$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft File: XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft (raw, json) Hash identifier: qoY6vzjsoNgOx6k+Dl6+6yR2zIUAFHuzu3kn58C1X7Y= Subject key identifier: 7B:AF:BF:46:8D:F7:BE:F8:FC:FB:7D:25:6C:C6:A4:44:FA:AA:22:1B Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61 Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361 Certificate serial: 0196748BF085ADF903D76D69D525960565A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft Manifest number: 0C88 Signing time: Sun 27 Apr 2025 00:00:50 +0000 Manifest this update: Sun 27 Apr 2025 00:00:50 +0000 Manifest next update: Mon 28 Apr 2025 00:00:50 +0000 Files and hashes: 1: 2eSn5y27ldEmC0Gd_54Bd8_I9JY.roa (hash: 1Gj1gucEHIQe5/suhFpq18I0KHQmpiCbAT8OEer2XJY=) 2: 2n7kwmC2AFc0VVKzNtxDLDMgqS4.roa (hash: C3LiEcIaLGyjYDwQCwJjLQRdCMwb7IYyGJcBaxdU/zU=) 3: 4zijRX3qFSJj7GUPzn2tNtVGEqU.roa (hash: G11+LD/eIulIMC02GT0rOyORwsGurEkPCQfgsNssMY4=) 4: 6wQs6-0w-fWJLJ0hVPQK6QCCGkY.roa (hash: rb19DmwWMRxoIZtq3fo28eOFDkPmJthIUG0I+8TP2AM=) 5: AuOqSBFQao1XdeScaH_pzc2oidA.roa (hash: KCgCD5VjXUJcoI9zPUC+HgqfHioM6+FN7vkkVzOcdHA=) 6: BOI1awQxdXwnD-j71lBbNJhD_Lc.roa (hash: RDggKzi5X4GzB5qxGRZl8jlJFnbQqP70OHVTn4IeWCs=) 7: BjsuLgGQNhMD4InbUJY9wvy3euM.roa (hash: HQnpHX6hfakLbQoTyAQapgMmds3GLNhUneOg7VrLXNA=) 8: EliH32nM72jk5o8srlCb9Qn8SIg.roa (hash: Rtb7C9DazwCLvPY2asNPyAzR9ypSlDn7TK9tDgFH01c=) 9: JDi96XtBmi1E-eUX4bd0z2rNMAQ.roa (hash: g67c4gAiqig1Iyele/QFecJvszyajLNwbzJcH0zM3As=) 10: N1kPa63Y6FcbIG4ZFA6vBaVC4N4.roa (hash: ADzkv6QiLNzt6CZ3/NGstYTNCCFuWgTGZZVgBsDhSg0=) 11: XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl (hash: W0b50QVcRXi5zyVqBT+ASm7yMSEYvVNjZHIxWVxBXts=) 12: c5Kgx9M_pZoyC-FuKyzrc0aGPI4.roa (hash: qo5ZvreioWLB6l4kqymHWyEjF1uBdQswYAIK4BkA1Q8=) 13: jurUKjOgqPlKTPlS6z_hV6r5Fec.roa (hash: mK/2mFnvM6PHbw/5fnMHl0N0FSkbsHgl6zx5ITdWUqk=) 14: n_rP7jWTS4Z479ne6IAs1NmLMNk.roa (hash: tJkrT8kWq9nKGSWE25BO34wrEprXE5qoElSyxJPmjJc=) 15: s2q3u5eyvYJCHvune6FWh078ryM.roa (hash: 2YCwbxgoTgvHEolKVdcJpumrWybHAqExQ49U7X8ltpk=) 16: sDmkBA1dK9BujbOx1JUeSinCGs0.roa (hash: cbr13ejwtvQbyoyvg+8X0OR/MTCPmFSmC5KjzxF0U7I=) 17: ya1Qvlz0z2yIW3rWpmZNZE0Mahw.roa (hash: pUh8tSNEyZT8qdNgsK70xOXvpKS7aoBqKqdEgq1Za3o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:74:8b:f0:85:ad:f9:03:d7:6d:69:d5:25:96:05:65:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361 Validity Not Before: Apr 27 00:00:50 2025 GMT Not After : Apr 28 00:00:50 2025 GMT Subject: CN=7bafbf468df7bef8fcfb7d256cc6a444faaa221b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:33:bf:64:68:1a:8f:30:4a:db:ae:4e:27:46: e1:db:68:2b:c6:49:31:aa:80:ee:3a:4a:d6:be:10: 19:17:c1:c4:87:53:61:39:82:83:ac:3f:91:99:f0: ec:29:4c:f4:41:48:d2:df:d6:16:ac:07:8e:10:5f: d9:d2:fb:f4:3b:73:4b:2c:c9:ac:2d:31:f3:14:03: 88:e9:5e:fd:5b:64:dd:84:da:59:e5:7d:1a:fa:c9: d2:5c:59:32:e8:ef:bf:b4:2d:03:bc:c5:bc:c0:07: b4:bd:19:e5:95:dc:97:00:99:d3:4d:fc:49:18:a2: 71:4d:21:5c:f9:70:c7:37:39:11:24:17:1e:81:b9: 6d:46:1d:81:27:a1:fc:60:2a:90:52:c3:e5:16:66: f9:77:56:4d:1c:73:5c:df:50:92:9a:6f:e1:86:af: b4:0b:55:9a:59:ea:4a:18:74:3b:2f:7d:a8:3a:ea: 79:20:44:a3:e0:62:24:a0:43:0d:7c:4c:2b:64:eb: bb:18:b9:b9:9f:51:68:03:07:f1:8a:18:e6:1b:69: c4:f2:2f:de:d9:14:83:37:0d:61:90:b7:b8:eb:31: f6:f5:48:ec:db:10:36:41:5c:b7:17:da:11:6d:f6: 34:58:9e:3c:2c:fa:2f:18:eb:bf:11:75:aa:19:a3: d5:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:AF:BF:46:8D:F7:BE:F8:FC:FB:7D:25:6C:C6:A4:44:FA:AA:22:1B X509v3 Authority Key Identifier: keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:aa:f7:6c:6d:22:17:91:0a:1b:38:e0:fc:de:6b:8c:48:15: 75:43:41:f7:c5:04:c8:fd:bd:e2:4e:47:9a:ce:e8:9b:db:ab: ee:63:a4:53:71:28:5d:86:9f:11:26:60:70:06:0f:46:96:54: 07:ec:ac:2a:a1:f0:d4:1d:82:8e:ca:76:e6:4d:1f:47:2a:09: 3c:ea:8d:e8:78:33:4f:f0:d5:1a:76:7d:ba:d2:a3:dc:87:69: 5a:3e:d1:fe:de:4b:60:a2:1c:57:65:70:81:15:b8:34:a7:8b: b1:e9:15:61:40:ee:0b:f2:ba:f7:a1:36:67:90:34:d6:c0:cc: e7:7b:ae:74:6e:89:ce:96:e4:e5:27:e7:4f:11:17:44:21:8d: 5e:44:a9:2c:43:b4:44:e4:f1:47:7f:18:06:21:32:c4:8a:ca: b1:4a:c0:8b:17:7c:13:27:55:0b:4b:d1:31:3f:ef:38:a1:ad: 4c:7b:c0:b6:84:6b:44:94:ae:1e:3a:31:44:ab:77:7a:31:aa: 3f:34:98:30:de:66:da:d6:15:13:08:df:44:b8:37:4d:e8:b8: 55:8f:f5:be:37:dd:fc:e4:23:f3:e4:c5:0a:88:09:0f:66:7f: 1b:c8:85:d4:c4:fc:6f:04:7a:81:2e:74:8a:97:da:81:4e:93: 0d:a3:28:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ0i/CFrfkD121p1SWWBWWkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjODkyYWVkMzgzM2U2MTAwZjVlMGNmMTIyNzFmZDgwYjc1 NWMzNjEwHhcNMjUwNDI3MDAwMDUwWhcNMjUwNDI4MDAwMDUwWjAzMTEwLwYDVQQD Eyg3YmFmYmY0NjhkZjdiZWY4ZmNmYjdkMjU2Y2M2YTQ0NGZhYWEyMjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjO/ZGgajzBK265OJ0bh22grxkkx qoDuOkrWvhAZF8HEh1NhOYKDrD+RmfDsKUz0QUjS39YWrAeOEF/Z0vv0O3NLLMms LTHzFAOI6V79W2TdhNpZ5X0a+snSXFky6O+/tC0DvMW8wAe0vRnlldyXAJnTTfxJ GKJxTSFc+XDHNzkRJBcegbltRh2BJ6H8YCqQUsPlFmb5d1ZNHHNc31CSmm/hhq+0 C1WaWepKGHQ7L32oOup5IESj4GIkoEMNfEwrZOu7GLm5n1FoAwfxihjmG2nE8i/e 2RSDNw1hkLe46zH29Ujs2xA2QVy3F9oRbfY0WJ48LPovGOu/EXWqGaPVhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHuvv0aN9774/Pt9JWzGpET6qiIbMB8GA1UdIwQY MBaAFFyJKu04M+YQD14M8SJx/YC3VcNhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWElrcTdUZ3o1aEFQWGd6eEluSDlnTGRWdzJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi84NmZiNDYtZDcxMi00NjAyLTljY2Ut M2FhN2RhYTlkM2VjLzEvWElrcTdUZ3o1aEFQWGd6eEluSDlnTGRWdzJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi84NmZiNDYtZDcxMi00NjAyLTljY2UtM2FhN2RhYTlkM2Vj LzEvWElrcTdUZ3o1aEFQWGd6eEluSDlnTGRWdzJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZqr3bG0i F5EKGzjg/N5rjEgVdUNB98UEyP294k5Hms7om9ur7mOkU3EoXYafESZgcAYPRpZU B+ysKqHw1B2Cjsp25k0fRyoJPOqN6HgzT/DVGnZ9utKj3IdpWj7R/t5LYKIcV2Vw gRW4NKeLsekVYUDuC/K696E2Z5A01sDM53uudG6Jzpbk5SfnTxEXRCGNXkSpLEO0 ROTxR38YBiEyxIrKsUrAixd8EydVC0vRMT/vOKGtTHvAtoRrRJSuHjoxRKt3ejGq PzSYMN5m2tYVEwjfRLg3Tei4VY/1vjfd/OQj8+TFCogJD2Z/G8iF1MT8bwR6gS50 ipfagU6TDaMofA== -----END CERTIFICATE-----Generated at Sun Apr 27 10:41:19 2025 by rpki-client