$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft File: UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft (raw, json) Hash identifier: pZX10/pyNxKLincu2YV4XoIh8sIR9vWwTTTS5xZwBqo= Subject key identifier: BD:29:7E:34:B9:8C:76:7E:15:26:51:A6:6E:9B:4D:0C:77:8C:9C:09 Authority key identifier: 50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7 Certificate issuer: /CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7 Certificate serial: 01968BB8220050CBBCD1FDE5049BEEAC65DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft Manifest number: 15F0 Signing time: Thu 01 May 2025 12:00:22 +0000 Manifest this update: Thu 01 May 2025 12:00:22 +0000 Manifest next update: Fri 02 May 2025 12:00:22 +0000 Files and hashes: 1: 2D8GskUOctsT18ewUQERiVKSyqY.roa (hash: 81yC075gcHWBzZ9r1FLaXrPHKC2rS2Rq+/AZd9LK1O0=) 2: 3rRM1UU67-NncVP3_LftMbl2hFY.roa (hash: CmDqzWxPDccHaO9H4nIQm1+mJLI9vAQm75ESbo4gAFw=) 3: 6MsDvK1-WGC9RDIaMU0NJQXi_WA.roa (hash: N4CgWW54RCc4pQhXmSwerDVdxqnSumkj3/I4KPyGdXw=) 4: HJ2Ej1XnMez_6zjEhFT9gySMGiM.roa (hash: Tk//MwFVEMDrbw7kPqT+aJGJ2AwGRLjUiZiXfu/Ik0U=) 5: LCoaRYu9DxIUBXpbvJI8a4H_GsA.roa (hash: YtRwAS6vM4QTLulJMYf1drayxvcsSxBt1ktByHpBUnU=) 6: TmtbffGKJCoB6KaITSDYwVaNuwg.roa (hash: 9FENVzGrCx3+V6le/ReQ6+C3ptJBYI3u30nI4IXsVV4=) 7: UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl (hash: lZ7ApejomAg2BffGqwgwKu4hQUV5VNYwxEan37NdyIE=) 8: cxtIOH2HTPQcljUlQ6T5b93OmjU.roa (hash: tH/NOyxHGmX11Frc+sHrlIOBqxLQMBd4oHjCtOuJpSU=) 9: dw6fYArhndr9OHyiwkGdN32rJ08.roa (hash: 9uc2Yj3dajQn3veP+iEA8czeMrzLkCSGvgH42cP6lcs=) 10: pdE9jYgps_x2zZleZNeiVBZrLS4.roa (hash: 2tpInmxNwOGO6jkHQZzD8hPYsZ+9KF9Fp+XqzI+5N4A=) 11: pzO_vf4S85qGYsEOeaoc-NqBUG4.roa (hash: dQpCMi5DIsAy32ym2T+shCsk+2yMX+WZ0xQ8KadnYks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 May 2025 12:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:8b:b8:22:00:50:cb:bc:d1:fd:e5:04:9b:ee:ac:65:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7 Validity Not Before: May 1 12:00:22 2025 GMT Not After : May 2 12:00:22 2025 GMT Subject: CN=bd297e34b98c767e152651a66e9b4d0c778c9c09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:19:20:ee:4b:db:23:6c:4f:59:de:71:f6:57: 34:ba:e5:68:9a:22:b2:5b:41:a9:72:14:74:27:04: 43:f2:7b:c8:77:a2:48:3c:b4:81:9a:c3:84:82:c8: 60:02:bc:cc:e8:2e:4b:e3:7b:85:81:a7:40:69:40: dd:89:40:1e:10:79:f9:bd:33:03:49:97:c0:f1:7e: 06:6b:5f:9d:0c:f3:d5:b5:26:c7:bb:2c:83:82:aa: d0:8f:4a:a0:05:7c:a6:0b:fa:be:cd:c7:7b:6c:10: 54:f5:ce:12:97:52:55:69:5f:d2:35:31:dc:6e:78: e8:e2:d5:1b:a7:74:05:18:32:a1:5a:dd:ca:aa:cc: 4d:85:4d:61:49:ec:67:f3:10:90:cc:8f:73:76:11: ca:b1:f4:5b:29:47:6c:df:68:e3:65:a8:b5:91:fc: 1c:f8:db:56:28:7d:84:9d:4d:86:40:88:26:8f:75: db:fa:cb:6d:6f:14:a6:61:8d:55:74:4b:3d:9f:1a: 2e:c5:da:3a:e0:20:ad:47:b7:88:f3:44:75:3d:73: ae:92:e6:ca:b4:3b:89:57:f4:6b:a9:36:c5:0f:d0: b5:38:a0:f2:da:6a:d9:97:15:f2:d8:04:bf:11:48: be:eb:be:e0:1c:dc:20:45:14:86:90:84:20:f1:ae: 7b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:29:7E:34:B9:8C:76:7E:15:26:51:A6:6E:9B:4D:0C:77:8C:9C:09 X509v3 Authority Key Identifier: keyid:50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:8a:aa:59:55:3e:2b:85:af:92:dd:83:6f:a3:49:70:a6:dd: b3:94:94:fe:7d:d6:36:10:a8:2f:34:74:6d:30:27:24:9a:5c: ff:13:39:8e:59:b1:85:e5:11:e4:09:18:b1:2b:55:c3:8d:0a: 4e:a9:dd:c9:db:5d:6e:34:1b:64:f7:1b:13:b1:41:fb:1d:37: 31:43:8c:c7:55:91:1c:2e:04:7b:ca:7b:a4:e8:79:83:51:5e: a3:c2:67:28:ae:b2:26:19:68:c6:70:3f:23:09:11:2f:f5:4f: 3c:e1:aa:32:4a:d3:b4:c8:b0:2b:76:75:85:f4:83:98:77:4f: 9b:9a:39:8c:ae:49:87:08:b3:df:dd:57:2d:dd:c1:be:b7:cc: 0e:c1:99:04:21:4e:53:a5:fa:a4:13:11:67:f3:6e:44:0b:5f: b0:48:0a:57:52:39:d1:e7:04:94:d0:fd:5b:60:0c:83:97:0e: 9d:a5:ab:df:86:ed:31:78:fd:09:da:95:16:8d:db:3a:5d:00: 77:52:b3:45:18:82:4d:55:8b:cd:66:35:28:8d:82:f1:3a:9e: a5:82:63:2f:af:ee:01:fe:9c:0e:70:35:8a:16:75:f3:b9:1c: b1:02:f8:24:12:d1:20:aa:ec:07:64:40:fd:12:f3:83:3c:54: b1:b1:83:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZaLuCIAUMu80f3lBJvurGXdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwMTgyYmVlOWFhMDEwYzFmZmQyZDgwNGY2YWE3YjE0YmRk YjkxZjcwHhcNMjUwNTAxMTIwMDIyWhcNMjUwNTAyMTIwMDIyWjAzMTEwLwYDVQQD EyhiZDI5N2UzNGI5OGM3NjdlMTUyNjUxYTY2ZTliNGQwYzc3OGM5YzA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxkg7kvbI2xPWd5x9lc0uuVomiKy W0GpchR0JwRD8nvId6JIPLSBmsOEgshgArzM6C5L43uFgadAaUDdiUAeEHn5vTMD SZfA8X4Ga1+dDPPVtSbHuyyDgqrQj0qgBXymC/q+zcd7bBBU9c4Sl1JVaV/SNTHc bnjo4tUbp3QFGDKhWt3KqsxNhU1hSexn8xCQzI9zdhHKsfRbKUds32jjZai1kfwc +NtWKH2EnU2GQIgmj3Xb+sttbxSmYY1VdEs9nxouxdo64CCtR7eI80R1PXOukubK tDuJV/RrqTbFD9C1OKDy2mrZlxXy2AS/EUi+677gHNwgRRSGkIQg8a57JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL0pfjS5jHZ+FSZRpm6bTQx3jJwJMB8GA1UdIwQY MBaAFFAYK+6aoBDB/9LYBPaqexS925H3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUJncjdwcWdFTUhfMHRnRTlxcDdGTDNia2ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9iZDQ1NjYtYWMyNy00NmY4LTk0Zjkt MTlkMWJiNjFkOWE3LzEvVUJncjdwcWdFTUhfMHRnRTlxcDdGTDNia2ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9iZDQ1NjYtYWMyNy00NmY4LTk0ZjktMTlkMWJiNjFkOWE3 LzEvVUJncjdwcWdFTUhfMHRnRTlxcDdGTDNia2ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAioqqWVU+ K4Wvkt2Db6NJcKbds5SU/n3WNhCoLzR0bTAnJJpc/xM5jlmxheUR5AkYsStVw40K TqndydtdbjQbZPcbE7FB+x03MUOMx1WRHC4Ee8p7pOh5g1Feo8JnKK6yJhloxnA/ IwkRL/VPPOGqMkrTtMiwK3Z1hfSDmHdPm5o5jK5Jhwiz391XLd3BvrfMDsGZBCFO U6X6pBMRZ/NuRAtfsEgKV1I50ecElND9W2AMg5cOnaWr34btMXj9CdqVFo3bOl0A d1KzRRiCTVWLzWY1KI2C8TqepYJjL6/uAf6cDnA1ihZ187kcsQL4JBLRIKrsB2RA /RLzgzxUsbGD2g== -----END CERTIFICATE-----Generated at Thu May 1 19:17:33 2025 by rpki-client