$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft File: eXmGPOqCrrjp3zhLOapRdvS8-mE.mft (raw, json) Hash identifier: 6FChRKrR2378qTnyNi0FnLe8aPIalCto+e4N6/cJ4Vs= Subject key identifier: E2:4B:2F:61:E9:D0:9C:77:D8:6A:22:2D:D2:6A:E0:CF:8D:1D:D5:81 Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61 Certificate issuer: /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61 Certificate serial: 0196342D0D2A428C54DE105674B5D41DEF28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft Manifest number: 150E Signing time: Mon 14 Apr 2025 12:01:29 +0000 Manifest this update: Mon 14 Apr 2025 12:01:29 +0000 Manifest next update: Tue 15 Apr 2025 12:01:29 +0000 Files and hashes: 1: 2cSeSi_Xs9nxENINXXMmVW1DasQ.roa (hash: NILYBWHjcUi2YMu0b6KQQ7GSdlhIfBjAKlI5QryWGe8=) 2: 31B5K7vkAfS9R2wkGuV5dcAnL2Y.roa (hash: O89Ry4yQ6lrE+ydQl9ey5gr4XCsYEJZz/2ZEEVTUklM=) 3: 8rBNukWPHPmFUpvlkGmzTz1-HwA.roa (hash: tMcco5dxWlTIQfy3zxbp0EQ9rOWiTqcDWIU/jeQq+bM=) 4: DrV2xA7Yd-hZFiq3pO9rygl2qg0.roa (hash: TVf6eSJU2syGlD0lzcyv3W0pP95vSrCKIhPdX0AUyh0=) 5: GGh-0xxwn6ceElDQMHRGmEsQE-s.roa (hash: P3CSh7y+NvPz/ZjtWmpED7vAzzUGfZNIvd2EgvFxP9s=) 6: NmG_HXr74xhss_g6667RcEUKRLI.roa (hash: w4iJzBXqF4+nBtbBp9H18XsHRW5050KpbO/LhdFePIo=) 7: OeWAQhxz5E883h7RJjR3cmkBM6o.roa (hash: SpK+6FCkO+sEnLY+zrox32fWgUHKX5y3hElZSDHvkaU=) 8: OllQNmMawdArtrTwZHIJNF4T5jM.roa (hash: +uevr5/ThP6vpFGT/Sd5hxkcaCeLUtP4ogWvmijr4m8=) 9: eXmGPOqCrrjp3zhLOapRdvS8-mE.crl (hash: EuYU22Nwft2WGmddM269W+BOfBHIF8cnakQISvi84Ik=) 10: jRyIBgdtXReJ9oHBVuw4FaEWM-0.roa (hash: ZszsBIs7CJREdsDcllx0N3t5IqBzFvq0JJZ2fLMu8PY=) 11: pGXlBe8mvqpUo_lCHeYFkShv2K8.roa (hash: rjd6cps92Ja94+46vbe5lft5y/2s10gUp3FV0e699LY=) 12: zIH5sPlMx70fyP1Az3Csaj7WyTI.roa (hash: 2aeoW9K+GdEGc7tRsUNmCwR+CPzyrfG3s/F0EGb6/Pk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 15 Apr 2025 12:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:34:2d:0d:2a:42:8c:54:de:10:56:74:b5:d4:1d:ef:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61 Validity Not Before: Apr 14 12:01:29 2025 GMT Not After : Apr 15 12:01:29 2025 GMT Subject: CN=e24b2f61e9d09c77d86a222dd26ae0cf8d1dd581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:9d:c3:f3:e0:48:20:68:e4:11:9b:25:df:16: 1d:9a:09:58:0a:55:91:34:4f:f2:b1:a9:20:8e:46: e5:fd:89:6f:3a:e2:0d:94:17:30:61:41:43:99:b8: bf:00:8b:84:4f:30:5d:31:8e:e6:62:6a:7b:41:fb: 6d:54:9d:07:af:9d:da:7b:0c:b1:5b:af:c0:3b:f1: cf:6b:3e:e2:6e:04:e3:d7:3b:8c:2d:28:9e:d1:46: 55:97:ab:05:e1:c5:eb:17:5b:8f:9c:87:57:07:1f: 4f:a8:7a:90:20:3e:68:fa:1a:cb:6f:3e:cb:a9:66: b3:d3:e3:57:c5:8f:96:30:ee:23:5f:31:e6:5c:84: 4b:53:5a:7e:a4:3f:69:d6:00:ff:dd:06:f6:e8:18: cb:ef:8d:3c:92:1a:5f:12:7f:03:96:48:d7:d2:38: e6:0e:e9:33:22:72:55:27:12:62:47:96:71:09:55: 25:9c:60:c4:97:fe:24:15:0f:35:91:b4:69:b0:dc: 71:c4:4f:a2:b2:25:b4:eb:9e:c7:d7:2b:ba:35:f8: e6:93:bd:0c:39:fb:d0:84:b3:07:21:ce:d7:a6:27: 6b:1e:70:46:8e:79:fd:95:23:43:f8:9f:97:59:7d: af:a9:ed:4a:8a:61:31:63:c0:62:2e:2b:fd:26:84: 4e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:4B:2F:61:E9:D0:9C:77:D8:6A:22:2D:D2:6A:E0:CF:8D:1D:D5:81 X509v3 Authority Key Identifier: keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:27:73:30:45:ef:7c:27:dc:e4:a5:83:cc:6f:5d:22:a8:8a: 05:0b:db:ef:5d:f3:9e:30:99:96:a4:7d:0a:5a:c2:04:e8:33: 97:6a:da:f4:6a:8b:cf:0f:59:69:bb:c9:e3:76:46:ff:7a:b5: 32:11:da:86:5d:5b:8f:76:5f:5b:b3:32:67:2e:a9:e6:3b:36: 93:93:34:cd:e9:fd:b7:ce:07:c9:d2:7a:df:9f:df:ba:64:fe: cb:ba:c4:72:23:8b:75:a9:b1:a6:e2:0a:ff:ec:19:d6:62:16: 6d:93:70:85:74:70:ed:44:f6:80:4c:66:75:06:0a:28:f8:a1: 8c:6d:3b:a9:62:c4:f2:e3:70:cb:b8:5b:47:f6:c9:75:f0:9d: 3a:5e:3c:8f:88:51:66:78:67:0d:ae:01:a6:22:ed:a0:7f:0c: a0:3e:15:5d:50:fa:09:bd:7d:17:97:5c:8f:08:ea:7f:1f:1a: 7e:da:df:7c:56:57:63:cd:fc:e9:59:72:62:74:09:e6:62:72: fe:ef:6b:04:98:a3:ae:dd:c1:f1:05:74:f0:e3:f8:00:1d:57: 66:bc:e0:76:36:82:81:ee:f0:ef:41:20:ff:6b:8e:ec:54:2a: 86:8f:35:33:b7:b0:a2:09:65:f1:2b:1f:88:f8:dd:1c:84:2a: ce:b6:a6:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZY0LQ0qQoxU3hBWdLXUHe8oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5Nzk4NjNjZWE4MmFlYjhlOWRmMzg0YjM5YWE1MTc2ZjRi Y2ZhNjEwHhcNMjUwNDE0MTIwMTI5WhcNMjUwNDE1MTIwMTI5WjAzMTEwLwYDVQQD EyhlMjRiMmY2MWU5ZDA5Yzc3ZDg2YTIyMmRkMjZhZTBjZjhkMWRkNTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk53D8+BIIGjkEZsl3xYdmglYClWR NE/ysakgjkbl/YlvOuINlBcwYUFDmbi/AIuETzBdMY7mYmp7QfttVJ0Hr53aewyx W6/AO/HPaz7ibgTj1zuMLSie0UZVl6sF4cXrF1uPnIdXBx9PqHqQID5o+hrLbz7L qWaz0+NXxY+WMO4jXzHmXIRLU1p+pD9p1gD/3Qb26BjL7408khpfEn8DlkjX0jjm DukzInJVJxJiR5ZxCVUlnGDEl/4kFQ81kbRpsNxxxE+isiW0657H1yu6Nfjmk70M OfvQhLMHIc7XpidrHnBGjnn9lSND+J+XWX2vqe1KimExY8BiLiv9JoROiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOJLL2Hp0Jx32GoiLdJq4M+NHdWBMB8GA1UdIwQY MBaAFHl5hjzqgq646d84SzmqUXb0vPphMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xY2NmMjUtMjBkZS00YjJlLWEwZTEt ZGU0YWNmNDQ3ZmFlLzEvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8xY2NmMjUtMjBkZS00YjJlLWEwZTEtZGU0YWNmNDQ3ZmFl LzEvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiydzMEXv fCfc5KWDzG9dIqiKBQvb713znjCZlqR9ClrCBOgzl2ra9GqLzw9ZabvJ43ZG/3q1 MhHahl1bj3ZfW7MyZy6p5js2k5M0zen9t84HydJ635/fumT+y7rEciOLdamxpuIK /+wZ1mIWbZNwhXRw7UT2gExmdQYKKPihjG07qWLE8uNwy7hbR/bJdfCdOl48j4hR ZnhnDa4BpiLtoH8MoD4VXVD6Cb19F5dcjwjqfx8aftrffFZXY8386VlyYnQJ5mJy /u9rBJijrt3B8QV08OP4AB1XZrzgdjaCge7w70Eg/2uO7FQqho81M7ewogll8Ssf iPjdHIQqzramWA== -----END CERTIFICATE-----Generated at Mon Apr 14 19:36:35 2025 by rpki-client