$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft File: KXxQjSOzgxW79FtybSIFCkYSe4w.mft (raw, json) Hash identifier: O8op4Pfr1/pFV+FOrrqEniDKq+l9VitkNHnTqTkkwQs= Subject key identifier: 50:9F:30:04:D8:FA:3C:E0:3F:04:E5:64:93:6C:B0:74:6B:FB:4B:82 Authority key identifier: 29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C Certificate issuer: /CN=297c508d23b38315bbf45b726d22050a46127b8c Certificate serial: 019676B11BA7071F332E52EC6368FCF32A16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft Manifest number: 151B Signing time: Sun 27 Apr 2025 10:00:40 +0000 Manifest this update: Sun 27 Apr 2025 10:00:40 +0000 Manifest next update: Mon 28 Apr 2025 10:00:40 +0000 Files and hashes: 1: 6DiazTfSLwiU3nHVXB2_ipX3pSI.roa (hash: GgVQ0c2h8QmAuSALS7AfweuOCzU4KJ/qThY066+SiL8=) 2: F9Dj4BH3DTiBJqZUn9Gq6zuqgzw.roa (hash: PvC6qEA55o/ujVGgT7SwQI1kg6RiKLhNPwSFFwPuR5o=) 3: FM0AOR7qs5ReYOYfvDzPvyeOFF4.roa (hash: pyPxYA6UMvNM4UkCYSW/CeHul7I1PWvfOpcPGXbUI7A=) 4: KXxQjSOzgxW79FtybSIFCkYSe4w.crl (hash: eM6LcEki1Nt67YOBVejzPbw5qSk3OntOPx77TTtKgDI=) 5: LzFoDYPr7_0gEjtlfJ6xXw6t_lo.roa (hash: rXfhzDDWrE3BbdIp2NtDgdm3XDSADxRFIs8wy+p88S0=) 6: OPHuyxpO9PisbasiiAKtaHkvxVA.roa (hash: x3Qa5U665mgT3yS3jj1UddNty1CV91Oaf8NDM/bZhaM=) 7: kgi8mKAM2yCVgRH4L9W1E0GBctE.roa (hash: /x/rSNiAHNpL5ZxR6vbLMgxwW3ubNoY4GIMOdVAovVA=) 8: wN-88kHsfZoIQbMbBeQSvFTLUAA.roa (hash: TZn5hV31aDddpb82jvBnOx8ugm4e4LbJg3sHA8zL+QM=) 9: xDp3K5cwdwo-amBn4Z3yMMAdo3Y.roa (hash: eoBx0TZUtOUgkA8rEPSl3wkXkZ2dgXNZBSrXrhwvq14=) 10: zYd_cPkM9NVsX7bTQ07hSv4bWMk.roa (hash: 7m24y9mQHGr+u8/2znCaziY9Qt7M+iB4zeF7KEcBtdg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 07:29:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:76:b1:1b:a7:07:1f:33:2e:52:ec:63:68:fc:f3:2a:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297c508d23b38315bbf45b726d22050a46127b8c Validity Not Before: Apr 27 10:00:40 2025 GMT Not After : Apr 28 10:00:40 2025 GMT Subject: CN=509f3004d8fa3ce03f04e564936cb0746bfb4b82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:6f:8e:84:f7:77:80:8d:8d:c9:e7:93:72:9b: 6c:78:f3:ba:23:24:e3:93:75:18:bd:1f:a4:f9:6a: 29:ed:4c:07:dd:3b:30:20:a1:0f:89:9e:81:9a:6a: 09:e6:8b:e7:31:a8:b7:78:7b:87:93:55:e5:7b:52: af:2e:78:2a:57:3f:b4:da:80:af:56:5f:71:2a:fb: df:7d:a2:53:f0:0f:93:f6:a7:1b:c8:81:e0:41:46: e4:2a:f1:f9:01:2b:47:18:99:fc:68:3b:ac:58:ad: eb:88:27:88:e9:3a:68:03:3c:fe:25:48:c9:f8:1c: e0:2a:e7:41:c0:0c:7c:81:82:b2:17:e5:1e:ce:1c: 11:23:8d:82:fb:e1:c3:8b:3a:46:e7:64:93:e3:36: 29:e9:bd:a4:06:02:cd:ba:ce:07:06:1a:26:cf:12: e2:e8:50:75:f1:28:01:f2:2e:06:d1:6e:05:78:83: c3:3e:36:49:44:2d:a4:77:f2:90:ca:22:42:c1:ff: e4:77:6f:67:92:96:b3:f5:38:ea:4e:c0:57:56:a4: 3c:03:20:5b:5b:7c:82:a5:f9:05:cc:49:f9:86:29: 32:33:88:c5:dc:9f:fa:91:a5:9b:f7:d4:5b:a2:1b: 56:92:e7:c3:df:73:f6:fa:94:5a:1b:de:fc:3e:f7: fc:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:9F:30:04:D8:FA:3C:E0:3F:04:E5:64:93:6C:B0:74:6B:FB:4B:82 X509v3 Authority Key Identifier: keyid:29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:9a:04:5c:6e:f4:9f:ea:0b:66:68:46:a8:a7:36:86:ed:5f: ab:95:37:da:62:92:c2:5f:96:62:2a:d8:bb:65:00:83:bb:fa: 83:43:10:3d:37:d5:04:b6:46:b0:92:02:7a:ea:a4:88:be:9e: b1:aa:cb:6e:58:79:14:2a:da:e8:1b:dd:ea:f8:c8:9f:80:c7: 07:93:73:f6:83:ad:37:db:0f:ba:12:36:cf:e9:42:e2:0a:49: aa:5a:f0:9f:59:78:d0:68:9e:1c:7b:40:49:f0:d2:91:ed:1c: 36:03:87:d3:af:f9:8b:d2:1b:bc:fb:35:d3:ac:39:41:68:04: bc:26:07:8e:93:cf:36:21:c0:13:32:6a:7c:89:9c:f9:6a:65: 6b:8d:1e:b3:46:78:69:20:1b:14:56:26:95:d1:aa:94:63:50: 01:64:ec:05:b2:57:6c:e1:fe:9b:1f:b1:ea:71:54:f7:aa:6e: a3:04:a8:74:ef:1b:d8:35:bc:80:d5:d7:ec:e2:be:20:8e:e3: 21:9b:16:32:f4:16:4f:cd:60:16:9a:1a:8a:1d:63:5e:95:26: d4:ab:1e:5a:d7:4e:d1:e0:09:c9:e0:8d:02:79:54:a5:e1:58: 15:a2:7d:c4:44:52:dd:bc:47:fe:cc:1e:80:4a:31:f8:37:d2: 4e:b1:6b:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ2sRunBx8zLlLsY2j88yoWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2M1MDhkMjNiMzgzMTViYmY0NWI3MjZkMjIwNTBhNDYx MjdiOGMwHhcNMjUwNDI3MTAwMDQwWhcNMjUwNDI4MTAwMDQwWjAzMTEwLwYDVQQD Eyg1MDlmMzAwNGQ4ZmEzY2UwM2YwNGU1NjQ5MzZjYjA3NDZiZmI0YjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2m+OhPd3gI2NyeeTcptsePO6IyTj k3UYvR+k+Wop7UwH3TswIKEPiZ6BmmoJ5ovnMai3eHuHk1Xle1KvLngqVz+02oCv Vl9xKvvffaJT8A+T9qcbyIHgQUbkKvH5AStHGJn8aDusWK3riCeI6TpoAzz+JUjJ +BzgKudBwAx8gYKyF+UezhwRI42C++HDizpG52ST4zYp6b2kBgLNus4HBhomzxLi 6FB18SgB8i4G0W4FeIPDPjZJRC2kd/KQyiJCwf/kd29nkpaz9TjqTsBXVqQ8AyBb W3yCpfkFzEn5hikyM4jF3J/6kaWb99RbohtWkufD33P2+pRaG978Pvf8ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFCfMATY+jzgPwTlZJNssHRr+0uCMB8GA1UdIwQY MBaAFCl8UI0js4MVu/Rbcm0iBQpGEnuMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTIt MzZlOWE3OWJkOTUwLzEvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTItMzZlOWE3OWJkOTUw LzEvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlZoEXG70 n+oLZmhGqKc2hu1fq5U32mKSwl+WYirYu2UAg7v6g0MQPTfVBLZGsJICeuqkiL6e sarLblh5FCra6Bvd6vjIn4DHB5Nz9oOtN9sPuhI2z+lC4gpJqlrwn1l40GieHHtA SfDSke0cNgOH06/5i9IbvPs106w5QWgEvCYHjpPPNiHAEzJqfImc+Wpla40es0Z4 aSAbFFYmldGqlGNQAWTsBbJXbOH+mx+x6nFU96puowSodO8b2DW8gNXX7OK+II7j IZsWMvQWT81gFpoaih1jXpUm1KseWtdO0eAJyeCNAnlUpeFYFaJ9xERS3bxH/swe gEox+DfSTrFrkg== -----END CERTIFICATE-----Generated at Sun Apr 27 17:13:07 2025 by rpki-client