$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft File: XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft (raw, json) Hash identifier: wfL2i6T3gGw6w19NyH2Aus7Kk6GEzZzftnWrpfxncck= Subject key identifier: B1:3B:BB:6B:F2:82:B6:CE:ED:C0:7A:D9:C7:CE:23:44:99:CB:8F:1E Authority key identifier: 5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 Certificate issuer: /CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Certificate serial: 0196816B9C121D49703491AF666A064385D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft Manifest number: 13F4 Signing time: Tue 29 Apr 2025 12:00:35 +0000 Manifest this update: Tue 29 Apr 2025 12:00:35 +0000 Manifest next update: Wed 30 Apr 2025 12:00:35 +0000 Files and hashes: 1: 3b4Fq6_bIamsudbItbqhSpD_K9w.roa (hash: Vh901Zhx3OCDgeqedfZ/abhYR9Rhwc8dnd6e61mW9to=) 2: DefZ__9RqwjeIQvvIG8DNEtfalk.roa (hash: 8CQeEiGOKVZsA3/HRDhtbloh6zsps5iaRDAh0kwUHcw=) 3: Ks2E1N23FL1JlkaeAWsDQ0VTeMA.roa (hash: t0ikCKjSARWk2IVi/g7K6CXdDGiaZQEnFkAP2udGzsQ=) 4: XD3pFL9Q_FZXp8mNCcZObqRMVXg.roa (hash: g5/ZHa0TuYu8Xziy6YKoSXXXe+7v69Kf3qZJF69vu/k=) 5: XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl (hash: UE1tCAgOTyy2oPU4mIWkqPxWkiC8+RN8c5iLyiwaR/o=) 6: XkyRTi83DrHF6W0GS43BmD-TiuE.roa (hash: /3vDH+EU57Ijtwd/m0ZEYJQybxBHrhK4Fu38BBZHM3k=) 7: b4M2RVAScTVc0rLcQWS2TUKBQVg.roa (hash: JAXZVAloSHKdDJuVLx42Yx5DyOaYH17Fr5xV9qxOaFU=) 8: bHywZIpT6KePzqd-y04f9_gubE4.roa (hash: t+U3j3yQlSyR3lx2MZ9I+FTCYrv0GnN+ja0QXS2Zfac=) 9: nxY9K3hs4eW9wiyd2zfVyuMPTZ8.roa (hash: kvygY+cOmoK64hnXWrmGQdyj1Eanlt8CEQUra7ZV1bE=) 10: sKeEH8goKxahgJVyVEdbhgJ7n7Y.roa (hash: uvOsVNDxwiKqJjLFyenb/M2w5Vt3m+sOy2/sHUQrtIc=) 11: w5BxPGkpdUOoj6KfnZEduZETjuE.roa (hash: JPKkhDje+63ounlQ9s1rDQVa+hGWwYxm1Bd6pam4P0o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Apr 2025 12:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:81:6b:9c:12:1d:49:70:34:91:af:66:6a:06:43:85:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Validity Not Before: Apr 29 12:00:35 2025 GMT Not After : Apr 30 12:00:35 2025 GMT Subject: CN=b13bbb6bf282b6ceedc07ad9c7ce234499cb8f1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b8:41:d1:a1:2e:23:e1:d5:ba:73:f6:ea:2a: 25:ea:b5:3e:3a:1f:d9:5f:f0:6c:77:37:ba:d8:90: 5e:76:46:b5:87:87:65:07:bb:95:cb:6c:a8:e7:be: 2c:65:fc:ff:0a:d3:5b:36:aa:70:7c:96:af:97:72: 8f:ac:a3:bd:19:8c:51:f6:b7:53:c3:cc:17:2b:1c: ee:16:af:47:51:08:b8:65:ea:bf:c4:4a:f2:54:ee: b0:98:9d:b3:7f:83:98:50:08:47:3d:7c:af:d8:07: 87:92:bd:c1:48:6d:d5:3b:f1:3c:01:e5:d4:7d:e0: 29:5e:f9:76:e4:84:a6:3a:4b:43:ef:a2:cc:63:c2: d5:f0:67:89:2f:a4:ed:aa:70:09:27:b3:62:c8:72: 71:2e:ad:da:56:12:84:b7:29:50:87:4a:cc:38:e0: de:0d:ef:fe:89:c2:49:aa:05:c0:fc:54:2f:f4:68: 14:14:2a:d0:a3:d7:6f:a9:a2:d4:4c:05:1c:2d:61: 43:d6:b7:63:02:17:58:12:25:70:5e:ab:06:89:85: 25:ae:55:6e:5b:9b:c1:19:6c:a8:f0:9b:6f:89:43: 3f:87:12:5d:ce:f6:13:6f:ea:51:f2:f6:41:90:3e: c5:97:6d:c5:e1:5b:e0:69:38:15:78:50:25:f3:5b: e1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:3B:BB:6B:F2:82:B6:CE:ED:C0:7A:D9:C7:CE:23:44:99:CB:8F:1E X509v3 Authority Key Identifier: keyid:5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:db:98:63:c6:cb:9b:b3:b5:3e:de:5a:88:de:44:aa:2d:32: e2:0e:8b:15:4a:62:14:fc:fd:d2:77:dd:b5:16:31:f8:95:99: ad:67:1e:76:5e:8f:c9:36:c8:8a:4c:21:e6:03:af:57:9f:e6: e4:ed:5f:8c:c3:ee:27:04:d7:a0:b4:ca:16:c0:1d:f0:d7:21: 1d:e6:94:8a:96:f2:08:e3:bb:66:b1:1c:25:61:9a:40:02:d8: a9:09:fe:80:9c:ed:47:58:2a:92:b1:f9:7a:04:d5:3e:76:9d: 37:77:32:50:c3:9b:ac:71:b3:fc:ce:4a:ff:18:28:2a:d1:f6: 76:21:b4:21:92:f0:a1:22:ef:12:31:65:76:27:76:51:d4:0b: e5:65:2e:e3:0b:c4:45:b6:c2:fc:0d:ce:65:ca:d7:8e:80:1e: ae:08:86:e7:79:0b:cd:7b:be:fc:e3:3d:be:04:f7:36:23:5e: c1:45:28:7a:d1:20:90:f2:be:ca:47:ac:82:63:ad:e4:75:b9: 09:32:e7:92:eb:e5:c0:f8:45:bf:4e:bf:76:97:88:b4:09:fd: 04:92:ef:7e:20:f2:c8:c0:d3:98:4c:fe:ee:32:7d:c9:41:4f: fa:63:ae:d2:7d:39:fe:03:40:2a:a8:36:ba:44:4b:4a:9f:92: c2:4b:fd:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZaBa5wSHUlwNJGvZmoGQ4XVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNDAwYWMyMzk2YWUyMjhkMmIyZTU2ZjRiMDY3Mzk5Njkz NzllNDQwHhcNMjUwNDI5MTIwMDM1WhcNMjUwNDMwMTIwMDM1WjAzMTEwLwYDVQQD EyhiMTNiYmI2YmYyODJiNmNlZWRjMDdhZDljN2NlMjM0NDk5Y2I4ZjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLhB0aEuI+HVunP26iol6rU+Oh/Z X/Bsdze62JBedka1h4dlB7uVy2yo574sZfz/CtNbNqpwfJavl3KPrKO9GYxR9rdT w8wXKxzuFq9HUQi4Zeq/xEryVO6wmJ2zf4OYUAhHPXyv2AeHkr3BSG3VO/E8AeXU feApXvl25ISmOktD76LMY8LV8GeJL6TtqnAJJ7NiyHJxLq3aVhKEtylQh0rMOODe De/+icJJqgXA/FQv9GgUFCrQo9dvqaLUTAUcLWFD1rdjAhdYEiVwXqsGiYUlrlVu W5vBGWyo8JtviUM/hxJdzvYTb+pR8vZBkD7Fl23F4VvgaTgVeFAl81vh4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLE7u2vygrbO7cB62cfOI0SZy48eMB8GA1UdIwQY MBaAFF5ACsI5auIo0rLlb0sGc5lpN55EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYt ZGZlZDEyZjFhMDFlLzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYtZGZlZDEyZjFhMDFl LzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZtuYY8bL m7O1Pt5aiN5Eqi0y4g6LFUpiFPz90nfdtRYx+JWZrWcedl6PyTbIikwh5gOvV5/m 5O1fjMPuJwTXoLTKFsAd8NchHeaUipbyCOO7ZrEcJWGaQALYqQn+gJztR1gqkrH5 egTVPnadN3cyUMObrHGz/M5K/xgoKtH2diG0IZLwoSLvEjFldid2UdQL5WUu4wvE RbbC/A3OZcrXjoAergiG53kLzXu+/OM9vgT3NiNewUUoetEgkPK+ykesgmOt5HW5 CTLnkuvlwPhFv06/dpeItAn9BJLvfiDyyMDTmEz+7jJ9yUFP+mOu0n05/gNAKqg2 ukRLSp+Swkv97g== -----END CERTIFICATE-----Generated at Tue Apr 29 19:22:52 2025 by rpki-client