$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft File: 5884hLeAB6Jdvi4s7wzHO2mSH4g.mft (raw, json) Hash identifier: t9YWmCpznzGmugaVfCCwOARxXKLJ7xknGattd3wzFmo= Subject key identifier: FD:61:91:5A:8B:2B:F7:15:CD:25:82:32:3F:4E:83:16:5C:74:60:2B Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88 Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88 Certificate serial: 0196730B4990FF1B0ED7F4C2E216D30003AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft Manifest number: 14C5 Signing time: Sat 26 Apr 2025 17:00:41 +0000 Manifest this update: Sat 26 Apr 2025 17:00:41 +0000 Manifest next update: Sun 27 Apr 2025 17:00:41 +0000 Files and hashes: 1: 0LDsu8q8BNCVXMdgo8IAmxRh6lg.roa (hash: G5jGPy0QrJ03EB2ETPwF643gtEqN7L0Vq2ZY/sUU8MU=) 2: 5884hLeAB6Jdvi4s7wzHO2mSH4g.crl (hash: ZQsP4Sc9TbBsuPV/p0tKJ6BltkSckuYBNSs4F6lEaNg=) 3: 88YBk8uB85zBrul442nfGp-QuoU.roa (hash: 8CHBmw57/ECRTXJRCiSBu+1kizP0rODHSoGmFmfszQs=) 4: B6snV1O7L6xN7jjaiNZWbxtP82Q.roa (hash: Z+4+/9OXk8fDzA3Dm2Dl/g02UpTK3tqTpOQvWThJM1E=) 5: SNfpSksRdeq_X6alujKtqxhgfmI.roa (hash: Ma1Hn2WiNgfoHoDq7NgShnN2PavA2o6Q6gAsmbAJ6uM=) 6: Xxx-aLbVPMFeFACAuRgkyYhKGZ4.roa (hash: Qjsr5YH+eP1GQSztBosIVdbSouCX9Gvl5XQ/f3iIe+4=) 7: arM4rSr3_zYWYsvqUqH9LMJxK1c.roa (hash: jH1XC6dsbVtzQ5KTBqEfgNDIc/WzLssGqH+BUquB6w8=) 8: bFYSJ_I4YgMVW4I9mBgSvFA_y-8.roa (hash: H2VlaHHW6c4b4Aq4JHISuCEj338oIr6DsQEFdgqSCMc=) 9: fUwIM0sp1GFSdwqWjPbX7BRcPzQ.roa (hash: Xh0ESEMvO/UeKqHJNYyYyUnRbpIWXGZSxLiX7rQbHOo=) 10: hYaFKrnyaSEueE3Nclhbcrh7WLk.roa (hash: R76xSs8UDOZAunK5fmzFUA+tV4VngZVYGVoMB8QO7xc=) 11: z2F52wGzH9BMrpqKt2YykAg8u8Y.roa (hash: bvYJ2BHirZKw/0tfOS28eGnj6Ugji4ZaJ639S6rbz9g=) 12: zBe1zgNHDCKtxdrkxgm3eBXCBPU.roa (hash: BXmYyj4eoSdWaSTfE6Ragmw+4eV3ZTlYx1CDpgMgYSs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 11:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:73:0b:49:90:ff:1b:0e:d7:f4:c2:e2:16:d3:00:03:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88 Validity Not Before: Apr 26 17:00:41 2025 GMT Not After : Apr 27 17:00:41 2025 GMT Subject: CN=fd61915a8b2bf715cd2582323f4e83165c74602b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1a:80:17:c0:fc:82:8a:81:9d:31:58:81:15: 36:b6:d2:b3:e8:e8:a4:c0:84:3e:26:52:f6:5f:e2: b6:a8:fb:08:5a:e9:9f:65:4f:3d:1c:e6:51:99:4c: 65:1f:e0:01:90:85:d7:b3:68:9f:bc:f0:43:ed:27: e8:e1:93:e3:91:c2:a3:79:13:62:74:b4:62:44:7b: c5:69:c4:22:2c:77:3e:b5:6b:20:18:f0:14:c4:fb: d0:8d:3b:4a:71:d0:10:5d:a3:7c:9d:54:39:46:65: a4:a2:87:02:0d:91:24:cc:ff:e1:e0:a0:8f:49:13: 52:f8:a5:e1:3e:e8:bb:f9:49:8d:a4:51:13:63:aa: e1:a3:4e:56:a2:d2:21:69:2d:ed:b7:9a:bd:9a:2b: 52:0f:53:38:b3:04:53:3e:7e:5d:c4:5a:a0:7b:88: 49:ee:ea:fe:f9:3f:81:2a:83:cb:78:11:bc:76:17: 72:2b:55:d0:6d:73:be:bc:69:b4:64:f4:16:14:42: fa:eb:a3:49:2c:8a:7b:fc:35:12:16:78:6d:80:18: b5:88:cf:f0:4d:27:73:ca:b5:ed:fa:1b:10:11:d7: 03:0e:8a:17:98:da:12:db:26:56:fe:c0:b8:68:e7: 9b:59:b6:85:34:a6:ae:4d:10:07:e7:85:dc:4b:91: c6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:61:91:5A:8B:2B:F7:15:CD:25:82:32:3F:4E:83:16:5C:74:60:2B X509v3 Authority Key Identifier: keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:b4:43:4f:9c:80:b5:b5:13:13:0a:db:03:6f:bc:42:b4:64: 4e:6a:e2:51:07:2a:15:db:61:9f:a8:4e:6c:0d:d3:5f:a5:df: 74:20:1d:8b:70:63:2f:95:f1:08:ab:b4:2b:03:b4:22:18:c4: 4a:2f:22:f4:32:dd:57:00:b5:0e:5e:d5:1e:00:1b:c1:11:28: fe:51:51:09:96:d6:e9:9b:ef:73:7c:b9:45:2b:73:b1:ce:fe: 04:b3:e2:17:cd:cf:2d:29:d2:45:78:5e:a1:e7:d7:c3:d1:e6: 53:bd:11:d3:fe:84:d6:3d:3f:e2:97:74:6c:2a:bf:3e:1d:c5: 9d:6d:94:76:47:1a:99:bc:44:c0:e2:68:eb:d8:cd:94:63:cd: 87:77:6f:27:79:73:85:b6:ee:e8:cf:a0:17:d3:75:3d:24:00: 01:a7:6f:08:1d:5e:ba:01:c1:d5:06:c9:2d:7c:99:1d:5b:9c: 02:aa:80:b6:19:5d:1f:4d:f9:18:45:64:4c:7c:9c:5d:9d:c0: 0f:c8:f2:21:60:41:e2:18:46:c3:98:c6:ae:84:bf:3b:68:e2: 00:7f:28:c3:59:9b:41:76:ce:a9:26:03:29:5f:d5:f2:b4:7d: 10:f8:d6:90:d0:4c:91:67:41:d1:79:5d:f2:2a:0f:21:cb:89: 36:51:a3:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZzC0mQ/xsO1/TC4hbTAAOqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3Y2YzODg0Yjc4MDA3YTI1ZGJlMmUyY2VmMGNjNzNiNjk5 MjFmODgwHhcNMjUwNDI2MTcwMDQxWhcNMjUwNDI3MTcwMDQxWjAzMTEwLwYDVQQD EyhmZDYxOTE1YThiMmJmNzE1Y2QyNTgyMzIzZjRlODMxNjVjNzQ2MDJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthqAF8D8goqBnTFYgRU2ttKz6Oik wIQ+JlL2X+K2qPsIWumfZU89HOZRmUxlH+ABkIXXs2ifvPBD7Sfo4ZPjkcKjeRNi dLRiRHvFacQiLHc+tWsgGPAUxPvQjTtKcdAQXaN8nVQ5RmWkoocCDZEkzP/h4KCP SRNS+KXhPui7+UmNpFETY6rho05WotIhaS3tt5q9mitSD1M4swRTPn5dxFqge4hJ 7ur++T+BKoPLeBG8dhdyK1XQbXO+vGm0ZPQWFEL666NJLIp7/DUSFnhtgBi1iM/w TSdzyrXt+hsQEdcDDooXmNoS2yZW/sC4aOebWbaFNKauTRAH54XcS5HGLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP1hkVqLK/cVzSWCMj9OgxZcdGArMB8GA1UdIwQY MBaAFOfPOIS3gAeiXb4uLO8Mxztpkh+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgt YTE4NGYzNTU2ZTQzLzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgtYTE4NGYzNTU2ZTQz LzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtrRDT5yA tbUTEwrbA2+8QrRkTmriUQcqFdthn6hObA3TX6XfdCAdi3BjL5XxCKu0KwO0IhjE Si8i9DLdVwC1Dl7VHgAbwREo/lFRCZbW6Zvvc3y5RStzsc7+BLPiF83PLSnSRXhe oefXw9HmU70R0/6E1j0/4pd0bCq/Ph3FnW2UdkcambxEwOJo69jNlGPNh3dvJ3lz hbbu6M+gF9N1PSQAAadvCB1eugHB1QbJLXyZHVucAqqAthldH035GEVkTHycXZ3A D8jyIWBB4hhGw5jGroS/O2jiAH8ow1mbQXbOqSYDKV/V8rR9EPjWkNBMkWdB0Xld 8ioPIcuJNlGjSQ== -----END CERTIFICATE-----Generated at Sat Apr 26 19:20:11 2025 by rpki-client