$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft File: EbabWdGfKYfknxhS1guxd3-AowE.mft (raw, json) Hash identifier: YCwQ0w3cXqv6rOcGuG7oQouQY6eWdgss6VXyLa/a20Q= Subject key identifier: 58:41:EE:7B:EE:27:B6:4C:50:70:E3:3B:04:8A:08:A1:33:8B:0A:7B Authority key identifier: 11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01 Certificate issuer: /CN=11b69b59d19f2987e49f1852d60bb1777f80a301 Certificate serial: 01967F46086788A4A5DFFE7D4DAE4F1AA3E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft Manifest number: 15D4 Signing time: Tue 29 Apr 2025 02:00:18 +0000 Manifest this update: Tue 29 Apr 2025 02:00:18 +0000 Manifest next update: Wed 30 Apr 2025 02:00:18 +0000 Files and hashes: 1: 1--WDAhFOBW7ncSoM8jfxu_x_aPA.roa (hash: 5hRd7iHG9OvxZkn9587WnUFx5p+RxhyhidWTwSlJ2mE=) 2: 9de0VEdjbWo-tUqmz8gijTg6IaE.roa (hash: f2qUpX3qXVm+Q2CbUSag5dNIyDCVc83yVIgmgfZphx0=) 3: E3GFVTLn2iZeo7BKfaV7AKMVCKw.roa (hash: LQn6GcKXLgpY1MkQ84pAHkAymw79t2DLGu4wFUFLjhk=) 4: EbabWdGfKYfknxhS1guxd3-AowE.crl (hash: ViUlVQSEko4Kq2Y0pED8HyzSIslaTe0KHpmfn6gw6tc=) 5: EiEIQCc_qMer4lOJnSDqRcuD1Lc.roa (hash: ijZabFruWckgrMPN8StTP6ptBpbQ5XdRowFLqAhy8V0=) 6: JIWcXiw5e-DMCtEQjl82_rCum6M.roa (hash: aum4OzbjHbjDqqRbPTuypoabo0V5INMyV5rJ/7+2kJk=) 7: M9CacfWmm-r-z9VDfiIYPnI2OgM.roa (hash: TN9g1GPYzIdIGKYR8s5K+psMw+A7P+6zA3oqR0aCLyU=) 8: OH_TFxB8Adh_MWI_JWnXBMovO0U.roa (hash: aa9DOmgpUfY05KEdouKC2X7Phd/w+IPtGM5tRzHgBHw=) 9: Yad7D0u10l6-G2byoPRYhPza6iI.roa (hash: AYvuuAYk23DpV2QbnhAJBghdOegUASc3Ay0HmaR8IQE=) 10: hh5gFEvny7iJIP363sERSCjh-rs.roa (hash: nHmDgAhsTOhkwPJGUNXsbu1PrrGNS0xivvoOwxQO9Og=) 11: mpiw9JhQM7LKtUVCRbcJs0dukrY.roa (hash: 6u6djeisAdzHv9sPzUqJK6BMNgw7cN5OEZXaoLYZmKY=) 12: pJ5WVqz27sc4GN_2TdiId1RFRS8.roa (hash: G9CNm7jTF73M1GlxFCdHMqAq+/05g/o+kvhEPuf5Cdo=) 13: pgY7a6E6tgPcuDGaJ9In9AClvQU.roa (hash: LI5gLLz864YQ5E9OGWp9/KKXRdmX9ZlNd6zL73F9k74=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Apr 2025 22:36:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:7f:46:08:67:88:a4:a5:df:fe:7d:4d:ae:4f:1a:a3:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11b69b59d19f2987e49f1852d60bb1777f80a301 Validity Not Before: Apr 29 02:00:18 2025 GMT Not After : Apr 30 02:00:18 2025 GMT Subject: CN=5841ee7bee27b64c5070e33b048a08a1338b0a7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c6:ac:64:30:e8:9c:49:ab:01:54:00:87:a5: 1b:11:09:fa:ab:60:4d:5b:d2:1a:be:84:94:56:9a: f3:b9:2e:57:b6:5e:d0:1a:82:3a:88:c0:b7:6b:01: c0:d9:03:2c:1c:9f:78:97:ee:b3:c9:9b:28:0c:30: 6f:ca:7d:9b:e4:18:07:31:e6:82:aa:99:1a:b2:a0: ca:5c:61:49:22:88:c3:33:49:fa:39:c4:d0:7b:7d: 08:32:7f:4b:4b:9e:58:19:6b:7b:83:b0:92:a7:c1: ae:fe:f8:26:52:73:4e:bb:20:71:bc:30:34:64:95: 4a:d3:10:c7:84:5c:26:fb:00:62:28:b1:01:4c:08: 56:3e:2e:dc:64:f2:4a:b3:c9:b4:98:cf:05:6f:4a: 05:10:d4:b3:c9:56:0c:31:ed:b0:03:e1:4d:5c:6a: 5b:4a:01:03:ce:77:28:d1:e7:b8:27:8d:12:4a:a2: 27:9e:38:84:ea:ba:7e:fa:d8:81:5a:df:d4:de:90: fc:7c:27:92:c2:c7:5d:10:dd:bc:10:d7:78:0d:24: 7c:cf:5d:19:33:f4:b7:e6:ef:2c:2b:90:0f:fb:20: 53:f0:0c:81:a7:47:06:15:b4:a8:17:d2:24:25:08: 63:58:99:02:61:80:d7:08:95:f3:29:95:fd:34:30: 05:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:41:EE:7B:EE:27:B6:4C:50:70:E3:3B:04:8A:08:A1:33:8B:0A:7B X509v3 Authority Key Identifier: keyid:11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:5c:c1:f7:59:e7:b0:68:6a:48:79:08:20:00:bf:73:2c:89: 8d:64:58:a3:20:58:ff:df:c2:cb:3e:b5:78:43:15:ae:45:9a: 62:60:8f:eb:2d:78:30:81:be:15:03:da:af:77:ae:d9:71:08: 38:e5:72:65:eb:5f:b9:5f:78:76:63:18:49:b2:05:84:ae:1c: 76:27:c1:10:29:59:b3:6d:24:b7:5e:be:df:7e:34:4a:81:ef: ca:63:7b:14:ef:62:7a:55:6c:7d:ca:1c:ed:1b:2d:44:4f:fc: f7:73:48:1e:57:5a:e7:7d:c0:50:b0:18:bb:4a:f5:49:6c:85: 7d:98:b5:20:b8:75:4d:50:e5:bc:37:88:97:0f:e0:40:a3:90: d4:df:bd:c5:98:de:f3:74:c8:b0:54:33:b7:3f:44:72:4a:f9: 60:cf:e0:3d:d7:fa:d6:1e:94:20:22:82:b6:55:20:db:3c:d7: 05:3e:b3:65:58:b8:18:c6:a9:da:2d:bd:5e:45:8a:93:7c:8a: d6:1b:f3:2d:70:ba:3f:60:27:d9:15:2c:d9:9e:70:bd:52:21: d5:3b:d3:e1:82:ac:20:d2:a8:6d:58:8e:b6:d9:d1:aa:dc:e1: e4:b6:f3:bf:69:a8:8b:2c:b1:0d:04:f0:5f:92:c1:1a:d7:ec: 7d:00:35:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZ/RghniKSl3/59Ta5PGqPjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExYjY5YjU5ZDE5ZjI5ODdlNDlmMTg1MmQ2MGJiMTc3N2Y4 MGEzMDEwHhcNMjUwNDI5MDIwMDE4WhcNMjUwNDMwMDIwMDE4WjAzMTEwLwYDVQQD Eyg1ODQxZWU3YmVlMjdiNjRjNTA3MGUzM2IwNDhhMDhhMTMzOGIwYTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28asZDDonEmrAVQAh6UbEQn6q2BN W9IavoSUVprzuS5Xtl7QGoI6iMC3awHA2QMsHJ94l+6zyZsoDDBvyn2b5BgHMeaC qpkasqDKXGFJIojDM0n6OcTQe30IMn9LS55YGWt7g7CSp8Gu/vgmUnNOuyBxvDA0 ZJVK0xDHhFwm+wBiKLEBTAhWPi7cZPJKs8m0mM8Fb0oFENSzyVYMMe2wA+FNXGpb SgEDznco0ee4J40SSqInnjiE6rp++tiBWt/U3pD8fCeSwsddEN28ENd4DSR8z10Z M/S35u8sK5AP+yBT8AyBp0cGFbSoF9IkJQhjWJkCYYDXCJXzKZX9NDAFgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFhB7nvuJ7ZMUHDjOwSKCKEziwp7MB8GA1UdIwQY MBaAFBG2m1nRnymH5J8YUtYLsXd/gKMBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWJhYldkR2ZLWWZrbnhoUzFndXhkMy1Bb3dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC81ZWRmN2EtYWI5YS00NWU3LWE2MTIt ZDE2OWMwODhiNDEyLzEvRWJhYldkR2ZLWWZrbnhoUzFndXhkMy1Bb3dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC81ZWRmN2EtYWI5YS00NWU3LWE2MTItZDE2OWMwODhiNDEy LzEvRWJhYldkR2ZLWWZrbnhoUzFndXhkMy1Bb3dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk1zB91nn sGhqSHkIIAC/cyyJjWRYoyBY/9/Cyz61eEMVrkWaYmCP6y14MIG+FQPar3eu2XEI OOVyZetfuV94dmMYSbIFhK4cdifBEClZs20kt16+3340SoHvymN7FO9ielVsfcoc 7RstRE/893NIHlda533AULAYu0r1SWyFfZi1ILh1TVDlvDeIlw/gQKOQ1N+9xZje 83TIsFQztz9Eckr5YM/gPdf61h6UICKCtlUg2zzXBT6zZVi4GMap2i29XkWKk3yK 1hvzLXC6P2An2RUs2Z5wvVIh1TvT4YKsINKobViOttnRqtzh5Lbzv2moiyyxDQTw X5LBGtfsfQA1Ow== -----END CERTIFICATE-----Generated at Tue Apr 29 05:07:48 2025 by rpki-client