$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft File: Kb4C3qCghumID1ZMhocrvFl8xnI.mft (raw, json) Hash identifier: GhxWosUC4rtZd2H/u5HKpUXshlXS/wI4umQZzQy3rkE= Subject key identifier: E0:22:3E:E9:C4:09:5B:1D:31:07:F4:D0:09:55:65:5C:CF:58:34:B9 Authority key identifier: 29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72 Certificate issuer: /CN=29be02dea0a086e9880f564c86872bbc597cc672 Certificate serial: 019684A35F944FF368CC45486661FD387915 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft Manifest number: 1307 Signing time: Wed 30 Apr 2025 03:00:21 +0000 Manifest this update: Wed 30 Apr 2025 03:00:21 +0000 Manifest next update: Thu 01 May 2025 03:00:21 +0000 Files and hashes: 1: 6KpBI63kEhQRzmhRvVQxSFsUBTI.roa (hash: Ckcyw44N8h4Yete0VsDquepnFPzly6G4UPrg1n68+p4=) 2: Bl50d2SW5pMGbeTLnaL144PRWUQ.roa (hash: bI5Yiq9+r3/RdML3fweIl1fiyaU2NaLiJvR9z1M6k50=) 3: Kb4C3qCghumID1ZMhocrvFl8xnI.crl (hash: Ny8QTH/GzLPEs9xC+zK5Fl1vcNVXD9K+bAw5nKKNq+M=) 4: MLMPGj8H9Pi_UwBtlTfByiigjfM.roa (hash: pC0aw2jiKroOvxcRGHKOge3OdR3RFQ8raECTuPmJMXM=) 5: OHP3S03u5tMHflzGMFoSd5vTyZk.roa (hash: nGDY1zJo3dHSTN2PJe0pXCx8heywXO+QdXtgHJbEB2A=) 6: RZnwVTO26PBx3a68dhxrN-N2_9U.roa (hash: 2uzv1j/fxffpUq8amOpURgwfPrkNCx7YPSsxO/BHSJk=) 7: XkZDM_8IFwDF5TaEYGBCOeA1rnY.roa (hash: wJ3Nd2iWllTHLJTwVq5JnkwdVdkkialVRVjZAGjLaUA=) 8: aB7sKw4yBEcglwqSevB86YJRj7Y.roa (hash: PH14Cm3gVr59rgH3FX69SJ0GUOOG1kpk0YkBDPc5P9M=) 9: j1JcZG88WoDJIAs0TuxaORvfLro.roa (hash: yIeCKxXutjytoAiiGxkiUBSn0Vk24wB2GDbKm+IJthI=) 10: nwUsD1fndRShZT-s5ssppnOFmiI.roa (hash: 5Gw61qVpay4Kz2GbqbYja1rnv6svDc1Ma6KW2KgO/Fk=) 11: zphCyxB7JvvZfrdVh3qU9-FSl5c.roa (hash: PYY+kdRiBf7TYzIHyOP800eu0rdgwqkk9pHLsntWJR8=) 12: zvPA1UGui-igyOCxkJMwtvZ5S28.roa (hash: /AfKz5TxnkzdqXaxQMADqDtWb4d/fIp2oXqMIKdkCNA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 May 2025 00:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:84:a3:5f:94:4f:f3:68:cc:45:48:66:61:fd:38:79:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29be02dea0a086e9880f564c86872bbc597cc672 Validity Not Before: Apr 30 03:00:21 2025 GMT Not After : May 1 03:00:21 2025 GMT Subject: CN=e0223ee9c4095b1d3107f4d00955655ccf5834b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ac:22:d2:4f:f7:59:63:5d:4b:6d:91:7f:7d: 15:37:ad:b0:2d:28:5b:26:48:7b:f1:47:42:cb:76: 59:03:ff:13:53:29:1b:79:27:9c:d2:4c:d4:7b:d3: 19:01:c1:4e:08:27:c5:96:5c:47:9a:5f:7b:f1:35: dd:a6:f9:a6:41:3d:11:0c:d0:78:7e:bf:e0:80:b0: 71:43:57:73:b1:e7:2e:95:3e:85:a3:4d:a4:d8:cd: 3a:10:cc:ad:de:76:43:ff:6a:a8:1c:75:d1:fd:85: 20:ae:d1:f0:06:97:9e:02:a8:87:ed:07:3d:d6:cb: 04:b9:11:d8:05:9d:ee:49:3d:ff:9f:b8:87:34:70: 1d:51:ac:95:77:1b:2e:5e:95:ef:9b:6f:dc:71:01: b2:ca:31:5a:f7:4d:9b:c7:af:95:26:c5:52:cc:3f: 6c:7b:2d:e6:00:b8:a2:44:58:81:8a:26:ed:a6:3c: ca:74:8c:b2:98:98:f0:a4:f3:c2:92:e9:df:e8:ba: c3:9b:5b:d0:5c:ec:35:2c:b3:e6:25:95:44:c6:c5: 7f:6e:91:43:cc:39:16:a2:78:6e:f8:f0:a5:55:b8: b8:d9:47:9b:89:4e:16:20:48:7c:85:86:08:1a:ca: 06:73:69:ef:25:fa:e6:1f:10:92:12:5f:c4:41:08: 0d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:22:3E:E9:C4:09:5B:1D:31:07:F4:D0:09:55:65:5C:CF:58:34:B9 X509v3 Authority Key Identifier: keyid:29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:f7:c9:11:9b:06:39:c2:3b:4e:71:d5:69:d2:f0:09:22:12: 61:21:8e:1b:03:27:52:f3:79:f1:35:51:3f:c8:aa:f0:90:ed: 48:a2:55:14:49:86:6b:6e:d7:d1:97:3c:44:56:0d:27:16:f4: c1:47:84:3f:1a:56:fa:49:0e:89:bf:33:43:2c:9a:1c:b1:03: 47:00:4a:15:11:33:42:73:ff:9f:49:ff:d7:3b:c5:27:c5:aa: 22:9a:ae:c7:37:b4:b9:fc:e2:46:93:93:f2:f5:59:9b:39:3e: 0a:bc:ca:32:da:39:a6:ba:65:0c:f4:ca:40:04:f7:c7:02:b6: 6e:52:69:57:33:48:c3:dd:72:4c:ac:a5:27:c7:48:2f:dd:f4: 24:7e:d8:e3:d7:29:ab:ff:4b:90:0c:a2:39:6b:63:ff:95:5b: b4:57:97:87:79:6d:55:4b:80:fd:5a:cc:f8:20:15:69:84:fa: 11:f6:d6:f9:e6:23:87:80:66:10:b7:b3:d1:4a:d7:4e:18:92: 68:ac:38:90:1f:fc:f0:26:66:ad:fb:ea:6e:5b:ed:ad:52:4b: 5c:50:5f:b6:38:b9:67:96:4b:e2:dc:7c:af:82:58:a6:79:0a: d7:b5:01:f8:59:ac:ad:19:6a:ba:ce:cf:f7:57:3b:62:64:a1: 62:70:6c:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZaEo1+UT/NozEVIZmH9OHkVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YmUwMmRlYTBhMDg2ZTk4ODBmNTY0Yzg2ODcyYmJjNTk3 Y2M2NzIwHhcNMjUwNDMwMDMwMDIxWhcNMjUwNTAxMDMwMDIxWjAzMTEwLwYDVQQD EyhlMDIyM2VlOWM0MDk1YjFkMzEwN2Y0ZDAwOTU1NjU1Y2NmNTgzNGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqwi0k/3WWNdS22Rf30VN62wLShb Jkh78UdCy3ZZA/8TUykbeSec0kzUe9MZAcFOCCfFllxHml978TXdpvmmQT0RDNB4 fr/ggLBxQ1dzseculT6Fo02k2M06EMyt3nZD/2qoHHXR/YUgrtHwBpeeAqiH7Qc9 1ssEuRHYBZ3uST3/n7iHNHAdUayVdxsuXpXvm2/ccQGyyjFa902bx6+VJsVSzD9s ey3mALiiRFiBiibtpjzKdIyymJjwpPPCkunf6LrDm1vQXOw1LLPmJZVExsV/bpFD zDkWonhu+PClVbi42UebiU4WIEh8hYYIGsoGc2nvJfrmHxCSEl/EQQgN/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOAiPunECVsdMQf00AlVZVzPWDS5MB8GA1UdIwQY MBaAFCm+At6goIbpiA9WTIaHK7xZfMZyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9lYTFjZmYtYWU4Zi00NzE5LTg5YjMt MDAzYTE1NjhiZjNmLzEvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9lYTFjZmYtYWU4Zi00NzE5LTg5YjMtMDAzYTE1NjhiZjNm LzEvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF/fJEZsG OcI7TnHVadLwCSISYSGOGwMnUvN58TVRP8iq8JDtSKJVFEmGa27X0Zc8RFYNJxb0 wUeEPxpW+kkOib8zQyyaHLEDRwBKFREzQnP/n0n/1zvFJ8WqIpquxze0ufziRpOT 8vVZmzk+CrzKMto5prplDPTKQAT3xwK2blJpVzNIw91yTKylJ8dIL930JH7Y49cp q/9LkAyiOWtj/5VbtFeXh3ltVUuA/VrM+CAVaYT6EfbW+eYjh4BmELez0UrXThiS aKw4kB/88CZmrfvqblvtrVJLXFBftji5Z5ZL4tx8r4JYpnkK17UB+FmsrRlqus7P 91c7YmShYnBs9A== -----END CERTIFICATE-----Generated at Wed Apr 30 09:40:28 2025 by rpki-client