$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft File: Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft (raw, json) Hash identifier: 56JYhoOCgyFkDN8xHcnUhiQuPBftINJckdLRygyAw4c= Subject key identifier: D3:03:0E:2C:5B:80:AD:3F:08:BA:0F:D4:78:A3:E0:C5:97:4C:B3:EE Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Certificate serial: 019609790EE946657E5095F3ACA0E3EF1303 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft Manifest number: 10AB Signing time: Sun 06 Apr 2025 05:00:50 +0000 Manifest this update: Sun 06 Apr 2025 05:00:50 +0000 Manifest next update: Mon 07 Apr 2025 05:00:50 +0000 Files and hashes: 1: AjmtKVshFn4i5oudhf9_vWmAvsw.roa (hash: CuwkA+D3Ny2dECS4D0f8gIT8izPiI79T33+j6Gl48lk=) 2: NMjO7luh_VLlkiRN5_rJM9McdZU.roa (hash: F/s8ZrNFnB9cACRc/zfnUbwDpiBOuQs9t9+/CTXMuRk=) 3: NlvMkPZn5ykNcIArduldQ2gvLwk.roa (hash: 5PNzjoi0TVJoqN04xzDCOAwSudfA6d0BQM/WfLTAPFo=) 4: P9llCh8xQQOicOO52WLocuGy0qc.roa (hash: BJEexM7c83ayn0hEFmwl/zCVtTy13ZJE7DbhwPoki+4=) 5: QCWBDKlG8Io2BeH0NId31fpN2YE.roa (hash: 0NRY9EDUi1FWue8IN72u0GMUvyyjoroAoM3JlXroHao=) 6: Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl (hash: fCI99ae/V4skym80Fe0IHFVl5txcn2sy7lkOf7cUYW8=) 7: XwHGUq38dDBNzTc_ge-yBwhhY1o.roa (hash: PgJwO//GwdLKnSg3NtaGlab1yN/ram5lj/PHtYxijoA=) 8: ewVsnSugCXk__789cz5d5ZAdZmc.roa (hash: o+8XbQDDA3JQsPJjR3Lfqf5ZVHX07bm5R0GYVGvsC9M=) 9: ibLzU6WOFgguTWaNZhfqPFD3yJo.roa (hash: GRnTI0UguvurZg0lBoyoqJCyaRrTY4Zz0Fz1Sh8Z0A8=) 10: nxWUk2NAoFEOBnPl0EiSfXPDs08.roa (hash: q3fdK1UzGuKqIDpgZc+BavU5BV78iYLHi960+oEFG6E=) 11: rjj0_HZqVxB9uTqBbhBOxIKPBgg.roa (hash: WNMZaUJdsacwY1k4HMEEPIuQbWIPSdxtl43riTk/HVY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 07 Apr 2025 05:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:09:79:0e:e9:46:65:7e:50:95:f3:ac:a0:e3:ef:13:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Validity Not Before: Apr 6 05:00:50 2025 GMT Not After : Apr 7 05:00:50 2025 GMT Subject: CN=d3030e2c5b80ad3f08ba0fd478a3e0c5974cb3ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f1:14:34:46:be:14:37:08:23:12:83:16:e6: 65:7c:87:96:a0:7a:9a:a5:93:4f:26:7f:b7:48:6d: d0:02:d6:3d:1c:1f:4f:10:4e:f2:eb:5c:fc:0d:78: 6f:b7:ef:9f:3d:07:18:b2:6f:f9:a1:32:25:d3:58: 10:50:d1:36:5c:33:46:6c:1a:0f:4c:fa:41:8e:2a: fc:8a:53:2d:8d:45:ad:d4:71:0e:c4:ff:db:de:73: 17:c1:17:3f:ba:e5:d8:2d:af:6f:75:58:99:58:9a: f2:4a:ce:5f:8c:85:79:b3:ea:4a:a9:40:2a:f5:d5: 74:01:de:10:7d:a7:77:b9:2b:7a:4f:62:eb:2d:f1: af:39:f0:7d:bf:09:2b:73:e8:39:f6:54:e5:4e:47: 60:fa:30:27:10:bd:25:82:ae:26:e5:ef:fc:7a:19: 99:97:5e:e5:0f:ea:35:14:06:9e:c1:50:b6:75:4a: 97:42:8b:64:37:3f:3f:65:9f:35:ef:bb:7e:69:a5: af:b0:34:e2:b6:fd:fb:39:cd:a2:64:bc:0d:db:c6: eb:66:87:a2:8c:96:2c:e2:22:62:83:e7:84:7f:dc: 8a:f3:53:d4:c6:d4:0b:3c:35:a2:fd:1e:91:ed:2f: 50:ea:b3:e2:24:ce:d2:ee:34:f0:d6:f9:c8:54:87: a4:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:03:0E:2C:5B:80:AD:3F:08:BA:0F:D4:78:A3:E0:C5:97:4C:B3:EE X509v3 Authority Key Identifier: keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:df:1c:ee:e4:13:14:14:7c:ff:78:dd:39:58:60:fc:73:7a: 0f:22:ef:4c:0f:e0:97:cd:a4:f3:be:71:03:33:0b:c6:8a:16: 1c:a0:21:be:31:62:c2:d7:2f:3a:87:15:26:21:e6:81:af:a5: c2:8e:f8:00:1c:31:62:86:d6:41:2b:08:c4:a4:17:96:c7:52: 1e:ba:5d:b4:8d:fe:53:fe:83:33:33:ac:a5:18:f0:b1:4a:0d: 0a:c9:de:e1:b6:4f:09:62:be:b3:35:2f:30:d3:9c:f9:82:0d: 90:15:60:74:13:f7:66:f0:32:c6:80:b6:5a:06:78:0e:91:d6: de:1b:6f:21:c8:a0:e4:d0:ef:2c:1b:7f:ef:11:cb:1f:02:64: a1:ab:94:8b:2f:6b:af:15:5c:f0:e3:87:80:0d:51:5e:db:db: 46:f3:fb:4b:9a:bd:ed:0a:09:16:eb:9f:11:ae:6b:69:dd:9f: f5:16:c4:01:f8:2b:02:4f:d4:e4:d7:28:ba:b8:e5:b4:90:5b: c2:04:92:1d:e8:38:d9:68:a3:ed:b0:8a:25:e1:e5:17:e1:cd: 1f:6c:e5:b0:58:ed:78:8a:fc:e5:7f:86:b2:cc:85:c3:2d:62: 57:cf:1e:91:5d:e5:37:e1:ef:ae:6e:4f:2c:96:25:79:32:59: 3b:24:26:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYJeQ7pRmV+UJXzrKDj7xMDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDZmNmQyOTliY2RlYzczZDEzZjJkODQyZmMxZGY0YmMx ZWUyZDMwHhcNMjUwNDA2MDUwMDUwWhcNMjUwNDA3MDUwMDUwWjAzMTEwLwYDVQQD EyhkMzAzMGUyYzViODBhZDNmMDhiYTBmZDQ3OGEzZTBjNTk3NGNiM2VlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fEUNEa+FDcIIxKDFuZlfIeWoHqa pZNPJn+3SG3QAtY9HB9PEE7y61z8DXhvt++fPQcYsm/5oTIl01gQUNE2XDNGbBoP TPpBjir8ilMtjUWt1HEOxP/b3nMXwRc/uuXYLa9vdViZWJrySs5fjIV5s+pKqUAq 9dV0Ad4Qfad3uSt6T2LrLfGvOfB9vwkrc+g59lTlTkdg+jAnEL0lgq4m5e/8ehmZ l17lD+o1FAaewVC2dUqXQotkNz8/ZZ8177t+aaWvsDTitv37Oc2iZLwN28brZoei jJYs4iJig+eEf9yK81PUxtQLPDWi/R6R7S9Q6rPiJM7S7jTw1vnIVIekIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNMDDixbgK0/CLoP1Hij4MWXTLPuMB8GA1UdIwQY MBaAFF3W9tKZvN7HPRPy2EL8HfS8HuLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYt NTFmNWZmODFjMTE3LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYtNTFmNWZmODFjMTE3 LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhN8c7uQT FBR8/3jdOVhg/HN6DyLvTA/gl82k875xAzMLxooWHKAhvjFiwtcvOocVJiHmga+l wo74ABwxYobWQSsIxKQXlsdSHrpdtI3+U/6DMzOspRjwsUoNCsne4bZPCWK+szUv MNOc+YINkBVgdBP3ZvAyxoC2WgZ4DpHW3htvIcig5NDvLBt/7xHLHwJkoauUiy9r rxVc8OOHgA1RXtvbRvP7S5q97QoJFuufEa5rad2f9RbEAfgrAk/U5NcourjltJBb wgSSHeg42Wij7bCKJeHlF+HNH2zlsFjteIr85X+GssyFwy1iV88ekV3lN+Hvrm5P LJYleTJZOyQmxA== -----END CERTIFICATE-----Generated at Sun Apr 6 11:03:36 2025 by rpki-client