$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft File: KdLa_xxbthoKyLPK6tS4ofooTQ8.mft (raw, json) Hash identifier: Y4t5oNPjZ0buthlfiogy5Pe8BRTXT/rtQSeCx4qacHE= Subject key identifier: 52:18:A7:26:AD:90:DA:29:4B:F5:3D:0E:25:72:EA:91:02:EE:79:AE Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Certificate serial: 0196722F954D2C225B80DD317B47E7E79C93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft Manifest number: 12CF Signing time: Sat 26 Apr 2025 13:00:43 +0000 Manifest this update: Sat 26 Apr 2025 13:00:43 +0000 Manifest next update: Sun 27 Apr 2025 13:00:43 +0000 Files and hashes: 1: 12aip6Xg3MRpBHrAo9qI_8lGl6A.roa (hash: IURDLmEl8ceZMqFbp565iUYmMlWKc2UmtDtWI+jSndg=) 2: 3E9M_L1qni0gOm9o4JNThdl5mKU.roa (hash: 3QEnMAssy1tNKh1FvcPETtJzWZzXiuRM6bkNkokD5XE=) 3: 6AVaCjHyXzCmX9RKvsJNeBRWsX0.roa (hash: BmkvGfb9KA/kpLVgShUXMCUOS/qU/B+L76KUE0JlgVE=) 4: AT1NLNUZ8X0xD6RcwZMdLdIz2ZM.roa (hash: fjnVFsPrVhpcbyIspcCLA5dZQu2SV1yINQliobo6yxc=) 5: FHCB6DuGL-bnBGM2X1yDzSnX9Zk.roa (hash: r6GDh9X+ylCTDxl9vj4S1UTcrV/ImccaaTi1D8Mi2xk=) 6: GUuYC7cVlHvArBzfO7tfpAP5D60.roa (hash: MBqPwcxZe15O5TCcnQP4rabYZ863Bmk75b+fN9uibnE=) 7: JugFLe6jENz0xFJw2G6fMpeVf-I.roa (hash: LY3Ikb4Kwnv22unGatoglkrWDxveEyc5iDX1fxnI/Kc=) 8: KSdWPEt9fB_iBluYNf4K7txBQrE.roa (hash: YJ0c3CPnKgl+QFgMB6tD+ii2GX7vwrvuc49Rrz/E7uI=) 9: KdLa_xxbthoKyLPK6tS4ofooTQ8.crl (hash: +byJKJjVAiWro7gSEoqe0jHtAhbWXNkgY+0RgbSXlPM=) 10: Mf9Ftgoq8hNaUlnWSE1OgssDPng.roa (hash: 2OpCIxzpIQdhVjJD4azKWQqbRjrwZgvvuIiGX67bBpw=) 11: NcWtmNHRiYuhKShMZ2FiNOKfbAw.roa (hash: 6KR850hMO0L6chqV9/ieA2lf65V6cwC4jHYlXOitS7g=) 12: RPKuIuiwLUOTopNmIn4BOJGs7i0.roa (hash: lIg6TqObzFxbqNZ5fchVzBYqOiLD6H6xqfkDU6vs6XY=) 13: U0kXOYQlCT4siDrxC7rmBYTDjYg.roa (hash: /xFFXqatUzxXHWrxa+teKUB4rwy5tb/b0xZ64HTl1uY=) 14: UWAkOLxdcSPEBsnLHKLGVFj6HSY.roa (hash: dNB9CSwfrGd4Zr+0Ay5Qi/d5x8ITuVt9C22HWCd4MaA=) 15: dsuGlLVHMB7I47kgKa74SXE1REc.roa (hash: 7Qj6mOC4uog0qj785J6KkN+zNyCNyHyzGiCvkAMiApI=) 16: hGqZ-FRlI55t4voAlR-n3NqPej0.roa (hash: B71Rb7BaHyLXQqMJQJiZSZS0lT82TbCVQONz7Ndp5cM=) 17: iOyP_Db0F92sxD2S4x9jDUy18wI.roa (hash: 6Iwr8wDrVOHgqwu2HaRDU/1SoUQAFZ31io4JJpWIzCM=) 18: izV8LD-KWyx4ph9YXGyEe0qtgqI.roa (hash: 2FIdcaPo0XlL7Qk8UA/+1ue/720HntDktGQmgSyMUIw=) 19: pniJJNnWhCfy3Bn0AhMHiTWAr6k.roa (hash: uHFIjcBGn6an09Ws8UMUg78JE8uxR/arjS4krwd5r7c=) 20: qJFVscxIPth-exAWqMl9bVOjxAI.roa (hash: pHwl4Cl7JQcL2UqiEOUWpCgL0r/3gGkJ4NhvF5sKGTs=) 21: qwqQv0_kWPrf2uUBMKT2TvBK3mI.roa (hash: ThX6Wi8fnBNMU2VW9z+5scRKlGLAdJdy5Sm4VgDw7kY=) 22: raPkT2KWJeKCRGMnLBqXVOcCh6c.roa (hash: AxKEGemelOmDh2SMtY0ZCfbnhb9j8WRYHJt5TuaikL8=) 23: sd89zYJ1j-RCLpU1z7-DyfQxZL8.roa (hash: UzEpFC1Sc2lK9fjFosdwjJq/oDCr+18i93FGOSEJQN4=) 24: t7kFFxrGX7b_8JY79xsh7QWePnI.roa (hash: 3NaS6l21qtRZhafFxfFpDNUW1OP8TUGIeUDERM2ms5M=) 25: voV1pHSGjiHjmQ5rvvOxR7Je57c.roa (hash: vGBPYlDzvYjcVIBYHyOvwD8dXv9By2X73KVyoLfQW34=) 26: yIMKEplFh6ZEkcubfWX7y2IKKyQ.roa (hash: ZSj+jK0d68aj2QlmnuWYii9Xy8EIUlDgGvMMdbL9Elo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 11:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:72:2f:95:4d:2c:22:5b:80:dd:31:7b:47:e7:e7:9c:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Validity Not Before: Apr 26 13:00:43 2025 GMT Not After : Apr 27 13:00:43 2025 GMT Subject: CN=5218a726ad90da294bf53d0e2572ea9102ee79ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:79:5c:3c:fd:86:a0:33:7b:86:64:1c:89:35: d8:10:b5:90:2d:c5:1f:0c:f7:e0:f4:ac:33:e6:56: a2:23:a9:d7:ac:31:f4:63:0d:95:b0:df:9d:60:b6: 15:26:e1:29:43:9d:6d:4c:da:c2:95:f3:4c:78:93: 63:42:88:4d:0f:0a:b1:f8:ab:22:69:07:0d:39:48: 92:ec:d6:11:d5:dd:eb:cf:0b:be:5e:f8:4c:f8:da: 14:70:23:e4:ee:33:b7:29:34:66:91:fe:40:0e:5c: 9c:2a:08:d5:46:e4:f0:97:b9:a3:b1:cc:f7:7d:1b: 40:1f:4d:29:ef:c2:ef:55:ae:b3:d8:4b:fe:e9:9c: 45:d0:31:d8:3b:42:14:e6:46:f6:06:ca:c8:9f:db: e0:73:36:9f:e4:c4:46:cf:51:ba:06:7f:bf:a2:44: 05:e9:68:65:b9:0f:0e:6d:b6:99:df:0f:4a:07:5f: c9:a9:5e:d2:bd:4c:d4:b8:e0:57:4f:eb:30:8d:16: 75:3b:d6:93:ed:d3:b4:94:87:65:27:9c:82:89:0c: 02:db:00:c2:8e:de:30:b1:1f:bd:33:dc:d7:29:3f: 3c:48:49:82:51:37:f2:11:2b:87:42:2e:ff:d0:64: 9c:85:84:69:c1:04:c0:38:6f:38:87:5a:ff:f3:72: 8e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:18:A7:26:AD:90:DA:29:4B:F5:3D:0E:25:72:EA:91:02:EE:79:AE X509v3 Authority Key Identifier: keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:69:23:7c:5d:46:a7:47:ff:de:9e:a0:7e:3c:0a:ce:8b:e6: f4:d8:dc:46:93:fd:da:eb:aa:3b:20:84:af:bb:42:57:6f:d9: 3a:ee:67:ea:d4:6f:91:41:2e:57:07:13:5c:33:ff:2a:dc:2f: e1:38:b9:57:e7:4a:32:65:01:15:50:e4:90:b6:f3:4d:cb:1a: 0e:ea:04:7d:d7:84:ac:b3:db:2b:50:de:e0:3f:a3:40:4c:f3: 9f:f7:ee:d8:56:3d:44:1a:cb:19:01:bc:6f:6e:1a:ee:5a:15: ce:5b:91:73:74:c7:fc:24:fa:9a:7f:82:84:64:f6:88:b2:cb: c4:a7:f4:b4:51:9b:ee:bb:67:ec:1e:41:84:ae:6f:9a:2f:e5: 97:37:28:a4:3c:01:3a:00:a3:72:14:18:df:33:fa:bb:69:62: d8:52:18:ab:c4:b6:83:2f:74:43:53:bc:ce:b8:29:64:3b:c1: 46:c2:b2:55:0d:d7:e3:f2:b1:25:7b:f4:c5:b2:73:64:1d:9b: 98:c1:ef:d7:ec:f1:74:a8:40:83:a7:4c:3a:a2:29:c6:43:f6: 4c:74:d7:ed:27:b0:2a:14:b4:fb:6d:c8:81:81:6e:da:78:be: 82:f8:52:b3:d8:00:b4:5a:82:f6:d3:d6:1e:30:f0:02:2d:bb: 38:e0:a9:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZyL5VNLCJbgN0xe0fn55yTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZDJkYWZmMWM1YmI2MWEwYWM4YjNjYWVhZDRiOGExZmEy ODRkMGYwHhcNMjUwNDI2MTMwMDQzWhcNMjUwNDI3MTMwMDQzWjAzMTEwLwYDVQQD Eyg1MjE4YTcyNmFkOTBkYTI5NGJmNTNkMGUyNTcyZWE5MTAyZWU3OWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3lcPP2GoDN7hmQciTXYELWQLcUf DPfg9Kwz5laiI6nXrDH0Yw2VsN+dYLYVJuEpQ51tTNrClfNMeJNjQohNDwqx+Ksi aQcNOUiS7NYR1d3rzwu+XvhM+NoUcCPk7jO3KTRmkf5ADlycKgjVRuTwl7mjscz3 fRtAH00p78LvVa6z2Ev+6ZxF0DHYO0IU5kb2BsrIn9vgczaf5MRGz1G6Bn+/okQF 6WhluQ8ObbaZ3w9KB1/JqV7SvUzUuOBXT+swjRZ1O9aT7dO0lIdlJ5yCiQwC2wDC jt4wsR+9M9zXKT88SEmCUTfyESuHQi7/0GSchYRpwQTAOG84h1r/83KOGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFIYpyatkNopS/U9DiVy6pEC7nmuMB8GA1UdIwQY MBaAFCnS2v8cW7YaCsizyurUuKH6KE0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3Zjgt NGY1N2Q5Y2Y1Y2FhLzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3ZjgtNGY1N2Q5Y2Y1Y2Fh LzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHmkjfF1G p0f/3p6gfjwKzovm9NjcRpP92uuqOyCEr7tCV2/ZOu5n6tRvkUEuVwcTXDP/Ktwv 4Ti5V+dKMmUBFVDkkLbzTcsaDuoEfdeErLPbK1De4D+jQEzzn/fu2FY9RBrLGQG8 b24a7loVzluRc3TH/CT6mn+ChGT2iLLLxKf0tFGb7rtn7B5BhK5vmi/llzcopDwB OgCjchQY3zP6u2li2FIYq8S2gy90Q1O8zrgpZDvBRsKyVQ3X4/KxJXv0xbJzZB2b mMHv1+zxdKhAg6dMOqIpxkP2THTX7SewKhS0+23IgYFu2ni+gvhSs9gAtFqC9tPW HjDwAi27OOCpWA== -----END CERTIFICATE-----Generated at Sat Apr 26 18:37:10 2025 by rpki-client