$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft File: b3Xk6Utct0UXt7AVaAFdqebuzbY.mft (raw, json) Hash identifier: lPIuOqEyxmWtC86dnAxHw4gih2U8U9Oa840D081cutw= Subject key identifier: 8B:C5:71:FB:1C:49:67:60:BE:75:D8:DA:D2:2E:12:C7:3B:99:72:FD Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6 Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6 Certificate serial: 019671C1B1448A340AFEB0A0785ADDBB6DFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft Manifest number: 0C6D Signing time: Sat 26 Apr 2025 11:00:41 +0000 Manifest this update: Sat 26 Apr 2025 11:00:41 +0000 Manifest next update: Sun 27 Apr 2025 11:00:41 +0000 Files and hashes: 1: 4gI_4-IO4A-DLjbwey2IpOI1Gac.roa (hash: mQ7omWDIQV8V9vzwSyRnlClYxhElWnlIxHJNMRFaihs=) 2: 88S6ZNIJWuEKpx-lbnqHREIGx0Y.roa (hash: /bWifb50Yp6/6XOCP+xvLuWuM45M4/ZRCrfUHjTv+lU=) 3: KYOg-dAg0vv0T7Zs4Y4I1onJjE0.roa (hash: g3qtavjbfCGQFsBz6TP8eR2TEu9Irpo7FH09zXX+uJU=) 4: MxnFRwJmFw3H9pKkZeWdK5EluaA.roa (hash: /4BdfcwDrvCIqi4T11GSU+QWVrhInkiIc6kfChEW8jY=) 5: Ph2VzfPmPZtEPzSLkO7pzzgo-po.roa (hash: fkmSgLLFQNKR7Q8TZwhTdwOECOCKZn3/ppvBg4D1aeM=) 6: TsGqxUBkJwOPQAWoVKR2AEF1ans.roa (hash: uv2TTIYvJgqngCKe+XNr+deXWi65MhBACHmWx2No1ag=) 7: b3Xk6Utct0UXt7AVaAFdqebuzbY.crl (hash: 6C2a65tlQ1Z64hnudpxujhhiKGPl66Pq/bauEkulXLc=) 8: dFs8LajL5R5nO6mUunRVvhmKoHs.roa (hash: xsNhoWpxXIXRIKfU3g1Gshwu39rqU7JQfToF/0qwcPg=) 9: dgaS6fn3OpV72cEYNy7VeVSk2tE.roa (hash: t9/MBst/MC7EkBAyzHdTuY3YBMIxG+Elxy81Bz6kYyc=) 10: ps-zGnTGe4PKACLSOfDDMQx9t_M.roa (hash: xpFFfF+DS0D5TdCkxuXovC0W/qhotMUgVNP3M/NZPEQ=) 11: rQW2dw98Fh-iwHUnu837pVRjuWc.roa (hash: Pa1aj93uAUOOLzOu+jsDUQFa2MsGoVi8bIM+YOqFcyo=) 12: wUIfpC982TJe9LEoT5KiHIBTzE0.roa (hash: mKOmsceJTmagxAo1ahsYNgNzHVzNic1bNHliaS0QOGk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 11:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:71:c1:b1:44:8a:34:0a:fe:b0:a0:78:5a:dd:bb:6d:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6 Validity Not Before: Apr 26 11:00:41 2025 GMT Not After : Apr 27 11:00:41 2025 GMT Subject: CN=8bc571fb1c496760be75d8dad22e12c73b9972fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5c:ee:e4:4d:dd:78:e6:d8:ac:e4:e8:bc:c2: 1c:c4:38:62:98:bc:a3:82:24:6d:e0:8a:93:42:fc: 94:f6:04:49:5c:e8:27:e8:3c:2e:56:b3:99:23:d5: 9c:1e:74:ab:13:df:ac:3a:eb:64:92:1a:2e:2c:69: 00:08:77:72:07:e0:01:95:61:3b:bd:9a:81:a9:3f: 82:16:f0:54:5e:75:62:d2:fb:68:6d:6e:d5:d6:de: 33:b9:b1:6f:e4:47:52:7e:df:4d:b7:bb:a8:af:16: c0:0c:5a:c4:fc:d7:32:51:d8:ee:94:1e:ed:3c:70: 88:41:fc:24:1a:74:02:2e:d3:4d:e1:95:ae:9d:f5: 96:48:e4:87:6b:38:ba:74:9e:37:29:40:0d:88:c5: c1:e2:60:43:86:93:d2:2f:ba:ba:ea:70:4e:b0:41: c0:df:1a:06:d4:28:f9:37:58:1d:2a:65:a0:17:7e: 27:2b:f7:2b:3b:74:5b:ea:25:fe:e3:75:59:22:62: 83:ab:14:96:ef:65:81:bf:43:0c:f1:67:c1:1e:d3: 5f:99:a2:c0:5a:7f:f0:98:b1:ee:03:c3:dc:9f:7f: c4:36:4c:62:82:54:1f:29:7e:93:d5:c3:40:f1:0a: 09:6d:55:1b:67:bb:63:62:31:10:27:be:c7:dd:a4: fe:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C5:71:FB:1C:49:67:60:BE:75:D8:DA:D2:2E:12:C7:3B:99:72:FD X509v3 Authority Key Identifier: keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:9b:3c:e1:f9:5b:8a:95:72:fd:3a:f4:62:e8:5a:b4:51:87: 17:49:e4:84:08:b2:bd:da:d0:3d:4d:d5:f0:f6:41:4a:06:90: 51:7d:04:7d:17:25:e9:ed:60:1a:3b:17:b1:e3:cc:2f:c5:49: c9:ad:ff:8b:2c:f0:e8:a1:d7:93:a7:35:59:db:8c:2d:5c:4e: 83:c0:d8:e4:f3:69:69:01:8c:18:2d:9b:7f:35:7b:d8:51:fb: 02:06:9c:d3:08:19:5f:2b:34:6c:3b:8b:36:e8:d3:3f:eb:1d: bd:8b:d8:18:2b:5e:7d:5f:55:e8:cf:32:c6:31:14:5f:96:9e: 69:6a:e1:55:6d:91:2c:3f:c6:d0:b8:90:5b:f3:86:d1:87:fe: b2:3b:60:42:ed:dd:69:7a:28:e8:d3:5d:9a:4a:e2:d6:72:23: 5c:f8:70:b5:c0:59:b8:c9:09:46:37:16:df:11:6d:86:b3:10: 89:3d:f4:98:ba:eb:01:74:86:08:64:29:31:ac:ab:96:64:82: be:d0:4e:56:2e:cc:66:92:df:53:0c:d2:48:0b:6a:f5:89:eb: aa:d0:d1:6d:b6:06:b0:27:ff:fa:5a:8a:c4:47:bc:9d:c7:bc: cb:d6:1a:96:e3:49:ed:95:ca:7c:24:6f:fa:91:cb:c0:c4:ae: 39:13:b7:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZxwbFEijQK/rCgeFrdu23+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmNzVlNGU5NGI1Y2I3NDUxN2I3YjAxNTY4MDE1ZGE5ZTZl ZWNkYjYwHhcNMjUwNDI2MTEwMDQxWhcNMjUwNDI3MTEwMDQxWjAzMTEwLwYDVQQD Eyg4YmM1NzFmYjFjNDk2NzYwYmU3NWQ4ZGFkMjJlMTJjNzNiOTk3MmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVzu5E3deObYrOTovMIcxDhimLyj giRt4IqTQvyU9gRJXOgn6DwuVrOZI9WcHnSrE9+sOutkkhouLGkACHdyB+ABlWE7 vZqBqT+CFvBUXnVi0vtobW7V1t4zubFv5EdSft9Nt7uorxbADFrE/NcyUdjulB7t PHCIQfwkGnQCLtNN4ZWunfWWSOSHazi6dJ43KUANiMXB4mBDhpPSL7q66nBOsEHA 3xoG1Cj5N1gdKmWgF34nK/crO3Rb6iX+43VZImKDqxSW72WBv0MM8WfBHtNfmaLA Wn/wmLHuA8Pcn3/ENkxiglQfKX6T1cNA8QoJbVUbZ7tjYjEQJ77H3aT+DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIvFcfscSWdgvnXY2tIuEsc7mXL9MB8GA1UdIwQY MBaAFG915OlLXLdFF7ewFWgBXanm7s22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzIt NjY0NTc3MjRjMmQzLzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzItNjY0NTc3MjRjMmQz LzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgps84flb ipVy/Tr0YuhatFGHF0nkhAiyvdrQPU3V8PZBSgaQUX0EfRcl6e1gGjsXsePML8VJ ya3/iyzw6KHXk6c1WduMLVxOg8DY5PNpaQGMGC2bfzV72FH7Agac0wgZXys0bDuL NujTP+sdvYvYGCtefV9V6M8yxjEUX5aeaWrhVW2RLD/G0LiQW/OG0Yf+sjtgQu3d aXoo6NNdmkri1nIjXPhwtcBZuMkJRjcW3xFthrMQiT30mLrrAXSGCGQpMayrlmSC vtBOVi7MZpLfUwzSSAtq9YnrqtDRbbYGsCf/+lqKxEe8nce8y9YaluNJ7ZXKfCRv +pHLwMSuORO3yw== -----END CERTIFICATE-----Generated at Sat Apr 26 19:06:11 2025 by rpki-client