$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft File: AVttFZasBQGnGjk0RwUaYv8d2hY.mft (raw, json) Hash identifier: nfmJO8K2JOppej7QnC6eLkHb2T/hTLwDUvXQ2VSpJdc= Subject key identifier: D1:E3:FA:BA:18:CD:21:BD:02:89:A2:D3:D2:CC:7F:D9:21:F5:3F:A5 Authority key identifier: 01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16 Certificate issuer: /CN=015b6d1596ac0501a71a393447051a62ff1dda16 Certificate serial: 01969A18CEC606DE613A2E65C5F973A38686 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft Manifest number: 0FB8 Signing time: Sun 04 May 2025 07:00:39 +0000 Manifest this update: Sun 04 May 2025 07:00:39 +0000 Manifest next update: Mon 05 May 2025 07:00:39 +0000 Files and hashes: 1: 2mYmMGy7Ti_KyOuLpac8P0aJo-o.roa (hash: 7Oo3zdyOE/QV+f77eDuuxUjf5TpkVbKXCVJzZ0cucSE=) 2: 49B0SV3aq_qlfvTwlp8UE5CobPo.roa (hash: yMZJeYZiW5dafRmL5wUYONlnojOdeuMxDbGu8bc7GFw=) 3: 8uAFQVQJdEN51kNW54N9PzpoyUw.roa (hash: u9aKY6l7dMJT7Cr/J2HE5kyJ2+NCL9R+nGuisjTHF7c=) 4: AVttFZasBQGnGjk0RwUaYv8d2hY.crl (hash: vpNV6McOjICZ25TUIXK59O6NikvPAoxdFBpTR0DIIEg=) 5: GW6-Jvlwjtx3rnuekpEEOJDcDfQ.roa (hash: 4PchxaO97M5ALVklaE9pgrQ30DiguvYbt4ODi/Jdq5o=) 6: P3XxS3_mq-k03JC18lyjAECzFgE.roa (hash: Z7XywYWvyl6XIwPp86R1p+0qf8cnFqM/awHO6MAnwM0=) 7: SAV39gTAMXrfyUL8wQWnwMuliLE.roa (hash: P5PXGe69sOa6Yl2Oh8kGnbZiJAWAu2Hk26Pmc66I7dA=) 8: U6PZiMPGFi59UQPbQvpJ5OeISTQ.roa (hash: gM+BMcTeRgWeVB1ILtIfWaNCb7+/7Q9sOp/rbFUSzM8=) 9: WDsIQQr-dKKdcLQATO0M1sHB3d4.roa (hash: tKCW2ayeogM+1VoxY59dEai3nFe5S+NPKg9jTi9qBRw=) 10: bqT0YeAhtl8HXgKWXTHsXvzrmxM.roa (hash: MeQQwtYVritPs/rwvak/6/BqNGkePOEhbf9TfPte6Fc=) 11: nkN8ltJzBELoYpBm0phb1xL0AEc.roa (hash: UJR4wQ0MJo3ttmH5k9UEjPDRknm3NvKoTS2VXDv1/GA=) 12: t2KUlecrJopo3Q18DTABuP6MxmI.roa (hash: byq3cHtv4RKgw4jIix6/FrBFhnRCLilCQfHQ7NO2BVY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 May 2025 07:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:9a:18:ce:c6:06:de:61:3a:2e:65:c5:f9:73:a3:86:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=015b6d1596ac0501a71a393447051a62ff1dda16 Validity Not Before: May 4 07:00:39 2025 GMT Not After : May 5 07:00:39 2025 GMT Subject: CN=d1e3faba18cd21bd0289a2d3d2cc7fd921f53fa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:bc:0f:f3:17:d2:33:84:46:80:32:ff:9f:4d: 0b:86:9e:d2:46:8f:11:6f:2c:1f:a9:ca:0b:ef:5e: 8b:14:54:7f:d9:9f:a4:77:78:4c:c0:60:6f:82:2a: 36:0b:c7:f3:ac:fe:a0:57:bc:e3:01:a5:71:d8:39: 74:e3:cd:3f:b6:7b:ec:ce:b0:89:a0:f3:86:01:59: d4:9b:db:36:f0:61:0f:6e:b3:46:39:ea:18:b0:cd: 07:c1:3f:9c:c6:97:a7:10:21:f0:5b:f8:f8:7b:68: 07:42:b9:00:22:49:a0:f5:dc:45:f9:60:57:59:28: 29:d6:c8:16:30:e6:d6:bc:47:1a:e7:ef:ca:8c:25: ad:04:8d:b9:ed:fe:33:5f:1f:02:7d:8a:92:42:d3: 1f:04:cf:92:eb:9c:b9:88:aa:78:7f:40:ea:26:e9: 43:88:f3:46:f8:a6:dc:57:f5:8d:cc:31:e0:c5:dd: 9f:5f:c3:1a:97:c5:e3:e6:43:34:3b:24:18:be:2d: b0:55:49:d7:d7:6a:7e:33:bf:6b:29:30:80:e7:f5: e7:32:19:f9:9d:71:66:65:d6:56:a5:9e:16:9c:81: 39:2b:99:1f:63:2c:51:b7:c2:0e:1c:4c:af:46:82: ce:2a:fd:86:ee:d5:bd:23:bc:c2:81:7b:e6:20:2a: fd:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:E3:FA:BA:18:CD:21:BD:02:89:A2:D3:D2:CC:7F:D9:21:F5:3F:A5 X509v3 Authority Key Identifier: keyid:01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:6c:d1:5a:ee:09:c7:1d:1d:c2:be:49:7a:b2:43:f2:60:62: 38:70:a6:90:6b:a0:92:65:2e:d5:8b:62:80:57:37:d4:d4:08: 69:49:ca:32:9d:89:4a:4f:df:95:79:a0:bc:4e:92:ee:59:11: ea:a0:54:88:4d:1b:42:8d:aa:72:50:17:e4:dc:29:3c:3e:9d: 86:9d:77:e4:df:8e:49:0b:4f:11:82:02:f4:6c:29:6c:ea:f1: 11:ce:a7:52:e4:4b:01:ba:46:ef:74:78:76:28:82:c8:07:4c: 47:53:0d:7e:60:1c:54:a8:5d:d7:44:51:d0:5a:89:22:f6:8e: a4:56:59:c2:0c:94:9b:ee:9b:79:0d:c8:8c:47:9f:9d:5e:fa: 0e:82:d8:3b:4d:09:5b:f8:4c:91:bb:8d:64:e6:5a:32:59:53: 07:15:9a:35:a8:9f:f5:f1:36:7b:c1:de:de:72:f9:65:e9:54: 9d:e4:aa:e1:c3:12:67:96:ba:f7:f9:15:51:60:c6:c3:29:6d: 0b:05:50:92:39:63:13:21:42:03:52:5e:7f:a3:a0:a7:97:ce: 1e:de:ce:3e:cb:97:d4:58:61:f9:89:e8:41:e9:c6:80:38:5a: ee:b9:04:4f:92:22:e7:30:53:cf:e2:ec:51:49:60:6c:64:ba: 2e:30:09:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZaaGM7GBt5hOi5lxflzo4aGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNWI2ZDE1OTZhYzA1MDFhNzFhMzkzNDQ3MDUxYTYyZmYx ZGRhMTYwHhcNMjUwNTA0MDcwMDM5WhcNMjUwNTA1MDcwMDM5WjAzMTEwLwYDVQQD EyhkMWUzZmFiYTE4Y2QyMWJkMDI4OWEyZDNkMmNjN2ZkOTIxZjUzZmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7wP8xfSM4RGgDL/n00Lhp7SRo8R bywfqcoL716LFFR/2Z+kd3hMwGBvgio2C8fzrP6gV7zjAaVx2Dl0480/tnvszrCJ oPOGAVnUm9s28GEPbrNGOeoYsM0HwT+cxpenECHwW/j4e2gHQrkAIkmg9dxF+WBX WSgp1sgWMObWvEca5+/KjCWtBI257f4zXx8CfYqSQtMfBM+S65y5iKp4f0DqJulD iPNG+KbcV/WNzDHgxd2fX8Mal8Xj5kM0OyQYvi2wVUnX12p+M79rKTCA5/XnMhn5 nXFmZdZWpZ4WnIE5K5kfYyxRt8IOHEyvRoLOKv2G7tW9I7zCgXvmICr9/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNHj+roYzSG9Aomi09LMf9kh9T+lMB8GA1UdIwQY MBaAFAFbbRWWrAUBpxo5NEcFGmL/HdoWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgt ZmVlOGYzNzkwNTY3LzEvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC81MmE4OGYtZTlhMi00ODUxLTkxNDgtZmVlOGYzNzkwNTY3 LzEvQVZ0dEZaYXNCUUduR2prMFJ3VWFZdjhkMmhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXWzRWu4J xx0dwr5JerJD8mBiOHCmkGugkmUu1YtigFc31NQIaUnKMp2JSk/flXmgvE6S7lkR 6qBUiE0bQo2qclAX5NwpPD6dhp135N+OSQtPEYIC9GwpbOrxEc6nUuRLAbpG73R4 diiCyAdMR1MNfmAcVKhd10RR0FqJIvaOpFZZwgyUm+6beQ3IjEefnV76DoLYO00J W/hMkbuNZOZaMllTBxWaNaif9fE2e8He3nL5ZelUneSq4cMSZ5a69/kVUWDGwylt CwVQkjljEyFCA1Jef6Ogp5fOHt7OPsuX1Fhh+YnoQenGgDha7rkET5Ii5zBTz+Ls UUlgbGS6LjAJ8A== -----END CERTIFICATE-----Generated at Sun May 4 12:32:42 2025 by rpki-client