$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft File: mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft (raw, json) Hash identifier: L/aDI6XksAY5zGp5j1Z3hJOySG4LyQadjhbzIv9wYSA= Subject key identifier: DA:03:1A:24:B9:D0:05:45:37:3A:63:8F:88:87:25:AA:D2:BF:E8:94 Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E Certificate issuer: /CN=99ce569a14c2db3772f23187ce68e6541ec0048e Certificate serial: 0196150F9AD13D5262BD228077E9CAC23849 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft Manifest number: 14FD Signing time: Tue 08 Apr 2025 11:01:06 +0000 Manifest this update: Tue 08 Apr 2025 11:01:06 +0000 Manifest next update: Wed 09 Apr 2025 11:01:06 +0000 Files and hashes: 1: 7hlWKm8vTIF0LH1H2oS6Admh1TI.roa (hash: JGgMMA+OZIrWq67kkKcLVk/aNndkz3SnG1R5RYOVvj8=) 2: 8Okcs_WzeZSlRzql6-e5V5V7syA.roa (hash: Bgf74cz9Nwo/ctlxM9vVhY3z4DibfYQP6Uszu31EXc8=) 3: AJpw_2i3EoQNYD9kunMPYOdByi8.roa (hash: 2y+udfjFmNVer5C4pJzKndxIM53KHs0ELdljGNxXclM=) 4: FjCA5Ak9pc8iYQAo2kd8vxWMg2c.roa (hash: LWHCt8fi0ffLNOHRJ69hCW6DNWkN+nY4S8kMpRaQ7ss=) 5: Ik8Kqt-zKfrsdQjyrAjHXX-mlLc.roa (hash: Zg9C0+0W8n0QIjR6RRPkp/OJIpBk8iu2+syGMIoxQyg=) 6: P82-6fcmXy1vqdLrwWWqytTl0TM.roa (hash: z01aDruR3yMRSRzpiGY2CGLWYQwuEAMQJV+YU0LBGGA=) 7: RYdEtsOojE3SXyShhqAjMIQl9xQ.roa (hash: bxAZYk1bj8j4gGSsg9+CUkCHFq1GRl7baVopFxolE0s=) 8: WBeAt2UOvPgAdfpllYF8DBrXsx8.roa (hash: IGhLKO/rQTI4tOBHJDgWqI73xTyqxuZsgF0ztyC/dOc=) 9: bbmenZqkY_bNQyceoK-fLvwWxdc.roa (hash: 5/uuA7PsJ4CyNOajTBR0J1Bkylsmq9V39AJtX9hFgFU=) 10: dMlBq16YcIM7-JR7sVrQGjUo5Ts.roa (hash: i7NU7NT4PhY/w3tg6T+Z3qdRHBm2oFSaLm/74+Urx2g=) 11: f4e7IUwG3JkPasx3oPPOpKnw014.roa (hash: oT75cSQjF7ggxHOJOkz6Sxjs0hfilCF0H6NE1nJtUfo=) 12: mNguxrQSssFTgOvDx-TtVJcngJ0.roa (hash: p4yScE1NaP9LVRZLGH/RikX/bIEDOl76JK/45ns5C9Q=) 13: mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl (hash: AVBM2ff1jUjHam5zDwEl+CPRQXAu2fBk+dAbVBxNYAo=) 14: u_mqTybwgy-hqVDwwCNi1Bf-8tI.roa (hash: JZzfV1nFUUQsICoBUJ9//kJmxjSvH3d3D7ybB8QQr/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 09 Apr 2025 08:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:15:0f:9a:d1:3d:52:62:bd:22:80:77:e9:ca:c2:38:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e Validity Not Before: Apr 8 11:01:06 2025 GMT Not After : Apr 9 11:01:06 2025 GMT Subject: CN=da031a24b9d00545373a638f888725aad2bfe894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5b:37:12:6a:dc:5f:d3:07:49:d6:d9:64:1c: 7e:37:bd:f7:11:4b:9a:80:13:ec:d1:a1:dc:95:d6: 3e:7c:e9:b1:d7:a6:1e:41:44:2b:d9:69:14:55:ae: 4a:20:9e:33:38:1a:84:6c:d0:27:3b:78:00:fe:06: 8a:a3:4c:0e:51:3b:5b:68:5a:9d:62:ad:db:d4:26: c1:a3:9b:32:3c:9d:3d:b2:7b:6d:4d:d7:2d:23:84: 49:72:78:a5:8e:09:f4:2a:c0:ed:8f:ca:a6:f5:fc: c5:77:86:0b:ca:db:b8:25:2f:29:78:24:ae:89:25: 86:b0:07:3b:d9:f8:ef:6c:df:85:86:4f:14:ea:f0: d9:29:1f:26:74:cb:71:9b:a9:45:3d:c1:d9:4a:ab: 2b:56:dc:df:d2:47:38:18:da:dc:9b:99:59:d8:22: 78:af:63:47:dd:56:ad:29:3f:6c:1b:55:3e:b6:bc: 05:a7:29:d3:d2:a8:7a:3a:d7:11:13:f3:6e:9a:c6: 36:1d:34:01:41:c7:ee:42:70:5e:d7:dc:30:8e:e4: a2:e2:7e:2f:a3:ba:83:11:bb:22:ba:9e:65:c0:b0: 3f:94:80:9c:60:da:0d:d7:98:b1:16:9c:ea:f2:8f: 61:d7:5f:3f:ad:ce:52:86:40:9e:e8:28:31:f9:e0: ec:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:03:1A:24:B9:D0:05:45:37:3A:63:8F:88:87:25:AA:D2:BF:E8:94 X509v3 Authority Key Identifier: keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:59:05:36:df:02:d4:8e:ae:dd:7d:77:02:03:1f:0e:e7:8a: fd:9f:dd:4d:62:dc:10:54:60:be:27:cc:80:8a:de:53:11:71: 94:63:f4:56:55:af:93:f4:f9:c4:94:6d:87:44:ff:9d:2c:b1: 12:14:2c:be:45:27:96:13:2d:e9:e8:02:73:35:c8:84:c9:88: c5:47:0d:30:39:a1:d9:89:af:98:b1:17:10:1f:2f:92:22:52: f5:d9:ab:38:48:5c:da:1e:bf:dd:b0:46:cf:d5:77:72:22:36: ce:b8:41:12:0e:1e:ea:bd:81:43:ec:15:15:ac:b0:46:41:5e: f3:fc:7b:af:49:26:d3:f4:a7:78:e3:0a:7b:71:08:98:52:e8: 73:a4:35:25:a7:93:57:be:e1:62:21:e4:fd:b5:37:5b:65:bc: 72:5f:50:85:8f:2c:4f:ec:1e:28:af:57:38:05:4e:85:13:02: 09:d2:e5:85:79:5f:37:53:dd:81:23:20:e8:81:bb:cb:86:ee: f9:b4:52:c0:9e:9a:82:40:20:44:96:22:80:99:e6:e9:bd:92: b1:e6:09:ec:46:b5:84:07:9f:ae:5e:c5:9a:d2:3a:1d:ce:d4: 23:81:f0:7e:21:93:c1:d6:88:f7:47:4d:67:10:32:6b:4a:08: ac:34:1a:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYVD5rRPVJivSKAd+nKwjhJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5Y2U1NjlhMTRjMmRiMzc3MmYyMzE4N2NlNjhlNjU0MWVj MDA0OGUwHhcNMjUwNDA4MTEwMTA2WhcNMjUwNDA5MTEwMTA2WjAzMTEwLwYDVQQD EyhkYTAzMWEyNGI5ZDAwNTQ1MzczYTYzOGY4ODg3MjVhYWQyYmZlODk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVs3EmrcX9MHSdbZZBx+N733EUua gBPs0aHcldY+fOmx16YeQUQr2WkUVa5KIJ4zOBqEbNAnO3gA/gaKo0wOUTtbaFqd Yq3b1CbBo5syPJ09snttTdctI4RJcniljgn0KsDtj8qm9fzFd4YLytu4JS8peCSu iSWGsAc72fjvbN+Fhk8U6vDZKR8mdMtxm6lFPcHZSqsrVtzf0kc4GNrcm5lZ2CJ4 r2NH3VatKT9sG1U+trwFpynT0qh6OtcRE/NumsY2HTQBQcfuQnBe19wwjuSi4n4v o7qDEbsiup5lwLA/lICcYNoN15ixFpzq8o9h118/rc5ShkCe6Cgx+eDsSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNoDGiS50AVFNzpjj4iHJarSv+iUMB8GA1UdIwQY MBaAFJnOVpoUwts3cvIxh85o5lQewASOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9jYzZlOTktNmU1Zi00MDFiLTkxMmQt MTA5NTU0NGM2YzUwLzEvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9jYzZlOTktNmU1Zi00MDFiLTkxMmQtMTA5NTU0NGM2YzUw LzEvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOlkFNt8C 1I6u3X13AgMfDueK/Z/dTWLcEFRgvifMgIreUxFxlGP0VlWvk/T5xJRth0T/nSyx EhQsvkUnlhMt6egCczXIhMmIxUcNMDmh2YmvmLEXEB8vkiJS9dmrOEhc2h6/3bBG z9V3ciI2zrhBEg4e6r2BQ+wVFaywRkFe8/x7r0km0/SneOMKe3EImFLoc6Q1JaeT V77hYiHk/bU3W2W8cl9QhY8sT+weKK9XOAVOhRMCCdLlhXlfN1PdgSMg6IG7y4bu +bRSwJ6agkAgRJYigJnm6b2SseYJ7Ea1hAefrl7FmtI6Hc7UI4HwfiGTwdaI90dN ZxAya0oIrDQa9A== -----END CERTIFICATE-----Generated at Tue Apr 8 13:06:22 2025 by rpki-client