$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft File: o20K5eL7_8zgh3Drwgwha5-_lIU.mft (raw, json) Hash identifier: HujglcI7Sh7lqaVavY8zp+ZJ4NUs8HPOXYFAVoX35ds= Subject key identifier: 03:12:E3:6A:BF:E9:23:8A:9D:CC:7E:74:5C:6A:61:C8:E3:47:D4:86 Authority key identifier: A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85 Certificate issuer: /CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485 Certificate serial: 01965048A3AB0783322D3F1972DD53794235 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft Manifest number: 1529 Signing time: Sat 19 Apr 2025 23:00:59 +0000 Manifest this update: Sat 19 Apr 2025 23:00:59 +0000 Manifest next update: Sun 20 Apr 2025 23:00:59 +0000 Files and hashes: 1: 1XbIXlsc12j6nm66ObHlANu1FxM.roa (hash: lxZWGjYaWrGULnJUqbEWkt5IyYC/5a04fccF0g2Mp+o=) 2: 3RFddkozoZGvDJWQRcnS3tQnN6k.roa (hash: KSM4qOmDj4X6PN9gZp6oxzJSTfcXsGzAsnDPsOPcYvo=) 3: 5Ni6TTomkpPGcPlO3kSvRsrQu-U.roa (hash: 1JbN0aQZgu8I5lbFUp1QWBBO58Y4WN7qnz2P+FqHbJQ=) 4: 7S8CxuCZgwEuPwPQrodHEuixK_c.roa (hash: Qpde78GgRiZiGUxC0MztnIMZR2EI3yqwC8R5K89O7xs=) 5: BUbLcDK2mlbMmQrWrXK_KkB_Z8I.roa (hash: 5p58mg305UQz5j2iOVYn7ENJmD3sfGRtf406Z23M5Fg=) 6: RdqjtJDLFWOt3Phx5mE_iQ2n2ac.roa (hash: lxo1VRjxzcOyUQlNG+1uXakzpre9ZL0uw2/WRhwVovc=) 7: fz5OQX3YNuZKli23fQPsHJMHAjg.roa (hash: 2W1jdhiJm6VJW0yfAkLiyNtl6yjC+Bfx3j0Hv8QWt58=) 8: o20K5eL7_8zgh3Drwgwha5-_lIU.crl (hash: eel0YkLtFanHB+GdBB67gV3RSIJWw/90J49e2ry01QA=) 9: tn7ZdWo9WQgYlB0Z6sOK2If7PKQ.roa (hash: 8aBGWuWam9C6QXOPco15OTid7ItEiEbxf2K863xiGIk=) 10: uxPuBCLIiL0vvpcp5iG57n6Nxl8.roa (hash: 9FJQPnJf1+iHQwAWGEeso0fULqarFlyxqNgrRoa6pYY=) 11: v8yHhVnQZ24d3Hqq-_MmljsyF-o.roa (hash: ldyVLPmDRLippOD+hn4EjHJmd9dcu8cUfl/mwJelT5M=) 12: vOg7pIai3eYlqI8nGfkYR-448qE.roa (hash: k2twTqEvKHP86X8yabE26RQnv5iqhvXZjH+b4EIuDog=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 20 Apr 2025 16:41:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:50:48:a3:ab:07:83:32:2d:3f:19:72:dd:53:79:42:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485 Validity Not Before: Apr 19 23:00:59 2025 GMT Not After : Apr 20 23:00:59 2025 GMT Subject: CN=0312e36abfe9238a9dcc7e745c6a61c8e347d486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:dd:2e:b9:87:37:5a:e2:32:8b:3c:27:56:68: 62:5d:90:06:a8:b6:ae:53:a9:4d:d2:f6:aa:11:ed: 82:b8:ea:3a:24:23:47:3f:85:00:8c:20:1d:f5:48: 18:90:84:58:9f:db:27:2c:c1:e0:29:1b:10:77:b6: f7:fd:9c:62:1d:72:92:78:3d:25:d4:87:6a:33:0a: d8:80:65:cd:d0:17:d2:97:39:2e:ae:75:d6:dd:c7: c5:c5:e0:5e:00:56:bc:a3:b9:4c:45:68:ad:c8:6a: 5f:e4:0c:9a:a1:25:da:45:22:6d:e2:1b:d2:7d:9d: 41:2b:d4:4c:ff:64:3d:55:cc:ec:3b:af:a5:39:43: 8d:4e:0f:81:f7:e3:af:d2:dd:82:dc:00:4d:ac:e5: 91:fa:22:7d:7b:f0:2e:25:de:7b:68:10:7e:dd:74: 37:7b:b4:05:dd:c1:e4:54:e3:09:da:30:05:da:cb: e5:a8:71:d3:d9:82:ee:74:48:f0:c6:b4:d5:dc:84: 8c:51:1a:27:d3:fd:19:b4:21:a5:71:bf:ed:03:83: 69:a4:b9:22:e5:d0:3a:d1:de:7f:fe:4f:f3:51:8a: 7f:30:59:d4:0a:ee:04:db:4e:79:77:0a:b2:be:99: d7:78:4a:2e:93:ae:d3:b4:ce:7e:51:b9:56:11:29: 49:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:12:E3:6A:BF:E9:23:8A:9D:CC:7E:74:5C:6A:61:C8:E3:47:D4:86 X509v3 Authority Key Identifier: keyid:A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:7b:b8:1c:41:b6:ba:49:8f:0f:04:3b:62:75:cc:73:36:f1: fb:22:c4:42:5a:a9:c5:e2:a2:31:11:50:90:1f:f3:e4:6b:f9: 9f:61:42:d7:2f:82:31:3e:84:a9:1f:b0:a2:94:ad:ad:c9:b4: 4e:ba:21:0c:ae:ac:0b:a0:30:f6:bd:0b:c3:15:8b:2f:48:aa: 99:0d:dd:92:9d:5a:4c:d3:bf:c8:2b:cd:b7:0b:83:cd:3c:22: c4:36:c3:b1:c4:f9:50:55:e5:a9:35:0a:0b:07:32:44:e9:88: 34:2e:88:27:ad:aa:29:ab:ba:ec:29:70:74:ab:94:27:01:df: 4c:75:24:f2:5b:16:37:bf:ee:0b:e0:99:98:1a:d1:99:ce:fb: 6d:90:17:65:5e:23:fd:d6:85:ab:90:de:1f:db:82:67:0b:19: 15:16:0b:00:3f:9e:6c:38:c6:35:fc:bd:7a:26:87:7a:c3:64: c4:3a:9c:a0:6f:59:a9:80:ec:58:b4:a1:97:c0:53:50:ba:d8: 64:b1:77:0e:4a:44:c1:26:9a:c6:5e:d9:19:25:9c:7b:14:6a: 56:87:9c:33:7a:5d:ca:b8:3e:23:d2:a1:65:a2:b1:2c:09:6d: 7a:ea:69:36:d2:89:0a:f8:d7:fa:32:c8:e3:2b:c9:f6:da:9c: 34:a2:4b:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZQSKOrB4MyLT8Zct1TeUI1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNmQwYWU1ZTJmYmZmY2NlMDg3NzBlYmMyMGMyMTZiOWZi Zjk0ODUwHhcNMjUwNDE5MjMwMDU5WhcNMjUwNDIwMjMwMDU5WjAzMTEwLwYDVQQD EygwMzEyZTM2YWJmZTkyMzhhOWRjYzdlNzQ1YzZhNjFjOGUzNDdkNDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxd0uuYc3WuIyizwnVmhiXZAGqLau U6lN0vaqEe2CuOo6JCNHP4UAjCAd9UgYkIRYn9snLMHgKRsQd7b3/ZxiHXKSeD0l 1IdqMwrYgGXN0BfSlzkurnXW3cfFxeBeAFa8o7lMRWityGpf5AyaoSXaRSJt4hvS fZ1BK9RM/2Q9VczsO6+lOUONTg+B9+Ov0t2C3ABNrOWR+iJ9e/AuJd57aBB+3XQ3 e7QF3cHkVOMJ2jAF2svlqHHT2YLudEjwxrTV3ISMURon0/0ZtCGlcb/tA4NppLki 5dA60d5//k/zUYp/MFnUCu4E2055dwqyvpnXeEouk67TtM5+UblWESlJmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAMS42q/6SOKncx+dFxqYcjjR9SGMB8GA1UdIwQY MBaAFKNtCuXi+//M4Idw68IMIWufv5SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAt Y2JiOTUxODNiMjdhLzEvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAtY2JiOTUxODNiMjdh LzEvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHnu4HEG2 ukmPDwQ7YnXMczbx+yLEQlqpxeKiMRFQkB/z5Gv5n2FC1y+CMT6EqR+wopStrcm0 TrohDK6sC6Aw9r0LwxWLL0iqmQ3dkp1aTNO/yCvNtwuDzTwixDbDscT5UFXlqTUK CwcyROmINC6IJ62qKau67ClwdKuUJwHfTHUk8lsWN7/uC+CZmBrRmc77bZAXZV4j /daFq5DeH9uCZwsZFRYLAD+ebDjGNfy9eiaHesNkxDqcoG9ZqYDsWLShl8BTULrY ZLF3DkpEwSaaxl7ZGSWcexRqVoecM3pdyrg+I9KhZaKxLAlteuppNtKJCvjX+jLI 4yvJ9tqcNKJLog== -----END CERTIFICATE-----Generated at Sun Apr 20 02:01:36 2025 by rpki-client