$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft File: xhlTwImArclPL6OjwbqVxA0h59M.mft (raw, json) Hash identifier: DsjjvgIBm7U1apR5wrqseGjXUCEThmm0Jxts280Jkxo= Subject key identifier: 25:38:DB:99:0A:AD:CB:CA:33:82:11:65:F9:43:08:F9:B8:32:5B:33 Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3 Certificate issuer: /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3 Certificate serial: 01963FC26C61E2E4F1C01318DB8E471B5832 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft Manifest number: 0B85 Signing time: Wed 16 Apr 2025 18:00:28 +0000 Manifest this update: Wed 16 Apr 2025 18:00:28 +0000 Manifest next update: Thu 17 Apr 2025 18:00:28 +0000 Files and hashes: 1: 7uN2APKNMZUlxFAFIqYBRSCqDys.roa (hash: QOcGptnbwVOmKz9OIjxqVqiamHhCIYE4sShS5ZJ4aTM=) 2: IczkJXhr43WZT8v3yUWzEcJkBw0.roa (hash: LTXwRLr/WDRhlKr3y2cS8nQZO+NDEwmFh5j+X2jc1m0=) 3: K2uuH_N48kKDciCwYZZbSGxL28M.roa (hash: NsG2a8yGOGdFAhdHDu05B3aeAtofcTDzN6smpf4V84k=) 4: LBUZqsrF0Xi_tysp5fgmsqKHu6U.roa (hash: bW1H7SUVyNKU/d0SmTWJeMi8GRblO5Rw7PlbZQty7ek=) 5: NTeC-NbINKuWXIN2JRj2jE73cMQ.roa (hash: usN4QfuBj821Bx/aBMyN171iAsEpZjNXNiVf16Jr2OA=) 6: NulfbGD931XSEsWr8c6jWUL0R7Q.roa (hash: D+CXPQA8XOJm5kR7y6lx84ZALTBUpzFwD/yKT0THj0Y=) 7: Pn1Np93Fy5qllPMGwWd35SbCmNc.roa (hash: cJbqPsoGlyN2ttzOkuToXlqtqEo9ySrbCbr6liDOEGE=) 8: UsNIdz_x5mIF5xcKEVGVl_xXGJ4.roa (hash: DsadB7AkI1D6cE6zFHkD7luRohhY7h45wj6tqzPB3BY=) 9: VDkpUnsSEJjoQKN_SH5M51QJ0lQ.roa (hash: QbW1pR7wXkDRNg+GzvouMFRHYHZ7/eJ/CEgLt387C28=) 10: i7rWRuwzlkV8xCOhfpRpRle8KzA.roa (hash: At8E6e7EApB6fVuxCLUU7eIRYkhnemVz7pgrhH1erSM=) 11: mblfFy3mNdc1SwdAwOx5WQVE19A.roa (hash: C/C7a/Hgr0VETCqfGTruKe1/3x5QgzdC+FE6I3TYrWQ=) 12: mp_P58smkepPURIQ0OWZxTjk7YU.roa (hash: dgthwSpZuKmO50yEykTctg4zGl2a/soBiZBn4MrCwdc=) 13: o-58M0Oov2ZZz-Rl1Tywa9Uvd40.roa (hash: 0gFyw1TvnqI82S5Ak8R3q+0sFKi4FqNHCfwpsRB+ZM0=) 14: rQUffzmZx3UaMv2Z1sJaJ9Cotdw.roa (hash: 6IztPYrajYy5c8tTQhRlMBRKi0qqEFrjSmseUv+lHCw=) 15: xhlTwImArclPL6OjwbqVxA0h59M.crl (hash: as7fwxC11pILMfqgA2qYajs95MY0yJFIqZvQ/tOLj2w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 17 Apr 2025 13:16:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:3f:c2:6c:61:e2:e4:f1:c0:13:18:db:8e:47:1b:58:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3 Validity Not Before: Apr 16 18:00:28 2025 GMT Not After : Apr 17 18:00:28 2025 GMT Subject: CN=2538db990aadcbca33821165f94308f9b8325b33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c9:5f:ff:71:1f:b1:15:16:90:90:34:52:2f: 10:bf:94:f5:9c:a4:d9:4f:c9:05:17:f8:65:42:0b: 37:7e:62:21:de:f6:07:d3:41:b7:d5:ce:5a:3e:64: e9:6f:c3:72:c5:4f:f3:10:6e:31:5b:61:c2:99:73: 4b:25:5f:58:09:26:d3:9b:46:5f:d5:d9:65:4c:f3: 76:1a:47:7d:14:bb:c2:9e:78:81:44:4a:d7:ef:53: 6d:7e:b7:7f:ea:5f:76:56:55:22:63:7d:b2:63:3c: f6:9b:c5:b1:c4:83:d5:ce:17:0d:79:c0:96:de:6a: 99:ce:82:9e:cf:19:61:41:09:d6:88:b8:a2:3c:04: 5d:84:79:31:95:9e:66:af:e7:88:fa:14:8e:d8:0f: 5b:45:3f:eb:37:cc:50:51:eb:51:d1:be:8e:21:f6: 14:b8:bd:79:f2:53:40:39:48:48:23:13:bd:09:5a: be:5f:83:0c:e7:33:5f:91:f5:81:ab:4f:b0:01:7f: 96:8d:fc:88:c6:23:9e:70:df:b5:0e:5a:9d:5b:27: ef:d3:b0:e6:4d:8f:bf:4b:49:89:9a:08:77:eb:7e: ec:0b:b9:7f:48:a6:e4:1a:70:d3:a0:6b:ee:4a:10: 00:76:fd:55:e9:74:ed:e9:3c:85:b5:0c:17:48:c1: 9f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:38:DB:99:0A:AD:CB:CA:33:82:11:65:F9:43:08:F9:B8:32:5B:33 X509v3 Authority Key Identifier: keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:5f:26:f0:c7:01:4b:bb:25:bf:27:2c:ee:0e:09:d1:2c:ee: 77:a1:bd:d5:bf:6e:a9:32:e3:2f:30:18:a6:e2:d8:f2:04:1a: 0b:ae:69:af:25:4c:87:b6:5e:97:68:da:4c:ed:4d:8b:4e:40: 35:a4:ab:6e:4f:3b:9d:6c:4d:40:eb:21:74:f2:d5:28:c5:45: 4b:a7:9e:db:2f:39:e3:0b:7b:ff:cb:5b:59:19:54:4c:5f:47: b3:eb:4c:34:c1:fd:cd:73:28:b4:a5:a3:78:ae:a3:3e:b8:e5: cb:62:e0:eb:32:f6:79:11:eb:25:bb:c7:f8:81:00:0c:37:2d: 6f:d8:a5:11:1b:4c:9d:d7:91:5f:00:20:ba:72:68:a9:df:9e: 91:c1:0f:bc:0b:ad:fa:26:1a:79:59:8a:53:76:4d:b9:9c:be: 51:63:1d:8d:d6:97:00:d7:ac:01:43:07:28:f2:54:ae:0e:c2: c7:34:4e:02:5e:49:09:f2:59:40:69:01:fc:91:28:b9:03:9d: 0b:26:4d:f1:95:fb:fe:6d:d0:d7:95:d6:2a:68:14:c8:c2:d0: 31:34:b3:50:d6:a7:92:89:fb:ee:ed:82:ee:2b:25:0c:ca:da: 4f:81:18:23:e7:c5:e3:cc:51:a8:f9:3b:04:78:19:c1:4a:cb: f5:ab:06:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZY/wmxh4uTxwBMY245HG1gyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTk1M2MwODk4MGFkYzk0ZjJmYTNhM2MxYmE5NWM0MGQy MWU3ZDMwHhcNMjUwNDE2MTgwMDI4WhcNMjUwNDE3MTgwMDI4WjAzMTEwLwYDVQQD EygyNTM4ZGI5OTBhYWRjYmNhMzM4MjExNjVmOTQzMDhmOWI4MzI1YjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1slf/3EfsRUWkJA0Ui8Qv5T1nKTZ T8kFF/hlQgs3fmIh3vYH00G31c5aPmTpb8NyxU/zEG4xW2HCmXNLJV9YCSbTm0Zf 1dllTPN2Gkd9FLvCnniBRErX71Ntfrd/6l92VlUiY32yYzz2m8WxxIPVzhcNecCW 3mqZzoKezxlhQQnWiLiiPARdhHkxlZ5mr+eI+hSO2A9bRT/rN8xQUetR0b6OIfYU uL158lNAOUhIIxO9CVq+X4MM5zNfkfWBq0+wAX+WjfyIxiOecN+1DlqdWyfv07Dm TY+/S0mJmgh3637sC7l/SKbkGnDToGvuShAAdv1V6XTt6TyFtQwXSMGf0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCU425kKrcvKM4IRZflDCPm4MlszMB8GA1UdIwQY MBaAFMYZU8CJgK3JTy+jo8G6lcQNIefTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYt NjI1MjQ1YTAwYWJmLzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYtNjI1MjQ1YTAwYWJm LzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGl8m8McB S7slvycs7g4J0Szud6G91b9uqTLjLzAYpuLY8gQaC65pryVMh7Zel2jaTO1Ni05A NaSrbk87nWxNQOshdPLVKMVFS6ee2y854wt7/8tbWRlUTF9Hs+tMNMH9zXMotKWj eK6jPrjly2Lg6zL2eRHrJbvH+IEADDctb9ilERtMndeRXwAgunJoqd+ekcEPvAut +iYaeVmKU3ZNuZy+UWMdjdaXANesAUMHKPJUrg7CxzROAl5JCfJZQGkB/JEouQOd CyZN8ZX7/m3Q15XWKmgUyMLQMTSzUNankon77u2C7islDMraT4EYI+fF48xRqPk7 BHgZwUrL9asGRQ== -----END CERTIFICATE-----Generated at Thu Apr 17 09:03:18 2025 by rpki-client