$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft File: u6Nc-KtvPqoq663Z4jc97AiTYl4.mft (raw, json) Hash identifier: EVUXyyM32UNAF4AeSosUXqfbBpqSnqNAGSSEeP+NWdQ= Subject key identifier: 9A:9C:77:EE:1B:1B:EF:05:1B:B9:47:2D:2E:1D:5F:B6:9C:C9:85:27 Authority key identifier: BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E Certificate issuer: /CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e Certificate serial: 01962B60704F02647FC5C670AA5D7CFCFFA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft Manifest number: 12B6 Signing time: Sat 12 Apr 2025 19:01:02 +0000 Manifest this update: Sat 12 Apr 2025 19:01:02 +0000 Manifest next update: Sun 13 Apr 2025 19:01:02 +0000 Files and hashes: 1: GtppMOhe-qj4-qKPQwYM7Bndra0.roa (hash: DZ7bcQ1MagW/CKYzAoT3tgdmQpZud4AtQbSCkk/MCKU=) 2: IICQjXJW2EEkB1v0o8BM6izDgbM.roa (hash: 7Xb1rw7YXZ8yAd+5aXbmrrlzp2Uxli0xSynXq48MEYc=) 3: PZNxNz45jwhU2f2Vk-rUkU1xuZQ.roa (hash: F+PZJf4GxvF8kf0ckwm9Pxo9WyYXyL9ytkInNQ2bSTY=) 4: _8UTREX8Q0a63ua_dGhbhojBdUA.roa (hash: DL1eDSZaMbokl5Ydp9t7oF5cl2AwIO6gEepk09/TZDc=) 5: _kZUir8n1AqIU0qtCf0tRxbZpds.roa (hash: i0Gwqdkr5/j/wsvWbuGrhf4MKjNKMEm96rfhCoH477Y=) 6: c7nY0rggG6raEqDRkehzGz_VYtA.roa (hash: EhNdOxX4vcohdV7gKrHWK7+fsvt8pGFZe0311VfzJ1M=) 7: clWD5iSFcHwGMTWctP6MgbhffFI.roa (hash: XeY9jpVy1coomoksHYwsuAsFdSJEnTf0ShOjmRYUnB0=) 8: hEnYun4dBmY4NXRm3bASEYEJDP0.roa (hash: 9ED8ExgB7hEhZTw92vukURu1ltjtyM6wWC7Qc0GRBP4=) 9: tTkbfZxula834alUiiKULvFUhEY.roa (hash: 53gfHOJtFDupMS3Pl17R4clQixHqHEmtoBj+F2KX9dc=) 10: u6Nc-KtvPqoq663Z4jc97AiTYl4.crl (hash: /lBZc4oTbxaoct6SXbUkUdC1zkJ8laxnIXY67P+TzTM=) 11: uZ3gLoi-baUsKV1SOOe_6eXbk4A.roa (hash: DF0imGw170/tpFF5iP4nGcWrEFYm61EvjaRvJ/3jKZA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 13 Apr 2025 14:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:2b:60:70:4f:02:64:7f:c5:c6:70:aa:5d:7c:fc:ff:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e Validity Not Before: Apr 12 19:01:02 2025 GMT Not After : Apr 13 19:01:02 2025 GMT Subject: CN=9a9c77ee1b1bef051bb9472d2e1d5fb69cc98527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:37:2f:3a:07:f5:5e:3f:be:23:2e:0c:85:d7: 28:79:16:3f:ba:d2:14:7a:39:fc:93:38:b8:2e:2e: 3e:89:60:1c:32:6a:d6:72:ab:2e:ff:c3:54:6e:67: ae:46:c8:8a:c0:26:2a:1f:cc:a2:9a:0c:4c:74:eb: 73:64:fe:ce:d6:0c:c6:89:5f:b3:9c:0b:0d:36:f3: ee:9a:54:96:04:c2:55:f7:dd:dd:41:94:7b:df:dd: 1e:83:01:bc:29:4f:93:fe:fa:5e:d7:5d:d2:94:09: 71:69:40:f7:67:22:51:1c:56:76:c6:43:e0:b9:a6: 45:f2:8c:5e:99:0a:73:5a:01:55:03:b5:03:09:9d: 70:91:ac:45:78:8a:f8:1c:ac:3b:29:d4:e6:09:a5: e7:50:4b:9e:c0:5f:52:44:ee:c1:fc:76:72:a5:04: e4:c5:1c:01:6f:c2:68:a1:07:aa:5a:c9:34:fd:99: 78:66:c5:29:58:82:06:84:02:6e:45:1b:9d:76:cf: 86:1e:db:c3:bf:c5:c9:71:ab:83:a3:9e:11:a7:4a: 67:c6:5f:e5:76:11:66:7d:94:46:ad:f9:e3:b3:a4: fd:3d:03:13:25:57:87:96:7d:2f:30:d3:b7:af:6c: fc:58:21:3c:2d:ea:7c:63:6e:c3:2a:15:63:0c:ef: 87:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:9C:77:EE:1B:1B:EF:05:1B:B9:47:2D:2E:1D:5F:B6:9C:C9:85:27 X509v3 Authority Key Identifier: keyid:BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:a6:ea:de:40:09:a0:97:18:f8:c7:61:17:7e:6b:e2:61:2d: e9:32:50:c3:4c:11:c4:d2:3e:dd:9c:b7:bf:c3:e6:da:99:a6: c4:13:20:e4:ba:2e:31:17:35:de:f4:fd:f9:35:ed:97:d4:99: e6:75:b3:46:41:a1:8a:3e:96:67:90:89:03:46:16:ec:4c:0d: 0b:52:6c:2e:b9:28:10:96:25:28:6c:e4:9e:59:c5:cf:19:be: 8e:16:f1:01:3b:08:a3:32:8f:3c:66:97:39:31:f1:ff:7e:08: ab:8a:20:a8:07:d3:5c:e2:c4:fc:98:49:50:13:72:fc:a5:d4: 0d:0e:4e:0d:f5:b7:cd:b9:f0:db:3d:9c:8f:9f:02:78:4e:ac: f7:bc:99:e9:f3:b7:c9:67:c6:ee:65:a6:05:95:9d:4e:20:3d: 20:31:ec:da:5b:bf:0b:54:bc:b8:97:af:67:4d:89:a8:85:0e: ae:06:a4:b9:ae:7f:91:f7:e2:e7:55:55:5c:51:4b:99:00:af: 98:cd:02:c0:3b:03:2e:44:68:a4:54:b5:5e:1a:2f:56:e3:73: b4:9c:d5:93:1f:c6:08:78:b7:86:15:f8:c2:9d:23:74:e2:02: fa:92:5c:70:c4:d8:f6:d8:8a:fb:fe:7a:01:52:0c:58:0c:12: ed:d0:2e:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZYrYHBPAmR/xcZwql18/P+kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiYTM1Y2Y4YWI2ZjNlYWEyYWViYWRkOWUyMzczZGVjMDg5 MzYyNWUwHhcNMjUwNDEyMTkwMTAyWhcNMjUwNDEzMTkwMTAyWjAzMTEwLwYDVQQD Eyg5YTljNzdlZTFiMWJlZjA1MWJiOTQ3MmQyZTFkNWZiNjljYzk4NTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DcvOgf1Xj++Iy4MhdcoeRY/utIU ejn8kzi4Li4+iWAcMmrWcqsu/8NUbmeuRsiKwCYqH8yimgxMdOtzZP7O1gzGiV+z nAsNNvPumlSWBMJV993dQZR7390egwG8KU+T/vpe113SlAlxaUD3ZyJRHFZ2xkPg uaZF8oxemQpzWgFVA7UDCZ1wkaxFeIr4HKw7KdTmCaXnUEuewF9SRO7B/HZypQTk xRwBb8JooQeqWsk0/Zl4ZsUpWIIGhAJuRRudds+GHtvDv8XJcauDo54Rp0pnxl/l dhFmfZRGrfnjs6T9PQMTJVeHln0vMNO3r2z8WCE8Lep8Y27DKhVjDO+HxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJqcd+4bG+8FG7lHLS4dX7acyYUnMB8GA1UdIwQY MBaAFLujXPirbz6qKuut2eI3PewIk2JeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9hMGUwMWEtOWJiYy00NGVlLTk4YTMt NTk3YjZlMjQ5MmFiLzEvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9hMGUwMWEtOWJiYy00NGVlLTk4YTMtNTk3YjZlMjQ5MmFi LzEvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn6bq3kAJ oJcY+MdhF35r4mEt6TJQw0wRxNI+3Zy3v8Pm2pmmxBMg5LouMRc13vT9+TXtl9SZ 5nWzRkGhij6WZ5CJA0YW7EwNC1JsLrkoEJYlKGzknlnFzxm+jhbxATsIozKPPGaX OTHx/34Iq4ogqAfTXOLE/JhJUBNy/KXUDQ5ODfW3zbnw2z2cj58CeE6s97yZ6fO3 yWfG7mWmBZWdTiA9IDHs2lu/C1S8uJevZ02JqIUOrgakua5/kffi51VVXFFLmQCv mM0CwDsDLkRopFS1XhovVuNztJzVkx/GCHi3hhX4wp0jdOIC+pJccMTY9tiK+/56 AVIMWAwS7dAuPQ== -----END CERTIFICATE-----Generated at Sat Apr 12 23:37:56 2025 by rpki-client