$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft File: Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft (raw, json) Hash identifier: EmOqSAFawZEdCTY0Fj+58yZxiuw3i0M4Zi9smKGVizg= Subject key identifier: F4:C8:39:AE:FF:06:EB:D7:E5:40:6A:27:EC:4C:B1:BE:A4:0E:12:25 Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Certificate serial: 01974A0D1103318B3F763227A9967208F01C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft Manifest number: 1151 Signing time: Sat 07 Jun 2025 11:00:59 +0000 Manifest this update: Sat 07 Jun 2025 11:00:59 +0000 Manifest next update: Sun 08 Jun 2025 11:00:59 +0000 Files and hashes: 1: AjmtKVshFn4i5oudhf9_vWmAvsw.roa (hash: CuwkA+D3Ny2dECS4D0f8gIT8izPiI79T33+j6Gl48lk=) 2: NMjO7luh_VLlkiRN5_rJM9McdZU.roa (hash: F/s8ZrNFnB9cACRc/zfnUbwDpiBOuQs9t9+/CTXMuRk=) 3: NlvMkPZn5ykNcIArduldQ2gvLwk.roa (hash: 5PNzjoi0TVJoqN04xzDCOAwSudfA6d0BQM/WfLTAPFo=) 4: P9llCh8xQQOicOO52WLocuGy0qc.roa (hash: BJEexM7c83ayn0hEFmwl/zCVtTy13ZJE7DbhwPoki+4=) 5: QCWBDKlG8Io2BeH0NId31fpN2YE.roa (hash: 0NRY9EDUi1FWue8IN72u0GMUvyyjoroAoM3JlXroHao=) 6: Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl (hash: XIkbxPMEW+hWoZzP+t15F0AMLnV4PWEKMGtXV8vjeP4=) 7: XwHGUq38dDBNzTc_ge-yBwhhY1o.roa (hash: PgJwO//GwdLKnSg3NtaGlab1yN/ram5lj/PHtYxijoA=) 8: ewVsnSugCXk__789cz5d5ZAdZmc.roa (hash: o+8XbQDDA3JQsPJjR3Lfqf5ZVHX07bm5R0GYVGvsC9M=) 9: ibLzU6WOFgguTWaNZhfqPFD3yJo.roa (hash: GRnTI0UguvurZg0lBoyoqJCyaRrTY4Zz0Fz1Sh8Z0A8=) 10: nxWUk2NAoFEOBnPl0EiSfXPDs08.roa (hash: q3fdK1UzGuKqIDpgZc+BavU5BV78iYLHi960+oEFG6E=) 11: rjj0_HZqVxB9uTqBbhBOxIKPBgg.roa (hash: WNMZaUJdsacwY1k4HMEEPIuQbWIPSdxtl43riTk/HVY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:97:4a:0d:11:03:31:8b:3f:76:32:27:a9:96:72:08:f0:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Validity Not Before: Jun 7 11:00:59 2025 GMT Not After : Jun 8 11:00:59 2025 GMT Subject: CN=f4c839aeff06ebd7e5406a27ec4cb1bea40e1225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:94:96:64:98:5c:7f:4c:79:f5:30:32:3e:2a: 6f:28:f2:2f:22:ed:b5:0c:1a:75:e7:b2:ea:66:95: 95:e5:4e:fb:66:70:51:35:a0:df:0f:bf:53:5d:45: aa:8e:51:9e:75:02:48:7f:41:07:de:c4:19:c4:7f: 64:2e:40:cb:8f:aa:5c:ed:a2:50:a3:af:9b:15:a3: e5:d3:3f:93:f3:23:15:06:fb:cf:d4:ad:b8:e5:d9: 34:14:1a:fc:fa:5b:74:e7:99:3d:2d:15:e6:88:47: 92:f5:40:3b:9d:8a:e6:83:c5:e5:4a:5d:db:50:26: 26:64:0b:66:f2:46:02:dc:83:0b:e4:f9:23:6a:fd: 8f:fd:75:70:a3:a2:fa:dc:fe:2e:a9:44:31:af:8d: df:07:28:39:c8:51:09:83:d4:c4:47:06:0e:a4:3b: 5e:72:27:e7:b0:00:b7:99:2d:5c:cd:3d:7d:74:6a: c5:7e:ec:1a:1a:69:39:4a:37:78:33:5f:ae:99:78: e6:55:52:4e:fd:cf:6a:7c:4f:34:71:b2:b5:96:16: 24:c3:7f:9a:eb:cc:31:de:63:10:09:b7:4b:e5:c2: 1d:ad:e4:5b:81:71:69:84:a0:b6:0f:a3:1c:ca:62: 7f:0c:7b:f0:f5:32:90:c1:31:e2:df:c9:22:2c:de: 96:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:C8:39:AE:FF:06:EB:D7:E5:40:6A:27:EC:4C:B1:BE:A4:0E:12:25 X509v3 Authority Key Identifier: keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:bc:e9:fd:ee:04:2e:d6:62:40:b4:df:f4:7a:72:6a:8f:ce: c2:d5:43:a3:5a:bb:7c:d7:b5:e1:aa:08:e6:f5:c7:ad:05:38: 1a:ab:1f:7a:14:8e:fa:a0:52:54:73:e3:8f:17:9e:18:0a:f8: a5:a9:24:e4:d8:74:97:32:a6:28:b2:43:55:48:c8:82:a7:10: 54:63:1c:55:86:de:b4:85:ef:bd:27:61:14:2d:09:8e:05:6b: 2f:38:6c:4c:5c:e5:9d:7c:12:69:0e:37:4d:5c:e2:cd:02:f6: 2d:36:42:29:26:c8:20:6c:6d:6e:93:b7:18:9d:d0:f3:7d:d6: bb:23:bb:3b:53:6e:71:0f:12:c8:05:76:2b:de:8a:5f:62:a9: 66:cc:25:a3:46:af:6f:79:89:a6:a6:e5:3e:8b:15:dd:5c:0a: 42:21:55:68:f3:96:dc:e9:85:65:2e:5f:e6:56:1a:6e:d7:6b: 52:3d:40:76:9e:e9:8d:98:45:f8:82:36:6a:9f:f7:67:7e:a4: 94:2f:f4:3b:15:63:d5:da:b1:7a:11:d8:b5:bb:44:cf:fa:97: a7:00:a0:b6:e1:c4:e9:d9:c4:12:56:2e:6e:ff:ea:9d:bf:8c: ca:f1:84:68:76:f2:2d:dc:63:58:e0:c2:2a:e6:14:51:0d:36: 16:2d:a9:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZdKDREDMYs/djInqZZyCPAcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDZmNmQyOTliY2RlYzczZDEzZjJkODQyZmMxZGY0YmMx ZWUyZDMwHhcNMjUwNjA3MTEwMDU5WhcNMjUwNjA4MTEwMDU5WjAzMTEwLwYDVQQD EyhmNGM4MzlhZWZmMDZlYmQ3ZTU0MDZhMjdlYzRjYjFiZWE0MGUxMjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpSWZJhcf0x59TAyPipvKPIvIu21 DBp157LqZpWV5U77ZnBRNaDfD79TXUWqjlGedQJIf0EH3sQZxH9kLkDLj6pc7aJQ o6+bFaPl0z+T8yMVBvvP1K245dk0FBr8+lt055k9LRXmiEeS9UA7nYrmg8XlSl3b UCYmZAtm8kYC3IML5Pkjav2P/XVwo6L63P4uqUQxr43fByg5yFEJg9TERwYOpDte cifnsAC3mS1czT19dGrFfuwaGmk5Sjd4M1+umXjmVVJO/c9qfE80cbK1lhYkw3+a 68wx3mMQCbdL5cIdreRbgXFphKC2D6McymJ/DHvw9TKQwTHi38kiLN6WwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPTIOa7/BuvX5UBqJ+xMsb6kDhIlMB8GA1UdIwQY MBaAFF3W9tKZvN7HPRPy2EL8HfS8HuLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYt NTFmNWZmODFjMTE3LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYtNTFmNWZmODFjMTE3 LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMrzp/e4E LtZiQLTf9Hpyao/OwtVDo1q7fNe14aoI5vXHrQU4GqsfehSO+qBSVHPjjxeeGAr4 pakk5Nh0lzKmKLJDVUjIgqcQVGMcVYbetIXvvSdhFC0JjgVrLzhsTFzlnXwSaQ43 TVzizQL2LTZCKSbIIGxtbpO3GJ3Q833WuyO7O1NucQ8SyAV2K96KX2KpZswlo0av b3mJpqblPosV3VwKQiFVaPOW3OmFZS5f5lYabtdrUj1Adp7pjZhF+II2ap/3Z36k lC/0OxVj1dqxehHYtbtEz/qXpwCgtuHE6dnEElYubv/qnb+MyvGEaHbyLdxjWODC KuYUUQ02Fi2pQg== -----END CERTIFICATE-----Generated at Sat Jun 7 16:12:08 2025 by rpki-client