$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft File: xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft (raw, json) Hash identifier: YeC9KDzk0pG7KpbzZKKPcA3WV+1GoOGhaJgQXpcPBP8= Subject key identifier: 99:87:03:0A:45:4E:60:91:F7:A6:21:9C:78:9E:72:97:82:5A:C5:0A Authority key identifier: C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8 Certificate issuer: /CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8 Certificate serial: 01968391FDDB632725E95DD432DE70E1447C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft Manifest number: 1525 Signing time: Tue 29 Apr 2025 22:01:45 +0000 Manifest this update: Tue 29 Apr 2025 22:01:45 +0000 Manifest next update: Wed 30 Apr 2025 22:01:45 +0000 Files and hashes: 1: 1d9PCrI-4OIWZHlndWAF-BFZeRg.roa (hash: Iw4tosd5c4tKjF6tKkdj+Nm6L4yubj6pDN7RhIdr5OM=) 2: 9irhpoo7t3RuQsofnh453Wz9yzc.roa (hash: PhvRYsh7H1rsPmbcRRJi8HgMHZoVZsvvG8rw54V1xv8=) 3: QlG1TVRz55diqUdGl7g_uO4xh_Q.roa (hash: fgvqjVsU5zRnz0bSGyWJaFmUvSDnHcvgLRxyVqmSVT4=) 4: ZyvSvqBO_CRtrjVV5g_m38QqdF0.roa (hash: EMjT9dIsrbauUL5Ml+fcJBjE3Hsiqb5K2tYe1FIy+Zk=) 5: nnciRjVheF08s398UKSonGItpsk.roa (hash: R1OwPDHsbFUiJTJpwPW1Uer2AhB7tNd3rerNZf5joWI=) 6: pzeazRaM8Z6SjrjO6Q79mNPUlRs.roa (hash: /9lKkXVgAMejZaK+X1dNcf57k6lh360Swbxh+XCM3Ik=) 7: shBa9JrmFrbHIJ50XFqnyAIX03Q.roa (hash: ZX0cowj/X8/UKH2s85v3mEfUGDpRbJzNCB3///lxrIs=) 8: tJb8Ts4XgvLq7IFd612PdAoSex8.roa (hash: /2oqwW8TIewEulnC/YwP+6MDX06JT0RuhBb946Sy6pg=) 9: xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl (hash: Y+A+kGCZLNZA8t4e6fEbDYG0DWCYJBkDTYBk1Oz/PRw=) 10: zag9EMVMQmmPCVwwU3_0aOJuzic.roa (hash: ffeNrZA6EtrT2ro+QuAB6ElVQs7TfooiMECDOqyyyqs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Apr 2025 22:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:83:91:fd:db:63:27:25:e9:5d:d4:32:de:70:e1:44:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8 Validity Not Before: Apr 29 22:01:45 2025 GMT Not After : Apr 30 22:01:45 2025 GMT Subject: CN=9987030a454e6091f7a6219c789e7297825ac50a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ee:d0:d7:6b:fe:2b:d1:5c:fa:e6:f9:b8:0a: f3:c3:cc:8a:a8:30:f8:1b:99:86:2a:0c:f1:84:be: 4f:7e:f2:17:1a:b3:96:d0:71:f1:b0:8c:e1:55:11: 7c:00:f3:d4:64:2a:40:c7:f6:17:9a:ad:73:8e:d7: 4c:e5:a4:cb:8a:de:39:18:3f:83:58:a2:c1:60:5d: e0:ef:da:c3:90:7b:bf:48:ed:52:bb:ae:2f:f9:8b: 25:aa:00:5c:ad:88:ad:fb:3e:2e:f5:95:2a:f3:34: 43:41:56:9a:6f:50:f8:24:97:4c:44:cf:24:f3:2f: d9:c3:83:63:03:2c:cc:ee:f3:45:c9:9b:a7:ca:6a: cc:4c:c4:f6:06:94:2d:66:4b:62:e7:b5:81:ba:12: bc:80:a7:3b:38:4e:fe:b3:c9:0c:ac:8b:0b:ac:4b: dd:34:68:20:a7:a1:3b:ef:ef:88:b0:00:b2:bd:1b: 8d:19:3d:4c:78:87:1e:07:df:9f:c7:d0:a6:2f:a0: df:ca:a2:87:f4:f7:89:9f:bf:93:c3:e3:d6:22:6a: 4d:26:a0:75:4e:62:14:5a:c5:eb:3b:b1:79:b3:d2: 97:ee:1e:d1:d3:c8:b2:fd:47:4f:9c:7a:4b:b7:2b: 4f:85:61:fe:0d:7e:14:b5:5f:cf:af:46:8f:b1:a3: 56:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:87:03:0A:45:4E:60:91:F7:A6:21:9C:78:9E:72:97:82:5A:C5:0A X509v3 Authority Key Identifier: keyid:C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:f5:ae:ee:4b:d7:fe:2e:97:19:4d:bb:7d:a0:1d:b3:17:4d: f3:fb:40:1d:b0:04:10:bc:b8:d1:f5:86:ab:27:f8:b6:9e:96: 17:50:b7:51:04:b1:0b:0f:f5:c6:70:6a:db:85:c7:30:f6:09: 4e:73:ba:1d:5e:1a:2f:89:62:bf:9e:dc:fb:ab:65:d0:aa:47: 1c:33:29:30:84:88:08:68:87:80:a4:f9:22:c1:bb:87:3e:2f: f1:8f:80:e5:a0:8c:2b:87:12:59:9b:e6:80:06:ad:ce:e3:56: ff:e4:e6:9d:9a:d0:0e:12:61:2f:03:46:39:4d:56:65:63:e9: 88:b2:3f:16:c1:dc:a0:bd:3e:ad:ad:81:58:6c:d5:7c:b5:1f: 4e:65:c4:fa:ef:9c:13:1f:89:dc:3d:9b:8f:de:af:ec:b1:2c: 22:d2:cd:19:d1:44:b8:db:e2:02:84:34:61:ec:0e:2f:5f:8c: 81:3a:7d:cb:fb:45:55:1c:74:59:6c:7e:13:94:0f:11:43:47: b9:f0:8b:4b:87:7b:e9:5a:71:a8:e5:2e:06:7c:60:e4:07:3c: 64:49:5f:b3:93:fb:30:a6:72:2d:a9:09:4f:78:b4:0c:06:18: 5c:42:17:fb:d1:3c:97:67:c9:9d:a6:bb:ce:57:b0:e3:eb:f1: 31:24:65:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZaDkf3bYycl6V3UMt5w4UR8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NWM2ODNjYjFlYjljMGY0OWI5NjdlM2JkOWI4Yjg0Y2Yw OTliYjgwHhcNMjUwNDI5MjIwMTQ1WhcNMjUwNDMwMjIwMTQ1WjAzMTEwLwYDVQQD Eyg5OTg3MDMwYTQ1NGU2MDkxZjdhNjIxOWM3ODllNzI5NzgyNWFjNTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+7Q12v+K9Fc+ub5uArzw8yKqDD4 G5mGKgzxhL5PfvIXGrOW0HHxsIzhVRF8APPUZCpAx/YXmq1zjtdM5aTLit45GD+D WKLBYF3g79rDkHu/SO1Su64v+YslqgBcrYit+z4u9ZUq8zRDQVaab1D4JJdMRM8k 8y/Zw4NjAyzM7vNFyZunymrMTMT2BpQtZkti57WBuhK8gKc7OE7+s8kMrIsLrEvd NGggp6E77++IsACyvRuNGT1MeIceB9+fx9CmL6DfyqKH9PeJn7+Tw+PWImpNJqB1 TmIUWsXrO7F5s9KX7h7R08iy/UdPnHpLtytPhWH+DX4UtV/Pr0aPsaNWIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJmHAwpFTmCR96YhnHiecpeCWsUKMB8GA1UdIwQY MBaAFMRcaDyx65wPSbln472bi4TPCZu4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC80MzlhMTAtNjBjNC00YzI4LTkxYmYt ODhkMmRmMTBkMTViLzEveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC80MzlhMTAtNjBjNC00YzI4LTkxYmYtODhkMmRmMTBkMTVi LzEveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX/Wu7kvX /i6XGU27faAdsxdN8/tAHbAEELy40fWGqyf4tp6WF1C3UQSxCw/1xnBq24XHMPYJ TnO6HV4aL4liv57c+6tl0KpHHDMpMISICGiHgKT5IsG7hz4v8Y+A5aCMK4cSWZvm gAatzuNW/+TmnZrQDhJhLwNGOU1WZWPpiLI/FsHcoL0+ra2BWGzVfLUfTmXE+u+c Ex+J3D2bj96v7LEsItLNGdFEuNviAoQ0YewOL1+MgTp9y/tFVRx0WWx+E5QPEUNH ufCLS4d76VpxqOUuBnxg5Ac8ZElfs5P7MKZyLakJT3i0DAYYXEIX+9E8l2fJnaa7 zlew4+vxMSRlvg== -----END CERTIFICATE-----Generated at Wed Apr 30 03:16:35 2025 by rpki-client