$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft File: uRuRUEmDCRUGoalERXpFWLlNq38.mft (raw, json) Hash identifier: 4qyTtVeOJGBP3LM45BtiWZPNznH8TKuxJ6NpvuWEUtM= Subject key identifier: 00:43:34:01:42:78:D6:D2:31:F2:30:BB:77:1A:B3:69:E0:07:AB:55 Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F Certificate issuer: /CN=b91b91504983091506a1a944457a4558b94dab7f Certificate serial: 01967CB365477DF03AB3B5D34245FB10B0A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft Manifest number: 1540 Signing time: Mon 28 Apr 2025 14:00:53 +0000 Manifest this update: Mon 28 Apr 2025 14:00:53 +0000 Manifest next update: Tue 29 Apr 2025 14:00:53 +0000 Files and hashes: 1: 3cHkY6M3wghqy0E4fRU4kWGrFkQ.roa (hash: PisxdaF0q8E/ZaKxH7iqkdJWp2eWRH5HsNlfuhmL4YA=) 2: 7XN9wyggBJAAN_phHgYk5ZELjD4.roa (hash: 1wlvTE3rEqXXANBSrqvKUfV7fo/KmcUcs6Xsp62Q0YQ=) 3: CkF_shnLM2M31f9NtC6ofpAehWk.roa (hash: 9XHscVm5GJVGw7mr6oC1JuCI9DQ/dY6py+7xzxUKvgw=) 4: FFJ257cuWQvQOnyedneEzTkSEbg.roa (hash: WRIXzHulc7/3HRlvOUiBPW1I+RRv7EFQWc42kqGWgNE=) 5: RwtCVfFtaPV9RdeIV0kETaXiDzU.roa (hash: qGOs1nAXRnai3SqF63Pp3mOz35yOks9UR3jXK1Ksk+Y=) 6: V-ySkVo6AJD2k7bi0FwLmTw722g.roa (hash: ZQrxU4+RIDKWDuYxdvlV6VUP5fCT7nrPCzOEdrO784k=) 7: mK9ZGFT5MRus9cd9-ZHukBxXa70.roa (hash: bC9fcVsfywX7XSxHtFk/otbdEOU3pNXnqoILIEhH/LY=) 8: oicr-SH4uj1bEvnrrwUj7ri66GU.roa (hash: 1OP0Bnk8WtUk8p0pkwFceXgNGqSThNnA6BUw75ZT3Jk=) 9: uRuRUEmDCRUGoalERXpFWLlNq38.crl (hash: H2YkaANM5kPay5A2AS0nHy5B5IYJ/gL+8hIGYiclEfk=) 10: wm1WVUXT9pVUrbgtuvUJjNCw7HI.roa (hash: 4A93zZwDOnQwirXpLmuckQTZrNNze07clVzbWfefS6s=) 11: ytRifUfzPmLAaJXJ2__CJPys9bo.roa (hash: 0HrxV+TBxPYNRPY94lk9XCsut+8XflFKvCHLDKEzYNA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Apr 2025 14:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:7c:b3:65:47:7d:f0:3a:b3:b5:d3:42:45:fb:10:b0:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f Validity Not Before: Apr 28 14:00:53 2025 GMT Not After : Apr 29 14:00:53 2025 GMT Subject: CN=004334014278d6d231f230bb771ab369e007ab55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:46:70:e8:91:fd:6b:50:88:7c:5c:37:40:9f: 50:72:dd:2e:d4:b1:89:72:42:21:54:3a:8a:e3:e9: e1:d0:3b:26:b5:ba:d2:e9:2b:3d:86:7e:fa:93:c7: 93:a3:6d:27:fc:4c:65:e5:ce:ba:07:7b:2f:44:56: a1:94:cf:73:bf:28:a4:4a:a8:00:29:13:e5:98:af: 9b:67:b7:9b:15:62:8e:69:83:85:0c:c4:33:eb:d9: 2d:6e:fb:51:4b:51:ac:d5:19:54:64:37:7b:7d:b1: 22:21:1d:79:f3:25:40:21:d5:fb:a0:e5:2f:77:b8: 43:ae:29:3f:2a:f1:ba:1b:14:0d:af:cf:ed:fe:de: e1:69:56:fb:14:68:e1:37:11:b5:5d:f7:55:92:b3: 80:27:f0:f1:b3:43:99:6d:1d:96:67:8d:6d:d7:94: 01:45:e6:05:2d:ca:72:3f:a2:bb:4d:c6:f3:f6:e9: a6:e7:89:0f:f2:95:da:e3:41:0d:6d:bc:41:44:8b: 6e:06:45:2c:e9:c9:46:a5:73:46:b3:bc:6b:a1:e9: f3:f6:dd:33:d4:9d:78:24:21:82:ce:29:4a:a9:da: e1:29:d7:42:b6:fe:80:6e:f4:3d:85:01:3a:ad:82: e6:26:cb:e4:8c:c3:e1:38:15:82:7f:1e:60:cb:19: 42:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:43:34:01:42:78:D6:D2:31:F2:30:BB:77:1A:B3:69:E0:07:AB:55 X509v3 Authority Key Identifier: keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e0:85:89:23:53:04:16:c1:b7:f9:29:4e:d2:93:d7:1c:05:d1: 82:f0:2c:17:07:8a:64:3c:c3:97:69:40:46:af:ef:bd:e6:03: 35:89:37:06:18:27:f8:f8:63:63:ca:ed:31:34:80:30:bb:03: 66:79:6e:f5:72:1e:f1:a6:0e:aa:5b:60:b5:be:51:af:be:3b: 50:36:4b:58:90:ed:62:48:e8:16:c0:76:ec:87:6f:f3:20:21: c6:b4:7b:37:29:45:73:6d:77:e3:4e:e7:8a:92:bb:5c:7e:a1: 6d:26:24:fa:1b:ad:c6:e0:3f:d7:67:fb:8b:19:1e:78:e6:28: 00:10:8c:cf:e3:bc:39:0c:69:e7:72:62:6b:cf:5d:56:6a:ca: 0c:f2:6e:7e:99:d0:53:77:9b:6b:d6:8e:bf:db:4f:1e:fa:a0: 3d:f3:84:22:e7:f3:88:61:65:58:af:bd:75:76:68:f0:b8:54: 85:01:12:36:4e:6b:84:9b:09:5b:bb:8d:ae:a3:70:cf:ac:aa: cc:9b:f1:ae:69:cc:d5:b3:18:e0:8c:76:33:ed:ff:5e:91:fd: 80:f7:87:6e:dd:da:e7:d5:71:4d:86:7c:e3:38:3d:88:a4:a2: 47:94:64:b1:bd:43:d5:c5:b2:09:a1:e2:e2:43:f1:d8:90:c3: dc:e3:0a:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ8s2VHffA6s7XTQkX7ELCnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MWI5MTUwNDk4MzA5MTUwNmExYTk0NDQ1N2E0NTU4Yjk0 ZGFiN2YwHhcNMjUwNDI4MTQwMDUzWhcNMjUwNDI5MTQwMDUzWjAzMTEwLwYDVQQD EygwMDQzMzQwMTQyNzhkNmQyMzFmMjMwYmI3NzFhYjM2OWUwMDdhYjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUZw6JH9a1CIfFw3QJ9Qct0u1LGJ ckIhVDqK4+nh0DsmtbrS6Ss9hn76k8eTo20n/Exl5c66B3svRFahlM9zvyikSqgA KRPlmK+bZ7ebFWKOaYOFDMQz69ktbvtRS1Gs1RlUZDd7fbEiIR158yVAIdX7oOUv d7hDrik/KvG6GxQNr8/t/t7haVb7FGjhNxG1XfdVkrOAJ/Dxs0OZbR2WZ41t15QB ReYFLcpyP6K7Tcbz9umm54kP8pXa40ENbbxBRItuBkUs6clGpXNGs7xroenz9t0z 1J14JCGCzilKqdrhKddCtv6AbvQ9hQE6rYLmJsvkjMPhOBWCfx5gyxlCYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFABDNAFCeNbSMfIwu3cas2ngB6tVMB8GA1UdIwQY MBaAFLkbkVBJgwkVBqGpREV6RVi5Tat/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjct OWRkNmU4OGZjYzhkLzEvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjctOWRkNmU4OGZjYzhk LzEvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4IWJI1ME FsG3+SlO0pPXHAXRgvAsFweKZDzDl2lARq/vveYDNYk3Bhgn+PhjY8rtMTSAMLsD Znlu9XIe8aYOqltgtb5Rr747UDZLWJDtYkjoFsB27Idv8yAhxrR7NylFc213407n ipK7XH6hbSYk+hutxuA/12f7ixkeeOYoABCMz+O8OQxp53Jia89dVmrKDPJufpnQ U3eba9aOv9tPHvqgPfOEIufziGFlWK+9dXZo8LhUhQESNk5rhJsJW7uNrqNwz6yq zJvxrmnM1bMY4Ix2M+3/XpH9gPeHbt3a59VxTYZ84zg9iKSiR5Rksb1D1cWyCaHi 4kPx2JDD3OMK9w== -----END CERTIFICATE-----Generated at Mon Apr 28 20:11:09 2025 by rpki-client