$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.mft File: K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.mft (raw, json) Hash identifier: dDMialeiK+lekjByZUZaIcVLrIkiY2hXR0bGTrvZo7g= Subject key identifier: 55:EC:8B:29:04:6A:BE:8D:03:18:61:83:F9:EE:53:56:B1:7D:82:E4 Authority key identifier: 2B:96:7E:77:2C:C7:29:83:05:A1:1F:FA:65:DD:18:5F:6A:58:91:0B Certificate issuer: /CN=2b967e772cc7298305a11ffa65dd185f6a58910b Certificate serial: 0196771EF5C8BF68E9F1A09362072E7A0250 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.mft Manifest number: 0CC5 Signing time: Sun 27 Apr 2025 12:00:39 +0000 Manifest this update: Sun 27 Apr 2025 12:00:39 +0000 Manifest next update: Mon 28 Apr 2025 12:00:39 +0000 Files and hashes: 1: 1ehPzZKxF1UYBJMFREeIsWSe-0E.roa (hash: +fEfnPMqQYMaOaxEiaDX2H+smUyU5o+FiuHqTI6a8Fg=) 2: 2GYZY3YmP4Z9CrbeYrsEBS4WPvQ.roa (hash: 5GQk+W5w5aJknyyML0N7FECeUlVHN3WA+aoitU2P1JY=) 3: 2catgB5VK787sqGbIW3dngQFHEE.roa (hash: B+SFn1cOjP49uHmdVYtQOuuR22NDQQ5ZSYkwXBcG4Xw=) 4: 9RSLkQ5wyeSzJcCtl7FXYXufiXg.roa (hash: C23nJYoJlpERYjPPrIl4nUFaowb3JdwHKbCCgwPR7Fc=) 5: A-23JzA-7G9IJRx7L7gZ2EsiZXs.roa (hash: 6GMUeHfmdErm/sIramac3F+jFlRdAFwxAZz+asqiZFE=) 6: K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.crl (hash: RU9tJCXmY1WlH23iaZv9O874dKhsTmnx/Oqa9GuuPAY=) 7: NLONGxWCaDncCXl5R1oWg-KTHPI.roa (hash: wEU6hkf61GZGgIuFGLQHCPpd8fVGVUdNGM1QqUlTpzA=) 8: Q0coXhksYsiHyus7jkG0H1rCOhs.roa (hash: GLAs1yGQZUPoiQEpZ9WyTQNtMvFVhBPCXGqgjPd+Ip8=) 9: QZYtXBxzzLLwx6OP96338EZQNhM.roa (hash: 38l/EW42Cd8oOnZZH6RtDcfG0bGHq+MKq8reh5+yb4I=) 10: S5EvGcwDHH7zGUGD1TsxliOQ844.roa (hash: 9ucAO/aS27/vji8pCgT0q2aazFzXGf3O5LSygR5bboY=) 11: SNTwxjZqoj--loyRtn4U5ryS2tg.roa (hash: 7LntTAbrkB4D7sGOEefKUsodkOG7eI/vXEBkRmusiyk=) 12: TjRVD4eTC9ou630w_SogsYsS2i8.roa (hash: MzxiND3DLT/Z9YUtjr+3wENZnheDLjvzlFroyg2KDBQ=) 13: XSI-Z3sxC2MvxPG4GMpF-oGP6N4.roa (hash: 0PggDg6sAbSQ+x8mdqKRdmh/0V9nEdI3VW8yE7LWoS0=) 14: i2WjIkNXUPeX7xGHYrjhSSYgFy4.roa (hash: C+2xN+JP/GjkI/37xlqqEgKPEWpo/BcSUMTEOcKEDPs=) 15: sFCDhJ4M_6ODBJmgIs3kz42jtuI.roa (hash: 0A6uuIGu+YVQFGSi7WdcioqNabGg+Lb7uc7Kf+2F0zs=) 16: we2Sx3tWkTHYty4_DjZ0SNeayeE.roa (hash: rCq+X7txc0pJndWQs8B/o3cENUKX8Fo1V3HT1kcpm3Y=) 17: xLUb8C8bVOkpr7q64SBm-78jn6A.roa (hash: 2KEYFJdXXETiYVBhmOpcuh0u5oPPV72Mle9moFbgm4Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.mft rsync://rpki.ripe.net/repository/DEFAULT/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 05:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:77:1e:f5:c8:bf:68:e9:f1:a0:93:62:07:2e:7a:02:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b967e772cc7298305a11ffa65dd185f6a58910b Validity Not Before: Apr 27 12:00:39 2025 GMT Not After : Apr 28 12:00:39 2025 GMT Subject: CN=55ec8b29046abe8d03186183f9ee5356b17d82e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:14:35:ef:ec:e1:a4:18:2b:37:66:78:43:b1: e3:c1:35:5d:cb:03:01:06:bb:ba:f8:75:e4:f2:de: 4b:16:44:f9:2d:85:3c:5e:37:b1:91:96:84:ca:11: 99:56:14:22:7f:44:1f:f2:2a:98:b8:8d:4d:0c:9e: b8:e6:d9:a1:d2:08:72:e1:d8:c7:79:ed:70:69:be: 62:eb:61:a7:36:e7:ad:8b:7e:c6:e0:3b:a3:e6:2e: 2b:6a:9a:6c:9f:d6:3f:80:4b:58:88:1b:7e:6e:9b: 41:92:56:d4:94:69:65:de:37:8c:81:a4:91:f5:77: 93:7f:c0:e5:3c:64:b9:db:7c:cd:5b:66:59:99:02: af:f6:91:51:8b:54:89:3f:ca:e8:56:f3:70:00:ad: d8:f8:90:22:83:71:9c:13:6a:c8:33:31:6c:33:c5: ea:1b:16:e6:2a:9f:37:4d:53:8c:6e:b6:16:5c:16: bb:68:c5:bd:1c:f8:a9:27:81:25:b3:f0:e9:b8:7f: 2b:88:9e:37:ff:cf:f3:ae:7a:16:35:1f:69:df:24: cc:e7:e1:68:0f:91:df:0b:c5:fb:56:a9:e7:cb:93: 28:51:f4:01:68:ea:49:10:e7:6f:c8:33:41:d3:28: 91:37:c3:3a:d2:8d:0a:c1:e8:1a:4d:4d:5a:d5:d0: a6:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:EC:8B:29:04:6A:BE:8D:03:18:61:83:F9:EE:53:56:B1:7D:82:E4 X509v3 Authority Key Identifier: keyid:2B:96:7E:77:2C:C7:29:83:05:A1:1F:FA:65:DD:18:5F:6A:58:91:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:e6:7b:c9:f8:1b:bc:08:ec:3e:18:d6:d6:90:c6:a7:f8:97: ac:ea:6a:aa:53:33:25:ab:49:8e:b9:fd:89:14:14:05:f3:20: 94:d7:61:66:cb:44:ab:ee:e3:bd:0f:5c:a1:52:61:05:ee:a5: 95:69:9f:15:be:06:e2:83:62:aa:95:84:e9:06:5d:d2:83:f8: 50:c9:58:38:be:07:c3:33:ae:a0:1f:73:d1:22:ff:81:5f:9d: 54:54:3a:ed:5d:1b:59:ad:4e:8e:b8:2c:b4:c2:33:a9:5c:e2: c3:41:24:3d:4a:5d:cb:4a:fb:bc:07:92:0c:52:ac:24:17:db: bc:e9:d2:db:1d:d5:96:43:2c:61:2b:eb:8f:74:5a:52:84:fb: bb:a9:d2:1d:2f:d4:fa:12:c8:0b:22:9f:90:05:44:dd:70:c8: e4:37:6e:fc:ff:c4:02:3e:c1:43:29:24:0c:38:20:f8:ff:d1: 21:79:39:63:08:11:07:88:9a:5c:5d:e6:fb:fe:6d:60:84:26: 03:e4:ad:d4:06:07:3f:a4:6e:a1:98:18:be:5b:c3:58:31:38: 8a:eb:6f:ab:b2:18:21:95:1c:cb:41:47:71:b0:9d:38:2a:37: 92:ca:82:64:b5:03:62:3e:77:ab:78:b8:ce:26:0d:c8:e5:eb: 5d:97:bc:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ3HvXIv2jp8aCTYgcuegJQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiOTY3ZTc3MmNjNzI5ODMwNWExMWZmYTY1ZGQxODVmNmE1 ODkxMGIwHhcNMjUwNDI3MTIwMDM5WhcNMjUwNDI4MTIwMDM5WjAzMTEwLwYDVQQD Eyg1NWVjOGIyOTA0NmFiZThkMDMxODYxODNmOWVlNTM1NmIxN2Q4MmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRQ17+zhpBgrN2Z4Q7HjwTVdywMB Bru6+HXk8t5LFkT5LYU8XjexkZaEyhGZVhQif0Qf8iqYuI1NDJ645tmh0ghy4djH ee1wab5i62GnNueti37G4Duj5i4rappsn9Y/gEtYiBt+bptBklbUlGll3jeMgaSR 9XeTf8DlPGS523zNW2ZZmQKv9pFRi1SJP8roVvNwAK3Y+JAig3GcE2rIMzFsM8Xq GxbmKp83TVOMbrYWXBa7aMW9HPipJ4Els/DpuH8riJ43/8/zrnoWNR9p3yTM5+Fo D5HfC8X7Vqnny5MoUfQBaOpJEOdvyDNB0yiRN8M60o0KwegaTU1a1dCm5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFXsiykEar6NAxhhg/nuU1axfYLkMB8GA1UdIwQY MBaAFCuWfncsxymDBaEf+mXdGF9qWJELMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzVaLWR5ekhLWU1Gb1JfNlpkMFlYMnBZa1FzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS82NjBlNzQtYTNiYy00NDRiLTljNmEt NThjOTZkNjZmMGExLzEvSzVaLWR5ekhLWU1Gb1JfNlpkMFlYMnBZa1FzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS82NjBlNzQtYTNiYy00NDRiLTljNmEtNThjOTZkNjZmMGEx LzEvSzVaLWR5ekhLWU1Gb1JfNlpkMFlYMnBZa1FzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl+Z7yfgb vAjsPhjW1pDGp/iXrOpqqlMzJatJjrn9iRQUBfMglNdhZstEq+7jvQ9coVJhBe6l lWmfFb4G4oNiqpWE6QZd0oP4UMlYOL4HwzOuoB9z0SL/gV+dVFQ67V0bWa1Ojrgs tMIzqVziw0EkPUpdy0r7vAeSDFKsJBfbvOnS2x3VlkMsYSvrj3RaUoT7u6nSHS/U +hLICyKfkAVE3XDI5Ddu/P/EAj7BQykkDDgg+P/RIXk5YwgRB4iaXF3m+/5tYIQm A+St1AYHP6RuoZgYvlvDWDE4iutvq7IYIZUcy0FHcbCdOCo3ksqCZLUDYj53q3i4 ziYNyOXrXZe8Sg== -----END CERTIFICATE-----Generated at Sun Apr 27 15:21:35 2025 by rpki-client