vuvVdfmhsPZhmALpQvkHwIZ4I rE+nfaAGvm1JmQ== -----END CERTIFICATE-----Generated at Mon Apr 14 18:23:17 2025 by rpki-client