$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft File: 7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft (raw, json) Hash identifier: ggJ81vbvZHSBpvu7D62DvUfEHOBjCi7xNFZf8ZkbAIM= Subject key identifier: 5E:C0:EC:AE:25:70:CB:6F:C9:64:4F:80:04:49:B8:64:2B:89:22:A9 Authority key identifier: ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C Certificate issuer: /CN=ed6da9e41686d21c12799c8e84b274aa8241508c Certificate serial: 0196730B3329ACF0A5F4922C4EA88BFD0907 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft Manifest number: 151E Signing time: Sat 26 Apr 2025 17:00:35 +0000 Manifest this update: Sat 26 Apr 2025 17:00:35 +0000 Manifest next update: Sun 27 Apr 2025 17:00:35 +0000 Files and hashes: 1: 3mF0o8ObxMG1vPes91bWbw0tnsA.roa (hash: UJhMkfjPft/QeBcE4Z26qo9FCGStMKR3bjVpARVrtgI=) 2: 4Kx-vHuWGicyF3SMrQ7KSs4yNdM.roa (hash: /Y71/tOsnj44V3PPOqV8jyNAecsoDys+kyFhb/Na/TY=) 3: 7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl (hash: 9lZrpLKHVkUKNuzV8Cq7JtN95yiUtwvgKPvJGQ/+Yqg=) 4: DnWgBwSyPonu4ANiqDXcSFS5Sss.roa (hash: l2btTGNwK1K4Uvs9UU8E5RV5U3WcxEKUPo27wW3zozU=) 5: Kwj4i4rNyzJUOvELNWnXH3R-jw4.roa (hash: FGt3z3IlUQQX3L4JhYd4ue2NJONgSL3qDjZtT83LgI4=) 6: YMGBAXPMmaM-UVPjn2WwHTw99Dg.roa (hash: sho3Yzk1N5vFpwylHlhAFYtjqhBGr18UkAS7r1nBk5k=) 7: Zvza_AEVzZujcB3uf3ENKXzKqQM.roa (hash: 57giD/GidN1QIt0FbCVf8xCexXWHCYg5Vqj76NoF+sc=) 8: _ERs_WqsyKBsbDNrpF7678MzuE8.roa (hash: x/e8FoqvrkwlrxEHgqowJDwm2nzTqRfGs9L2jLZX1F0=) 9: mCecvopZfXG3WIu7Fhw-f_4DPAk.roa (hash: MecNKHL4HsnfTECbSBEtAo1C5aYtC+yZbiahatmHpI0=) 10: tkwaNKS943lqIrcwP4wFPu7CmLA.roa (hash: LUFlc4a0Hl1DhNUuKnQE9p25tD0hoETIl0Xrym01FDA=) 11: xiXR5CA0LknEtnJqptzk0g7U8nI.roa (hash: hnOXUmiCqjx6p2C6Uol9CSOlJTYzXWkQvpMB/lW+MX8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Apr 2025 11:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:73:0b:33:29:ac:f0:a5:f4:92:2c:4e:a8:8b:fd:09:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed6da9e41686d21c12799c8e84b274aa8241508c Validity Not Before: Apr 26 17:00:35 2025 GMT Not After : Apr 27 17:00:35 2025 GMT Subject: CN=5ec0ecae2570cb6fc9644f800449b8642b8922a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:27:d4:06:69:b0:4f:5e:1b:a9:62:68:62:df: 77:07:3b:29:2a:0b:bd:96:8d:06:1f:8e:f4:09:ed: 8f:bc:1f:a0:70:07:20:5b:d5:f2:39:49:70:95:d3: ee:65:98:b4:f9:f7:36:4e:b7:14:e7:80:46:37:48: a7:a7:f8:fd:2a:04:d9:1c:45:8f:a5:a2:fa:8d:c3: ea:a2:ef:37:14:84:20:20:d9:50:ff:74:b9:d3:df: 17:06:23:23:d6:4c:a8:77:84:8f:54:24:8a:dd:be: 40:5a:2b:7d:7f:fa:69:1d:71:5b:89:9e:3f:01:4c: ac:d8:41:57:a3:79:17:e2:c8:f5:b6:9c:58:a2:40: f3:78:d0:39:f5:fc:21:e2:7d:4d:32:74:e7:26:c4: 25:bc:0d:b2:33:7b:70:8c:d0:07:ae:f6:84:14:64: 8c:0f:66:e9:bd:3b:fa:ea:b0:cc:8f:27:93:bc:ac: 60:bd:a2:af:d9:f3:7c:ef:38:13:fd:83:0c:ae:08: f2:d0:bf:b2:9f:a5:22:61:ab:b4:78:78:7d:56:48: bd:3e:83:f2:54:23:56:07:14:f2:87:7c:e4:b0:67: 1d:e4:42:8a:25:f2:87:6b:26:97:c0:7c:86:7c:33: 83:24:7b:a0:a5:7d:e7:ff:02:04:ca:84:43:96:61: ef:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:C0:EC:AE:25:70:CB:6F:C9:64:4F:80:04:49:B8:64:2B:89:22:A9 X509v3 Authority Key Identifier: keyid:ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:45:9b:ef:e0:93:35:6b:f0:4e:1f:5a:0e:a5:59:63:7a:98: 1d:ee:de:d5:0c:87:96:f9:79:15:90:46:4f:2b:2a:45:3f:3f: 65:83:fc:e6:9f:96:23:e4:74:f6:23:68:16:fe:95:33:a2:88: d6:95:77:36:54:f0:3a:3e:7d:f7:c1:04:05:54:9e:46:72:33: 12:55:90:c4:f4:1d:ff:0e:b4:43:e9:a7:f6:f4:98:05:4d:f8: d7:3b:d4:28:b0:7c:a2:6f:27:5e:c7:08:9e:a1:5a:77:cf:2f: 31:d3:97:cc:18:37:41:57:ba:f8:b3:7d:a6:ce:94:b0:9b:ca: d3:fa:85:b3:bf:05:d6:db:6b:d4:98:26:fc:05:ef:07:f6:a2: 67:e9:21:9a:af:75:26:f5:3e:45:0a:da:62:86:8b:e8:5c:ba: 15:fb:96:1c:5f:fc:29:72:1e:15:77:e8:24:6b:8b:d7:f4:14: ee:92:c7:aa:8e:a2:42:b1:c2:ee:17:02:23:b4:73:a3:ec:6e: 61:51:ec:7d:b9:bc:ce:16:6d:46:92:71:98:b4:af:1d:ae:79: ec:61:34:0e:a0:23:a9:ef:85:5f:18:0c:ba:05:bc:9e:54:a9: 3a:c7:83:32:ea:46:d9:63:58:03:b5:df:e2:0f:7d:c4:bf:9b: fc:35:14:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZZzCzMprPCl9JIsTqiL/QkHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNmRhOWU0MTY4NmQyMWMxMjc5OWM4ZTg0YjI3NGFhODI0 MTUwOGMwHhcNMjUwNDI2MTcwMDM1WhcNMjUwNDI3MTcwMDM1WjAzMTEwLwYDVQQD Eyg1ZWMwZWNhZTI1NzBjYjZmYzk2NDRmODAwNDQ5Yjg2NDJiODkyMmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ifUBmmwT14bqWJoYt93BzspKgu9 lo0GH470Ce2PvB+gcAcgW9XyOUlwldPuZZi0+fc2TrcU54BGN0inp/j9KgTZHEWP paL6jcPqou83FIQgINlQ/3S5098XBiMj1kyod4SPVCSK3b5AWit9f/ppHXFbiZ4/ AUys2EFXo3kX4sj1tpxYokDzeNA59fwh4n1NMnTnJsQlvA2yM3twjNAHrvaEFGSM D2bpvTv66rDMjyeTvKxgvaKv2fN87zgT/YMMrgjy0L+yn6UiYau0eHh9Vki9PoPy VCNWBxTyh3zksGcd5EKKJfKHayaXwHyGfDODJHugpX3n/wIEyoRDlmHv+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF7A7K4lcMtvyWRPgARJuGQriSKpMB8GA1UdIwQY MBaAFO1tqeQWhtIcEnmcjoSydKqCQVCMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1cycDVCYUcwaHdTZVp5T2hMSjBxb0pCVUl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9hYzAxN2MtZmYyOS00M2NmLWEzZDYt MjlmMWJlYjJmMjgyLzEvN1cycDVCYUcwaHdTZVp5T2hMSjBxb0pCVUl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9hYzAxN2MtZmYyOS00M2NmLWEzZDYtMjlmMWJlYjJmMjgy LzEvN1cycDVCYUcwaHdTZVp5T2hMSjBxb0pCVUl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmUWb7+CT NWvwTh9aDqVZY3qYHe7e1QyHlvl5FZBGTysqRT8/ZYP85p+WI+R09iNoFv6VM6KI 1pV3NlTwOj5998EEBVSeRnIzElWQxPQd/w60Q+mn9vSYBU341zvUKLB8om8nXscI nqFad88vMdOXzBg3QVe6+LN9ps6UsJvK0/qFs78F1ttr1Jgm/AXvB/aiZ+khmq91 JvU+RQraYoaL6Fy6FfuWHF/8KXIeFXfoJGuL1/QU7pLHqo6iQrHC7hcCI7Rzo+xu YVHsfbm8zhZtRpJxmLSvHa557GE0DqAjqe+FXxgMugW8nlSpOseDMupG2WNYA7Xf 4g99xL+b/DUUyQ== -----END CERTIFICATE-----Generated at Sat Apr 26 19:04:30 2025 by rpki-client