$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft File: UtycIYtRDAe8Zlmwn70yr-aKv9I.mft (raw, json) Hash identifier: hRufEi6ZZoIycG7Ug8F+65rA8bDAM9cN2bBLUUh812Q= Subject key identifier: C0:F6:27:CD:77:69:CD:1F:65:FC:D5:58:6B:BE:77:1B:9C:30:6E:1A Authority key identifier: 52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2 Certificate issuer: /CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2 Certificate serial: 019673790D5E58151820EFD401AF67590DFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft Manifest number: 13C7 Signing time: Sat 26 Apr 2025 19:00:35 +0000 Manifest this update: Sat 26 Apr 2025 19:00:35 +0000 Manifest next update: Sun 27 Apr 2025 19:00:35 +0000 Files and hashes: 1: 6MBDcuhfmEWVptjguMTmf9iInNA.roa (hash: ymivKpyMNbe7aJ1PuJXw7gwW1NiqWvyizlFzmK9d/qY=) 2: ASEl7JqkqClmtX95ZbF2n_f_sMc.roa (hash: ml87fD1oXz3GGfpvMxIZMFvwwbtQeqmI4KZWPfbpWPA=) 3: FtX2scKMFKjrlX1-jGtQnQQTwEk.roa (hash: kMq1Imts+/ufR0HSWw6rQ0w6zUFocDzOGoNnOCcrl1Y=) 4: HSnWcSNOZ4OY_CttGpyQfNSZAZs.roa (hash: CcLUNhxOoVn4MfFa9d/eD1RrOw7AjPt46Gfl/NCHsbA=) 5: IpHtDFjEB_RXTZiNG6lT--ks0Ig.roa (hash: HxwuSEEfngriOWjFBxSRTVt8Bh+JF8Q1YRC9y08+mY4=) 6: NCn2lq5cktD_7ygfHIEl8kG0BGw.roa (hash: QVkLVYRylQrSQOKAeM/S18wN4GiAOMJzthGR51UDN7s=) 7: UtycIYtRDAe8Zlmwn70yr-aKv9I.crl (hash: pOWcjX+CSL/yLLU+QCEZHUiwBSBKYbT/jYcx3N5mTs4=) 8: lbrPEbSuq8MGiugfDCfuWsxoHWM.roa (hash: aEziOZhVwJ11tjsb9rfj1shhPuYeS1ripLduKA6Erwo=) 9: lkKfm_f_wEEUNGQ-mYrqpjp6pn0.roa (hash: 1IEa2ddZDnV+Za6fAq2QN5r69jM42zaWvCVu/tVx9UM=) 10: ppkwZSnQe_B1w9UhP5ke1_jD4Vk.roa (hash: hVKC9oxQ4TOks3wr3lJFJ2Whe3zItAMI4ja6SGb5ZM4=) 11: uRkfgF_A6CqJRrBsGaN5ZRsc3pQ.roa (hash: U64dqyheSLqIXH63bjPi11po8JDmbOls6AydyTR+Q/k=) 12: wQQ_d2GjHPxfeuZhiPq0NlQrsUc.roa (hash: X6PXX89iZwx82Sdz6LkQl0Ci0LO6DvoxlhCySztAfS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 17:20:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:73:79:0d:5e:58:15:18:20:ef:d4:01:af:67:59:0d:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2 Validity Not Before: Apr 26 19:00:35 2025 GMT Not After : Apr 27 19:00:35 2025 GMT Subject: CN=c0f627cd7769cd1f65fcd5586bbe771b9c306e1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d8:6a:55:a0:a8:36:cf:ec:ef:23:1b:c8:9a: 94:03:ef:a3:0f:3f:85:61:25:c5:cf:54:5a:c6:ab: 44:cf:92:db:3b:ce:ad:c9:f6:2b:36:ce:e8:a6:6c: 21:aa:10:d4:01:f3:44:9b:61:60:c5:04:56:19:53: 15:cd:05:ea:71:c7:03:77:7b:c1:e2:cb:b4:b9:fc: fa:cb:17:f4:97:dd:44:2c:ab:02:d1:55:a2:19:2f: 4e:c4:84:2c:73:10:05:24:14:b5:3e:c7:53:31:e8: 84:5b:9a:14:3b:da:8c:bc:de:a2:c7:aa:2e:d8:51: a3:e1:57:8b:6b:fa:5e:23:36:b7:c6:35:b8:a7:9d: ff:eb:1f:f7:21:ef:54:bb:ff:57:2d:56:55:41:42: 7a:5f:84:14:04:ca:f4:23:82:35:d9:84:3a:ba:6d: 5e:49:f7:dd:4d:14:b7:52:57:bd:57:70:ee:2d:3f: 73:37:50:c0:a0:7b:ee:bd:94:d2:83:db:e7:69:0b: 42:9c:e8:f0:ac:0a:ec:92:6c:48:5d:28:4e:8c:f1: 77:ff:d3:28:b4:80:07:8b:de:75:33:48:ca:6b:a1: ec:ff:99:7e:ab:d2:50:05:ab:48:47:9f:74:33:7d: 11:61:d5:bc:54:7a:81:9f:60:01:c6:7b:dc:20:f9: 71:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:F6:27:CD:77:69:CD:1F:65:FC:D5:58:6B:BE:77:1B:9C:30:6E:1A X509v3 Authority Key Identifier: keyid:52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:e7:41:1d:59:40:a2:bf:5f:1b:07:b0:56:56:eb:31:ac:89: e0:9e:9a:fe:93:f0:75:c3:e5:b2:fd:ab:4e:42:04:fb:9e:ac: 25:ce:ac:cf:13:83:ce:be:28:a5:d0:60:56:7d:ac:f9:41:2e: e1:bf:ad:db:c8:c2:9e:20:0c:ee:2c:41:84:4d:ad:75:56:1b: 62:b5:d3:26:45:ec:0c:6a:f6:9c:d9:22:b4:b2:1c:a0:fe:32: ac:e2:64:ce:90:b3:d1:58:0f:34:57:3f:95:97:b0:78:c3:3a: 92:fc:26:de:8d:74:ba:5a:b2:3a:54:eb:2b:e4:c6:4e:4a:17: 22:61:e5:3d:2a:61:06:85:a9:2e:ec:47:d2:1d:1e:87:3f:8d: 41:4f:c9:f3:a1:e8:16:86:5e:d8:fe:72:5a:5a:4d:15:93:73: 7b:56:57:1b:df:e5:2f:47:46:6e:80:e5:88:b4:7f:5b:b5:73: e5:41:4c:a4:b2:bc:a9:4a:f8:f6:20:87:23:17:87:94:39:56: 9b:88:c5:80:fe:3f:c3:7d:63:78:77:be:38:34:ab:a6:a5:05: d7:bb:1a:1e:54:12:ee:41:7b:48:45:d6:2b:2a:75:31:05:83: 03:1e:e3:84:f6:f5:64:16:b5:ff:1a:82:84:ba:3b:e7:c8:8c: 49:07:7e:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZzeQ1eWBUYIO/UAa9nWQ37MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyZGM5YzIxOGI1MTBjMDdiYzY2NTliMDlmYmQzMmFmZTY4 YWJmZDIwHhcNMjUwNDI2MTkwMDM1WhcNMjUwNDI3MTkwMDM1WjAzMTEwLwYDVQQD EyhjMGY2MjdjZDc3NjljZDFmNjVmY2Q1NTg2YmJlNzcxYjljMzA2ZTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdhqVaCoNs/s7yMbyJqUA++jDz+F YSXFz1RaxqtEz5LbO86tyfYrNs7opmwhqhDUAfNEm2FgxQRWGVMVzQXqcccDd3vB 4su0ufz6yxf0l91ELKsC0VWiGS9OxIQscxAFJBS1PsdTMeiEW5oUO9qMvN6ix6ou 2FGj4VeLa/peIza3xjW4p53/6x/3Ie9Uu/9XLVZVQUJ6X4QUBMr0I4I12YQ6um1e SffdTRS3Ule9V3DuLT9zN1DAoHvuvZTSg9vnaQtCnOjwrArskmxIXShOjPF3/9Mo tIAHi951M0jKa6Hs/5l+q9JQBatIR590M30RYdW8VHqBn2ABxnvcIPlxyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMD2J813ac0fZfzVWGu+dxucMG4aMB8GA1UdIwQY MBaAFFLcnCGLUQwHvGZZsJ+9Mq/mir/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC80MDliN2UtMTI3NS00M2VkLWFmMGYt NTJmOTdiMjc3ZDFmLzEvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC80MDliN2UtMTI3NS00M2VkLWFmMGYtNTJmOTdiMjc3ZDFm LzEvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACedBHVlA or9fGwewVlbrMayJ4J6a/pPwdcPlsv2rTkIE+56sJc6szxODzr4opdBgVn2s+UEu 4b+t28jCniAM7ixBhE2tdVYbYrXTJkXsDGr2nNkitLIcoP4yrOJkzpCz0VgPNFc/ lZeweMM6kvwm3o10ulqyOlTrK+TGTkoXImHlPSphBoWpLuxH0h0ehz+NQU/J86Ho FoZe2P5yWlpNFZNze1ZXG9/lL0dGboDliLR/W7Vz5UFMpLK8qUr49iCHIxeHlDlW m4jFgP4/w31jeHe+ODSrpqUF17saHlQS7kF7SEXWKyp1MQWDAx7jhPb1ZBa1/xqC hLo758iMSQd+wA== -----END CERTIFICATE-----Generated at Sun Apr 27 01:00:25 2025 by rpki-client